skysight-inc/HackerNews huggingface dataset:
That's an interesting take of the Python and Java relationship and although it complements well the landscape (with Jython, JPype, Pyjnius, and Py4J), I'm not sure what the need is.

(shameless plug warning) When I created Py4J (http://py4j.sourceforge.net/), I wanted to decouple the two ecosystems as much as possible so that both could evolve independently. There is no jni, no re-implementation of bytecode or interpreter, just plain sockets working on linux, mac, windows and most versions of Python and Java.
Gulf War.

https://www.youtube.com/watch?v=TTetKxtmI9c
Volcanic islands merge in Pacific Ocean
I predict that it will eventually come out that other European nations have similar secret treaties, and that their sovereignty is circumscribed by such treaties. This is why you hear complaints, but see no action. It will be interesting to see if any popular movements against such agreements arise.
There's only one "unbreakable" encryption, and that's a pair of one time pads with truly random data as long as the message itself.

http://www.pro-technix.com/information/crypto/pages/vernam_b...
For no encryption scheme is the key space unlimited.

For symmetric key ciphers, the keys are of a set length. AES accepts key lengths of 128, 192, and 256 bits.

For asymmetric ciphers, they vary even more. The RSA-XXXX designation refers to the length of n, which is the product of two primes (which must be kept secret) p and q. So for RSA-2048, p and q are roughly 1024-bit numbers. In addition, the secret exponent can frequently be quite large, although as it's calculated from the public key exponent and n its size is not guaranteed.

Ultimately however, all of these are designed so that the key spaces are too large to be feasibly brute-forced searched. The reason for the much larger size of the keys for the asymmetric ciphers is that their security is usually based on the difficulty of solving a problem (in RSA's case, factoring n into p and q, or the equally difficult problem of determining the totient of n) that gets more difficult as the keys get larger.

EDIT: And yes, one-time pads are theoretically unbreakable, however they can only be used once (as the name implies, but if they are used twice recovering the key is trivial), must rely on a sufficently good quality random number generator (which Matt Green recently had a very good article describing how hard it is to do: http://blog.cryptographyengineering.com/2014/03/how-do-you-k...) and they have the same issues that any symmetric key ciphers have, in terms of key distribution. They're useful when you have old women in Bletchley Park spinning bingo balls and carefully copying into two notebooks. Less so when you're trying to build a usable system for secure communication.
I wrote guide about how to install ruby on rails
The Venture Capital Funnel – 4% have unicorn potential
Meet the Humans of MIT
Yes of course.

However by far the worst part of it is the private key leakage. With that, all the other stuff it sees in memory that is sensitive is probably being transmitted over the wire anyway. Which means that is can be MITM'd. Granted that is a lot more work than just examining memory...

If you plug that hole with a system like this, a website owner could just expire sessions and require people to log in again. In addition, the sessions for the past 2 years wont be at risk, only the active sessions used that day.

In short, short-lived certificates will dramatically reduce the damage, not prevent all damage.

EDIT: Sorry I realised that you were just adding to the list of consequences to this bug, not arguing the mitigations I mention would be useless! =)
Yep, and no braces after the 'if' statement in the patch. Even after the previous ssl vuln (I thought it was gnutls- struggling to find the relevant hn discussion) was caused by an omission of braces after the 'if' statement.
But no one "sane" would recommend a cPanel host, don't shovel shit at friends..
Opportunities At The Intersection of Media, Ecommerce and Big Data
I think the US Navy wanted some positive press coverage.
"Remember, you have to factor in inflation and equivalent purchasing power."

When people talk about computers getting cheaper, particularly the car comparison that Bill Gates made, they don't factor in either. Low income families in 80s could come up with $100 easier than they can come up with $600 now. Non-techincal parent don't buy their kids refurbished and have no hope of getting a Raspberry Pi in a condition that their kids can learn to program on. OLPC is a government partnership program that has not been generally available in the US except as a 2 for 1.
> no more modern compatible alternative

Sounds like a good startup opportunity.
There are several languages that do fill that gap, but security people never use it. For example, Cyclone is pretty good. (http://cyclone.thelanguage.org/).
The gulf war, apparently. However, that's not the point. If you watch to the end, the officer explains that the cost of one of these slugs is only 25k yet it performs the same role (and more) of a multi-million dollar missile that a ship can only care a handful of.

And boy has the US Military fired a lot of missiles.
Weird. Mexico, Chicago and Argentina[1] have banned them as a security measure[2]. I thought it was the same all over the world.

[1] https://www.schneier.com/blog/archives/2006/08/bank_bans_cel...

[2] http://edition.cnn.com/2010/WORLD/americas/11/18/argentina.c...
Like Rubinius? Or why not JRuby?
Well, while we're tossing out anecdata, the portion of my 2010 graduating electrical/computer engineering class cohort that I am still friends with are all happily employed in jobs that align with our background. As am I. Not saying your experience is wrong or inaccurate, but it's not absolute.

We went to a public state university in New England for whatever that's worth.
"worth every penny if you're the infantryman and the tank is heading toward you"

To bad it isn't cheaper we could give every infantryman two! In all seriousness though if you are an infantryman in a Malaria infested swamp anti-malarial drugs are worth every penny too but the production of those are subject to competition so luckily they only cost pennies a pill and every soldier can have as many as needed. The missile's value to a soldier is not a justification for it's cost and if anything the high cost of something like that is detrimental because if it really is that great it means that not everyone can have one.
I'm sure someone here knows better than me, but the navy's big guns are capable of shooting a 2,000lb projectile 25 miles with pretty insane accuracy. I believe the navy uses these guns all the time. Is sounds like the rail gun will be used for a different purpose than the big warship cannons though.
Kind of depressing how far it is behind all the Smalltalk VMs given the object model.
+1 airvpn, fast and good tutorials for every device
Twitter’s rolling out new user profile pages on the Web
Personally I really like the Lego NXT sets. All three of my younger brothers had the opportunity to use them through after school programs and it was a great introduction to simple programming.

I guess the disadvantage is the higher price point.
At what stage in the process? If you are building CCAs for brassboard prototypes or the final CCA design is still in flux, quality manufacturing is probably a waste of money as you are likely to end up modifying the design and blue-wiring the board anyway. Nobody, including the company, is remotely suggesting that Dirty PCBs is an option for production boards.
Okay, but what about other crypto algorithms not implemented in hardware? Eventually someone has to figure out how to generate machine code that operates in constant time across code paths, and they need a language that will let them do that.
There's "© 2014 Where Labs, LLC" at the bottom of dirtypcbs.com page.

http://www.wherelabs.com/
Uber Rush messenger service brings couriers to Manhattan
anyone who thinks GHOST is a good idea, has not understood Bitcoin at all. the whole point of the blocks is that nodes can work on the global state in a chain. so the idea that nodes should work on greedy subtrees is about the worst possible idea. Bitcoin solves not only the Byzantine generals problem, but a latency variance problem, to achieve logical broadcast. anyway, the author of this paper also believes that "anyone with reasonably high intelligence could have invented Bitcoin by random luck" [1]. well, no. there are many hidden problems which Bitcoin solves. the literature on quorum systems, distributed applications, etc. is very deep.

[1]
http://www.reddit.com/r/Bitcoin/comments/20oyes/brilliant_an...
It seems they don't have any rules against panelization. I wonder if they'll accept panelized designs with slots and mouse bites.
I'm working on a "as static as possible" Ruby compiler as a hobby project, and it's incredibly frustrating at times to see the generated code grow to ridiculous size as I'm getting closer to actually complying with real Ruby semantics... But I do still think there are substantial gains possible.

For starters, for most method calls there's no reason to do the expensive method lookups that MRI still uses - cache or no cache - you can use C++ style vtables, as long as you propagate updates to them downwards when a method is re-defined. You do need to be able to fall back to handle dynamically created methods with names not present when you generate the vtables, and optionally reduce waste (as the vtables needs to be the same size for all classes, with unimplemented methods replaced with pointers to method_missing thunks), but in terms of performance you can do fairly well and compared to this GC blowup, the memory waste would be small.

But there's also not much alternative but going for proper JIT'ing of at least some things.
In the US, a court can also rule that you were de-facto employed. There was a famous case with Microsoft

http://en.wikipedia.org/wiki/Permatemp#Vizcaino_v._Microsoft

This happens all of the time. Large US companies sometimes only hire contractors that have employee status with some other firm to protect themselves.

In the standard test to determine whether an person is an employee, they look at things like who supplies the equipment, who sets the hours, whether it possible for the contractor to have a loss -- most critically in the Uber case, you are more likely to be classified an employee if you do the work that is the purpose of the company.

What that means is that if I clean the offices, I can be a contractor because the purpose of the company might be to make and sell widgets. If I am on the factory floor making the widgets, then the labor dept. frowns on a contractor classification.

These are all just guidelines -- the labor dept or a judge will make the call, but US tax laws incent them to prefer employee status.

(IANAL, but I have served on an employment board, overseeing a US Labor dept regional office)
Bdsm.js extracts dominant colors from the top and the bottom areas of an image
I hope they focus more on their Go client than the C++ one. Something like this needs to be as secure as it can get. No reason to have it vulnerable to memory leaks and such, if they don't have to.
Using Webix with Node.js
> (the Conservatives want to avoid losing too many votes to UKIP, for fear of Labour beating them in the next election).

If only there was some sort of voting system, where people could rank Alternatives so that the right wing voters wouldn't be split... If only...
While it's certainly a good general policy to not abandon significant segments of your user base, this is not a conflict of user ignorance vs developer laziness. The real question is whether preserving IE6-8 functionality is actually a good way to serve your customers. The resources you dedicate to retaining that 10% might be better used to improve your service for the other 90%. Focusing on modern browsers will also help to attract new customers who won't lock you deeper into these technical shackles. While this doesn't have to mean directly antagonizing people, it may involve making the site unusable and 'ruining' the experience for some.
Tear apart a repository: the Git way
Why would you imagine that?

http://www.modern.ie/en-us/ie6countdown

UK, 0.5%, is higher than the US, 0.2%.
This is the more interesting question to me, not "is it cheap in comparison to what it's targeting or the alternatives" but "is it cheap based on the cost of production".

25k for a hunk of metal does seem like a very strange price, perhaps there's something more exotic to it than meets the eye?
Review your code with GitHub Code Review
If you worked at it, you could create this problem in Haskell. However, it is in fact the case that Haskell would be, in its own way, screaming at you; your configuration (or whatever) parser takes in some text and then returns something of type "IO Configuration"... what is that IO doing there? You don't have to be very skilled in Haskell to stop right there and have a serious think about what's going on. And in the absence of IO, or some other really obviously wrong type signature, there isn't much malicious stuff you can do in the parser layer. You could still have a vulnerability by doing something wrong when given certain configurations, but there's not much we can do about straight-up bugs. Even a proof language will let you make straight-up errors, they'll just force you to deeply, profoundly make the error instead of superficially make it... but we humans are up to the task!
GnuCash - http://www.gnucash.org/

Edit: Sorry but no mobile or web versions. But available for Windows, Linux and Mac and is pretty much the most awesomest free accounting software there is.
Their very first argument is "But we also know that kids love playing games, interacting with real objects, and making things."

Childhood should be about goofing off on tricycles, playing tag, and creating awesome Lego towers from a big box of blocks. I love programming now, but if I had started coding as young as the children in the video, I don't know if I'd be as jazzed about it as an adult.

Maybe the kids who play with these programmer-esque type of toys can potentially write better code when they're adults, but is it possible that the kids playing outside, reading the Magic Treehouse, or drawing pictures will be more well rounded, more cooperative, and overall better colleagues?
'Quick and Dirty' never conveyed environmentally unsound. I think you're reaching here.
If you'll state what apps these are, I bet someone here would throw together a web based SaaS replacement in an afternoon. If there's no competition for a business app it's often because no one is aware of the need.
What you're really saying is that we in the software development and hardware engineering industries have completely failed to provide a compelling, positively reinforcing reason to upgrade. In response, you suggest negative reinforcement, take something away from these "people" [1] rather than give them something.

What did I do with my Pentium II 266MHz machine with less hard drive space than I have RAM now? I (played games) | (listened to music + (wrote code | wrote papers)). What do I do now on my quad-core supercomputer? I (play games) | (listen to music + (write code | write papers)).

What code did I write back then? Low level graphics operations in C. What do I write now? Low level graphics operations in... JavaScript. Now, instead of using an integrated debugger to suss out memory leaks, I get to use printf statements to suss out... memory leaks. [2]

We've made computers smaller, we've made them prettier, we've made them take less energy, but we haven't made them particularly more useful. At some point, the PC became Good Enough. And unit sales took a well studied drop.

That might be one of the biggest ironies of the monumental deluge of software patents these days: we live in an era that hasn't invented anything novel in 10, maybe even 20 years!

[1] You do seem to talk about them like they are animals

[2] Progress indeed.
There's a difference between using authority status as a filter to find likely-to-be-valid arguments and using "so-and-so says X is not true" alone as a rebuttal to evidence that X is true. The former is a pragmatic research tool, the latter is the fallacy of appeal to authority.
Could you pls expand on this: "Bitcoin solves also a latency variance problem, to achieve logical broadcast"?
Show HN: Snappy Checkout – Stripe Checkout with full-featured dashboard, admin
He lists the following as big innovations over the last 20 years:

TCP/IP, HTTP, the browser, search, social, mobile, and blockchains.

I know that it's got something to do with Bitcoin, but have no idea what a blockchain is. Wikipedia only references it in a link to blockchain.info, which talks about blocks but not blockchains. Nobody I've asked can explain it to me either.

If it's such a massive innovation (is it?), what is it, and why isn't it easy to discover what it is?
Yes, you have your own censorship law, but protesters now have a legal standing to challenge the law at national level.

Because EU law > United kingdom law.
MongoDB 2.6 Released
Geoforce, Inc. — Coppell, Texas (Local only, some work from home)

We're the guys that track all the things and put them on a map, as long as the things are satellite or cellular devices that report to our servers.

Geoforce is an exciting company where you get to work with:

- Ruby and/or JRuby (Rails/Sinatra/Padrino)

- a Mac or your choice of Linux-powered device

- Ubuntu

- Opscode Chef

- maps and map layers

- front-end javascript libraries like BackboneJS

- hardware: most of our devices are designed in-house in beautiful Bozeman Montana

- lots of binary data

- fairly large tables in Postgres

- SOA

- mostly harmless people

(You don't need to know all of these to apply!)

Also hiring a QA position!

See more details at: http://www.geoforce.com/Our_Company/Careers/
> the smartphone emerging as the platform of choice vs the desktop browser

This is repeated from blog to blog but is it really true?

Smartphones outsell desktops because you change phones every 18 months while a desktop will last maybe a decade or more; but do people really prefer to use their phone if they have a choice?

It would seem to me people who use a phone most of the time are people who don't have easy access to a desktop: young people, or people who don't have a job or whose job keeps them away from a desk (lucky them!)

When I'm around people who use a smartphone, I never see them engaged in anything more complex than listening to music, texting, or playing some super-simple game such as CandyCrush; they're never "browsing" anything, searching, writing, composing, etc.

So if you're doing social or communications, sure, mobile first makes a lot of sense, but how about other domains?

Do people use Github from mobile platforms? The Github app for Android apparently has "100,000+ downloads", which doesn't seem like a lot?

It would be interesting to know the numbers for Github (for example), of mobile vs. desktop usage.
Look great! We're currently not using Angular on our frontend, but this looks like a great way to squeeze more juice out of Bootstrap. I'll definitely check this out for future frontends :)
I can imagine him flipping the bird and saying fuck you to his haters. In fact that's what I'd expect. And that's why we love him...
This kind of progress saddens me. Who is going to be the target of this weapon? Also think in all the human and material resources involved in creating this, i can't help thinking how many "good actions" could be done instead. How many medical supplies, food and clean water could be distributed with the $$$ used in the development and usage of this.

I'm probably just a naive pacifist, but I think the world would be a better place if Americans stop producing weapons. Especially of this kind.

I appreciate the amazing science behind the nuclear bomb, drones or railguns, but i would rather keep it on the scifi parcel and wish the were never created for real.

Again, I'm probably naive.
tl;dr version ->
If you are concerned with the U.S. government seizing your domain get a TLD from Switzerland(.ch)
Since March 2013, I've been working on building a payment system to sell products for my business. It started out as a modified version of Stripe Checkout. And, from there, I bolted on a full-featured back-end to manage the checkout and collected payments.

I named my payment system "Snappy Checkout". Here's an example of how I use it on one of my websites:

https://www.snappycheckout.com/pay?E13DZ319DJ1SJCNDH2JDP1

After adding a few lines of JavaScript, the checkout can also be launched directly from any website that uses HTTPS.

Here are some differences from other checkouts I've used:

- Both Stripe and PayPal payments can be accepted. I prefer Stripe over PayPal (API-wise), but I didn't want to switch soley to Stripe because a lot of people still like paying with PayPal.

- When a payment is received, a number of checks are run to determine if it's possibly fraudulent. I'm using the term "possibly" because it's hard to programatically determine a payment is fraudulent at 100% accuracy. So far though, I've found Snappy Checkout's detection to be accurate when scanning payments that I've received.

- If selling digital products, files are stored in your own Dropbox account. I suppose there could be pluses and minuses here. But, I prefer to allow people to control their own files.

- Snappy Checkout offers a variety of payments -- including one-time payments, discounted payments, subscriptions, subscriptions with a trial period prior to the first payment, and the option to split a payment over several months.

- Both Stripe and PayPal payments can be viewed, searched, and refunded from the Snappy Checkout dashboard.

- The cost is 2.9% + 80¢ per sale. Most people are charging a percentage of the sale price on top of the credit card processing fee.

I think others will find this can work for their business too. What do you think?
FYI, this sentence refers to https://en.wikipedia.org/wiki/Warrant_canary which provides a legal way to bypass criminal penalties for disclosing information.
10 Amazing User Experiences
The Consumer Internet Feedback Loop
You can use the "useNative" option, `data-use-native="1"` to active a fully native component if available (iOS/Android).
Is it 2010 already?

http://www.cnn.com/2010/TECH/03/04/ie6.funeral/
Stuck at level 13 :(
so they've been at it since 1978. how this "tradition" have not been abandoned many years ago is beyond me.

https://en.wikipedia.org/wiki/April_Fools%27_Day_RFC
Show HN: Growth hacks and UX for startups
Charlemagne’s DNA and Our Universal Royalty (2013)
That at best makes this the exception to the rule, and is a drop in the ocean. Yeah, it saves money. Kinda like cleaning a needle makes it more safer to inject heroin you found on someone who died of bad heroin. Technically, this is true, if you accept a few premises I personally don't buy into.

Do you really think this changed:

The business of buying weapons that takes place in the Pentagon is a corrupt business - ethically and morally corrupt from top to bottom. The process is dominated by advocacy, with few, if any, checks and balances. Most people in power like this system of doing business and do not want it changed. -- Colonel James G. Burton

And it also doesn't change the fact that how much value something destroys doesn't increase the value of it. If anything, it's how much value it protects that does. There's generally tax payers and demagogues on both sides, fucking their own populations much harder than their "enemies", and the more value gets destroyed in that process, the sadder the outcome for humanity. Exactly because it's all mostly a racket, such a mythos of heroism and adoring the technical excellency of it has been created, and because it's so shameful, people defend it so pettily, and uselessly. Like I would care about downvotes when speaking my conscience.