skysight-inc/HackerNews huggingface dataset:
I don't think the comparison is equal.

You are comparing PAAS to IAAS, but AWS does have Elastic Beanstalk which would be a more direct comparison e.g. PAAS. Like App Engine, Elastic Beanstalk handles the auto scaling without having to setup and understand all the details around EC2.
Educational. But I wonder how many US scientific bodies could be just as easily vivisected. E.g. I'm sure Physics, for example, is full of people with connections to defense, and we know that lots of top Mathematicians have worked for the NSA.

It does remind me of a story on NPR (about a book -- http://www.amazon.com/Harvard-Unabomber-Education-American-T...) detailing how a prominent psychology professor basically tortured a group of students over a period of years, concentrating special intensity for an awkward scholarship student, Theodore Kaczynski.
How We Created Color Scales
The most coherent definition I can come up with is that homoiconicity describes the relationship between language syntax and a data representation, such that all valid programs can be parsed by a conforming data parser, and the parser output contains all the information required to compile or execute the program.

Thus, all programs are homoiconic to some data format (if only flat text files). The interesting thing about Lisp is that it's homoiconic to s-expressions, which it also provides powerful tools to manipulate. This paves the way for its macro system which provides compile-time support for processing s-expressions and treating the output as input to the compiler.
Consumers can't consume if they don't have the money. Every time you fire someone and he can't get job for time X, you are reducing overall consumption during that time X.

Instead the money if concentrated in fewer hands and there is an upper limit to what a human can consume (e.g. a single rich person can't eat more than hundred middle class people).
Could be as simple as something to hang wooden seats or beds from. See for example the third photo in http://www.dailymail.co.uk/news/article-1041171/Violent-stor...

I wonder more about why one would, upon entering such a bunker, start axle grinding ones such structures.
How does using HTTP preclude that?

Well, some of the discussion suggests client apps (web browsers, mobile apps etc) can talk directly to the database server, and the traditional database server security model is at the table level.

So if I had insert and delete permissions on the Hacker News comments table to insert or delete my own posts, I could insert and delete every user's posts.

It's possible to imagine hacks that might work around this problem (e.g. comments-table-per-user, or liberal use of stored procedures) but none of them sound like particularly good ideas.
HTTP doesn't preclude robust security at all. But how is a database-direct API layer going to enforce Role Based Access Control? Or really any access control model? Database security is at best per-command and per-table, when true app security often needs to be per-row, or even per-column, perhaps depending on data in the other columns of the same row. Example: user x has access to change payment details (all in the same table of course), but not those for user y. A straight-up HTTP API layer won't have the flexibility to enforce that, or it will be entirely too complex in order to support every possible business rule set.

As far as business logic, how is an RDBMS going to make sure that your remaining balance on your gift card is higher than that order you just put in? Sure, you can validate that on the client side, but I can just as easily use anything that will make an http request to make that same http request without doing any business rules validation. Heck, I can alter javascript while it's running just to circumvent business logic if I so desire.
If you're still poor by 35 you deserve it
100 years of data visualisation best practice
Yup! Chris is absolutely correct. There's several different choices of libs for streaming computation that make different tradeoffs, and behave differently and are tuned for different workloads
Studies don't show that users care about the speed of websites - they show that users care about the ease, and therefore "perceived speed", by which they can achieve a goal.

A website with a quality interactive UX that adapts to user's needs, ideally with minimal interruption, is going to be substantially more efficient for the user.

This is especially true since the very nature of web requires communicating with remote servers in order to update and persist the user's state. Loading an entire webpage every time state changes is not just slower, it's also quite disruptive for the user.

Javascript's power comes down to the fact it offers AJAX and a way to manipulate the DOM on the fly. In addition to avoiding full-page reloads, it has the advantage that you can present the user with meaningful UI i.e. progress indicators and what-not.
How to secure private GeoJSON while rendering it on Google Maps
I want to render GeoJSON data using Google Maps API and at the same time would want to secure it from being stolen.

At present the GeoJSON data is loaded via Google MAPS JS API map.data.loadGeoJson('https://whatever.com/custom.json'), which gets the data by a CORS request to my site. By seeing all the requests from the page, its very easy to get hold of this GeoJSON data. My apps asset is this GeoJSON data.

Is there way I can secure the GeoJSON data?
Certainly you're free to have huge globs of Javascript and CSS, but very many people have slow limited Internet connections and you're making life a (teeny tiny) bit worse for those people.

The important part of your blog is probably the text. We have hundreds of years of design iteration in the presentation of text and it's just weird to ignore all that.
A document from 1981 reveals why mouse cursor is tilted and not straight
The top 20 best countries for women
A New Social Network for Leakers and Whistleblowers
Not sure what's your target, but your pricing plan shows the main differentiator being where the website is hosted (your server vs S3 vs Cloudfront) which requires people to be familiar with AWS services to understand the difference. Then you don't say how your servers are connected to the internet, what uptime they have, etc.

My suggestion would be rephrasing without mentioning AWS (unless it's a specific user-level features like "upload to your own S3 bucket" or something like that).
I hope you point out to your customers that compliance is a lot more than just a hosting account. Everything from specifications of the design of your office network to policies for employees talking while on smoke breaks.
I came to this thread with the intention to say, "Call Chas and Frank at Aptible! They're nice folk with a product that does only exactly what you are asking for."

How are y'all? What's the latest?
The advantages compared to HTTP are similar to SPDY's advantages compared to HTTP -- connection multiplexing, compact message format, and server push. HTTP is wholly unsuited for use as a high performance RPC protocol.
That's a good question. Ultimately the FCC only has jurisdiction over American operators. However, net neutrality as a concept is also being debated in other countries. When someone like TBL is commenting on net neutrality I'm never quite sure if he is referring to net neutrality in the USA, or to the wider concept.

Precedentially net neutrality derives from the English common law's notion of common carrier. What you should expect this to mean is that the concept of net neutrality should be similar in all English common law countries. In practice I'm not always sure this is the case.
IIRC They have their load balancer hosted under a sovereign IP address (the IP block belongs to a political party). So attempting to mess with it could constitute infringement of free speech.
It's not about the money, it's about not being able to care and survive as a business.

Because then they would also have to care about the thousands of other VM's that may run all kinds of stuff that is illegal somewhere, questionable, politically, socially, culturally or commercially sensitive etcetera.

No ISP can afford to be proactive about this. They cannot afford to care. Or even know.
Is it possible to use sonic pi on windows?
We need functional programming because a large subset of us are average or below
Thanks, nice to see you here and thanks for the feedback :)
Yes, they are vertically above the highest search result. They also have a different background color.

...... apparently that last sentence is no longer true. No idea when that happened. However, the ads are called out by a yellow button saying "Ad" before the link text.
> A website with a quality interactive UX that adapts to user's needs, ideally with minimal interruption, is going to be substantially more efficient for the user.

That is a miniscule number of websites though.
And the prof married one of the involved graduate students. (no: I don't think marrying a graduate students is in general wrong- but marrying one you supervised in an abusive experiment is a bit off).
I found a similar setup: http://imgur.com/aOaZYrs

It'd be fun to automate the process and find the absolute best strategy against this deterministic guessing algorithm.

Edit: the only placement that actually matters is that of the smallest ship, ie: http://imgur.com/YQ01k95
> Sites with minimal or no javascript are faster than sites with lots of javascript.

Though experiment: Simple todo app. Would this be faster if, upon every interaction with the UI, the whole form was sent to the server to recalculate a new DOM to send back to the browser to download + re-render? It certainly seems like e.g. adding a row to a DataTable would be what most users would call "faster".

Also, consider how this app scales. Requiring that the server re-build a page for every user interaction is a lot more work for the server vs. sending a big blob of HTML + assets once (CDNJS and similar services also affect how this performs). Given how powerful even a low-end few-year-old smartphone in the US is these days, I doubt that it would be a better experience to make an app like todo rely on server-side processing.

I do agree that javascript isn't /always/ the right tool, but building a few smaller API back-end + JS app front-end things lately been pretty convincing for me that JS + AJAX + REST API is a better UX for lots of things vs submit-and-rebuild. Clicking a radio button or selecting something in a drop-down and having the page refresh as a result feels pretty lame in 2014.

EDIT: note that I was a pretty dedicated NoScript user for a few years, a few years ago. These days, Privoxy running a few AB+ lists filters out almost all of the junk that annoys me (I found the performance of AB+ to be unacceptable with dozens of tabs open at once).
You are quite right. Amazon does have different set of products that would also cover the pros of App Engine.

I think the comparison is more of "PaaS vs. IaaS" than "AWS vs Google Cloud Platform".
Thanks for the feedback, I'll change the copy hosting it off of S3 or Cloudfront definitely adds to the cost that's why there is a price difference. I should make the text more understandable.
Canadian Police break military grade crypto after 2 years
Most developers don't care about the platforms with the most reach and most invested gamers. Sure. Must be why every indie developer I know would sell their eyeteeth to get even a mid level promo package on PSN.

You're taking your ideology and trying to retrofit the world to accomodate it. Doesn't work that way. In the world of what is, rather than the world of what one might like it to be, nobody really cares. Tough.
SamA: Waterloo is most impressive up-and-coming startup city I've been to
In your local CSS:

#tumblr_teaser_follow {
display: none;
}

There's a similar one I use for Wordpress.
How does that answer or even address any of my questions?
To be fair. The point, I believe, is that for a lisp program to alter itself, it only needs access to its source code. Which is also all it really needs to execute itself.

More impressively, the modified lisp program could easily serialize itself out for study and modification. Languages that use reflection can't easily do this.
Get Everything with EverythingMe App
Life is good, just hanging out on a Sunday afternoon, geeking out about HIPAA. What could be better? Pretty much normal for us :)
"I'm sure Physics, for example, is full of people with connections to defense, and we know that lots of top Mathematicians have worked for the NSA."

Not to mention the strong historical Silicon Valley links to the "defense", prison, law-enforcement and intelligence industries.

One also has to ask what weight should be given to indirect cooperation with and enablement of said industries. If one is not working for a defense contractor, but a supplier of said contractor, or if one even takes money from or in any way benefits from these contractors or contractors of contractors, what's your culpability? Where do you draw the line?

I am also reminded of "IBM and the Holocaust",[1] which is deserving of its own HN article.

[1] - https://en.wikipedia.org/wiki/IBM_and_the_Holocaust
did you mean touché?
So indie developers are "most" developers? What planet do you live on? Do you know what the term "indie" comes from?
From a business perspective, that's exceptionally misguided.

Annoying the fuck out of people is a good way to chase them away.

Blogs work as much via reblogging and word-of-mouth as anything else.

The most egregious example I can think of is the Google Blogger dynamic designs, which I find both completely frustrate any attempt to read the content presented, and which I've yet to find a way to un-do the damage via local CSS.

In most cases, even Readability curls up in a corner and weeps quietly rather than present its exceptionally clean and quite preferable page design.

I've appealed directly to several blog owners to chose a different site design (e.g., not the "dynamic* layouts). Generally, I close the page as soon as I open it.
I think probably closer to $10m, but... yeah. A lot.
yeah, I kinda agree. It would be cool if our smartphones could read lips.
"Clicking a radio button or selecting something in a drop-down and having the page refresh as a result feels pretty lame in 2014."

I find that's somewhat true until I'm sharing my todo list with others. Knowing that the rendered page represents a synchronous snapshot in time can be valuable, and is something that's often lost when moving to AJAX (though I certainly agree it doesn't have to be). Your point generally certainly holds - updates should be faster on a well-designed app, and ideally your JS will be cached.
Professors on food stamps: The story of academia in 2014
While some of what you say is true, it actually doesn't do a good job of explaining Brand advertising, which is exactly what the article naively seems to do a pretty good job of. (I have read Influence by the way). The writer states he is coining the term "emotional inception" (which is catchy so why not?) so pointing out it's not a real thing is just a cheap point.

The first points he makes about a lot of advertising simply being true or intended to be true are very valid, and sidestep persuasion theory altogether (since it is chiefly concerned with persuasion via heuristic).

The point about cultural imprinting (or whatever you want to call it) is, again naively quite insightful and explains brand advertising rather well. Of course a lot of this cultural imprinting is simply intended to trigger standard persuasive principles sometime down the line. (Corona is a beer drunk by relaxed, young, attractive people; that's the crowd I want to identify with, so I'll drink Corona -- this is classic social proof, one of Cialdini's six principles. And, incidentally, this works best on people being forced to make a decision that makes little difference, such as pick a beer or laundry soap.)

So the problem isn't so much that the thesis is wrong, as that it is naively right, but is simply explaining the mechanism by which existing theory in fact applies.
The Essential Barbara Liskov
I've always considered disabling javascript or using something like adblock to be bad form. Ads are annoying, but they're paying for the content I'm consuming.
Actually most frozen cans have the bottom inverted, but I've only noticed this happen since about 2010. It used to be that a fully frozen can always used to blow.
> $3500/month.

> $0.10/Hour Additional App/Database Containers $0.40/GB/Month Additional Storage.

¡Ay, caramba!

Thanks for at least giving me a source to cite in grant applications!
If that's the case, then the problem isn't JS, it's poor web development. Annoying? Absolutely!

However, this is not a problem that users can expect to resolve on their end by doing something so general as disabling Javascript.

I could disable images, or ignore CSS, and undoubtedly websites would load faster for me also. However, complaining to the web-page maintainer that the webpage functions poorly on my system would hardly make sense.

Javascript is not the problem; I can make equally terrible UX for websites with-out it - small fonts, animated GIFs, terrible (any) audio... crap content.

If users want to complain and be taken seriously then they should complain about the problem, not something orthogonal to the issue.
Considering what we know about deployed systems in general, is it likely that current systems actually comply, or are merely privacy disasters waiting to explode?
In finances, what you do know can hurt you
It can, but not now. Maybe in 10 - 15 years (or more).
The numerous available online (mobile apps) symptom checkers are a good indicator of the current state of how a computer can solve your health/medical issue. Computers need a lot more systematic data which is currently not available.

A blod post on this topic: https://medium.com/@iamhealee/you-should-use-symptom-checker...
> Upgrades should not depend on where you place your computer.

They aren't computers. This is the blinkered view of people way too close to their choice of silicon that ignores what people who actually buy hardware want. Normal people don't want computers. Computers suck and are hard to use. They want predictable, turn-key solutions. I'd point to the smoking ruin that is the commercial HTPC market as evidence that, hey, maybe this actually is a thing that works...but I have this sneaking suspicion you'll just say that's definitely not a true Scotsman, no no no.

> So who said consoles have to be all locked up and controlled by Sony, MS and Co.?

Nobody, so don't put words in my mouth.

> So, where is their proposal to make Metal into OpenGL-next? Until it surfaces, Metal will remain a lock-in attempt.

If you would stop extrapolating general-purpose software to to hardware layers for just a tick, the notion might enter your head that Metal is designed around the behaviors of the guts of the A7. It doesn't make sense to generalize it because the generalization of it into "OpenGL-next" takes away the reason to use it! You can bleat 'till you're blue in the face about how terrible it is that people would trade abstractive consistency for performance, but it's what everybody's done in games--and, when you add enough zeroes to a problem, software in general--forever.

Abstractions inevitably fail. Your ideology can attempt to ignore it. It'll fail, too. And the arrogance that you display in this insistence that people have thought about this much much more than you must be acting dishonestly because they disagree with your ideological bent is simply astounding.
The problem is keeping your code DRY when you have a mixture of two languages and execution environments. Inevitably you will have to choose which frameworks you want to use , picking two heavyweight frameworks for client and server will inevitably mean that they fight for control of your application if you want to use both to the fullest because each provides their own router and templating etc. So you need to decide which is going to drive your application.
My view is that Bash is not a "real big person programming language".

I say this as someone who spent a year maintaining and extending a system composed of 90k lines of bash, who lives at the bash prompt, and who frequently reaches first for bash when I need a small bit of logic.

What bash is is a real big person UI (though I make no particular claim about its uniqueness as such).
What this facilitates is nothing but laziness on the part of developers who don't want (or know how) to write a rest API to access their database using technology like Apache or Node; software that was designed to handle large numbers of public requests.

IMHO, this is NOT a good idea. If this IS going to be done, it should only respond on localhost, and be able to detect proxies and disallow them by default, because some numbskull is going to make access to his database with credit card info HTTP accessible to his i(diot)Phone app because it's easy, and PGSQL will get blamed and labeled "insecure."

Why not focus on continuing to be the best database, and leave all the other stuff to other people.
It's on the home page:

Standard: $15.95/year

Wildcard: $149.95/year

But thanks for the feedback; I'll make this more prominent.
> it's rather rude to just show a white screen

Exactly.

In the case of something like gmail, while many of the features cannot [practically] be implemented without Javascript, it is always important to have some fallback. Even a dumb, read-only, paginated-<ul> of your inbox is useful.

I could be on a strange browser, or behind a restrictive or badly implemented firewall. Even just a message saying what should have been on the page can serve as a reason to come back when a proper browser is available.

Put another way: given the noscript extension exists, you should probably give at least <i>some</i> reason for people to click the whitelist button.

Just have something there; the Meteor style of not caring and sending an empty <body> tag just makes your site look like a broken webserver.
In C++, the best way to hand out pointers to anything where the creator may not necessarily be the last one referencing that object or chunk of RAM is to use reference counting, which would have solved the posters' problem.

It would mean that you would have to wrap the incoming string in a class, and probably add the tokenize_string method to that class. Then you would also have to wrap the results vector in a class that then addrefs the original string wrapper class.

But after that, handing out pointers to the contents of the string would be no problem as the results class would addref the string class and then release it when done ensuring that the string wrapper class remains alive as long as the results object has not gone out of scope.

Of course Rust's approach of alerting you when your code path causes dangling pointers is also interesting, but I wonder how that would work if you were to link against a static library that handed out references to internal objects like that - could the compiler see the scoping problem?