skysight-inc/HackerNews huggingface dataset:
Holy crap, Microsoft donating to the Linux Foundation. Cats and dogs, living together. It's the end of days for real this time.

My one real question: How well has the Linux Foundation managed its money in the past? Are they going to be an effective steward of this fund?
$19 million in financing led by GGV Capital and Formation 8
> I somehow can't imagine an organization named "Linux Foundation" to give money to OpenBSD and other non-Linux related open source projects.

Why not ? I could imagine them giving money to OpenSSH developers at least, seeing how it is part of the core infrastructure.

Also, would you have imagined Microsoft giving money to an organization named "Linux Foundation" ?
Belgium and most other EU countries have pretty strict labor code. This prevents both the overeager Johns and their employers from setting up the race to the bottom where everybody has to work on weekends just not to fall behind.

So this conversation of yours would probably end in an investigation from the labor office to check whether John didn't cross the limits and was compensated fairly for the overtime.
Chandra Sky Map: Visualizing the X-ray Universe
I wonder what is the policy regarding their Debian repositories now that 1.6 is stable (currently we have 1.4.x installed from that same repo).

They broke some stuff in the past moving to 1.4 from an older release, it would be nice to have a "release notes" so we can check what can possibly go wrong (if anything).

The changelog is huge, congratulations to the nginx team!

EDIT: nginx twitter account confirmed that there's no expected disruption upgrading from 1.4 to 1.6. Excellent!
So we can write configs in JSON and get a 'free batteries included' web management console for monitoring queue lengths?

Yes. Exactly that.

Postfix requires the user to understand pretty much all of its delicate (and often very much ass-backwards) abstractions at once, to accomplish even the most trivial tasks.

Aliases vs virt aliases, transports, the six dozen magic interactions of $mydestination, $myorigin etc. with one another and everything else, ... don't even get me started...

Nothing is easy in postfix. Everything is deeply entangled, counter-intuitive and error-prone. And there is absolutely no reason it has to be that way.

See what elasticsearch did for FTS. This is how software is designed today.

I'm not bashing Postfix, it's still a workhorse. But let's not be sentimental about software. Being better than sendmail simply is no longer the big deal that it was in 1998.

Today I expect my MTA to be all that postfix is, and easy to use.
I see this as related and it is less than a month old:
http://www.muktware.com/2014/04/linus-torvalds-happy-systemd...
https://plus.google.com/u/0/+TheodoreTso/posts/K7ijdmxJ8PF

I am not much of a systemd fan so I may be biased but it is interesting read anyway.
Thanks for adding the 2004. I wondered why he was still bashing poor subversion and talking about codeville. Interesting thoughts otherwise. When I interview potential co-workers I ask what makes good code and it's interesting to hear the variety of answers. Definitely one of the best interview questions I have discovered. I think Mr. Cohen would pass my interview :-)
Canada Has a Disease Called Risk-Aversion...
I'm currently running apache 2.2.22 on my Ubuntu 12.04 servers. It works fine. I'll be moving them to 14.04 and thus getting apache 2.4.7. I mostly use it for mod_passenger webapps and static sites.

14.04 includes nginx 1.4.6 but I'm sure the phusion guys will package 1.6 soon so I can easily upgrade to that. Is there any killer feature in nginx that I'm missing, staying with apache 2.4?
Instead, I had to hunt down the person who wrote bugs with only titles and severity level critical....
Shopify vs Etsy by the numbers
I think Microsoft was maintaining their own fork of the BSD stuff. The money for support was going to the internal team maintaining it.
This week in Rails: the backstory
Not that this is a major bug, but it makes me wonder why a bug report of this detailed nature (basically doing the debugging for Microsoft engineers) shouldn't be eligible for a bounty, just as exposed security flaws are.

For this bug, it would be a very small or non-existent bounty since this use case affects almost no one, but what if someone found a major bug that was not a security issue, and worked out the cause and fix, as was done in this case? Is that so much less valuable than a security issue?
Encrypted and incremental MySQL backups
One doesn't need to run OpenBSD to benefit from the work the project has done. You are most likely benefitting from it no matter what OS you use.
Warhol works recovered from old Amiga disks
Indeed, that's what Chart 3 is implying, but housing in Switzerland is also a big problem IIRC.
Simple site deploy from Git
If you need to be on the same WiFi as your target I really don't see the big problem, realistically speaking.
should we be happy about the invention or mad because of another example of corporation grief?
I consider it unsafe to click linkedin links anymore. I clicked through to the comments here because that's the closest I'm willing to get to content posted there.
I'm actually working on this, although for various reasons I had to reimplement the formula parser (corner cases are a pain). Screenshot (in progress): http://i.imgur.com/snyBhYH.png
I think pretty solid arguments can be made for the position that the Linux Foundation approach is the better route actually.
Well, others have written their own scripts - KusabaX springs to mind. There's another one called TinyIB or something as well.
Hand-held malaria tester sequences DNA, suggests meds quickly
OpenSSL source code is a disaster. It's spaghetti that doesn't do what you think it does with horrible documentation. People submit patches from people they don't even know and then you have it: An SSL library that is flawed but everyone is using it. An spying agency and hackers dream.

We don't need OpenSSL, we need another library built from scratch with very clean code and documentation.

Everyone who has more interest on why OpenSSL is a catastrophe should watch operation ORCHESTRA[0].

[0] https://www.youtube.com/watch?v=fwcl17Q0bpk
OTOH, Hacker News is not "the public." It seems to me like most regular users complaints about Facebook are related to too many sponsored posts, junk notifications from games, and missing updates they consider important but Facebook does not.
Yes, they've obviously been working on this announcement for a few weeks. You can't get all those big players on board in the time since libressl was announced.
Generally speaking, nginx is lighter/faster/less flexible (though no less powerful). It really shines on low-RAM VPSes where the RAM eaten up by a big list of httpd processes really adds up.

For example, here are numbers from Apache+mod_passenger on my dev box:

VSW RSS
root 20050 0.0 0.1 416524 21020 ? Ss Apr18 0:13 /usr/sbin/httpd
root 13370 0.0 0.0 217068 1984 ? Ssl Apr21 0:00 \_ PassengerWatchdog
root 13373 0.0 0.0 503104 2324 ? Sl Apr21 0:04 | \_ PassengerHelperAgent
nobody 13381 0.0 0.0 218208 3508 ? Sl Apr21 0:00 | \_ PassengerLoggingAgent
apache 13388 0.0 0.2 500060 33888 ? S Apr21 0:00 \_ /usr/sbin/httpd
apache 13389 0.0 0.2 500060 33888 ? S Apr21 0:00 \_ /usr/sbin/httpd
apache 13390 0.0 0.2 500060 33888 ? S Apr21 0:00 \_ /usr/sbin/httpd
apache 13391 0.0 0.2 500060 34140 ? S Apr21 0:00 \_ /usr/sbin/httpd
apache 13392 0.0 0.2 500132 33924 ? S Apr21 0:00 \_ /usr/sbin/httpd

And those same numbers on one of my production Linode instances, running nginx + passenger:

VSW RSS
root 17824 0.0 0.0 7988 328 ? Ss Apr10 0:00 nginx: master process
nobody 31676 0.0 0.5 8732 3248 ? S Apr23 0:08 \_ nginx: worker process
nobody 9103 0.0 0.5 8684 3288 ? S Apr23 0:03 \_ nginx: worker process
nobody 9106 0.0 0.5 8876 3416 ? S Apr23 0:04 \_ nginx: worker process
nobody 22077 0.0 0.4 8400 3004 ? S 01:23 0:02 \_ nginx: worker process

(yes, I know that ps auxf isn't the best measure of memory usage, but it ballparks to make the point)
Why Comcast Will Be Allowed to Buy Time Warner Cable and Kill Net Neutrality
I think the opposite will be true... openssl will be pulling in what libressl does, and it probally not be long before many of the distro's drop openssl...
> "the Moves experience will continue to operate as a standalone app, and there are no plans to change that or commingle data with Facebook"

I very much doubt this will remain the case for long, otherwise why would they bother buying it?
> There is no story but I enjoy the adventure mode.

Well depends how you look at it... it doesn't have a narrated, scripted storyline but it most definitely has a kind of an open ended story these days. It was added gradually over the years so every update was a bit more to explore.

<SPOILERS> It is quite epic, really... you have to journey to the center of the earth, then descend into hell and finally ascend into the heavens. </SPOILERS>

Nothing forces you to do so, though. You can spend your time farming cows if that's your thing.
Just because.

What if it also had fewer bugs, is more receptive to contributed bug fixes, runs clean in Valgrind, etc.?
Honestly, I dont feel like the mandated kill switch is going to be an issue for someone who is wanting to be able to wipe their phones in the case of apprehension. The guys out there today already have a means ready, such as rooting and having a wipe program ready.
They are already searching phones without warrants.
Sad to see Warhol being too full of himself; his alleged first foray in digital art includes numerous attempts at signing his work using a pointing device. Pop art you say?
> Blaming the VCS that much is a bunch of lazy excuses.

I'm not blaming CVS as an excuse, because as I said, I didn't plan to review it anyway.

> No it doesn't make code review difficult.

It does make code review difficult, for all the reasons I gave. And I've seen several people who try review it complain about that too.
FBI Informant Allegedly Attacked Thousands Of Foreign Websites
It primarily strings together other libraries. Most of the functions are provided by other libraries like moment.js and numeral.js
Show HN: We made an app that let's you meet people by really short videos
Argparse has too magic of a design that you could fully nest it. I tried it many times but you always run into it's limitations.

Links to some open bugs on it:

* http://bugs.python.org/issue13966
* http://bugs.python.org/issue14191
It was almost certainly the link shortener that got ominous's post autokilled by HN code. Here's the translate link: https://translate.google.pt/translate?sl=auto&tl=en&js=y&pre...
Older people die from not being able to perform mitosis of vital cells (http://www.ncbi.nlm.nih.gov/pubmed/12573379) -- a decade-old observation. She is just a new, other data point.
Why Airbnb Will Probably Get You Evicted and Priced Out of the City
Please try to tone down the amount of speculation and blame you are adding to the story. AFAIK, none of the things you are saying is actually true or have come to pass.

Remember, the surest way to spot these types of comments is the lead-in with an ad hominem argument...
I agree with you. The whole "movement" against systemd seems to be "this is very different than the way we used to do things!" Of course it is; computing has changed a lot in the last 30 years since sysvinit was designed. We now care about things like power management, hot-plug devices, etc. and the only way to ensure a consistent method of handling them is to have a single control point. The kernel is also a single point of failure by necessity; so it's well audited and a lot of work goes into making sure it is rock-solid. Because systemd is now the de-facto heir to sysvinit due to its inclusion in almost every major distro, I suspect it will get the same level of care and oversight.

A lot of these complaints boil down to the fact that systemd is a single point of control for a lot of different functions. IMO systemd actually reduces overall system complexity by creating a unified interface for launching any sort of automated executables.
Are you on a 5S? How bad a beating does the battery take?
It reads as if English may not be her first language which could be causing some confusion.
I mean,

Yes I hate PHP more than the next guy,

Yes this code is terrible,

But you know what? I can read it, and follow along. And that's actually more to say than other "beautiful" code that was obfuscated behind 3 or 4 levels of unnecessary levels of abstraction or indirection.
Everyone who relies on ssh should be sending OpenBSD a bit of cash.
That is a great point. Some of this is due to privacy issues -- since my school's IRB board considers "Face recognition" to be "human experimentation," anyone who collects these datasets in a laboratory setting should go to the trouble to ensure that the subjects inside the datasets are treated fairly. Part of that means vetting who they give the dataset to. Sometimes there's bunch of red tap and silly rules about "When you show people dataset samples, you can only use these images... ..." Many of the high-quality pose-controlled sets require you to physically write to some student and request to enter into a license agreement with that institution, even though the dataset might be "free" to access.

There are other datasets from around the web that are much easier to get your hands on. LFW is honestly a great way to start, since it's freely available and since the "Results" page provides links to many state-of-the-art papers in the field (with PDF links for most of them, too!)

"YouTube Faces" is also another good one, containing videos: http://www.cs.tau.ac.il/~wolf/ytfaces/

Columbia has a few great datasets like "PubFig," which are distributed as lists of image URLs that you can download: http://www.cs.columbia.edu/CAVE/databases/pubfig/

See also: http://www.face-rec.org/databases/

If you do want something pose-controlled and high quality, you might just have to bite the bullet and write to the curators of "Multi-PIE" or "PIE" at CMU.
The bounty "prize" is you will eventually have a working product to use.

If you don't report it, then there is slim chance of the bug being fixed.
Perhaps they are just trying to leverage people's personal data. See social trends, etc.
Linode just upgraded me to 2GB RAM for the same price, and apache doesn't seem to be taking all that much RAM. I guess the benefits aren't all that important for my setup. I may as well spend the time improving other things.
For the iPhone 5, iOS5 camera startup was pretty good. IOS6 was really bad. IOS7 was a bit better than 6 but compared to 5, still quite bad.
Given that I wrote parts of this on my honeymoon I think it helped. Fingers crossed :)
Example of using – Scriptcs – to easily base64 encode data in a file
Oh, that is a good point. I didn't see who the author was.
You are probably right, however other reasons for buying them might be acquiring talent, or having access to technology that is either patented / expensive to develop independently.
Supplement:
http://nginx.org/en/CHANGES-1.6
The removal of rc.conf was the final step, but they had been dismantling rc.conf piece by piece for years prior, even before systemd was released.

When I first used Arch in 2006, rc.conf held a lot of configuration. From what I understand, it held even more configuration options prior to that. Since that time and until the removal of rc.conf, there was a steady removal of features from rc.conf.
You think they can be made, but can you make them?

Money on its own can't code though. Money or no money, you need people who can and will start fixing shit.
Facebook is starting to unbundle their apps, so the standalone commitment may be true. Instagram has remained standalone. They're separating their messaging app into its own app.
Canada, Toronto specifically, but other cities are great too.

Canadian government is decidedly anti-Putin. Canada has both start-up visa program[0] and business immigration program[1]. Lots of talent. As for bureaucracy, police state, regulation, and big governments - really depends on whom you ask and everything is relative so I'll leave it at that.

[0] http://www.cic.gc.ca/english/immigrate/business/start-up/ind...

[1] http://www.cic.gc.ca/english/immigrate/business/
Based on my experience with connect that doesn't mean it was fixed in the product version you reported it against or any future version.
Call up a few prospects, explain to them your value proposition, then ask them "how much would you pay for this?". Get the average of those prices. Then call up a few more, explain the value proposition again, but this time tell them directly "Would you pay X for this?". If they seem okay with it, that's a good price to start with (you'll most likely go up since people usually accept a higher price than they think).

If that price isn't what you're hoping, then iterate on how you communicate your value proposition.
Recently, I did a couple of hours of work for a client, WITH A WRITTEN AGREEMENT, and didn't get paid. It isn't worth the hassle to sue and collect for a couple hours of work. So, I wrote the experience off as a loss and moved on.

My rules now:

1. If you want me to write a specification or project plan for you, I expect to get paid for it. If you want me to formally review your wireframes, I expect to get paid.

2. I'm willing to risk a couple hours of work to find out if a client is a deadbeat or not. If it reaches a certain limit, no more work until I get paid.

Basically, you did the work of writing a specification for free (which can be harder than implementation), and now he's shopping around for someone cheaper to implement it. That's why I'll never write a formal specification for free.

If the client is too cheap to pay me for spending a day or two helping him write a specification, then there are going to be other problems later.
Handle Your Heartbleed: iOS Security Best Practices
Sounds like what happened with _This is Spinaltap_. Really good satire cuts pretty close to reality.
Sure, I screenshotted the entire page, but removed the sidebar and topbars.. and it was 13MB, is there anywhere to upload it that takes files that large? imgur.com wouldn't work.
Not only that, but Armin is a master at writing documentation for his libraries. I wish I could be as good as him.
BOOOOOooooooooo. I'm tired of this game of whack-a-mole I have to play on my home screen. If I've learned anything as a modern user it's not to let any app become a part of your routine. It's not worth the hassle when they cash out.
Oh her post reagrding the topic was indicative of her recruitment ability for me. This conspiracy which is clear to most interlectuals would easily be dismissed due to source alone and to panda towards such poor information is to me and many a sign of weakness, again non conducive towards stable manager.

Anybody who is easily lead by such a clear conspiracy is also the type to be in denial of the facts as indicated by this post about not understanding why a sacked employee did not jump thru hoops out of hours later on. We see it, anybody reading it see's it and she did not until after it went viral and enough comments enabled reality to set in that she eventualy realised her mistake and instead of admitting it, she just deleted it and pretended it never happened.

That is the relevance, and indicative that for some this person is not very credible. Employers go thru social media all the time and way it against you, it works both ways.

No witch hunt, rememebr this is instigated by her, everybody is just stating the obvious that she failed too see and then when she did, delete/denaial mode. no witch hunt, just trying to understand the type of person who would make such a post in the first place and if it was out of character or indicative of there mindset.

But any debate can be deemed a witchhunt, just does not distract from the facts. So more a facthunt.
It's the year it was first published:

Form of Notice. — If a notice appears on the copies, it shall consist of the following three elements:

...

(2) the year of first publication of the work; in the case of compilations or derivative works incorporating previously published material, the year date of first publication of the compilation or derivative work is sufficient.

Source: http://www.copyright.gov/title17/92chap4.html#401
I didn't think anyone actually used this app. Anyone know how many active users they had?

I tried to use it, but it killed my battery and couldn't catch things that my Nike Fuelband could, since I don't take my phone to the gym, to run, etc.

Still, good on them for getting a piece of the pie.

I fail to understand why companies keep acquiring mobile app businesses, but what do I know.
2048 ♥ ★
How Baremetrics got its first 100 customers (and thousands in MRR) with Twitter
> I suppose I think you're not understanding her point of view, much as she didn't understand the employee's point of view.

I think I understand what a workaholic's feelings might be in such a situation, although displays of empathy with her seemed out of my comment's topic.

But there's an asymmetry here: it's not my job to understand how workaholics react, whereas it's doubly hers to understand how employees react, as a boss and as an HR professional.
I mostly use lowercase, after becoming aware of the debate and shift around 10 to 15 (I think) years ago.

I think the internet is still identifiable enough, and separable from the world as a unique thing, that it's not outlandish to capitalize it.

Eventually it will recede from uniqueness and capitalization. You would not write the Railroad today.
tempting at a gr8 price. all it has to do now is to work correctly.
What makes LinkedIn links unsafe?
Thanks everyone for your insightful comments: now I've learned that the leaked code is actually from a past leak when 4chan was in a more primitive state, but you're right that it is truly ingenious even then.
I personally don't feel they disrespect privacy and furthermore I know there are others who feel similarly. It's usually those who are outraged (not always the minority) that are the loudest.
Right, what I mean is all asbestos is treated as if it was chrysotile, when not all is. That kind of contributes to the feeling of "wow are we overblowing this?"- even if we aren't.
Yeah, but keep in mind that:

1. It now has a lot more attention focused on it, so it will get more scrutiny.

2. Unix admins have always been wary of the bleeding edge; distros are adopting systemd today, but those distros themselves are unlikely to see wide production adoption for a year or two.

3. If the systemd team's processes are not up to snuff, a major distro will fork it and run it themselves. If the criticisms have any merit, others will follow. It's why open source is such a great model for critical system software: it's as pure of a meritocratic model as you can get (well, if you accept the fact that merit is based on adoption.)

Basically, any new critical unix process is going to have these types of issues. The fact that systemd has a lot of support basically ensures it will get a lot of attention and bugs/security holes will be fixed.
Since I can't understand it, and it sounds a bit humorous to my ears, I can easily imagine this interview with Ms. Geerdens is a Vooza.com video http://vimeo.com/82075734
> There is not a single car manufactorer, that makes profits here in Belgium without subsidisement. (a lot of them moved away from Belgium the last years)

It's the same in Germany though: http://europe.autonews.com/article/20130226/ANE/302269903/vo...
As also noted, pretty solid arguments can be made that the OpenBSD approach is the better approach. My point was that they're not mutually exclusive, and this is definitely a win-win scenario, as we have the potential to get
1. A rock-solid open source SSL library
2. Less surprises in the future.
To be fair, Python without loading site packages is pretty damn fast. Definitely faster than most other things loading up.

$ time python -S -c 'print "Hello World!"'
...
real	0m0.007s
user	0m0.004s
sys	0m0.003s

That's about the same speed it takes my system's cp command to show me an error page:

$ time cp -fail
...
real	0m0.005s
user	0m0.003s
sys	0m0.002s