skysight-inc/HackerNews huggingface dataset:
> You now rely on chip designers being super-human.

At this point I want to ask how we're defining "super-human." What level of reliability is considered to have "super-human" requirements? There are certainly very simple and clear ways that one product produced by normal humans is much more reliable than another. For example, if you admonished someone to wear their seat belt while driving, you would scoff if they replied "well then I'm just relying on seat belt designers being super-human."
You can style tab width in CSS though. If you want GitHub to have smaller tabs add tab-size: 2; to an appropriate selection in your site-specific CSS. I’m sure there are extensions that will do this for you. More info: https://developer.mozilla.org/en-US/docs/Web/CSS/tab-size
Or maybe just IP address/port pair. It shouldn't be hard to figure out which pair each app uses.
Scandic To Go – Book a (mobile) hotel room wherever you want
How? I imagine it's implemented as "don't meter packets going to these IPs", for Pandora/whatever's streaming IP addresses. Adding some extra firewall/software rules doesn't violate privacy IMHO.
More than 30k private keys indexed by GitHub
There's a Chrome plugin for that https://chrome.google.com/webstore/detail/hacker-news-collap...
> I used to do this to save the $6 and backup locally. Unfortunately, it stopped being practical once the backups hit 3-4 GB since they'd interfere with my internet access in the morning.

3-4 GB of data each day?

I backup data from my personal laptop to digitalocean droplet ($5 month) and then during the night backup droplet (which also stores my mail and other stuff) to the disc connected to raspi in my home. Incremental backup (rdiff-backup) takes literally 5 minutes (3 mins for /home and 2 mins for mail). And amount of data slowly approaches 9GB.
Not unless you're defining "bullets" to exclude things like https://en.wikipedia.org/wiki/Depleted_uranium#Ammunition.
I'm working with a couple of other researchers on this exact concept. We're calling it TorCoin. I submitted it to HN a few weeks ago and it was at #1 on the front page. You can read the paper here [1] and the HN discussion here [2].

[1] http://dedis.cs.yale.edu/dissent/papers/hotpets14-torpath.pd...

[2] https://drive.google.com/file/d/0B7r4osQgWVqKTHdxTlowUVpsVmJ...
As a new MC user, it's easy to see this looks better, though a free Basic would go a long way for me at this moment. Having eyes ≠ gamed comments ;)
This is pretty cool! Except, 40 minutes is not very long to get an environment set up, I guess that's where the bitcoin extension comes in.
Rails 3.8 ?
Well, I just don't know. I don't have the same phone this but it's made me wonder.
For the Windows question, I must advise that it is not limited to Visual Studio or Cygwin. I use MingW daily and have a experience similar to that of GCC or Clang on Linux. CLang runs also on Windows but lacks a linker for now and uses that of MingW or VS.
Bangalore through the eyes of Swiss interns
There's no reason why node/npm can't implement a thin filesystem mapping layer on Windows and map long, logical module paths to shorter filesystem paths. That sort of address translation would fix both the symlink and the path length issues.
Tabs for scope, spaces for alignment.
Transparent version control, tracking of changes, collaborative editing, familiar interface, familiar workflow (just drop finished articles into this directory to be available to the CMS)
By far, this is the dumbest article I came across. Couldn't read it after first few lines. But god! This was huge article on an app that sends two words! :D Hah! Although comments on the article tickled me a bit.
So, for a resource/time-strapped startup, does it make sense to migrate away from Phusion Passenger to Unicorn? The stated advantage of Passenger, multi-tenant deployment, is not applicable to use. Will moving to Unicorn result in increased performance? Or are we better off solving other problems right now?
Awesome. The only thing that really matters is to have a convention, and tabs has been the accepted convention in the Go community since forever.

Changing go fmt to enforce the convention is simply making sure that people write code the same and frees the developers from the tireless discussion about which one is better. That alone outweigh any disadvantage of choosing one or the other.
The Lego Calendar
I prefer tabs (tab-size: 4), but I prefer even more if everyone follows the same conventions.

Dart, for example, uses 2 spaces. When I write Dart code, I use 2 spaces.

And that's the end of that. As history has shown, there is absolutely no point in discussing this. There is no clear winner.
> One reason I was able to quickly become productive within Google was because the company had invested so many resources into training documents called codelabs.

Counter perspective here. The on-boarding training at Google for SWEs is indeed very extensive, spanning several weeks with tons of material. For example, the first code lab alone covers how all of Google's source is in a single repository, how to check it out, how it gets built on a server, how to do code reviews, what the coding style is, etc.

I threw it all out the window after my first two weaks. I was joining an Android team, and as it turns out, Android works completely differently. Different source repo, different SCM tooling, different build system, different development workflow, different deployment mechanisms, even different workstations.

And the company culture was different as well. For example, in the Life of an Engineer class, they impressed upon us Google's culture of openness by poking around the source tree for search, and showing how we already have access to its code! But the Android source tree is tightly controlled, and my access request required two weeks and VP approval. (It's still the case that the majority of Google SWEs do not have access to Android source, or the Android café menu.)

I eventually came up to speed the old fashioned way: poking around outdated documentation, trial and error, and lots of bugging my neighbors. So in my case, the Google on-boarding process was mostly useless and partially misleading. This illustrates one way that "reusable training materials" can go wrong, especially with a larger organization.
Crawling is an issue. But if you google for mdwiki, first result will be the projects website which IS crawled. I think this is undocumented by google, but they do fetch ajax content. But you can not do professional SEO with frontend-only solutions.
Discount Louis Vuitton,Discount Louis Vuitton Handbags,Cheap For Sale
tabs for indent, spaces for alignment works great with Python.
Using MRI is a waste of resources period. It's going to cost you more $$$$ on RAM.
I have to agree. I'm sure it's great for those with the time, but there was nothing for those wishing to skim through and get an idea of what the game/story is about. I'm interested in this sort of game, but I already have a lot of long-form in my "To Read" bookmark folder, and a stack of books beside the bed as it is.
>I'm genuinely curious

I find that very hard to believe. It is a holy war that has been raging for longer than many posters here have been alive. Are you also totally unaware that some people use emacs rather than vi? Do you consider it "retarded" that most systems launch vi when you type "vi"?
>No virtualization developer is under the impression that it's magical or bulletproof.

Developers: No, of cause not. Some users however assume that you're automatically safe because you run Vmware/Xen/HyperV whatever.
This is true, but only for this special case where walls are strictly horizontal or verticle. In the more general case an angle, magnitude representation would be fine.
Author of MDwiki here. Versioning and editing is indeed intended to be done and handled through git. Pull requests are prefered method for collaboration.
Another way is to place the wiki on a Dropbox shared public folder and share the folder with your collaborators. Hosting can be done through Dropbox as well.
Pie in the sky: Drone didn’t deliver pizza
> many of which involve registry entries

You say this like it's a Windows-specific thing. In Linux, a lot of the USB support is exposed through /sys—pretty much the same idea.
The Game That Time Forgot - Why making an indie game took 13 years
>I want the bindings being declared within that let to line up with one another

Why? And is it really worth the noisy diffs you inflict on the world as a result?
To quote [1]:

Not really. Elastic tabstops is about enabling variable width fonts to be used in text (and especially programming) while still lining up tabular columns. What gofmt does is to use spaces to align columns; a method described in http://nickgravgaard.com/elastictabstops/ as a "kludge".

1) https://groups.google.com/d/msg/golang-nuts/93t0LWvHrKM/y6oI...
That's why we cannot have good things. People ruining someone else's work just for fun. That was not smart nor funny, and the goatse belongs to 90's.
Show HN: BillForward – Subscription billing platform for startups and developers
I tend to watch what Heroku is currently recommending for people deploying monolithic Ruby apps on them, since it gives you a good sense of what makes best use of a set memory slice (512MB.) Right now, they suggest Puma.
Is creating dozens of nested folders inside each other really a sane thing to do? Run `find .` on any reasonably complicated node project and look at the crazy paths that show up.

npm's strategy of nesting like that made things simpler when it was more of a new project, but it's time to come up with something more robust.
"selling product does not equate to value creation, it equates to an exchange."

I think this is the bit I don't understand. Will have a think and get back to you
Actually, there are big problems with strcpy_s and strcat_s. First, strcpy_s abort()s the process if there would have been an overflow, making it useless for most programs. Second, Microsoft already has a function named strcat_s, and it behaves differently than the spec.

Here's VC++'s strcat_s:

errno_t strcat_s(
char *strDestination,
size_t numberOfElements,
const char *strSource
);

In VC++, numberOfElements is the size of strDestination. In the C11 spec, that parameter is the maximum number of bytes to copy into strDestination. People are going to search for strcat_s docs, find the MSDN page, and write buffer overflows.

If strlcpy/strlcat aren't available on a target platform, I stick them them in a util.h/util.c, wrapped in #ifndefs. Like so: https://github.com/ggreer/the_silver_searcher/commit/a43dc87...
This is actually great. I was using Splash (http://unsplash.com/) a few days ago, and had to look at every image to find what I was looking for since there was no tags.
Hardware-Enabled User Experience: What Drove Adobe to Make Ink and Slide
Templates/macros/preprocessing do sacrifice separate compilation and separate type checking; so your error messages might not be comprehensible, your compile times can be much slower, and...you need source for your generic container. Rob Pike probably knows the drawbacks of that approach well and I doubt he would go there.
I had the same thought as the parent of your comment, but I really like this way of doing things, well done. Looks really clean and I'd consider using it if I needed a wiki for some project.
Hmmm this seems interesthing i wonder if they solve my subscritpion upgrade problem :)
I actually agree with this. I believe that, using the right techniques, both software and hardware can be produced correctly. It's a function of their design and complexity how easy it is.

It's also worth keeping in mind that modern processors are actually extremely complex and that they do regularly have errata, even though chip designers are extremely conservative in their approach by necessity (you can't just patch silicon) and are much more thorough and disciplined in their use of formal verification tools than the vast majority of software designers.
Thanks. I just googled and found a how-to post:
http://forums.openmediavault.org/viewtopic.php?f=10&t=1260

Anyone using this method?
I don't apologise for him, or defend him. However, I do have some insight into what may have caused this unsettling behaviour.

The bug report does not follow the projects standard for reporting bugs.

The main problem is that it does not link to the specification, and explain why it is not up to spec. This is required by the glibc bug reporting standards.

Later the reporter checks the scanf function against another implementation, as is asked for by the glibc documentation. Later the reporter also explains why it is wrong against the specification. If the reporter had read the guidelines initially and done these things, that would have been an acceptable bug report. To not do so is wasting the maintainers time. It is rude if the reporter knew about the bug reporting guidelines, and decided to waste the maintainers time anyway.

In this particular case, I think the reporter and the maintainer could have done a better job.
Sound like a good reason to punish and ostracize the most religiously ethical people. I hope this was your goal.
"in the age of cloud infrastructure many organizations think that they can simply pass the buck on backups, getting their geographic distribution and redundancy 'for free' as part of going to the cloud," Thomas added.

"However, anything that's vulnerable to the same threats isn't fulfilling the original intent of offsite backups."

Yep. The old adage of all the eggs in one basket comes to mind. Sad story.
Beethoven’s Ode to Joy Played With 167 Theremins Placed Inside Matryoshka Dolls
> However, using them to the extent of "returns an Object of this type" is absurdly verbose and pollutes the code base with roundabout information.

I did not talk about unit tests. I do not test stupid things like "returns object of this type". I test functionality (more like integration tests). If the functionality works then things like "returns object of correct type" or "items in collection are treated correctly" are tested implicitly or don't matter.

People with ridiculously complex type system programming languages have to write these automated tests as well, because even ridiculously complex type systems like Idris don't ensure the correctness of non-trivial logic.
I wonder why Mozilla didnt/couldnt jump in the ship and propose a viable alternative to node/V8,I know there is a node/spidermonkey project somewhere but it isnt maintained.

V8 api changes made a lot of binary modules break and it will happen again,so it is a problem on the long run.Of course NodeJS team cant maintain V8.

But please dont throw that problem under the carpet,It's a real issue.

> Google maintaining V8 is one of the big reasons why Node has been successful.

Sure,but it doesnt guarantee Nodejs survival on the long run.Look, nodejs is an awesome project,i'm not here to question that fact.I use nodejs everyday I love it.I just cant trust Google on anything on the long run.

Do V8 team consult with nodejs team,listen to their suggestion ? (that a question).Is it a bidirectional relationship or a unilateral one?
It's one of those nebulous things. For example.

Is it illegal for me to pay you a commission to sell products for me?

Is it illegal for you to subcontract selling these products?

Is it illegal for the subcontractors to subcontract?

Is it illegal for me to give a signing bonus if you recruit your friends to work for me?

Is it illegal for you to get a bonus based on your direct and indirect contribution to how well the company is doing?

Of course none of these are illegal on their face but if you add them all up into a pyramid scheme you can bet that it's objectionable to many and that in many countries it's illegal.

It's a shade of gray. Many people here believe that the importance of keeping the net neutral is huge (even while giving a wink and a nod to QOS and other realistic compromises). You can even tell by the mixed reactions throughout the comment thread that people believe this to be a very slippery slope, they want this but are worried about even precedents like this one. As your comment highlighted net neutrality can be nebulous so when you push a boundry it is quite possible that there is very little to stop you continuing to push.

Having said that I don't necessarily disagree with your reasoning, it's one of the reasons I support Aero being legal. Possibly a little hypocritically.
What's with the negativity? If I lived in the US I would buy it immediately.
It seems like Splashbase only shows images from one source, http://unsplash.com

Yet, I think Splashbase has a far more useful & easy to navigate interface.

Could you add more sources?
Bank of America targeted by New Banking Malware ‘Dyre’
windows has path length limits. Figure out how to live in them, whatever way is best. If that means using cryptic names, then do it. cryptic folder names, while not a good thing, are extremely common in windows.
Any plan for aggregate other free hi res photos from more sites? Or there is already alternative?
I'm surprised the obvious solution isn't already implemented universally by package managers: checkout the modules into a single directory, named as "[name]-[commit SHA]". You get all the benefits of the current system, with the added benefit that if A and B both turn out to want to check out C#1a029fb, then you only get one copy.
I have long relied upon Flickr's advanced search[1] for this purpose. It allows a Creative Commons license constraint for commercial usage or use as source material. The advantage to their search is with the combined video search and finer media segmenting.

[1] https://www.flickr.com/search/advanced/
Doctors Can't Contain Worst-Ever Ebola Outbreak
Awesome. For browsing, it'd be so great to have a list of tags that are available... or am I overlooking something?
Heh probably at least a little. I've got a decent grounding in AI and some in computer vision, and those portions at least seem doable, I've worked on some basic guidance algorithms before, and I know people who are having some success making generalized autopilot systems for drones for spatial waypoint following and flight controls, so that portion seems achievable as well. Once you can reach that level of abstraction, it starts looking like something a minimax algo with sufficient look-ahead depth could deal with, at least with a very rough level of precision. But yeah, devil and details.
Errors are just return value, but in go, you either explicitly ignore the error returned (using the "blank identifier" _ ), or, you assign it, in which case you have to deal with it (otherwise go will complain about an unused variable).

An that is what makes go awesome. In java or php, you, as a developer, can never know wether the functions you are calling will throw an exception. The only way to know? Read the doc, if you're lucky and there's a doc, or read the code... The result? your program will crash if you didn't add your try..catch block.

Go forces you to either explicitly ignore errors (and your fellow co-worker will know you did it on purpose) or deal with them. No surprises.
What's a compromise about it? Alignment and indentation are different semantic things, so it makes perfect sense to mix them.
A comprehensive JavaScript game programming guide (work in progress)
My point is that there is no difference between software and hardware.

You don't need hardware to eliminate memory errors: software can do it as well. Two examples of this are the Singularity system that Microsoft Research built and Google's NaCl, where the system only loads code that can be verified not to access memory incorrectly.

Your claim that hardware is easier to analyze is also incorrect. Modern processors are extremely complex beasts and are not inherently simpler than software. All processors have long lists of errata. You may be mislead into thinking hardware is easier to secure because (a) those errata are less visible to userspace developers because the kernel shields you from them and (b) hardware developers invest much more resources into formal verification than software developers out of necessity (you can't just patch silicon). If software developers invested a similar amount of effort into formal verification tools, your impression would be rather different.

Again, the point is that there is no inherent distinction between software and hardware when it comes to securing systems. It is always and everywhere first a question of how you design your systems and interfaces and second a question of investment in development effort targeted at eliminating bugs.
If the book was indeed a disguised one-time pad, as the article and evidence suggests, then no one's going to get anywhere cracking the code without the book.
So far I've been able to get by in Windows (for my projects at least) if I use Cygwin for interacting with paths that are longer than MAX_PATH. For example - if a project has node_modules committed in git then I have to clone the repo using Cygwin. This doesn't help with the problem related to install scripts on deeply nested components though because npm doesn't support Cygwin. In Windows I still run npm and node commands in a regular command prompt.
From my experience in running a small PaaS for ruby apps: if you want to have something that 'just works', go for phusion passenger. If you want to take advantage of threads, go with passenger enterprise.

If you want a more complicated setup, for example with varnish and haproxy between nginx and your application servers, thin is rock solid. It runs Rails 2.x-4.x apps without any issues. It's also well suited for handling websockets traffic.

If the workload of your apps can take advantage of threads (e.g. lots of external API calls, or lots of time spent in the DB), a server like Puma will show an advantage. Also, if memory is limited, you can handle more concurrent requests.
If you could show that seat belts save lives, which I think you can, then that's kind of interesting. In any case, I meant the question to be rhetorical.
Long paths are a PITA on Windows sometimes :(. A while ago I had a problem with long node module paths and msysgit. Luckily, this was fixed in v1.9.0

http://pingec.si/blog/articles/msysgit-longpath/
isnt it the reason why python ,ruby and co install themself in /c/ by default? I always wondered why they did that. PHP and Java dont have this problem(but "hello" package conflicts...).
Go developers typically use tabs.

You should really try not to use the word "retarded" like this.
Presumably, if

1. the user is side-loading an app they wrote themselves (or is an internal Apple/Google developer who uploaded an app to their app store and audited the entire sausage-making process as it transpired),

and 2. the app does literally nothing,

then the user can be 100 percent certain that the app does what it does securely.
Drepper's is a caustic personality. IIRC he's the reason that Linux has pre-linking instead of Solaris'direct binding, and so on.
> In the WYSIWYG realm, there is hardly viable competition

I used LyX as a student http://www.lyx.org/. It was a great way to quickly generate a LaTeX document and then fiddle around with it at the end. That was the 1.5 version, they're now on 2.1 which looks much more polished.
We play Diplomacy at our office and I jokingly refer to it as "team building". All said everyone has a pretty good time and can recognize it's a game. We play one move a day and games typically last around a month. I have been certainly been hurt by broken alliances, but I think it's a great character building experience to go trough.

All is fair in diplomacy.