skysight-inc/HackerNews huggingface dataset:
There's certainly some overlap in functionality - both Snort and Bro support signature-based detections. This type of detection has been around since the 90's and while it works, it has many limitations.

If you have high-quality signatures and detections, Bro will do a great job of protecting your network. It has automation capabilities, so it can e-mail the system administrator about a suspicious download, or even reach out to your firewall and block an IP that's scanning you.

However, Bro makes the important assumption that regardless of how good your detections are, you will miss something. A new 0-day will come out, a chain of seemingly innocuous events will be combined in such a way that results in a compromise, etc. To deal with this, Bro tries to log as much as it can (within reason), so that in the event of a compromise, you can go back and see what a particular host did.

For example, when you visit this page, Bro might log something like:
1) 1.2.3.4 issued a DNS A query for news.ycombinator.com and received a response of 198.41.190.47 with a TTL of 300.
2) 1.2.3.4 issued an HTTP GET request for / and received a response of 200 OK
3) 1.2.3.4 downloaded a file over HTTP named index.html with a MD5 of X and a SHA1 of Y

The extra capabilities this provides is evident when a new attack becomes public. With Snort, you would add a new detection, and would receive alerts going forward. With Bro, you can also ask the question "Have I been attacked with this before?" A good example is the APT1 report from Mandiant which listed suspected Chinese hacker IPs, domain names, SSL certs, etc. All that information is stored in the Bro logs, which enables you to do some post-hoc analysis.

There's a ton of other functionality that I'm ignoring. Examples include: a Turing-complete scripting language for writing complex detections, an intelligence framework to watch for suspicious e-mails, IPs, domains, files, etc. and a files framework which can extract certain file types and send them to other tools for additional analysis.

There was a good write-up comparing the two: http://jshlbrd.blogspot.com/2014/04/methods-of-alerting-in-s...
Is it supports SSH and curses applications (e.g. vim)? I didn't see it in the videos.
Government secrets of the oceans, atmosphere, and UFOs
2014 FIFA World Cup: All Routes Lead to Glory
Data visualization + Interaction put together to predict teams' performance in the tournament.
Regexes are an easy way to include a second language into your project without realizing it. If you don't put the same discipline on that language as you do the one you are using it in, you are raising your likelihood of problems. Well commented[1] and modularized (for large enough) regular expressions can be just as readable, as long as you accept you are no longer using a single language.

1: http://perldoc.perl.org/perlretut.html#Embedding-comments-an...
ah, sorry about that then.
Silicon Valley is a place, just like any other. There's a fair amount of dysfunction in the Valley, along with a fair amount of brilliance. It's full of perks (beautiful weather, lots of job opportunities in tech, so much to see and do) but also downsides (cost of living, cliche startups trying to be "Uber, but for cruelty free soy products", all the people).
Sometime when we're in an unburied thread and I'm not prepping to travel out of the country the next day, I'll be happy to write a couple thousand words on this. But fair warning, I probably won't say anything you wouldn't expect me to say after reading what I wrote about it back in '98 (Google [insertion evasion]).
Indeed. Working with a Python (Django) project in IntelliJ IDEA is downright annoying: project setup is hard, and the Java stuff haunts you everywhere. While it's better than plain old Notepad, I can't recommend it for anything but the odd side project.
The submitted title was "Show HN: Tricking the user to access his history using CSS and captchas". We finessed the pronoun issue in this case by just taking "his" out.
When I was working on a docker-based build/test/deploy solution a few months ago, its performance was so anemic I wanted to tear (what's left of) my hair out, especially during a development/testing cycle.

I got sidetracked by other things and haven't gotten back to it, but if I do and it's still as bad as it was, I don't think I'll want to continue on that path.
I'm Telling: Employer-Tattling and the Decline of Agency
Lessons from Hustling on the Street: Muni Sickout, Leads, and the Middle Finger
Mystery solved: This is the monster that ate that great white shark
We're definitely built for more experienced freelancers over beginners, but we're focused on talent over age or time : )
Please. That is many decades away, and the hard part about it is definitely not the soccer strategy AI...
Glowing foam swords that keep score wirelessly
SIMD Assembly Tutorial: ARM NEON
It's really the code to connect the stages. I want to support 1->many, so a single stage can fan out it's output to multiple consumers.

The code which wants to be generic is in the handling of things like setting up channels between stages, handling data passing between them and cancellation (shutdown).

I also want to support a layer of abstraction, where I can compose a graph of stages into a single stage.

The goal is to have a number of primitive processing stages and allow abstraction and composition to build more complex processing.

Basically I could move to a pure interface and associated functions (not methods). That would perhaps be more idiomatic go. It's just a slight shame that a bunch of code which lives to my mind slightly more naturally as a set of methods on a type gets promoted to top-level package functions due to the inabillity to define methods on an interface. But that's probably OK.
This blog post makes a pretty good public policy case against engineers and product designers being subjected to noncompetes, but I don't think the logic ports over very well to salespeople --- who, correct me if I'm mistaken, are the most important targets of noncompete enforcement.
Normally you would have two choices: ship the source with a bunch of readme's and let the recipient figure out how to install your software and all dependencies and to resolve any conflicts with other software already on the machine (aka version hell). Or you could ship a VM image.

Option 3: use a package manager.

Now, I realize this doesn't solve the existing software conflict problem you mention. Nor is it mutually exclusive with shipping an image: you could always construct an image by installing packages into it.

I've always been a little wary of the "ship a golden image" idea. How do Docker images get updated? What if there's a security issue with software in the Docker image -- can my package manager automatically apply security updates? How do I push other upgrades to the client once they have a Docker instance -- do they need a whole new image from me? Package managers have solved these problems, and I hope we're not reinventing those solutions in the Docker world.

If you're familiar with Docker, please enlighten me on these points.
I think that these are specific examples of the same general case: there are some assets that are easy to "walk out" of a company with, and a non-compete is a way to deal with that fact.
Very cool site, congratulations! Will you be expanding to other countries/markets too?

Seems like most hair salons could benefit from this - it's so hectic in those places.
Btns.css – A small CSS module for building beautiful, responsive buttons
I recently signed a contract with a sort of non-compete clause in it, so i'm quite interested in how enforceable they are under English law.

Some lawyers reckon [0]:

"When considering restrictions the general rule is that they are void as they are in illegal restraint of trade and therefore against public policy. However, the courts recognise that some legitimate interests can be protected by reasonable clauses. [...] Although the types of business interests capable of protection are not fixed the usual ones that are protected are customer connection and goodwill, trade secrets and confidential information and the maintenance of a stable workforce (no poaching). Preventing competition is not really a legitimate interest on its own but a non-compete clause may be upheld if it may be the employer's only means of protecting the business."

So, under English law, it's quite likely that there would have been no Fairchild Semiconductor. I believe the crucial test would have been whether the Traitorous Eight were basing their new business on trade secrets they had learned at the Shockley Semiconductor Laboratory, or on know-how they had acquired there. The distinction between those is probably a topic for another day.

[0] http://www.steenandco.co.uk/thomas-v-farr-plc---important-co...
The emperor’s new clothes were built with Node.js
The Anatomy Of A $31,155 Product Launch
Secret Dens: A new feature to the app 'Secret'
I like that Go and Rust reexamined some of the underlying traditions of the C++/Java/C# approach to OOP rather than reflexively repeating them -- and while I think Go and Rust both, on a high level, took good (but very different) approaches, I think the one thing that Rust did right that would be better even with the rest of Go's approach than the way Go did it is explicit and detached declaration of interface implementations for data types.
Skilcraft
We removed "Be smart, instantly" from the title. (The HN guidelines call for changing titles that are misleading or linkbait, and this is arguably both.)
The comparisons to PyPy would be much more meaningful if they weren't based on a version of PyPy that's over two years old: PyPy 1.9 was released in 2012.
As someone with little technical skills when it comes to software development, I like that I can see a person's past work and read reviews from people he/she has worked with in the past.
> The lack of Haskell libraries and bindings relative to other languages reduces this most important kind of reuse.

This is an instance of begging the question too. Newer, less popular languages will always have fewer libraries and bindings relative to more popular languages. It might be an argument against using Haskell at the current point in time, but it has nothing to do with the merits of the language itself.

But the reality is that Haskell is actually doing quite well in terms of libraries and bindings. Pick anything you can think of...odds are probably pretty good that Haskell has bindings to it. As an example, let's look at the two projects you mentioned: ZooKeeper and Hadoop. Yep, there are Haskell bindings to both of them. For ZooKeeper there's hzk (http://hackage.haskell.org/package/hzk), and for Hadoop there's hadron (https://github.com/Soostone/hadron) and there's even a nice presentation about it (http://vimeo.com/90189610).
Purely Functional Configuration Management with Nix and NixOS
Configuration management is the foundation that makes modern infrastructure possible. Tools that enable configuration management are required in the toolbox of any operations team, and many development teams as well. Although all the tools aim to solve the same basic set of problems, they adhere to different visions and exhibit different characteristics. The issue is how to choose the tool that best fits each organization's scenarios.
That's what non-solicitation is for, yes?

Sometimes employers even know that they aren't enforceable but are still doing them "because our lawyers say so." Which is a standard negotiating tactic, but there you go.
The Functional Revolution in C++
From the Customers Point of View...why being nice isn't an 'option' anymore
I try to keep it simple - use the rss feed with something like newsblur and click stories I find interesting. So you can skip the big company stories and focus on what you prefer.

Plus, who knows, by reviewing all of the headlines you just might find a gem of a story.
> If you are an engineer in a niche field, in particular, being barred from that field for a year or more is tantamount to rendering your professional knowledge obsolete.

What if it was the employer that taught you the niche field? They hired you, and then sent you through six months of training to learn the field. During this time, you are producing very little of value, but you are being paid.

Then, when you finish the training and are ready to be productive with your new niche knowledge, you get poached by their competitor--a competitor who can pay higher wages because it isn't spending tens of thousands of dollars on training for new employees.

It seems to me that there should be some way for the employer to protect against the above scenario. What would be acceptable instead of a noncompete?

Some ideas:

1. A noncompete that runs from the START of employment instead of from the END of employment. If training takes six months, the noncompete would say you cannot work for a competitor for 18 months after start of employment.

2. Charge for training, with payment due in monthly installments starting at the end of training. The company waives payment for each month that the employee continues working for them. The employee can leave for a competitor at any time, but will then be responsible for making the remaining payments for his training.
The very first thing I clicked on was "Try It!"[0] in the header. I was then promptly greeted with a 404 error.

I'm with you on this one. Not exactly confident about using this in a production environment quite yet.

[0]https://www.docker.com/resources/tutorial/
Increasing parallelization has been done in evolutionary steps for the last 10 years. This is a great step, but I'm sure your amazons and rackspaces of the world will soon be building docker++ (and docker really is just ec2/AMI++)
You know, I agree with you completely. It's really not an issue.
Full disclosure / shameless plug: I've worked with these guys for a few months now, and they're a great team. They're freelance devs who built a site and service for freelance devs. Their approach -- matching portfolios, profiles, and feedback to available jobs -- is a good one.

There are a handful of similar services out there, and to be honest, I wish all of them well. This approach has worked for design-freelancing sites, and properly adapted and adjusted, it could work well for development projects. In the long run, the big win here will be in recommendations and semi-automation of matching portfolio signal with job characteristics. They're also doing interesting work on making the job posting, scoping, and selection process easier for nontechnical to mildly technical hirers.
I like this idea. I notice that I tend to get more ideas when I'm stuck waiting for something or doing chores, than when sitting at the computer and reading things is an option.
Great looking design. However, instead of outsourcing my portfolio I just got a domain and added my own stuff. check out http://appsonify.com, curious to know some actionable steps I can take to improve it. The whole thing is hosted on Amazon S3 bucket and it cost me like 50 cents in traffic so far. No need to run a static http server, just point your domain through route 53 and point it to amazon bucket.
I remember this sort of thing being called "push" back in the day (1995 or so). Before animated GIF support was added to Netscape this was the only way you could achieve animation of any sort on the Web.

The only concrete example I can recall is that Suck.com used this to have an animated logo at the top of their page. (I think this predated the Java applet version that you see on the Internet Archive...)
I liked the following comment from the old thread, written by mavam:

===

(Disclaimer: Bro team member)

First, Bro is a Turing-complete scripting language ("the Python for the network") and Snort/Suricata a system centered around regular-expression matching [1]. These two paradigms have fundamentally different levels of expressiveness.

Second, Bro's core is policy-neutral. [Continued at https://news.ycombinator.com/item?id=7728850].
There goes the rest of my day.

One UX thing that I thought of when doing this: you may want to take a page out of Facebook's bag of tricks; they preload the next image (when browsing an album).

Just a thought. Love it!
FWIW, I've found running supervisord for all containerized apps with a log redirect to a host-mounted path to be a perfectly reasonable solution.

I would hate to see docker go down a path where it folds in its own logging "framework", which, I feel, would be going too far (poor separation of concerns, etc).
Based on the HN discussion 3 days ago, it seems that freelancer sites are ripe for disruption.

https://news.ycombinator.com/item?id=7857315
This will probably throw Ruckus for a loop - http://www.ruckuswireless.com/products/smart-wireless-servic...
"Tigers, leopards and jaguars" are illustrated by a picture of a cheetah.
The US numbers are also very suspicious. The median income for software engineers is well below what the BLS reports[1] (median $92k, mean $96k). The overall average is also significantly higher than the average that the BLS reports[2] (mean $46k). That would put the ratio for the US around 2.

[1] http://www.bls.gov/oes/current/oes151132.htm
[2] http://www.bls.gov/oes/current/oes_nat.htm
I was also annoyed by the music. Way too many sounds going on. It's a nice demo though, but the video would be better without the music.

Be careful about feedback from friends (or even just showing your stuff to people IRL). Friends and family are often too nice to provide usable feedback. On the internet, people will be brutally honest which is awesome when you want to know of every single little defect with a product.
$249 3-D Printer Launched
A bit of Debian discussion and interaction with the author on this: https://lists.debian.org/debian-legal/2004/12/msg00295.html
On-Demand Laundry Startup Washio Raises $10.5 Million Led By Canaan Partners
I've noticed a trend of naming articles "On $topic1, $topic2, and $topic3". Seems like a lazy way to title your article. Yeah, it tells us what your article is about, but not specifically what it's about. Just lists 3 topics that the author will somehow involve in their discussion.
In fairness, nobody is using brew to install something on their production environment.
Hey guys, I'm the author of the blog post. I'm happy to answer questions about performance results, argue about the necessity of acid transactions, or discuss anything else in the post.
I'd say that a great freelance portfolio would be one that conveys the freelancer's skills to a prospective client regardless of that clients' level of technical understanding.

It would be great to have a portfolio that could showcase a variety of different information (dynamically) catered to the person looking at that that profile.
That's why I asked the question, which I do mean literally: What private company in the world has ever invested that level of money on something not likely to pay off for decades?

If you, or anyone, can come up with an example of a company actually doing that, not just saying they want to, then I'd definitely reconsider.

I'm guessing that you're talking about Planetary Resources with the asteroid mining thing? I didn't see much about hard numbers from them, but I'm doubtful that they will ever spend tens of billions of dollars before getting a penny in revenue.

I can believe that private companies are good at making longer-term investment in technology that directly benefits a profitable line of business that they're in. Stuff like Intel doing research towards smaller component sizes on ICs. But who's going to invest long-term in fusion power? There's no company with a revenue stream related to it that I know of. The costs will probably break a hundred billions dollars before anybody gets plants on the grid that actually generate any revenue at all. I'm just not seeing it. If it were a realistic solution, why isn't it already happening?
Non-competes that remain in effect beyond the term of employment are useless in 90% of current use cases, and only create legal headaches for both employer and employee. They are often ambiguous and may vary in terms of your ability to enforce them from state to state (or country to country). They also have a tendency to be drawn up merely to satisfy the insecurities of paranoid executives.

Don't waste your time with long term non-competes unless you're doing something so cutting edge that it is the commercial equivalent of performing work for national security. To put it plainly, if you're that concerned about a person who USED TO work with you competing against you, then you're not exactly very confident in the core capabilities and innovation potential of your company.

Intellectual property is one thing, but non-competes beyond the tenure of one's employment are too often a complete waste of time, money and effort to create and enforce.
Good lord, a Dribble for Devs would be absolutely wonderful.

I hate hiring devs on oDesk / Elance / etc - alternatives would be marvellous.
I'm not trying to imply you didn't check thoroughly because I don't know the whole story and your background. But for me personally I wouldn't take the risk - even if the compromised account was 'nobody'.

I certainly don't know enough about computer forensics to make sure that a system hasn't been altered (and I dissect malware for recreational purposes). So unless it's a system that hosts something completely unimportant I'd take the weekend free to wipe + reinstall the stuff.

Even recently a linux local privilege escalation has been discovered[0]. So who knows what the hacked www user really had access to.

[0] http://seclists.org/oss-sec/2014/q2/467
That's fair. My runner up title was Scaling All the Things: An Honest Look at Limited and General Transactions. Better or worse?
>"Caltrans overrode bridge welding codes"

that is my favorite here. Sounds like poetry.

>"Tony Anziano, chief executive for toll-bridge work, made at least 64 visits to Shanghai, stayed in one of the city’s most luxurious hotels and spent more than $300,000 on travel during construction."

if tales of Chinese corruption and kickbacks is even a bit true (and knowing Russian corruption i tend to believe in Chinese too :) these $300K are juts unrecognizable under microscope peanuts compare to what was most probably transferred to some accounts on Cayman Islands and in some other peculiar jurisdictions.
Docker on Microsoft Azure
Great articles for issue 13 and the rest of the website seems interesting too (past issues included).

Would have been nice to see the actual implementation / code of the Parallax Scrolling Behavior example[0].

[0]: http://www.objc.io/issue-13/behaviors.html
We can't use composition because we wouldn't get virtual methods.

We can't use an interface because then we would be forced into virtual dispatch for all of those fields that are shared between flows.

we have a heterogeneous tree of objects that all share a common set of fields (position, intrinsic widths, collapsible margins, some various bits that store state during reflow),

You're description seems to me to scream functions: That work on plain structs.

I'm not an expert in performance though so I don't if that is just as bad as the other alternatives you mentioned. But you didn't mention them so I thought I'd ask if you considered that as a valid approach and if so why you rejected them?
It sounds like Shockley would have had a decent chance of winning in the UK. In that case, he would have tied things up in court for years to drain resources. Even if he didn't win, Fairchild (and the rest of us) would lose.