skysight-inc/HackerNews huggingface dataset:
Readability is in the eye of the beholder, which is to say, familiarity breeds content.
One Year on the App Store
What about isolation between apps? I have app A connected to database A, and app B connected to database B. Is there a way to deny connections from app A to database B etc?

What I want is to make groups of containers that can talk only to each other(only to containers within one group). Does CoreOS provide something like that? Maybe kubernetes? What are possible options?
Show HN: Retention Booster – Increase your users' retention rate in seconds
There are some interesting points in this other article you reference, such as calling out a few of the strengths and weaknesses of the CWA. I'm a bit puzzled by the assertion that SQL has no recursion, since recursive CTE's are part of the ANSI standard and are supported in popular RDBMs such as Oracle and Postgres. Postgres even has writable CTE's, allowing for example Mandlebrot sets to be computed as SQL queries. On the DDL side there are nested tables.
http://en.wikipedia.org/wiki/The_Longaberger_Company
Hi zura,

You're right. (Although I can imagine some scenarios in which someone might spend most of their working life in one particular domain, and that's ok). Right now it is taking all my time to build and support this app. I doubt it will be all I will be doing 6 months from now. I have never limited myself long-term to only one platform: I've developed in Java for many years. I've developed applications for Windows. For Symbian. Web apps. And so on. I always like new challenges :) With SongSheet itself I plan on expanding it beyond iOS once I feel comfortable enough with how it is doing on that platform. I don't want to spread myself too thin right now, however - I'm not the best of multitaskers.
That's not a new law. Just incosistent application.
My question is: Do you need all thubnails at once? I setted up a images album for kindergarten for my child with more than 17GB (>4000) jpeg's. I used nginx webserver for resizing on the fly and then let nginx cache it. In a VM with 4 cores from i7-920 it thumbnail 2-6 images per second. After first access images are taken from the cache.
I agree. SongSheet on iOS is consuming all my time right now, but 6 months from now I'm sure I'll be spending time doing other things (porting SongSheet to other platforms or even developing other applications).
> That writing a compiler in your new language is a good way of dogfooding? Wouldn't that mean that any other complex application would do?

Yes, but when creating a new language, the own compiler or at least the runtime/library, are the first complex applications, usually.

> ... but even the c++ frontend of gcc is written in c rather than c++

was written in C, now it is C++.

http://lwn.net/Articles/542457/
This.
I'm an iOS developer and only working and learning new things in the field consumes all my time. I can't image how would I start working on different technology (say node.js, which is something I want to) without impacting on my iOS learning curve.
Please note that the Concorde requirement was set circa 1958-60, and the plane first flew in 1969; airlines were placing orders in the early 1970s.

Back in those days, airline security was a lot more relaxed: despite numerous hijackings nobody had yet figured out that a couple of hundred tons of airliner and jet fuel made a potent self-guided cruise missile, so the usual ending of a hijacking was on the ground with a negotiated hand-over. It was still possible to get from drop-off at the airport to the Concorde departure lounge in under 30 minutes; and for the trip from Arrivals at JFK to Wall Street ... well, that's what helicopters are for. (If you can afford a Concorde ticket you can afford a helicopter limo service!)

The immediate aftermath of 9/11 pushed the suggested minimum check-in time for trans-Atlantic flights up from 30-40 minutes to 3 hours, for everyone, VIP's included. So the folks who could afford a first class ticket -- the only kind of seat available on Concorde -- decamped for NetJets and other bizjet services, because the civil aviation security regulations didn't apply to private jets and you could still do the 30 minute from door-to-plane thing.

(And then Airbus refused to renew Concorde's type certification at the 30 year mark, allegedly just as they were discussing development of a new second-generation SST with a large Japanese corporation ...)
Finally! As someone who has been running his own email server for many years, I've been waiting for this to happen, so that I can tell my friends to do the same thing.

Best of luck to this project. It is very, very needed.
> Does it share my whole Dropbox with the world? (It doesn't, but I only know this from reading this thread) If not, which parts of the Dropbox are shared?

No. Even websrvr has access to just an app folder (a newly created folder inside your dropbox).

> What kinds of files are published? What MIME types are supported? Can I somehow override MIME types?

Any file whose name doesn't start with a '.' is published, so all non-hidden files. Right now, MIME types cannot be overridden, but it sounds like a good idea, I'll implement it soon.

> How are the files published? Do I get auto-generated URLs on the CDN's server? Do I have to update my DNS records? Some other way?

Every folder inside the websrvr app folder is published as an independent site. You get a unique host for each site. e.g. if you have a folder called 'foobar' with a file called 'index.html', this will be published to 'foobar.websrvr.in/index.html'. The cloudfront integration is not yet live, since I am still testing the demand for this kind of a product.

> Are the files cached somewhere? (Other than the CDN) Can I delete them quickly?

Yes these are cached on our servers, and whenever a file is created we update our cache, whenever you delete a file in your dropbox it will be deleted from our cache.

> How do I remove my account? Is all my data deleted as soon as I remove the Dropbox connection?

You can select and delete all folders from the websrvr app folder to delete the data from our servers. Once you do that, you can unlink your dropbox account from the dropbox website at https://www.dropbox.com/account#security

> And of course the pricing questions: Is it free, will it stay free? Are there usage restrictions? (Bandwidth, traffic, etc)

websrvr backed hosting: $1 per month - All the data would be served from our fast web servers

Amazon S3 backed hosting: $3 per month - All the data would be served from Amazon S3 servers.

Amazon Cloudfront backed hosting: $10 per month + overage charges - All the data would be served from the Amazon Cloudfront CDN. If your cloudfront usage goes above $10 we'll charge the difference in the next month's invoice.

There are more faqs at: https://app.websrvr.in/help
The Curse of the Unlucky Mummy
Maybe. It depends on who you ask. The term "server" is pretty nebulous. That's part of the reason I think such ToS clauses are insane - they basically give the company a way to suspend your service for no reason if they feel like it.
Chromium Crosswalk: A huge boost to hybrid-apps on Android
Definitely a +1 for LowEndSpirit, I've got two boxes with them, one for a blog and another working as a VPN to the US.

They only provide IPv6 though, but it's trivial to set-up forwarding using Cloudflare's v6 to v4 proxy service.
A Mission for Remote-Controlled Bugs
Show HN: Fireant Social – Social tool providing actionable data
> run a queue that will pull the data over.

Are there standards for these kind of general pseudo devices in virtual machines? (Or you would use the cut&past buffer for example?)

To my knowledge, secure sites use(d) hardware methods to guarantee a one way channel (snip half an ethernet cable, override peer/auto detection and then use udp.)
Power through your day with the all-day battery. Never worry about stopping to charge.

I would buy a smartphone phone that's less impressive in performance but that would run for about a week. I would be happy to suspend all that "smart" functionality when the phone is idle but the system could run Android and thus give me a browser and Google Maps when I need them. I'm willing to burn energy while I'm explicitly using smart phone applications but I don't like the phone to drain itself out of juice in one day even if I only ever answered a couple of phonecalls on that day.
What you call "Sender Stores" is at the basis of djb's IM2000 that is supposed to replace SMTP and email delivery in general.

See http://cr.yp.to/im2000.html and http://en.wikipedia.org/wiki/Internet_Mail_2000
I opened the link expecting to find this ... and was disappointed to discover its not.
Yup. I am not worried about being out-executed by them. Things would be a lot different if I respected their execution enough to be afraid of it :)

I've been meticulous about saving emails and am on great terms with the other employees.

As you recommend, I'm swallowing my bile and quitting politely, but firmly.

Thanks for taking the time to comment. It's unanimous: I've been stupid and the only thing to do now is damage control and move on with life :)
As a farmer myself, I've come across a handful of apps trying to similar things. FarmLogs seems to be the most successful on the marketing side of things though.
How can we expect users to create a good question within moments? Permitting them to create a good question may increase user frustration, especially if they are in a hurry. Aside from the fact, that IT professionals are the expert and they are being paid to do that.
Exactly. Server-side vs. client-side rendering of HTML is just another optimization choice.

Is it more important to shorten the time to display the current request, or to shorten the time for new pages to be rendered? Single-page apps marginally increase the current request's time-to-render in exchange for improving navigation between pages. For some purposes that provides a significant benefit, other times it doesn't.
Scalability Testing of Embedded Key-Value Stores
Actually, there's a hidden motive behind not targeting Clojure: the eventual plan is to allow Elisp-like mutability so it can be used to build an Emacs-like editor.

I chose OCaml because of the relatively mature OCaml-LLVM bindings. A self-hosting compiler is a lot of work: it'll require Rhine-LLVM bindings first.
11 Ερωτήσεις πριν φτιάξετε το νέο σας Website – SEO – WEB DESIGN
[Tell PG] paulgraham.com seems to be down
.... this is not a bad idea!

I actually just went and combined that with IFTTT and DropBox, resulting in a very crude way to file org-mode notes from GMail straigth to my personal wiki.

http://imgur.com/rfEDgHn + http://imgur.com/ACekwNf.

Not perfect, but just good enough to be useful.
The main problem is that there is no such thing as 'a COTS solution for a water billing system with little custom code'.

The only thing that exists is what companies like Oracle and SAP market as such, claiming their solution only requires 'configuration'. They confuse their customers with misuse of terminology, because in fact that 'configuration' consists of a lot of custom code that is needed to adapt their solution to a specific purpose.

Whether it is more or less code than honestly and transparently assembling such a system from available OSS components is besides the point as long as customers are not crystal clear on the fact that COTS solutions rarely exist, except as components for a purpose-built system.

A claim of having a COTS solution is almost always a sham for any reasonably sized project.
Where did you find this market rates information?
You used to be able buy them at the West Shore Farmers Market in Lemoyne, Pennsylvania, a suburb of Harrisburg. But I don't recognize the stand's name on the current map, and I don't suppose that Cumberland County is really a hub of HN readers.
I don't completely understand the C spec. Would the following approach work for zeroing a buffer?

1) Zero the buffer.

2) Check that the buffer is completely zeroed.

3) If you found any non-zeros in the buffer, return an error.

Is the compiler still allowed to optimize away the zeroing in this case?
Since my edit window is long gone, I just want to add that thanks to rokhayakebe ( https://news.ycombinator.com/item?id=8273862 ) I just figured out a way to use GMail + IFTTT to send notes straight to my personal wiki :).
Free web app lets you make a preview of your iTunes App Store page
"As with "anonymous" temporary space allocated on the stack, there is no way to sanitize the complete CPU register set from within portable C code"

I don't know enough of modern hardware, but on CPUs with register renaming, is that even possible from assembly?

I am thinking of the case where the CPU, instead of clearing register X in process P, renames another register to X and clears it.

After that, program Q might get back the old value of register X in program P by XOR-ing another register with some value (or just by reading it, but that might be a different case (I know little of hardware specifics)), if the CPU decide to reuse the bits used to store the value of register X in P.

Even if that isn't the case, clearing registers still is fairly difficult in multi-core systems. A thread might move between CPUs between the time it writes X and the time it clears it. That is less risky, as the context switch will overwrite most state, but, for example, floating point register state may not be restored if a process hasn't used floating point instructions yet.
It seems up.

http://isup.me/http://paulgraham.com/
The reason is marketing. If your website sells you as the perfect fit for everything from embedded systems to web apps to iOS to Android, you are going to have a hard time to stick out in any pile of candidates-for-our-next-project. If however you wrote a book on iOS development, have a few dozen in-depth articles on Objective-C and Swift on your blog and can refer to a handful of your apps in the app store, you will at least be on top of the (lucrative) pile of candidates-for-someones-next-iOS-project.
It very much looks like a situation in which the system has already been compromised and is running malicious programs that it shouldn't. These malicious programs could still face the hurdle of being held at bay by the permission system that prevents them from reading your key file.

However, they could indeed be able to circumvent the permission system by figuring out what sensitive data your program left behind in uninitialized memory and in CPU registers.

Not leaving traces behind then becomes a serious issue. Could the kernel be tasked with clearing registers and clearing re-assigned memory before giving these resources to another program? The kernel knows exactly when he is doing that, no?

It would be a better solution than trying to fix all possible compilers and scripting engines in use. Fixing these tools smells like picking the wrong level to solve this problem ...
Yes, it would be a derivative work, but considered as a media-format conversion, and/or a Collection, not an Adaptation (i.e. ND is fine with this kind of use).

The relevant clause in https://creativecommons.org/licenses/by-nd/3.0/legalcode is:

#3 License Grant. The above rights include the right to make such modifications as are technically necessary to exercise the rights in other media and formats, but otherwise you have no rights to make Adaptations.

#1b. Collection. ... in which the Work is included in its entirety in unmodified form along with one or more other contributions, each constituting separate and independent works in themselves, which together are assembled into a collective whole. A work that constitutes a Collection will not be considered an Adaptation (as defined above) for the purposes of this License.
WRT the AESNI leaking information in the XMM registers, wouldn't starting a fake AES decryption solve the problem?

Also, wouldn't a wrapper function that performs the AES decryption and then manually zeroes the registers be a good enough work around?
The source code for the winner of the first competition, iocaine powder, is at http://dan.egnor.name/iocaine.html, along with a good explanation of its algorithm.

It did well in the second competition even after the publication of the algorithm and source code.
Looks like you had a great time in South East Asia.

How's the rent in Berlin?
I was wondering that too.. I would think that simply accessing the any byte in the buffer afterwards would prevent the compiler optimizing it out.
The problem with the sender stores model is that the sender does not need to store anything: they just generate the spam message at retrieval time. So it does not actually increase their costs. Spam moves to the notification mechanism that tells receivers that a message is available: this is just as unsolicited as in current junk mail, and needs to contain enough information for the receiver to know if it is worth retrieving the message. All the current spam and anti-spam techniques will apply fairly exactly to these notification messages.
Current discussion: https://news.ycombinator.com/item?id=8274529 (137 points, 19 hours ago, 31 comments).
I was walking up one of the avenues in Manhattan once, and came to the next intersection. The cross-street had the green light, and no traffic just them. But a van was parked on the corner, obstructing the view. I peered around, saw a car approaching at 30 mph, and shouted "Stop!" just in time to keep some people next to me from stepping out in front of it.

I cross against lights quite regularly, if I can see that it is safe. Some people drop the condition.
You'd host the queue service on a separate machine on the private network and communicate with it using either HTTP or standard TCP (all firewalled to restrict everything else)

So you have your gateway virtual machine which has one interface to the public web and one interface to the internal network. On that network you have two or more machines:

a) is the web server, which can't make any requests out to anywhere except other machines on the same local network. It can receive tor or http traffic in from the gateway

b) other servers hosting local services, which can't make any requests out at all but can receive queries from the web server on their http/queue port. A database server for your web application would also sit on a machine like this.

You can put b) on yet another separate network behind the web server if they don't need to route out over Tor (or even if they do).

Your slicing the tasks up and isolating them on separate machines to minimize the attack surface. Someone breaking into the web server will not be able to make any queries out to the web or to tor, and will only be able to query local services servers in b) such as the queue.

RabbitMQ has an HTTP interface, 0MQ uses TCP.

The other way to do it is to isolate every machine from every other machine and implement a SOA over Tor.

Taking the example of your web server needing to know the latest bitcoin price, you would implement an API on another hidden service and restrict access to it from only your web server. The web server would then have to be allowed to make queries out over Tor, but this can remain on the Tor network and can again be restricted to only your hidden 'proxy' services.

Most people associate Tor and hidden services with sites being slow and down all the time, but that is more a function of the level of experience in the field. Tor hidden sites have a different threat model so the ideal architecture is different to most common network architectures.
I think that we should forget about "balanced portrayals" and instead laud the achievements of the human race: meaning, the inventions, innovations, and organizations that have moved mankind forward. And if some demographics are largely absent from this past, that's worth mentioning -- but not focusing on. Time is too valuable for that.
Contrarian investors try to do what most investors don't. Don't most VCs invest primarily in companies that are nearby, meaning Silicon Valley proper and maybe the larger peninsula? Which means a contrarian would invest outside it. Maybe way outside it. Like Kansas.
Finding a flat in Berlin could be challenging. The prices are still way lower than SF, London or Paris. Two of us are sharing a pad in a pretty central location and pay 850 euros including bills and all.
More relevant question might be what APIs or libraries are starting to look attractive of late ?

I would say wit.ai looks very interesting.

The dev stack is the same as always ~ Sublime + AWS
> Unfortunately, the times when you most want reproducibility tend to be the same sorts of number-crunching where -ffast-math would be most useful.

Thanks for the clarification. The obvious caveats of -ffast-math are well documented and most applications shouldn't use that flag.

There are exceptions to this however, I tend to work on such problems. For example, game physics, 3d graphics and some scientific algorithms that have built-in numerical inaccuracy (so -ffast-math doesn't help but doesn't hurt either) but high perf requirements. I also tend to have extensive testing for the most crucial parts of my programs that should catch any problems with this (but many people don't do this with game physics, etc code).

Thankfully, -ffast-math is easy to disable if you start suspecting problems that are caused by that flag.
Also, if we're looking at the 2009 onwards, the S&P500 has returned an average of 18%, a 2.28x return.

(2009 - 2013 figures from here: http://en.wikipedia.org/wiki/S%26P_500#Total_annual_returns)
Andreessen Horowitz has generated a positive reputation (in a field where most of its counterparts are ridiculous, incompetent assholes, so seeming strongly competent provides prominence) but here's a stark indicator for "wolf in sheep's clothing": http://a16z.com/2014/07/30/the-happy-demise-of-the-10x-engin... . Read it.

If you don't have a nose for rot, I'll point your way to it:

Today, if you have a great idea for a software product, you need to either
be an engineer or find one. Tomorrow, that billion-dollar startup acquisition
might not need an engineer at all.

I have no direct knowledge of A16Z, but admitting a desire to make software "a low-skill trade" is chewing our food for us. The moral conclusion is right there. They've actually admitted to being the bad guys, to wanting to commoditize top talent in favor of our MBA-culture colonizers.

Most of the time, the bad guys don't say, "We're the bad guys". You actually have to do some research. You have to poke around the countryside and find the emaciated political prisoners and the mass graves to figure out who the bad guys are. Not here. The good news is that the Silicon Valley elite have such unprecedented arrogance that, often times, they'll actually admit what they are. They'll flat out say, "fuck you programmers, you had your turn."

For those who aren't educated on the matter, the evil of Silicon Valley's last 20 years is that it has become an economy of resource extraction (like Saudi Arabia) instead of one that genuinely creates wealth. The difference is that, instead of said resource being oil or natural gas, it's the intelligence and energy of each generation of young people that hasn't figured out, yet, that the only people with a decent chance of getting rich in this Valley game are VCs and landlords (i.e. not them, the people doing the actual work).
Amongst other things it provides a bulk market for all the stuff China makes. It can be quite fun browsing:

Lasers http://www.alibaba.com/trade/search?fsb=y&IndexArea=product_...

Nuclear reactor gear http://www.alibaba.com/trade/search?fsb=y&IndexArea=product_...

and so on