skysight-inc/HackerNews huggingface dataset:
http://www.securelist.com/en/blog/9175/Android_4_3_and_SELin... and https://source.android.com/devices/tech/security/dm-verity.h...

Sorry for just dropping links, I'm not particularly well versed in this area.
You know what we need, we need to pick one of those people and give 'em one day to invent HTTP/2.0 and it'll be a better spec compared to letting them all "decide" together by nerd-fighting each other into eternity.

No standard is perfect, but the worst standard is no standard.

Make up your fucking mind already.
Eradicate iTunes Errors in Windows OS
iTunes Store requires an active Internet connection in order to retrieve/send information. Failure to obtain information from the Internet shows an error message.
Yeah it'd be nice if they used something like UFO (
http://unifiedfontobject.org/), or even Fontforge's SFD.
It should be possible to take each binary OTF, export it with fontforge, and create a "mirror" repository where you can see the changes in a more human-readable format.
It is worse than you were wondering. In the US, and it turns out most Western nations with "modern" banking systems, there is either outright or quasi-governmental support for taxpayer-guaranteed mortgages. The general public, as you, are for the most part completely unaware of this.

A common "business" in the US is to use various "housing assistance" programs to leverage cash for non-owner occupied housing. These debts are dischargeable in bankruptcy. Generally there are limits to about $2M aggregate and/or 7 properties, depending upon how you work the system. A great many of these "investors" are real estate brokers.

Imagine if your government announced software developers could get 3-10% cash down leverage on up to 6-7 $300K simultaneous projects. If you fail, the taxpayer picks up the tab. And you don't even have to go through YC to get it. Just show that someone else sold their similar project for however much you are proposing you get funded for.

One way to reform this system is to simply turn non-owner-occupied housing into non-dischargeable debt, with a 7-year phase-in on all legacy debt, and disgorging such mortgages back into the private market.
> it's kind of inherently "explorable"

The CLI version of this is using two "things" at the same time, one thing in the CLI and another thing in some form of docs or tutorial or google result or whatever. Where "thing" equals window, monitor, screen/tmux, console tab, whatever. (edited to add, I've never learned a programming language any other way, in the olden days we used ink on paper books as the "other screen")

> different ways of looking for help

Windows / GUI way is one huge app that does absolutely everything and includes the entire world within it including all documentation and tutorials and its a failure to ever need anything outside that app, no matter if its a tool or a doc. This doesn't scale very well.

Unix / CLI way is many tools each perfect at one task, and the perfect tool for docs might be some tutorial on the net or perhaps a manpage, and that is philosophically the way it should be. Feature not bug. This scales pretty well.

GUI way is a swiss army knife. CLI way is a Wiha made in Germany of chromed hardened tool steel posidriv shape size #1 50mm blade length, which costs as much as a generic Chinese swiss army knife, but is a world class screwdriver.
To put the comment and its author in context, Poul-Henning Kamp is the main developer of Varnish, a widely used high-performance standard-compliant HTTP cache.

PHK has experience of HTTP both from the server point of view (the main job of Varnish is acting as a fast HTTP server) and from client point of view (Varnish acts as client to the slow upstream HTTP servers).

As a side note, he also refrained for years from adding TLS support to Varnish after his review of OpenSSL and SSL in general (see https://www.varnish-cache.org/docs/trunk/phk/ssl.html ).
After reading the beginner's guide (which is pretty good and cover most of the simple stuff), I suggest reading http://wiki.nginx.org/Pitfalls and http://wiki.nginx.org/IfIsEvil to see some "best practices" (which usually aren't followed in many tutorials out there, even on nginx's own wiki).
EBay Password Update
I agree that adding this, even if it is horribly inefficient, would be better than everyone reimplementing it at the application layer. I just don't see how you've drawn this conclusion from the linked summary. This sounds to me like a pet gripe of yours and you are just looking for a forum to air it.
Maintenance is a non-trivial cost. And more property you own, more people you need to maintain your property. There's no silver lining in property.
Looked like a good idea until you mentioned JavaScript. Bummer.
Panda App
perfect example of what's wrong with our society.
The best part was for me the "property prices double every 10 years" part. Some people never seem to learn
How will you handle Yahoo's recent authorization bug in your app?
This is with reference to http://thehackernews.com/2014/05/vulnerability-in-yahoo-websites-allows.html

Authentication normally has three steps:

1. Authenticating User : username, passwd verification i.e a valid yahoo user
2. Authorizing Action (role based access): whether user is allowed to perform the action i.e user is allowed to delete comments
3. Authorizing Entity : verify user owns the entity i.e user is allowed to delete only his comments.

How do you handle the third step in your application ?
If UK properties double again twice in the next 20 years then there's either going to be massive inflation or massive civil unrest.
It's getting harder because they keep adding/enabling countermeasures like ASLR, NX, RELRO, FORTIFY_SOURCE
sqlite3 is the package that provides the command-line tool. A lot more packages depend on the dynamic library: "apt-cache rdepends libsqlite3-0 | wc -l" returns 407 results.
I really admire that you are capable of thinking that long term but 20 years is a ridiculously long amount of time. You're on hacker news - what lean approaches can you take to test out ideas for making your dream come true now? Can you open a pop up for a weekend with a landing page to market it? Buy a food truck after saving for 6 months? Take the money you're saving and invest it in yourself, maybe you won't be guaranteed the mil, but at least you will move toward your goals now.
I think I was under the impression that Haxe was just an alternative Flash/AS3 runtime, but it appears that it is actually far more than that? Either than, or the association with Flash is obviously less important these days?

EDIT: I think that impression came from reading this [1] article, possibly found here... or possibly some other article... anyway it talked extensively about AS3 and made comparisons against Haxe.

1 - http://www.grantmathews.com/43
So, IIUC creating a NN basically follows this process:

- define an input vector space (i.e choose dimensions you want to operate on with input data)

- define your categories in another space (or another basis in the same space?)

- set up a transformation pipeline between the two spaces (with at least two stages)

- devise an algorithm that takes categorised elements and produces new transformation matrices

- train the NN (i.e feed input and categorise the result so that through some algorithm the transformation matrices converge)
You can always embed a "metadata" table in your schema. Not ideal but would probably do the job in a lot of cases.
I don't know, if the author of SQLite also reads here, but ...

I am not sure, if having a single key space seems to have possible counter-productive effects on the overall speed.

One example: You want to scan all db entries of one table and the key are random English words. The table itself only has several hundred entries, but there are also tables with text keys with millions of entries.

When I understand the concept right (I don't know), wouldn't that mean, that a huge (common) index would have to be searched and many, many entries skipped, because you use one single key space? Wouldn't that hurt performance very much for that specific operation?
That's a huge mischaracterization.

There are a few different implementations of SPDY, and a clear use case where it applies. Also, it's a clear standard, made for being used.

What's happening here is that there is a group of very active people that create most of the software we use on the web, and have a use case they want to support. At the same time, there are lots and lots of people that are not as active, with a huge amount of use cases that will be hindered, but since they are not active, they have very little voice.
Webseitenanalyse fuer Google – TeacherTube
Aren't there areas of scientific research where people doing genuinely valuable research don't get cited at all except within a closed community? I'd imagine e.g. that a handful of researchers all studying some obscure animal species would have a high h-index but a very low PageRank.
God yes. The `kill rpciod` trick I learnt in Red Hat magazine saved a thousand IBM servers from so many hard mounted NFS servers going down.
sendmail was genuinely terrible: monolithic, unused, uninstallable attack vectors everywhere (echoes of openssl), near-binary configuration which required learning a complex macro language. Even Sendmail X bears more resemblance to Postfix than it does to Sendmail 9.
I think If they found something reliable they wouldn't say it.

But considering their extensive use of water-boarding you're probably right.
A 6% return isn't that special.

Long-term investments shouldn't be zero-risk, since you get compensated for risk with a higher return.

The average "real," or inflation-adjusted, annual returns for U.S. stocks have been about 6% to 8%.
True, but that assumes you already have portfolio, you have the courage to approach 'industry leaders' (especially at a young age this can be daunting), and/or you have an idea of what you're looking for.

If you're good at the right things, and are motivated, you can do fine with and without college. But college can make a lot of things easier, and more natural.

Of course, it can also backfire and turn you into an undisciplined, alcoholic college-dropout.

tl;dr: I'm not disagreeing with you, but I want to highlight that going to college is a perfectly legitimate option with many advantages (if one doesn't consider the debt).
Any opinions on Nginx being more difficult to setup/run than Apache? I'm considering switching, but I really have enough overhead to deal with!
After reading this I was interested to read on his about page that in the past he was in the business of exporting "Audis, Aston Martins, Porsche and Japanese performance cars" to the Far East. Unless there's something I'm missing, surely something like that would require an amount of capital comparable with what you'd need to open a restaurant?
LWN: https://lwn.net/
>property prices double every 10 years or so

Prices yes, value? no. Try measuring a property value in quantity of gold or oil barrels (or a highly traditional commodity mix) and see an almost flat valuation for most properties.

It's inflation magic baby!

AKA, Governments playing tricks with your currency.
Indeed; while it might be more speculation that reality (the firm is not saying much, but see http://krebsonsecurity.com/2014/02/email-attack-on-vendor-se... for what it's worth), I remember reading that it was thought Target was compromised through the path they supplied to a refrigerator and freezer vendor, which they didn't properly segregate or otherwise manage.

There's very strong use cases for this, e.g. those responsible for a store would much prefer being told quasi-immediately that a unit has failed instead of finding it full of ruined food when they arrive in the morning.
I know this is off-topic but I'm also surprised by Google Server's popularity. Can 10% of the top 1000 web-sites really be serviced by Google? You've got to pay for the reports, but I wonder if people using Google's CDN for static assets could be skewing those results. Does anyone have insight into the methodology used to collect this data?
Unfortunately too typical. You're keeping all the performance issues with a LA<database>P stack (high resource-use variance going from low to high traffic), and merely adding layers in front. Unless you need an apachehttpd-specific feature, you should look into moving to a nginx + php-fpm setup.
> There's no (close to) zero-risk investment at the moment that yields 6%.

Aside from FDIC-insured savings accounts, nothing has close to zero risk. On the other hand, something like Vanguard's VTSAX is fairly safe and is currently doing about 20% YTD: https://personal.vanguard.com/us/funds/snapshot?FundId=0585&...

If we have another financial crisis things are going to suck, but other than that, since this fund tracks the entire stock market, it's pretty stable by design. Mix in some bonds and you should be in good shape. (Note: I am merely repeating advice I've run into on financial advice forums.)

With FDIC-insured savings accounts, the best you can do is around 1%, which doesn't even beat inflation.
They do look at your financial situation if you want to make a loan, if that's what you mean.

I was responding primarily to "In the US, if you avoid debt at all costs, you get a rude awakening." As far as I can tell, that's not the case in Holland. It's better to not have any kind of debt if you get a loan. Which seems like a sensible approach to me.

(but I am not well versed in all this, so if you really want to know I suggest you ask a Dutchman who has had experience with loans other than big student loans!)
Kids Don't Appreciate Technology
HackerChat – A private chat for the HN community
Just give it a go. Remember you can set it up to run on another port, e.g. 81, 8080 etc. so you can get it working whilst still having Apache up and running on your site.

For popular CMS applications you can normally find some helpful .conf file to get you started.

You will also need to setup php-fpm if you are running a PHP flavoured 'LAMP' stack.
So much of the time the basic environment isn't even enough. Consider writing a 3D game. You can't just load some data into a structure and then invoke render(). You have to choose the correct library that will be performant enough to work and simple enough to learn quickly. However good your code is it will be too slow if you are targeting the wrong environment. IMHO this accounts for a lot of the actual frustration of learning to code.
Ah, thanks for clearing that up. I think I'm part of the new, or at least newer system. I also vaguely recall they upped the 15 years to 25, but for me it's not a big issue as right now I can pay my monthly calculated amount without issues.
Why making college free wouldn't reduce America's wealth gap
While I agree with your sentiment about property values, your statement "nothing can continue to rise in price over inflation indefinitely" is not true, unless I'm misunderstanding something.

It is possible for an asset class to have greater returns than inflation (in fact, most do), but with increased risk. While this increased risk does mean 'corrections' will happen, returns for most asset classes (especially equity) are significantly higher than inflation in the long run. A world in which no asset class could outpace inflation would require zero economic growth.
The article states these images were taken in ultraviolet, would there be any visable (to humans) aurorae from say, the surface of Titan or Enceladus?
i think what we can do is to run static code analysis to ensure all public methods have the third level authentication written in it. However it won't solve problem of making mistakes in the db queries. would love to see other's answers here if we can come up with generic full-proof solution.
After the success of www.designerchat.co, I decided to do a similar thing for the hackers.

Cheers.
Would going to a European university be an option? The experience of being in another culture itself could be immensely valuable.
Agreed, although the "perfect tool at one task" becomes slightly complex when we consider something like vim. Sure, I consider it to be very good at the "one task" of text editing, but that's such a broad subject, with so many sub tasks that the argument tends to break down.

Regarding help and explorability, I mean something a bit more than this. Take man pages for example; if I know what command I want to know more about, it's great. Without that knowledge, it's much harder to get information. In a weird GUI equivalent, you could click on an "administration" screen, and see the top 20 functionalities under that category (say, "you might be looking for: chmod, last, etc). Kind of a hierarchical breakdown of common functionality. Not only is this situation of zero knowledge more prevalent in today's non-expert PC user world, but it's also the way we've been "brought up" in the GUI world.
Agreed - and I think its called Betteridge's Law of Headlines

http://en.wikipedia.org/wiki/Betteridge%27s_law_of_headlines
Quote: "The funding that supports such advanced particle physics research is drying up, threatening America's leadership role in international science."

Based on this statement, I guess researchers from other countries will find out the answer first. Clearly, it does not mean "we may never know for sure why the universe is expanding."

Also, if the money is saved, they could be used for other useful stuff. I have nothing to complain, since it is not my own money. I cannot ask other people to spend money to fill my curiosity.
They are probably counting each regional Google server as a separate "site" because it has a different hostname (different tld). There are easily 100 of those, esp. if YouTube counts as well.
I'm confused, what's the purpose of targeting language (http://haxe.org/documentation/introduction/compiler-targets....)?

I can understand e.g. people use CoffeeScript because JavaScript is more verbose. But why target Python from Haxe? Shouldn't it be the other way around?
Guy, this plan is like giving public transit directions to Superman. I love that you're lifestyle hacking and I love the dream you're going for, but if you're a web developer, you have a present day super power that is not only in really high demand itself, but you can put it to work for yourself to create derivative works for which there is a substantial demand.

My recommendation is this: If you're currently salaried, find out how to become an independent consultant to free yourself from full-time employment. If you do this wrong, it's worse than full-time employment. If you do it right, you'll make the same amount of money working half as many hours.

From there, identify pain points that still exist across multiple clients or leverage some insight you have into an industry you've worked in to create a business-to-business software-as-a-service product that generates recurring revenue.

It may take a couple years to figure it all out, but I have no doubt you can eventually launch a product that is bringing in the £4166.67 a month you want to save £1,000,000 over 20 years while also doing 20 hours a week in consulting if you still need that to cover your ongoing expenses. (I know a serious lifehacker who has that number down to 5 hours a week with a spouse and two kids, and he doesn't have a SaaS product yet. They're currently driving around the U.S. in an R.V. on a hunt for their perfect town to live in.) That would be on the low end of success in this space. It's also quite likely, you'll make much more in monthly recurring revenue and you can get out of consulting entirely if that's what you want to do.

There are a handful of people who have done this one way or another who are super open and transparent about it, which may be really helpful for you and other people who are interested in doing the same. A couple that come to mind are Patrick McKenzie and recently Josh Pigford. However, if you connect personally with other people who are doing this in chat rooms and such, you'll find that many people are quite open and willing to share numbers, tactics, advice, etc. if they feel it will help someone drum up confidence and help guide them along the way.

I think the first step is transitioning from full-time employment to consulting, because then you can scale your time commitment to people paying you up and down as you need to in order to build your business. And you never have to kick the coffee and wine habit you enjoy... just do another hour of work every two weeks.
Wouldn't most of those be Google own websites ?

If we consider a separate www.google.x for each country then we would get to around 100 very quickly, I guess.

The remainder would be filled by youtube, gmail, etc...
I totally missed "the idea" - it seems like we're in violent agreement!
>>Strangely, Windows is one of the easier platforms to debug. Because mostly there are so many programming for it, thus lots of online experience to mine.

I don't know about that, I find Linux to be absolutely the easiest platform to debug, personally .. so I haven't been much of a Windows 'person', but I do recognize that all platforms/architectures have their strengths.

Its just that, for me, I see the solution to the whole twisted mess of it all is to simply define another platform. Windows serves as a great host environment for a Lua VM .. wrap this in such a way that the same basic code runs on all major platforms, and oila: no more dependency on outside frameworks/libs/etc. You own the platform in the 21st century, or it owns you. Simple as that; from the pepsiPhone to throwaway computing, we're all riding a slippery slope of use/dont-use because of, factually, fads.

The new platform is the platform, as in the entire platform. If you have to subscribe, your toolset is broken.
I've heard of some people successfully getting into passively buying and renting property. How easy is this to do in reality? By my calculations, it's pretty difficult to break even on mortgage when you're starting out, and that's if you decide to play landlord — which may very well end up being a full-time job! And if you want to live somewhere else, you have to hire somebody to do the landlordy stuff for you, which is even more money down the drain. How do people do it?
The VTSAX index is nice, if you're not unlucky. If you invested into VTSAX in mid-2007, then until today your annual return would be somewhere around 3.5%. Not horrible, but not 6% either. It does not matter that this year it's around 20%.

What I'm saying is that you cannot simply take 6% return as granted -- it's similar to saying that property prices double every 10 years. Yes, usually they do raise, but not all the time.

>If we have another financial crisis things are going to suck

We tend to have financial crises in every decade. .com-bust, property crisis, Russian crisis, Black Friday, Japan stockmarket crash... they happen all the time.

US Treasuries are practically zero risk, but obviously there are a lot of other risks - if you store your wealth in USD, then you have FX risk for example as most of your gadgets are produced in other countries like China, etc.
It may also affect your ability to qualify for certain government subsidies, guarantees, et cetera, depending on what your government offers.
I find nginx way easier to set up than Apache, at least for "standard" (PHP, Ruby/Rails, static) applications and sites. The config file syntax is cleaner than Apache's, and setup is easy (through your favourite package manager). The memory footprint of nginx is also smaller than that of Apache (at least with default settings).
I do a lot of heavy Django work and first glance I really like the syntax. Much cleaner that what I'm used to. I will def give this a try at some point and comment further.

Why the name PonyORM btw? I know it's superficial but I much prefer the name SQLAlchemy - has more meaning.
It’s 2014 – You Need a Full Stack Localization Solution