skysight-inc/HackerNews huggingface dataset:
Short version "Real world, please care about our hipster frameworks that are using languages older than some enterprise ones. We don't want to use Xamarin to re-use maximum code while retaining native performance and languages that don't suck; we don't want to use Unity3d to be able to quickly prototype at low cost and hight quality. Please pigeon-hole Node.js in every freaking domain, because everything is an IO throughput problem plus you get to use a crappy language not just on client side but on server side as well!".
Any links, perhaps?
> It is probably easier for casual attackers to trick a local geek to trust a phony key. Determined attackers and state-level actors can probably compromise CAs as well, but most day-to-day threats are of the casual type.

Not true, see here: http://privacy-pc.com/articles/ssl-and-the-future-of-authent...

Problems here is that free market model doesn't work once you're a big player. Instead of Comodo being bashed by MS/GOOG/Moz it's sill there all shiny and bright serving SSLs.

So the current model is flawed and can be exploited by technically unskilled users, but worst than that, it doesn't seem to care about it's failures.
It's worth adding that long-term observational studies with Aspirin intake have shown high colleration with the reduction of certain types of cancer (colorectal, esophageal, mainly), while the internal bleeding issue remains a potential concern:

http://www.ncbi.nlm.nih.gov/pubmed/22440112
People using bad algorithms is exactly the sort of thing I was thinking of. People write horribly broken code in every context; but instead of a bug making software slower than it should be, when an "equally dumb" bug happens in crypto code it probably reveals your keys.
Bear in mind that Linode's SAS arrays apparently already outperform Digital Ocean's (presumably somewhat crappy) SSD setup, so this may or may not be a silver bullet.

I have a Postgres-based service on a Linode — it works fine in my (mainly read-based) use case, but I do pay for quite a lot of RAM in order to get enough caching.
Well, we are paying for Gandi's corporate level of support.

Funnily enough, we feel the same way about people who don't want to pay $20/year for their email address, given that it's the primary method of identifying yourself online.

As with any business expense though, you only want to pay for value - if you spend $1000/year for exactly what you could have got for $100 year, that's wasting money.

And we're satisfied that Gandi know us now! Overall they've been really good - they just missed this one thing when they added 2FA. I bet they're not the only site.
Make it obvious, stupid
errr - tell me more ... the fit it tells you what to do?
Even if you're not super interested in Erlang, I can't recommend this book enough: it's clearly a labor of love, and very nicely written. It's worth supporting that kind of effort.
I realize it's an appeal to authority, but if there is one company that would have a lot to lose if its domain was ever exploited, it's google.

http://reports.internic.net/cgi/whois?whois_nic=google.com&t...
What I wonder is where I can get a domain with less human reviews. This wouldn't have happened if the humans at Gandi ignored the email with the fake documents and had just relied on the automated authentication systems.

The problem with their system is that it has the right amount of human intervention to be fallible to social engineering.
I want to start working through SICP again beginning these Easter holidays. I tried it before using Vim and and ran the REPL in a different terminal. This really sucked and I gave it up as a bad job. I decided that Emacs is probably a better "development environment" to try and go through SICP so I did this:

Got Emacs "pimped" [1] enough to behave like Vim but Emacs enough to use Geiser and connect to Racket with Neil Van Dyke's SICP package. (Emacs prelude, Eviled, Solarized and installed packages: geiser, quack, sicp (M-x info-display-manual sicp)).

Gonna see how it goes this time round.

[1] https://github.com/humana/dotfiles/blob/master/emacs/persona...
A tangent: Have you tried KeeFox, as opposed to PassIFox?
db programmer
You actually want both - you want all of the automatic safety checks to be first completed, and then, after all of them have been passed, you want an account manager to personally pick up the phone, and call their contact at the company making the change, and have a discussion as to what is trying to be done, and whether everything is kosher.
Sure, for a company, yeah. For my personal domains, I'd rather have cheap and human-free ;)
Attracting Newsletter Subscribers
You know what, if they are looking for a developer that can hit the ground running with .NET and make some great stuff, I'm not that guy.

If they're looking to do some .NET projects and want some developers that are good to pick it up and try it. I'd do that.

How do you get into that situation? Is it even possible? I hear and see the opposites - companies with absolutely no interest in training, and companies that love training.
Domain Venture Partners acquires .PARTY new gTLD | gTLD.club
i guess the guys wanted to make the UI "cleaner". The problem is, too clean.
i'm with you that clarity should always over "clean"!
No proof really. My last job hunt ( Nov of last year ) just came up 100% not-C++, currently doing Java work. Same thing happened a few years ago...maybe I just lived in a lame city though.
I may be ignorant but I don't know of any other UK content provider who is providing 4K streaming content.

I think there is a massive reluctance on the part of companies to stream this type of content. 3D TV demonstrated the need not to believe the hype and is considered a failure. They don't want to be burnt again.

4K has a major bandwidth issue that cannot easily be overcome by national broadcasters without sacrificing multiple channels, that is, content.

Somebody like Amazon can bring this on board without having an impact on their business.

I recently went into Richer Sounds (hi-fi/tv specialist) and although they had 4K screens for sale, the moment you mention that the standards haven't been sorted yet. they agree it's better waiting a couple of years.

Anecdotal evidence from my wife is that she can hardly tell the difference between 480 and 1080p content let alone going to 4K. I think selling it to the public is going to be hard. Harder than 3D TV.

I'm guessing you may need 4K at around the 50" screen width to begin appreciating it.

On a side note, I do believe 4K 39" displays have a place in the workplace. Waiting for a cheap one with a minimum 60hz refresh rate to come on the market.
Thanks for the recommendation. It's in my to-read list ~ along with far too many other books ;-)
you might want to try contacting netcraft, they have all the certificate information for most major sites[1]

[1] - news.netcraft.com/archives/2014/04/08/half-a-million-widely-trusted-websites-vulnerable-to-heartbleed-bug.html
Ecatel in a list like that is a really bad sign.
A better compromise is a 30 day lock down by default, with weekly, for three weeks, and then daily messages notifying of the change.

The alternative would be to go to a fastmail selected notary, and present appropriate identification material to them, and then pay a small fee to have an expedited (3 day) recovery process.
Blimey... at £104.95 I think I'll grab it from the library. ;-)
> An actual designer will save you lots of time.

I think he covers this when he states immediately after your quote, "I bring in the big guns when needed as freelancers". He just advocates employing a designer for specific tasks that he can't do himself.
Congressman to Introduce Bill to Declaring Bitcoin A Currency, Not Property
Why we're in a new Gilded Age
Pay TV company justifies keeping Game of Thrones off iTunes/Play
If introduced and passed, this will be huge deal for Bitcoin!
>(Service idea: a Q/A site where people could ask questions about their products as they're building them. Does this exist already? Some subreddit maybe?)

nreduce when it existed did this. I think there have been similar attempts by others since then.

While I got some value from that myself on one of my projects, I ended up getting more help via feedback from users. (Some had day jobs as programmers, which eased communication a lot.)
Virtual Currency Tax Reform Act
I'm currently using https://iwantmyname.com for my active domains, but I would like to hear people's experiences with it.
Finance /HFT. In my last job I worked for a company that sells an algo trading platform written in C++.
> To ping means to send out a signal in expectation of maybe receiving an echo or reply. It's a two-way process.

"Ping" is an Onomatopoeia. There is no distinction about whether or not you are supposed to get a response or acknowledgement in the definition of this word - this is your own view of the definition, perhaps biased by years of working with computers, but in the acoustic world a 'pinger' is just something that 'goes ping'.

>I find it annoying that the media call this thing a "pinger".

I find it annoying when people assume their definitions of words they use are the only 'right ones'. Use a dictionary - you'll see the definition right there:

pinger (ˈpɪŋə)

— n
a device that makes a pinging sound, esp one that can
be preset to ring at a particular time
Still the language of choice in the world of music production software. This is not a place you'll make a lot of money but the work is far more interesting than the usual CRUD slapdash you do in most dev shops.
I've been a fan of easyDNS for their security features and how they go to bat for their customers when it comes to things like transfers / takedown notices.

http://blog.easydns.org/2014/01/29/welcome-to-easydns-press-...

http://blog.easydns.org/2012/02/21/the-official-easydns-doma...

And has Gandi changed their terms recently to remove the bullshit? https://news.ycombinator.com/item?id=4970947
Shouldn't they send out a paper letter to the owner of the domain then? That might be a better way to verify identity. Or use an actual "real world" identity check?

In Germany you can do that with the German mail system - the postman will then check your id and confirm you are who you claim to be. Certainly not foolproof, but just accepting incoming letters at face value seems crazy.
> Functions should start with a capital letter and have a capital letter for each new word. No underscores.

Why so? It's Java-ish. Java favors camel notation for some historic reason. C++ on the other hand favors snake notation which is clearly reflected in stdc++. Snake notation is also easier to read, especially if the name contains many words in it. Of course in the end it's a matter of preference, I just wonder why Google mandates camel notation.
> I'm now three years into DuckDuckGo, and still haven't hired.

What? According to the company webpage, they have 20 employees. [1] This post seems purposefully disingenuous, just to make a point.

1: https://duck.co/help/company/hiring
A NDA'd operating systems course where you had to submit to Microsoft, I'd love to see the headlines...
Generator pipelines in Python
Although Gandi.net is a fantastic company, their security practices are nothing to write home about.

A few years ago, one of my clients lost access to her Gandi.net account. Unfortunately, she had the "disable password resets via email" option set in her account. That should have given her quite a headache, right?

Nope. I, an independent contractor who didn't even own the account, was able to convince Gandi support to disable that option so that she could reset her password via email. They didn't even ask for any documents to prove either my identity or my client's. It took several days, but the only reason it took so long was because their English support was very slow back then.

So I'm not surprised that Gandi let the attacker change the email on FastMail's account when presented with genuine-looking documents.

And this is not a problem that is specific to Gandi. Even with other online services, it's often quite easy to bypass automated security measures if you go through a human being, whether through the support system or through good ol' snail mail. In fact, I'm sure that snail mail is by far the most reliable way to take over someone else's account nowadays. So many of us in the tech industry have no idea how to verify the authenticity of a piece of paper, especially if it's from a different country.

Meanwhile, another favorite web host and registrar of mine, NearlyFreeSpeech.net, recently enabled two-factor authentication. But they did it differently. In addition to OATH TOTP, NearlyFreeSpeech allows you to select several other tests that you need to pass in order to recover your account. If you tell them to give you six different tests, which will probably take several weeks because some of the tests involve snail mail, they'll honor your preferences. Or you can choose to take four tests. Or three. Or two. It's your choice. That's multi-factor auth done right.
Injecting Computation Everywhere–A SXSW Update
This comment was downvoted as I wrote this comment:

I assume the context that downvoters are missing here is that the streaming curretly only supports the newest TVs because only they contain the necessary hardware to decode HEVC 4K streams.

But Chromecast is one of several dongle/boxes which separates these problems out, so as soon as an external dongle supports 4K you'll be able to plug it in to a last year model 4K TV, or even a non-4K TV, and be able to take advantage of 4K streams.

There's at least one already:

http://www.nuvola4k.com/
I guarantee you everybody believes some groups deserve less rights than others. For example you just said certain people don't have the right to be CEOs.
The blog post is from January 12, 2011
This startup says it can find the algorithm that defines your data
The Google style guide could help explain why the Go team thought that their language would make more of an impact in C++ land than it actually did.
Especially remote jobs, outside US.
This blog post was from January 2011. The first employee (Caine Tighe) was hired in September 2011.
This is very cool, maybe I can stop memorizing random strings of characters now -_-.
Pricing
Log in

labels have poor contrast
My $2000 late-2013 rMBP suffers from the same problem. My 6 year old $800 Dell 1920x1200 laptop doesn't.

I guess that it's a MacOS problem.
> I don't know of any other UK content provider who is providing 4K streaming content.

Youtube has 4K content.
Ah, I thought this was killed along with latitude. Looks like distance to the moon is gone though. :(
Maybe it's not the problem with PHP but most shopping cart built on PHP was dated back 4-5 years. They are too lazy to simplify it. When Magento came out, I thought that was it. But it's getting bloated like anything else. If someone wanted to have a simple responsive design site and image zoom capability, it's multiple steps (install, get add-on, fix templates... ). Anything out of the box these days are just not needed or lack of latest features. I think with node.js/sails/mongodb as backend and Bootstrap/AngularJS as frontend, things could be simplified 100x. I had heck of a time just to find which Magento file to modify the template for left menu...
FWIW I think Apple previously used MarkMonitor. In fact that's currently mentioned on Wiki. However, now Apple.com is controlled by something named "Corporation Service Company".

I think the idea behind these services is, they're not just a registrar. Broadly speaking, their business is "know your customer". They're boutiques. They protect large companies against the vagaries of DNS hacks, expired domain registrations, typosquatting, etc.

E.g. a (long) while ago Microsoft failed to renew hotmail.co.uk, just like they previously forgot to renew passport.com. But today, Microsoft can't forget to renew microsoft.com, because that's now MarkMonitor's job. Similarly, renewing passport.com is now the job of (according to whois '=passport.com'):

Corporation Service Company(c) (CSC)
The Trusted Partner
of More than 50% of the 100 Best Global Brands.

The bad part is if CSC screws up, quite a few companies could be in a world of hurt.
I'm fairly new to Python, though not to software development, and one of the nice things I find about Python is that when I see something I haven't seen before (in this case multiplying a string by a boolean) I can usually guess correctly what it will do and spend a few seconds with the REPL to confirm.

Of course, this is true to a certain extent of all programming languages, but I do find Python particularly easy in this respect.
This'd be more fun if it didn't segfault

printf(n%15 ? n%3 ? n%5 ? "%d\n" : "Buzz\n" : "Fizz\n" : "FizzBuzz\n", n);
I strongly disagree with your point 2). The reality is, if Comodo is caught issuing phony certificates, there's some media shitstorm that never actually changes anything, stocks go up and down a bit, and few days later nobody ever remembers any it or cares about it, and the company continues doing it's business as usual (don't believe me? then why GoDaddy still exists?). On the other hand, we have social mechanisms for dealing with mistrust in place since forever. If you are caught untrustworthy once about something, you'll probably never be trusted again on that issue. People know how to deal with those situations effectively between themselves. It's also easier to boycott an untrustworthy peer than a multinational corporation. You have many friends to choose from, but there is usually no other company to go to for a comparable service.
The geeks shall inherit the metaverse and marketers will be there with them
It looks great even on a 15" screen (you have to be quite close in that case obviously) and on a 40" screen it looks amazing. That said, if I was going to spend that amount of money on a TV I would prefer to get a 1080p screen where the deepest black is indistinguishable from the bezel, which works out about the same price.
Code style doesn't dictate what your engineers build, it just makes their code easier to review and maintain. Code smells, foreign conventions, and inconsistency all make reviewing and editing code harder.
FYI, the lint tool referenced in the guide is found here:

http://google-styleguide.googlecode.com/svn/trunk/cpplint/
This is true, Most of the Android manufacturer are paying some patent fees to Microsoft for example Samsung is paying $ 10 to Microsoft on every Android powered smartphone, this amount was $ 15 trimmed down to $ 10 after Samsung agreed to bring our Windows Phone Powered smartphone market. Case is almost same with HTC, LG just they vary in amount they pay. In Q2 2013 Microsoft Corporation Earned $1.51 Billion From Android Smartphone Vendors [REPORT]
Microsoft earned a total of $1.51 billion (approx) from 131 million Android devices that were shipped out by Android smartphone vendors. The total earning from Android royalties would surge up with the inclusion of royalties collect from Android powered Tablet sales. http://www.dazeinfo.com/2013/09/13/microsoft-corporation-msf...
Speaking about remote C++ jobs - I sent an email to you more than two months ago, for the C++ dev position at Eyeo, which they still advertise on their jobs site. I sent again after a couple of weeks. No reply. Could you please confirm that this job is still active?
Some coding style guides amount to an obsessive compulsive disorder. They focus on trivialities, like an extra space between parameters or the placement of braces around blocks of code.
First off- congratulations, that’s an awesome accomplishment.

On fitness “advice”, solicited and otherwise. I am a long time fitness enthusiast, I look like a bodybuilder. This makes one a bit of a pariah in the startup/tech community. Geeks are not muscular, if you are into body modification from a transhumanist perspective you’d best do it in some socially acceptable way like piercing or tattoos. This means people are perfectly comfortable telling you, positive or negative precisely what they think of how you look in a manner that they would never consider doing with an overweight person.

Part of this is posing fitness “questions” under the impression that in a business environment, dressed in professional attire, what I really want to talk about how I happen to look. 90% of these are not really questions, they are round about ways of making it clear to me they are not responsible for how they look- as if I care or am judging them somehow.

The other 10% of questions there is nothing really you can do for them even if you were inclined- “tightening their core”, “get cut and put on some muscle”, “Best exercise for a six-pack” are no more answerable than “My Internet is slow, what is the best computer to buy to make it go faster?”. All you can do is shake the Magic 8 ball and give them a spectacularly oversimplified answer that won’t do any harm, but unless it’s the answer they already have in mind they will just ignore you. The real answer for "where do I start" is not something they want or will do so I never bother giving it anymore.

It may feel like you had a great epiphany, but it’s highly unlikely that you discovered some groundbreaking new method for body recomposition. Outside of the realm of very, very elite athletes none of this data is proprietary or secret. All of the information that most people need to achieve a reasonable fitness goal is freely available- they just have other priorities and there is nothing wrong with that. These people are not unfit because they have not heard your secrets to losing 60lbs in a year, they are unfit because that goal is not a priority in the same way it was for you. Trumpeting, or in my experience even relaying your own methods does not achieve much unless you are a professional in the business of charging for that information.

That being said, if it it personally satisfying it’s certainly something you should do.
How America is rigged for the rich
I like how you sumed it up

> Famo.us is built around a neat idea: by directly using the CSS matrix3d transform in combination with the window.requestAnimationFrame function, you can describe the complete layout and animation of your app in a way that’s hardware accelerated with consistent performance.

> It’s a stroke of genius, but in order to implement that simple idea you need a sophisticated math library to help translate your app’s UI into the series of matrix transformations that get pushed to the GPU. This library is Famo.us.
Yes, 25 USD. I wasn't arguing that, though. My point was: the original title to the tune of "StartCom is refusing to reissue certs" was misleading.
I refuse to reinstall any Facebook App since they require complete control of all the data on my phone. I used to use it until one point where it was getting ridiculous.
Repost: https://news.ycombinator.com/item?id=7564353
That's rather harsh title. Forcing? Ripping out? Come on...
It's not ass kissing when it's true.

I'm not going to apologize for complimenting someone's work. If that makes you cringe, then you will have to live with that. I think you will be happier if you try to choose other things to get upset about.