skysight-inc/HackerNews huggingface dataset:
I appreciate that my thought pattern (asking about sewer traps) sure sounds a lot like a clueless nerd using his technology hammer to fix a social problem he figures must be a nail.

However, I am just gathering facts to figure out what other options are available to police. If certain states, as a citizen I am judged very harshly if I don't exhaust all options before using lethal force, even if it's happening in the heat of the moment. I want the cops to do the same consideration of their other options, at least when it's an operation they get to plan out ahead of time to happen under the time of their choosing.
Can you please look into Persona and recommend that instead of openid connect? It is a much better approach at decentralized authentication.
Survey – iOS Forms inspired by Django and CoreData
Actually, that FAQ entry itself already counters your argument:
"Treat it like you would payment - you wouldn’t write a whole payment gateway like PayPal - but instead use a 3rd party."
Where's the difference?

By the way, you can always allow users to connect several OpenIDs to a single account – this way, worried users can provide redundancy themselves, if desired.
Yes, it is true that the most efficient way to oppress people is to do it with maximum available force and brutality, such that they are utterly unable to resist.
Well, personally I'd like to have some kind of namespace and do not have to prepend a personal string in front of every module I write (correct me if I'm wrong, I'm a newbie in Erlang).

Until a little while ago the website http://www.erlang.org looked old from any angle (I like the new design), but the documentation at http://www.erlang.org/doc/ feels really ancient. I know that the content is up-to-date, but at a first visit it seems like the documentation of a language that is not maintained (which is false). I think that when people start to learn something they want to either fill that they're learning something futuristic or that they're learning to build on the shoulders of giants; that page transmit me that the world has moved on and nobody cared to update the page.

Erlang just needs better marketing.
I wonder when we'll see Google Drones, taking pictures of buildings. Google Maps could become extremely detailed that way.
What is the thinking behind disallowing certain characters? When you create artificial limitations you have to justify them, not the other way around.
It Looks Like WebIntents May Be Resurrected
Yes, I never understand these news articles referring to reports, digital objects and whatnot, but not actually linking to the material.

Still, this EDSAC recovery project (http://www.tnmoc.org/special-projects/edsac) seems mighty interesting. When I'm in the neighborhood of the museum, I'll plan paying them a visit.
I'd suggest starting the answer to each question with a clear Yes or No, Right or Wrong so people can skim through.

Example:

>7. Fine, but I still get to send users their passwords once they created them so they don’t forget them, right?

No, Email is not a secure medium.....
>There is unexported code duplicated in the standard library because sharing it would have required exporting those functions: net/http and net/http/httputil share a few parsing functions, and there are four ‘func itoa’ in various packages. Similarly, cmd/nm and cmd/objdump contain the same file reading code.

This is so basic and has been solved by other languages so long ago that it's quite strange to see Go had to reach 1.4, and 5+ years of age to get this...

...and in quite an ad-hoc and hackish way -- which means you're tied to a directory hierarchy.
I'm shocked (Shocked!) that a payday loan company would do such a thing.
Really great! Some notes that popped out for me are that to always cache the .length property for any array or arguments:

function doesntLeakArguments() {
var args = new Array(arguments.length);
for(var i = 0; i < args.length; ++i) {
args[i] = arguments[i];
}
return args;
}

becomes:

function doesntLeakArguments() {
var len = arguments.length;
var args = new Array(len);
for(var i = 0; i < len; ++i) {
args[i] = arguments[i];
}
return args;
}

And also, if you've got a switch statement with more than 128 cases, you've probably got bigger problems on your hands than v8 optimizations.

I see some things in here that I can start switching to immediately for some of my node modules.
It sounds like you had a process running over night that needed enough memory to force X (or whatever) to swap. Without the swap, that memory-hungry process would presumably have run less optimally (if it got memory allocation failures and adjusted its behavior to utilize less memory) or it would have simply died. It's not so clear that having processes die because they can't get memory is better than having something else run slowly, in general.

Edit: Possible caveat: Maybe whatever was running overnight did a lot of disk I/O and the OS decided to cache it at the expense of moving idle processes to swap (not sure if Linux does that or not).
Isn't this just about monetizing the videos? So they could still have videos there for promotion, but they won't get money (without directing the viewer to wherever they are selling their music at).
If I am required to maintain documents in a civil case, and I destroy them, generally the other side is allowed to assume they were as bad as possible.

Does this apply in criminal trials? If there's evidence I was flushing drugs down the toilet (and such evidence would be there), can the state be allowed to assume I had a lot more of the drug than I really did? What are the policy implications?
As a huge supporter of Persona, I am intrigued. Can you sell me on how this may be better?
On the other hand, the pizza delivery man stays on the road and does not fly in front of my office back window at random times of the day.
True - but you can add an additional layer of security to the password reset request if this is a concern, such as personal questions.
The main reason not to do it is that people don't always have control over their email, for example, school, work, etc. Also, some courts can force you to give up an encryption password, but many can't. By sending a password in the clear you can be inadvertently giving the court a password that they otherwise wouldn't have had.
Can't speak for OP, but surely putting restrictions on your password just makes people choose weird, eminently forgettable passwords, a la xkcd's complaint http://xkcd.com/936/
I turned off swap on my desktop.
Even if you have a lot of RAM swap just becomes an annoyance
during development. Sooner or later you have some runaway process eating up all the memory. If the system starts swapping it will take a long time to recover (unless you're lucky enough to hit Ctrl-C within a few seconds and the app responds to it).
Even with swap off there are long pauses when the system is low on memory, maybe it just waits too much before the OOM killer kicks in, but its more usable than with swap on.
> What's the thinking here?

I sucks for people that generate individual passwords based on a common password and site-specific data.
[Instructographic] How to Use a Key as a Self Defense Weapon
`for ... in` is a relatively slow construct anyway, the faster option (a lot more verbose) is:

var keys = Object.keys(obj),
length = keys.length,
key, i;
for (i = 0; i < length; i++) {
key = keys[i];
}

While this is not exactly the same as for..in, it usually behaves how you'd expect and is significantly faster for a couple of reasons:

1. In a for..in loop the engine must keep track of the keys already iterated over, whereas in the fast version we can simply increment a counter and do a fast array lookup.

2. It's possible to add properties to the object that you're iterating within the body of the for..in statement, and these will be iterated too. Doing such a thing is obviously very rare but it's the kind of edge case the JS engine must keep track of.
You should absolutely be on a plane to SF. As you said yourself, this is your shot. Don't blow it by sitting at home wishing people would fly out to meet you.
Data science and decision science
This is a valid concern but it needs to be balanced against the existing noise, visual and chemical pollution caused by shopping trips in cars and delivery trucks.
As long as 'z' is not proportional to x or y that might be fine. If you consider 'z' as a percentage of your RAM then you'll notice that your expensive server with lots of RAM
is way slower than a cheap one with small RAM and smaller swap, just because it takes less time for the kernel to fill the swap and finally kill the offending process.
Data Science Screencasts
What got me to buy Pixelmator was the amount of instructional material they provide on their website, that is well laid out and easy to follow.
Big data analytics startup Coherent Path raises $6.25M
>This is one I always struggled to understand. If email is compromised, the attacker can request and immediately intercept a password reset anyway.

Not really the main issue - if you always send the password the Thief controlling the email does not even need to reset the password. he can get in without leaving any trace at any time. It also allows the collection of all the Passwords from all the users in bulk. And if your users are reusing their passwords everything else is open too.

Sending the Password is just a stupid policy. Its up there with restrictive Password requirements and Server-side unhashed Password storage.
The article is "optimisation killers", you're right about caching the array length lookup check being faster, but it doesn't kill V8's ability to optimise functions like the rest of the examples do
Also Lisp Flavored Erlang (http://lfe.io/)
For namespacing, Erlang used to have packages to provide something a bit like that: http://www.erlang.se/publications/packages.html They ended up being rarely used, and were eventually stripped out of the system as they ended up confusing regulars more than anything.

The issue with trying to add namespacing to Erlang is that people think of namespacing modules, but they forget about the other global namespaces: process names, ETS table names, and so on. They'd need to be done all at once, or otherwise they risk giving you inconsistent results. For example say I namespace myapp.mymodule.erl, and inside of this I contact the process named 'mymodule' and the table also named 'mymodule'. If I'm not careful and pass that name around, will it still refer to a global namespace (which can clash), or will it now refer to a different process and table in another namespace?

Fixing this requires changing a lot about the language, I think, and it's probably a far bigger challenge than it looks.

For documentation: there's http://www.erlang.org/erldoc that's a searchable one, and http://erldocs.com/ that provides more modern design to the reference manuals.

Erlang may need better marketing, but as a person from the community, I'd like to hear what I could do. "Just do it better" is hard to build on, I guess. It's reminiscent of "make the logo pop more" for designers.
Cloud Use Varies with Different Industries
You might be interested in reading The preparation of programs for an electronic digital computer (1951) By Maurice V. WIlkes, David J. Wheeler and Stanley Gill. That's the textbook they used for the first programming course (in Europe) using the EDSAC. The interesting thing to me about this book is that the topics discussed can still be found in some way in "modern" introduction texts to programming.

Part I

1. The design or programs for electronic computing machines

2. Input of orders

3. Subroutines and parameters

4. Library subroutines and their use in constructing programs

5. Pitfalls

6. Use of the EDSAC and its associated equipment

7. Examples

Part II

8. Specification of library subroutines

Part III: Appendices
true but what other sites offer such a quick sanity test as reddit and HN?
Using personal questions for security is the worst thing ever.

Whenever I encounter them, I paste the output of "dd if=/dev/random bs=1k count=1 |uuencode x" into the field.
Tyler Cowan interviews Ralph Nader [pdf]
I guess this is as sensible as the author's master thesis titled 'Adaptive Object-Oriented Architecture of Information Systems Based on High-Level Petri Nets', where apparently he ran out of keywords to put together.
I notice I get tunnel vision staring at the exact same spot for 10 seconds. The rest of the screen starts to flicker or something, like when you were a kid and would stare at an inverse American flag before looking at a white wall.

EDIT ten minutes later my eyes still hurt
CoffeeScript inserts calls to native `indexOf` all over the place. After seeing this I'm wondering if there's an easy way to shim fast.js in there?
Any plans for OS X support? I'd love to use this with Beamer.
>Is this sarcasm? An enormous amount of what we consider great literature consists of "fanfiction"; it would not be permitted under copyright law as a derivative work were it written today and based on modern stories instead. For example, most of Shakespeare's plays are based on older stories, or even the plays of other contemporaries.

Shakespeare's works are not what we call "fanfiction". For one, Shakespeare was not some "fan", creating derivative works in the same "fictional universe". Neither is Racine, or the tragic poets in Ancient Greece reusing older poetic themes and myths, etc.

Fan fiction has a quite specific meaning, not just reusing some myth/drama/story plot to create a new work.

In fact the Wikipedia lemma on fan fiction places the first precursors long after Shakespear's time, and is in line with the general understanding of the term "fan fiction".
How fast should an Internet connection be in 2020? [pdf]
ninite.com may help with that.
Except thats not what causes problems in practice.
You get problems with swap when your working set size exceeds your RAM. You'll always be hitting the disk as long as the offending application keeps using too much memory, and it slows down the entire system not just that one application.
When you try to SSH in/log in that requires reading files from disk (or swapping things back in) which can take quite a while due the backlog caused by swapping.

If you ran out of memory and malloc returned NULL that would be better, however a lot of applications rely on overcommit so there is no good answer:

* you can run with RAM + as much swap to make all applications happy and overcommit off, and accept the long
delays caused by swapping

* run with just RAM, overcommit on and no swap, and accept that your applications may be killed by the OOM killer anytime
Dev Bootcamp on Kaplan Acquisition
You are more likely to be bitten by Luis Suarez than a shark
Useful stuff. Does anyone have similar information for other javascript engines?
That's a valid point. This is the reason why some C API (like the chipmunk physic engine), offer two versions of constructor functions: one that allocates the memory, and one that takes an already allocated pointer.
That would be a non-free alternative...
About 99% of all devices "just work" out of the box

This high number is due to kernel programmers writing device drivers, since not so many manufacturers write linux drivers themselves.
Doing one of these things may introduce a security vulnerability, depending on the rest of your environment.

Some programs that use select(2) are known to assume that FD_SETSIZE is at least the maximum number of file descriptors available (instead of checking FD_SETSIZE). This lack of bounds checking may lead to a stack or heap overflow and a security vulnerability.

More recently, if you build with fortified glibc options, then you'll get automatic bounds checking, but do you know that your own daemons are built this way?

This is an example of why it's not a good idea to arbitrarily change a list of default settings system-wide without understanding the implications. The defaults have not been changed for a reason; otherwise distributions would already ship with these changes.

References: https://lists.ubuntu.com/archives/ubuntu-devel/2010-Septembe... http://www.outflux.net/blog/archives/2014/06/13/5-year-old-g...
If someone wants to use a 250 character truly random password with crazy characters, let them do it. If they used a long password with an excellent mix of upper-case, lower-case, and special characters, but no numbers, it's a good password, take it.

I had a password for a credit card account which could not be more than 8 characters and couldn't contain 'special' characters or punctuation. This was probably done to either make the password human readable (over-the-phone, horrible idea), or because of some legacy system on their end. At some point the organization got smart and made a minimum of 6 characters, of which two needed to be numbers (but kept the other restrictions). This effectively narrows down pool the possible passwords for an attacker to guess, the opposite of what you want to do.
>I can't tell if this is a joke or not. But there is HPMOR and countless others.

Not a joke at all. Especially if HPMOR is the best example one can come up with (or one of the best).

I mean, not even the actual Harry Potter is any work of literary genius. I'm talking about Melville, Nobokov, Joyce, Dostoyevsky and such. It's not like literature would lose anything important if HPMOR wasn't available.
Justyo – Yo anyone from the command line.
Just use ninite.
The major problems with email are over-communication and a lack of contextual priority. Facebook, of all companies, seems most likely to make these problems substantially worse.
IBM at the Crossroads: How IBM Got to this Point
Boy, someone's got you peeing your pants haven't they? You understand that word soup like this doesn't mean anything right? Especially when science is indeed not on your side.
Book: Stronger (Boston Marathon Bombing Eyewitness)
The dev FAQ should contain information on how to safely (and painlessly) migrate from plain-text/MD5/SHA1 to a more secure algorithm.
Beating A/B Tests
Source: Facebook Is Building FBWork – RIP Yammer?
Guix package manager at FOSDEM 2014
> TL;DR My org wanted to pay below market rates yet still dictate shoot-the-moon requirements.

I've been on the receiving end of this numerous times "Oh, we know we can't pay what you're used to, but thought you might like a challenging environment ..?"

These days I've stopped accepting interviews unless the recruiter/company will share a salary range in advance of technical questions.

(You'd be amazed how many places advertise with "Salary: Competitive", and no firm figure/range.)
I think the general idea is that asm.js is both well understood and not something a human should ever generate, so why would anyone but a transpiler writer care?
There was a discussion here a while back on this matter, where I held very much the same position as you. The other guy convincingly proved that adding the "must use at least one each of these character classes" barely reduces the password space, while promoting increased password complexity for those people who would pick the _really_ easy ones.
The key difference is that capturing a plaintext password means the user and attacker both share a password without the user realising, while capturing a reset link means that one of them will win and the other will observe their password reset has failed.
Slides are available here http://www.gnu.org/software/guix/guix-fosdem-20140201.pdf
What's Holding Back Impact Investing?
There's a large amount of free software available on Windows that doesn't have an equivalent on Mac. It matter less over time as more things move to the web, but Paint.net is still a good example.
I was also thinking that the community should start calling this type of implementation 2FAil, to give the companies a little extra 'shame peer pressure'... Anyone up for making a logo, heartbleed-style? :)
Meanwhile, if anyone is looking for this kind of solution right now, we are making a tool for companies and teams to collaborate and work better.

Check us out at: https://dapulse.com/
That is just disgusting.... I wish I code down vote this and get it off of here :(
In the article it was mentioned that ECMWF's supercomputer was the fastest one of those running not on Linux. It's worth mentioning that ECMWF is in the process of migrating to an XC30 Cray system which runs on Linux.
UI / UX Design Interviews, Matt Carvalho
Frank : What do you think about Dribbble? Is it a good way to get a job? What’s the best way to find a job as designer?

Matt : Yeah, dribbble is great! Those guys have done a great job over there and I am thankful that the design community is able to connect through their product. I am very thankful for dribbble.
Ack, I accidentally down-voted this comment, someone please right my wrong
Real-time map of hack attacks around the world
Your friends made you join facebook. Then your mom made you quit it. And eventually your boss pulled you back in.
If machines are flying over your head, would you feel safe going out without a helmet on your head?

Despite all safety measures, you know it'll happen at some point. One of those will fail, its safety will fail and it'll drop on the head of some kid and put it in the hospital.

I can predict immediately that birds and drones colliding will be one of the biggest problems (and it's not something you can fix with frequent tech checkups, as it's not a technical failure, just a fact of life).

Having casualties is the case with cars too, of course, but it's a whole new kind of terror to expect not just cars hitting you coming from the street, but also machines dropping from the sky (where you usually aren't even looking).

I'd take one of those risks, but not both at the same time. I can't look for both at the same time. And I'm not saying "ban them" is the only solution, but this has to be solved somehow.
I've been spending some time thinking about CoffeeScript's choice for `in` and `of` and I think I have the answer: they should be more regular. One (probably `of`) should be used for the keys/indexes and the other (probably `in`) should be used for contents.

These are legal CoffeeScript examples:

for key, value of object
if key of object

for value in array
if value in array

for index, value of array
if index of array

The one that's missing is:

for value in object
if value in object
What's wrong with a text file? Notice how brainfuck is specified to work on text files, not on PNG files!
Huge switches are common in the inner loop of emulators and interpreters. They tend to end up with a 256-case switch to handle the next byte in the instruction stream.
Seven Habits of Highly Effective Jenkins Users (2014 edition)
Google Glass early explorers get stuck with earlier model, get angry
The graph looks about right: https://imgur.com/MPYS8mG
Why no units on the plots?
I don't understand the hatred for Wonga. They lend to people with a high risk of default and so have to charge accordingly.
Brilliant, though shame it's regarding entry to the Israeli military.
A harsh response, yes. But frankly, what you said was harsh. An interactive raycaster in an executable an order of magnitude smaller than most networks' minimum transmission unit is an incredible accomplishment, and your response is to essentially drop trou and take a dump on it because teh w3b 4evaz.
In 2007, Gmail had a XSRF vulnerability for setting up filters. It was exploited by attackers that would create a filter
'Contains "password"', 'Forward to: evil@example.com', 'Run on all messages'.

Basically you could visit a malicious webpage, and all emails containing the word "password", would be sent to the attacker.
I think Persona is great and can be the right choice for many scenarios. Browser support, the JS requirement, and the reliance on email (whereas tokens can e.g. be distributed via text message) might however be points that convince developers to go with one-time passwords.
Step by Step: Creating Financial Projections for a Freemium SaaS Business Model