skysight-inc/HackerNews huggingface dataset:
Great argument! I think you are making a valid point. If I understand your point correctly, it is primarily a question of placing a value on different activities and comparing the price of a Soylent meal to the opportunity cost of lost time.

I agree with you. Hence, the reason that I completely support the idea that someone else may face a situation in which Soylent becomes the most valuable option. Without a doubt, I think it is better to eat a healthy Soylent meal than cheap fast food. While I do think that $4/meal is incredibly cheap for the cities in which I live, Paris and London, we still are able to eat on less than that amount per meal by shopping uniquely in the produce section of the market.

My logical jumping-off point is that healthy eating habits are the most important factor in long-term health, which leads to more time to devote to meaningful activities because of increased life span and a decrease of down-time due to sickness. In addition to the value derived from long-term health, I think there is also a value to be derived from the enjoyment of food and the exposure to a wide variety of culinary-styles. However, that is a valuation that other may not share.
It looks very, very disgusting.
I give it 6 months.
I'm working on something like this. Would you be willing to chat about it?
Thanks, I'll definitely check that out!
Is this going to be recorded so I can watch it later?
Can someone please enlighten me? The number one 2048 app in the iOS store is by some company called Ketchapp. It looks pretty much the same (very similar). Did they all clone the web version by the op? Has op released his own version after a month? How does he expect to climb up the charts?
Invalidation ftw
Yeah, finally got in working on Ubuntu 14.04 , looks good and solid !

not working atm, looks like it makes a POST request to a server every times its launched and the server seems to be down .
> Theories are beholden to fact, not the other way around.

Which does not make it impossible to come up with theories, strangely enough.
Distributed Platform Concept for Websocket Based Applications
Agreed.

Someone once came into my office and asked why the email export feature had stopped working. Once they described going to test.php, I realized that about a month ago, I had migrated our version control system to a new deployment system, and hadn't included test.php, what I thought to be an insecure relic left hanging around by a predecessor.

Things that end up on a live web server are one offs much less than the people who make them think.
Going down the off-topic rabbit hole, but I have found that 1.2x speed makes it sound fairly normal but 20% faster!
Massive success for me using kippo.

The typical intruder in our case uses wget to pull down files and that works w/o a hitch.

If you have the time to run it AND check on it you'll learn a lot.
How about a commit hook that warns when it looks like you're about to commit a secret key?
People pick their tools per-project, so I would put it as "if you need to build a database with multiple consumers, AR will be a less valuable choice for any of them, and you are thus much less likely to use it for that project". Right tool, right job, etc.

On your primary question, since I've now played with "select foos from foos" on my PG database: I doubt it. When you do a query like Foo.where(foos: 'value').to_a or Foo.find_by_foos('value'), what you're basically doing is a "select foos.* from foos where foos='value'". If foos doesn't actually exist as an explicit column, that doesn't actually work:

PG::UndefinedColumn: ERROR: column foos.foos does not exist

So it's not like people have been writing queries like that expecting that the implicit column will do something (which I'm not sure would make sense anyway). Unless I'm misunderstanding something, it remains the case that you'd have to have explicitly created a column with the same name as your table to trigger this bug with otherwise working code.

Edit: Of course, maybe there are more ways to trigger this bug than the ones provided in the email, and maybe they include queries where you might be relying on an implicit column for something else, such as selecting foos from foos. I'm just saying the cases listed in the email don't seem to be affected by the implicit column.
Silicone ninja – Can you determine is tits silicone or natural?
Animating Audio Volume with POP
It's always sad to hear when an elegant and useful application like Kippt has to be more-or-less abandoned. Still, congrats to Karri and Jori for joining Coinbase, where their style and keen eyes will certainly do some good.

As for Kippt, does anyone have a good alternative? In the event it does get shutdown, breaks, or some other event occurs?
> has not changed the world in any significant way

Adding the "in any significant way" qualifier essentially means you agree that 2048 changed the world.
Edit: Bit the bullet and bought myself this bundle pack from Leanpub: https://leanpub.com/b/vagrant-ansible/ - Vagrant looks like a great tool to have under my belt. Ansible also looks extremely simple compared to Chef and looks like Vagrant and Ansible compliment each other beautifully.

---

I guess this a good a place as any to ask, pardon my ignorance. What part of the workflow does Vagrant solve exactly?

For example, I'm building a business-class Rails application - normally I have RVM create a gemset specifically for that application. I also have PostgreSQL and MySQL installed locally for any app that needs it.

How does Vagrant fit into this workflow, what am I missing? Also, since the 'dev box' is now a virtual machine does that mean I can only ssh into it and edit code with something like Vim? Thanks for the information.
They don't address how it tastes, but from the articles I have read, it isn't super tasty. That's not the point though. As long as it's palatable enough to get down, it's good enough for me.
Looks like a blatant paid blog ad.
That is insightful and correct, also advise hitting google to keep track of "fellow travelers" like the paper/dice RPG crowd and of course local cons. Most cons have a boardgamer presence even if they're supposedly for RPG folks or card gamers. Somebody who plays Pathfinder Society probably is up for a board (or card) game, and unless you're truly in the hinterland there's probably a PFS group "nearby".

From observation, it seems most cons, not just gaming cons, have some kind of board / card / rp gamer meetup.
Google does not have a monopoly of Android (let alone smartphones). Also, Chrome has not been included in any version of Android I have used.
Remember rev="canonical"? It was to save us from the tyranny of bit.ly and co. Geeks rallied behind it.

Remember Open ID? It was to save us from the tyranny of Passport.NET and co. Geeks rallied behind it.

Remember Diaspora? It was to save us from the tyranny of Facebook. Geeks rallied behind it.

Remember App.net...?

The history of geeky "open" (or ad-free or whatever) alternatives to commercial social media services is littered with corpses. What geeks never learn is that social media services can't survive if the only appeal of the service is some righteous motivation that only they care about.

Sooner or later even geeks realize that using a "better" service to talk to nobody isn't very useful.

I know it seems easy to be Captain Obvious now that App.net is falling apart, but just you watch. Soon enough it'll happen again (and then again, and again).
http://www.vagrantup.com/blog/vagrant-1-6.html

> Boxes can now be compressed with LZMA - LZMA compression can result in much smaller boxes in a lot of cases, and Vagrant can now decompress LZMA-compressed boxes.

any word on how this is enabled, or does it just work? I didn't see anything in the package or box docs.

thanks.
usually isn't this to counter an argument like "poor people think/act/do certain ways." Like they're lazy and don't want to work or other types of speculative arguments. So pointing out that someone isn't poor and probably doesn't know the motivations of another, doesn't seem like a poor argument. I'm pretty sure it's not a valid argument in court to speculate on someone else intentions. (appeal to authority.)
Its a very good point that if you are not able to easily revert and change all your secrets and key's then you are in more trouble than just removing them from the commit log.
Not trying to be snarky, but isn't this "email"?
The atom repo https://github.com/atom/atom has installation instructions for Linux and Windows. Just installing it on Ubuntu to give it a try.
You misspelled the name. FTA it should be written `<a href="http://famo.us">Famo.us</a>`.
I'm one of of the sysdig creators.
Sysdig is a pretty young project (we released it around a month ago), so I can't promise it will be flawless in a production environment. However, we've had many installations under several different environments, and during the month after the release we had extremely few crash reports, which we've worked to fix right away.
I read through all of the code that looked pertinent, and it seems to be exclusive to the larger buildings previously described.

I've had various garages in SF, and always kept vehicles (the 4-wheeled ones anyway) on the street, so I had a bit of a Richelieuian curiosity.

Elsewhere in the code, it defines a garage as "A building or portion thereof in which a motor vehicle containing flammable or combustible liquids or gas in its tank is stored, repaired or kept.".

Electric vehicles would also appear to be exempt, then.
> IRC with OTR

I'm terribly sorry for off-topic, but it really interests me. I've never seen OTR on IRC or XMPP except for private (one-to-one) conversations. Could you go into some details, please?

As far as I know, OTR only works with two parties talking in private. Is there a mature, cryptographer-vetted multiparty OTR protocol with ready-to-use desktop software implementations out there?

The properties that interest me are secure authentication, acceptable forward secrecy and deniable encryption. I.e. I want to be sure I'm chatting with my friends, and if they don't keep logs what was said would stay only between us and the only thing external observer could say is that we had exchanged some information.
Building an Ember.js Production Application with Ember CLI
Show HN: Email analytics for Rails
I appreciate knowing the cost of opted in features: "This package added 66ms to startup time."
> To preemptively address concerns about HIPAA laws, etc, being adequate protection

Broadly speaking, HIPAA does three things:

1. It ensures that you (as a patient) have some rights regarding accessing your own data and records.

2. It requires that entities who collect data on you ("covered entities") go through certain procedures when storing and sharing your data

3. It requires certain procedures if and when data is breached.

It does not require covered entities to obtain consent before sharing your data with other companies[0]. It is often necessary to share data with outside entities in order to provide medical care[1]. All it does is mandate a certain legal structure around that sharing of data.

In other words, your data is already being transmitted in ways that you likely aren't aware of. (Whether or not you view this as good/bad, necessary/superfluous is a matter of opinion, but there are a lot of misconceptions about what HIPAA actually does for patients).

Less known is the more recent HITECH act[2], passed as part of the 2009 stimulus. It provides additional restrictions and regulations, but most of those are around the security of transportation and storage of patient data (and the penalties for noncompliance), not around patient consent.

(Obligatory: I am not a lawyer, I am not your lawyer, and this is not legal advice.

[0] https://en.wikipedia.org/wiki/Hipaa#Privacy_Rule

[1] http://www.hhs.gov/ocr/privacy/hipaa/understanding/covereden...

[2] https://en.wikipedia.org/wiki/Health_Information_Technology_...
This is a neat implementation! I'd be happier to see some attribution in regards to the assets being used, however.

This was a custom player model made for Quake II multiplayer, and it is used by some players today.

Readme for the model:
https://github.com/mrdoob/three.js/blob/master/examples/mode...

The weapon models are actually the stock Quake II models/textures except in the case of the first one, which is the model included with the custom mesh. These are technically freely available through the Quake II CTF demo, but fair warning if you attempt to use these in your project.
I'm pretty sure there was someone who could step up. Product owners usually over value their involvement and thus never give up the reigns, going down with the ship instead of letting someone else take over.
Kippt is a great product and Brian is very fortunate to have you guys join his team. And your talents will be multiplied at a place like Coinbase.

Congrats and best of luck.
This is absolutely not "Just another ui framework". Famo.us takes a completely new approach HTML5 apps and no other framework even comes close in terms of UI performance. There really is just no comparison and this framework is going to change how HTML5 UI is done.
http://docs.vagrantup.com/v2/why-vagrant/index.html has your information.
Thanks Tanner and thank you for being our customer
Interesting. The $2.5M that mcone mentioned was venture from Andreeson Horowitz, not subscription revenue. Also, according to CrunchBase [1], their parent company has raised $7M total. I wonder if this announcement means that the parent company is shutting down, or the employees of that company are no longer working on App.net in a full-time capacity.

[1] http://www.crunchbase.com/organization/mixed-media-labs
perhaps the modern.ie dev vms could be boxed up

http://modern.ie/en-us/virtualization-tools#downloads
Although I hear you and think your concerns are 100% correct I refuse to believe it wont change.

Personally I am hoping that we will see some sort of crypto-protocol which will embed medical documents into it to ensure control with where it is.

It would require some lobbying to make these the only kind of valid documents but I believe things like that will be here before we know it.
you are right, but i believe the point was in the triviality of the find. humanities are often in territory which can not be quantified.
For "nip", I suspect that is because it quite literally is "plumbing" of a sort that people have their favourite tools for from before, whether it's awk, sed, perl, or any other language interpreter that can easily take an expression on the command line (e.g. ruby can pretend to be both awk and sed of sorts with the right command line options).

It looks neat, but it'd appeal to people who spend most of their time doing stuff with node anyway, and doesn't have other scripting alternatives they prefer for one-liners.

There's a ton of inertia for those kind of tools. E.g. even though I prefer Ruby, I tend to use awk for one-liners because I can expect it to be available "everywhere", and because I have "muscle memory" for dozens of common patterns because I started using it so long ago.

That's not a criticism of your tool - just some thoughts on reasons why it might be harder to get attention for that kind of tool.
Obama's Bay Area visit May 8 to include Y Combinator
Building memory-efficient Java Programs
Well, it's also very difficult to justify contributing to a project that's open core because it means assigning your copyright to someone who stands to profit from your work while denying you the same right. There have been projects that have managed to still get contributions under this model [1], but they're probably the exception rather than the rule.

Of course, then when you don't get any contributions that only feeds the justification for focusing on the paid product, because clearly "the community doesn't care".

[1] mysql is the biggest and most obvious example, but it seems like a lot of tension built up over it and that's resulted in several forks existing now. Who presumably accept contributions without attribution to Oracle.
TouchID was never meant to be stored at the cloud level and is in fact isolated on the hardware side to prevent easy retrieval of the data.

From Apple's page on Touch ID Security [1]

"Secure Enclave

Touch ID doesn't store any images of your fingerprint. It stores only a mathematical representation of your fingerprint. It isn't possible for your actual fingerprint image to be reverse-engineered from this mathematical representation. iPhone 5s also includes a new advanced security architecture called the Secure Enclave within the A7 chip, which was developed to protect passcode and fingerprint data. Fingerprint data is encrypted and protected with a key available only to the Secure Enclave. Fingerprint data is used only by the Secure Enclave to verify that your fingerprint matches the enrolled fingerprint data. The Secure Enclave is walled off from the rest of A7 and the rest of iOS. Therefore, your fingerprint data is never accessed by iOS or other apps, never stored on Apple servers, and never backed up to iCloud or anywhere else. Only Touch ID uses it, and it can't be used to match against other fingerprint databases."

[1]http://support.apple.com/kb/HT5949?viewlocale=en_US&locale=e...
I'd say "no", since existing email clients don't lend themselves to custom per-message user experiences.
its really sad to see how many AWS Keys are public in github right now. A quick github search reveals many, many key pairs that were checking as recently as this week.
Apple porn guy wants to marry his computer
nice and eerily familiar.

Codebase I once worked on, I found a /csv route that dropped the entire customer database in CSV format and /route_csv that enumerated all the routes the application had including admin and cron routes :| (denial of service by spamming the cron routes that did no access checking was the least of it).

When I checked the commit date it was 19 months ago..and in production for 17 months :|

The midden and the windmill fully hit each other that day.
I'm in 10000% agreement. And I know from past conversations with Dalton, that this was his larger vision too.

I do agree that starting and focusing so much on the Twitter-clone aspect was what prevented the service from moving beyond that.

It's a shame too because we do need the pipes and infrastructure that can exist without being tied to any specific platform. Build the platform later -- customize it -- but let the identity act as its own piece.
Vagrant makes it so that you can easily make production and local dev exactly the same (using Puppet, Chef, Salt, etc.), even when your developers use many different platforms. This solves all sorts of problems, like, something working locally but not in production, or the half day spent by each developer trying to install and correctly setup some new dependency.

Vagrant can share folders between the host and the VM using whatever shared folders option that Virtualization platform you're using has.
The effects of space travel on the human body
I would scrub the repo anyways because revoked secrets can still be used for social engineering. "Hey $HOST, I got hacked. My old password was $PASSWD and you can be sure it's me because $PUBLIC_INFORMATION. Can you send a password reset to $ATTACKER_EMAIL?"
Buy Oculus, create a VR world that replaces the Web, sell targeted ads in this VR world that convert better than AdWords.
> Semantic Versioning starting with Ruby 2.1.0

> MINOR: increased every christmas, may be API incompatible

That is not semantic versioning.
I usually explain it to non technical people some kind like this:

Opposition to DRM can have two aspects, which are good to differentiate to understand the issue.

First reason is ethical. DRM as preemptive policing is insulting in treating all users as potential criminals by default. Its overreaching nature is unethical and as such should be opposed the same way you'd oppose something like police state approach to society.

Second reason is pragmatical. DRM always cripples digital products by reducing usability (To put it differently - DRM always gets in the way of the legitimate user).

There is also another set of reasons which are kind of in between the two above - security and privacy. DRM always can be viewed as security and privacy threat, because the very premise behind the DRM is not trusting the user, assuming all users are potential criminals. As such, DRM usually intends to monitor and limit users' activity, like any policing does, except that DRM does it in user's private digital space, on their hardware, in their systems and programs they run and etc. Since trust should be symmetrical, users should not trust any DRM and should view it as a security and privacy threat, especially since DRM implementation is usually some black box code and you have no clue what it can do. So viewing any DRM as potential malware is a good symmetrical approach to it treating all users as potential criminals (infringers).

I'd say out of these, ethical and security / privacy reasons are most important, while the issue of convenience is less so. However most people concentrate on the later and even came up with a term "DRM that doesn't get in your way". That's simply incorrect - DRM always reduces usability by limiting what you can do with digital product. That's one of the main points in it.

So DRM always gets in your way. Some DRM can be less apparent though, while another can be very much in the face. I'd say actually the first one is even worse (not like some would assume that DRM that doesn't bother their comfort can be acceptable). The reason is simple - if it's hidden and not apparent it must be even more sinister than one that's very obviously deterring your experience. It's like a hidden camera vs an open one. Hidden / "unobtrusive" DRM is worse because you don't pay attention to it and get comfortable with using it.
And before App.net, there was Identi.ca.

What is disappointing about App.net was that it had the potential to be a set of pipes and a broader infrastructure rather than being simply yet another social network. And that's what my true hope for App.net was.
Yep, I saw that but it doesn't really answer my question. :(

If you're a developer, Vagrant will isolate dependencies and their configuration within a single disposable, consistent environment, without sacrificing any of the tools you're used to working with (editors, browsers, debuggers, etc.). Once you or someone else creates a single Vagrantfile, you just need to vagrant up and everything is installed and configured for you to work. Other members of your team create their development environments from the same configuration, so whether you're working on Linux, Mac OS X, or Windows, all your team members are running code in the same environment, against the same dependencies, all configured the same way. Say goodbye to "works on my machine" bugs.

---

It doesn't answer if I can only ssh into the box and write code there. I need more actual workflow data.
This looks interesting, but am I looking at Google Plus correctly and really not seeing an 'Add to calendar' option to put this event on my gmail calendar? I could have sworn Google was really good about making it easy to put stuff on their calendar. Yeesh.
For me pieces of infrastructure like Twitter shouldn't be owned by for profit companies. A Twitter-like public forum ought to be the town square of the web, and it should run along the same lines as Wikipedia. The data should be ours to do as we please with, there should be no purchasing access through adverts. App.net, and the insanely confusing concept of the Alpha app within it, might not have been the right solution, but they were asking the right question.
Then the welcome.md is out of date. It's been open sourced.
Some Background:

The RailsConf keynote that started it all:
http://www.confreaks.com/videos/3315-railsconf-keynote-writi...

David's thoughts in blog post form:
http://david.heinemeierhansson.com/2014/tdd-is-dead-long-liv...

A response from Kent Beck
https://www.facebook.com/notes/kent-beck/rip-tdd/75084019494...

This should be a great discussion.
Show HN: A MVC framework written in Hack for HHVM