skysight-inc/HackerNews huggingface dataset:
Linus Torvalds: "the point is the SHA-1, as far as Git is concerned, isn't even a security feature. It's purely a consistency check. The security parts are elsewhere, so a lot of people assume that since Git uses SHA-1 and SHA-1 is used for cryptographically secure stuff, they think that, OK, it's a huge security feature. It has nothing at all to do with security, it's just the best hash you can get."
Ancient irrigation systems are often the ignored wonders of the world.

My favourite is the Zarch Qanat, which is about 3000 years old and has a tunnel into the water table which is about 71 kilometres long with over 2000 vertical shafts into the tunnel.

http://www.livius.org/q/qanat/qanat.html

http://en.wikipedia.org/wiki/Traditional_water_sources_of_Pe...
Good for web browser demos of how to do stuff in a Bash shell.
I actually started out trying different parsers (Clang, pycparser), but they validate too much. cmacro uses a home-spun parser because it's meant to let you write things like:

route "/user/edit" POST => lambda(Req* request) -> Resp* { ... }

Which isn't even close to valid C.

As for integration: It's pretty simple to operate from the command line, which is good enough for integration with eg. a Makefile-built project.
Its nothing big but basically amounts to adjusting how the source logic and defaults fits. The existing setup is a bit wonky and doesn't work in non bash very well.

That and I have been hacking the init script to not always use sudo. I generally prefer that root not use sudo, and where I work that bits enforced heavily. So there is a bit of logic there as well to allow for sudo as root or not.

Hopefully I get to it today but if not its not a big deal really.
According to the graphs, the US middle class is actually still doing pretty good. I was expecting it to do a lot worse than that of many European countries, but there's only a few countries that have overtaken the US middle class, and then just barely.

Puts all those articles about the weak US middle class in perspective.

The real travesty is at the bottom. The worst 10% are actually doing worse now than 30 years ago. The few groups above that didn't benefit at all from the enormous economic growth of the past decades. The extreme growth of the wealthiest 10% is simply outrageous by comparison. But the middle class isn't doing quite as badly as I expected.
Agreed. So the actual situation in the U.S. is actually worse than it is portrayed here -- which is already not a pretty picture.
.ninja is not in the list, yet.
Release every day and know everything works.
For Ruby apps, there's also http://pow.cx/
Any clue on how do I choose the 'edition' in subscribing? Living in Europe, I would prefer American edition, but cannot find such an option.
I like to spread a little trust around, rather than dump a lot of trust on one, monolithic provider.
Of course it's released right after I get everything to play nice in an Ansible role... But this will help with adoption immensely; I'm sure many people have dropped GitLab simply because installation and upgrades were a nightmare (especially to non-native Rubyists).
OpenSSL is a library, not a program like pf.
The rich have begun to work longer hours than the poor
The Wetherspoon in LGW only provide butter knives due to security reasons. Not too useful if you order a steak...
Excellent point. So while the US middle class seems to be one of the richest in the world according to the graphs, they're actually doing a lot worse than that, due to the lack of government services.
Do you not want the identity provider (e.g. Google) to know every place you log in? (This was something Persona solved, alas...)

Do you not want to be reliant on a megacompany like Google whose spam filters might someday hit a false positive, causing Google to ban your account, and there's nobody to call and you're locked out of everywhere?

Or is it about separation, i.e. you don't want any single notion of your identity to have too much power if compromised (and you're careful to use unrelated credentials, e.g. distinct passwords, on every website)?

Indeed, those are some excellent reasons to avoid any centralized login system. :) Most people won't care, but early adopters might. Startups don't need to care about early adopters after the 'early' stage, but the early stage is critical, so it's just something to keep in mind.

Are you ok with the way that GitHub and Ubuntu outsource the storing of credentials to authenticate a "push" by checking against a public key, for which only the user holds the private key? What if more services worked this way?

That'd be lovely. Unfortunately the key management problem hasn't really been solved: there's no way to make it easy for average users to create a key and use it on a bunch of different devices. "What you know" (a password) is still way more convenient than "what you have" (a keyfile), unfortunately.

I don't think there's any way to solve that without using a third party to sync keys across your devices. Something like that might be able to be done securely, but it'd require a lot of thought and care. (Ultimately we have to trust the service provider with our credentials anyway, so trusting them to sync keys doesn't seem like too far of a stretch.)
The article mentions it was cold. Does the Mammalian diving reflex kick in in cold even if there is no water?

http://en.wikipedia.org/wiki/Mammalian_diving_reflex
People might disagree, but why is this downvoted so much?
Zillow, Trulia, Placester? Boston Startup Moves Into Real Estate Ads
Simply tying some European countries isn't really that great a performance when the U.S. is so much more productive overall. For example, our PPP GDP per capita is 20-25% higher than Canada's. So if Canada edges us out in terms of median income, even just barely, that's not a great showing.
It is, insultingly so.
How does this relate to AWS or OpenStack? Is it somethin' like Heroku – i.e. somethin' that can run on top of AWS?
There is no “before tax” values for any other similarly wealthy country: tax data collection elsewhere is done after most taxes, actually significantly more tax, that pay for free and better public education, free and better healthcare, etc. In anything, an after tax over-estimates US middle class wealth compared to Europe and Canada.
Ok, that makes sense. I'm tempted to rattle the knee jerk, "don't go deleting random crap," but I realize that is a hollow response.

I'm curious how .INTERMEDIATE helps in this case. I did find this link[1], which was a rather fun read down how one might go about solving this, along with all of the inherent problems.

[1] http://www.gnu.org/software/automake/manual/html_node/Multip...
The article's discussion of golf balls reads completely opposite to standard well-accepted theory. The author writes:

> [The "drag catastrophe"] is when an object is falling so fast that the boundary layer of gas separates off the object and the drag force suddenly drops by a factor of almost 10. The reason why golf balls have dimples is to cause this drag catastrophe to happen at slightly slower speeds, so the ball will travel a lot farther.

This is very confused. Golf balls have dimples to prevent flow separation. The dimples are turbulators meant to induce turbulent flow around the golf ball before the laminar flow would otherwise give way to flow separation. Far from decreasing the drag force, flow separation increases it substantially.

[Also, the term "drag catastrophe" appears to have no relevant hits on Google other than this one article.]

[Edit 1]: The author is well qualified and unlikely to be confused himself; so I don't doubt his conclusion. Reading charitably, turbulent flow might be called a form of separated flow, and this must be what the author means. His coefficient of drag graph supports this interpretation as his "drag catastrophe" would be happening when you would expect a transition flow (from separated laminar to turbulent). Pedagogically he should have more clearly distinguished it from the typical laminar separated flow.
Battling robots built by makers to duke it out this Sunday in Cambridge, MA
Makers only have two weeks to build and design an autonomous robot that will take down the competition. Unlike other robotics competitions where teams have a long lead time and do prior work on their entries, this event tasks challengers to build the robots with only the tools that are available in the Artisan Asylum makerspace during its hours of operation over the course of two weeks.
author here. That is odd that it didn't show up at work. It is a Squarespace website so some of those things are out of my control.
I'm with 'sillysaurus3 on this one: I have no interest in using a site that only uses the likes of Facebook and Google for authentication.

You've just listed four good reasons to reject centralisation of credentials with those organisations, and any one of them would be sufficient disincentive in my case.

I can think of at least one more good reason: If I'm dealing with an organisation, particularly one I'm paying for their services, if I have unique credentials with them, and if anything goes wrong on their side, then it's going to be their responsibility to fix it and make good any damage. If I'm dealing with them and using a third party for credentials, and that third party gets compromised in some way, then it seems likely it will end up being my responsibility to sort everything out and pay any related costs.
Testing several words after each other is an old-school brute force method. How hard a password is to crack is basically a measure of the amount of entropy encoded, and there is more than you think in a collection of several words. The comic uses four words for a reason, not three. Sure, replace a few characters if you wish - it does increase the entropy slightly.

Also, know your target. If your target is to secure your account against a web-based brute force, as depicted in the comic, the attacker is likely to be rate-limited by the server, and a reasonable password is likely to be sufficient. If the attacker gets access to the hashed password database, then that's a different matter, but if you have sufficient entropy in your password it can still be secure.

But my main point is this - why do I need an account and password for uncle bob's glass cutting tool emporium, when I am only likely to make a single order in my lifetime? If I don't have an account, and therefore have no password, then there is nothing to hack.
Parallax effect from Google Lens Blur photos
Well the article mentions there is a 76% death rate for these known stowaways so it isn't like he's the only one who survived.

My extremely uninformed hypothesis is the mammalian diving reflex kicks in since the article mentioned it was cold?????

http://en.wikipedia.org/wiki/Mammalian_diving_reflex
For those that want to view a demo of GitLab: http://demo.gitlab.com/
>there are valid reasons for needing to prove your nationality every now and then

Such as passport, driving license, residential address, visa if a foreign citizen, etc?
I like Dover's Science and Mathematics series. I know they have a lot on astronomy, celestial mechanics, orbital mechanics and the like. They also have very good books on pure math. I'm not sure about ML, they don't always have the most up to date computational books.
W3 Markup – PSD to HTML Slicing Service Reviewed
We use and love Atlassian Stash (https://www.atlassian.com/software/stash), it's excellent for code reviews. The diff view options and commenting make it easy to create pull requests, get feedback and eventually merge code into the master branch. (Per branch permissions are awesome too.)

Long time ago we also assessed GitLab and found it usable but not quite there yet for production use. Though it looks nicer now.
It's about not being at the whims of another entity which doesn't give a flying fuck about you, and will (often without or with very little warning) change API, have 'maintenance' (either 'planned' or 'unplanned'), or just call it a day and close up shop (of their external sign in, that is - or maybe even all together). So then you need to provide a fallback on your own anyway, and now you have two systems to maintain - so better to just use only your own.
I really like Treehouse. Their courses are really well paced.

I am also learning Mobile dev (Android) in my spare time. Although I program all day long, I still was not able to pick up Android easily. I tried a few free tutorials online. Also bought a few books. But I would get bored easily and stop learning. Or I would find information overwhelming.

Now I am using Treehouse site. Their videos are pretty good, you build interesting apps and they explain some of the concept better. Their badges are kind of cheesy but also motivating.

They are $25/month though. But you can get 2 weeks free trial and check out as much as you can.
Ask HN: OpenSSL Heartbleed Resource Guide
<ahref="https://drive.google.com/file/d/0B6CeyVxyZP2bLVNWSlJfRWZrWFU/edit?usp=sharing">Google Docs PDF</>

This was originally written with the idea of selling it for one buck. But:
(a) I started late (b) It took longer than anticipated (duh) and (c) I could not (quickly) find a site to host it that left any real pennies per sale for me.
So I'm just giving it away. Would the community please provide some feedback, specifically:
(1) Do you see value here?
(2) Would you pay a dollar for timely information of this nature? Or, to put it another way, would you spend a dollar to save dozens of hours of Googling?

I have a significant list of ideas for resource guides that I would be willing to sell for $1 each, and a collection of literally tens of thousands of home pages, mostly in rather specialized tech areas. (CS, electronics, other science, engineering &ct.) These are organized in a way that I can produce an awesome resource guide in less than 40 hours.
(I've build two, that were given away on now abandoned blogs. At the time these were just experiments for my own interest, but I did demonstrate that I can produce results.)
AND
Can anyone recommend a venue to sell $1 pdf files that has a reasonable fee?
Thanks.
Free education? That only comes by learning from other people's mistakes. If a classroom and professional teachers are involved it's anything but free. They cost big bucks.
I feel like you already answered your own question. These reasons may not apply to you, but they certainly apply to me.

No, I do not trust megacorps to keep my credentials safe.

I do not wish to use the same credentials for every site, for several reasons: in particular, worse consequences of account compromise; worse consequences of terms of service changes.

No, I definitely do not wish megacorp identity provider to be able to link information from my accounts across different websites.

No, I definitely do not want to be reliant on a megacorp. Amongst other reasons, I do not believe that a single entity can provide for all cases and competition in solutions is a good thing.

I don't want my account at random website X to be dependent on external services. Random website X will be slower and less reliable, and I will be less able to access support.

I do not want any single notion of my identity to have too much power if compromised.

I would rather accept the risk that random website Y is storing my password in plaintext rather than accept the risk of using a megacorp (or other external service).
Myjson – A simple JSON store for your web or mobile app
Definitely the same in the UK. It's likely the death of Blair/Brown's 
citizen tracking
ID card scheme killed the idea for other countries considering one.
My previous experience with Gitlab (and others) led me to Gitblit: http://gitblit.org/

Gitblit is in another universe in terms of ease of installation, upgrade and maintenance, and very close on features. Even with a .deb package for Gitlab, my upgrade experience with previous versions wouldn't make me leave Gitblit. It's just dead simple.
Emerging Out Of Stealth – 6 Reasons Dutch tech is on the rise
Hemingway Strengthens Writing
I use Stash and I'm quite satisfied with it. The ability to create branches from "inside" JIRA and then check out in the desktop from Stash is good for newcomers to Git.

Plus the ability to prevent pull requests from being merged without X approvals, at least one successful Bamboo build etc. It's all very well integrated and polished.

I'm just waiting on rebase instead of merge for pull requests.
Can you not just use a password manager and generate unique credentials for the new service, and give them a unique e-mail address as well if you're worried about spam?

Or are you worried about whatever data you put on the service after you've logged in?
Damn. Here's hoping they feel confident enough about their guidance to try a land touchdown next time.
I think it's not so much the allegations of a hostile work environment that would keep people away, it's the idea of working a company with ridiculous drama that looks like it came out of a bad high school movie. It indicates an unhealthy number of non-grown ups in positions of responsibility.
If functions really are same in assembly (e.g. type sizes are same) LLVM's mergefunc pass actually can merge them, leaving only a single copy.

http://llvm.org/docs/Passes.html
We're using GitLab for source code and issue management, as well as for internal documentation, and I must say it's really great piece of software. Plus, it's very actively developed and gets new features/fixes all the time.
I don't want that if Google closes my account I'm utterly screwed up. I'd like to be able to give a fallback e-mail address for example.
But it's bound to happen. Waging war against common usage is so futile.
LLDB does JIT your expression via Clang, and then either interprets it locally or executes it in the target, and you can execute arbitrary commands - for example:

(lldb) expr for (int i=1; i<5; i++) { printf("%d\n", i * i); }
1
4
9
16

It does still fail if the appropriate constructors, templated object instantiations, etc. aren't in the target, as you point out.
No gdb is bad for c++ debugging because it doesn't include parsing support for c++.

At least I'm not aware of being able to type in c/c++ in gdb on the fly like you can with lldb contexts.

So what exactly is "hip and cool" about having your debugger actually use the same parsing engine as the compiler infrastructure? If you have a technical point make it, otherwise stop being the discussion equivalent of acid.
I had no idea that the bar for middle class was so low. Most of us here are nowhere near middle class status. Not that it matters, but before now I would've considered myself and most of us to be.
Yeah, CNN posted this morning about how the airport cameras at San Jose actually did capture/ record the boy jumping the fence and walking on the tarmac to the plane. Cameras are one thing, but having watchful eyes are another.

Implementation of more automated surveillance to help SUPPLEMENT (not replace) existing security guards watching monitors is ideal. It'll be interesting as security ramps up to include things like facial/ body recognition.

CNN article: http://www.cnn.com/2014/04/22/travel/plane-stowaway-security...
Moreover, not in the main canopy but the drogue, which was deployed a few seconds earlier. A fascinating and impressive bit of work.
I've been doing this for about a year or so now and its honestly the best solution for local development I've used in my career.

Recently I've started using Vagrant for more complex sites that require custom server software, or are based outside the traditional LAMP stack, but a Dnsmasq based setup on my mac is still my favorite for most sites.
Wait until the divide between thee rich-middle/poor class becomes
so great we turn into Mexico; where the rich are kidnapped
while sipping coffee, and the police could care less.

The rich take so much for granted. By the way a lot of you tech guys are considered middle class now; but with the low barrier to entry of this world--I see a vast shift to the
poverty level in just a few years.
Support Earth Day. Play Trivia, Offset c02
I would do it like this...

function map(f, ary) {
return [].map.call(ary, f);
}
Canada's more liberal immigration policy, which is attracting educated and highly skilled immigrants, may have something to do with their doing so well. Over time the average education level and IQ of Canadians should end up higher than Americans.

Thankfully the US still attracts the very best immigrant entrepreneurs, such as Elon Musk.
Does confusion impact the conclusion at all?
Exactly, which makes me wonder why the library can support Celsius but not Fahrenheit.

To say it in more detail: To transform between Celsius and Kelvin, you just translate. (That operation is supported in Dimensional.)

To transform between Fahrenheit and Celsius or Fahrenheit and Kelvin, you translate and scale.

We know that Dimensional can scale, because it supports things like miles to kilometers. We know it can translate, because it supports Celsius to Fahrenheit. Is it the combination of scaling and transforming that makes Fahrenheit impossible?
HTML5 and Video Content Marketing: New Trend in 2014?
BitNami (I'm a cofounder) provides free installers, VMs and cloud images for GitLab. You can also spin 1h demos. https://BitNami.com/stack/gitlab
Oh, and as a quick follow-up because I forgot to mention... the article notes how some countries/ airports are signaled as "high stowaway" risk. Captains may look in the wheel wells for a person, but that's not really enough.

If someone were to just hop the plane and plant a bomb and conceal it, it could be easily overlooked by any observer.
May do for the (small) assembly line, what 3-D printing is doing to part manufacturing
That's right! KDF seems to be better than hashing in the case the server gets compromised.
D is excellent for metaprogramming and performance. D's static language is D.
Why would they need that for a temporary web page? And one that has no need to be accessed via ssl? They threw together a page to give you some information and that is all.
I would bet never. yes HTML5 is great for making responsive and mobile friendly sites and apps, and you can use it (with various tools) to compile a native app for a app store however, HTML5 will never be able to match with Objective C, or Java in terms of what can be done in a application.

tl;dr never 100%, their will always be room for real native language apps, but we will see the ratio shift more towards html5 for your basic apps and simple games year by year
A nut with a small explosive (tube of toothpaste) it not the same threat level as some nut with a knife. An explosive just needs to be detonated once to potentially take down the entire plane. A nut with a knife needs to stab his way through the entire plane which despite being one of the "weapons" used on 911 wouldn't happen again with passenger's heightened awareness.
> your business failed because nobody signed up

Why? Almost all websites require email confirmation; sending someone a login-URL via email actually has less friction because the password-choosing step is removed!

> it's perfectly possible to store passwords in a secure format

But it's very hard to do so. Even if you use scrypt, it is very hard to make sure your whole system is actually secure against password leakage.

The simple truth is that letting your users choose their own passwords is a liability; and I've decided to avoid this liability.
The fact that SpaceX has come so far in such a short time is amazing. I am quite confident that they will overcome any technical challenges RE: re-usable first stages