skysight-inc/HackerNews huggingface dataset:
I think G+ is kind of Google's Internet Explorer moment. The have dominated search for over a decade, but the realised that social media had become massively important and that they just weren't relevant there. They couldn't acquire anyone large enough and their previous attempts at entering that area basically all failed. So in the end they had a choice of either giving up and risk being overrun over the long term or they could do what MS did with IE: Leverage your dominant position in one field and force your new product down your existing customer's collective throats.

The difference is that it worked for MS (for a time at least), but so far it didn't really work for Google and instead their existing customer base is getting more and more annoyed. However, at this point G+ is so deeply integrated that a graceful exit from this strategy would be next to impossible. Google is basically all in with this.
The IRS is already privy to much of that information, either directly or indirectly.
I thought about it a while ago, but then why not just buy a Macbook? Same price, comparable hardware looks, much better specs, much better capabilities. You can run Chrome and do all the same stuff you could do on a Chomebook, plus a ton of other stuff too.
It's ironic that Haskell is such a language: it grows from a tight, small core into larger and greater abilities as you learn it even without using its extensions.

I agree that Common Lisp a very powerful language, but I can't live with all that power uncontrollably thrown on me. Common Lisp grossly lacks self-discipline and self-limitation when it's needed.
Fair Folks is great. I live in the area and stop by all the time. Make sure to get a cup if you're on Houston.
The JCA provides primitives, not whole designs. Primitives are rarely broken; even PHP mcrypt manages to successfully provide low-level crypto primitives. Most of the things that go wrong in cryptography happen at the points where two primitives join to form a more elaborate construction. The JCA isn't much help there.

If you have the option to use NaCl, use NaCl. A Java-specific alternative to NaCl is Keyczar.
I'am a big fan of WP since release of WP7, but I'am thinking that microsoft should close the development of WP as it is too late to fight against ios and android. But as a user of WP8 (lumia 920) i can only say that it's a wonderful product with genius ux design and super-duper hardware, that doens't freeze... practically never. I restart it every month in case the battery drains to 0%. Hope that it can make it in the future, but doens't seems to. About WP8.1 i'am so excited, and in few months hope to get the update!!!!
That works great until guys in suits walk in and plug the servers out.
In my personal opinion this is what DevOps is, in fact "OpsDev" might even be a better word for it in most cases.

It's about carrying out what are traditionally "Operations" tasks (Provisioning, Configuration, Orchestration, Monitoring, ect) using tools and workflows with are traditionally used by Developers (Version Control, Automated Testing, ect)

In large companies this work is often carried out by operations people who have expanded their skill set to include things previously limited to developer roles. In startups this work is often carried out by developers, as in the original rant, who are tasked with maintaining infrastructure as well as developing.
I'm really digging the systems posts that have been cropping up on HN recently; this and the toy OS post that was floating around are both really interesting.
This is a much better, more sensible article than yesterday. My good takeaway here is that DevOps means whatever you think it means - it's a lot of different things to a lot of different people. That's a much more positive spin on my frankly negative opinion that it's devolving into a meaningless buzzword to attach to resumes, recruiting, and PowerPoint presentations for management.

I know I came in to DevOps (the word, not the job - I've been doing the job since the mid-1990s) with a strong opinion of what it ought to mean - cross-org cooperation between development and operations. This article has me rethinking that a bit.
I am not hating on Go Daddy but I will say that articles like these do not come out of left field. There was the incident about two months ago with the @N twitter name that involved them and I have heard other grumblings about them. Then when you have other registrars that offer competitive services and do not have those grumblings, you switch. I did. (namecheap.com) Just sayin'...
Do what the fuck you want to public license
I'm not affiliated with this company, but usually data collection like this is completely harmless. They will pick up things like hashed URLs you drag, the text contained in the URL you just dragged, file type information (text? image? etc), number of interactions in a given time period, etc.

And obviously, it's just for ad targeting.
If you can find a Macbook with the same specs for anything close to the price of the Chromebook then please do link it.
For the sake of historical accuracy, the NIST backdoor argument goes back to 1999 and Michael Scott [1]. I don't really buy it: if the NIST curves can't be trusted purely by association, then I find it very hard to trust the other curves as well.

[1] https://groups.google.com/forum/#!msg/sci.crypt/mFMukSsORmI/...
The hiding of the reporter's email doesn't really work/is broken, since if you fill in data for the fields on the page, and then hit 'send' it takes you to your email client with the reporters email in the 'To' field.

Someone could just as easily fill the fields with junk just to get at reporters emails', I suggest implementing a character counter for the fields at the least to ensure content is being entered and not junk/useless data.
It does not, no. realized this some time after commenting as well. Habitability (planets in habitability ring, I would assume) and crowdedness give multipliers.
Amost all aggressive reactions are partly contrived and controlled, even if they're occasioned by genuine emotion in the actor. You can see this from the fact that you very rarely see someone give a strongly hostile or contemptuous emotional reaction to their boss or someone else whose reaction they fear. Somehow the guys who just have strong feelings, or just have to tell it like it is, manage to tell it in a much more circumspect manner, or not at all, when letting fly would have unpleasant consequences for them rather than whoever they're going at.
Depends on what you want, of course. I put a full Ubuntu distribution on mine, along with a full numerical stack (anaconda python + Octave), git, ruby, perl, etc., and am happily programming away. I grant you that I am not the customer that Google is targeting, but I find it very capable. I am already working from the cloud - all of my python and data resides in Dropbox or a BitTorrent Sync folder, and I just work from them regardless of what machine I'm on.

It's an interesting tradeoff. You will obviously not be putting a first person shooter game on one of these, or installing massive software stacks, but I don't really want that from a ultrabook anyway. I'm overjoyed with mine (I have the cheap Toshiba, not the Pixel). If I lose or break it who cares, I'll buy another. Meanwhile I have a portable ultrabook that I can develop on, keep up to date with the office, or just take to bed to do some light browsing. It's utterly fantastic in a 'less is more' kind of way.

edit: so far I am only using the Dropbox stuff with the chromebook - I do not know if can use BitTorrent Sync from it, and I may have to revise that part of my workflow.
Getting a bit pedantic, but a few corrections:

1. That origin is just urban legend. Americanos started in the 70's.

2. Per ounce, you're technically correct about the strength of espresso vs. drip/brewed coffee. But brews have variable strengths, and most Americans drink 12, 18, and 24 ounce drip coffees (which ends up being more caffeine than even a quad shot of espresso).
Hitlist is Hiring
EDIT: We have.
Yeah, simple configurations are just stable and will last indefinitely.
DevOps and "full stack" and Agile and the flamewars around them are just bikeshedding. None of this gnashing of teeth actually matters.

You know what matters? Writing code and making it work. Solving problems. Helping people. If the right way to do that is for me to make a system more reliable, then I'll do my best even if I'm not interested in being "an ops guy". If the best thing for me to do is read machine learning papers, then I'll do that.

The real problem: technology companies have terrible leadership. You know how small towns in the Midwest used to send their genetically unfortunate to San Francisco, where there'd be more social services and a warmer climate? Well, that's what the business world does with its rejects, too. Buses 'em to San Francisco. Except, in tech, they end up making $400k as VPs of HR at startups and get to boss nerds around.

"Agile" won't fix that. Nor will "DevOps". These terms mean too many different things to different people, and ultimately fail to address the real, core issues with technology.
Not surprising. GoDaddy does not have a good reputation among anyone I know, and I've been involved with domain names since the mid 1990s. I recommend you research other registrars and consider taking your business to them. I know Namecheap has good prices, 2FA, low prices, and discount codes for people leaving GoDaddy. Best wishes.
The "real" title is the subtitle:

Offers Office Online apps via Chrome Web Store to Chrome and Chrome OS

With the further qualification:

The move was largely symbolic: The Office Online apps have long been able to run within virtually any browser, including Chrome, the foundation of Chrome OS.

But by packaging the apps in .crx format and submitting them to the automated review run by Google, and thus publishing them to the Chrome Web Store, Microsoft put its Office Online in front of Chrome and Chrome OS users and in a place they've been trained to look for Web apps.
APT vulnerable to man-in-the-middle attacks since 2010
This looks really cool! Couple of comments:

* This is EXACTLY how you should make a README file for a tool/project, especially on Github. Every project needs to take after this example before they register a domain and create an HTML5 splash page.

* Thank you so much for using existing tools and not building a new cron or transport protocol from scratch. Now I know this builds on top of reliable tools.

* Would it be difficult to remove the web sockets requirement? Orgs with old, non-replaceable web servers/proxies, or old network appliances with layer7 proxies, might find this handy but not be able to support web sockets.

* Instead of a 'DROP TABLE', why not a 'CREATE TABLE IF NOT EXISTS' ? (In my own projects I usually make all the database table/column names into static variables at the top of my code, so people can modify them if they want) Still, it's nice of you to include a tool that modifies/verifies the db automatically.

* Kinda off topic: I just wrote an open-source replacement for Dead Man's Snitch, an out of bound alerting tool intended to be used by cron. If you want I can share the source so you can either use it, or create your own implementation that works with a remote copy of minicron?
Your assertion that tptacek's review doesn't really help anybody is patently false. It helped me by preventing me from making the mistake of purchasing this book.
> In any case, if you consider my email address "personally identifiable information", I consider its checksum such information as well.

I wonder what the odds are on a hash collision from another email address (including abusing + addressing) that genuinely belongs to another person (rather than just exists) and therefore the resulting hash does not uniquely identify a single person.
It's wonderful to see everyone playing so nicely these days. Even if it is only on the surface...
The author doesn't demand that his readers implement AES or SHA2 directly. So, what I would do is start with a simple, secure design based on an AEAD like AES-GCM, which is also in the Golang standard library. I would accompany that design with very strong warnings that substituting AES-GCM for anything else is likely to destroy the security of the design. Then, when I wanted to teach about generically composed MACs, my HMAC example would involve replacing AES-GCM with AES-CTR+HMAC. At no point in the book would the focus of one of my chapters be a design that was dreadfully insecure.

I would also divide the book into two parts, the "easy" part and the "hard" part. The "easy" part would get readers to the point where they can safely use TLS, reliably PGP-encrypt something, hash a password, and invoke NaCl (which is part of the go.crypto package). I would probably spend a whole chapter on how to use Golang's TLS library, for instance. Most readers that are picking the book up so they can solve some business problem would probably never need to get past the "easy" part, and I would encourage them not to.

I would remove from the "hard" half of the book protocols that were insecure. An unauthenticated DH exchange is a poor basis for a cryptographic transport. Slash, cut, gone. A naive password challenge-response protocol doesn't solve anyone's business problems. Slice, snip, gone. In their place, I'd probably add more discussion of key exchange algorithms, with particular attention paid to how easy they are to get wrong.
will send you beer. Ping us: hi@justreachout.io
Your quality of life will be higher in Amsterdam, but it could be argued you'll have more opportunities in SF.
A Contractor's Guide to Recruitment Agencies
If you're in NYC and want a good cup of coffee, check out one of these places:

Third Rail (got me through my first semester at NYU)

Stumptown (I'm usually at the 8th St. spot but the Ace Hotel location is just as good)

Joe

Cafe Grumpy

Everyman Espresso

9th Street Espresso @ Chelsea Market

Note that none of these has signed up with CUPS. I doubt any of them will, either, since (I bet) there are thin margins in selling excellent coffee.
Sounds like you're not signed up, so you'll never see reporter's email address. Once you properly register and sign up you'll see their email address.

But good suggestion, will give that a try.
There's a difference between "Can cobble together some python" and "knows how to use a python package from pypi"
I enjoy using fish as my main shell, but as soon as I ran into a "curl oneliner install" that failed in fish (in my case Homebrew's at the bottom of http://brew.sh/) and required me to jump into bash. I enjoy fish so much I continue to use it, but I am in a state of fear that I will at some point encounter some failing shell script that leaves my system in a broken state.

Do you have any recommendations to make fish play better with shell scripts intended for bash?
how is this nimble? the chrome web store has been around for years and so has office online. this is microsoft being forced to compete on ground they don't want to compete on. you see how by listing their apps on this web store, they have validated chrome os as a platform? whereas google still refuses to release native apps for microsoft's mobile platform, and that certainly hasn't helped microsoft. this is microsoft losing.
If I'm buying a standing desk, the ergonomics need to be right and for me that means adjustable height.

It would be nice to see a separate, adjustable monitor stand. It could ideally be used on the desk shown or one someone already owns.
Verizon led massive astroturf campaign to end NJ broadband obligation
If contact form is not working for you, try: hi@justreachout.io
Knupps idea of the totem pole rubbed me the wrong way too. I've met great developers who didn't have a clue about how to scale or monitor their software outside of their framework. How to properly deploy across DEV, UAT and PROD without making code modifications. How to keep these environments clean and flexible to enable these deployments. Nor should they have to. Call me a Dev because I read and write code. Call me Ops because I do deployments and fix production issues. At the end of the day I solve problems and just plain make stuff work. With or without so called DevOps tools.
sorry for the delays, lots of traffic coming in, ping us, we'll send you beer: hi@justreachout.io
Haha, definitely don't need a beer, but appreciate that follow through. Maybe my interests are too niche and it couldn't find results w/in the last 24hrs? I'll try a couple more times, then hit the contact form with whatever info I can offer.

EDIT: Just tried that search and a few others and all returned quite quickly. My initial search actually just hung forever, so I eventually closed the tab. Not sure how to reproduce, but hopefully just a fluke? I know no Dev ever wants to chalk something up to a fluke though...
Looking quickly through the claims they don't appear to cover having a circular magnetic connector - instead it's specified (eg in claim 1) that the connector has 2-fold symmetry and in other claims that the 3 connections are arranged linearly.

The other point you might "attack" the claims on (ie in designing around them) appears to be the inclusion of "bias". Mind you it's not entirely clear¹ what is meant (without referring to the description) by "biased" here: claim 6 suggests it means sprung in some way.

Edit: looking at a couple of pieces of the prior art http://www.google.com/patents/us7311526#backward-citations it seems the main innovation in the Apple claims is probably the symmetry / reversible nature of the connector. There were already circular connectors, eg the cited US3808577, so Apple's claims may have had to work around those - hence the construction including the symmetry clauses. Seems a magnetic connector is well doable even without any need for invention, just based on expired patent disclosures.
I agree with all your points. When I said treat this in a "responsible disclosure" method, I did really mean a grace period, for the authors sake[0]. Clearly the reasoning is not the same as a security issue, as you pointed out. I was trying to be a bit clever. My mistake.

That all said, I still think we can treat each other better. Honest question: was it necessary to destroy it in such detail? Was it necessary for the effort of attack on the "crypto box" front? It seemed personal.

[0] Contacting the author first doesn't necessarily preclude timely notice "this book is flawed" out to readers.
Work and boredom – Nietzsche
I would highly recommend watching that Moments of Wonder mini documentary, it will go some way towards answering your question.
I started using linux around 2004 and it still required quite a lot of technical knowledge to get working. Drivers were a big issue around sound, graphics, and network.
Taken straight from Instagram's policy:

> "We encourage people to actively log in and use Instagram once they create an account. To keep your account active, be sure to log in and share photos, as well as like and comment on photos. Accounts may be permanently removed due to prolonged inactivity, so please use your account once you sign up!"

Source: https://www.facebook.com/help/instagram/294919817276863

The wording is terribly obtuse and seems targeted more for username squatters.

Would be helpful if Instagram defined what a period of prolonged inactivity is. Shady nonetheless, considering they didn't even notify her informing her that her username was revoked due to inactivity.
Actually, no... It is the 'empty restaurant syndrome', you have probably done it yourself, in some strange town, not knowing where to eat, you go past a few places and choose one that other diners have also chosen, walking past the empty place as if it has the plague.

Hence a few customers that hang around for a while are good for drawing in other customers.
Weird, which browser are you on? Just ping at hi@justreachout.io if contact form is giving you trouble for some reason.
If by "dynamic partial addresses" you mean "plus addressing" then, yes, it does use that.
Order Tracking
New service that allow you to organize your orders information in one centralized, convenient place. easy to manage from your desktop, tablet or mobile! worth the try!
Now this is funny, mainly because $1500 for the simplest of desks made from garbage! What on earth is in the water in Detroit?

> wood from french colonial Indochina

This sounds very nice.
10 Episode Ideas for Mike Judge’s Silicon Valley
Microbenchmarks are fun but silly. I tried to write a similar one for Lua, but LuaJIT ultimately recognized the program was useless and boiled it down to a 3 instruction loop:

loop:
add ebp, 1
cmp ebp, 10000000
jle loop

Anyway, in regards to your results, I could be wrong, but I think I read somewhere that LuaJIT uses linear search for tiny tables for this reason. Dunno what the threshold is, if there is one. The performance then would be similar to an alist, but saving a few bytes and cycles by not needing to deal with the extra list pointers and indirection.

> Also, just to clarify, alist and property lists have a different behavior than hash-tables, namely that the sequential access allows you to shadow values from another list: if you write (cons (cons 'a b) older-alist), you have a new list where the value for key 'a is b, and where values for other keys are those found in older-list (even though older-list also contains key 'a).

Oh yes, doesn't emacs make good use of this trick for its configuration variables? You can get the same effect with Lua's metatables, however, with a little elbow grease:

parent = { a = "beep", b = "boop" }
print(parent.a) --> beep
print(parent.b) --> boop
child = { a = "poing" }
print(child.a) --> poing
print(child.b) --> nil
mt = { __index = parent }
setmetatable(child, mt)
print(child.a) --> poing
print(child.b) --> boop

Not quite as easy as "cons", but very flexible; __index can be another table to searched if the lookup on the child fails (which in turn can have its own parent and so on), but it can also be a "metamethod" that is called whenever a lookup fails and can then do arbitrary things. A neat example off the top of my head: OpenGL has the peculiarity that you do not know the address of any of its functions until runtime, requiring a program to call a lookup function for each function to get a usable pointer. Declaring FFI function prototypes for many OpenGL functions is not such a big deal, but looking up hundreds of functions that you will never use can add significantly to startup time. So someone (possibly an HN user?) wrote an OpenGL FFI library that uses the __index metamethod in a clever way; the first time a function like "GL.CreateShader" is called, the lookup fails, and the __index metamethod mangles the index name a bit and in turn calls (on Windows) the C function wglGetProcAddress to look up its address, which it then stores in the original table. Using this library, you can write code that uses GL functions willy-nilly, and their addresses will automatically be looked up at runtime the first time they are used.

Sure, you can do the same thing in any language with macros or a preprocessor, but is that cool or what?
Completely agree. It would be nice to startup in SF or NYC but everyone has an Internet connection. It is as simple as building a product that people want(not simple, almost impossible), putting it online(simple at first) and setting up shop in you favorite place to live(depends on the person).

All that to say I agree...
Don't forget about Dunning–Kruger effect, though. One doesn't necessarily know they're ignorant.
So this seem sketchy because it is on the same blog that also includes someone completely unrelated that made a joke you find offensive? Whatever floats your boat I guess...
This is sort of overblown. The vulnerability is in libcurl, not apt. It only applies to people (and CAs) who are dumb enough to issue certs where there is a wildcarded IP in the CN. I've never seen this in the wild, not that it couldn't happen.