skysight-inc/HackerNews huggingface dataset:
> By "cult" what I mean is a group of super high
quality people who trust each other and have similar ways of thinking, learning, reacting, problem-solving and working together

This still doesn't convince me that your new definition of "cult" is good. "quality" and "trust" I get, but no one would ever say they want a low-quality, untrustworthy team.

But the rest ... I thought a homogeneous, monoculture of people was bad? I don't know anything about the teams Steve has lead, but it seems like this approach could be a breeding ground for various -ism's

See also:

Avoid Monoculture:
http://www.bothsidesofthetable.com/2011/08/25/avoid-monocult...

Diversity = Productivity:
http://www.nytimes.com/2008/01/08/science/08conv.html?_r=0

The Signals that Make Tech Start-Ups So Homogeneous
http://blogs.hbr.org/2014/01/the-signals-that-make-tech-star...
Video podcast of Sussman and Abelson's 1986 SICP lectures
Hey, at least this way you can make some money now! :)
You still need them for UDP.
Insurance on the moving is pretty interesting, though I'd worry about fraud eventually being an issue.
markdown was _released_ 10 years ago, that's true.

but it's not entirely accurate to say it was "invented".

let me be more clear: markdown was _not_ "invented".

gruber was blogging with movable type, which was using
the _textile_ light-markup system created by dean allen.

so he didn't even come up with the _idea_ himself!

of course, neither did allen. light-markup systems
were _the_zeitgeist_ around the turn of the century:

* restructured-text was adopted for python documentation.

(.rst -wikipedia.org/wiki/restructuredtext -- david goodger)

* asciidoc had a big list of org-users. (still does.)

(asciidoc -- wikipedia.org/wiki/asciidoc -- stuart rackham)

* and there were other early entrants that are still alive.

(txt2tags -- wikipedia.org/wiki/txt2tags -- txt2tags team)

and dean allen's textile had a fairly solid reach by 2004:

* textile -- wikipedia.org/wiki/textpattern -- dean allen

* texy -- code.google.com/p/texy-- david grudl

* redcloth -- rubygems.org/gems/RedCloth/versions -- garber

* textpattern -- textpattern.com -- dean allen

but the first that i'd call "light markup" was "setext":

* 1992 -- http://en.wikipedia.org/wiki/setext -- ian feldman

"setext" was short for "structured e-text", and yes, that's
why "restructured-text" put the "re" in front of its name,
because they were "redoing" the structured-e-text of setext.

but even ian feldman would tell you (if you could find him)
that he was merely leveraging the well-known conventions of
the fledging internet at the time, such as usenet listserves.

"light-markup" is something that _the_masses_ "invented".

-bowerbird
Your reality is actually 15 seconds long
Cover the middle you go faster, cover the sides you go slower
Yes, but before you had a collectible comic. The digital copies really don't have any secondary market value.

That said, I love reading comics and I use Comixology heavily. I just usually wait until I can get about 50 issues of a title in one of their 99 cent sales and splurge for a good month's worth of reading.
42, not a hipster, no Fedora (well I have a VM running it). I like my coffee in the morning, french press at home (Peet's Garuda). Peet's if I am out and about and once in a great while when I get a chance I love to make it to Philz. I have disliked Starbucks coffee before it was cool thank you very much :)

The comment about Starbuck was a bit tongue-in-cheek, but I guess I can see it being taken as Hipster fashion.
Personally I run ZNC on a VPS and use Yaaic on Android. Does the job.

I'm not sure how I feel about this service, it seems to go against the ephemerality of IRC as a meeting place, people coming and going, etc. Personally I prefer it when the IRC channels I frequent aren't full of ghosts, and where someone joining a channel is reason to actually say hello, rather than using channels as glorified message boards.

It's still interesting, though I'd prefer if there was some innovation on the server/protocol side rather than just cloudifying what we have.
Appreciate the kind words! We'll definitely give that tagline some thought haha.
A better method might be next time they come onto the site and log in (or if they are already logged in), put up a stop page (similar to a paywall message) warning them in plain English of what happened and strongly recommend a password change. Make it easy for them to skip or X out of the box.

I think forcing users to change passwords or taking a passive email stance when there is a chance most might not read their email are both not ideal solutions
Does anyone know if the author is the first person to use this visualization? The series of rotating circles is incredibly illuminating.
Exactly right, and there's so much mental bias that comes from swimming in your own segregated pond all the time, if you're not careful about it.
Yeah, it's interesting how Facebook does something which on its face seems trivial and unimportant, but due to scale, has some really amazing engineering and infrastructure challenges -- and they solve them by building tech to make things scale from commodity systems (like Google, etc have done), vs. buying third-party big iron solutions (which is what eBay did when they had similar challenges, and what most big companies do).
Symlinks work for gh-pages. We use it for linking to the current version of the docs:

https://github.com/facebook/presto/tree/gh-pages/docs

http://prestodb.io/docs/current/
Thanks. This is great.
...but think of the corporations :)
Safe to assume the persons behind the 900+ comments here approve of the political views and actions of the Hacker News owners and staff?

Dang, I guess I do!
I heard from a lawyer friend who works in a high profile law firm. He told me a partner emailed an associate a question late in the evening (like 9 or 10pm, maybe even on Fri night) and didn't hear back a reply that same night.

The partner blasted an email to all in the firm publicly flogging the associate lawyer the next day...

Considering lawyers in a law firm are not in a union, I guess such 'ban' on email won't be happening anytime soon...
I don't see this function called anywhere in the OpenSSL source, or, for instance, the Apache source code. Could you clarify on this post?

EDIT: I see it exposed in 0.9.8y. Anyone know of anything that builds against this specifically and uses it?
The "Installs" chart here is pretty cool. Breakdown of HN users OS usage.
Yeah that's definitely a great point. To start, we'd probably just sell through a 3rd party insurer and let their underwriters deal with that!
Remember in of the earlier levels when who-ever is talking to us, said that the name of the level could come in handy? Try using that ;)
>The E-GO CRUISER by Yuneec Technology, is the future of Personal Electric Transportation.

nope, it doesn't fly.
As much as I like this idea, I do wish John talked more about HOW he did it. "No More Zero Days" is a good thing as a target, but it's often unachievable.

For me at least, the context switch required between what pg calls the manager's schedule and maker's schedule is so huge that it takes hours to cross that gulf (that's what I'm mostly switching between anyway)

Do you just sit down and force yourself to hammer out code?
How to protect youself from the heartbleed bug
Snowden's files predate large-scale use of SSL (except maybe by banking sites, which are essentially already pwned by the government).
I decided not to reset password for everyone for my web service.

Instead, I sent out a security alert email to everyone with links to ArsTechnica article http://arstechnica.com/security/2014/04/critical-crypto-bug-... and Heartbleed bug http://heartbleed.com/ for more information and a link to our password reset page.

We also have a security alert on user dashboard that they see after logging into our system.
Why is Amazon paying workers up to $5K to quit?
With Extended Random, Cracking Dual EC in BSAFE ‘Trivial’
I think it's a tradeoff. A monoculture group can work very efficiently on the tasks that they do well, but they will have certain types of risks. In an early stage startup, this might be preferable, to just get something out the door.
Man, I hope nuclear plant monitoring isn't done via email.
Hopefully won't affect anything, but Seagate is in the process of buying LaCie...
Heartbleed by Proxy
More than 10 years ago, a coworker of mine traveled to Netherlands to set up some servers in a data center there. He was utterly amazed to see data center employees simply dropping what they were doing and leave work at 5pm sharp. My coworker needed help from them to set up something but had to wait.
I don't think so. It failed with Silverlight, and was nasty with ASP.NET webforms. Microsoft now champions ASP.NET MVC on the server and TypeScript on the client. They also use TypeScript to write huge JavaScript apps for consumers.
Wha-what? That's pretty crazy. At the very least, if OpenSSL goes through this trouble, why doesn't it just implement its own malloc and friends that are both fast and secure? In fact, shouldn't it include something like scurb_and_free() so that sensitive bits would actually be erased when not needed. That seems like a much better solution than the approach described in this link.
OpenStack to convert Amazon Web Services Boto and MySQL-python to Python 3
Anyone want to work for a firm that thinks they deserve a right to every waking hour of your existence?
A few more things to add:

(A) the app is in English, even though the website is in Portuguese.

(B) the cli client is open source and on Github:

http://oss.sapo.pt/#!meocloud-cli-architecture
https://github.com/sapo/meocloud-cli
That's what I did. I had a degree in Physics, and at the time, Microsoft had a small training program for test developers. I did that for a couple years, and through a pair of job hops, am now a developer at an established startup. I didn't try to switch internally at MS, but I believe it would have been possible.

The one thing I would note, is that QA generally has lower prestige/pay then dev, so if you want to move to dev, be careful about things. Make sure any QA job you take has a significant development component, ideally letting you design and implement decent-sized projects you can point to when interviewing for a dev role.

If you have more questions, email is in profile.
Most of those are quite impractical for an urban environment.
I tried to do this, but in the end I ended up getting a job at a fast food place (part time). It uses different parts of my brain (as opposed to freelancing), and forces me to stick to the schedule. I can't exactly explain it, but it really gave me a BIG productivity boost.
Android devices running modern OS version on Jelly Bean or Kit Kat? Many new low-end devices are still shipping with Gingerbread. Gingerbread will be Google's Windows XP.
We currently have both! We have people using the site in Vancouver and Victoria right now and both licensed movers and guys with trucks are bidding on gigs. We're working on adding a badge system and reviews so users can quickly see how they're dealing with before accepting a bid.

Edit: right now we're focusing on local moves within cities but there's we have no problem with the site being used for long-haul moves.
Our reaction to this news is even more interesting than the fake news itself. Professional communities are shocked and stunned at the stupudity of the fake law. Meanwhile, others celebrate the victory over unfair work hours and lamen the fact that they have to take emails after 6.

In many ways this shows our views on work hours. We think everyone should be free to work hard, but there are clearly some strong feelings about the lack of work-life balance at their jobs.

It's also a little shocking and embarrassing that PC Magazine, New York Magazine, Gawker, Mashable, and more have picked up the story with no fact checking.

https://news.google.com/news?ncl=dLcjtixHZSBGZCM1daT3NKs7VJ5...
The voting system should be at least a partial feedback loop against that effect, but it's obviously not perfect, especially if people view it as "agree/disagree" rather than "quality/not quality". I get the sense that reddit has historically been the former whereas HN was mostly the latter.
>It's huge and fiendishly complex

It's used to write software where that complexity is a minor cost in return for the performance it provides.

>keywords are overloaded to incomprehensibility

I don't know of a single keyword that is incomprehensible. Only a few keywords are overloaded but they are overloaded in contexts that make it very very clear what they're being used for.

>doesn't make satisfactory guarantees about static initialization

It makes very strong guarantees about static initialization. Static variables declared within a function are initialized when control flow passes through it for the first time, and such initialization is guaranteed to be thread safe. Global variables have three phases to their initialization, zero initialization, static initialization, and then dynamic initialization. Global variables are also initialized in the order that they are defined within a translation unit.

> exception safety is too hard to reason about

Exception safety is easier to reason about in C++ than any other language thanks to RAII.

>it's full of features maintained for backwards compatibility even when they no longer make sense

They make sense because no one wants to rewrite the billions of lines of code that their project might depend on that uses those features. Instead, it makes a lot more sense to just avoid using deprecated or backward compatible features rather than remove them from the language and break a crap load of invaluable software in the process.

>development tools are unacceptably inferior to Java and C#.

This is true.
Hospitals, powerplants, chemical plant, generally any large installation have been dealing with critical issues during off-hours for centuries. The solution is an on-call rota. Labour law knows about this, and so do the unions.

Actually, the on-call rota is one of the things I ask about in interviews. If the interviewer doesn't know what to say or says they don't have one it's a showstopper. Operations are going to be a horrible mess, and it's not a place anyone would like to work at.
Just go read polarssl docs and fuzz that.

Its small modular documented and tested.

We would all reach further by improving polarssl than starting another library.
You need to put something up on the home page which shows some of the gigs in your area or perhaps some of the drivers?

Tough to see what the product looks like without actually signing up and posting/bidding.
When I was finishing university and looking for a job, I actually started deleting minor git repos that never really blossomed into bigger projects, because I was afraid of interviewers/potential employers going over those instead of the projects I was more proud of.

Now I kinda regret nuking all that work (didn't think to keep backups around), but a better solution for this would prevent anyone from doing similar in the future.
My boss decided to add a “person to blame” field to every bug report.
> You'd change your mind about "everybody knows HTML" ...

Absolutely. You could've stopped there without any further caveats. The comment above I think is HN arrogance, assuming that the rest of the web is at a certain minimum level of tech literacy.

So many people post facebook updates or online comments and don't what what HTML is. I know someone (relatively young, uses the internet daily) who doesn't know what a browser is.

That aside, if given the choice, I would voluntarily use Markdown for comments all day long, no contest. For example a bullet/unordered list[1] needs so many awkward tags, whereas a Markdown list is much simpler, and much more intuitive for those who don't know HTML[2].

[1] http://www.w3schools.com/tags/tag_ul.asp

[2] http://www.reddit.com/r/reddit.com/comments/6ewgt/reddit_mar...
Seeing as it's static, it's not part of the public API. Apparently it was used in Ruby at one point: https://groups.google.com/forum/#!topic/mailing.openssl.dev/...

I think it's probably a piece of dead code at this point, but there might be some legacy stuff using it (with an old version of OpenSSL), which could lead to a vulnerability. Regardless, the function should probably be rewritten or removed.

EDIT: It looks like the latest version of Ruby (MRI) actually copied this function from OpenSSL so they could keep using it: https://github.com/ruby/ruby/blob/1aa54bebaf274bc08e72f9ad38...
My car is worth less than a Boosted board :(
How does Plan 9 address this, exactly? It doesn't seem much different than Unix's networking.
My favorite is 42 Goals.
Yeah, that's exactly what the HBR article I linked to talks about. Hard to reverse that once you start down that road, though.
>If the aerospace industry was like the programming industry, stalled planes would be falling out of the sky 100x more often

On the other hand, if the aerospace industry was like the programming industry, we'd now be flying 10000000000 faster planes with warp drives, that take us to A-Centauri in an hour or so. And everybody would have one such plane, folded in his pocket.
All of the above, I'm sure. The site itself would be neutral. The buyer chooses his preference.
Yes I presume so.
Ask HN: resources to earn advanced front-end skills? 
High profile web agencies are building really nice experiences, they have unique ways to create layouts, preload and load content, and navigate through websites. Tutorial sites (like nettuts, noupe and speckyboy etc .. ) are all good, but I would like to know if there are some more advanced places to learn those font-end hacking techniques and tricks.
Heartbleed I just about understand, as despite this not being my field, smart people successfully summarized it in an easily digestible way so that I could even explain it to my mum. Can someone ELI5 this too please?
Hey - co-founder here :) Yeah that's a good idea, a few people have pointed this out as well. Definitely something we'll add soon.
Even if it were used, how large is a SSL_SESSION, and does a client have any control over its contents? Not every memcmp() is necessarily vulnerable.
Haskell's Par monad gives you a nice eDSL that lets you lay out your data dependencies and have things evaluated in parallel

http://hackage.haskell.org/package/monad-par-0.3.4.6/docs/Co...
I think the control of a freebord comes from the hooks in combination with the third wheels, not just the hooks. Having done a fair amount of downhill longboarding, I don't think having hooks on a longboard would give you any more control and would probably just make it easier for you to face plant. The control would still have to come from body positioning, legs, and weight distribution.
We don't really have an "engineering team" - just a continuum from those who tend to focus on visual design to those who focus more on code. But yes, those who code are definitely involved.
> In those cases, saying something like this would mean
> finding another job.

Did you actually try it?
Nice to hear that not everything is going "minority report".

However for ISP's that already has this implemented it will probably take more job to remove it instead of just letting it be as is.
Let me help you, it's the idea that paid contractors working for the military/agencies are fucking up Open Source code to get their backdoors in.
Cool idea, but two things that bothered me:

1) There's no easy way for users to browse.
2) The whole "gig" messaging and the entire call to action on the page is painfully confusing.
-"Describe your gig." What? Am I in a band? Is this for a "seller" or a "buyer"?
-Why do you need a description of "moving"?? "I'm moving." would be my description. What are you looking for here? Couldn't you just have a button for "I'm moving?"
-There's just a general lack of context here.

I do understand and don't need it explained, but I guarantee the average user is going to be totally confused.
Cool, and after only 15 years.
Yeah, I'm thinking it's dead code. It's not exposed in modern OpenSSLs, and I can't find any services we use (Pure-FTP, httpd, etc) that use this function.

OpenSSL devs should probably remove this code.
Basically, measure the time difference in the memory comparison. Typically, comparisons will short-circuit. That is, stop as soon as a difference is detected. But this is a problem for security situations like key comparisons. If 10 out of 20 bytes match, it will take a little bit longer to compare then if 5 out of 20 bytes match. With enough iterations, the key can be recovered due to these differences in time. The correct solution is to use a constant time comparison that always runs through the entire sequence of bytes.
QML is simply brilliant for developing UIs.
Sharp guy.
Just allow the users to crud: https://github.com/sferik/rails_admin

Need more powerful customization? https://github.com/activescaffold/active_scaffold
This Architect Has Painstakingly Standardized the World's Subway Maps
Mozilla wouldn't exist without a search bar that defaults to a search engines that pay them back a share of resulting ad revenue.
See that the memcmp() comparison takes longer as you guess the next byte correctly. Repeat until all bytes known.
Yikes.

>Why do people think they should get a cut of the savings? If you work for the company

Because they are directly responsible for the savings.

Why should a lawyer get a cut of her billable hours? Because she's directly responsible for doing the work over those hours. Same concept.

>you should want to see it succeed for the sake of your own future with the company

Why? Loyalty isn't a given. If a company is paying you $8/hr and offering you Pizza as an incentive to do well, they don't value you and won't be loyal to you. Being loyal to them would be accepting exploitation, not being honorable. There is no future in jobs like this.

Further, you are working to provide for yourself. Under no circumstances should you put the needs of a massive company ahead of your own well-being. It's not like you're accepting an opportunity cost for a few years, as is the case when starting up your own company. You're a wage slave at $8 an hour. If the company paying you that can't provide for you, fuck them -- go sell your labor elsewhere, you owe them nothing.

>But don't be greedy and expect more.

It isn't greedy to expect reasonable compensation for quantifiable value you directly provide to a company.
memcmp does a binary level comparison of data.

On many versions, memcmp will return exactly when it sees a difference between the two buffers. Because it returns immediately one can figure out what byte it failed at due to timing and construct the correct input.

Some others have pointed out that it's a static function, which I stupidly overlooked. Others have pointed out it's not really used anymore so the title doesn't accurately reflect the issue. -- I will probably delete this thread.