skysight-inc/HackerNews huggingface dataset:
Not for single-server performance. The database level lock severely limits MongoDB's single server performance. Just look up the sysbench benchmark comparing MongoDB with TokuMX (which I work on)
"Their study, funded in part by the Christopher & Dana Reeve Foundation, is being published Tuesday in the journal Brain."

Weirdly, I was recently in Dublin and went to the Fail Better exhibit at the Science Gallery at Trinity College Dublin.[1] One of the exhibits is Christopher Reeve's wheelchair.[2]

1. https://dublin.sciencegallery.com/failbetter

2. https://dublin.sciencegallery.com/failbetter/supermanswheelc...
If you're going to start adding features, you might want to add a feature request page to help prioritize them. I sell desktop software and the most requested features in that space would probably be license key fulfillment, discount codes, product bundling, and interfacing with CD fulfillment services.
Top EU court rejects EU-wide data retention law
Skylight Leak Repairs: Tips on Finding the Source | LGC Roofing Blog
That would be incredible!
Good advice! Unfortunately, our IE8 users are disportionately more valuable than average.
Unless you have an unlimited developer budget (and who does?) spending time and money on IE support is also user-hostile. It's just hostile toward a different set of users.

That money could be spent on improving the user experience for people with good browsers, developing new services, lowering prices, or any number of other things that would directly benefit the 90% of your users who have actually entered the 21st Century.
Kind of off-topic, but if I want to start selling software as an individual - should I form an LLC?
Running Windows XP programs on Linux Mint with CrossOver
As a resident in Manhattan where the situation of Airbnb renting facilitating illegal use of apartments. We pay a lot of money to have security in our buildings with doormen and other secure systems. We do not want transients in our buildings.

Airbnb is intentionally setting up a situation where people are breaking the law and this should not be tolerated. They could easily have a questionnaire that vets facilities for legal Airbnb use as part of the signup process for cities such as NYC and SF. Moreover, they should have Airbnb employees verify that the apartments listed on the Airbnb site are following laws.

The real issue is that a number of reputable firms are funding Airbnb and it is these firms people should pressure. They are in fact, funding a firm which knowingly facilitates illegal activities in NYC and SF.

According to Crunchbase these firms include:
Y Combinator, Sequoia Capital, Greylock Partners, SV Angel, Andreessen Horowitz, Jeff Bezos, Ashton Kushner, and others. Some of these firms such as Sequoia, Greylock, and Andreessen Horowitz get funds from other organizations or individuals and these funders of Sequoia, Greylock, and Andreessen Horowitz should withdraw their funds if their funds are knowingly used to finance illegal activities or a site that facilitates illegal activities.

These firms are knowing funding a firm which they know is helping people to break the law and should be held accountable for funding firms which break the law.

These firms should hire as managers of Airbnb and other firms which they fund who have zero tolerance for breaking the law or trying to violate the spirit of the law.

I do applaud Airbnb's attempts to lower the cost of transient stays in NYC and SF. But this should be done through a legal mechanism such as building low-cost hotels in NYC and SF (with partners perhaps) and then listing these low-cost hotels on their site.
Oh, we automate that end of things, our cloud is all chef managed... but getting 200 certs re-issued by a dozen different issuers with new private keys is, how you say, tedious.
You are thinking of "goto fail", a bug in Apple's Security framework. I would not claim that was "caused" by a lack of braces: even having the braces, that bug--in addition to a wide class of similar bugs--is still quite possible, even if in a few models of how the bug was caused it becomes slightly less likely. The best place to lay blame for that kind of error is a stubborn insistence that error handling should involve boilerplate return value checks strewn throughout the code, with no attempt at abstraction or structure: it leads to numerous potential mistakes. Please read the various discussions attached to this article that made this claim:

https://news.ycombinator.com/item?id=7318039
Agreed that deeply nested function application is hard to read, for any purpose (not just matrix multiplication), which is why anyone who cared about readability and verifying correct readability would split it over multiple lines/expressions. Method chaining, given the functions return the correct types, could be a way to avoid that deep nesting too.
Ask HN: Why do open source projects attract more coders than designers?
Gulp + Browserify: The Everything Post
Gulp + Browserify starter repo, FAQ, and hotness highlights.
This is a very good point. I think it's great to encourage students to take up challenging technical career paths like engineering, physical science, math, etc.
But getting into field because it's currently perceived that it's where the money is like hitting a moving target. By the time one is finished with their degree, who knows what the job market will look like.

Scary thing is, I don't really have any alternative advice to offer, other than "stay as flexible as possible".
Different build flags?
Might one of them have been built with -DOPENSSL_NO_HEARTBEATS?
Ask HN: Best apps for education or teaching users?
What are some of the best mobile apps which display a lot of content and/or take the user through a series of educational lessons? In particular best UI/UXs etc?
Indeed. But it is also important to understand that just because it's the Internet, doesn't mean speech is absolutely free and that there are not consequences.

As far as user-generated content, perhaps this is a nod to policing that content much more unless you have the resources to handle legal challenges that will almost inevitably come up.
Or maybe tricked myself into attaching a meaning for life when I know its meaningless? :)
Today is the end of paid support for IE6.

Today is also the end of unpaid support for XP (which I assume includes IE7 - IE8).
Not that I don't think this is great, but this isn't anything new. My Dad works in this same line of work (FES - Functional Electrical Stimulation. Particularly in the area of spinal cord injuries). The biggest thing to note from this article: "... involves surgically implanting a stimulator and giving it directions with an external remote control. ". This is amazing tech, but it's not new by any means, it's been around for a fairly long time and it's been known you can stimulate nerves via electrical stimulation. My Dad as at least a few patients that I know of that have implants for moving their arms and hands, which they've had for at least 5 or so years now (I think one of them is 10 years old, and that was a few years ago).

Now, there is something that does seem to be a bigger breakthrough in this article, specifically the notation of having on-demand function without requiring some type of remote or etc. via a stimulator. This is new as far as I know, from the basics that I know this sounds more like helping a partial spinal cord injury rather then a full injury (My Dad works with full-spinal-cord injury patients only). I'm going to send this over to my Dad and see if he has anything to say on it.
Loving that you can filter the videos based on what colour t-shirt he's wearing.
Red Hat and Google Solidify Compute Engine Agreement
I agree with JoeAltmaier, but to add to that it depends on your product. eg. If you run a non-profit crm, you will have higher percentage of IE users. As opposed to a git hosting platform, you would have negligible use of IE. Put simply, it depends where on the tech scale your users are and products tend to appeal to some section of the scale.
Gandi does, and you do not need to buy webspace from them. Just registering a domain there will get you 5 free mailboxes and 1000 forwarding addresses.

https://www.gandi.net/domain
I've been waiting for stripe + paypal, as half my payments come from paypal, stripe is such a simple checkout process, and needed one admin for both. Fantastic!

Questions:

1) Will metered billing on subscription services be supported?

2) Not sure if this is feasible, but any plans to allow PayPal payments through PayPal Payments Pro, so they fill in their details in the form on our site instead of being redirected to PayPal?

Thanks!
If you are a major customer, like many national governments are, you can get the source code to a lot of Windows.
Please do. It does sounds interesting.
It appears so. Many sites that were vulnerable earlier today haven't even inactivated sessions.
I submitted this.

I'm sorry if I caused confusion, I really did think it was a real service and it sounds as if it is, even if you didn't intend it to be. I read quite a lot of the site before submitting. I agree the tone is a bit odd, but then it's a bargain-basement service so it wasn't "odd enough" for me to ignore it, I guess.

I'm a closet fan of Dangerous Prototypes, I think it was that connection that made it interesting enough to submit, to me.

Also, stop doing joke PCB ordering sites, and get back to designing that STM32-based Bus Pirate v5, please. :)
This is one of these things of which you think "Ah, what are the odds of me being affected?" but quickly changing to "This is pretty bad..." and finally to "FUCK FUCK FUCK, WHY?".

Two years is a long time, people. If ordinary people can write proof of concepts in less than 24 hours after it is publicly disclosed, what to think of those getting paid to find and abuse such bugs? I mean, what are the odds this bug was not abused in production environments the past two years?
An embargo on the word "privileged"... I thought I was the only one.
sign the lease on the 17" touchscreen in the car upon delivery? What the what? Amazing.
An ICBM RV in reentry phase (15K miles an hour) or a Sprint ABM (0 to Mach 10 in 5 seconds) now those are fast.
Excellent effort.
How much data were you grepping for? How much time did it take? How did you transmit those results over the network?

Or does your data fit in one csv file?
This can be stacked in multiple levels, cool :)
JVM on Python on JVM on Python on JVM...
Guido explains in an old blog post (http://www.artima.com/weblogs/viewpost.jsp?thread=147358) that he considers all of the possible implementations of multi-line lambdas to be un-Pythonic:

> But the complexity of any proposed solution for this puzzle is immense, to me: it requires the parser (or more precisely, the lexer) to be able to switch back and forth between indent-sensitive and indent-insensitive modes, keeping a stack of previous modes and indentation level. Technically that can all be solved (there's already a stack of indentation levels that could be generalized). But none of that takes away my gut feeling that it is all an elaborate Rube Goldberg contraption.
I think a sole proprietorship would be sufficient.
Well, nothing. Actually, I do not support Python having operators other than well-known, standard operators, like + - * / % and bitwise operators. My comment was just a quick and dirty idea which came to my mind after reading the parent comment of it.
I should have mentioned: I was assuming the recipients weren't necessarily PGP users. Realistically, most people aren't. I'd imagine a dead man's switch would often be used to send documents to law enforcement, lawyers, journalists, etc. How many of those people have PGP public keys? If they don't, then you have to ask them to create one. Besides the difficulty in getting people to adopt PGP, you're also back the problem of disclosing your dead man's switch prior to your death.
I admit that I may overemphasize but it's never as simple as just using a shiv. I always run into additional debugging and support issues when building for IE8.

There is most definitely additional work required to support IE8.
I think GP was referring to .OBJ with its 41% share of the site's models.
You are forgetting about emerging markets (and pretty much anywhere outside the US/Europe).

These places are completely leapfrogging desktop technology and going straight to mobile. It isn't just the case that the end user can't afford desktops: think how much infrastructure is needed (in terms of power, connectivity, etc) for a desktop device versus a smartphone or tablet.
If anything is shown from BitCoin - specialized hardware/application to solve encryption problems, its just a matter of specific application and time with any level of encryption.
Heartbleed-masstest
As per wikipedia: "In his last will, he left instructions that his music could not be used in advertising [...]".
I read a novel by a former SAS soldier about a former SAS soldier who's sent on deniable operations by the British government, and who uses what is clearly a one-time pad to communicate with his handlers. The detailed description of the precise method used, the fact that the term "one-time pad" is never used, and the narrator's apparent lack of understanding of how exactly it works (encryption/decryption is done via modulo-10 addition/subtraction, which the narrator derisively refers to as "spook maths") suggest that the author himself, or a contact of his in the same circles, has used a very similar system for real.
WANTED: Software/Python Developer
Mountain Do While...
That's a great start.
It would be nice if instead of just having "Loren Ipsum" samples, have some real-life (production) samples to see how it would actually look.
Also, it would be great if we could have conversion metrics per pattern, per industrial category (biz, tech, travel, etc...)
Navy prepares to take railgun to sea
License key fulfillment can be done now using the Snappy Checkout API & webhooks. This process is undocumented right now... but, I'm working on it. In the meantime, I can help anyone get it going via email.
That'd be great, except the last thing in the RSS feed at feed://aws.amazon.com/rss/security.rss is almost a year old ಠ_ಠ
100% on IE11, 97% on Chrome 34. Interesting.
I may be wrong, but I think that your credentials with a site are only vulnerable if they had the heartbeats extension turned on.
FYI, BatchPCB merged into OSH Park.
I've ordered from OSH Park, they are fantastic. Still, I question your definitions of "comparable" and "some fraction". :)

At OSH Park:

2 layer boards are $5 per square inch (with 3 copies of your board included in that price)

So a 5x5 cm board from OSH Park is $20 for three, with this service you pay $12 for ten. Way cheaper.
Panelising is interesting... Most forbid it, our house calls and asks if it's ok to panelize small boards :) Imagine that! They charge $2 for it, but whatever. We did Hacker Camp Shenzhen this week and made everyone's PCBs as part of the camp. The board house panelized anything that would fit!

Now, quality fade may set in. It might get crappy over time... however we're prepared! It's dirty boards after all!
Yes, and an important limitation stems from this as well.

For a tool like Redis, it's fairly easy for me to accept the limitation that my data size can't exceed available RAM.

But for an indexed document store with full-text query capabilities, it's a lot harder to for me to accept that limitation.
What about my third desire:

> c) without informing the recipients in advance

If you're willing to arrange the protocols with your recipients in advance, there are multiple viable approaches. But what if telling them in advance is itself a security risk?
Forget the frontend. Just make it work 'faster' than node.js and people will use it.

If you're going to be writing it, prepare your release by writing at least 5 applications with it too.
Upgrade notes are here: http://docs.mongodb.org/master/release-notes/2.6-upgrade/

"the upgrade from MongoDB 2.4 to 2.6 is a binary-compatible drop-in upgrade: shut down the mongod instances and replace them with mongod instances running 2.6."
Stripe did not offer subscriptions when I built that feature in Snappy Checkout.
If it would be that easy. ssh not, but all those. Some of them actually use the heartbeat feature.
curl seems to be the worst.

$ apt-cache showpkg libssl1.0.0
=> http://perl514.cpanel.net/libssl1.0.0.depends (186 deps)
WikiClips.com – Programmer Partner Wanted
Looking for programmer partner with creative ideas on how to develop and monetize WikiClips.com
Because they allow a domain holder to be creative.

.ly matches the ly suffix in English for example. So, thus you have adf.ly ... adfly.
I would stay with CouchDB. Its web interface if really good for inspecting and debugging what is inside the database. Really good for development.

Also it has a very nice HTTP interface so can talk to it straight from the Web via a proxy.
>My only point was that talking about one-time-pads as "unbreakable" encryption is not a useful discussion, since "unbreakable" and "encryption" need to be better defined.

No they don't. You are receiving negative feedback because you are trying to adjust definitions that have been well-defined by the crypto community. When talking about the security of an encryption algorithm, the key distribution has absolutely nothing to do with it. Stop conflating the two.

>If we expand the definition of "encryption scheme" sufficiently to allow transmission of secrets outside of cryptographic channels, then OTP is not even close to the only unbreakable system.

Would you care to share with us some of these other unbreakable systems? Remember, the keys are the only thing that can be transmitted outside of the channel and they cannot be based on the information being encrypted.
I have a feeling reasonable to him means $50 or $100.
We've had the exact opposite experience: After reaching out to Amazon our ELBs were prioritized for the fix and patched with no work needed on our part within <8 hours. Our rep has been in constant contact the whole time.
High volume of writes from MANY producers.

From 1 producer, it doesn't matter.

Though the point of mongo is to be webscale which implies to me many writers.
Authentication is the main thing to be aware of (no data rebuild), but full notes here:

http://docs.mongodb.org/master/release-notes/2.6-upgrade/

And, you have to be on 2.4 first (I know you said you are, but best to make sure for others)
There were lots of woman scientists in USSR, and I don't think there was gender-related discrimination... Much fewer than men, but probably not for the reasons that are now popular to attribute to this phenomenon. Just saying...
Have never seen my python server segfault.
Coincidentally, that's the same link I googled for my figures.

They have 2 at 30%, 6 at 35%, 1 at 40% and 1 at 60% and all of them need to approve you even at those levels, and may increase them for particularly bad risks (they market them as "representative" rates, so some percentage of people needs to get them I think).

I'd guess the people who aren't savvy enough to go through a price comparison search also get stung at the high end of these rates too.
on some servers you can even get the credentials themselves :)
ah so instead of properly security cleared people in one or two security services having access to it every ISP from DBP down to a mom and pop organization may have access.

Will the average ISP pay to put all its staff who have acess to those records with access through TS (DV clearance) clearance its not cheap. And what happens when some of the staff fail vetting - oops your now out of a job.

Oh and this woudl mean that ISP's would have to have judicial oversight.
Completely agree.

Judging from the technical description [1] and the most recent version of the draft white paper [2] alone, I think the project would benefit greatly from more substantial input and expertise from the academic cryptography community. I'm afraid they are spending a lot of effort cargo-culting on the wrong things, while missing where the real challenge lies: How to deal with the inevitable orders-of-magnitude increase in transaction size/complexity while preserving consensus-based distributed verification.

To be more precise: The metered computation mechanism is a very clever solution for dealing with unrestricted computation and unbounded data storage, but their proposed solution does not convincingly address the inevitable increase in space required. Hand-waving about greedy subtree verification without actual numbers/scenarios that shows this could work at all (which would be very surprising to say the least) is not convincing.

In all a great idea, though. It would be great if it works out.

[1] http://gavwood.com/Paper.pdf

[2] https://github.com/ethereum/wiki/wiki/Whitepaper-2-Draft
From a purely usability point of view I don't see the advantage of having the choice of payment (credit card via stripe vs. paypal) be offered after the user clicks on the payment button.

The more efficient option is to show pay with credit card and pay with paypal right off the bat.

This implementation means the user clicks PAY, then is shown a modal window and from there clicks, paypal and is then redirected to paypal.

Instead the user could click pay with paypal from the payment page and be taken to paypal with the unnecessary intermediary step.

Same goes for credit card payment: click pay with credit card and the modal window opens up and they enter cc details.

I know, it is just one click or interaction but still, this is the stuff that UX cares about!

This is especially true for check out processes. If you aren't extremely critical of your check out process from a UX/UI view you're leaving lots of easy money on the table.

The implementation is nice and I don't mean to offend but I just don't understand what benefit it can offer. Especially when it has this usability failing outlined above

:/
That's a good idea. I think you're right: An attacker would have to compromise all the DMSs to obtain the plaintext. That's not outside the realm of possibilities. But it is much harder than compromising just one. At that point, the DMSs might not be the weak link in the chain anymore--an attacker might find it easier to attack your own systems. (Which is a good thing.)
"It has always seemed to me that anyone who can build a checkout that handles VAT properly would have the whole of Europe beating a path to their door."

Totally agree with this!
Ah I didn't realise, thanks for the update!
Bitcoin is a bad currency. Here’s why it could change the world anyway.
Its real, boards will ship, its just that we _thought_ we were sharing it with a few forum members and LOLing it up... Now we're being hammered. All good. Tomorrow we start doing stencils and bigger quantities too.

Also: dirtycircuits.com will do routing! dirtycables.com will do custom cables! It's a dirty world!
Show HN: A native rsync client for Windows
Interestingly the analysis on the BBC article[0] states:

"[the patients] are also reported to have regained some control of bladder and sexual function - which many paralysed patients regard as more important than walking"

[0] http://www.bbc.co.uk/news/health-26920521
What you probably want is to re-key your cert, do not revoke it. Revoking with some CA's (such as GoDaddy) means to essentially cancel the remainder of the valid date forever and requires purchasing a new cert to secure the same domain. You are forfeiting the rest of its value.

When you re-key, it will automatically deactivate the previous cert and is free. It also gives you the opportunity to update to SHA-2 or increase the key to 2048 bit, which you should do unless you have unusual and extreme legacy support needs (and must keep SHA-1 a while longer).
Does heartbleed affect ssh or only TLS?
Not if they agreed not to disclose it, there is a lot of trust involved here.
> "Should I focus on clarity or jargon when writing content?"

> "Clarity, but also include jargon."

Well, that pretty much summarizes my writing strategy.