skysight-inc/HackerNews huggingface dataset:
From the version distribution graph it is evident that npm hosts 0 packages with 25k+ versions, one package that has almos 20k versions and 40 packages with 0 versions.

That seems to be at odds with the numbers quoted in the rest of the article. Strange.

(Hint: please do label the axis on your graphs. thanks.)
Since key revocation is fundamentally broken it's the difference between having a limited time period where you're exposed and being exposed until the cert actually expires.
I see them on a jailbroken Ipad.
That's great to know, I'm building a website focused on address search (only in my country for now), and I looked upon Yelp as inspiration :)
Create clojure map, advance method part 2/2
I guess you didn't make it more than a third of the way through the README.

This looks super useful for the many circumstances where interpolating things into strings to generate SVG paths is quite unpleasant (ie. anything much beyond "M #{x} #{y}").
Create clojure map, advance method part 1/2
Only the peons die. All the people who matter, like myself, will transfer their consciousness and live forever.
Maybe they should have said "keyless termination"? I can see that as they are still terminating the connection and they don't have the key.
iOS 8 App Development
Won't this approach increase the cap-ex investment on the part of the customer, and the complexity to scaling?

Do you require the customer to size their key services to some theoretical peak, or can you offload so much of the process that the customer just needs to make a one time investment?

(Full disclosure. I work for a competitor, but not on problems like this).
Is it 100% sure that !! gives only 0 or 1? I'd be very grateful for some hard citations/references for that (across various standards, C89/99/..., C++98/03/11...), I'd be happy to learn if I can safely rely on that?
Submitted: https://news.ycombinator.com/item?id=8335226
It's not an ethical part of the process, and one that shouldn't exist.
Refering to questions by number is useless since they are choosen randomly from a set number.
Brin makes his points but neglects counter-evidence, both fictional and non-fictional, so I will supply a few examples:

1) Support The Troops / First Responders
2) Religion
3) Law & Order TV series
4) Nearly everything on The History Channel

Nearly all of the above glorify institutions, or more accurately, indivividual working within institutions.
this is great, I was looking for a guide to look at fonts in depth on Ubuntu, as I already know how in OSX. Thanks!
7 Things You Can Do to Become a Better Developer
"While you can allow people to pay you with Paypal or Bitcoin, these softwares are not set up for recurring payments."

FYI:
https://www.paypal.com/pdn-recurring
https://coinbase.com/docs/merchant_tools/recurring_payments
Prehistoric and modern approach to design databases
Y'know, that's kind of the point as well.

A number of "BBC" bootable business cards used a /bin/sh script as init. This worked pretty well.

Though, now that I think of it, while I've never had /bin/init itself fail on me, the BBCs would occasionally crash due to a shell hang (either the script or /bin/sh itself, I'm not sure which).
Hey, I just created a terminal.com container hosting this product! Feel free to test it: https://www.terminal.com/tiny/2H3UtUvzfi

I suggest to start with in a mini or small container.
Thanks! make sense. I have observed that lot of JS based SVG libraries having memory leaks and slowing down browser over the time, how paths.js behaves in this context?
I'd be interested to see how many murders are are linked to dealing drugs. When you have a lot of money and weapons around people end up getting killed.

I do agree with your point thought that the US just seems to be more violent. Are serial killers and the like mainly a US phenomenon?
I can't see why the test say at the end "You should stay away from C++", when the real test should be "Are you smart enough to use a static analyzer to catch those errors that are truly hard to find just passively[0] reading/writing code?"

[0]Because of course, when you know there's a bug, it's already easier to find...
The more I look into this, there seems to be a polarity between http://jeremiahgardner.com and http://laurabusche.com when it comes to what Brand even is. It seems I'm becoming increasingly dependent on the language of The Lean Brand, so I want to be certain.

I stumbled onto http://theleanbrand.com during it's crowd publishing pre-sale, which made the pre-order on Amazon possible. I was desperate to clarify Brand for my self, so I bought it. But it has turned everything on its head for me, like the Pivot you mention.

I was like a mole coming out of its hole into sunlight, hence this broader question on HN. I appreciate your insight into not only concepts but people in Brand. Your Agency Model comments and p/m/b fit comments read like sections of The Lean Brand, hence my curiosity on whether we can make a wider HN question of who is right between Laura and Jeremiah, since I am so new to this.

On Twitter I'll ask if you and Bill would do a comparison of The Lean Branding and Lean Branding for us on HN, if I bought you both the eBook to go through. Bill seems closer to Jeremiah than to Laura, but without a standard to offer beyond great observations.

After reading through what I have in The Lean Brand, specifically the Early Adopter copy and early-release of a Chapter before that, I can't understand how the issue of a standard for Brand, or even a sane way of using the word hasn't come around until now. I am wondering how people like you and Bill would approach it, with The Lean Brand in mind, since you seem to know about Lean Branding already ( at least enough to recommend it ) ... I'd value your perspective since I am 50/50 Coder & Entrepreneur myself.
Google made the kernel source code of Android One public
More and more companies copy this blindly. There are cases when this works well, but here, it's more than just annoying.
Android One FTW!
Some previous discussions of similar techniques (from different groups):

https://news.ycombinator.com/item?id=7591573

https://news.ycombinator.com/item?id=8129934
Brewfactory: full-stack homebrew with IoT
Getting used to it is not the point. What I find cringe-worthy is that that's a bewildering amount of noise. It actually makes it harder to figure out what a specific piece of code does.

I find that so bizarre. That's on a personal level, I'm not throwing stones.

My two favorite languages before Go came along were Objective-C and Python. Different tools for different problem-sets of course, but Objective-C can quite easily be called insanely noisy.

Go is obtuse, but I find its readability on par with Python in that there's one way to do something, and that way is repeated over and over. I don't have to worry too much about stylistic preferences between programmers, people trying to get fancy while writing code (or trying to show off). Our server code serves thousands of requests per second - I need that code to be rock-solid, not fancy or overtly minimalistic.

You're right, people do get used to the error pattern. I can either handle it, ignore it, or toss it up the stack, and I get to make an explicit decision about that every time.

We've been rewriting critical systems code in Go (from mostly Python) and it's a joy. I am, of course, the (unintended) target audience for Go - a dynamic language dev looking for speed, concurrency, and compile-time safety, along with the simplistic beauty of gofmt, goimports, and so on. But I do find it beautifully simple, if not entirely "beautiful."

Edit: formatting.
Yes, they have to write so many seemingly legitimate articles to hide the PR releases among, that nearly 99.998% of all articles are decoys!

How dastardly.
Ah. I see your point now, and it's an interesting one. I'm not sure I agree with it, but thanks for clarifying.
Am I the only one who is very confused by these examples?

A function named "frobulate" - what is frobulate? I dunno. The function calls: thingsToFrobulate, logit, cleanupOldest, processOld, doNewThing, cleanup and somehow FrobulatingMessage is set on the way.

Honestly; you can do the most clever functional programming in the world but if you naming is like this then your code is just going to be bananas.

And BTW: both Swift and Go are missing exceptions; I think those would be very helpful here.
A PA judge was sentenced to 28 years for getting paid to put children behind bars and you're bitching about me picking the first link to an article on the subject I found from a quick google search?
The premise of "distrust of authority is propaganda" is so self-contradictory that I wonder if this article is a deliberate troll.

I love movies and books where authority is the villain because it mirrors my own (and most other people's) struggles in real life. Children strive for freedom from overprotective parents and overworked and misunderstanding teachers that don't have time to listen to them as individuals. Adults have to deal with bosses, cops, politicians, preachers and other banana dictators who hold the keys to their freedom and prosperity. Anyone who has read Parkinson, The Peter Principle or Dilbert knows organizations have issues. This is not fiction, but unfortunate reality and one that your audience can easily identify with.

It doesn't help that he uses more talented and successful film makers as bad examples. Star Wars had the rebel alliance - a well organized, powerful, and benevolent organization. Even the Empire was competent (until Tarkin and the other senior leadership were destroyed in the first Death Star.) And what does teenagers splitting up in horror movies have to do with the struggle against incompetent and uncaring authority? That example doesn't work but it does make this sloppily-written rant gratuitously longer - an excellent technique to keep readers that disagree with you from being able to finish it. A technique that many commenters here also seem to be abusing.

Silence of the Lambs was a poor example as well. Dr. Chilton (the head of the facility where Hannibal was kept) was as 2-dimensional a corrupt bureaucrat as you can get.

In conclusion: the thesis made no logical sense, the examples were poor, and the writing was needlessly verbose.
Do you guys have a "global" session ticket cache shared amongst endpoints? Or do you ensure the same user gets routed back to the same termination node? I'm quite curious about this.
> Currently, if someone compromises the Cloudfare servers, they gain the bank's private key

This is not strictly true, is it? My interpretation is that at best they get temporary access to a server that will sign for them using the key, but the bank can terminate their signing servers at any time and then safely resume using their key without having to revoke it, since it never left their server.

This does somewhat increase the attack surface, but it lets the bank keep control over their keys and is better than having their keys get compromised and thus having to revoke them.
There is no practical improvement here.

What does it matter security-wise if the HSM module (which is what banks use) physically sits on Cloudflare premises or off Cloudflare premises? It's still connected to the same equipment.

It does matter for a variety of other reasons, for example what security clearances are required to work there, but it does not matter much for security.
> Which just made me wonder if it's possible to train a hidden markov model for detecting that. Trigger a flag that says "wowzers, now you're in unhealthy state territory".

Unlikely, because how much "less healthy" becomes "unhealthy" is an arbitrary subjective point rather than being something fixed and objective (and because the degree of health impact of various decisions varies widely based on individual factors that aren't all known with any kind of precision, so, even with a fixed objective of 'healthy state', the point at which the average person would reach it and the point at which you reach it may be not at all similar.)

> I imagine we'll get to the point of being able to do this sort of thing in about five years.

I imagine we'll not be meaningfully closer to being able to do this than we are now in about five years. (OTOH, I wouldn't be surprised to see someone marketing something that purports to do this in that time.)
Actually, thanks to session tickets, they can continue to impersonate the bank to existing users for potentially quite a while after Cloudflare lock them out.
I was in Boston a few weeks ago visiting a famous bar by Fenway called the "Cask n Flagon." This place is a gigantic sports bar and one of probably only five or six bars that sits around the stadium.

I got to talking with the bartender and he told me a story about a customer who became irate that the bar was closing early and that they were scared that she would go on Yelp and write a bad review. I laughed because I thought he was joking, thinking that nobody would ever base the decision to visit this place on a Yelp review. However he told me that the reviews matter a lot. I still doubt that he is correct about that, but it does show you the perception and fear restaurants large and small have about Yelp.
OTOH you're not so enamoured with it that you will prefer it over a z3 compact or other smaller phone without these features.
Good catch. Fixed it. Thanks!
Run the curl command once you sign up. Or, download the tarball and install it manually.
Basically, what I'm hearing when reading both yours and the OP's comments is the old problem of "ignorance vs. happiness". Is it better to be ignorant and happy, or knowledgeable and unhappy? The premise, of course, being that the more you know, the more you know how fucked up everything is and the less happy you are.

(I'm not sure where that trope started. I'd be interested to know if any historians can point to a period of time where this took off, or was first mentioned in philosophy.)

Going back to OP's comment, that seemed to be the main difference: in Trek, for example, we have a civilization which had a lot of knowledge. Both at an individual level (everyone portrayed (with possible exception of Barclay...) was very intelligent) and at a civilization level. However, they somehow manged this while staying happy. Maybe this is because they solved all the problems, but I think it had more to do with the writers choosing to portray the stories in that light. It seemed the federation was not above its political squabbles, after all, and there were times that ship captains ignored direct orders on moral grounds. So it's not like everything was perfect.

Meanwhile, taking a look at a cyberpunk story, you seem to find a setting in which we learned many things, and the more we learned the less happy we became. The decker that hacks into a corporation and discovers just how horrible of an entity they truly are, is an example at an individual level. One could also point to the general state of the world in those stories, and consider how knowledge "corrupted" us.

Looking at your mother's story, I'm guessing this is a similar situation. The more you know about what's going on around you, you more you notice the gilded veneer over everything. Those who didn't realize the propaganda were all lies and exaggerations were probably happier (and of course worked harder).
How to save your ears from crappy music on Spotify
It's part of a strong argument for making them illegal. You'd also need to show that making them illegal actually decreases the rate at which that happens.
You should have a section in your README discussing differences from D3. I've used D3 a little and understand some of the pain points. Looking at your library I'm asking myself "why would I abandon D3 for this?".
Congrats! Amazing job. I'm learning Spanish and I'm a big fan of flash cards. I use FlashCards++ (for words that I add myself), but it's good to have another app that can bring me new vocabulary (I went over all Duolingo and done with it), seems like you have advanced vocabulary which is great. I've used Memrise in the past, but the UI, the offline caching, and the difficulty to know which deck was high quality turned me off. Great job and add Tagalog(Filipino) if you can one day!
That's not fair. A mean is a way to group values, in this case per salesman. Both stores are doing better per salesman!

You're the one ignoring the per salesman part, which might or might not be due to "common sense".

If you want to compare both stores per se, the operator you want is sum, not average.
The article is somewhat light on content. There are standard protocols for HSM use. What is the reason you didn't use these? There are clear risks involved with inventing your own security related protocols.
You're not thinking like a prisoner though. How do you know what kind of reasoning is going on inside of a prisoner's head? They don't have the same information that you have.

There is no reason to avoid leaving a hat on a bed, but superstitious people might have a reason, even if it doesn't make any sense to you.
Yeah, it was removed in Paperwhite. Voyage is also missing this feature. But Kindle Fire still has it.
We have a really long technical blog post coming tomorrow. Agree that inventing protocols is dangerous so we got iSEC Partners/Matasano to evaluate.
It is interesting you are the only one who has mentioned China. The other side of the coin is Apple being worried about being locked out of China for not being secure enough. http://www.reuters.com/article/2014/07/11/us-apple-china-idU...
These remind me of the "Devils Stomping Ground" circle in NC.
http://www.hauntspot.com/haunt/usa/north-carolina/devils-sto...
Running partners for learning web development?
Inside the company that rebuilt Digg
yes, several examples besides crows, I just pointed one, not sure why I was downvoted
http://www.forbes.com/sites/jonathanhall/2013/06/07/washingt...
People generally use the numbers to help build a shortlist of contenders and then read the reviews of the dozen or so restaurants on that shortlist. If your base score is too low to even get on peoples shortlist then it doesn't matter what people have written
Why being a little disagreeable is important for entrepreneurs
The worst way to learn?
Exactly. I ordered the new Voyager model immediately, because my (until today, top-of-the-line) Paperwhite annoys the shit out of me (for one microsecond) every time I turn the page, and because I want a higher res screen while keeping the same awesome readability.

I'd bet a huge majority of purchasers of the Voyager are mostly-happy current Kindle users.
I don't really understand all the complaining about JVM startup times. It's a second; usually less. Unless you're using JVM apps as command line utilities I don't see the problem.
Build web service APIs with golang at CoreOS
CoreOS is seeking engineers that are excited about API design and implementation.

The majority of our APIs are written in Golang, and are all self describing using Google's discovery-api.json convention (a few of the original developers at Google now work at CoreOS). This means our API clients are all auto-generated. Our primary frontend development is done with Angular.

This is a unique position for someone interested in systems infrastructure, but strengths are in back-end web API development.

Positions are available in SF or NYC. We are an early stage company, so relocation (especially international) is extremely difficult. Visa support for candidates already in the US is not a problem.

If you are interested in the position, please email our CEO directly at apolvi@coreos.com
If iPhone 6 Were Actually Better
Sorry, I just don't see a big problem with it. What companies have gone out of business because of this? Have you got any statistics to share?
Port a program / library from one language to another. It's great fun. Make sure you know one language well, and the other not so well.

I'm having fun at the moment porting Flash and Javascript games to Objective C (sometimes using the Cocos2D framework, sometimes not)

Porting is great because sometimes it's mindless grunt work (just map functionX to function Y) and sometimes there's more important considerations. If I'm feeling lazy or tired I'll stub out the hardest stuff and come back to it later when I'm more alert.

Good fun!
Wouldn't it be a better business model to charge businesses to opt-out?

Most people would consider that blackmail. But the folks over at Yelp would probably like that kind of thinking. Ever consider applying for a job with their marketing team?
There are higher level frameworks, Express is meant to be very minimalist. It is also usually a good idea to serve static files directly through Nginx or a CDN. If you find yourself always requiring the same modules in most of your files, a common pattern is to have a `common.js` file where you export all your modules and you then only need to have one `require('./common')` at the top of your files. I personally don't really like this pattern as it makes refactoring harder and is usually a sign of bad architecture.
WeasyPrint: Converts HTML + CSS to PDF
That's how I read it too. You can gain control of a session, but the private key should remain safe. I could be wrong though.
Ya - it is possible, but not ideal. IMO Stripe is a much better solution.
KidoZen Connects Your Mobile Apps to SAP HANA
At least on Amazon you can see the misleading reviews quite easily - just click to view the one stars and see if they are relevant or not. Personally I find Amazon reviews about the best in terms of actually deciding what stuff to buy.
£329/339 is too expensive for the entry level FDX.

They could have sold millions at £200.
Servo is a prototype web browser engine written in the Rust language
The customer site now is responsible for providing key signing in a highly available fashion. It makes sense they would need to spend more (probably no more than for an hsm) to ensure the connection never goes down. If you can take down the connection from Cloudflare to the customer site, their website goes down.
The big deal is that CloudFlare's ability to sign SSL sessions can be yanked with the flip of a switch, with no need to trust CloudFlare.

Of course you still need to trust CloudFlare to let them provide SSL functionality for you in the first place. But often the issue of "do I trust them today?" is separate from "will I still trust them tomorrow? and what happens if I don't?".

E.g. consider if I trust CloudFlare today, but want to be protected in the event that they fail and suffer intrusion. With this service, I could as an emergency just flip a switch (shut down the devices providing the key signing) and instantly disable CloudFlare's ability to accept SSL connections on my behalf, without having to trust that they manage to deal with the intrusion properly.

By allowing me to put less trust in them, I may trust them more, because the ability to counteract misplaced trust is much better.
Silicon Valley’s Contract-Worker Problem
I don't know about Yelp, but I've met people working in hotels who live in genuine fear of bad Trip Advisor reviews.

And I can understand that - if I'm going somewhere I don't know and have little time for research you just go somewhere like Trip Advisor and skim read. A couple of very negative reviews might make a real difference for smaller places which only have a couple of dozen reviews in total.
Article seemed to make a quantum leap here

> But most importantly, our work revives that age-old fantasy of learning during our sleep

Can someone elaborate on how responding to preconditioned stimuli (a voice repeating the same question over and over) can translate to learning things while we are asleep?
Love the simplicity and the extensibility of running ad-hoc commands. Pricing looks okay, especially the unlimited tier as I hate per server pricing but $500 cap seems reasonable.
Consider, why do people use SQL query builders when you could just use a string?
Security for the people