skysight-inc/HackerNews huggingface dataset:
Possessing illegal bits is kind of a basic example of thought crime.
Regions as a general concept go back at least to FX-87 (in 1987 :). But the way the Rust type system works is quite different from Cyclone, for example. Cyclone, for example, treats memory in the heap quite differently than Rust, and doesn't have borrowing (at least not obviously).

But my more significant point is the second one, which is that novel language design is research, period.
Haha. solid.
So you'd rather judge them without action? How sad a situation this is.

Rather than creating an environment where someone with desires (that they cannot control, mind you) must hide and isolate themselves, rather than Getting help!

You realize that you're only making pedophiles more likely to harm children right? They need help, not damnation.
Show HN: How oDesk built its distributed engineering team
Some form of locality-sensitive hashing such as MinHash or the algorithm presented in the linked article is generally good for general-purpose near-duplicate detection.

For when you've got a really big pool of documents to look through, simhash tends to be higher-performance because of the tiny fingerprints it uses. It also tends to force you into making stark decisions about precision vs. recall, though. Depending on your needs you might be able to make up for less-than-stellar precision by cleaning up false positives after the fact.
Poorly coded, no standards, also is vulnerable to DOS and memory leaks...
First off, I applaud YC's efforts in this sphere to give all groups more opportunity to participate in startups and tech in general. I do not mean to disparage efforts or "derail" a conversation, but to bring up the fundamental question once the low-hanging fruit - discrimination, etc. is gone - self-selection and equality of result as a goal.

Any diversity discussion will eventually reach the awkward points of over-represented minorities and self-selection, which negatively impact numerical diversity: There are some elements of the industry that will inherently self-select for groups. Asian males are currently the most over-represented group - racially due to US immigration policy and cultural factors encouraging many recent immigrants to go into technical fields and not humanities.

Men tend to self-select into higher risk and highly competitive environments - e.g. startups, hackathons [1] but also ones with negative outcomes - crime, gambling addiction - see the 9-to-1 ratio of incarcerated men to women. (Denying the evidence for risk-taking and self-selection is to me, similar to denying evidence that sexism exists -- on the face of not wanting to confront it).

At what point do these become issues to address? It seems like the desired result is not the strawman, Harrison Bergeron, 100% representative (of what? the US? the world?) demographic, so what is the desired outcome? I'm for eliminating discrimination and bias, but I don't think this will leave us with a 50-50 perfectly balanced startup scene, but it's the most fair. You would either have to change humans' own free-will preferences for risk, or the nature of the industry (with other side effects). If you have ideas on this, I'm open to hearing them.

This is a legitimate question - shutting down discussion here in the name of being "against progress" or trivializing the issue is highly reminiscent of Paul Graham's warnings in "What You Can't Say [2]. The demographic balance of any industry or field is always in constant flux, and heavily influenced by self-selection and non-discriminatory factors. We need to remove discrimination, but also know that a fair outcome in the absence of discrimination - with equal opportunity does not necessarily lead to perfectly equal outcomes.

[1] https://news.ycombinator.com/item?id=8087536

"Broadly speaking, competition definitely creates sex-based selection-bias. Men self-select into competitions more than women, and are more motivated by them.

http://www.psychologytoday.com/blog/brain-wise/201210/when-c...

https://www3.nd.edu/~wevans1/fresh_honor_seminar/vesterland.... "

[2] http://paulgraham.com/say.html
Quite fair. :)
Well if you selected people that weren't overly familiar with the headphones and blindfolded them, they probably wouldn't know the difference offhand. And the testers would not need to see the people listening.
Most of the churches I've been to have not had a formal "check in" process, but they do have a membership process (people can be added to the member list, and are then allowed to vote for church leadership committees and such) and cards for guests to fill out if they want to be contacted.

Childcare (nursery) often has a check-in process specifically relating to who is and isn't allowed to pick up your children.
Keyword here is definitely "sound better." Bose's headphones do not sound very good at all, though I'm not sure if it's due to the quality of the headphone driver, side effects of the active noise cancellation, or a combination of the two.

The much cheaper cost certainly helps too.
We switched from Rightscale to Opsworks. Saving $30,000 a year as well as additional unexpected costs. Which was already negotiated down from $40k or so. For a small 2 person bootstrapped start-up, that is a lot of savings.

We always felt Rightscale's pricing was rather high for what it offered (well, for our needs) and especially being charged for Rightscale Computing Units never made sense to me.

When we cancelled the contract, Rightscale offered to come down in price but we had already started moving to Opsworks. There are some small things that I miss but overall Opsworks works great. And that $30,000 saved partially allowed me to expand our team.

Rightscale only existed because Amazon didn't include something like Opsworks from the start. They should have seen that coming and planned accordingly.
Fair enough but by bringing it up in a thread about someone with a botnet screwing people over...its pretty reasonable to conclude that is what you meant.
A "pure" functional programming language has the problem you have identified and that is why haskel for a very long time was considered an academic language since it couldnt do anything useful as anything useful requires side effects like IO.

The above is how haskel was introduced when i took it in CS at Syracuse University.

The practicalities of haskel as a useful and practical language are realized through monads[1]. Use of monads to deal with side effects and impure world automatically make haskel "none pure".

With the existence of monads,the purity of the language is a matter of opinion or degrees since it largely based on "idiomatic" usage.

To say haskel is an impure language because of monads will be akin to say C# is an unsafe language because it allows pointer managements through the usage of "unsafe" keyword.

[1] http://en.wikipedia.org/wiki/Monad_%28functional_programming...
I dig that people found the exact location for all of these obscure photos (apart from NYC etc). Good work HN visitors.
That part of why the insurance is unusual - It's basically insurance against a specific kind of social embarrassment.
After CIA gets secret whistleblower email, Congress worries about more spying
anything business-related a corporation spends money on is an expense. Anything business-related an individual spends money on is an expense.

Anything not-business-related a corporation spends money on is considered to be a misuse of funds (or fraud).

People are already taxed in similar ways to corporations.
You can also have a combination of both.
But basically I second this post, you have to figure out what is going to increase as your product gain momentum. If you will be handling millions of requests because each client is going to do plenty of them, are they going to store data...
Like if you were Netflix, you would have to consider the number of users growing, but also the size of your catalogue. Try to define what direction your business is going as it grows and then you will be able to narrow down the costs more accurately.
Would users be able to choose their preferred editorial server, e.g. would it be "everyone on the internet thinks this is garbage", or would it be "hackernews thinks this is off topic and "reddit thinks this is moderately interesting"?
I thought the exact same thing :D
The number of homophone "mixups" is so high, I can't see it as anything but on purpose.
A funny reference to "fuck bitches, get money"?
Linux with Hyper-V is included in almost all modern Linux kernels as I understand it.
Remark: there are different theories of value. I don't buy into what, afaict, is known as the labor theory of value - "profit is by definition providing "unpaid work for other people to exploit and make lots of of money off of"".

Oh, other remark - the ethical perversion that MIT/Apache/et al allowed is that billions of dollars are made off those licenses, providing very excellent lifestyles to selected people, and there is no compensation ipso facto to the actual authors outside of (maybe) recognition in license.txt files hidden away on phones. Recognition does not (as a first order effect) help bills get paid (or a better life for author (those might be second order effects)), nor does it help the world in general (except for the product itself).

Consider the effects of open source on the economy (positive), and the fact that thousands of people do this for free, enabling companies to essentially get free labor (and then have the gall to want unpaid labor proof in interviews).

Stallman approaches this topic grounded as a question of ethics and morals, with an imperative to share information.

I approach the topic in three ways: "Am I taking this thought-stuff and making fat cash and not giving anything back to the person who made it?", and "Can the end user repair (or find a repair person) the product I have provided them?", and "If this is a good project, can it be maintained and recovered in thirty years time". I don't think anything but the GPL (and friends) gives that position.

You can also say to my position that it's terribly unethical to ask people in each company that wants to do X to do the same project (but duplicated for each company), rather than having an open source project that has liberal licensing and having the engineers share work. Wasting other people's lives is a harsh thing as well. :-)
Yes. And even if that wasn't in the guidelines: we're in "Show HN", and the "Show HN" guidelines apply, and they're even stricter.
If it was crowdsourced, why would you need an app to know if you were in a bad neighborhood? Your perception should be roughly similar to those who had contributed their opinions as crowd source data. Kind of like needing an app to tell you it's raining when you're standing in a downpour.
My low tech solution works for me. I wear an inexpensive set of musician's earplugs, then turn up the volume on the headset. Works great in the car, too.
Did you look at it? It's really nice work. That's why I upvoted it. I don't think we have to reach psychoanalysis to see why this is doing so well.
http://blog.scoutapp.com/articles/2013/09/24/from-mysql-mmm-...

That explains how they chose to minimize deadlocks.

Yes, if you use it incorrectly and/or for the wrong problem space, you will have issues. It isn't a magical solution to all problems. It is, however, an effective solution for a specific problem space.
You just said you don't understand the market this software addresses. Maybe now's a good time to opt out of the conversation. Lots of other conversations are happening on the site, right now, and it looks like all of them are a better fit for you.
True - the way out is to hire interns from state schools/small programs.
I've been using it in our development environment. It locks like crazy.

This is after configuring HAProxy to have a primary node which all connections go to.

OpenStack seems to be OK with it though, it chugs along without fully breaking down. I'm sure I would see a pretty big performance delta if I ran a benchmark against it with and without Galera.
You mean like Mt. Gox? Such incentives alone are not very reassuring. (I really don't know why an average Joe would trust any third party with his bitcoins. At least banks give a tiny bit of interest and a piece of plastic to use the money whenever.)
I've actually wanted to ask you about: https://news.ycombinator.com/item?id=8088253 but I cant reply yet. If that ever actually became an issue, could it be solved by instead having the client send (2 ^ w) - 1 rounds of the hash and having the server do the last round? My reasoning is that the client would have to brute force the full hash space if they wanted to reverse only the last round instead of trying to brute force the password.
You're usually not allowed to bat on yourself for fairly obvious reasons.

On a related note, a friend who's a sports better always placed the biggest bets against his own teams. Partly because he trusts his judgement better when not clouded by the hope that his team will win, partly because if he looses the bet, hey, his favorite team just won the game against the odds!
Does This Post Make My Ad Look Fat?
What's your point here? That all derivative works are of equal value regardless of where they fall on the copying—innovation spectrum?
> Obtaining goods by deception

aka "false pretenses" or misrepresentation statutes.

Sure, this could fall under those statutes in jurisdictions where that covers services. Defendant would have several ways to make that case a nightmare, to the point where I see it as basically absurd to prosecute, but still conceivably illegal.

I wasn't trying to comment on whether there's some action involved in logging into a network that could satisfy some element in criminal law though. There absolutely could be some "actus reus" from a login.

I was really just intending to respond to the general comment about courts accepting arguments of the sort like, "this is technically permitted under the law, therefore legal." Maybe I misread that point though, maybe cynicalkane's "technically allowed" meant "allowed by the protocol" not "technically allowed by law."

In which case, consider my wandering diatribe above thoroughly moot. :)
I would spend some time learning C in more depth and contribute to NeoVim because we need this beast out and clean and nice and fast and perfect!
> At this point, given the content on this thread, it seems that it's been explained clearly enough why salted SHAx is inadequate to that task. Do you still not understand why that is?

Don't worry, I understand very well (this is not rocket science :P).

My problem, I think, was an inappropriate attitude toward the realities of stored password hashes on servers, in addition to having read that "scrypt is bad for password storage" (and having misunderstood the "badness" of it). I had read too many articles that treated HASH + SALT as "OK" for servers that stored user passwords, and I hadn't kept fresh in my mind the speed with which these passwords can be cracked today.

For example, take the article I linked to in my reply to pbsd: https://crackstation.net/hashing-security.htm (recently written).

This article, and many many others like it, are written by seemingly reputable people, and yet their attitude is that HASH + SALT is OK for servers. Even though it discusses bcrypt, etc., it frames it as though it's an "optional" hardening technique, and places HASH + SALT under the category of "proper hashing":

https://crackstation.net/hashing-security.htm#properhashing

I haven't seen them called out on it. I agree with you and the others in this thread, that it isn't good advice. If 10-char passwords can be protected better with KDFs, then they should be.
There's a list of all 18,038 single-Unicode-character titles that redirect somewhere here (although most are not emoji): https://en.wikipedia.org/wiki/Category:Redirects_from_Unicod...
Most unusable site evar.
Ideal unit of software professional (officially: "resource", unofficially: "body"), as seen by employer:
http://www.youtube.com/watch?v=DfGs2Y5WJ14

BTW, here you can see agile technology in action, too. The entire movie is well worth your time.
Bank checking accounts are also free, typically.

Banks, like Coinbase, make their money from other services their customers invariably end up using (ATM/withdrawal fees, credit card fees, etc).
The very idea of it is fraught with geopolitical tension for just that reason.

As it stands, NATO membership comes with the implication that the US and Western Europe will respond to any invasion with their full force, up to and including strategic nuclear warfare if needed. Russia would surely see the very proposal to include Ukraine as intensely threatening. It could be a giant bluff in a way - would we dare to include Ukraine, knowing how deeply it threatens Russia? Would Russia dare to do anything direct about it, like a preemptive invasion, maybe before they were a full member? If they did, would we respond, drawing ourselves into a large war, or ignore it, potentially diluting the meaning of NATO and tempting Russia to try invading other NATO members as well? Would Russia respond vigorously but indirectly, essentially starting a new Cold War?
Interesting findings, Andrew. I'm not surprised by your results, and only expect to see the number increase. Keep us posted with more analyses like this one--especially around pricing.
Your question was, "Why is competition a diversity problem?" The answer is "science indicates that competition motivates genders differently". The fact that our industry is deeply, irretrievably competitive is (imho) part of why it's deeply, irretrievably gender-skewed.

(Caveats: you're right that women perform in the industry just fine. Also, many women are motivated and successful in competitive environments, and those women are negatively affected by perception that their gender prevents them from being competitive.)
Agreed. A lot of the race issues are closely tied to class issues. The gender issue isn't.
What OS image do you use for Docker ?

Is it still Ubuntu or do you use CoreOS on both the "host" and "base image" ?
Not much. This is a genuinely hard problem. You want to keep data at rest encrypted, but data is restless, and it's hard to predict when each piece of it will wake up. So you end up keeping the decryption keys resident, accessible in some way to the running server. And, as you're intuiting, most things that compromise the server in some way pivot quickly to compromising the whole server, and thus the key.

The best answer I have to this problem is a variant of the HSM: the server stores ciphertext but not the key. To decrypt data, it's presented to another server, whose only purpose is to "seal" and "unseal" the data. That server:

* Doesn't run on shared hardware

* Has a totally different management process from the rest of the app servers

* Speaks only to authenticated, trusted hosts

* Is carefully monitored for usage anomalies

This isn't a panacea; in fact, its security value is surprisingly limited. But it does solve some actual problems.
I think the effect that you describe can happen. You seem to be suggesting that it's controversial, but I don't see it. If they want to make a loss and pay that much, good luck to them. They must be doing it with the expectation that it will somehow be worth it in the long-run, and it's their money (or the VC's money) that they're playing with.
We are techies here, we know someone could pack WordPress with a couple of plugins, stamp some theme and call it ChurchPress and it would be way faster, safer and more extensible than this. So yeah, 640 points do seems a bit ridiculous, and is going to reach 1000 without doubt, meaning hn crowd find this article just as relevant as snowden prime revelations.
So if the corporation owners get a huge boost in profits, how does that benefit the country as a whole when the extra money is actually less likely to be spent on re-investment?
Web Development is not a Dark Art and Should Be Thought At Schools
Still if you could do that , wear a noise silencing headphones an be in total silence(instead of music), won't it be nicer ?
Vim does the orthogonality thing better, I'll admit, but Emacs' separate chords tend to follow useful patterns, too.

For example, moving forward a character is C-f, moving forward a word is M-f, and moving a balanced expression forward is C-M-f. Same with b for backwards movement. C-a moves to the previous beginning-of-line, C-e to the next end-of-line. M-a and M-e do the same with statements in place of lines.

I can't even remember at this point how much of this is standard, but I've replicated the forward/backward movement for killing: C-d deletes a character forward, M-d kills a word, and C-M-d an expression. C-h deletes a character backward. Guess what M-h and C-M-h do.

Of course, both editors let you do basically whatever you want, so really the text input issue is just one of whether you prefer chording or modal input. And I'm not saying modal input isn't useful; Magit's input system is closer to vim's than to the rest of Emacs, as is Ediff's, and I like it that way, but I prefer chords for editing -- less state to hold in my head.

Sequential chords, though, like C-c C-v C-d, are right out, and using C-n and C-p and co. for up and down sucks, especially when I try to use M-p to select the last input in minibuffer history and hit M-o instead, prompting me to select Bold, Italic, or Other. I'll change them eventually; the hardest part is deciding what to replace them with.

/aimlessramble. I guess it all just boils down to "Use the tool you can best configure to work the way _you_ want it to." I think the linked article was trying to make the case that Emacs can be that tool for vim users.
That's absolutely correct.

I was responding to the naked phrase "technically allowed," which in hindsight is ambiguous (ie, "allowed under the law via a technicality," or "technologically feasible").

Rereading, I still think I interpreted correctly the first time, but really can't be sure.

Good catch.
I have golfed since I was a kid (grew up in the mid-Atlantic), and have been a serious golfer for the last 7 years or so - having lived both in Boston and the bay area during that time.

I very rarely bet any money on my round, nor do the people I play with. True, there are people betting on their rounds, but I'd estimate it's 1 out of every 10 groups that goes out for a round that does that.

The article blows it out of proportion a little bit, too. At the courses I play (in the bay area), there are usually maybe 20 people in the clubhouse, and a round of drinks would probably come to $100. The "insurance" crowd is a very small subset of the golfing population.

True - it is an expensive sport and maybe traditionally a game for the wealthy, but my weekly golf habit doesn't cost much more than a gym membership. People from all walks of life play and enjoy the game, and it definitely doesn't have to be expensive unless you want it to be.
This is very cool and I hope to see it when it's complete.

BTW, have you thought of making the values in the code samples scrubbable? (e.g. at 4:20 in this Bret Victor video http://vimeo.com/36579366). I think that that change would really aid in "feeling" the behavior of the algorithms.
Multi-signature security via Coinbase accounts is a great first step, but true multi-signature via Bitcoin private keys is the feature that will make transactions and storage much more secure -- regardless of whether you store them personally or with a company like Coinbase.