skysight-inc/HackerNews huggingface dataset:
It's not always cheap labor, but when perusing the publicly listed wages for engineers on h1-b visas, they seem on average lower than the offers I've received for the same title at the same companies. It's hard to make any strong conclusions however, since most salaries are not published and just a job title does not say too much about how someone was hired into a company.

I agree generalizing it as cheap labor is not fair, but I do feel sorry for my friends just starting their careers with a serious lack of job mobility.
And that's why you should never use -Werror by default, regardless of how well maintained your code is.
Despite actually watching the video and reading the site, I was still kind of visualizing a push door when I wrote this (whoops!) but I have definitely hooked my elbow or shoulder into the right sort of pull doors if I'm carrying a bunch of equipment, or bags, or something. Or, more likely, I'll brace the equipment against the door and grab with a hand, then keep it open with a foot. Raises the same issues with the dispenser.

In any case, I still think there is risk having this ambiguous button like thing, both from passersby bumping it and from normal use. And, as my comment (and the immortal Far Side comic) illustrates, many pull doors and push doors look confusingly similar, so people will push the pull handles.

Also, may I suggest making your correction in a friendlier way next time? Especially because it is possible that the person you're correcting may not be the total doofus you imagine them to be!
This is an elaborate joke, in case anyone didn't notice.
I see -- it's not announcing any news, or any new theories; it's just a roundup of last week's news.
eclipse: Java, Scala, Clojure, C, C++, Ada, D, OCaml, Haskell, ...

Netbeans: Java, C, C++, PHP, Ruby, Groovy, ...

> I think Smalltalk had an advanced IDE but it locked you into ... Smalltalk.

Which shows you never used it.

Smalltalk is an environment. Workstation OS, IDE, REPL and programming language.

Only the whole experience is gratifying.

Same goes to Interlisp-D, Mesa/Cedar, Lisp Machines and Oberon systems. All Workstation OSs that mix all these concepts together.

UNIX developer experience might sound great, but only for those that never had the experience to touch such systems.
UI Components, Dialogs, Buttons, Labels – Overlap2D Tutoral
App.net is like Twitter, the protocol. Not quite the same, but it's basically Twitter as a platform, where the core business is federation and an API for services to build off.

Still centralized, still controlled by one company, but it's a step in the right direction. It's a shame they're struggling to survive against worse services.
EBay to allow Bitcoin payments through Paypal
They are businesses. Their customers are mostly businesses. SHA1 is, for most businesses that only want a padlock to reassure their customers, just peachy. A CA that hassles their customers and says "you need to do complicated extra work" is put at a disadvantage to other CA's that have a "customer is always right" kind of attitude. Combined with tools that default to SHA1, and customers that may depressingly actually have Windows XP SP2 terminals still in production use, and you get feet dragging.

I don't think this is inherently a problem with the CA model. Rather it's what you'd expect in a competitive market that is basically selling a binary commodity product (a padlock icon), given textbook economics.
So just "carriage" then? :)
The primary benefit to rendering the HTML on the first request (as opposed to a subsequent request through AJAX etc.) is that you don't have to wait for another round trip of latency. Note that this is not improved by additional CPU speed, and even additional bandwidth will not completely eliminate this bottleneck.

As I understand it, Twitter tried full client-side rendering for a while and went back to a progressive enhancement model, because they noticed that an extra round trip of latency is enough additional load time to be noticed by the user.

HTTP/2 will shrink the benefit of first-load rendering further, but it's currently still an important consideration to make if load time is a primary concern.
While true, "There's something more profitable to attack at the moment" seems like a lousy way to handle security.
Why not an L1 if you have a job with the same company? Seems relatively easy.
I meant mass layoffs. most big companies plan for months before they let the people know. because they don't want to freak people out and have a bunch of people they want to keep from leaving.
You sound exactly like their target market, too! /s
But diversity!
Taplytics Hotfix Giveaway – #HotfixiPhone6
This article feels overly simplistic (look - bad bankers!) given that it doesn't mention securitization and the lax oversight of the ratings agencies, who should take a significant portion of the culpability.
Show HN: Idea Market – Bringing Together, Talent Money and Ideas
I think at this point we can say that Amazon gambled w/ this device and lost the bet. This is simply not a device that consumers want. Lesson learned.
Problem is, I'm not sure how you would actually implement a good, probabilistic safety system that largely keeps people safe, but acknowledges bad, random things occasionally happen, and that line folks are your best defense for seeing and stopping it.

Through the engineering process though you can generally have an idea where your weakest/unsafe points are based on previous studies. I see no reason that one couldn't stack those failure points into a probabilistic matrix and then apply mitigation methods around those points.

The acceptance of random failure as something largely unavoidable though is something that can't be engineered away it's a human trait. Just as tire blowout on an 18 wheeler doesn't necessarily mean you failed in safety design for that tire, the subsequent balance load shift is the un-recognized catastrophe mitigation built in to the system. Yet people will still focus on the tire.
Clever idea, but I think I would prefer automatic doors and conveniently located motion-sensing sanitizer dispensers. And as much as I like embedded software, I don't think it's particularly useful or worthwhile in something like this, with the exception of monitoring the amount of remaining sanitizer in individual handles.

Also, from what I've heard, hand sanitizers aren't great for you. Placing them on doors, encouraging (or perhaps pressuring) people to use them frequently, might do more harm than good. It would be vastly more practical and effective to strategically place motion-triggered sanitizer dispensers after doors, especially in patient rooms and on the way out of certain sections of the hospital.

It's respectable that you're thinking outside the box and looking to solve a real problem, but this needs more thought.
The reviews are the key. I always jump straight to the reviews. Half the time I never read the item description.
for me it's at home on my AppleTV. Live streaming FTW!
Python, Ruby, Javascript, PHP (HTML, CSS) in a typical day.

Then some Clojure exercises lately, but I'm not actually building anything. Yet.
Hue Grant
Show HN: Fubo.tv - VOD Platform for Soccer Fans
The question on my mind is this: how can this possibly make anyone any money, given Apple's 30% cut on in-app purchases? I seriously doubt Apple would give that up.
Interesting. I will have to try this when I have time!
There's no such thing as a free lunch, etc, etc. I like the Sponsored Tweets compared to the alternatives: either paying to use Twitter or banner ads.
I wish "the" were accurate, but yes, it was one such project. That maintainer has now been replaced by a group of friendly and active co-maintainers.
Atlas Robot Slaves Away in MIT Lab, Hauling Metal Scaffolding for Us Humans
This OS isn't completely hypothetical--what you describe is similar to the design of Singularity OS, a (now-dormant?) project at Microsoft Research. Large parts of the OS were written in managed code (related to C#), and programs did require proofs that certain invariants were maintained. As you say, most (all?) code was run in ring 0, with security maintained by software rather than hardware.

http://en.wikipedia.org/wiki/Singularity_(operating_system)
I had an HTML version of my resume in 1995. The printed version looked almost identical to the MS Word version I had at the time. table, bold, italics, break are pretty much all it took. It reflowed quite well too.
Running the numbers, I find the 32gig phone will cost $450 over 24 months, with $0 down. To my mind, a $433 (inc. tax/shipping) 32 gig Nexus 5 is a better value - a larger screen, better PPI resolution, standard upgradeable Android 4.4.4 with access to all the apps in the Google Play Store.

Plus, it's perfectly possible to buy stuff on Amazon using a standard smart phone.

The Fire Phone does have a better camera, but aside from that I see little reason to commit to the Amazon ecology and isolate oneself from the convenience and flexibility of standard Android.

The Facebook phone went from $99 to $0 on AT&T after a month or two, and it ultimately flopped. I suspect the Amazon phone is going to flop as well.
> Yes, but to be a new implementation shouldn't I be able to install it without already needing Common Lisp?

No? E.g. Clang is a C++ implementation that you can't install without an existing C++ compiler.
... to share snarky comments and bitch about things.

Why does anyone start a facebook group? what about BM makes it non-facebook-group friendly? There are a lot of loosely connect people that meet through BM or regionals, facebook is actually a pretty well-suited platform for discussion.
This project was a pleasure to interact with -- definitely one of my highlights this year. Thanks! And thanks for the great write-up / open-sourcing.

I think my favorite part was how they looked from far away -- the pulsing up the stem to the lotus was a super pleasing animation.
A similar case is actually taking place now in Italy. They found a few droplets of blood from a middle-aged family man on the underwear of a 13 year old girl that was killed. Even though it's blood, all this proves is that he had some kind of (inappropriate) contact with the child. On its own, it's not enough evidence to convict him of murder. Now imagine a much more explainable scenario like semen on a prostitute, and you realize how weak the evidence is if not corroborated by further evidence.
It's a roundup of last week's news, and (hopefully) better all-around explanation and background for people with less technical knowledge. It also points people to another tool I made, https://shaaaaaaaaaaaaa.com, to actually do the SHA-1 check.
Precisely this. Fusion, AGI and Longevity almost account for the entire set of Very Hard Problems in science. Any progress made in these fronts will yield massive breakthroughs in our understanding and lead to immediately increased quality of life for billions of people.

Furthermore, these research areas are massive umbrellas with hundreds of competing hypotheses that require testing and vetting in order to find the few winners. There are no shortcuts in Science, and as such there is an immense need for resources to simultaneously explore these paths and determine which ones have potential.

The moon can wait.
didn't gave this a try, but I've always had this similar idea in my head where a hosted service allows a web-app/website publisher to collect responses from users from within the application easily and quickly.
Yup, Ulrich Drepper, as well meaning as he was, was known to be quite toxic. A small group of developers now all co-maintain glibc to prevent that sad state of affairs from ever repeating.
I'm not sure this is particularly interesting for Hacker News?

Not trying to troll, and I apologize if I'm way off the mark on this. I don't intend to cause offence.
That's an especially pedantic correction, as it does not impact the meaning of the statement.

s/the weak SHA-1 encryption/the weakened SHA-1 hash used to verify the certificate that's used to authenticate the encrypted connection/
3 Ways to Build an Efficient Mobile Dev Team (eBook)
This is exactly how Windows' device drivers work. What you are asking for is the same functionality be extended to userland programs.

The primary problem for this is proof generation. Programming paradigms where proofs are easy to generate would be too limiting. So, although we gain security, our flexibility is tarnished.
It seems like the author is a Briton.

As a Swiss citizen I don't understand how anyone from a first-world country would like to move to the USA. It's a downgrade in every aspect.

Giving up democracy, social-security, the practical absence of crime for a job in a country where every other Tuesday someone goes on a killing-spree, where people go to the doctor for moar Vicodine, where police will kill you for a donut. Nope.

Edit: changed englishman to briton. Thank you, commenters.
Yes, you absolutely should. If you need to disable errors for specific warnings, use (for instance) -Werror=no-deprecated-declarations ; however, projects that build without Werror in general tend to fail to actually fix warnings, resulting in an overwhelming pile of them.

If you don't feel comfortable turning all warnings into errors, then use -Werror=some-warning and -Werror=some-other-warning to turn specific warnings into errors, to make sure those particular warnings never get into the project.
How I trained to learn Rails – The Book
That gconv module support involved loading shared libraries from a special directory (for instance, /usr/lib/x86_64-linux-gnu/gconv/ on systems using multiarch paths, such as Debian). This had several problems:

1) glibc supported this even if statically linked, and could encounter runtime issues if the gconv modules found did not match glibc. For instance, if you shipped a statically linked binary.

2) glibc can handle not finding these modules at all, but once it finds them, if they fail to work glibc can choke and die.

3) These modules take up quite a lot of space, and glibc installs them by default. If you're building a space-constrained or embedded system, you'd want to remove them.
Because I told you guys that not everyone is intelligent enough to be able to program Lisp on a competent level? Is that a surprise for you?

See the 2008 Ruby conference keynote from Yukihiro 'Matz' Matsumoto. He explains it in detail. Start at 8:40.

https://www.youtube.com/watch?v=vDnOBXD167k

I have interviewed many Java programmers in the past five years. I never found one who could explain how GC works, what lambda in Java 8 does, etc. There are a lot of ordinary programmers out there, even some of them with ten years work experience were surprisingly bad at actual programming. I hired some good ones, but generally the number of not so good programmers is high. Giving them a language where code is data, is a recipe for failure...
John Romero reloaded: Reinventing the shooter
No worries, I have a local copy I keep handy for just such an emergency. Didn't take long at all, only a few seconds.
Originally I bought leaded solder paste from McMaster Carr, but then I discovered a lead-free solder paste from Sparkfun: https://www.sparkfun.com/products/12878.

It's not as good as the leaded solder paste, but hey, no lead. Also, you should refridgerate it at all times. You don't have to, but it doesn't spread nearly as smoothly.

And I just used the credit card OSHStencils.com gives you with their film stencil. Works on QFN and other fine-pitch solder pads. Just gotta clean the excess solder off the film every 2-3 applications. Otherwise it blots and runs over the solder mask.
I dunno about you, but I have 18.13 GB of free storage with Dropbox. It wasn't particularly hard to achieve, either.
Creating GitHub-Style Contribution Graphs for Anything
The point here is that this is nothing more than a simple writing mistake on the part of the FBI. Pretending like there's some conspiracy or parallel construction taking place here is just nonsense and the folks suggesting it are doing so out of irrational fear more so than any actual evidence.

Your gut reaction seems to place you in the camp of the conspiracy theorists. That should raise alarm bells for you.
cookie.varname = encryptFunc(data)
You can essentially do what you're asking in Excel using named ranges. Getting novices to use advanced Excel features is just as difficult as getting novices to use advanced features in any other language.
I was intrigued by this observation, near the end:

> 18) Failure free operations require experience with failure.

> Recognizing hazard and successfully manipulating system operations to remain inside the tolerable performance boundaries requires intimate contact with failure. More robust system performance is likely to arise in systems where operators can discern the “edge of the envelope”.

This maps interestingly to the work of strategic thinker John Boyd (http://en.wikipedia.org/wiki/John_Boyd_%28military_strategis...). (I summarized the general thrust of Boyd's thought in a blog post here: http://jasonlefkowitz.net/2013/03/how-winners-win-john-boyd-...)

In analyzing what separates organizations that win victories from those that do not, Boyd wrote of a quality he called Fingerspitzengefühl -- a German word that can be understood as something like "intuition." (The literal translation of the German word is "fingertip feeling," as in how a successful baseball pitcher can tell where the ball is going to go solely from how it feels rolling out of his hand.) His point was that winning organizations exposed their people to both training (good) and experience (better!) enough so that they could learn to react to emergent situations on instinct, rather than by consulting a manual or waiting for instructions from above. The point quoted above sounds like a call for people working on complex systems to get opportunities to develop their own Fingerspitzengefühl.

Which leads to the thought that maybe a completely failure-free system is not something we should strive for. After all, in a completely failure-free system, nobody would ever get enough experience groping around the edge of the envelope to learn how to intuit where the other edges are. All they'd have is "here there be Dragons!" warnings from the past, which would become less compelling the farther into the past they come from. People are quick to discount warnings that contrast with their personal experience, and if your experience is that the System never fails, it's not hard to imagine people starting to believe that the System cannot fail. Which is fine, until it does fail, and nobody has any idea what to do to fix it.

It's sort of the same thing that happened to the financial sector in the US. After the Crash of 1929 and the Great Depression, a whole set of legal and institutional safeguards were put in place to prevent those things from happening again. But as time passed and generations grew up that had not experienced those crises directly, people began to decry those safeguards as needless bureaucracy. Eventually enough people did so that most of the safeguards were stripped away; at which point the system promptly collapsed again.
Windows XP will need Service Pack 3 to support SHA2 certs.

Windows Server 2003 will require a couple manual hotfixes to get SHA2 support.

http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-w...
>Looks definitely easier than SAML.

With the exception that it's only signed, not encrypted, yes. SAML does have the advantage in that regard, but I've never been a fan of using clients to transport sensitive information anyway, even encrypted.
What are you showing? Show HN is normally reserved for showing off products, or concepts, or cool things. Not proposing products.

Also do you play planetside? There's a rather good TR player on Emerald of the same username as you.
NYC only at the moment.
> Haven't Motorola Mobility been resold to Lenovo ?

The sale is in process and is expected to close by 2015, but, for now, it is still accurately described as Google's Motorola Mobility division.
I've always thought it might be interesting to have apps like this that run locally on web technologies. Is there hope for this model? One obviously shortcoming as exemplified here is the painful installation process. I suspect people are also going to be concerned with what's being installed where.
That looks very nice. Much more comprehensive than my tool. If all my tool accomplished was to prompt you to release your better tool, then I'm a happy camper. Yay open source!
What law prevents you from scrapping publicly available site?
Amazon Fire Phone Now 99 Cents with Two-Year Contract
I have used Elance extensively over the last 5+ years for everything from Logo design to web programming.

1. Biggest challenge is finding contractors who are actually as good as their portfolios. I am not sure if this is a case of portfolio fraud or simply not a good enough interview process on my part, however, after working with some providers, I just can't believe all those 5 star ratings are real.

2. Too many contracts bid without actually reading or understanding the requirements. The best people I have found actually addressed each requirement point by point.

3. Too many contractors provide too little value. I expect them to manage everything they need to do on their side, and not just be the hands on the keyboard. Too many times have I had to put THEIR test plan together because they had no clue how to actually test their work.

My approach has simply been to hire lots over the years and then rehire people proven to be good. It's a crap shoot initially though.
I have spoken to HR people that say H1Bs's are 15 to 20k/year cheaper on average. The trick is disconnecting what they do from what their job title is. After that you just pay them less for the same job.

That's not pure savings as there are plenty of paperwork costs etc, but you still end out ahead after ~1 year of work. O and just submit a lot of names to the lotto.
Read more Stallman then. It is a self consistent position that you can understand whether you agree or not.
I'm not sure that I agree. I think that once you get into the realm of "absolute truth" (which is what I'm interpreting your post as saying -- apologies if I'm mistaken), you've left science behind. IMHO, science cannot (and does not aim to) deliver certain knowledge. Instead, it produces useful approximations.
Upstream and Downstream
Hi! thanks for contributing to Hacker News.

If you don't think an article is HN-material, please use the "flag" link on the post, rather than posting a comment to that effect. You may not see the flag link if you don't have a high enough Karma score yet.

Personally, I've seen advanced discussion on US visas on here before, and I would assume that this would be of interest to many in this community.
This doesn't work well for those who are wheelchair-bound or in crutches.
"RF" was the third one. And I suppose I could take a guess and say it means "Radio Frequency". But just because the acronym's letters fit the phrase, doesn't mean I'm right as I am not knowledgeable in the field being discussed.
How to tell if you are not scaling as a CEO
Free Course:  from Zero to App in less than 1 hour with Knack
I'm a British developer that moved to Amsterdam as an expat. I was recommended these guys to handle my tax affairs when I was looking for a mortgage:

http://www.orangetax.com/

They specialise in help for expats.
This seems to be a case of a slightly unfortunate wording.

Google calls for the use of 2048-bit key certificates, a very reasonable demand. In the forward secure use case, the certificate key is only used for authentication. Using, say, ECDHE_RSA as your key exchange mechanism allows for small but secure elliptic curve keys (EC), forward security (DHE) and uses the certificate's RSA key for initial authentication (RSA).

Certificates can actually use ECDSA keys, and some companies will support this (Symantec and CloudFlare off the top of my head), but I'm not exactly sure about browser support. The chief advantage, as far as I know and assuming no new breaks in RSA, is a strong reduction in certificate file size (256-bit vs 3k RSA equivalent), not forward security.