skysight-inc/HackerNews huggingface dataset:
This is something Microsoft needs to push instead of the insane MSI stuff. Microsoft really needs an officially sanctioned dependency manager, maybe NuGet. Something with a standardized package format based on _archives_, not _executable installers_.

The Microsoft ecosystem is light years behind OSS in this regard. Heck, CPAN was designed in 1993 and became available in 1997. Truly light years - CPAN predates the dot-com boom.
Longboxed seems pretty neat! Where are you currently pulling that data from?
Australians Hit by Cyber Security Threat after ACCC Pprivacy Breach
How to know if your website has been affected by the Heart Bleed Virus
Finally, IPv6’s killer app: The Internet of Things
but you still have to read the whole line

Oh the pain!
The good CPAN times :-) It was a bit of a cumbersome thing to work with as a newbie back then but at least it handled dependencies very well.
I don't understand what I am supposed to do with the URL they generate. Can someone explain this?
I think you misread that.

"You may use reference language documentation or use an IDE that has code completion features. "
It was a bogus DMCA complaint. It would have made the peoe claiming content ownership look again and either proceed with legal action or stop.

If the proceeded with legal action and it was bogus they then have pretty clearly crossed the boundaries required for the criminal element of bogus DMCA complaints.

I agree it's a frustrating and sub optimal situation.

(Obviously I am not a lawyer).
It's probably common in technology area that due to Dunning-Kruger effect many super talented engineers have low self-esteem and real-life skills, and are attracted by "magical" personalities, forming narcissist-codependent pairs. I see it all around, it's sad, but unless engineers fix their broken "insides", it's going to happen. It's then pretty logical that the narcissistic part of the pair gets all the fame, spotlight, power, and the co-dependent part gets used, squeezed, depleted and thrown away once not useful.
True.

The statement "Practice makes perfect." is false if you don't invest time in reading, thinking, doing retrospectives of your work. The 50/50 ratio seems fair enough.
History is replete with documentary evidence that whatever their creed (whether religious or political), men are more than willing to spill a lot of blood, as long as the blood belongs to the "wrong" group of the moment.
He who dies with the most stuff wins.
Wow, had to double check this wasn't uncyclopedia.
Single Internet Space for Africa
This isn't a fundamental dilemma like the consistency/scalability dilemma of databases. This is (or was) just a limitation of languages and compilers. The arguments for using C are many but in this case the most common involve the need for low level access (for perf, timing)

C is certainly very much suited for some parts of an SSL implementation e.g. when you need absolute deterministic performance to avoid timing attacks etc. (Although performance should certainly be good enough with modern compilers for most languages, and avoiding side-channel attacks by having deterministic execution time is also possible without resorting to C).

Using the execution speed as an argument for writing the whole thing in C is just wrong. I haven't heard any good arguments as to why a library such as OpenSSL shouldn't be written in Haskell (or say 98% Haskell and 2% C).

Did someone at some point say

"There is 2% of the code that is performance critical and/or needs low-level code for cryptographic reasons so I'll write everything including the network code, command line argument parser, world, dog and kitchen sink in C" ?
oooooooohhhhhhhhh

what's the first thing your teachers said ?
Read the instructions carefully :-)
How would you feel about

copy_if( begin(v), end(v), back_inserter(result), is_even );

Having reusable named functions increases the readability over the roll your own for loop version when you turn your iterations into named primitives. It can be easy to get lazy about doing that where appropriate.
How we raised 12 kids safely while giving them total access to the internet
I've said it before and I'll say it again.

Formalizing the TLS specification and proving that an implementation is consistent with it only shows that the implementation is logically correct. However, it does NOT show that the implementation is secure. Your implementation can be vulnerable to side-channel attacks (particularly timing attacks) while still being logically correct.

Proofs of correctness are a (big) step in the right direction, but they're not a silver bullet for building a secure implementation.
But he did, there's plenty of sentences after the first one.
I don't see much issue here. Clearly you can't expect to make a living off of 14,000 people playing your song. From what I understand, most artists make most of their money from live performances & merchandise.

https://www.spotifyartists.com/spotify-explained/#royalties-...

Explains in a bit more detail how Spotify distributes royalties.
This mail dates earlier than the OP linked. See http://thread.gmane.org/gmane.os.openbsd.tech/35722/ for a threaded view.
You're probably right, but what about pre-existing kit that received an update that included the b0rked version of SSL and went EoL since?

I haven't kept up on what version of FreeBSD is being used as the basis of JunOS nowadays but I would not be surprised to hear of EoL Juniper kit that included the flawed code. (I have no evidence that JunOS includes OpenSSL code but I assume that it does.)
There was a trend a few years ago where users would deactivate their FB accounts when logging out, so that people couldn't see/interact with them while they were away.

http://edition.cnn.com/2010/TECH/social.media/11/12/facebook...

So maybe that's not as stupid as it sounds. You could also have some level of caching, eg I visited your pictures yesterday so people can get it from me for some time if you're away.

I definitely see potential in this form of "distributed but controlled" storage mechanisms.

Similarly, I like the idea of having a local backup drive, and another copy at a friend's place (possibly encrypted).
Smart rich people are the opposite of cheap. They have more money than time, know it, and are perfectly happy to trade one for the other.

Building organizations is expensive, unpredictable and takes a long time. Buying organizations is more expensive in the short term, but also far more predictable and much faster. So if you have more money than time and need an organization to get something done, buying one is far more rational than "paying a clueless but competent nerd peanuts".

I'm not saying a16z is doing that here, btw. I'm just saying that you're wrong.
Fortunately for me my parents were basically atheist/agnostic and so I never had to feel what you felt personally with your mother. Nevertheless, I was vaguely aware of this moral hysteria going on in the background, and had the same innate sense of ridiculousness of it all at age 6 or 7. Later when I was in high school I was introduced to Frank Zappa and read his 1985 statement to congress (http://downlode.org/Etext/zappa.html) and it gave me a deep sense of pride that there were still grownups standing up for true freedom in the way that it had always been preached to us in Civics and American History, and not the fear-based politicization of every non-issue that seemed to pass for national politics in those days. I suppose politics are no less ridiculous today, but I think with the crumbling of the Soviet Union there was a real vacuum for common fears and the political machine was a bit out of practice to raise a credibly amorphous spectre such as "terrorism".
I'm more of a SuperCollider guy but Chuck is good enough for a major SC contributor to implement a Chuck operator for his lib.
Violence, personal power and the occult? You're going to find a lot more "violence" and "personal power" by switching on the TV or going to the library. Anyway, combat is often (depending on who you play with, but it has been my experience when I played tabletop) a very small part of a scenario.

As for "the occult" in D&D, come on. Throwing a die to check the damage of a fireball never turned anyone into Aleister Crowley.
Who says they're not recruiting other kinds of people through other channels? This kind of test is appealing to some people, and I'd guess those people have a github account.
A $5 Chemistry Set That Mixes Like A Music Box
That happens after you reach a monthly limit of economist.com articles, I believe. Easily bypassed by most on HN...
While miTLS is a step in the right direction (as are proofs of logical correctness as a general development strategy), one must keep in mind that miTLS in particular is implemented in F#, meaning that runs on top of the CLI. The CLI is written in an "unsafe" language and is not formally verified for correctness, but to use miTLS you must trust the CLI fully.

I'm not saying that the CLI is inherently insecure. I'm just saying that you can't ignore the security implications of the layers beneath your TLS implementation.
This is a fair objection. I should have been more rigorous, i.e. I've assumed a very high value-of-life, which still leaves me prone to Pascal's-mugging type objections (http://lesswrong.com/lw/kd/pascals_mugging_tiny_probabilitie...).

I think my argument can be modified to be defensible, but agree that the post does not reflect this as it stands.
I'm not seeing how these questions are relevant to very many swedes right now, with regard to ongoing world-wide & european political development.

We seem to have the same confused politics in Sweden as usual. Womens rights & equality is important and seeing some progress locally, while from a more global perspective we can actually expect this trend to go backwards.

A substainable economy is left to the "industry", and the government are selling out the last parts of the welfare.

We have a strong right-wing movement in Sweden now, which we didnt have since the early 90's. A movement whose european cooperatives are open fascists.

One of our negihbour counties are being invaded by Russia.

Sweden is in bed with USA and the UK with regards to signal spying (https://en.wikipedia.org/wiki/National_Defence_Radio_Establi...
which puts Sweden in quite a bad spot against Russia.
Russian cables go through Sweden and wiretapping of these cables is what the FRA are supplying to NSA / GCHQ.
This is not even discussed in the Swedish media.

And still, you believe the Pirate Party's ideas are relevant for this year's election?
Fixed Project Price or Hourly Rate?
Judging by the number of high level departures from Apple after Jobs' death, it seems like that devotion to Jobs was the main glue holding those personalities together.
The "violence" part is particularly ironic, considering the amount of God-sanctioned wholesale slaughter in the Bible. Maybe the Bible is incompatible with Christian beliefs as well ? :)
JQuery Gantt editor. Open source, SVG based.
Please fix Skype "always online status"
Hi Skype team,

It's been months that many people are complaining about their Skype status being set to "online" even though they quit Skype on the desktop or on their mobile phones.

Just try this search : https://www.google.com/search?client=safari&rls=en&q=skype+always+online&ie=UTF-8&oe=UTF-8&gfe_rd=cr&ei=QKlHU7upBonD8geB5IGgDA

You know, Skype team, the thing about instant messaging is that I want to communicate with my peers, when they are actually online. So when I'm at the beach or having a break or sleeping and that my computer is off AND Skype is not running, I should not be online, well just because I'm not!

As you can imagine this can have some annoying side effects, like your girlfriend not responding to your message, or your boss thinking you are working 24h and telling you "You should rest!".

And don't tell me I need to disconnect from each of my devices to be actually offline, because I'm offline as soon as I step away from my computer. And I won't make any effort to change this habit.

By the way, you're still the best instant messaging software I know about, and would love this to stay true.

Sincerely,
Jérémy
If you are familiar with both C++ and common high-order functions used in functional programming I still think that squareVec4 is, by leaps and bounds, the most readable.

squareVec4 is simple, concise, and leaves little to no room for ambiguity. squareVec6 is a monstrosity that requires reading more text that contains more complicated ascii and involves more concepts.

And for the author to then claim that making use of "cool stuff" in <algorithm> is more maintainable code? That's just crazy talk man!
Let's get this straight:

> I think grellas argument is so flawed that the only reason to make it and upvote is as distraction and current best defense while the dropbox team works on something more believable.

This is some kind of conspiracy to distract HN, because... DropBox fears HN? And grellas has been hired to carry it out by commenting?
25+ free WordPress themes for April 2014
It’s been a busy month for theme designers & developers as a large number of new themes were released, making this a great time to update your site if it is in need of a new look. Some of the overall trends in web design are showing through in theme design as well: flat design and big photos rule.Every month we’ll be bringing you our pick of the best free WordPress themes released in the previous four weeks. Here are our favorites for April:
OpenBSD Foundation Funding Goals Reached
Don't forget to donate! :)

http://www.openbsdfoundation.org/donations.html

and

http://www.openbsd.org/want.html

Thanks!
I'm not really sure what point you're trying to make. This seems to be exactly where MS are moving to with nuget.

Like all the new stuff, the WebAPIs, EF 6, OData, etc. is now being published as NuGet packages instead of installers or SDKs or whatever.

NuGet seems to be a direct response to this very issue and you constantly mention it.

So what are you asking? After all they can't change the past!
UK newspapers are sensationalist, so we had a bit of it over here, although it did tend to concentrate on music or satanic abuse.

On a slight tangent I remember a Scottish religious group in the 1980s who did not let children use calculators because "Satan talks through screens" - they extended a ban on TVs to include calculators. This is the kind of thing that I find very hard to get results from a search engine with. So, any advice from DDG or Googlers about best way to get that info would be lovely!
I see what you are saying, any language that has a runtime has its security dependent on that runtime. F# can compile and run on a variety of platforms (not sure which mitls are compatible with) not necessarily the ms CLI only.

Normally I'd argue that running safe programs on top of a runtime/VM would make everything safer since you would only have to prove ONE system (the VM) to be safe, but with the Java debacle of recent years I think that argument isn't really as good as it used to be.

I agree with what you are saying: for proven security you need to prove properties of all the layers down to the metal. Not sure how difficult this is for good "safe" languages such as e.g. Haskell.
Okay, that explains things a bit. Could be done with a fixed-size payload though. Also I understand that the flexible size is intended to help with MTU discovery, but I think that would be a separate thing from a heartbeat.
Got it working on ST 2 on Windows.

Ensure that you're editing the right flavor file, and restart ST for good measure.
And can't take it with him

Haha strange human race
Well, he did say the truth about getting paid by Atari, and gave him "his half", which Woz regarded as "good enough compensation", otherwise he wouldn't have considered working with him in the future. It's kind of the same game played when a middle manager that brings no value to the company gets paid 3x the engineers salary, or when the CEO gets the golden parachute while the shareholders are loosing money and the employees are getting salary cuts or the company is getting downsized... but you don't go around calling people "liars" for playing this game as the corporate level, do you? Yeah, it's no longer "lying" because the information is theoretically available to all players, or at least to the IRS, but it's kind of the same game.

Woz probably didn't became upset about it because by the time he found out about that little incident, he was in some kind of "managing" position himself, and "playing the same game" but in his advantage now, and he was there because of the other decisions that Jobs made, so...

Basically what at the small "garage business" is called "being a liar" is what at the bigger levels is called "the rules of the game". And yes, you're no longer a "liar" and no longer breaking the rules, but simply because the rules are bent the way you need them to be bent.

The only alternative would be to have only fully transparent employee owned companies... and we all know this is not how our current flavor of capitalism works :)

EDIT - TL;DR: it's basically the same "bad" deal one gets in any employee <-> employer relationship, just that they didn't have this explicit relationship
India has been developing due to FDI/FII/QIP/NRI/PIO investments ($120 billion/yr).
Otherwise India follows the "Sheep Herd" mentality.
The whole country's economy is based on people getting into "Profitable" domains mostly following the success of a pioneer in the field.
The most recent example of this ideology is the "Business Process Outsourcing" industry.
New BPO units are propping up here and there at a dime a dozen leading to a quality deterioration in the final deliverable.
This process will continue till a saturation level is reached and then they will wait till another "Killer" domain picks up momentum.
Till then India will be in a so called "Calm Period" where nothing great and major takes place.
I'm guessing this doesn't apply to the average developer; after all, we write code for a living. I sure do. I don't usually do any coding when not on the clock, after all, I've already done 8ish hours of work by then (and if I'm lucky, most of it spent coding).
That is not entirely true. For example the Windows Azure SDK has to be installed. Database tools have to be installed if you want to be able to compile a database project. There are many of the new things that do not follow this approach (hopefully: yet).
NuGet gets the job done admirably, but it was simply introduced too late; nearly 10 years after the introduction of .NET.

It's good to see NuGet has gained traction very quickly, but there are still plenty of projects predating NuGet that have solved the dependency management problem in their own unique way. Migrating all of those to NuGet takes time and willing maintainers.
Still seems underhanded to me.
Bitcoin has gone up 1000% every year, and 10,000% last year.

Also, every successful startup ever has had those kinds of returns at some point. So I suspect you are only considering traditional or stable investments, like post IPO stock or whatever.
> Well, empirically we're getting quite a lot of people attempting it!

I think you missed my point. It's that the people submitting to a multi-hour exam just to submit a resume are more desperate / value their time less than those that can stand on their experience.

The fact that there a "quite a lot" of submissions only worsens the probability that the multi-hour effort will be wasted.
Looks like the FLOSS community needs to start exploring these kind of tools.
Js rotate image in JavaScript
In many ways CPAN is still state of the art. It has first-class support for namespacing and mirroring, which appears to still elude most environments' packaging systems.

And I'm saying this as someone that dislikes Perl a lot.
> This isn't a fundamental dilemma like the consistency/scalability dilemma of databases. This is (or was) just a limitation of languages and compilers.

You're right. Null pointers are a nuisance in some languages, but other languages have shown that you can remove them and still have just as much of an expressive language (and the compiler can still translate pointers that might be "null" to actual null enabled pointers, so no performance cost). Rust might show that a stronger type system can remove certain raw pointer flaws from the language while still retaining both execution speed and programmer productivity.

Dependent types might mature to the point that you can use them and gain both execution speed, productivity and safety - time will tell.

> Using the execution speed as an argument for writing the >whole thing in C is just wrong. I haven't heard any good >arguments as to why a library such as OpenSSL shouldn't be >written in Haskell (or say 98% Haskell and 2% C).

Did someone at some point say

"There is 2% of the code that is performance critical and/or needs low-level code for cryptographic reasons so I'll write everything including the network code, command line argument parser, world, dog and kitchen sink in C" ?

...

The article makes the argument that, assuming that the whole program needs to be incredibly performant, you can write say 2% of it in verified ATS code, the rest in C-ish ATS code (ie. without proofs).

I guess you can also choose to write 2% verified low-level code, and the rest in a more high level ATS - ATS is a functional language with garbage collection and I presume other high level goodies that functional programmers are used to.
Microsoft is increasingly doing it with their frameworks and components, but not for real SDKs. Windows 8 and Phone development still requires an installer to build.

It's not just Microsoft though. Other vendors need to jump on the same bandwagon. Right now, almost nobody really does, definitely nobody who sells to the enterprise market.
You are using the wrong units units for power and energy. Neither "kw/h" or "$ per kw" make any sense in the places you put them. I think you mean "kw" and "$ per kwh" respectively.

kw=kilowatt, a unit of power;
kwh=kilowatt-hour, a unit of energy

Electricity is billed per unit of energy.
This was too awesome a comment to pass up, so I ended up browsing your thread history / googling you. I found a lot of great posts as well as the hilarious https://news.ycombinator.com/item?id=5967671... but sadly no real name / business name.

What company do you run? Are you in the Bay Area? Can I buy you coffee? I have a feeling you could teach me things that are both true and that hackernews would downvote... And that there's a reasonable chance I could return the favor.

Background so you can filter me more easily: I'm a very good programmer (7 years experience coding on small teams made of up jQuery core, rails core, and MIT AI Lab alums. Several offers from YC companies. 4 papers & patents. Currently doing machine learning for the Scripps Institute of Oceanography). I'm also an avid reader of psychology (cognitive biases mostly), marketing (Joe Sugarman is amazing), and business books (I'm a raging Munger and Deming fan).

So I'm guessing if we did meet for coffee you at least wouldn't find it boring.

Email me? dls@lithp.org
Nice work. What kind of open source license?
Added a P.S. to the post to reflect this: P.S.: A lot of the new packages like ASP.NET MVC and WebApi, the OData packages and such are being shipped as NuGet packages which is awesome. The ones that I am missing are those that require additional build targets that are typically shiipped in SDK's. Examples are the Windows Azure SDK, database tools and targets, ... I would like those to come aboard the NuGet train!
I think you're reading too much into this. Sometimes a programming test is just a programming test.

If I were to guess, they're building an internal dashboard and DWH to crunch numbers on their investments (or perhaps potential investments). This test appears to focus on that skill set.

Yeah, they could probably buy a company, but that would be overkill. They're VCs, they're supposed to be selling companies at a premium, not paying premiums. ;)
A few myths found: http://www.whatisnuclear.com/articles/thorium_myths.html