skysight-inc/HackerNews huggingface dataset:
I think it's worth noting that in many ways, the future predicted by these writers are being realized because the kids who grew up loving these books and their premises are building the future that they saw in these texts and dreamed of as a child.
So are your components written directly in a "lower level" language (JavaScript etc.) and then the high level structure relating those components defined in the diagrams?
Were you about to donate your time and money to the project, up until you saw the footer?
In the comments there is a run with -O0 where GCC still takes almost 50% more time than clang. Is it okay to assume that unoptimizied binaries would be quite similar in terms of performance?
The biggest issue here is that users are allowed to pick their own passwords in the first place. Sure, you can require them to use passwords with a capital letter and with a number and with a punctuation character, but that will just make them pick "Password1."

Better: Use one time passwords sent via SMS. Or send a one-time-login URL via email.

If you do have to use a password, just generate a 10 digit numeric code. Sure, some of your customers might complain, but at least you aren't responsible for disclosing people's ebay password when your site gets hacked.
Considering the massive size increase due to debug symbols I'd guess that a sizable part of the 70MB indeed is assembly, at least 20MB and probably even more.

C++ templates, while being absolutely lovely to write and use, tend to do that. Every single different type you instantiate the template into produces a separate compiled copy of the whole template. Write a sorting function and use it for 5 types -> you get the same sort in assembler 5 times with differences that relate to the types they use, alongside with 5 massive symbol names (C++ template symbols tend to be really large).
http://www.crypt.gen.nz/logsurfer/

http://sourceforge.net/projects/swatch/
Two-thirds of NYC’s Airbnb rentals are illegal sublets
yup, for people with commutes, we often have a few big box stores that we pass on the way back from work next to the highways.
Creating your own experimental Bitcoin network
Although Asimov was actually trying to predict the future here, SF writers generally aren't in the prediction business—they are in the speculation business[1] (many modern SF writers claim the 'S' in SF would be for 'Speculation' rather than 'Science').

I find it unfair when SF writers are held to account for their more fanciful speculations—they should be free to ask "What if?" without later ridicule.

[1] In reality, they are in the entertainment business and should therefore be allowed to entertain without later ridicule, too.
GCC 4.9 released
My first impression was that it has to do something with TRON's Kevin Flynn. Quoting him:
"I tried to picture clusters of information as they moved through the computer. What did they look like? Ships? Motorcycles? Were the circuits like freeways?"
I dunno. I think it could be any of those things, or all of those things, and ultimately depends on who you're talking about.

Question though - isn't one of the points of starting your own business that you're having a hard time finding a perfect job working for someone else? Ergo, don't a lot of us "[want] to create a company where [we], [ourselves], would have loved to have been an employee."?

edit - I totally agree with the rest of your comment about arrogance.
The preponderance of grocers’ apostrophes was the first thing I noticed. Using both typewriter (') and typographic (’) apostrophes only added to the distraction and I stopped reading after the second paragraph.
libressl.org is inaccessible via ssl - is it some kind of irony or something?
Neither of these is a better option, in my opinion, because the complexity of setting them up and ensuring security far outweighs the risk of a DoS attack on your infrastructure.

It's relatively trivial to rate-limit access to particular endpoints if you are particularly concerned about DoS attacks, which means you've got a simpler system overall – an simplicity in security is reaaaaaallly worth it!
More people lie about attending church which is the only way you can get the 40% figgure. But actual attendance has not been keeping up with population growth.

"Q: How many people go to church each Sunday?
A: For years, the Gallup Research Organization has come up with a consistent figure — 40 percent of all Americans, or roughly 118 million people, who said they attended worship on the previous weekend. Recently, sociologists of religion have questioned that figure, saying Americans tend to exaggerate how often they attend. By actually counting the number of people who showed up at representative sample of churches, two researchers, Kirk Hadaway and Penny Marler found that only 20.4 percent of the population, or half the Gallup figure, attended church each weekend.
As added proof for the accuracy of this smaller percentage of churchgoers, if 20.4% of Americans (approximately 63 million in 2010) attended the nation's 350,000 congregations weekly then the average attendance would be 180 people per congregation which is almost exactly the figure that numerous research studies have found."
RAA is actually viewed with some skepticism in some branches of logic (not so much because it is invalid but because it can be more easily misused in arguments where the underlying assumptions are not apparent). RAA is kind of analogous to the Axiom of Choice if you like — some logicians go out of their way to avoid it.

Not disagreeing with you, just raising a point.
Its not a replacement for OpenSSL, OpenSSL will continue to exists as it is, but in a while when libressl is stable enough you can choose on or the other.

Its just a fork.
You are going to need to read your paperwork, nobody here can advise you on what is actually going to happen.

On all my share option deals I specifically ask for an instant vesting on a sale/listing event (i.e. we get acquired or we make IPO, I don't need to wait any longer), and when requesting it I normally get asked for an agreement to do a work-in on acquisition - it means the acquiring company is not obliged to, but may, have me work on their team for a year or two post-acquisition so the stuff inside my head doesn't walk on me becoming rich overnight.

However, this is not standard to my knowledge. I have always had to ask for it. Did you? Maybe it was put in place by your employer, maybe it wasn't.

So, read your paperwork, ask your boss, go and seek out professional guidance with your paperwork in tow if you need to.

Good luck, and (hopefully!) congratulations!
That's not "some of your customers might complain" territory, it's "your business failed because nobody signed up" territory.

2FA basically ensures security via a second channel, and it's perfectly possible to store passwords in a secure format. I'm not convinced your ideas there are worth the cost.
Hacker News does the exact same thing. Character strings like 'nsa' and possibly 'bitcoin' are heavily penalized by HN's algorithm. As are links to many sites.

It also seems like it was more a case of the head mods being lazy and not wanting to bring on more moderators. So they tried to automate moderation with AutoModerator.
Understanding gunicorn's async worker concurrency model
So you are pro age discrimination is what you are saying.
Thanks! Yes that would be great - we've thought up some similar ideas too. We'll start working on it :)
The most important thing in life is for life to have meaning. Trying to change the world -- even if you don't succeed -- does that. Trying to make adsense profits go up by 0.1% -- perhaps a bit less so.
How To Create A Winning Sales Funnel [Infographic]
Yep, in NoFlo you write components in JavaScript, though you can also use other diagrams as "subgraph" components.

In other environments compatible with the FBP protocol (http://noflojs.org/documentation/protocol/) the components may be written in other languages. For example, MicroFlo components for microcontrollers are C++.
Git Easter Egg, calls you clever when amending a dirty index
Companies Built on Sharing Balk When It Comes to Regulators
And they could make it look decent by replacing Comic Sans with Arial, Times or something similarly simple. You can't tell me they used Comic for any reason but to annoy people.
You don't talk about using a pepper also, combined with a Salt. A pepper is a constant secret you append before hashing, increasing entropy and globally making the guessing much harder. Webapp2 from google has a nice implementation, coming from werkzeug to be found here http://webapp-improved.appspot.com/api/webapp2_extras/securi...?
I concur. But from what I've read online, you'd be the only person that "suits up" to go shopping at Walmart. (Do not live in America, though.)
'FAQ' itself is usually a misnoner. I remember one website of the late 1990s which entitled its page something like "Presumed questions we found easy to answer'', which seemed more honest.

More often FAQs these days are just product promotions ( even the linked article subtly suggests doing this ).

Some guidelines I'd propose:

1. Don't have any 'questions' starting with 'What is...'. Your FAQ page should not be a marketing or promotional page, it should focus on 'How do I...' and proceed from the assumption that the customer has your product in their hands, but can't make it work.

2. Don't be afraid to link from the FAQ answer to really gritty, technical explanations. SOme of the best sites I've used have these step-by-step techie pages filed under 'Knowledge Base' but easily found through a FAQ.

3. For Pete's sake, prune your FAQs! Frustrating to pick through a page that has been static for five years and references out-of-production products.

4. Close the feedback loop from your helpdesk to the FAQ page; add answers to questions which are, in fact, frequently asked by real customers.
Many thanks for both hyperlinks, they look quite promising however not exactly what I have had in mind. I was hoping to find a tool that would learn 'safe patterns' from given source and then in operational mode would send email if any log does not fit any pattern.
I am about to try building cross-compiler on OS X 10.9 targeting ARMv6 (Raspberry Pi) similar to https://github.com/dwelch67/build_gcc/blob/master/build_arm. I have never done it before, and wonder if there are any caveats?
What's hard about Dutch? I haven't studied Dutch at all, but because I speak English, German and Swedish, I understand 75% of written Dutch anyway. I'd have thought it was one of the easiest languages to learn if you already speak a European language or two.
OfficeOptional San Francisco – livestream starting soon
I get the impression that, even on HN, after some high profile database breach, people still ask "were they using hashed passwords?" rather than "were they using a key derivation function and if so which one with what parameters?".

This tells me that the HN crowd still hasn't got it.

My own attempt at this message: http://www.justgohome.co.uk/blog/2014/02/salting-hashing-and...
New courses approved by CPD
This is deeply pointless. Any attacker that gets the password database is practically guaranteed to get the "pepper" as well. Just Use Bcrypt, pick as high a work factor as you can afford, and worry about something else instead.

(if you have a place to keep this extra secret where such an attacker can't get it, why not just put the passwords there?)
for real. I briefly worked at a Russian news agency, where one guy's entire job was keeping track of the correct transliterations for people and places. I imagine the internet makes it somewhat easier now, but it's still a nightmare.
I like their tools like pfctl, raidctl. Hopefully they create something like sslctl.
Not only do we not always use video, we seem to prefer even lower fidelity communications.

Many humans are less inhibited when they're typing than when they are speaking face-to-face. Teenagers are less shy. With cellphone text messages, they're more likely to ask each other out on dates. That genre of software was so successful socially that it's radically improving millions of people's love lives (or at least their social calendars). Even though text messaging has a ghastly user interface, it became extremely popular with the kids. The joke of it is that there's a much better user interface built into every cellphone for human to human communication: this clever thing called "phone calls." You dial a number after which everything you say can be heard by the other person, and vice versa. It's that simple. But it's not as popular in some circles as this awkward system where you break your thumbs typing huge strings of numbers just to say "damn you're hot," because that string of numbers gets you a date, and you would never have the guts to say "damn you're hot" using your larynx.

http://www.joelonsoftware.com/articles/NotJustUsability.html
As a Chinese, I thought 灯 is pronounced "deng." If it makes "dang" sound, my mom would beat the shit out of me.
Rifkin's Post-Capitalism explained (climate change, the Commons, Corporates)
Airport restaurants only use plastic cutlery when they are located past the security checkpoint.

Edit: US airports. Since this article was about a US airline operating in the United States I thought that went without saying.
What I'm using for my latest project is a not a hash, but using an internal 128 long key to encrypt using PBKDF2WithHmacSHA1 and persisting the result to a blob.
Well done! I'm really looking forward to the further development of cluster and sentinels - IMO at the moment Redis' clustering (or lack there of) isn't ready for production use so that'll be great.
I've been through three acquisitions/liquidity events. The second was my own company.

It all depends on what your stock option program says. Both of the times I worked for someone else, all options automatically vested on a liquidity event. A liquidity event being the acquisition of the company. This seems pretty standard so it may be the case for you. I don't want to get your hopes up because it depends on your stock option program

That being said, the first acquisition I went through, the acquiring company purchased the IP and not the company. The board of directors declared that this didn't count as a liquidity event. Therefore, none of our stock options vested . We all still received 6 figure retention bonuses in cash and stock from the acquiring company that vested over so many years.

tldr; It seems pretty standard in the industry that your options would automatically vest on an acquisition. Even if they don't, it's likely that the acquiring company will offer you some kind of bonus to continue working for them.
Hate to break it to you, but SpamAssassin uses blacklists.
A hash function is a primitive. A KDF is a construction. The construction best used for storing passwords happens to have basically the same goal as the one used to stretch a low-entropy secret into a higher-entropy secret.
Discovery Communications Sells HowStuffWorks.com
You put a vague feeling I had while reading her piece somewhat into words; but IMO, the attribute immature suffices. All I thought after reading was "For the love of $DEITY. Please just grow up.". And I do not consider myself very grown up.

> Honestly, this whole situation shows that all three of these people don't know how to interact socially, like for real, with other people.

I my opinion, the whole affair, and a whole another in the IT/incubator society where the average (not median) age hovers around 25, are sufficiently summarized with these words.
Do you think your tone will encourage anyone to donate?
> I guess this is what happens when you're too close to your colleagues and your company grows up.

There's also a difference between "colleagues" and "employees" let alone "partner's employees".

Look at it like this: a student flirting with an other student[0] is generally appropriate, a teacher flirting with a student not so much. Because the teacher is in a position of abusable power compared to the student an otherwise harmless situation easily becomes fraught with peril.

[0] assuming reason, acknowledgement of rejection, etc..
The reason for his suggestion was to prevent an expensive hashing algo from being a means for creating a DOS, not to make the rainbow table attack any harder... although if you offload an even more expensive operation to the client than you were going to perform on the server, it does make the attack harder.
If you have a secure place to put a key for reversibly encrypting passwords, just put the passwords in that place instead. I'm sure you'll be fine.
Also with that much data is sensible to set up redis in a master-slave fashion for better availability. Once you have that up and running you can split the work between the two, since autocomplete searches are intrinsically read operations.
At SharePoint Conference 2014 the product team specifically announced that there will be a SharePoint vNext released on-premises, released in the summer of 2015, presumably to be named SharePoint 2016.

Apps are being pushed hard for all customizations so as to decouple code from the "core" of SharePoint so as to allow for a better upgrade strategy.

That being said, I do see Yammer as replacing a lot of functionality within SharePoint over the next 2-3 years, but I believe SharePoint as a product (especially as it relates to document management and search) will continue to exist for at least another 4-5 years.
New Apple campus [Official Video]
Outside of actual profiler results for a specific use case, I wouldn't care about something "defeating modern JIT optimizations".
Easier Angular Directives with SweetJS
FAQs with categories often annoy me. Maybe I've just had bad luck or I have a selective memory, but it just doesn't seem to work that well when I've used them. I understand that they're often necessary depending on the volume of content, but I very much prefer just reading down one simple page even if tends toward the long.

It's reasonably quick to scan, or use CTRL-f to look for keywords (without worrying that they might be on another page), and often times simple single-paged FAQs are written better and more cohesively.

Furthermore, even if I'm scanning over a question I wasn't specifically looking for, it answers other questions I might have, gives me a broader picture of whatever I'm trying to do, and informs me of subjects I hadn't even thought to consider.
This happened to me. The ability to say you were employee #1 in an acquisition is much more valuable. I was fortunate that the acquiring company hired me and gave me equivalent options at the same vesting schedule. I eventually left to do my own thing, and funny enough, I'm now in the real estate business too.
I heard an anecdote about some guy telling his Japanese girlfriend, who had made him dinner, "Kore wa oishii!". Turns out he should have said "ga", as "wa" is often used to emphasize contrast, so what the girlfriend heard was "This was delicious [in contrast to your usual cooking]".
People have been "worrying" about DoS attacks from password hashes for years. Strangely, they haven't become an issue in practice. My presumption is that this is because if you're going to launch an application-level denial of service attack against a particular application, it is already trivial to come up with one regardless of how you store passwords.
Do we need to cater for them though? It's like dismissing the idea of the restaurant because some people might overeat.
Seasonal .gitignore and Extension generator for Magento
One reason is ambiguity, this is an extreme example but shows a bit of the issue: http://en.wikipedia.org/wiki/Lion-Eating_Poet_in_the_Stone_D...
"Both seem to suffer from focus on extra features instead of maintenance and reliability."

Unfortunately in the SSL/TLS world, true security is a product of both, as minor flaws in the actual protocol itself are a common enough discovery to make the introduction of new "features" often quite key to the security of the implementation.
The g++/gdb experience for C++ has always been pretty bad. Anyone know how lldb compares?
If someone can DoS your login api, they can do it to another api. Rate limit it. It's not hard. It's actually even easier because people login so rarely, you can really ratchet down the rate and not mess up the casual user's experience.
After reading this, the title is linkbait IMO (the author calls it a "sensationalist title")
Or some variety of PBKDF2 if adhering to standards is more your thing, or you intend to market the security of your system to enterprise customers. The likes of Python's Django use this by default.
Some people "suit up" in a very extraordinary and occasionally disturbing way.

http://www.peopleofwalmart.com/
That was exactly the analogy the gp was making...

Make -> VanillaJS

Grunt/Rake/whatever -> jQuery
>Has there been a recent poll about topics active HN viewers deem as important?

There's an ongoing, full-time poll, based on voting up posts.
Some commenters seem to be offended by the way Bartosz presents his insights. Maybe some background is necessary. Bartosz has been pushing the C++ community for some time now to think more functional and consider the excellent properties of functional languages. His posts are great and his talks are very enlightening. I recommend his recent talk "I see a Monad in Your Future" [0] and I'm looking forward to his talk at C++Now.

Many of Bartosz' discussions focus on concurrency. It is one of the big and interesting problems we have at the moment. The criticism repeated here that "No one will ever be able to debug it" and the like is exactly what Bartosz sees in our future if we continue to program concurrent systems the way we do. He favours adoption of functional programming concepts to manage the complexity of concurrent systems. And I agree.

If code similar to the code in his blog is not acceptable in production code, a code review should make sure it never reaches production. An informed discussion about the pros and cons of such code could ensue during the code review, new insights are gained and everyone walks away a better, more knowledgeable programmer. I suspect this is one of Bartosz main goals.

[0] https://www.youtube.com/watch?v=BFnhhPehpKw
Dark Souls lately, RPG's in general (Fallout is my personal fav)

As a programmer I try to get as fas as possible from "programming" games.
I don't know if you got caught by autocorrect or something, but the German word for "work" is Arbeit. (Which would indeed transliterate into arubaito.)
Nokia Will Rebrand as Microsoft Mobile
Thanks - that makes sense. I just get a bit nervous with the idea that it makes sense to use a diagram-based representation all the way down the stack.
I'm excited to see Sikuli on the list this time around (it wasn't there last time). I use Sikuli quite often, and it's basically just Python but with pictures thrown in, so it's really easy to use.
Not 100% true - I've received steel cutlery even in an airplane (economy class, if it matters). Non U.S. flight, but it did happen.
Atheism is not a belief: it is a non-belief.
Read the word percentage
Netflix To Raise Prices For New Members