skysight-inc/HackerNews huggingface dataset:
Fantastic comment. Please enlighten me, since it was too hard for you to do that in the first place. Also let me know why I need to know the nuts and bolts of an ME degree to understand that far more people are getting pushed into ME than people that are actually getting jobs in ME.
I believe they are on a ~yearly schedule now.
They do seem to be the best in a very competitive market. There are loads of either commercial or open source issue trackers, wikis, combinations of both, etc. etc. How will they grow past that ? Acqusitions? Writing custom JIRA plugins that will make it more like an ERP ? Ideas?
I agree, this actually seems pretty reasonable.
Some quick background:

1) At first I thought this was a joke

2) It's actually not completely insane

3) Reference title as summarized here:

“Why organisations need some structure to ensure they are democratic.”

4) Or more fully: http://flag.blackened.net/revolt/hist_texts/structurelessnes...

5) YMMV on all of the above.

_________________

The counter argument to (3) is summarised as:

"In actuality, the potential problems...[of] informal groups, are much more prevalent, virulent and destructive in large, formal organizations."
Good! I enjoy their tools and think they really deserve that.
Ask HN: What do you call yourself?
There are several terms to describe what we do: hacker, programmer, technologist, coder, and others. What do you use?
Just a question on #1. What are the opportunities for a new grad going into one of these companies like Accenture, Deloitte or IBM? Do you just take a spot as a cog in the machine, or do you actually get valuable consulting/client experience?
Maybe at this point it would be simpler to just have a list of people the NSA isn't spying on.
Interesting choice of an IE preview for the home page. Is it by accident or is this something online stores are looking to validate in terms of features? (IE compatibility)
Having wasted most of yesterday dealing with the bootstrap JS implementation of scrollspy, which isn't on that list, but is on the angularstrap list ... possibly that?

I am entirely uninformed here but am going to try replacing the patched version of bootstrap's idiotic scrollspy code with angularstrap's at some point since my local patches are almost as horrible as the original code was.
If your webserver has the vulnerable version of the OpenSSL library, then your server will return some extra bytes, from someplace in memory.

It may turn out that the space in memory it's returning from is useless. Or, like yahoo, you may be giving out plain-text ASCII passwords to complete strangers who can type a command line. Which of these two extremes you get is largely based on luck.
Introducing MongoDB 2.6
Any concerns about naming? My first reaction was to think this was a new offering from Snappy https://besnappy.com/
The robots are coming. Will they bring wealth or a divided society?
Thanks for the reply.
Do you have some feedback from your own experience with it and/or with another framework, says Django?
I was expecting one line answer to all questions: "well, it depends, but you think about user, not Google"
For me, it's hard to say because a lot of other issues led to problems. The project had poor management overall, and we were also dealing with language barriers and vastly different timezones. I think in our case it wasn't worth it because were located in San Jose and there was plenty of talent we could have hired locally.

So, if you're based somewhere crawling with tech talent and the nature of your product already attracts it, then it very well might be a net-negative to operate your team remotely.

Otherwise, I think you'll find it's worth navigating some of these setup issues to be able to hire the best from wherever you're based.
> There are loads of either commercial or open source issue trackers, wikis, combinations of both, etc. etc

Yes, and they all suck. They go from a pain to use (Bugzilla) to a huge mountain of useless and worthless crap with a obscene price tag (Rational tools)

It seems to me they are in the right path
I'm a technical project manager now (used to be a web stack developer). Does this advice apply to PMs as well?
I believe the 2 GB database limit is only applicable to 32-bit instances[0].

[0]: http://blog.mongodb.org/post/137788967/32-bit-limitations
Rethinking What We Mean by ‘Mobile Web’
Although there are no guarantees there, what you are likely getting is people logging in very recently because their POST request is still in memory. If you were just logged in with an old session from a few hours ago, it's unlikely your PUSH request will still be in memory.

But every time you connect you are sending a cookie which allows for session hijacking.
I'm sorry I missed this; I would have changed the URL.

We're working on a way for users to notify us when there's a more appropriate URL.
This was valid yesterday, before Ubuntu released official updates.

Your steps today should be:

- apt-get update

- apt-get install openssl libssl1.0.0

- run "openssl version -a" to verify you have a compile date of April 7, 2014.
Regenerative Medicine First – Organ Made Young Again In Living Animal
>Any kind of Internet traffic that passes before these mass surveillance sensors can be analyzed in a protocol-agnostic manner, meta-data and content both, and it can be today, right now, searched not only with very little effort, via a complex regular expression — which is a type of shorthand programming — but also via any algorithm an analyst can implement in popular high level programming

That's amazing. Imagine being able to construct a regular expression that get's applied on every single piece of communication in the world. Yes, it's far too much power to entrust to anyone, much less an unaccountable secretive organization, but I'll be damned if that's not an incredibly fascinating and attractive proposition. No wonder these bureaucrats are willing to so thoroughly overstep the law, that kind of power must be very tempting.
Sold for more than Nest. At last something that makes sense!
It's targeting people who want to be able to put together a store very simply and quickly (at least that is why I used it). It definitely has a weakness on recurring payments (pretty much the only thing Volusion does better, in my opinion), but other than that it is pretty fantastic in terms of connectability and ease.
Depends on the context of who I'm talking to. My actual title at my "job job" is "senior consultant", so I say "consultant" when random people (like the person sitting beside me on an aeroplane) asks what I do.

But I also have a startup, so I might say "software entrepreneur" or "tech entrepreneur" in some contexts.

Otherwise, I might use a mixture of "hacker", "programmer", "software engineer" or "software guy". I rarely say "technologist" or "coder".
> Hook-up Truck™ is a registered trademark, in case you hadn't figured that out yet.

I'm having my doubts about this statement purely because they're not using the ® symbol that actually means registered trademark. However, searching the trademark database actually does reveal that it is registered[0].

[0]http://tmsearch.uspto.gov/bin/showfield?f=doc&state=4806:5h6...
A van would be more appropriate. Perhaps a Volkswagen Van.
Xeon E3 1240 v3 (Haswell) ;-).
Nginx 1.5.13 Released
The standard implementation of Python is compiled to bytecode, like most modern mainstream languages, not interpreted.
Rubinius does not need Gem replacements like you need in JRuby, it still has a compatible CAPI.

> [...] or they're behind recent MRI features.

Part of this is due to MRI having literally no specification process at all. Python has the PEP system, no such thing exists in Ruby land. People tried to change this in the past (http://rubyspec.org/design/) but with little to no success so far. As a direct result of this there are only two ways to keep up to date with what changes in Ruby:

1. Follow every issue reported on bugs.ruby-lang.org, forever.
2. Wait until users report issues about something not being present, behaving differently, etc.

> And if you care about concurrency, it's different everywhere.

This is FUD. An implementation may offer different primitives for concurrency (e.g. Rubinius has Rubinius::Channel) but they also offer shared APIs. For example, the Thread class works across all implementations as you'd expect. Whether you use this on JRuby or Rubinius the end result is the same: proper concurrency.
I think we agree substantially. I totally agree that to grow, freelancers are not the way to go. I was simply pointing out that there are some advantages to both (freelancers may be very situation dependent), and that both companies and workers should be free to choose which of the two models makes most sense to them.
I'm using it. It cut the startup time in half. Saved memory images could do much better.
Amiga was fun.

I still miss Marble Madness and Hole-in-one Miniature Golf.

And Tom Rokicki was a god.
Gosh I am shocked. Of all the people they would spy on they target a human rights group. Who would have thought it?

We have heard a lot about how people don't want their cloud computing in the US any more, however, as of yet, there has not been a lot about how those that now know they are effectively being targeted have changed procedures.

Anyone in a 'save the world' group care to comment?
I would suggest to run a simulation where nodes are globally distributed and have various latencies with high variance, and then study this problem of non-uniform distribution of information. with GHOST nodes would cluster in physical locations (say Iceland). the latency between those heavy nodes would be very low, and the latency to say Australia very high. the heavy nodes could then co-opt the network. it does not help if the authors proves a bound of latency, because this imbalance would destroy the network. with geographically skewed distribution of information, one can imagine all kinds of weirds effects and attacks. perhaps I'm wrong and will find out this actually works, but even then robustness requires safety over the longterm in very unexpected cases.
Ask HN: Graduating soon, where do I fit in?
Hi HN - long-time lurker, first-time poster.

I'll be graduating soon, and I'm curious about my place in the tech industry.

I've supported myself through school with contracting and internships, all fairly demanding, self-directed development work (lots of work on web apps, tidbits ranging from embedded C to reversing LabView algorithms).

I'm confident in my problem-solving abilities and I feel that I have a good amount of real-world experience, but I have no understanding of the state of the industry or the value of my skills to an employer. I'm unsure of what types of positions to look for, or what I should realistically expect from these positions.

Does HN have any advice for someone in my position, from someone with experience in the trenches?
Perhaps its time will come soon. That would be really cool.
It's unlikely that anyone would be logging that these network requests would be made, let alone the raw input/output. This level of network logging is typically only turned on briefly for diagnostics.
How does this reduce comprehensibility? In cases where you're doing matrix muls, "a @ b" is way clearer than "a.dot(b)". In other cases, infix "@" won't appear.
Clearly when they expand the service into the 'nostalgia' market, maybe an optional '69 Impala, the one where the seat back could be leaned flat back. (A favorite of salesmen and drive-in movie goers)

Seems like a great tool to facilitate prostitution (I suppose that is one form of sexual adventuring)
Thanks for the information. I modified the script to request a different number of bytes. It seems that 16384 is too much and causes the server to abort sending, but lower amounts work to successfully dump memory.

EDIT: The other thing is that it seems better to check for "Server Hello Done" at the end of the handshake message as some servers seem to send all submessages within one handshake message (though not sure if they're OpenSSL-based), i.e. look for ord(pay[-4]) == 0x0E rather than at ord(pay[0]).
-.- sounds like lazy management to me. It really shouldn't be that hard for you boss to be available on a video chat service when he knows he has remote workers.

Have you tried using google hangouts?
Kentucky is 86% white non-hispanic (the 8th highest percentage in the US), and they still had to pull candidates from outside the state for their initial four subjects. I think it is perfectly reasonable for them to wait until they have a first round of results before expending the effort to expand the inclusiveness of the group.

Now that this is out there, others will start trying to reproduce the results and I'm sure we'll see research extend to other demographics.
Looks like it, thanks for the link, wasn't aware this was open sourced yet
I'm not sure if I see your point as it relates to the article. Are you saying that you think I should be describing another path apart from the ones I have listed?

I get that the difference between the level of services you're describing for a "consultant" vs. a "contractor," but I think that has more to do with the capacity of the individual contractor/consultant than the label itself.
Every little helps - Photoshop save for web can give you some quite usefull reductions I shaved 1 second of some key pages on kelley search just from optimizing a single image.
Tinfoil-hat time: is it interesting that within hours (?) of public disclosure of the bug, there's a domain, a logo, a full writeup, everything. The paranoid part of me says the nefarious powers-that-be want me us to use the latest version, as though that would further their goals somehow.

Common sense says I'm just being silly. I just wonder.
So...flat design with shadows? OK.

Everyone just wants to start a trend, don't they?
I didn't assume that this was similar to being an employee. I'm saying that people do make the conscious choice to be contractors over being an employee (this is empirically true, and you just named a few reasons why one might). I think Uber is absolutely a contractor model - the drivers buy their own tools (car), experiment with pricing (can work with any car sharing company, can move to areas with more demand), and take work from all the carsharing companies.
Facebook doesn't have a responsive design because their goal is to load the site and all the apps that hook into the platform as fast as possible with the least amount of overhead as possible.
yup, good point. A good provider should have multiple protocol options but most people would use the default, something definitely to look into changing from the norm. i.e. if a lot of sites use OpenSSL for https then for your VPN you should probably use a different protocol, so no single vulnerability in either would screw you over.
I've got it right here:
Downvotes are particularly troubling considering the plethora of evidence that there is gender-bias in medical research [1][2][3][4].

[1] http://www.sfgate.com/health/article/Medical-research-has-fo...

[2] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1761670/

[3] http://www.bidmc.org/CentersandDepartments/Departments/Medic...
/HeartDiseaseDifferencesBetweenMenandWomen.aspx

[4] http://www.cbc.ca/news/technology/fill-gender-gap-in-medical...

edit: fixed footnote line breaks
Someone broke into my yahoo account a month or two ago to send spam. I changed passwords quickly enough.

It was low-priority, but looking at the passwords that people have captured from yahoo's servers, I used a very very common password theme. Also, a lot of Yahoo users were born between 1970 and 1975.
Site is down for me ("Oops! Google Chrome could not find www.theshortcutts.com"), anybody else having problems? Tried my ISPs DNS as well as the Google DNS
Mike, I signed up and the admin area looks great. I don't see any info/docs on how to actually sell product though. I'm currently using SpaceBox.io for hosted checkout. Do you offer something similar or do I have to host the checkout page on my site?
Data Storage for Modern High-Performance Business Applications
I use privateinternetaccess, good reference comparisons:

http://lifehacker.com/5935863/five-best-vpn-service-provider...

https://torrentfreak.com/which-vpn-services-take-your-anonym...
Well, what do you want to do? Do you like working for someone? Do you like having freedom? Do you like working on hardware, or are you a software guy? Do you have any ideas you think should be in the world? Do you have friends who are also techies like you who you'd like to work with?

It really comes down to who you are as a person. The world is open to you. You can find jobs working for someone else or you can start your own project with your friends.
OCTotallyLazy – Functional extensions to Objective-C
A couple options:

- Work as a fulltime employee doing the same type of work you want to be paid to do as a consultant. It's a legitimate way to get the kind of experience you want to sell.

- Be your own first client. Build something that interests you, and sell that experience.
Really cool that you can reach that kind of valuation with a basket of products, rather than a single run-away network effect fueled win. I find it very inspirational that they do that well by building great software that people love.

also: They really make awesome products (we use BitBucket, HipChat and Confluence)
A Nice Example Of Applying Desktop Virtualization To Improve Customer Experience
The iOS keyboard is not the best example of flat design.

It always bothered me that it does not follow the usual convention of displaying the letters in lower case when the shift/caps lock is not turned on.
With the way things have been unfolding, perhaps that list only includes the NSA itself. Even that might be a stretch.
So is there a simple way to check if an arbitrary site updated their certs?
U.S. Army Field Manual 30-31B
I would think anyone who has an online store would want their checkout to work in all web browsers. IE just happens to have a pretty plain looking window that works best for screenshots where the window is not important :)
good one mitch.
This is such a well written and motivating piece. It literally made my heart beat at a faster pace.
Could anyone point to some good resources for drafting contracts (templates, apps, ect.)?
On a general consumer website since the start of 2014:

IE: 32%
- 11: 42%
- 10: 16%
- 9: 18.4%
- 8: 20.2%
- 7: 2.4%
- 6: 0.07%
BTW, two fun books for consultants, and would-be consultants, to read are House of Lies[1] and The Firm[2].

Both are more about "management consulting" (aka, McKinsey, Deloitte, etc.) than what most of us probably have in mind, but they are both entertaining reads in their own respective right.

House of Lies is a sort of retrospective "tell all" from a former management consultant, and inspired a TV program of the same name. At times it's hard to tell how serious he is, and the TV show is clearly not meant to be a completely accurate documentary (although it may be more truthful than you'd think) but it's a fun read.

The Firm is basically the history of McKinsey, and while that might sound pretty dry and boring, it turns out to be fairly fascinating. Lots of interesting characters involved, and some fun drama and what-not. And it's interesting to see how McKinsey grew from basically nothing, to being the behemoth it is today.

[1]: http://www.amazon.com/House-Lies-Management-Consultants-Stea...

[2]: http://www.amazon.com/Firm-McKinsey-Influence-American-Busin...
My personal opinion as a 20 year old who dropped out...

Lie through your teeth. That job that requires Magento/Wordpress/NodeJS? As far as anyone's concerned, you've been playing with that toolset for the past year or so. They want to see samples? Sure thing. Whip something up by the next day and show it off as if you've always had it done.

I've gone from working for $2 an hour to making $40 per hour, and that number's going to just keep going up but I would be a lot farther behind now if I hadn't pretty much lied about everything.

I wouldn't have gotten the first few clients or businesses to hire me if they really knew that I was just a high school graduate with about 6 months of coding experience. If they'd known I don't actually know CakePHP / Wordpress / Ruby on Rails / Django, they would've never hired me. Instead I lied, instilled confidence, learned it overnight, and basically got paid to learn.

Note this only works if you have the technical ability to learn things quickly overnight.
Software Mercenary

Caveat: I am a contractor.
Show HN: Try Ion before you buy – uses BluetoothLE, Node.js, websockets, jsmpeg
Totally agree with this answer. There are tons of free design resources being shared by designers.
Isn't it horrendously inefficient to be copying the entire blockchain around all the time? What happens if any of those projects achieve mainstream adoption? Are we looking at potentially petabyte-sized blockchains being copied around everywhere?
Ruby isn't JavaScript. Studying V8's solutions to particular problems with making JavaScript efficient may help people seeking to make an efficient Ruby implementation, but how much is easily transferrable I don't know.
Maybe, maybe not. If you are paranoid enough to have this attack in your toolbelt, how paranoid are you that your victim will be watching his traffic and/or request logs? If you have that kind of inside knowledge about your target you probably wouldn't need a tool like this.

For fun and for research purposes, in the past I've set up SSL dumps that just log all the TLS commands and sort them by frequency. The ones at the top and at the bottom of the list were the most interesting.
http://www.amazon.com/Consultant-Independent-Contractor-Agre...

http://www.amazon.com/Service-Agreements-SMB-Consultants-Ser...
Heroku.vim: A Vim plugin for interacting with Heroku
I'm not surprised. We use Crucible at work and everyone loves it. Atlassian makes some great prodcuts.
This is a company that was founded in 2001.

I still remember their CEO building his original audience on TheServerSide.com, back when Enterprise Java was the thing.

They took 13 years to get to this point, a solid 8-9 years longer than most enterprise SaaS companies are expected to take (by VCs). And yet, not a single VC I've asked if they wish they were in Atlassian has said no.

You can build huge companies on your own terms and you don't have to swallow the story that everybody tries to feed you. You do need to do one thing though (and only one thing): get traction and keep it growing.
I think it is more than just connecting supply and demand with a great UX. The UX is actually creating demand. With taxis, Uber has created a whole new market of people who use uber but didn't use taxies before. I see a similar thing happening with couriering.
That is my understanding as well. Any memory in the same process as OpenSSL could be compromised. In the case of Heroku that includes any traffic to/from your app, but not dynos' memory, so internal application credentials should be ok, unless those services were also vulnerable. Hopefully Heroku is coordinating with add-ons to determine that and automatically regenerate affected credentials.
I am a tech lead & developer who wrote this based on my own experience, so I can't guarantee that all of it does.
Jeff Chase (http://www.cs.duke.edu/~chase/) was one of the authors on the 'Architectural Support for Single Address Operating Systems' paper in '92. I read that when I was at Sun and thought it was pretty amazing. It shaped a lot of my thinking about what the world would look like when we got to ubiquitous 64 bit address spaces.

That change is coming. You can statically link to addresses in that world. It makes for some really interesting optimizations in terms of code which falls through into optimizations in terms of JITs.
Genuinely impressed a headline with "NSA" and "Snowden" made it onto the front page.
Designers have been using animations to signal affordances in buttons and actionable elements. Drop shadows are still effective in doing this. Every design trend has been a reaction to the previous one. As interaction designers, we should always be thinking about the end user.