skysight-inc/HackerNews huggingface dataset:
I'd suggest that Plan A would be just to throw the money at HackerOne, as a donation to their Internet Bug Bounty program https://hackerone.com/ibb which is already set up and running.
Marketing and politics.
AT&T, Sprint and Verizon omit download booster from their Galaxy S5 variants
They're serious about it, too. They're getting it to work under 128MB:

https://wiki.mozilla.org/FirefoxOS/Tarako
>No, they are often a good thing, but they are not a good thing in just about every case. Like any tool used for programming, you use them when the cost-benefit works out.

Can you offer an example (besides exception handling) where high level flow control concepts reduces readability or increases potential for bugs? I honestly can't think of any.

While I understand the empiricism argument, I'm not sure thats enough to sway me. People can be "easily" enough taught not to swallow exceptions. Also the explicitness of swallowing makes catching it during code review extremely easy. Actually I'd be surprised if lint tools don't already pick it up.

High level flow control concepts communicate intent, which then makes detecting deviations from that intent easy enough for tooling to catch. This is always a win. Without high level flow control, one has to deduce intent from more primitive units, increasing cognitive load and increasing potential for bugs.

Even if I were to accept that the tendency for abuse makes checked exceptions a worse case, I don't see how in-band/manual error code checking is superior to unchecked exceptions. Uncaught exceptions provide much more context and they're tied to the point of inception. Ignored error codes have a tendency to cause problems downstream that can be painful to trace back to their origin. (Unchecked) exceptions seem like an obvious win here.
They're also targeting low-memory handsets which Android is excluding.
This "don't break the chain" approach has worked extremely well for me, particularly during busy periods of high stress. I first learned about it in my college writing classes, where you're supposed to write something, anything, meaningless jibberish even, every single morning. Recently I read about Seinfeld using this approach to great successs. Every day he works on material, and puts a big, fat, "X" on the calendar.
Large-scale graph partitioning with Apache Giraph
I guess they don't teach you that until Entrepreneurship 102.
The problem with OpenSSL is that it's really problematic to simply fix and refactor stuff given their FIPS certification.
From the FAQ:

How does NSS compare to SSLRef?

SSLRef was an early reference implementation of the SSL protocol. It contains bugs that were never fixed, doesn't support TLS or or the new 56-bit export cipher suites, and does not contain the fix to the Bleichenbacher attack on PKCS#1.

Netscape no longer maintains SSLRef or makes it available. It was built as an example of an SSL implementation, not for creating production applications.

NSS was designed from the ground up for use by commercial developers. It provides a complete software development kit that uses the same architecture used to support security features in many client and server products from Netscape and other companies.
So in other words, become a FB/Twitter/Play/App store and put yourself at the top of the pyramid. Now you get to be the company changing the API and banning users, but we still haven't actually solved the problem for the users of web services.
So until they day we can universally hold all politicians to account, we should hold none of them to account?

I agree with you that all of these people should have their political records examined when they join corporations. Supporting this action is a starting point to have this become a more widely used tool.
Do you have any information about pricing?
Stating whether FTL communication is possible at all may require hedging. Stating that it can't occur over quantum superposition does not, as I understand it. The math is clear; there's no information traveling. It does not matter how sophisticated our quantum computers get, there will not be any FTL communication coming out of them.

If we could do that at all, we'd almost certainly be able to to it today, anyhow. We have multi-q-bit QM computers, they just aren't of a practical size for computation. But if FTL communication was possible, it would have been done with them already.
That's interesting; I never thought about the QA angle. Maybe you can say a little more about how that works and what companies?
Especially when they actually listed 167 names
He might think they're stupid, that's not hard to believe. What's hard to believe is that he's altruistic enough to work on a huge open source project, but not enough to inform someone else of a hole that would affect a lot of people.
It's a pretty popular anti-activism stance, yeah. Unless you're an ascetic hermit who makes your own toilet paper, you're not allowed to protest anything without being labeled a hypocrite.

And of course if you do become an ascetic hermit, then you're just a crazy hippie.
Particularly if you use coffeescript, mixen can be a more capable option: http://github.hubspot.com/mixen/
The magnitude is absolutely irrelevant. Hypocrisy is hypocrisy, and the core issue here is whether or not people have the right to boycott a product over the beliefs or actions of the people who are associated with the product.

If I believe that cars are causing global warming, I have the right to boycott the uses of cars and to publicize it. If I believe that eating meat is wrong, I have the right to boycott meat and to publicize it. If the CEO of a company supports a campaign that I believe infringes on human rights, I have the right to boycott that product and to publicize it. If the company of a product I use adds a person who was involved with what I believe was an unjust war that killed hundreds of thousands of people, the I have the right to boycott them and to publicize it.
An important change that I made, compared with these techniques, is that I require myself to write meaningful code. It's certainly much harder to do that but as a result I find myself developing good time management skills. Knowing that I have to be mentally "present" for my work forces myself to schedule and plan my days better, resulting in higher quality work all around!
it's more accurate to discuss NaCl since that's what libsodium is. NaCl is the combination of crypto primitives and the "box" abstraction. libsodium is just the repackaging and clean-up of the original NaCl implementation. If you're discussing crypto, you're going to be looking at the papers on NaCl.
I work for EMC. Do we know if this will retroactively apply to existing contracts?
> NSS has more institutional constraints; random people in Germany can't, as a general rule, add support for new TLS extensions to it.

This is horrible for a large scale open-source project. Glibc, gcc, as examples. Trying to get them to fix their broken crap or reverse their idiotic decisions takes decades. If OpenSSL is less opposed to change, it's probably a good thing, considering the purpose of it.

> NSS has a clearer identity, as the TLS core for Firefox and Chromium. OpenSSL is a grab bag with hundreds of different stakeholders.

Do you not remember the myriad bugs that came out of Microsoft's, Netscape's and others' independently-developed SSL implementations when their only relevant benchmark was their own tools? They didn't give a shit if it broke someone else's tool because they didn't make it to support someone else's tool.

> The most important code in both NSS and OpenSSL is the SSL state machine. The code for that state machine is incontrovertibly clearer and better expressed in NSS.

So clean up the OpenSSL code! If your previous claim that it's easy to get code into OpenSSL is true, fix it! Don't throw the baby out with the bathwater!

> NSS has had better battle-testing as a clientside browser TLS library than OpenSSL, which, apart from Android Chrome, isn't a big factor in TLS clientsides.

OpenSSL is used in hundreds of TLS clients in all kinds of environments around the world. It's the de facto client library for 90% of open source tools. As opposed to whatever environments run NSS applications which is far fewer.

It seems like these are arguments for OpenSSL, not against it.
why do people insist on making candidates write code on whiteboards anyway, its the exact opposite of 'right tool for the job'
$1.50 CPM... haha!! And its capped @ $3000? There are tons of ways to make much more if you have any decent traffic.
I honestly don't understand the point of markdown.

* this* isn't any easier than <i>this</i> to me.

Of course, I may be biased.
Glad to see Mozilla pushing ahead, putting the Brendan Eich story behind them.

I bought the ZTE Open and am rooting for them.
I deeply support people's right to talk about these things, boycott, and so on.

I'm even in favor of talking about moral issues here. As technologists, we bear a lot of the blame for many bad things that go on in the world. Too many times we like to feel like we're somehow above the fray.

My problem from a system standpoint is that we're starting to see a trend of engineering these things. Person X joins tech company. They get googled -- or they're just controversial. Then I got the top 3 spots of my HN feed full of Person X.

If it happened once a year it'd be one thing, but I'm feeling like this is going to be a new trend for us, and frankly, that's bullshit. The goal here isn't to have a conversation, it's to form up into little groups and go to war with each other. It's manipulative.

Nobody is going to read this thread and suddenly decide "you know, maybe I was wrong about that Iraq war decision all along" We're in cable news land, where we just want drama.

Today was the first time I actually felt that HN actively didn't want me here.

That's not the community I joined.
Please put your app on F-droid
Gamer makes $100,000 selling in-game items on SOE Player Studio
The aurora language seems very interesting. Too bad there is already another language called Aurora...

I makes me think of Elm [1] and (functional) reactive programming. Reactive programming is fantastic. It's kind of like how a spreadsheet program works. If a variable changes, all variables who depend on it change as well. Given "a = b + c", if c increments by 1, so does a.

It has many advantages over event based systems, like Javascript. Reactive programs don't need callbacks. The changing values propagate the "event" through the system.

I'd love to hear what you guys think about this direction of programming. It seems very natural to me.

Edit: I also see reactive programming as the golden way of having changing state in functional languages. Functional languages have no problem with data or state. They have a problem with change of state. The reactive paradigm solves that problem. All change is implicit and code can be exactly as functional as before.

[1] http://elm-lang.org/

[2] http://en.wikipedia.org/wiki/Reactive_programming
Hey there. The main difference is that Fanout is invisible to clients. You explicitly choose the data transports and formats. This makes it well-suited for fronting public APIs, since you're in control of the interface. Our codebase is also open source.

This article goes into good detail about the reference implementation for our HTTP transport:
http://blog.fanout.io/2013/04/09/an-http-reverse-proxy-for-r...

Although it could be made more apparent, we have Python and Node libraries in our GitHub: https://github.com/fanout/

Also RealCrowd developed a .NET library: https://github.com/realcrowd/grip.net
The same question probably was asked when IE had >90% of the browser market, Microsoft controlled the distribution channel of the default desktop icons for >90% of computers, nobody (except people reading this) had heard of "Mozilla" or "Firefox", and Mozilla had many fewer resources.

At least now the public has heard of Mozilla and Firefox, they have hundreds of millions of users, and they have some resources.

They still have a tough road ahead. If you are reading this, and you care about the open Internet and end user control, consider helping out.
Does their website say they support COBOL? Did I read that correctly?
Soooo If I can't commit fully to supporting only ethical tech companies I should either retreat to the cave or lose the right to boycott any tech products? Is that an argument that you are making? If yes, that's just ridiculous.
How many development hours have been wasted because of Python 3, Perl 6, Lua 5.2, any new Django version, Ruby 1.9, Rails 4, jQuery 1.9, Bootstrap 3, etc. ?

Backwards compatibility is as simple as not wasting everybody's time. It should be high on the priority list, right under security and above performance. I like Linus' stance on the issue and I'm sure every developer dealing with syscalls appreciates it as well.
Ask HN: Get started as fast as possible with blogging?
I have some ideas that I want to write about, and I want to start a blog writing about stuff, kind of like many HN posts. According to you guys, what platform should I use? Keep in mind that I want it to be simple, but it should handle, for example mathematical formulas with MathJax (although I guess that's easy to do on most).
Workplace Dispute Brewing? Measure it as a safe way to start to change it:
You are looking at the end results only, not the goals, the efforts taken by both sides before the result. With regards to health care, the Democrats have been expending huge amounts of political capital over decades trying to move the health care system towards single-payer, while the Republicans have been resisting such change. The Democrats finally succeeded with Obama's reforms, and Republicans have been desperately hoping it will crash and burn, and repeatedly trying to or threatening to repeal it given the first chance they can; they even tried to get the Supreme Court to declare Obamacare unconstitutional. Your claim that both sides want the same thing makes no sense.

The direction the parties are pushing policy towards are what makes the party. Remember when Bush tried to dismantle Social Security, to the cheers of practically no-one?
Rice's views on internet privacy, in light of her support of bulk data collection, are legitimate concerns for her appointment to the board of a company like DropBox.

The war criminal stuff, though, is just pointless. We're all war criminals for supporting this or that candidate. It's just more shades of Eich, grist for purists, but irrelevant to a decision to continue using or boycotting DropBox.
Even easier, I would bet a lot of money that they have at least some rudimentary static analysis tools to detect potential targets, and this sort of memory error is pretty low hanging fruit for such a tool. To me it seems almost certain that they knew about it and they certainly exploited it if they knew.

The bigger question to me is how many of these bugs have they rooted out that have not been made public yet?
One of Go's major features is that any particular function is very easy to reason about. The code is very straightforward, there's very little magic, and the code usually does exactly what you expect it to do, even if you're not an expert in the language.

Rust seems nice, but its multitude of different pointers and mutable versus non-mutable data really makes for complicated code.

I work on Juju. It's over 200k lines of code spanning several applications that coordinate across multiple machines. The number of times generics would have helped the codebase I can count on a single hand... and none of it is huge stuff, just some very minor parts of the code.
Dropbox: Close, but no enterprise
"Because you need to earn a living for one thing. "

Then make a better product, a more valuable product.
Really excited about the new sidechains concept. Can't wait for the first attempt.
That's right, and well put.
"No more zero days" is a good quote to live by. No matter how busy I get, I try to code something everyday.
This makes me wonder what will happen with the level of security in NSS, now that Google is quitting it. Can Mozilla keep maintaining it properly on its own?
Did you file a counter notice? I understand it's a simple form and doesn't take too long.
There was recently another post on HN about Machine Learning that was also presented on Wayfarer, the UI for this website is very confusing and many of the posts in that submission were also:

* I don't know how to use this / using this is actively painful
* Is this content sponsored by Wayfarer or just hosted on it?

Not sure what Wayfinder's use case is supposed to be? Also wayfinder.co has no about page or actual content to speak of.
If you don't like it, stop contributing and start your own forum.
Right. I work in a position where I am somewhat responsible for decisions such as whether to use AWS or not, which at other companies has been a different decision such as what hardware to purchase and where to install it.

This is a difficult situation to balance, because what you are suggesting, from my perspective, ends up being about saying, "I will quit working here unless we quit using Vendor X!" - that will end predictably, and I have lost that fight over GoDaddy as well. At the end of a day of following such a philosophy, I have no job, the Evil Vendor(tm) still gets their money, and I have to explain to people at Next Potential Job(tm) why I don't seem to be a team player.

That said, these are important fights to fight at some level. When I was dealing with hardware, I found many of our decisions frustrating. I found it frustrating that we cared about the USD$ cost of power, and not the environmental cost of it. I found it frustrating that we turned off almost all power saving features of our hardware because they don't deliver as one would hope and tend to harm the workload in a way that may actually require more gear which is expensive, has a carbon cost to manufacture, and has a carbon cost to operate and cool. Guess what? a 2U Rackmount server that sometimes runs at 1.5Ghz for a few seconds instead of running at 2.8GHz all of the time doesn't have a significant impact on the cooling bill, and it can reasonably be expected that your cooling power budget will be roughly equal to your equipment power budget, probably higher because of infrastructure overhead.

It is difficult to find a framework in which to push these decisions because the day to day business does not center around them.

The solution is for decision makers to make them a priority, just like worker safety and other things which don't obviously contribute to the short-term bottom line. I can't spend all of my time advocating up for socially responsible decisions.

Also, Amazon may be in a difficult place wrt other contracts with the government, they may have gotten themselves somewhat entangled. Dropbox does not need Condoleeza Rice on its' board, and it's hard to envision what value she will have other than internally advocating for cooperation with the government and its' defense armature.

That is what she does.
The problem with theorem provers like Adga and Coq is they are brittle to refactoring and thus hard to make changes to an app. Something seeming small can ripple through the whole system.

I hear Idris is more reasonable in this regard and has better general purpose programming properties.
No, our style guide clearly states that you should be using <em> now, not <i>.

...OK, an exaggeration. But it's much simpler than HTML. If people input with HTML then you're going to need to filter which tags you do and don't want to pass through. Markdown just gets rid of stuff like that. Not to mention automatic paragraphing.
I was actually pretty disheartened to read that comment from Brendan, since it directly contradicted what I thought I'd been told by the board members. :(

And no, that does not make me happy.
>When I worked for a small research firm, we basically wouldn't have employment discussions with anyone who had a non-compete even if it seemed unlikely their current employer would go to the mat over it. Just the existence of a non-compete would have meant getting lawyers involved and it was just too much hassle and risk.

Had a similar experience at my company. We worked as a subcontractor whose parent company lost a contract at renewal time to a rival. The rival did not sub out and instead approached our employees on site and hired one directly. The owners got in touch and told the new firm that we had a non-compete and their response was basically "Ok, that's fine. Let us know if you intend to enforce it. If not, we're hiring him. If so, we won't, but we're not subbing the work out to you. It really doesn't matter to us what you do, just let us know. If we don't here back from you by this time tomorrow we're not hiring him."

In the end I'm happy to say that management did the right thing and just let him go unmolested, but the hiring firm explicitly stated that his job wasn't worth the expense and hassle to them, and just threw the ball back at us.
Unlike Democracy in real life, people who hold different ideologies from you on a website will simply leave and start their own websites.

Real Life Democracy forces you to work with your political opponents. Website Democracy forces everyone to think the same, or leave.
When did you find yourself getting most of your coding done? Mornings? I'd love to try something like this, but it will probably mean writing code at like 6 am..
So what's your point? Our only options are to either abandon all hope of change, or secede from the world and join a hippie commune?

Nobody has the energy or resources to fight all possible battles at once. All we can do is try to pick the ones that we hope will provide the most benefit, most efficiently.
That's actually great that you admit the need for some catching up on learning entrepreneurship. There are nice moocs on edx and coursera and udacity.
OpenBSD disables Heartbeat in libssl, questions IETF
Kolibree launches Kickstarter Campaign for its Connected Toothbrush
4 Software Development Skillsets to Outsource and 1 to Keep In-House
Any SSL implementation worth its salt needs to implement historical primitives like RC4 and MD5. libsodium will not and should not implement these because they conflict with the goal of providing an idiot-proof crypto library.
Currently free for testing or low volume production use. We'll be rolling out our pricing page in the near future!

We really want this to be the easiest and most cost effective way to scale realtime so if you have a specific use case in mind we'd love to hear more!
I'm tempted to write nothing more than the following quote:

"You must be the change you wish to see in the world." - Mahatma Gandhi

But of course, Ms. Rice would probably have said the same thing about the reasons why she made the decisions she did.

We are all struggling with the same thing. I want/expect/believe the following, and here is my excuse/reason/proof of it. I find it hard to be open minded when so many are driven by their dirty ideals - myself included.
I'll publicly state my support of your viewpoint.

All this political talk has poisoned Hacker News for me. It has been a constant onslaught. Instead of a focus on building cool stuff, Hacker News is becoming a location for internet activism.
The real problem with "don't break the chain" is that once it does, things collapse.

See my graph: https://github.com/steveklabnik

As you can see, I'm about to lose a ton of green. I'm at 87 days as my longest, but July 6, 2013 was brutal for me. I was actually flying, and had saved a small bit of work to do during a layover, but then I totally forgot.

Once that chain was broken, it was super easy to justify taking some time off...
It's really 9 to 6 or 8 to 5. Most people take an hour for lunch (nearby restaurant, onsite cafeteria, brought from home).