skysight-inc/HackerNews huggingface dataset:
MadEye creator here. That's definitely a valid concern. I can tell you that we're not slurping up your repository (we aren't), but you have no reason to believe me. We offer an enterprise version that can be hosted entirely behind your firewall if this is a real concern.
Eich's documented actions, not his private views, are the primary thing that got him drummed out of Mozilla. While on a whole different level than being a participant in one of the greatest losses of life in human history, let's call it what it is.

Eich's defenders have been quick to spin this as an ideological thing, when at its core, it really isn't.
If I remember rightly, discussions that are hostile and contain lots of flaming are penalised.
>Sometimes I
feel a bit sorry for them (and for him), but then the next minute I
don't feel sorry because there's damn good reasons they won't be
told about what I found.

This is hard to believe, is this the leader of the OpenBSD project saying he won't tell anyone at FreeBSD if he finds a hole that affects every FreeBSD installation? Or am I misunderstanding that message?
Besides the civil war what others have the US started?
AFAIK dropbox uses ec2 and s3, so dropping dropbox is a double win
Making this a R vs D thing is silly. Vietnam was Democrat president. Obama has extended our current wars. Most of our wars have had public support at the beginning, and lost them over time. And as you noted, we've also been instrumental in necessary wars to everyone's benefit.

Hindsight is great and all, but sometimes whether or not a war is necessary can't be seen at the outset. If Saddam had a nuke (and believe me he was certainly trying to get one even if he didn't have one yet), everyone would have considered the Iraq war to be necessary and Bush wouldn't be universally hated. Also, I find it interesting how much sentiment has changed since 2001. After 9/11 everyone was scared, and everyone wanted to find the people responsible and anyone who helped them. 13 years later nobody seems to remember that. The Iraq war was overwhelmingly supported at the beginning. Apparently people just wanted it to be over in 2 weeks.
Actually, no. The "protein shake" anecdote was just me throwing bro stereotypes and tech-sphere complaints together.

Typical tech bullies avoid and ignore me because they know I'm good at what I do, and better than most of them. The only time I face adversity from a programmer is when I make him insecure (which doesn't require that I be better, although that's often the case.)
Its quite common for politicians to be business people as wel. I wouldn't say that many "pure politicians" sit on boards, though.
Yeah, what is the world is this about? Can anyone clue us in?
Graph analytics and Social Network Analysis on massive graphs with Giraph
We are writing a book on large-scale graph processing with Apache Giraph. Giraph is being currently used at Facebook to run graph analytics on their graph with a trillion relationships across hundreds of machines within minutes [1]. The book covers from technical challenges about designing and building a processing engine that runs iterative graph algorithms efficiently, how to develop scalable algorithms for graph analytics, to the practical API of Apache Giraph. We thought you guys might be interested in these use cases for your own work, and hopefully find the content useful to you. We hope to get some useful feedback on how to improve the book to make it useful to the broadest audience.

Do you have use-cases where you think Giraph would fit in your application architecture? In other words, what would you think would be useful to discuss in the book?

You can find the book at http://www.manning.com/martella/ with the free first chapter.

[1] https://www.facebook.com/notes/facebook-engineering/scaling-apache-giraph-to-a-trillion-edges/10151617006153920
isolated events? I can keep on posting links for the next few days, if you want me to...
No, just someone crumpy about lack of funding.
My point is that your use of slippery slope was a logical fallacy. You haven't provided the analysis itself. Would you like to do that?
Seconded, Mou is great.
No, not at all, it's an inevitable result of Debian's conceit of "fixing" upstream source trees.

An ... I hesitate to call him an engineer ... used one of the standard lint tools or GCC or whatever on OpenSSL I think it was, and noticed the use of an uninitialized variable. This was deliberate, it was added to the entropy the program was using; might not be too random, but "it couldn't hurt".

So he communicated with them, and they told him it was OK to eliminate it. Without further talking to them, he also eliminated akin bit where the serious entropy was added, so for years Debian generated trivially breakable keys.

It'll be a while before anyone can judge if this or "Heartbleed" is the worse open-source security screwup, but until the latter just developed I certainly rated it as #1.

However this is the first time I've heard it alleged it was sabotage; it could have been, disguised as stupidity, but that it was "clearly sabotaged – a known fact" is utterly false at this time.
> 1. Cheney strongly pressured the CIA to discover a smoking gun for Iraq WMDs

Really? What is your source for that? Where in the Senate's report do you see that information? http://www.gpo.gov/fdsys/search/pagedetails.action?browsePat...
Thoughts on Dropbox Carousel
The First Question
Not that you're not absolutely right about NaCl & Sodium, but isn't the GP talking explicitly about Sodium and not NaCl?

When you say 'more accurately: NaCl', is there something particular you're getting at, or are you speaking from experience of NaCl rather than Sodium (or are you talking about the fact that the bindings seem to be named/built for the original NaCl?)

Edit: or do you just think it's still better to call it NaCl given that it's a fork of, or I suppose a refined implementation of NaCl?
He said every politician is guilty, and you're interpreting that as him saying they're all ok? I think you're reading what you want to read, not what he actually wrote.
brenoc has kindly opened an issue here: https://github.com/isaacs/github/issues/166

Thanks!
Does anyone know what they do/teach in the South Korean 'education centers' for Northern defectors? It must be an interesting challenge to bridge the gap to completely brainwashed people.
I made a (very childish) bookmarklet to make it more fun :)

http://people.cs.umass.edu/~jvilk/bookmarklet.html (The "javascript:" link for the bookmarklet is on this page)

Click it when you're on a Git manpage, either legitimate or generated.
You could say the same thing about lambdas, continuations... basically any high level flow control concept.

True, but programming, especially in the large, is about juggling a whole lot of cost-benefit calculations. Continuations done right actually reduce the implicit hopping around you have to think about in a given situation. Lambdas can increase it, but even in those cases, save you a different kind of cost.

Higher level flow control concepts are a good thing in just about every case.

No, they are often a good thing, but they are not a good thing in just about every case. Like any tool used for programming, you use them when the cost-benefit works out.

Forcing error handling is the right thing. Just because someone uses that information and does something boneheaded with it is not an indictment of the concept.

Empiricism. How does it work out in practice? What is the prevalence of bugs caused by the particular boneheaded behavior? What are the effects on difficulty of debugging?

It's not a fault of the concept of static type checking if people fail to handle it properly.

Why not? We could use such logic to blame a huge number of additional aircraft accidents on pilot error. But pilots, like programmers, have limited bandwidth.

The cost to exception handling -- which I acknowledge is beautifully useful at times -- is that it entails an implicit hopping around of control flow. So if you combine that with compiler enforcement of exception handling, is that you force the programmer to pay the price of such implicit hopping, whether it is appropriate or not. Lazy programmers will cause problems in either case, but in the case without exception handling, it's often easier to figure out where you went wrong.

Think of it this way: Enforced exception handling makes the wrong thing to do dead easy, and the right thing to do anywhere from slightly harder to a lot harder. Not having exception handling makes the wrong thing to do zero effort, but suicidal, while the right thing to do is still anywhere from slightly harder to a lot harder.

An even shorter version: with Go's error handling strategy, lazy programmers tend to see the consequences sooner.
Also on StackOverflow:
http://aviation.stackexchange.com/questions/3300/why-havent-...
In a good market, only more desperate candidates will go with non-compete positions. So lower salary argument makes sense
Downvoting comments because of disagreement is common in this thread. If you think about it, it is consistent with blackballing.

I, for one, will upvote any well written comment I find at zero or negative values here.

I don't care if I agree with the comments or not, I don't like this face of HN. I vote comment quality, not content.
Creating a WebRTC WOW Moment With Raspberri Pi and Node.js
I'm thinking that they probably didn't want to scare away web devs that don't like .NET.

I believe that their compiler also runs under Node.JS, which is easily a much lighter cross-platform solution than requiring Mono (which would be needed for a C# compiler).
Or, maybe you just got your quote wrong?

https://en.wikipedia.org/wiki/Perfect_is_the_enemy_of_good
Context-free mailing list drama (starring Theo de Raadt)? Seems perfectly flagworthy.
Personally I wouldn't use them, and wouldn't recommend them. But I'm not here to argue about it.

I took the time to search for five seconds because you wanted references, but were somehow incapable of making your own research, or making up your own mind.

If you search you will find repeated instances, and that means a long history, with no changes after even a single security problem.
While your 'tone' may earn you disapproval, I see what you're saying.. This may well be one of those moments where 'cool' trumps 'practical', though .. it is cool to see colors where once there were '###'-s, but to my eyes, the ASCII'ness of markdown is worth the considerable effort, in this day and age, to propagate. This is not that.
Not really. Chasing Condi Rice throughout her life for what she did during her term as the Sec of state is uncalled for. If anything, she deserves a fair trial.
You should also boycott a lot of other companies then. Pretty much anyone who has a politician connected to them. All of the big tech company leaders gave a lot of money to Obama, and I'd consider the spying on US citizens to be fairly unethical. Please stop using Google, Yahoo, and Apple products.
seems like right now even this question is already penalized and doesn't make it to the frontpage... feeling sad about HN :(
Right, like when Delta ran out of frequent flier miles.
Dependent types are a wonderful idea so long as I can do a couple things with them:
1. Copy paste them without complications. i.e. "non-null" requires no code that relies on specific variables unless there's a logical conflict (which variable?)
2. If it's a known failure, give me a warning. If it's an unknown failure, let me choose how to deal with it, again in a neutral fashion that I could simply say @Notnull<skip> and it would just skip the code if the variable is null.
The rule is a great idea. But even without it, you can counter this kind of junk. "Hey, why did you respond that way? Does your ego need the boost from acting smugly superior? Or is the problem that you don't understand it well enough to help me out by actually explaining it?"

That would probably cost you someone's friendship, but if they're pulling this kind of stunt on you, I'm not sure that they were your friend anyway...
Blog post removed. Google's cache: http://webcache.googleusercontent.com/search?q=cache%3Ablog....
Declarative programming is a great one, almost a magical experience.

"It feels like I am sitting at the controls of a quantum computer. I've got all my qubits (terms) all wired together in some complicated expression and when power is applied every qubit will instantly collapse out of superposition and crystallize into a perfect answer."

(From something I've been working on, http://kmkeen.com/sat/ )
When two network quantum chips can communicate instantly (not at speed of light--instantly) over infinite distances, using entangled atoms, then we can ditch the tecos.

I'm so looking forward to that.
There's a big difference:

1) She was part of the administration that started the Iraq War.

2) She is on the record supporting Anonymous Bulk Data Collection

3) She is on the record supporting Warrentless phone taps

4) She is on the record supporting the Patriot act.

5) She was part of the administration, that created, wrote, and legalized the Patriot Act.

Now she wants you to trust her with you data.
why do you care about seeming hypocritical? do what you feel is right. in the words of Emerson: "
A foolish consistency is the hobgoblin of little minds, adored by little statesmen and philosophers and divines. With consistency a great soul has simply nothing to do. He may as well concern himself with his shadow on the wall. Speak what you think now in hard words, and to-morrow speak what to-morrow thinks in hard words again, though it contradict every thing you said to-day. — 'Ah, so you shall be sure to be misunderstood.' — Is it so bad, then, to be misunderstood? Pythagoras was misunderstood, and Socrates, and Jesus, and Luther, and Copernicus, and Galileo, and Newton, and every pure and wise spirit that ever took flesh. To be great is to be misunderstood.
"
BlackBerry CEO: If I can't make money from handsets, I won't seel them
> Shouldn't crimes be tried in courts and not online petitions?

Criminal punishments are imposed by courts. Things that may arguably be crimes can also have non-criminal consequences.

> Does a majority of users get to decide if you've done something wrong enough to disqualify you from a board?

No, usually that's the existing board that has that authority.

Users, individually, get to decide if the company has done something (including, inter alia, appointing you to the board) that makes them unwilling to do business with the company.
About this particular event's "other side of the story", see [0].

"[Read Zuaiter] did not try to seize the gun of a soldier as Israelis claim, an eyewitness at the scene said Tuesday. The Israeli army stated after the killing that the ''the terrorist'' (= the judge) attacked a soldier with an iron rod while crying ''Alalahu akbar''."

Also, the article shows that this kind of incident is not so 'isolated' as you say.

Disclaimer: I work with young people who left Israel.

[0] http://the-pessoptimist.blogspot.co.uk/2014/03/israel-kills-...
I would certainly hope that any filthy politician would be held accountable for their actions, regardless of which administration they served under.
Can an army of 13-year-old girls dress you better than Google?
Hackernews vulnerable to Heartbleed? – Chromebleed Alert
I've used Copy for a while. I wrote a post on it comparing features with Dropbox: http://mkronline.com/2013/09/25/dropbox-vs-copy-a-comparison...
This is a 'bootleggers and baptists'[1] situation, and it is almost impossible to determine the true motives of the politicians.[1] We might be suspicious of the motives of the politicians, but we should also consider that they may be operating with a variety of rationales, all difficult to disentangle.

[1] http://en.wikipedia.org/wiki/Bootleggers_and_Baptists
Typically you serve up that content separately from the static content. We use it where it doesn't cache for logged in users but is on a rolling cache otherwise. Page updates invalidate the cache immediately as well.

On a dynamic site with user content, you're going to be using some sort of object caching depending on your framework and language of choice, Varnish is great for news sites and things of that nature though.
Here's some previous, from de Raadt, Dec 2013:

"Basically, it is 10 years of FreeBSD stupidity. They don't know a thing about security. They even ignore relevant research in all fields, not just from us, but from everyone."

http://www.itwire.com/business-it-news/open-source/62641-cry...
Teenage Killers....Is your child the next killer or victim?
Jeff Bezos' Shareholder Letter Is Out
I can guarantee that poster has never watched the daily show and just assumes it's liberal propaganda.
I didn't mean to devalue the challenge of implementing and testing a new feature. All I'm saying is that it wouldn't require much problem solving. It'd just be a sorted list, perhaps with the ability to reorder and resize items with some JavaScript. The GitHub devs are obviously skilled coders, and have many JavaScript ninjas among them.
> The HN community has always held strong beliefs about political issues, but what did we do about it?

The problem is that "the HN community" doesn't have unified beliefs about nearly anything. There are people who are violently for and against: higher taxes, lower taxes, affirmative action, race-neutrality, abortion choice, life, fracking, nuclear power, wind power, birds, etc. If we declared that we couldn't work together despite differing views we'd quickly find that we're each an island. There is no single "hacker news" political view. We are comprised of atheists, baptists, catholics, jews, muslims, sikhs, janes, buddhists, and nearly every other group you can think of. Some are rich, poor, and in the middle. Old young and retired. You are free to use your money however you want, but it is not the "HN community" view.
Partisanship aside,

I am super bullish about Dropbox, and have been since they were getdropbox.com. I think they have wonderful leadership and I've never had a single problem with their service. I've used both the paid version and the free model. I think they have amazing secret stuff planned for the next couple of years.

Even with all that said, I'm very confused. Does she have a personal connection with some of the founding team or something? I can't remember Rice ever expressing much care for tech while in the White House (unlike Al Gore's http://en.wikipedia.org/wiki/Information_superhighway) and even then Al Gore joined Apple, not Box.com or Google Drive. Even if she had gone with Google, Microsoft, Oracle, or IBM, it would have made more sense to me.
What about BC? I signed a non-compete clause a while back and it says I can't work for any competitor startup or start my own in that niche. Apparently the non-compete extends for a year after leaving. It mentions I can't offer consulting or work for the competition. It's been a few years now, but I wonder what other dirty tricks they may have up their sleeves regarding this.

I want to start my own company in this niche and I can't do it because of the fear that they will sue me if I ever make it on their radar.

BC government also is not in the habit of protecting tech workers and cares more about tax revenues. Maybe I should move to Ontario or leave Canada all together.
> But how do you get from untrusted, potentially invalid data into the world of trusted, guaranteed-valid data?

The main point is that you can write provably correct validation functions. Then your program can branch on the result of that function, and in the "success" branch you can process data further, as usual, assuming (justifiably) the validity of the data. It doesn't make any difference whether some particular piece of data was validated runtime or compile time, so far as the validation does what you want it to do and the types reflect the result in sufficient detail. Verified programming is mostly not about trying to check everything compile time, but rather checking that when our program eventually runs, it does the right thing. Take the following pseudo-Idris-Agda function:

boundsCheck : Nat -> (bound : Nat) -> Maybe (n : Nat ** n < bound)
boundsCheck n b with n <? b
| yes proof = Just (n , proof)
| no disproof = Nothing

This either returns the input natural number (if the input is within bounds) along with a proof of being in bound, or returns failure. The type of the function makes it impossible to write a function body such that the returned number is not within the supplied bounds. Any subsequent code in the program may work with the output of this function and be utterly sure that the "n" in "Just (n, p)" observes the bound, and the may also safely omit any further checks for the same bound or greater bounds. Or here's a standard Idris function:

filter : (a -> Bool) -> Vect n a -> (n : Nat ** Vect n a)
filter p [] = (_ ** [])
filter p (x :: xs) with (filter p xs)
| (_ ** xs') = if p x then (_ ** x :: xs') else (_ ** xs')

This is a plain old filter, except that it works on a length-indexed list type "Vect". We have no idea (compile time) how long the resulting filtered Vect will be. So we return a dependent pair containing some Nat and a Vect such that its length is equal to that Nat.

You might think that this is rather boring, since we could have used a list type not indexed by its length, and then just computed the length whenever we needed it runtime. Except there is a big difference. It is impossible to return a value of type

(n : Nat ** Vect n a)

from any function, such that in the value the Nat index does not equal the length of the vector! You could slap together a plain list and a Nat in a tuple, and then say: "This a list coupled with its length. Let's try to preserve this invariant by writing code carefully". You could also trying hiding the possibly unsafe internals behind some OOP class firewall, but even that doesn't protect you from writing the internals incorrectly. Dependent types can protect you even then; they only fail to prevent you from writing the wrong types in the first place.
Would be pretty cool to have concurrency by default and then a lock declaration I could do on a particular function to fix any concurrency issues. Would need a new style of debugger/code view though specifically for this purpose.
Why not talk about Obama's war in Afghanistan, or increasing tensions with Russia, or abuse of spying? Way more relevant than a 12 year old letter...
"Tech-company boards should have more women and [underrepresented] people of color!" —The Mob, yesterday

"But not someone whose politics we don't like!" —The Mob, today
The more I learn, the clearer it becomes that I know very little. Things that I used to know fade away - a few years out of college, I can't do matrix maths anymore.

Software engineering is a big job. Software engineers might know about assembly code, pointers, design patterns, UML, functional programming, algorithms, AI, statistics, reverse engineering, driver programming, SQL, NoSQL, matrix calculations and numeric simulation, control theory, cloud scaling, devops, unit testing, XML schema design...

Then, if you think about the things outside programming an engineer might need to know, like marketing, sales, budget control, estimating, project management, user experience design, graphic design, human psychology. And the domain they are working in of course.

That's a lot to know. Even the basics. I don't know the basics of a lot of those things.

Doesn't meeting all these people who don't know things make you wonder what you don't know that you don't know?
What do you think about adding Markdown formatting support via markdownfmt?

I've already created an Atom package that runs that on save:

https://atom.io/packages/markdown-format