skysight-inc/HackerNews huggingface dataset:
If you're not bothering with the HTTP protocol then you don't even need a certificate at all. You just need to have something like SSH's 'known_hosts' file. All you need to know when initiating communication over a secure channel is that the key the server sent you is in fact the key for the server. In fact, if you're including something with the app, just include the servers public key directly. Forget the whole key exchange process. Then use the server's public key to send a symmetric key generated by the app itself (sort of like TLS does) for the duration of the connection. This provides forward secrecy as well. Simple. Elegant. Secure.

The only catch is that if you change the server's key it will break all clients. However, you could always hard code a second public key that isn't even contained on your servers that is used as a fallback for catastrophic incidents where your private key gets exposed. Once you fix your security hole you swap out your key to your fallback and clients are secure again.
Dropbox does those things, however when you are programming you are generally not working in a single file. You are working across many files with many various temporary files.

This complicates the state of a development folder. If Dropbox went down mid upload or you hibernated your computer before it had completely uploaded (it happens), you then work on another computer and that uploads some files, suddenly you are going to get a merge conflict which Dropbox cannot easily help you with.

Software development is not one file being edited, its a collection of files in a particular state that give it meaning. Dropbox is good, its gotten better but its still not the right tool for the job.

Git (or any DVCS) is good enough that you can commit and push every 5mins if you wanted. The point is that the state a a whole makes sense.

Plus what about when you start working with other developers, you cannot all work in Dropbox, you'll get merge conflicts every day. What about bug finding features like bisect? Or just having a log of when thing happened?
I have been reading the fantastic summer issue of Boom magazine, which is dedicated to the San Francisco housing conundrum. Boom is a small, high quality journal put out by UC Press, and they really killed it on this issue. (http://www.boomcalifornia.com/2014/06/summer-2014/)

They have articles from both pro-growth and anti-growth people, including Rebecca Solnit, whose piece on Google buses in the February LRB really touched a nerve.
Wonder if we'll hear from any of the data scientists, whom surely exist in good numbers here.

Also, I wonder how much cognitive dissonance programmers feel, or often they rationalize, or reassign values, when things are done (which are quite typical) in the nature of their profession, to this effect.
You'll probably want to read the FlumeJava paper. http://pages.cs.wisc.edu/~akella/CS838/F12/838-CloudPapers/F...

Citation: http://dl.acm.org/citation.cfm?id=1806638

The key word is pipeline. If you have some analysis that runs in several stages, you'll be taking the output of one stage, and connecting it to the next. If you want to compose multiple phases, chained together, raw MapReduce isn't going to help you very much with the chaining.

What's described in the paper is a way to do the chaining in a nice way. The system will take care of writing the raw MapReduces for you. But it'll also do a lot of work on the interconnections between your stages as well.
Looks like someone thinks you're asking too many questions. :/
To be clear, I actually do call horseshit to their face. I have said to several candidates "no, but REALLY what would the risk be," and explain why I ask this question, exactly as I do in my post.

Some people just won't adjust their answers, no matter what.

And now I'm making a blog post about it, so if you're interviewing with me, you can just google me and know that I'm going to ask you this.
Zombie Trapper 
Pick up health kits to give your health bar a boost (top left), money to buy upgrades after each level.
Your arithmetic is being optimized out by the compiler; https://ideone.com/KmTSUB crashes for example.
That's a nice rant. Zzz...
According to the paper[1], "[the research] was consistent with Facebook’s Data Use Policy, to which all users agree prior to creating an account on Facebook, constituting informed consent for this research."

The Onion AV Club bit quotes "internal operations, including troubleshooting, data analysis, testing, research and service improvement" as part of the FB policy.

If that's really the part they're relying on, informed consent doesn't mean much.

[1] http://www.pnas.org/content/111/24/8788.full
What do you want to do with the MS after you get it?
MapReduce wasn't designed for iterative algorithms or streaming data, whereas Google Dataflow and Spark (http://spark.apache.org/) make iterative algoritms easy. It's a much simpler programming paradigm, and it allows you to do iterative graph-processing and machine-learning algos (http://spark.apache.org/mllib/) that are impractical on MapReduce.

For example, Spark provides the primitives needed to build GraphX (http://amplab.github.io/graphx/, http://spark.apache.org/graphx/), which is essentially GraphLab on Spark.
While making the world a better place!
MIT switched to Python because they believe modern basic CS is about controlling complex systems (web APIs, robot APIs) not walking through the history of CS from scratch and bare metal.
Some people do ask that question. I love when that happens. And I answer as I did in the section "what to do if you don't know what to do." I explain, for example, that I can't see a clear path for advancement for them, and ask them to brainstorm with me. Or I tell them that I'm not sure what we can teach them. And then I let them decide.

This isn't supposed to be a trap. It's supposed to be an honest conversation between two adults about how a working relationship is going to work. I have as much responsibility to the applicant as they have to me.
I sent all my text messages in calligraphy for a week
IPv4 addresses are more like 2 EUR/IPv4/month now -- already more than twice more expensive than the domain names, plus, there is generally a limitation of, say, 8 or 16 addresses per non-enterprise hosting accounts. And these prices will only go up in the future!

Plus, are you suggesting that I even get separate certificates (and IPs!) for subdomains? Because I don't actually have to pay anything for my own subdomains to anyone! (Other than the https certificate companies, apparently.)

Plus, having to manually re-install all of these certificates every year? No, thanks! Fix it first! I don't have to re-install my STARTTLS in SMTP, noone gets any self-signed warnings, yet all my email is still immune from passive eavesdropping or any kind of passive tapping of the traffic.
The title has existed for years now at various companies(most with an open source program have them) so whatever you were suppose to do you're too late now.
I don't find it surprising or unethical, but I do question the validity of the conclusions drawn and the idea that doing this would actually get them the kind of information they wanted.
DCA (Direct Cache Access) has been around for a while - DDIO is its replacement on higher end Xeons.
Deep impact: unintended consequences of journal rank
I use Harvest: http://www.getharvest.com/
Secret or not secret are not mutually exclusive, was all my point. the rest was just an aside. The knowledge is even useful, but for me it's been completely overshadowed by knowing that they are manipulating us to learn, in effect, how to manipulate us better. It's not even theoretical.

I was watching Google I/O, and in the section about Android TV, they showed how the device, if you left your TV on, would show you soothing images that they selected. What kind of power is that! Imagine if suddenly, all the images on every Android TV switched to the same image. How would what that image presented affect the world at that moment?
Nice and interesting, but doesn't soundcloud use some compression itself? I mean, isn't it different from simply posting some FLAC file? I don't know, just wondering.
Material world: how Google discovered what software is made of
From what I gathered from all the material design videos (they have a handful of them on Youtube), they're providing everything to do what they did.
There's a grain of truth to what he's saying. We don't write many new actual C++/Java MapReduce jobs. It's mostly flume. Although there is some momentum behind Go MapReduce.
I think by "certificate passwords" the poster was referring to the private key associated with the TLS certificate and not the certificate itself.
It depends on which libraries you are using.

Sure if you need jQuery and maybe another plug in that's fine, you're at 3 files to be loaded then. 2 from cdn, the jquery and plugin, plus one from your server.

For a web application however it's likely to contain many many more resources, backbone, marionette, jquery, handlebars. Those aren't great examples because NPM handles those just fine, and the discussion is concerning bower.

NPM billed itself as javascript primarily and never tried to sell itself to front end developers. Not terribly hard, it was definitely for node development. It was almost literally a branding issue. I think another big problem was the continued separation of concerns employed by most node developers. They tend to keep their front end/client side code in one directory bunched up together such as `/assets` or `/client` and then use the the rest of the project structure for their models directory, controllers, etc.

A real back end system requires this complex set up while there has been a long trend of front end being as light weight as possible while providing as interactive an experience as possible.

With the continued rise of SPA's though the front end is now easily as complex as the back end, and in fact shares a lot of the same logic. With build tools like GulpJS it's possible to fix this structural issue and now keep your code more logically grouped by function, group all of your users files, all of your messages files together and then concatenate and minify your client into a single file for production.

Anyways, so for a SPA you'll end up with a ton more dependencies, both css and js files. Bower billed itself for this purpose. Their branding and singular purpose made thing far easier.

I also prefer bower because it has a significantly better search and sort method in comparison to npm.
Fascinating how hard scientists will work, hunkered down in front of their calculators, to discover basic facts about human social experience that regular people have known for thousands of years: emotions are shared.
but doesn't the low p/e indicate most growth is already priced out of apple?

as of today (numbers from yahoo finance):

tick p/e
amzn 506
fb 87.6
goog 30.25
csco 16.67
intc 16.55
hp 16.29
msft 15.83
appl 15.4
ibm 12.4
twtr n/a (<0)
(sorted descending)
Here is a fun demonstration of undefined behaviour that someone showed me recently: http://ideone.com/LsEUPa
But no one ever seems to consider that there might be a point of diminishing returns to density. Or, even if they do recognize the possibility somewhere in the back of their minds, they assume their understanding of returns is the transcendentally true one.
Boom Interview: Rebecca Solnit on San Francisco
It's a shame that a reputable journal accepted the bogus claim of "informed consent". Not a big deal in an observational study like this, but sets a horrible precedent for EULA-based fraudulent claims of informed consent.
>I wonder what other type of crap is putting innocent people in jail?

Rhetorical question? It's polygraph, drug sniffing dogs and breathalyzer. There was a court case a while back about drug sniffing dogs that presented the empirically demonstrated fact that the dogs present false positives all the time; but the judges concluded that it resulted in so many convictions that it would be a disaster to prevent their being evidence in court (analogous to witch dunkings, I suppose.) And breathalyzers are electronic devices whose source code is not auditable because the it is a "trade secret." Convicted by breathalyzer result? Can't challenge the black box's findings.
Your comment is an example of everything that's wrong with software and UI design today.

> Battery and antenna certainly aren't the pieces of information we want the user to focus on...

Stop telling me what I should be focusing on! Stop acting as if a simple icon is reaching out of the screen and dragging my eyeballs toward it, like I have to be protected from this horrible, "distracting" icon by sanding away all of its distinctiveness and making it blur into the background, making it useless!

When I need to know what my battery charge is, or what my signal strength is, I look at the icons, and they need to be distinct and clear! When I'm finished doing that, guess what--I don't look at them, and they are not a problem! It's not as if the stock Android battery and antenna icons are flashing and twirling around!

Stop it with this minimalist dogma! It's madness, and these self-appointed design "experts" are dragging the whole industry down with them in their mindless pursuit of blandness and their personal ideal of beauty--which they put upon an altar and worship, while ignoring usefulness!

A cell phone's screen is not a fashion statement, nor a work of art! It's a tool!
I'm a fan of Toggl http://toggl.com
We use it at our consultancy and it works well for our needs (freelancers, employees, different projects, reporting, invoicing)
Rebecca Solnit is the San Francisco writer whose piece in the London Review of Books last February 2013 touched off a huge discussion (on HN: https://news.ycombinator.com/item?id=5189580) about the future of housing and culture in SF.
That "sines" example was 320kbps in case you didn't notice. Judging by that I can imagine that less radical compression for other music pieces would make pretty similar ghosts, just, well, less radical. Not so hard to check it for yourself, anyway.
A private corporation is developing the capability to alter the moods of massive populations in a controlled way; unlike mass media, society doesn't (yet?) understand this sort of influence.

Perhaps soon Facebook will understand how to tweak the news feed algorithm to e.g. whip up negative sentiment in response to an attack? Or stop a particular candidate being elected? Etc.

Perhaps they will use this for good, as you mention. But its still huge power for a corporation to wield; effectively in secret - its easy enough for an observer to make a judgement about a bias in e.g. Fox News, and call that out - but it'd be very hard to observe subtle changes to individual news feeds.

I don't really buy your argument that they have a clear moral responsibility to develop this capability. That depends on the potential good of such capability if used for good, the potential bad if used for bad, and the chance it will be used for each.
So I don't see this as analogous to a corporation conducting a clinical trial of a drug; this is more analogous to a clinical trial of a drug that could also be used as a weapon, with the more complicated ethical issues that would entail.

I think its absolutely something there should be ethical discussion around.
They are the cheapest in terms of founder time.

You don't need to apply or be approved by anyone you already have access to the funding.
Dataflow is language agnostic. The Java API is being released first, and more languages will follow.
Game developer here: 16ms is the magic number in frame rates as it means you're hitting 60fps, which is about the same as the human brain's visual refresh rate.
So now when the citizens are angry, the government can have a talk with Facebook, to see if they can settle the nation down a tad.

Not creepy at all, nope.
Honestly, all I want is:

a) have an option to AUTOMATICALLY have all those stupid games banned, without having to ban a new Farmville version or clone every other week (aka: I just want to view real, user generated content and not be woken out of my sleep due to some retarded friend playing Farmville at night and asking me for crops)

b) make it REMEMBER the "show me the full feed" and not switch to that abomination it calls "top posts"
What school is this?
The US has a 1.2% chance of winning.

"So you're saying there's a chance..."
If you are joining an existing consulting firm and they don't already have a really good system in place you should probably run screaming in the other direction because that means it's probably a very poorly run firm and not long for this world. Tracking hours and billing efficiently is how you stay in business.

That said, I like the harvest timers (server side state, configurable idle timeout) for the granularity and the fact there is an add-on for the Xero accounting system.
Yes, it's the same story, so we'll call this thread a dupe.
That's the best part - it's automated with a context-sensitive customizability infrastructure. That means you can expand any targeted benchmark in a demand-driven mesh.
cryptosexual?
Puget Custom Computers: Custom Built Computer Systems
" Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site. "

I really don't get the stack exchange group of websites. Some of those answers are outstandingly amazing.
Somebody worked hard. It wasn't you, but they did it for your benefit. If you take that advantage and build on it, you can make it even better for your son/daughter. I cannot even frame this into the concept of an addressable "unfairness" unless you literally do not think that people should try to make a better life for their kids specifically.

Someone else in Bangladesh didn't do shit for their kids, and their kids are still there. Was that bad luck for the kid? Yeah, but for the dad, he could have done something about it. Pure cosmic chance that you were born to dad A instead of dad B didn't negate the fact that somebody's hard work paid off and someone was there to reap the benefit that happened to be you.

Sure there is still a level of unfairness in this, it's not purely hard work. But how much unfairness do you want to really address? Dad C is a Yanomamo indian in the Amazon basin. He worked his ass off twice as hard, but his son is never going to end up in America working a high tech job. Does anybody care about addressing this inequality? Hundreds of generations of Yanomamo, and they still wear leaves and live in the jungle. Hard work alone won't get you out of that. They never built a system that lets you build on the work of others. Bangladesh did, America did, and here you are. People worked hard to get you here. It wasn't luck, _except_ for you.
I could see this becoming my primary source of news. My main problem with mainstream news sources is that they're filtered. This would be a great way of keeping up with what's going on in the world. I could see it turning into something awesome. Something like my own personal newsroom (i.e. the wall of screens I imagine they have at the big news stations with live coverage coming in from everywhere).

I'll keep an eye on this.
Mostly a dupe of https://news.ycombinator.com/item?id=7956470.
I feel like this is obligatory: http://xkcd.com/619/
Yes. If your study is done with federal money and at a research institution you need the Institutional Review Board to clear your experiment. One of the requirements is that patients/subjects be given a consent form and the experiment explained to them.

It is possible to perform an experiment, hiding its real purpose, if the results of the experiment require the subject not to understand the design/aim. But usually these are badly designed experiments, because you can never know if a subject has been exposed before to the experiment, and can therefore game it.

I guess FB is arguing that users gave informed consent when they signed up for facebook. I don't know if there is a review board for experiments at FB.

I think, with a good enough lawyer, you can successfully execute a class action lawsuit if you find users whose mood worsened as a result of this (a user under treatment for depression, for example, whose mood is clinically assessed)
The Troubling Truth of Why It’s Still So Hard to Share Files Directly
This actually sounds like a good idea!
Freshbooks: http://www.freshbooks.com/
Get yourself a copy of Telestream's Screenflow and record your screen when working. At the end of the billing period, simply scrub through your recordings to build your invoice. Don't mention this to your client as they may request to see them! But if they ever dispute an invoice you'll have no problem winning that battle :-).
This sounds more like Google app engine's shot at amazon kinesis than anything else.
I stand by my original argument.

A sane version in this country is PostIdent. It's a way to verify a person & address using the post. Think postman arrives, asks you to pull out your ID and sign something, hits okay. Company knows that you are a real person with the specified name living at that place. They _might_ have access to the number on your national ID afterwards, but I'm not even sure about that one.

Have you checked what kind of documents you're to send to a random foreign company for verification?

On top of that, the process doesn't WORK internationally. I still don't understand what kind of utility bills you have in Israel (StartSSL) or the US (usually the source for.. things), but mine are different. Plus, what does a random letter in a random language prove? Sending in an ID is understandable - it's a state issued document and protected by law, forging one would be a Bad Idea. A "utility bill"... Well, as I said: Insane. And arbitrary.

For the fun of it I looked up the mail exchange.

Documents they asked for (* denoting that I sent them):

- Mobile bill

- Utility bill* (sent a cable provider's bill)

- Passport & ID *

(I think I provided my driving license as well)

The first two documents are absolutely braindead requirements. They certainly don't have the expertise to know all utility providers/mobile network providers on a global level. So I could hand in ANYTHING and it would a) be probably legal (there's no law to prevent me from 'forging' a utility bill.tell ..) and impossible to prove. That is .. unless they call your utility/mobile provider to check the information, which wouldn't work in the first place (data protection laws) unless you IMPERSONATE the person you try to check. Which would be crazy on a different level.

In the end they wanted to send me a registered letter by snail mail and I cancelled the whole ordeal. Doing that would've been an option of course, but not after they asked for random documents proving my address. EITHER send me a registered letter OR ask for crazy stuff that contains my name and address in the header.

Plus, transparency. This whole process took a while and was a lot of "Now please send this", "We really need that", "Since you have no mobile bill to offer, we fall back to snail mails". I discovered this in painful mails, after handing over enough of my data to do mostly anything in my name.

I fail to understand how this process could be acceptable and I certainly consider it broken, hostile and inefficient.

(Handing in my utility bill was difficult as well - I blacked out all but the letter head, which caused them to complain again and again. Ignoring that the letter contained the SIP credentials for my landlines, what the..? I cannot _invent_ a reason for this requirement. My creativity is too limited, it seems)
Sure. But worrying about the average developer doesn't do much.

They're not the 90% case, anyway, almost by definition. =)
pen and paper. that I then I enter into my billing software.

I feel you judging me. stop.