skysight-inc/HackerNews huggingface dataset:
Ivy Pentaho Demo Server
We’re happy to announce the release of the Ivy Pentaho Demo Server! This server includes a selection of dashboards all built with the community edition of Pentaho as well as the Ivy Bootstrap Components Plugin! Sign up for the server and test it ...

http://goo.gl/fUdZGI
His state is hardly the only one that will benefit, but it is indeed often called the Senate Launch System. But after Apollo NASA has been more a public works program than anything else, and for that matter one of the explicit goals of Apollo was to spend a lot of money in the South and "uplift" it.

You can tell this is propaganda when you see garbage like this:

"'The launch abort system (LAS) is a key reason that Orion is intended to become the safest spacecraft ever built. In an emergency it could activate to pull the crew module and the astronauts it will carry away from the launch pad and the rocket in milliseconds' NASA officials wrote on their Web site."

The crew modules that preceded the Space Shuttle, Mercury, Gemini and Apollo, all had one as well even when flying on inherently safer liquid fueled boosters; they're safer because you can turn them off. Look at the second paragraph of the link below about how the Air Force figured the Ares I SRB stack made crew survival impossible for an abort 30-60 seconds after launch; hopefully this system can vector the SRBs to the side in an abort, and their presence alone probably makes this system overall less safe than the pre-Shuttle ones.

About the only thing I can say in favor of the SLS is that they dropped the Constellation Program Ares I idea of using a primary booster with a 5 segment SRB---and note those, and perhaps the SLS SRBs, were brand new wider versions, throwing away almost all the theoretical cost savings of reusing the Space Shuttle SRBs (look for when they talk about reusing Space Shuttle technology instead of hardware). That extra length version produced vibrations that could by themselves kill the crew (https://en.wikipedia.org/wiki/Ares_I#Analysis_and_testing), and the Orion capsule's utility was steadily decreased as they added vibration damping hardware instead of fixing the problem. I sure hope the 5 segment option in the SLS doesn't have this problem.
U.S.: Assad’s ‘Machinery of Death’ Worst Since the Nazis
I've never understood why anyone would inflict oneself with bash scripting. If you really need something portable you should use standard /bin/sh anyway since bash is not installed by default everywhere (I believe many linux distros don't even ship with bash anymore, but a lightweight clone called "dash"?).

And if you don't care about portability out of the box, why not use... Well basically anything else? Perl, python, ruby, lua, scheme, whatever.

The only shell scripts I ever write are basically a list of command to execute sequentially. If I need something more complex (control flow, user input, proper error handling, nontrivial string manipulation) I switch to some other programming language, it's just not worth the pain.
If the leaker visits this page before opening the Tor Browser from a regular browser to copy the onion url, the whole thing is as safe as SSL as there will be a trail of the SSL connection just before the visit to SecureDrop. And they don't even explain to avoid it.

OPSEC is hard.
> makes me wonder what kind of leverage the US secret services have.

Don't wonder. Throughout the Cold War it was patriotic to sacrifice some of your nation's sovereignty to secret agreements and relationships to make your country safer from the very real Soviet threat.

Now all those agreements and relationships have been repurposed in the Global War on Terror. So first you have to decide how much sovereignty you, as an insider who took part in those agreements, want, and how much alienation from your voters you can stand.
Interesting. I had to surf up Wikipedia's page on http://en.wikipedia.org/wiki/Aerospike_engine to learn more about that.

Quite a cool design, if I understood it correctly it switches the big classical cone-shaped nozzle into a lot of small nozzles nestled against a central spike, with the surrounding air forming the other half of the (now virtual) nozzle. Weird and almost magical, what's not to like? :)
Why Google's Waze Is Helping Local Governments Track Users
Maybe he does own the IP outright. He negotiated for the right to create side projects and has paperwork to prove it?

Or maybe he figures it's his because it's not within the scope of his employment. i.e. -- has nothing to do with banks in and of itself.
I'm certain that "liberalism" has no meaning whatsoever now. It's just an empty word, like "fascism", that politicians use to rally their supporters.
You can also do Java + Play. And Go's out there now, and it comes with most of the stuff you get from Play out of the box (and for the other stuff, getting it is easy enough).
Is it similar to cloudflare whats the difference basically?
There is no such thing as DevArt, there is only art.
If their Aerospike engine is anything like the one in Kerbal Space Program, this should be good.
Will an Android-powered Nokia Lumia line kill off Windows Phone?
Does anyone know how to answer this question:

How do I know when a proof is worth learning?

A lot of times I can get by with just an intuition that the statement ought to be true and some knowledge of what the proof uses but without a full understanding of the proof. But that's not something to be done every time. Any advice on knowing when I can or can't skip a proof?
I've used GitLab a bit, and it seems to be a pretty simple self-hosted imitation of GitHub that does 99% of what I need to do for team code hosting. How does GitLab CI compare to Travis CI? Is it as flexible and seamless as Travis' GitHub integration? Right now I mostly use Jenkins, but more than half my projects could conceivably be run through something like Travis with minimal changes...
Hi niveus,

I'm the guy that makes Happy Scale. Glad to see it's been helpful to you. Would love to get a fellow HN-er's thoughts on what could be improved... if you have any, drop me a line at support@happyscale.com.

Russ
If they don't have a vehicle named "Serenity" at some point we are going to have a serious problem.
Linq is an opportunity to write slow code very quickly. Of course when you have to spell out a 1-line Linq expression as a 50 line method, you'll notice that you wrote a triple nested loop and avoid it. But the point is this: the longer code is MUCH harder to comprehend than a concise Linq query, and the developer that didn't see that their Linq query was going to be slow wouldn't have reacted on that the expanded version also looked slow. The single line query can be more easily refactored as it can be comprehended.

So I say write slow code so you can find what's slow early on. The problem is likely to be in the architecture and data structures rather than in the processing code. If Linq gives an opportunity to deliver a working example quickly, and that example shows that for large N the perf is horrible, then Linq was extremely useful! Change some collection type, demoralize something, add some caching etc. and then slightly adjust the Linq query to suite. Large query methods are inertia to such changes so when they DO become necessary it's a larger effort.

Note that I mean Linq to objs now not Linq to Sql or some other provider.
Space Lich Omega
I'm asking the question: maybe vs has improved since I left.

Until recently the meme among tje fanboys seemed to be "VS is the best ide" (i.e.: after you have installed resharper).

Are all modern refactoring tools installed ootb with vs 2013 or 2014?
I clicked to the end because I appreciate this work of art.
Speaking of shells, I wish there were a shell inspired by python, able to conveniently use python libraries (perhaps even auto-import them), but with the convenience features of common shells. I can never remember the ghastly syntax of bash.
Facebook takes a "family name" and a "given name", and asks you which order to display them, right?
"After all, it's the US who's providing security to most of the western world."

If I do what the bully tells me to do, he leaves me alone and attacks other people. That's not security, that's abuse.
Lately: http://exploringarduino.com/
Is Silicon Valley Pouring Its Money Into the Wrong Stuff?
So you have no directives, no routing, just 2 way data binding.

Sorry sir, you may have heard about angular.js but you don't understand it at all.
Yup, pretty much. The traditional engine nozzle can only be optimized for maximum thrust at one altitude, while the aerospike maintains thrust efficiency at many altitudes, using as much as 30% less fuel at lower altitudes. Also, for the aerospike design, it doesn't have to be a series of small nozzles. The combustion gases can escape the combustion chamber via a ring. It's more difficult to cool this type of system and adds some weight, but it is an efficient alternative to the traditional engine nozzle for SSTO (single-stage-to-orbit) vehicles.
First link to avoid paywall: https://www.google.com/search?q=Is%20Silicon%20Valley%20Pour...
worth clicking, nice work.
There were some cases where pin was either stored encrypted on magstrip or was generated from information on magstrip, but I think these very few cases and I don't think any bank does it anymore.

Most cards I dealt with had option to change PIN either online or via call to bank support. So it can not be stored on card for offline verification.
Yeah, that could explain it. Sort of like how you rarely see Java client applications...
This is great. Scott McCloud and others have said that this is what comics would evolve to on the web for a long time. I appreciated the clever use of pacing and space. A great work and I hope it inspires more creators! So cool!
I agree, I didn't figure that out until I read comments either. A little "click here" hint could go a long way here.
Meet the shadowy entrepreneur sucking the fun out of Dogecoin
It could work that way (cf Barack Obama example), you'd have to check against a "list" of all Facebook users though; and if the target was logged out it would fail.

It seems doable that you could use FB to list all people with a given surname in a locality and craft a page that finds which of those people your visitor is. So it could be used for doxing at some level.
Has the Sharing Economy Given Way to the Scalping Economy?
My first thought was to enumerate the red flags I see (since there have been a fair number of investor-bait non-serious "space startups"):

The team comprises CEO, CFO, COO, and VP-BizDev…no engineers, at least in the leadership. To be fair, the COO does have a BS in Physics and almost got a PhD in AE.

No photographs of any facilities, testing equipment, or anything short of 3D mockups. The name is based on a sci-fi TV show and the splash page is also a sci-fi quote.

Looking deeper, however, it looks like they've recently hired their 25th employee (a Systems Engineer) and are building out their engineering team aggressively. Recently funded in January. So perhaps they are legitimately worth keeping an eye on.
cashflow: income vs. expenses, and everything related to taxes.
Or it could be that 40year olds are more risk averse which leads to a smaller pool of 40 + entrepreneurs seeking funding. Or could it be that 40+ people have built a network of contacts that enables them to start businesses ,not startups, with little external funding. I see a lot of new businesses in advertizing, marketing and finance sectors which are profitable and pay good salaries and yet have never had the need to raise capital from VCs.
There are cases you cannot really exclude by testing. For example, guaranteeing that certain function never receives a null value.
I think the technology confuses two things:
1. Encrypted traffic between device and wireless hotspot
2. Restricted access to the wireless hotspot (you need a password or it won't give you service)

I want to allow anonymous access, but let the traffic be encrypted. Is there a technical reason why this is not implemented?

I'm very sad by the culture (and moreso, the legal necessity) of restricting wireless access. I want to share, and have at times relied on anonymous wifi to help me get home.
* we are not at war against Russia

* given the recent news, I do not really consider the USA as an ally. (I'm french)
I see no definitions of type in the dictionary that specifically refer to static type theory...

Definition of type (n)

category or kind: a group made up of individuals or items that have strongly marked and readily defined similarities

person or thing: somebody or something regarded as belonging to a group or category by virtue of having the main qualities associated with it

particular kind of person: a person regarded as having a particular temperament or characteristics.
I don't disagree that Swartz was a victim of a ludicrously overzealous justice system, but I wouldn't call him a hero. What he did was illegal and he knew it was illegal when he did it. You can argue that it was a bad law and he was practicing civil disobedience, but I don't think it was that either (a big part of traditional civil disobedience is to draw the process out as long and as loudly as possible, then proudly serve the time.)

Maybe it started out as civil disobedience, then depression kicked in and he felt hopeless and took his own life. It's hard to say, and honestly I'm sick of the post-mortem psychoanalysis of a kid who was trying to make sense of his life (as we all were at that age). But either way, Swartz was not a mere victim of circumstance; he made choices that painted a target on his back, malicious intent or no.
Tor hidden services are not bulletproof. Just as a really simple example, you can do network traffic analysis to find network nodes with one-way traffic to hosts without a correlated public service and deduce if a hidden service is nearby.

There are several exploits which have been used in the past to expose Tor hidden services, and several papers on theoretical ways to expose them. Many of these attacks can be used in reverse to expose the origin of a connection to a hidden service.

In the [not so] extreme case, the govt can always issue a National Security Letter to WaPo and scoop up any data it wants directly from the hidden service servers, similar to its Silk Road and Freedom Hosting takedowns.

The FBI TOR Exploit [ http://resources.infosecinstitute.com/fbi-tor-exploit/ ]

Heartbleed used to reveal Tor hidden services [ https://blog.torproject.org/blog/openssl-bug-cve-2014-0160/ ]

Hot or Not: Revealing hidden services by their clock skew [ http://www.cl.cam.ac.uk/~sjm217/papers/ccs06hotornot.pdf ]

Tor Hidden Service Passive De-Cloaking [ http://blog.whitehatsec.com/tor-hidden-service-passive-de-cl... ]
Typically single- or multi-product SaaS businesses, largely selling B2B software on a low-touch model with a 3~5 column pricing grid at prices between $29 and $499 a month, sometimes with a side of infoproducts (e-books, courses delivered online, etc). As to what the SaaSes do, "fixes 'boring' business problems" covers most of them.
There's this hard tradeoff that most people are willing to make, between making things more 'secure' and making things useable by the general public. I just wish that attention would be paid to the security side of things.

Ultimately, we can write descriptive documentation - but getting it read and understood is hard. Cryptoparties, are again a great idea, but getting the non-technical user involved is damned hard.

IMHO these things always come down to "how do we make it easy for the public, whilst keeping it REALLY secure". How does security become a general piece of education, much akin to math, or at least history?
How to be a good graduate student
Yeah, exactly, those. That’s quite amusing and seems more like security theater on my bank’s part than anything else.
I did my Masters thesis in Computer Science in C# (data visualization). No apologies. A couple of people around the Institute have looked at me funny, but it's turned out to be a very good choice.
Comparison of letter positions in eight languages
Interesting question. Answer for me right now: "no". Most jobs came via personal network. But I am exploring options to expand my freelance business too, and blogged about it: http://thinkingonthinking.com/Elegance-in-a-software-busines... and http://thinkingonthinking.com/Pitching-for-Jobs/ and http://thinkingonthinking.com/customers-jobs/ - it would be great to share/discuss what makes a good freelance website too.
The problem seems simple to solve from the bank side: Use transparent plastic on the card mechanism and surrounding areas.

If you see opaque plastic around reader, don't use it!
GitLab CI integrates directly with GitLab CE installs, requiring no configuration from the end user. Compared to Jenkins, it will automatically link up with your repo and start builds on commits and pull requests. These are things you have to manually configure with something like Jenkins. As for Travis CI, the integration is just as seamless. GitLab CI talks to GitLab installs via the CE api and automatically pulls in your projects, sets the build status on your repos and assigns runners to perform your builds. The GitLab team has really done an amazing job building a CI offering that integrates really well with their CE repo app.
SWIFT is not $5-$10 per wire - it's $30 to $60 in my experience (apart from Interactive Brokers who give you one free one per month). The costs are partly because that is a fixed fee whether you are wiring $1000 or $10m. Also it is still a semi manual process often involving humans at both the receiving and sending banks. This is partly because it is an old system dating from 1973 and also with the $10m transfers there is some fraud / cock up risk and so they check things out a bit. It also allows you to send money from say Jersey CI to the Bank of Bhutan who may not have compatible computer systems. I did that one and got my money stuck in Bank of Bhutan a bit rather with the travel agent I intended it for due to a cock up on my part. Also they do provide human customer support when you do such things. Also now they have to deal with a bunch of anti money laundering bureaucracy. Apparently in the EU the regulations are stack of paper about a foot high so no one has actually read it all so they kind of wing it. There are costs.

In fact thinking about it on a typical $50,000 transfer I imagine a $30 fee would actually be a loss leader if you imagine how much you'd have to pay for a compliance officer to read the laundering regs and file paperwork illustrating the transfer is kosher. Against this they typically try to overcharge you on FX (.5% is possible) and also give you 0 interest on your money when they are getting say 5%pa on it so they may make typically 2%*50k on that = $1000 which would cover costs but I'm not sure $30 would.
Can't help but feel like we're on the cusp of a new age of mankind. How long will it be until space travel really takes off? I feel like we're getting closer and closer.

We're a part of history, we were the children of the dawn of the digital age, pushing mankind towards the stars. A hundred years from now, people will look back and read about us and think how primitive we were to be pushing for space but how almost nobody actually went to space.
This is the article title on Wired. It may well be true for the typical reader of Wired.
> [...] assume that this price is somehow driven by supply/demand driven market

I didn't say that. Intelligent actors tend to avoid any real competition. The price is what enough clients are willing to pay to make the whole scheme profitable. There doesn't need to be any fairness for this to happen.
I played with Acme the other day and was blown away. The everything as a command idea is really powerful. Definitely underrated, would be great if it got a modern reboot.

For the unfamiliar this video by Russ Cox covers it pretty well. http://research.swtch.com/acme
Wired's target audience is not in tech. There are other analogies in the mass (and not so mass) media. Wired articles don't really belong on HN as a class, although individual topics can be relevant if sometimes inaccurately reported or late news.

A podcasting example is "this week in tech" is for people outside tech to glance inside. Its moderately entertaining and nicely produced although I'd worry about my personal abilities if I ever learned anything from it, because its not aimed at a tech audience. Podcasts for people in tech to listen to are things like "Software engineering radio" although they sometimes run off the TPS report deep end of fads, or "functional geekery", or the former Relevance, now Cognitech, interview show. "FLOSS weekly", another interview podcast show, is kind of in between the two worlds, which is pretty unusual and interesting.

Edited to add some magazine examples. PC magazine is not for people inside tech to read, its for people outside tech wondering whats going on to hear a little gossip. The former sysadmin magazine (out of print for like a decade now?) was for people inside tech to read. The dear departed Perl Journal was for people inside tech. The print version of Linux Journal a decade or so ago was unusually more or less on the border. For noobs, magazines were kind of like internet websites printed out and mailed to you. Different from newspapers in that you only got one a month and they were somewhat more polished and edited and generally on nicer paper. My kids are young enough to not really understand newspapers or magazines so I've actually had discussions along these lines trying to explain. They're a little fuzzy about broadcast distribution vs streaming too, broadcast is like a stream but you have no personal pause or commercial skip button, this confuses the heck out of them.
Artificially constrained supply because existing homeowners are the ones who can vote, and they like seeing housing costs go through the roof.
> Mono simply isn't there yet. Code that works fine on Windows mysteriously stops working on Mono due to threading or GC vagaries (yes, even in the latest version).

I remember having to maintain a small C# SDK in my previous work. That was a bit of a headache given that we were a 100% OSX shop. I installed MonoDevelop and libraries in my Mac to try to make some changes there, just to find out that Mono has not implemented some .NET standard encryption libraries.

I really appreciate what Miguel and team has achieved with Mono, but it is still incomplete, so from my experience it is not really an option. We ended installing XP in a virtual machine to modify the code.
So what you are actually saying is, yes, Germany has full sovereignty.

Please don’t spread this bullshit. There is (mostly) mutually beneficial strong cooperation with a power-differential. That’s all. Stop spinning your dumb conspiracy theories.
Google got back to me [...] they had internally discussed
the information leak problems associated with CSP and had
come up with no solutions that did not hamper CSP's
function.

Surely disabling third party cookies would fix this?

If it doesn't say www.facebook.com in the address bar, the browser doesn't send the facebook cookies, so the response is always consistent with the user not being logged in.

It might mean '+1' buttons have to be regular links, but other than that who loses out except ad networks?
You'll need width defined here too..