skysight-inc/HackerNews huggingface dataset:
Ask HN: How should a software engineer go about making a website?
I have been a professional software developer for four years now and must confess, I have never made a website. Mostly I have done systems engineering (Deployment, security, database infrastructure) but also some QA work and Java app development.

I wrote a fiction book in my spare time and would like to create a site to promote it and possibly develop the IP into other products. I already have a domain. The thing is, there are so many ways to create websites. I want a framework that is easy to use but also not too cookie-cutter. I've heard good things about Squarespace.

My best languages are Python, Java, and Ruby. Pretty solid with Unix (I've written hundreds of BASH scripts) and I wouldn't mind writing HTML and CSS if necessary. I know Javascript a bit too.

Anyway what do you folks recommend?
I found the discussion, cited by the Amazon response, pretty insightful (and it shows some shades of grey - no not 50! - with regards to the issue at hand)

http://www.thecockeyedpessimist.blogspot.com/2014/05/whos-af...
inb4 LibreCrypt
That's generally true, but I would say that in some instances you can substitute one book for another. For instance, books on a particular programming topic are often interchangeable.
Maybe something like the Lavabit scenario where they rather close the shop than sell their users out. On the other hand, proposing Bitlocker as an alternative would be rather suspect in that case.
One thing I have noticed is that the version they have on this site is 7.2, and if I remember this correctly, it was 7.1a that was on the truecrypt.org (checked a few days ago...)

So they've put up a new version and telling us it's for migration only?
I agree. I think the difference is the sequence you do it in. For me, it is so much easier to get the code and look at it and step through it, THEN read the documentation. This approach helps me to focus on the parts that are unfamiliar, which I will research in more depth. At some point, you do need to read the documentation. Just not necessarily monolithically before you start experimenting with the code.
Show HN: Emphatic: SMaaS – Custom social media updates for businesses
If their site/dns/whatever was compromised than there's no way you can trust the GPG signature at this point. I'll await a proper press release.
Ruby + Sinatra
I've been busy building Emphatic over the last couple months. I wanted to open it up to the wider community to get some feedback on the service.

To give you a concrete example of how it works there is a review of our service on the Small Business Trends blog today: http://smallbiztrends.com/2014/05/custom-social-media-conten...

Any and all product feedback is welcome. All we care about is getting better and better at what we do! Thanks in advance!
It's not that the tyepchecker will miss things, it's that, for folks coming from other languages, it's not clear that there even exists a separate typechecker you have to run!

There isn't a mailing list right now. A few discussions are just in-person since we sit next to each other, but we're trying to make things as transparent as we can. Lots of stuff (and hopefully more moving forward) happen on #hhvm on Freenode or on GitHub issues -- basically the same channels as the HHVM project itself. There is also nontrivial discussion during code review, which is very unfortunately all internal right now; we hope to have that all moved external as soon as we can. (There are a lot of tricky integrations with internal tools that need to happen for that to work.)
A Better Approach to A/B Test Analysis
exactly. This makes no sense. Security Audit. XP support ended in April not May. Also Truecrypt is open source... when it is not secure why not fix it? And why care of XP support? There are more open questions than answers.
If you scroll to the bottom, you'll find this link: http://truecrypt.sourceforge.net/OtherPlatforms.html
I think what this planet needs is a comprehensive study of how different typing techniques and schools of thought would solve different classes of problems, because what I notice is that

1) definitions are hard, and don't mean much

2) there are many equivalences, and some idioms are conceptually very similar across different type systems, and are just not implemented the same way. For example, a it's a common hobby among FP weenies to show how most of the GoF design patterns are one-liners in their languages of choice.

3) the scope of many typing disciplines is not the same; for example, unityped languages work great for tasks of limited scope with lots of user interface components, functional is historically used to write nice algorithms, and OOP is an attempt at giving a distinct shape to software of very large scope (and it happens to be a pain in the ass when the scope isn't that large)
Google calendar would require double entry. Right now the calendar links directly to forum posts and can be created, edited, and deleted at the same time. There is also an issue of moderator training if the site gets larger or someone else takes over after me.
I think more about, say, sending a probe places, having it scan the area with minute detail, and then broadcasting it back so we can walk through it virtually. We've talked about theoretical wormholes existing at an atomic level. If you could transmit data back and forth through a wormhole to an interstellar probe with insanely high resolution laser scanning, then recreate that world virtually, how far off are we from actually visiting the place in question? Really does make you wonder how important our senses are in the grand scheme of reality.
2048 Box – your day is over
Life Hacks for Entrepreneurs
JavaScript Error Reporting Using Source Maps and Sentry in Django
Congrats for the release, but i will keep using https://github.com/primus/primus.

No module lock-in!

Yes i'm a bit biased.
Ask HN: New technical cofounder. How should ownership work?
As a followup to my question from a few days ago, I found a startup that I'd really love to join.

The business has a really solid business model, a working prototype built by a contractor, the attention of local angel investors, etc. It's a really good fit.

The current founder needs a technical cofounder to help him raise his Series A funding, and at this point, it's looking like I'm that guy.

We've gotten to the point where we need to discuss how much equity I'll have in the company by joining as a cofounder, how it will vest over time, etc. The problem is that I don't know how this should work. My previous startup experience has always seen equity evenly split among all of the cofounders, but I don't think it's appropriate for me to ask that in this case because so much of the work is already done.

Has anyone else been in a situation like this? How did you handle it? Any suggestions for me?
For none of the extensions measured I had to go out of my way to set them in block all mode (mine is definitely still geeky compared to others -- it's more suited for the NoScript/RequestPolicy crowd).

I just re-installed all of them, and now I find they are all easier than ever to set up at install time. I had to tamper with Disconnect defaults months ago when I installed it, just like Ghostery and ABP. I appreciate it's no longer required.

If I adopt your arbitrary rule it would be pointless to do comparative measurements of privacy protecting power. I rather click once on a button at install time in a wizard (ABP, Ghostery) to be able to perform meaningful measurements than having to adopt a nonsensical methodology which would provide no useful information to end users.

Rather than dismiss the results, I think you should reproduce it and make a diff to find out what Disconnect doesn't block, and see how it can be improved. Maybe I will work toward finding more about this in the next benchmark.
If this is a hack, then the truecrypt.org site (or dns) and sourceforge site are both compromised, suggesting a dev got hacked who would have had access to both, and perhaps the TC signing key as well (not everyone practices good signing key hygiene, like keeping it offline, even for important software projects).

Even if it's a legit announcement, I wouldn't run that 7.2 binary. Anyone running truecrypt already has truecrypt, right? I don't know why they'd release a new version at the same time as such a dire and panic-inducing announcement.
Well, the thing is though, it's not that they were hosting users' data. It's not like they would be forced to provide the contents of users' communication.

I suppose they could be approached by someone to plant backdoor into the software, but I wonder if that can be done without someone noticing it...
Discourse lacks an integrated calendar. Also, forum notifications aren't sufficient when I want to set a weekly events newletter to people that haven't read the forum recently.
I find it funny that the article repeats several times the amount of data that square. Do you know who has more data? The bank where the business has its account ;)

That being said, the current process from banks seems old and not really clever to me
I'm seeing a message, "This project has been temporarily blocked for exceeding its bandwidth threshold."

Does anyone have a cached version?
But at least with Square we have relatively more transparency about their activities and intentions with such data. So while it may not literally be more, it's like functionally more?
Although Kenn White, who wrote that message, has no idea what's going on [1]

> .@FiloSottile @matthew_d_green no idea. It's doing a 301 perm to a static pg @ SF, now blocked. Possibly compromised. pic.twitter.com/g5tSFUuXzu

[1] https://twitter.com/kennwhite/status/471740840478797824
American Airlines Fined $500K for Using Lie Detectors on Employees in Brazil
In order of likelihood:

* Defaced site, timed to screw up a big announcement
* Rogue content maintainer
* Phase II of audit turned up something rather bad
(edit: NO - see tptacek below)

edit: Variations on "developer forced to do this" (cf simmerian's comment):

* Developer was big brother all along and they are shutting it down
* Security vuln about to be disclosed, dev scrambles to inform (albeit poorly)
* Legally or otherwise compelled to compromise source code,
dev complies and/or nukes project from orbit

The last alternative would be suggested in part by the strange content of the page, assuming it is legit from the developer: Normally I'd expect at least something like "there's a major vuln that is unfixable and we'll disclose formally in a week/two, migrate now.".
I'm busy preparing for my Royal Lies and Damn Lies Society exams. Will look at this next.
Wikipedia entry was edited and reversed with similar message: https://en.wikipedia.org/w/index.php?title=TrueCrypt&action=...

By "Truecrypt-end" user: https://en.wikipedia.org/wiki/Special:Contributions/Truecryp...
Detroit urged to tear down 40,000 buildings
I think the point was just that the advice given was so vague, that it seems suspicious that this is actually an official communication.
There is an entire Merchant Cash Advance industry based around these kind of loans. It was a big innovation around 16 years ago.
It's almost certainly the multiple animations (<video> elements) on the page.
Is there a salary attached to this deal?
If anyone is interested here's the task force report:

http://s3.documentcloud.org/documents/1173946/detroit-blight...
This doesn't pass the smell test. Either there was some underlying political reason for this migration or someone hijacked the DNS.

Anyone know who the main committers/project leads are so we could reach out for comment/clarification?
I'm having the exact same issue.
Site seems to be getting close to bandwidth quota and returning error occasionally. image mirror from @FiloSottile, https://pbs.twimg.com/media/Bov18I1IYAEGFEb.png:large
Our Incredible Journey – Tumblr tracking Aqui-hire Shutdowns
Infinality.net font fixes
Honestly, I equate the use of RG in this case to be no more different than how the media amplifies the actions of any shooting or tragedy. It's only going to merit attention for a wrongdoing, and this could desensitize people sharing the same mindset as Elliot Rodger had.

It would be a kindness to everyone if RG simply delisted the journal for the immediate time being, and then restored it in the future, possibly a year or so from now.
The Frustratingly Lovable Crazy-making Huggable Ball of Whack That Is Ember.js
A much simpler explanation is someone defaced the site around the same time a new release was coming out. Is there anything in the signed release package to corroborate what the site says?
He's responded specifically about the message:

.@Costly no idea. The announcement was about a
new Open Crypto Audit Project initiative, not TC.

https://twitter.com/kennwhite/status/471741290552782849
So... Scala, then?
Wordpress?
(Kidding...). I like Python Flask or Python Bottle.

For a small site I would just write the HTML. I realize this isn't a popular opinion nowadays, but sometimes it beats monkeying with frameworks in my opinion. Especially when you don't need to. And easier to set up hosting on shared hosting services. Check the purecss.io post from earlier this morning. They have some nice layouts.
My first thought: what a good idea.

My second thought: why didn't the card issuers think of this first? They're actual banks and their whole business model is lending money.
You do own the software forever. It doesn't expire after a year; you just will no longer have access to new releases and support. It's their last FAQ item on the pricing page.

It does seem a bit odd to hide that detail on the very bottom of the page. I have other development tools (JetBrains products) that having similar pricing models without signing up for a "subscription" and with a discount for renewing each year. I feel a lot better about that than what Xamarin has presented here.
I got a call the other day offering the working capital / the offer terms were absolutely amazing. I think some of that though was because they knew from our account we most likely didn't need the money.. Paypal also matched our CC rate to get us to accept Paypal on the site. I warned them when I signed up 'I've heard the horror stories and any sign of that and we're done' .. been 2 years and still great
This is creepy as hell.

No mention of why it's supposed to be not secure - it's an open source project so it would be easy to point to a specific vulnerability. All of this shortly after passing audit. There are detailed steps towards switching to supposedly secure closed-source solutions by companies known to be working closely with the NSA.

Also, since when do open source projects suddenly decide they are not as good enough as a closed-source alternative and then stop the project? Are we in danger of seeing a similar message on the homepage of LibreOffice and OpenOffice, declaring that you should switch to Microsoft Office?

I can't even begin to imagine a valid scenario in which something like this would be put up by the developers, with no pressure other than some fatal security flaw about which they just really don't want to talk.
Prof. Stephen Hawking on how England can win the World Cup
The SF account could have been compromised too.
They aim on enteprise clients otherwise I cannot justify the pricing.

I cannot imagine spending 600 USD for both platforms just to build hobby project (and with missing Visual Studio support) and if I cannot build a hobby project, how can I propose it to my employer when I don't have any experience with it?

I would love to use Xamarin and would be willing to pay (I could justify 300 USD for all platforms (iOS, Android, Mac) with Visual Support for my hobby and indie projects. I hope Microsoft buys them or they will be more friendly to indie and hobby developers.
Event-driven services with F# and EventStore
(good luck with that)

Reminds me of the time a few years ago that Google gave me a few ads for bow resin after I signed up to the cello-dev mailing list.
Best advice is for everyone to sit tight and not do anything for at least 24 hours. You'll be saving yourself a world of heartburn.
He wouldn't necessarily have to take it all at once.
The poor Czech guy who wrote TrueCrypt and had the pgp keys will be found hanged with his finger nails removed.
Dental Professional Referrals
Dental Professional Referrals - Marketing your practice to general dentists or other specialists through a few random lunch meetings is not enough.
I think the main point trying to be made there was that there is nothing stopping banks from doing something similar. In other words the "data" the article keeps mentioning isn't the advantage that makes this possible for Square.
Definitely not the same for me. Book-it...er pizza was amazingly motivating as child. So much so that when my wife noted that I was reading enough a few years back, I said get me a pizza for every book I finish. I finished more books that year than any in my adult life. Having said that, it was sustaining and I've now retreated back to reading HN most of the time!
I think she says "trepidation... some. Wondering what's going to happen..." She sort of changed thought midstream.

https://www.youtube.com/watch?v=i1T9CEjjRzE#t=11m53s

I liked her incredulity when asked how she resolved her religious beliefs and views on homosexuality:

https://www.youtube.com/watch?v=i1T9CEjjRzE#t=9m53s

...but just go watch the whole thing.
Is Piketty’s “Second Law of Capitalism” fundamental? (paper)
If the audit turned up something bad, the obvious step to take would be to publish it in all detail, fix the flaw, and then tell users to upgrade as soon as possible. Not go "OK SHOW'S OVER, USE PROPRIETY SOFTWARE FROM NOW ON".
> So, lemme ask you a question. When you see a statement that something is true MOST of the time, what exactly possesses you to think that citing ONE EXAMPLE is a rebuttal?

I don't believe it is true much of the time. Maybe for technical books, but even then it is not because authors matter.

Picking between authors you like or have heard good things about is one thing, but they are not interchangeable. If I am waiting for the next in a series and I go to Amazon and they pull this crap then I will have to go elsewhere. The book is more important that a seller. If I want a certain painters art on my wall, I buy that print, not a "well Amazon didn't have that so I'll get a Fred".
It's against the terms of service to kickstart a business. You need a product. This is a long-term education-sales company, not a specific product of any kind.
http://www.ptc.com/product/creo-elements-direct/modeling

written mostly in Lisp
But that's not what the audit found, and the guys who ran the audit are just as in the dark about this as we are, according to recent tweets.
"Business Insider reports that Gates gave a talk at the American Enterprise Institute think tank in Washington, DC this week and said that both governments and businesses need to start preparing for a future where lots of people will be put out of work by software and robots."

We already have. It's called the 8.5h day where you're simply present in your office, paid to be off the street, employed by the state, browsing facebook and doing mundane jobs once in a while.
someone should do primus vs socket.io

why would I need engine.io,websockets for example when engine.io already uses websockets if it can upgrade the connection to them?
Uber Confirms “Record Breaking” Fund Raising
I don't understand how come that Indie license does not include Visual Studio support? I think the biggest issue with Xamarin for me is this: http://i.imgur.com/wmdaLL7.png
There is a relatively recent audit[1] of EncFS with some damning results. I really wouldn't use it.

[1]: https://defuse.ca/audits/encfs.htm
Transport Protocol and the indian tent-thing?
Phase 2 of the audit hasn't started yet.
Looking forward to mass automation. Free up a lot of time and hopefully we'll create better things instead of doing mindless chores.

Predictions about mass automations are at opposite sides of the spectrum. Either most of the population is poor without a job, or it's a utopia where no one has to work (everything is provided) and concentrate on bettering ourselves.
Tom has a point, though. The nature of the message (abandoning truecrypt rather than fixing it simply because XP is end-of-lifed?) and the unwillingness to fix it rather than post a dire message about its insecurity and recommend migrating to other solutions that don't have hidden volume functionality -- it suggests it's either very poorly handled, or a fake message.

It might be more likely that a dev got hacked, compromising the signing key, sourceforge project, and truecrypt.org site.
Not everything is reference counted in Rust. Doing stack allocations in rust is actually really easy. Stack allocations in case your not aware are incredibly fast compared to anything else. The only thing faster is static allocations.

In Rust, from what I've seen, you basically have the option to avoid heap allocations almost entirely which is fantastic for performance. The only other languages that come close to giving you that ability in a very explicit and deterministic way that I know of are C and C++.
>I don't see how Evidon is under any obligation to explain exactly what analyses they perform on the data or what the companies they sell it to do with it.

Given that Ghostery provides a service that blocks companies tracking data, it has every obligation to explain why it's Ghostrank program is any different from the very thing you are expecting them to protect you from.

Otherwise, it is like a sugar substitute that makes you fat anyways. Theoretically there is a legitimate use case (insulin dependent patients) but for their average customer (people who want to loose weight) it is borderline fraud.
Mocking "everything that is not what is currently being tested" is tautological.

Mocking and stunning in the manner you describe makes tests extremely dependent upon the current implementation. In fact, it inverts the relationship your tests should have with your development process.

Tests should allow you to refactor without breaking tests, and tests should break when APIs you call change in incompatible ways. These are the two primary long-term benefits that tests offer. Stubbing and mocking all of their internals causes tests to break when you change internal implementation (library Foo was switched to library Bar, but Foo is mocked and has a different API than Bar). It also causes tests not to break when the Foo API is incompatibly changed by another developer.
I don't see how Gates' recommendations do anything to push us toward the latter.
We don't know much about the TC developers, do we? It's also possible that they're just really cavalier about this stuff, and that this is their response to the TC audit process ("stop bothering us about it and use something that's maintained").
Kids React to Old Computers [video]
I saw that. It's just that taking this line at face value, it's not clear why they would port TrueCrypt to Linux and Mac OS X or suggest that people using later versions of Windows should use TrueCrypt:

>The development of TrueCrypt was ended in 5/2014 after Microsoft terminated support of Windows XP.
PG's advice on how not to fail is wise: just don't give up.
6 tips for clear email communication
"Yes, I've probably heard of your obscure fast-as-C language that has a great web stack... to a first approximation, nobody else has."
Yes. This would be just about the worst way to announce and make recommendations. Looks like defacement to me.
Funny the quote is from a 1981 issue of Byte. My first thought on reading the headline was "You mean like BASIC on the old 8-bit computers?"
Allowing people to make money from what they are good at seems to work best. Ask authors about having to cram writing into little blocks of time outside of a job that they would rather not be doing. Other motivations are fine, but people got to survive.

Looking a Linux, it seems most commits are by people getting paid.
You might start with Github Pages: https://pages.github.com/. It's all Ruby and pretty easy to use.
Or a screenshot?

Edit: Found it. http://i.imgur.com/rmuogzH.jpg