skysight-inc/HackerNews huggingface dataset:
> I find it troubling that so many people are alright with signing away their personal rights. The employee individually isn't obligated to the company

The employee and the company are obliged to stand by their agreements with each other. The time to negotiate the terms of the agreement is before you sign it, not after.
That only works for consecutive integers, not any arbitrary values.
What drew me to #4 was the baiting headline (Google dev explains...)
'Over the hill' officially begins at age 24 for Starcraft 2 players
Greg,

Thanks for the reply. I was thinking to have a standalone service that is clearly demarcated from the host publisher. I wouldn't store passwords, I would simply serve as an authenticator for websites that would use the service as an alternative to the standard oauth provider from twitter or facebook, etc. The issue is that I would probably have an app on their ecosystem to facilitate the process.

BTW, brnr.me sounds like a great service.
As a matter of principle, it's true that a number cannot be stolen. On the other hand, in some contexts obtaining a copy of a secret number can allow a thief to steal a resource such as money, which definitely can be stolen. I'm not quite sure what to use instead of the shorthand 'stole Social Security numbers'; while strictly inaccurate, better alternative phrasings don't immediately jump to mind.
I'm not disappointed by a fairly uneventful report, but quite honestly, I'm always a little bit worried when nothing horrible is discovered in the course of testing.

It's not that I want there to be bugs, but that in a large enough codebase, there's always a game-over bug -- major information leakage, arbitrary code exec, whatever. As a security consultant, I'm always more confident in a test when I find a horrendous bug than when I don't; I know that bug will be fixed, and it makes me feel like the test is more complete, even if I know full well that I did the test to the absolute best of my abilities regardless.

I've heard similar sentiments from most testers I know.
If we can replace organs at will, its logical to believe that somewhere, inflicting grievous harm as punishment is going to become common.

If someone's lung or heart can be replaced in a day, do your qualms about stabbing someone in the chest go down?
In The Rocket Company book they use a "pop up" 1st stage, so there is no downrange to contend with for the 1st stage. The 2nd stage then is basically a "cheating SSTO" that gets to start in vacuum. So their setup was TSTO. It was also massive, but only put 5000 lbs in orbit.

The Rocket Company has other similarities with SpaceX. Kerosene open cycle engines. Aluminum construction with friction stir welding. Company started by dot-com tycoons.
This is exactly what I've been looking for!
No source code for the test framework; can't see how the code is called. If there are repeated calls through JNI, JNI transit time can often be a significant factor.

How many times through the benchmark? Did the JIT get a chance to warm up? Caliper provides a framework that can be used to properly assess performance.

There's no benchmark here without seeing a more complete picture.
Under what authority is "We own everything you do in a related market" the default condition?

From what I understand on this kind of stuff, it's completely determined by what contracts an employee has signed. "We own everything you do on company property or with company equipment" is basically universal and things done at your job are understood to be works-for-hire, but a company can't just claim "We own everything you do in your free time if it's related to computers" unless the employee has agreed to that in a contact. Am I wrong here?

For your Google example, I would assume their review framework was set up by an agreement with the employees. I had an offer for a job where I was told "Anything you do on your own time is yours. And if you want to put that in a written agreement for a particular project, we're happy to." From what you say, maybe Google doesn't have quite as lax an approach, but their ability to decide what you can and can't work on must have been specified in an employment contract.
How to layer context into your features using real narrative
pcwalton mainly works on web browser development (Servo), which whilst sharing some goals with game development, also differs in some respects. Although online security is more and more important in games these days, the real appeal of Rust in respect to game development is in providing an alternative to the 'death by a thousand cuts' that can plague large C++ projects.

I've posted a list of the things I consider the most relevant to game development: https://news.ycombinator.com/item?id=7587413 Any one or two of them alone wouldn't really be a compelling enough reason to switch, but put together they form a very compelling value proposition.
There are ways to do stupid things in any language. I don't think anyone would ever tell you that redefining an integer as an object and overwriting its prototypes is an acceptable way to solve...any? problem.
How I got a guest post with The Next Web
I arrive at the same conclusion... My girlfriend loves to watch "The Joy of Painting," yet she doesn't paint.

It's got to be his soothing tone.
I don't know about an API, but there's an export to KML download link

https://maps.google.com/locationhistory/b/0/
Talking to your employer solves nothing. Many times people will renege on verbal agreements to allow things, either because of inflated concerns about liability or competition, or simply out of ignorance or spite.

I don't wish to exposed to those legal possibilities. It's just not acceptable to me.
> TBH, it never would have even occurred to me to work on an open-source project that directly competes with what I do to pay the bills. I've got a noncompete, of course, but even without that it strikes me as a violation of basic business ethics.

It takes an extraordinarily broad definition of "compete" to apply that to this situation, though. He works on an internal CI system at his company. He makes an OSS CI system in his spare time. Since these things have different uses and one is merely an incidental tool that his company uses to acomplish actual goals, he is not competing with his company in the sense that normal human beings would use the word. (Similarly, no sane person would look at someone sewing an apron at home and say, "Wow, that person is competing with Home Depot because their workers wear aprons!")
Could they land on a modified cargo ship? That way they could also use the ship to ship it back to the port of origin.
Indeed, it does. I found the bit about the chimneys interesting. His denial of society in his paintings and focus on nature was new to me, as I never had a comprehensive analysis of his work. This could be related to his time in the army.
Show HN: Ulaxi calculates whether UberX, Lyft, or Taxi is best for your trip
I set up something similar as a honeypot, to see who was out scanning. I made the heartbeat response "leak" a fragment of an HTTP request with a username and password, as well as a (freshly generated) DER encoded RSA private key. For fun, I also set up a second honeypot elsewhere that returns ASCII art [1].

Sadly so far I haven't gotten any nibbles. I think I set it up a bit late though (Thursday evening) so perhaps the mass scans had already given way to targeted attacks.

[1] https://twitter.com/moyix/status/453760960671383552
Tesla vs. the auto dealers
Citation needed.

Ford seems to have really cleaned up their act the last 3-5 years. I'm still a bit wary of Dodge/Chevy/GM, but have been super impressed with Ford. Granted, Ford did stink it up something ferocious in the early-mid 2000's.

Completely anecdotal, but we bought a 2012 focus last year and have been incredibly happy with it. Far more than with the Honda Civic it replaced. We run the wheels off our cars, and it's been a real trooper. Good gas mileage, easy to work on, cheap to repair/maintain.
I used to change oil at a mechanic located next to Safeway parking lot. Almost always oil change took less time than shopping for weekly supply of groceries.

Now my employer has mechanic working out of work parking lot bi-weekly - I just leave car with him in the morning and pick it up in the evening. It's even more convenient and slightly cheaper.
> "Coding" will never go away before AI because at some point you need to formally express the design you have thought up. It doesn't really matter if you do that with arcane syntax, symbols, or "natural" language.

It sounds like you are saying, and I'm not disagreeing with you, that the act of speaking required coding.

That is, speaking is taking input from the senses and memory, converting that input into a natural language (coding/encoding) through thought and saying the final thought out loud.

How does this help in understanding the differences between typing out syntax, manipulating symbols, expression using natural language or AI using it's own coding approaches?
CljPerl: A lisp on Perl
Top-10 app vulnerabilities and workarounds
Heartbleed hacks hit Mumsnet and Canada's tax agency
This is my first program in a decade - programmed a bunch in high school but fell away in college / post college.

Eager for feedback on UX & code structure :).
Isn't that early for the transmission to fail?
Yes, I know, which is why my comment was specifically about clauses in which employers claim ownership of side projects and other out of scope productivity. Please track back up-thread to see the comment I was responding to.
Don't forget Tesla's guaranteed resale value.
It's interesting that you should mention smell, since I was born without a sense of smell - the term is anosmia. It is very poorly studied, and most studies deal with people who lose their sense of smell due to neurological diseases or head trauma.

In my case it's clearly genetic (my mom and her dad both can't smell), and almost no one studies it. From what I've read I'd much rather be born without a sense of smell than lose it, since that can be very traumatic.
One important thing to realize about the PoC -- if you change "40 00" to "FF FF" or similar, it may seem that you still only get 16KB back. In fact (in violation of the TLS spec) OpenSSL is just fragmenting heartbeat message into multiple packets. If you modify the script to read and print heartbeat responses in a loop, you can get the full 64KB mentioned in the advisory.
Anything that I do with my time, my equipment and my brain outside paid work hours belongs to me.

Other things being equal, I would agree with you. But it seems like other things are far from equal in this case, because the project in question is in exactly the field that its author was being paid to work in by his employer.

If any related work that (the employee says) happens outside office hours belongs to the employee in that case, what is to stop someone from simply claiming that any good idea they have on the project their employer pays them to work on happened at home after hours, the prototype code they wrote to implement it also happened away from the office, and therefore they assert the rights to it personally and the employer had better pay them whatever they want or be prevented from using exactly the work they are already paying the employee to do for them?

I find it troubling that so many people are alright with signing away their personal rights.

So do I, but contracts are two-sided deals. The other side here is that software developers are typically paid a significant amount of money for their work already, and it seems fair to me that the person paying that money would expect clear rights to what they're paying for in return.

There is nothing to stop the employer and employee from incorporating some mutually agreeable condition that makes clear how the projects are split and who will get which rights, assuming such a mutually agreeable condition can be found. But as others have noted, for something that is so directly related to what an employee works on by day, there is an obvious conflict of interest.
This is either the best or worst thing to ever happen to Perl...
I've found that employers are quite accommodating when an employee asks for permission to do a side project. Even if you're not obliged to, it's a matter of professional courtesy.
Shadow DOM CSS Cheat Sheet
Is this a good replacement for Illustrator? I need something that allows me to edit and create vector logos, etc.

The other option I'm looking at is iDraw.
You're absolutely spot on. Sadly you are getting downvoted for it.
iOS, PS4, and XB1 are missing.

I know it's not your point, just providing some answers in case someone is wondering.
Startup Rounds
Startup Rounds - Crowdfunding contests. Product and service focused startups can offer rewards in a 'contest format' to gain market validation + win prizes and resources extending well beyond the campaign. Only the best selling startups advance through the rounds, enabled to continue their campaign.
I do not think this is significantly new as it has been documented in the official TC source code and various 3rd-party source code (TCHead, tcplay, etc.) for many years.

I was the first to crack the majority of the TrueCrypt volumes in the 2012 Defcon - Crack Me if You Can password cracking contest using TCHead running on an old Intel Celeron processor.

Write-up: http://16s.us/software/wm/Defcon/cmiyc_2012.txt

Contest Page (3rd table down): http://contest-2012.korelogic.com/stats.html

TCHead: http://16s.us/software/TCHead/
Do you know how fast the Falcon 9 1st stage gets? Judging by the video animation of their long term re-usability plan, the 1st state separates before it achieves a velocity necessitating re-entry.

https://www.youtube.com/watch?v=kJrFwxE3lzI

Is this video incomplete? Will both the 1st and 2nd stages will actually require re-entry shielding?
Which is:

"Tesla’s Resale Value Guarantee allows owners to sell their Model S back to Tesla between the end of months 36 and 39, regardless of the loan’s term. The resale amount is specified at the time of delivery and is forecasted to be higher than any high volume premium sedan brand (Audi, BMW, Mercedes, Jaguar or Lexus). This value is equal to 50% of the original base purchase price of the 60 kWh Model S plus 43% of the original purchase price for all of the options, including the upgrade to the 85 kWh battery pack (exclusive of taxes, fees, and accessories)."

More here http://www.teslamotors.com/financing/faq
I'm wondering the same thing. Is Pixelmator + Sketch the best indie alternative to Photoshop + Illustrator?
I didn't see the first episode (and hence the whole show) as clever really. Full of rehashed clichés.

Is there even one semi-likable character on that show?
It usually means that, but not necessarily. Unreal Engine 4 does a $20/month subscription where you can stop paying at any time and just keep using the version you have.

Maybe they do that because it would be impossible to enforce anything else (paying one month gets you the full source code), but it's still great that the license allows it.
McKinsey’s Michael Chui on How Tech Transforms the Economy
First Look – VMware Horizon DaaS
This is totally brilliant -- nice find.
Right, but the Odyssey would be cheaper to insure in your area than a Tesla (theoretically).

Insurance costs are very localized, but for any 2 vehicles the coverage cost spread between them is probably comparable in any given region. EG: an Odyssey will always be cheaper to insure than a Model S in any specific region, BUT insuring an Odyssey in Toronto might be more expensive than insuring a Model S in Tulsa.
Notes from Hiten Shah's Talk at MicroConf 2014
Not for that generation of Odyssey. My parents have one and the transmission just had to have major work at around ~130k.
NY and CA have laws that limit the scope and length of valid non-compete agreements.

In many other states, wide-ranging, long-term non-competes are practically universal. Personally, I've been asked to sign contracts that would effectively ban me from working in tech, period, for two years after departure.
Takipi may be of interest. It's only for JVM languages though - I'm not sure if equivalents exist for other languages.

Otherwise, look at building (or find existing) tooling on top of Log stash.
I think there are a few cases of non-transitive equalities in JavaScript, specifically around falsey values. Part of it also has to do with whether x is the right-side input or the left-side input, because that changes type coercion rules.

Aha, found one:

['0'] == 0
> true
[0] == 0
> true
[0] == ['0']
> false

Transitivity of equality can also never be relied upon when dealing with Floating Point numbers. This is correct and unavoidable behavior, but still surprising to many developers.
There are limitations to the rights you can sign away and agreements you can enter into. For example, you cannot agree to work for less than the minimum wage, and any contract of that form is not binding.
High for just the Odyssey or higher for all cars in and around Toronto? Collision insurance is usually based on the cost of parts and service. I would be surprised if the Tesla came in cheaper.
> a password of length 40 would cost $200K to crack

I'd love to see someone try. Here, an md5, those are super vulnerable right? This is a 9 character password. Piece of cake if I should believe the news.

f1f107c27cae21b5b5b01002e9c9ead8
there you go:

http://www.artic.edu/databases (TONS!)
http://www.nga.gov/content/ngaweb/Collection/paintings/all-p...
"Convert" is ambiguous. When you read the text "<head>" from a template file, you probably want to represent it as the HTML "<head>", but when you read it from the database, you may, or may not want to represent it as "&lt;head&gt;".

People started using the word "sanitize" exactly because it conveys that information that "you want to treat it differently, depending of where it comes from". We also use the words "dirty" (sometimes "tainted") and "clean" conserving their usual relations to "sanitize".

Now somebody wants throw away a very concise and expressive jargon just because some people are giving bad advice on the Internet?
TurboTax Maker Linked to ‘Grassroots’ Campaign Against Free, Simple Tax Filing
Maker Studios Says Disney Acquisition Is Approved by Shareholders
I'm not sure about the American bias, as I see tons of non-US cars in the sedans list, but their truck ratings are a travesty:

http://autos.jdpower.com/ratings/quality/trucks.htm

I have been utterly unimpressed with the Silverados and Avalanches. For that kind of money, I expect a lot more than fragile/cheap interiors (Silverado) and the crummy bed on the Avalanche.
Two ideas:

1. Would be labor intensive, but:
a site (blog?) that talks to people/experts from various industries, quizzing them about problems they face in their daily jobs. Some of these might be solvable by software. It doesn't need to be too detailed, but it would help if it is totally outside of the usual tech stuff - the quirkier the better.

People can pick something from the blog, instead of building yet another project management app.

2. A website that asks a series of questions (skillsets, weather preferences, languages spoken, food preferences, age, educational qualifications etc) and suggests countries/cities to move to. Should also take into consideration special visa privileges (canada-us, nz-aus etc). It would be quite tough to keep the data fresh, for an app like this. but this would be immensely useful, and it can be monetized too. Even if done narrowly (ex: only for software people), it would still be very useful.
The slightly obscure music programming language SuperCollider [1] added co-routines about 10 years ago and they became one of my beloved techniques. Was very glad to see them come to python and soon to mainstream javascript.

Boost has a c++ implementation but it looks quite different:

http://www.boost.org/doc/libs/1_55_0/libs/coroutine/doc/html...

[1] http://supercollider.github.io

edit: pythons new asyncio stuff looks very interesting:

https://docs.python.org/3.4/library/asyncio-task.html
CryptoTipIt – new way of sending tips and spreading Bitcoins via e-mail
I've been using the ssh -C -D 8080 -fN user@server.tld for years now, no VPS needed if you use a free shell account.

Free != lazy

Also, lazy people dislike having to manually configure their web clients.
Several suggestions?
You may wish to listen to Grayson Perry's Reith Lecutres from last christmas. He talks, amongst many other things, about how "beautiful" is apparently the worst word you could possibly use to describe a piece of contemporary art. It shows that you are using the wrong set of criteria, by postmodern standards.

Theoretically, it's meant to be judged by the statement it makes. However, the most interesting thing about the lectures is the episode where he explains what makes art Art. Spoiler alert: quality, aesthetics and concepts have nothing to do with it. Something is "Art" (as in saleable product) only if somebody from a tiny, moneyed elite says it is, and for no other reason. I found this frank admission quite startling.

http://www.bbc.co.uk/programmes/b03969vt
I mean "sanitize" as in "clean up" (as in "remove 'special characters'"). If you use "sanitize" to mean "encode as" (as in "replace '&' with '&amp;'"), then there is nothing wrong with that, I would just suggest that you don't call that "sanitize", because that is highly confusing, if you look in the dictionary what that word normally means.

Assume a user uploads a TIFF file to your web application. Browsers don't understand TIFF. So, in order to display it on a web page, you convert it into a PNG. You wouldn't call that "sanitizing it for PNG" either, would you? For the same reason, you shouldn't call it "sanitizing" when you convert plain text to HTML.
I like OG for a lot of simple things, but it's not really designed for fancy graphics but I do use it.
These are not patterns unique to Haskell. In fact, it's just the opposite: these are mathematical abstractions, and so they can be used anywhere that you have use of function application, in stark contrast to the alternatives. By using these patterns instead of Ruby or Javascript-specific, Application-specific, or Object Oriented-specific patterns, you can be more confident that your abstractions will be consistent with eachother, and as a result, more composable.

Case in point: I'm currently developing in Javascript, but I use these patterns (Monad, Applicative Functor, etc) to manage things like asynchronous code and error handling, because they're far more flexible/composable and reliable (in terms of not having side effects) than the other offerings on hand, and I know that will always be the case, because these abstractions were designed with the constraint of composability in mind: in fact, they are, by definition, the minimum set of constraints required to get these emergent properties. The benefit that Haskell itself offers is that it can check at compile time that these constraints hold true.
"After 5 years/70k miles, the battery will probably still be at 95% capacity"

No way. I'd say you have 75% tops (probably less with 70k miles). And unless you pre-buy a new battery you're going to be looking at a $20-30k replacement cost. Also note that it will likely be out of warranty at that point. And that Tesla values them at roughly $1 per mile (the price they give you for purchasing a loaner).
Sketch is more of a replacement for Fireworks than Photoshop, as in its purely a vector design tool and therefore much better suited to web design. I never really understood why so many people used Photoshop for that task.

If you're looking for a replacement for Photoshop though id recommend Pixelmator.
> "sheer force" would be twisting the tumbler so hard you break all the pins

That's not how I read it... The best gloss of "sheer" in this context would be "pure", which would mean something like "force, devoid of any other tool or method". Like, "I moved the rock with sheer force" would imply I just pushed it and didn't use a lever or anything.

(You are correct that it's the wrong word choice, of course; the above is not what the author is meaning to say.)