skysight-inc/HackerNews huggingface dataset:
It's not a team, all you need is one fucking idiot who sometime in the 80s once wrote some software that ended up on a satellite. After that everyone will believe whatever that idiot says.

I once spent two hours arguing as to why using a single static AES key for encryption on an app used by millions of people rather than just use SSL was a bad idea, they talked about how secure it was, etc, etc.

After that frustration I went drinking, when I came back, I discovered that their shitty encryption system had a 4 byte field for how big the message was, I sent 256 requests 20 byte requests to that system with message 'sizes' of 0xFFFFFF00-0xFFFFFFFF and watched as the server consumed about 64 GB of RAM before falling over. (It was a .NET app so a request of that size has to go into gen3, since the subsequent requests are larger they can't reuse the existing block)

Then I openly mocked them in the next meeting, they still went with their shitty encryption system because it was 'good enough' and apparently faster than SSL.
> sensationalist

"the use of exciting or shocking stories or language at the expense of accuracy, in order to provoke public interest or excitement"

The "at the expense of accuracy" part doesn't seem to apply here-- the hacker did in fact scream at a sleeping infant.
Nice web page. What is it?
It's great for quickly hosting a static site on Heroku. Just name your HTML file index.php!
In which he attempts to rebrand net neutrality into the "Open Internet", while also redefining it.

Net neutrality is mentioned a total of three times, once in order to directly conflate it with the "Open Internet":

>"The idea of net neutrality (or the Open Internet) has been discussed for a decade with no lasting results."

and twice in the conclusion, to pretend that's what we've been discussing all along, and again to confuse it w/net neutrality:

>"In summary, the simple fact is that the court has provided a legal roadmap for how we can protect net neutrality and do expeditiously. The recommendation on which we seek comment would result in timely and meaningful Open Internet rules. This NPRM means that consumers, startup innovators, venture capitalists, and others who have been waiting…and waiting…and waiting for the certainty of rules would finally have something on which they can rely. We have been talking about net neutrality for a decade; it is time to put something in place – and to do it with dispatch."

The "Open Internet," by contrast, is mentioned 22 times.
Microsoft Research Special Projects group tipped to take on Google X
> Primitive values are automatically initialized to 0 in C.

No, they're not. Automatic variables without an initializer have an indeterminate value. See http://stackoverflow.com/questions/6212921/is-un-initialized...
Good Eggs Goes Mobile
A series of posts describing how the fullstack JS, mobile site for goodeggs.com was built.
pre-approved IP ranges? Makes it kinda hard to access over 3G then.

Easier would be to make it only available on the LAN and then access it via a VPN. But even that would be too complex for 99% of the population.
Running Out of Power in a Tesla on the Side of a Highway
Try setting the sshd port to 443
It's not always wrong. Never being 100% certain is incorrect. There are cases where you are sure; and in such cases, it should be a viable punishment. Otherwise, you're right, it is not something you can back out of.
Optional types. It's literally says in the thread title.
There are threads every week on /b/ where people look for unsecured webcams and do stuff like this, often with 50 other people logged on to watch.

I'd wager that's who is behind this incident.
There once was a graduate level electrodynamics homework assignment that I waited* until 5-6 hours before the due time to start (it was due at 11:59 PM). An hour until, I found it so difficult that I gave up and decided to turn it in late. So, I left the physics building and walked to a 24 hour coffee shop for coffee, and as I walked, I thought about a particular problem, flipping the system around in my head. I then came across the solution midwalk. Of course, at that point, it was too late to finish it and submit it on time, but it shows how taking time to step back and relax can be conducive to thought as opposed to sharp focus. I find that focus is important when I already know what to do (I just have to just code it or I have to just calculate it) as opposed to _figuring_out_ what to do.

*I didn't wait until then out of negligence, I had enrolled in too many classes last semester and it became close to what I could handle.
No, the host isn't read-only, so if you have malware (which can see the VM and what its doing) you're fucked.

If you boot into tails, it's read-only.
I have the same struggle. I'm actually glad I read this since now I can just go with "sign in" and know that it is at least objectively the most used and therefore likely to be most understood by users.
No worries. I start a lot of writing with a "hook" first sentence and try to end with a memorable sentence. I then diagram the work into bullet points and try to make sure all key takeaways are obvious, note I didn't actually work on the _final_ draft of this doc. I was pleasantly surprised to find they left my first sentence in there.

Some hooks are better than others. I'm an engineer before a writer. It sucks that we have to market tech things, but the sad truth is most announcements that have no "hype" get no hype. I do a bunch of open source work, and some projects I promote and they do well, others I don't promote and they don't do as well.

Generally at Heroku I try to only put one or two flashy sentences in. The rest should be direct substance delivery, though that's not always the case. Thanks for taking the time to click the link, read, and comment!
> So react is not MVC,but you still need MVC somewhere.unless you write one page apps of reactive documents. In that case I think ractive is easier to use than react.

i think MVC is defined without regard for the number or pages or how said pages might be routed. you don't "need MVC somewhere".
ractive.js (which I've been using on a couple of projects) also uses a shadow DOM and learning it is shorter than this sentence.
Lenin and Stalin are what you get when you take Hegel's philosophy, filter it through Marx, and have a leader believe the result.

That is: Spare us philosophers with political power, or at least those who believe such appallingly misguided philosophies.
This is totally the right direction Square is heading to: provide complimentary service which makes the real profit. 8% seems steep but you get their super low 2.75% credit card processing fee so the total package is still appealing.

It's like bundle sale: have something charming as primary item and earn real money by less attractive add-ons.
Adzerk also serves reddit's ads.

Edit: Well this is embarrassing, I was linked here through a user profile and didn't see that this thread was about reddit & adzerk.
Shameless plug-

Stash - PHP Caching Library https://github.com/tedivm/Stash

Fetch - IMAP Mail Reading https://github.com/tedivm/Fetch

JShrink - Javascript Minification https://github.com/tedivm/JShrink

I've also created a PHP Project Template (https://github.com/tedivm/PhpProjectTemplate) that includes things like composer, unit test configuration, travis-ci and coveralls integration, and various other things that people can use to bootstrap their modern php project.
3 Things Twitter Can do to Make it the Most Popular Social Network
Here's the link: http://members.founderdating.com/get/access
While this is the case, I think it's pretty obvious that until this sort of thing happens, security is still seen as a "tack on", and treated like any feature (i.e., might be tested, might simply be released and let users find the bugs).

Similarly, I had a previous experience with a Software VPN provider that simply let my Mac client login without any credentials. I was completely unsurprised.
It's both amazing and scary that this kind of vulnerability is fairly common. Check out this great talk given at Defcon (https://www.youtube.com/watch?v=5cWck_xcH64) to get an idea of the magnitude. These are systems that do not require any kind of tampering or credentials. Most times credentials are given to you in a prompt!
Disqus is hiring a Site Reliability Engineer (DevOps) – SF or Remote
It's definitely not a wrapper, but it does use a lot of its components.
The Death of MOOCs Has Been Greatly Exaggerated
It's not 'internal'. It's the model it presents to the user. Internal would be needing to know how the blob file format works.
Here's are some pre-release screenshots of Chrome from 2008.

http://mikemacd.wordpress.com/2008/09/02/google-chrome-scree...
It's sort of a cross between Javascript and Java. At the moment a lot of the effort is focused on creating (client side) web apps where Javascript is used now, though the team is also working on the server side.

The language feels a lot like Javascript with the warts removed and with optional typing. What's interesting is that the team consists of people with a ton of experience in writing VMs (Strongtalk, Hotspot, V8). This means many of the language decisions were chosen so they were easy to make fast. In practice this means things are sometimes less dynamic than in Javascript.
Yea, I had big dreams of working on compilers and kernels only to realize i'll probably be working on ecommerce sites for the rest of my life.
Typically keyboard instruments come in '60 key' (aka 5 octave) as budget models, and 88 key (7+ octaves, piano equivalent) 'pro' models. Budget samplers sometimes sample a single octave and use integral sampling changes to fill in the rest of the octaves. That used to be to save memory (which was expensive) although it is less of an issue now.

That said, it had nothing to do with being even tempered or not, it had to do with cost. But as Yamaha and others also point out, the harmonics on every key of a piano are slightly different because the keyboard is constructed with all those hammers and strings, one for each key.
> In which he attempts to rebrand net neutrality into the "Open Internet", while also redefining it.

"Open Internet" has long been the name of the FCC efforts that cover the subject matter frequently discussed in public commentary as "net neutrality". ("Open internet" really is a better description of the goal, while "net neutrality" is a good description of the basic mechanism being used to pursue that goal.)
Yeah, this is the only way I keep my browsing sane. Over the years, a kind of "tab garbage-collection" habit has emerged. I find it works really well, since if a tab hasn't been visited in the last 20 minutes, I probably won't open it again.

Additionally, the history-tracking of the browser is good enough and my google-fu sufficient so I can find anything I need that I've previously visited.

Keeping my tabs lean makes me much happier!
That works - I can't tell you how many hundreds (possibly even thousands) of times I was frustrated by that issue with chrome, before I gave up. I can now come home again.
Chewing The Fat With Big And Beefy Chefs Jessica V. Rich M. from HK11 04/29
See, but I don't think they're "internal" at all.

The "underlying model of git" that David refers to (blobs, trees, commits, tags, branches, HEAD, etc.) aren't seen as internal data structures to be glossed over by a UI. They're the very essence of git.
I live a couple hundred meters away from a large park. Not quite the same thing if you really want solitude, but still very nice for taking breaks and thinking.
Wow, thanks! It's great to hear the information first-hand from someone "in the trenches". So, I guess, Ubuntu 14.04 is running, but it's due to some kind of "last moment" special porting effort by IBM, not an official version from Canonical? Or else, why isn't POWER support mentioned anywhere on Ubuntu's website? http://www.ubuntu.com/download/server
The facts are there, but they might be framed in a wait to make them come off as worst, or more impressive than they really are, hiding a more representative reality.

To take a controversial example: Pointing out how many hardened criminals are from a certain ethnic background might be true, yet without precautions about discrimination, correlation between economic opportunities, expectation once jailed a first time, attitude of parole system… it can come off as racist, because it over-simplifies a problem. In many cases, say point out the gender breakdown of declared sexual assaillants, take a minority behaviour to placate it to a larger group.

In that case, the title seems to imply (although, does not say) that the ‘hacker’ was a threat to the baby. He never actually was: yelling at a baby is callous coming from an adult, but their siblings probably do that daily. More to the point, it gives the impression that accessing a home connexion is about bodily harm and threats to physically fragile people -- or even heartless pranks. Truth is: the real issue is a lot more about accessing your digital assets, identity and bank account.
A Motion-Sensing Keyboard
There is a great book, "Musical Applications of Microprocessors" [1] which has an excellent treatment of this. In my early experiments the floating point accuracy of 8bit micros was poor enough that even tempered scales were pretty hard to do. That said, the article describes the different techniques exceptionally well.

[1] http://www.amazon.com/Musical-Applications-Microprocessors-H...
We'll do that eventually, but I'm hesitant to change the guidelines very much just yet.

Also, I think it's a mistake to overspecify the rules. We want HN to be a spirit-of-the-law kind of place. A lot of these details can be derived pretty easily from the core values, like "intellectually substantive posts". Accounts that abuse reposting and deletion are almost always just promoting stuff, which is not the same as posting what one personally finds deeply interesting.

But I'm just thinking out loud here. Probably a bad idea. :)
Well, while, obviously, this is atrocious behavior on the part of the hacker, I can't quite relate. I hovered over my kids and I can't imagine sticking my infant so far away from myself that a baby monitor would be necessary. I never used one. I think that's generally not a good use for modern tech. I think it's the kind of thing that falls under "what's wrong with the world today."
> Matt, given your high profile job and your authority at Google, asking people directly whether there's any truth to this post or not will not reveal the truth.

Actually, that's a damn good way to get the truth at Google.
Slightly off-topic: isn't it a bit weird for them to air two stories criticizing IP cameras in a row?
Your complaints seem like a very indirect way to get what you want. Perhaps it's git's fault for making these possibilities, but I didn't even know they exist.

If you want to revert/reset a file, why don't you just use the reset command? That seems like a more direct way than using checkout.

If you want to create a new branch, why not use "git branch branch-name"? As another said, the "git checkout -b branch-name" is just shorthand for convenience.

I've been learning git over a mere 2 months (I came from svn), I'm finding its UI to be very pleasant.

As someone else said, that index/staging/cached situation is bad, though.
Supreme Court wary of unlimited cellphone searches
Not really: a lot of its value is in the fact that the DOM gets abstracted away as "just another render target" (canvas, and perhaps even eventually native UI's could be potential future targets)

React can fully render out to a string of HTML without any dependencies on a DOM implementation (for instance, if you're on the server)

(http://facebook.github.io/react/docs/top-level-api.html#reac...)
Fair enough, there's always headaches with transpilers; I for one have been suspicious of all the coffeescript+derivatives.
Where are you getting at with the the t(n)?
As you said, the golden ratio is defined as the limit of f(n+1)/f(n), and yes, with this implementation (because f ~ t) t(n+1)/t(n) also converges to the golden ratio, but... so what, why not just use f ?
I wasn't trying to compare WhatsApp to Tumblr, I was trying to compare one exit this year vs the top exists from an entire ecosystem over the past 5 years.

I think New York is great, and I think Tumblr is great, but I think if Tumblr were perhaps in SV, things could have went differently.
"scare" quotes. Literally.
I mostly get hung up on "why doesn't this stupid software support Single Sign On, it's 2014, why am I typing my current credentials into a web page that's either running on the same computer, or running on the local network, which is also going to inappropriately lock or kick me out after NN minutes of inactivity".
Yes, sure, my bad.
Composite view management is made easy with React,much more difficult with string templates and Backbone views.

There are Backbone plugins that help but they dont solve the problem at the source,innerHTMLing views is a bad solution to a difficult problem.

What React doesnt solve is the relationship between the view and a model layer outside the view in an frontend application.

AngularJS does solve that problem but it has an expensive cost.

I think we live in an exciting time where problems like these are about to be solved.

Someone,somehow will figure out how to do things the right way.
I wish I could,not smart enough,sorry ;)
An order of magnitude difference the top 5 exists in 5 years vs the top exit of this year isn't a pissing match -- it's complete domination.
Guitar Forest
I wonder how true that will be given the simplicity of React. Ember and Angular and so big that it takes that long to find the things you don't like. Having said that, I like angular and react in very different ways.
If you did that though wouldn't people still feel that it was unfair?

I wasn't really referring to people's sense of fairness - people just decide that a window is valuable enough that they're willing to pay a premium for it (it's around 20%, in our case).

I can see it generating some resentment, but we've never tried it, so I can't say for sure.

I'm also curious if there is a difference between stating something as a discount vs. the same thing where the better room is state as a premium.

Well, we don't label it as neither of those, but I think that calling a window a "premium" might be difficult, especially when almost all the products in the market (rented rooms) have one or more. The interior rooms are really an exception.
I always saw Scheme as pursuing its own form of purity, in a sense. That sense has little (perhaps nothing) to do with the notion of purity under discussion here, though.
I'm still not getting your point. So what if software is designed with a goal of being magical? The question is how good the real-world results are.

From hearing them talk at events and reading their blog, they seem to be doing fine. Surviving for 6 years and their recent C round from a number of smart people also suggests they are doing fine. If you have some substantial indication that they aren't, I look forward to reading it.
These guys are doing the classic startup shuffle--pick off the profitable people and leave the some chump (aka the government) with the unprofitable ones.

Although, I'm a bit skeptical that they couldn't "undeliver" mail profitably in a city-density area like Austin. Focusing just on businesses and apartment complexes, $640/mo + mileage gets you a person twice a week, for 8 hours a day, at $10 an hour. At $5 per month per subscriber you need to collect about 150 subscribers per month to make your nut.

Really? They couldn't get 150 subscribers serviced by 1 person over 8 hours? Sounds like they didn't control their rollout density or price correctly.

This sounds more like "Waaaaaah, we're only going to be a $20 million company rather than a $2 billion company. I'm going to have to hang my head in shame at the next Skull-and-Bones barbeque. We should shut down."
The thing I find unpleasant with git is the inconsistency of commands. Why git branch -d for deleting branches, but git remote rm for deleting remotes? Etc.

As to git's basic model - a dag of commits, with branches being little more than auto-updating labels for commits - that fit into place in the first 5 minutes of usage. My learning time with git was shorter than any previous source control I used, except for sourcesafe, in so far as that is a SCM.
The branch equivalent is `git checkout foo --`. I wrote a simple shell script[1] that makes that the default, requiring you to do `-- <file>` for files, so there's never a possibility of ambiguity.

[1] https://gist.github.com/russelldavis/e5173ce1269fae67baaf
nganimate doesn't handle the actual animations, it just adds css classes or calls js at the proper points in the DOM fragment's lifecycle. The example site is using CSS3 for the animations.
A problem here is that the Supreme Court is, by its nature, not very tech-savvy. FTA:

The justices expressed varying levels of sophistication about cellphones. Chief Justice John Roberts, Justice Sonia Sotomayor, Kagan and Alito seemed most comfortable talking about the technology. They are, perhaps not coincidentally, the four youngest justices.

On the other hand, 75-year-old Justice Stephen Breyer, who is given to self-deprecation on the bench, gamely tried to engage the Justice Department's Dreeben in a discussion about encryption technology. "I don't know what kind of phone you have, Justice Breyer," Dreeben said.

Breyer replied: "I don't either because I can never get into it because of the password."
This means many of the language decisions were chosen so they were easy to make fast.

This is a big part of how Smalltalk was designed as well. The motivation back then was just to have a powerful OO system that would run fast enough...ish. I've seen emulations of those early Smalltalk systems. The slow reputation came from there.

I suspect the same sort of thinking went into the design of Lua.
I am a hacker, and I find this interesting. Changing perceptions on traditional gender roles and issues is very much within the realm of intellectual curiosity. I don't see a problem with this story wrt. the guidelines.
Is opening your laptop, waiting for it to pull up the site, load the feed, wait until your eyes can actually focus, faster then walking 10-20 feet down a hall to another room?

Maybe I just don't understand the company's target use case not having children of my own.
i wasn't gonna post my own, but might as well.

https://github.com/leeoniya/dump_r.php

via Composer: https://packagist.org/packages/leeoniya/dump-r
I'd love to get information also - my email is in my profile. Thank you!
Another great thing about "walking around with a problem" is that it forces you to think before acting -- since you can't act until you get back to your desk. You know those moments when you're in the thick of coding, and you suddenly realize that one detail which you had thought would be easy, is in fact going to force you to rip up a bunch of code? I make it a rule, at that moment, to stand up and go for a walk. Often, by the time I get back, I've found a better solution.
TC Cribs Tours Optimizely Where Table Tennis Is A Serious Sport
Google Denies Shady Claim That AdSense Robbed Publishers
Varnish – Why no SSL? (2011)
This search gets 21 resubmissions, but 1 of them is a false positive:
https://hn.algolia.com/?q=List+of+common+misconceptions+#!/s...

Last submission: https://news.ycombinator.com/item?id=7655532 (1 point, 2 days ago, 0 comments)

Best submission: https://news.ycombinator.com/item?id=1465001 (168 points, 1402 days ago, 53 comments)
It's nice to see decisions and solutions (especially after 15 yrs) instead of protests and flame wars.
why does the listening end of the monitor have a speaker? My (non-video, non-IP) baby monitors are strictly one-way.
Without the contrasting tabs, 29 looks worse. Compare

28 http://i.imgur.com/FcqNtmj.png

29 http://i.imgur.com/MIMG0s8.png