skysight-inc/HackerNews huggingface dataset:
It's about comfort, not cost. Mileage runs are generally done for status. Air travel is miserable, and the extra perks that come with status are almost priceless.

Also, there's another huge benefit to sticking with a single airline - you learn that airline. When I used to fly 2 weekends/month, it was very disconcerting when I had to use a non-United airline and deal with the subtly to vastly different quirks.
Stop assuming that everyone operates at Netflix scale. Not everyone wants to watch their database, memcached, and redis instances thrash all day as instances dance around from physical box to physical box.
Security Experts Expect Shellshock Software Bug to Be Significant
Nice analysis! There is a similar problem in base-255 pixel math, with a similar solution. You want 255 * 255 = 255 when you multiply pixels, so you are doing divide-by-255 (not-256), which in 8 bits is somewhat "uncooperative".

I wrote up a few solutions many years ago, one of which is Sree Kotay's idea: adding one to the numerator (what this article says but without the awesome proof): http://stereopsis.com/doubleblend.html

It would be great if compilers could do all this for you, with a proof like this to go with it.
This is great. I fly because I need to get somewhere, not because I'm trying to game the system to board ahead of the other travelers with my elite status or "earn" bonus mile tickets which just adds extra ticket costs for all of the rest of us.
But the sub-shell that gets started will use the new binary, which will be safe.
ISC DHCP Client has a check_option_values function (at the end of dhclient.c), which (if it is properly used, I don't understand the surrounding code enough) should prevent this from being exploited.
If many eyes had been looking at bash over the past 25 years, these bugs would've been found a long time ago.

Many eyes switched to different shells, or never used bash to begin with. We have sh, dash, zsh, fish, depending on need and circumstances.
Firefox is open source. You don't have to have personally looked at its source or know anyone who works on it to trust that it's not recording your information, thousands of people have looked at its source, and if even one of them noticed something suspicious, the entire world would know about it.

Javelin isn't open source, so you're right, you have to have some amount of faith in an unknown group of developers.

Personally, that's not what's keeping me from using Javelin, I just need firefox sync support to consider it.
Congrats on this release!

However, I think the library name is a bit of a poor choice. I don't want to take away your thunder, I just picked this post to do my rant :).

There seems to be a lot of new general-purpose libraries with very poor non-descriptive names coming out.

Whenever I need to dive into a new codebase, in a language and ecosystem I'm unfamiliar with, it's extremely hard to figure out which dependency and library does what. I was tasked to dive into a massive RoR application recently, and I ended up having to write a glossary first to remember what every non-descriptive noun implied.

After getting familiar with a particular language's ecosystem, this problem becomes tends to go away, and as a library writer, it becomes easier to fall into the same trap by picking a name that's marketable and distinct.

But I feel we're collectively making it increasingly harder for people to ramp up in new ecosystems and maintain future legacy codebases.

For names of large applications this is not as bad, and some of these applications become household names, but I think we should try to avoid this for general-purpose utilities.
The GIL is there to protect the interpreter's internal data structures, so it's only necessary to hold it while running the interpreter (while executing ruby code) or manipulating interpreter internals.

This is all IO, there's no interpreter execution while you're waiting for an HTTP request to come back so the GIL is released before starting IO, and re-acquired after the request comes back (before resuming execution), same when executing native code which doesn't interact with the interpreter (e.g. image processing implemented in C).

The GIL is an issue when you have multiple interpreted (not native) CPU-bound threads (and depending on the exact strategy it may also be an issue when there's an interpreted CPU-bound thread and multiple IO-bound threads, CPython 3's "new GIL" has/had that problem)

Also MRI has a GIL, GILs are implementation details (with consequences, but still) and other implementations may or may not use a GIL.
it was because the fact that they could put a satellite into space meant they could also land a nuclear warhead on US soil.

It was not only that, however. There was also a competition between two different forms of government and societal organization. I would bet that many in the US would experience anxiety about our "declining status as a superpower" if another country were to beat us to Mars.

Also, in the long term, if only non-western cultures expand into the solar system, they will surpass the western nations. The Earth will become a major but junior member of a coalition in a larger political context, in the same way that the UK has become a major but junior partner in the power bloc centered around the US. Just as the UK now crews Trident missile subs built by the US, the Earth will retain considerable autonomy but will ultimately answer to the Solar System wide civilization that controls the strategic high ground outside of the Earth's gravity well.
How to design apps for the “toxic hellstew” of many Android screen sizes
I work on Google Maps and think s2 is wonderful. It's a mostly overlooked gem. What advantage does tile-cover have over s2?
Googlers at I/O explain how this works in V8. Click on "View the presentation" and then from slide 23 onwards.

https://developers.google.com/events/io/sessions/325547004
Yeah, it's a huge improvement over SW1. I'd also suggest that you go after a Galaxy Gear 1 (if those sony-bucks are convertible) -- it's become very cheap now, and it's not that the technology has gotten any worse, it's still also an amazing device (with more functionality than the SW2).
MOAI - its a fantastic framework for all kinds of things, but it always needs more documentation: http://getmoai.com/

I'm willing to help you learn the framework so you can write the docs.
By definition, the set D={ x : disadvantaged(x) == true } contains anyone who is "systematically marginalized" (assuming that being "systematically marginalized" is actually a disadvantage).

Concretely, are you saying my set D does not contain Sasha Obama, but it should?

Or another example - my girlfriend is an upper middle class black woman from a majority black country. The minute she steps off a plane in the US, will she suddenly become more deserving of assistance than the white son of a single mother who earned $11,000/year household income?

If you are determined to slice by race, the answer is yes. Let M represent either Sasha Obama or my girlfriend.

Your assertions about racial averages takes the following form:

1. mean(M,N,O) < mean(U,V,W)
2. M > U
3. ???
4. Therefore, we should preferentially support M over U, N over V, etc.

Step 3 is where I'm confused. Step 3 is a normative principle - you cannot derive a "should" conclusion from a fact without one. What is that principle?

Look, we're not writing a philosophy paper or doing set theory here...There are reasons why this shit is set up like it is.

How is this not a philosophical question? I'm sure there are reasons why "shit is set up like it is" - "tribal politics" fits the facts well. But I'm hoping for a more interesting explanation than that.

And I'm asking because I'm honestly interested. A lot of smart people seem to buy into stuff like this, and I try to understand it due to Chesterton's Fence.
If your problem is storing lots of metric points over time, I'd like to toss in something here: https://dalmatiner.io . It has an effective size of about 9 bits (bit not byte) per time interval (i.e. per second). Adding data and querying data are both very fast (as in a 'give me the daily average of cpu usage on that system for the last week' takes about 2ms) and it is built to be distributed from the ground up (using riak_core the same mechanism used by the riak database).

Some benchmarks to get an idea: https://docs.dalmatiner.io/en/latest/benchmarks.html

disclaimer: I’m the author of DalmatinerDB
How to Design a Billion-Dollar Company
I wonder if the government could use some of the same marketing for income taxes to feel like they are fun and interesting rather than being such a negative experience. Something like 100 people each year never have to pay taxes again.
Nocturnal epilepsy tracker and prevention Pebble app
Another thing to help is if solar is overproducing around noon, homes could leave their AC temperatures cooler than they normally would, and the AC wouldn't have to work as hard when they get home.

I.e., using the home's temperature as a very inefficient battery but better than throwing it away.
Most companies would require the use of a corporate travel planner to combat this. My most recent employers happened to both use Concur, and the UI there typically requires a written note any time you're booking something that's not the cheapest fare.
Guess that should be renamed to Linus's Fallacy.
Certain worms include a patching step like this when they infect a machine to avoid losing control via re-infection.

For a high school science research course I did an epidemiological modeling study on how "good" reverse-worms might affect the spread of infection, they're a pretty interesting thought experiment. With something involving exponential growth like this, early movers have a significant advantage.

As far as I know, there hasn't been a successful reverse-worm that did not accidentally cause worse issues (flooding local networks with a high density set of boxes doing over-zealous scanning, or accidentally destroying boxes due to a slapdash narrowly tested script).

Reverse-worms they can either wait around, detecting requests from infected-but-not-patched systems to re-infect and patch them—or just start scanning IP ranges themselves. The former feels somewhat less pernicious. "Try to infect this computer, you will be patched and help patch." But that relies on other worms not patching their zombies.
The Shellshock bug, explained in four minutes
If you own two houses, just because you aren't living at House A right now doesn't mean you don't need to pay upkeep, and doesn't mean you aren't deriving benefit from it.

Thought of differently- expats expect to be able to vote, right? Is it fair and reasonable for someone who is categorically excluded from paying taxes, to be allowed to vote?
A great opportunity here is Bluebird, the JS promises library [0]. The current documentation is nice, but only covers the API itself, with very few use cases. A "getting started" guide is badly needed for newcomers to BB and promises in general. A well-written guide would be a great star on your friend's resume.

[0] https://github.com/petkaantonov/bluebird
I saw this statement and was puzzled at first myself.

That would not be a 20% lift on number of visits by the customer, but it could be a 20% lift on revenue or margin from that customer.
25% of mobile Chrome users use Samsung Chrome
Looks like a great lib with a nice API, thx.

Was there any reason why you chose callbacks over a Promise-like pattern for the async responses?

Also do you know of any good HTTP Server libraries that will let you develop simple HTTP JSON services in Swift?
I notice that you use www.theverge.com in a number of the screenshots for Javelin. The writers at The Verge, the developers that build the site, the designers that make it beautiful - are all paid through ad revenue. Please consider at least adding the ability to whitelist sites if you are going to bundle ad block.

*Full disclosure - I am a developer at Vox Media, the publisher of The Verge.
This story appears on HN like clockwork every 3 months. Why? Because the Federal register publishes quarterly figures, the articles write themselves with very little work, and there's a large contingent of people on HN who think taxes are evil. I do think the policy of taxing US citizens on overseas earnings is unwise and FACTA is somewhat unworkable, but it's worth noting that taxation of Americans living abroad (and at a higher rate, to boot) dates back to 1864, when it was introduced to defray the costs of the civil war.

http://www.treasury.gov/resource-center/tax-policy/Documents... has all the information, and you can see the little quarterly blip on the search results graph as newspapers run the story reliably every 3 months. There has been a distinct uptick since the passage of FACTA but applications seem slightly down this year compared to 2013.

http://en.wikipedia.org/wiki/Revenue_Act_of_1864
A simple and personal Node.js file hosting system
Isn't this all just armchair prophesying? Let's see some screenshots actual exploits from anyone. It's hard to gain access to someone's shell unless it's 1990 and a server is using CGI-BIN. People are retweeting that this is "WORSE THAN HEARTBLEED!!!!111!" but Heartbleed literally left practically every server susceptible. I ran sample exploit code against a number of tests hosts and saw mysql queries and passwords streaming in plain text. Yeah shellshock is a big deal but I've yet to the ground rumble and shake and Y2K x 10000 happen. This seems like a big deal but it actually isn't. Most likely no one can access your shell. Patch and move on.
Look at the source.

(c) http://code.kx.com/wsvn/code/kx/kdb%2B/c/c/k.h
(c#) http://code.kx.com/wsvn/code/kx/kdb%2B/c/c.cs

This guy is truly depraved.
From the article, a quote by the FBI director: "I am a huge believer in the rule of law, but I am also a believer that no one in this country is above the law," Comey told reporters at FBI headquarters in Washington. "What concerns me about this is companies marketing something expressly to allow people to place themselves above the law."

So being secure in one's person, papers and effects places one above the law? The director's argument suffers from a number of flaws. One is the fact that freely available encryption methods already protect any content a person cares to shield from prying eyes, in which case an accessible device would contain nothing but unreadable "evidence".

Another is that, if access is only possible through the voluntary participation of the device's owner, this new feature resolves the 5th amendment self-incrimination issue -- just as it already does with respect to encrypted files.

In principle, for someone sufficiently concerned about privacy, the device's entire content could be protected by robust encryption, accessible only through a password. If the device is itself protected in the same way, this changes nothing.

People have been free to encrypt their device's content or not, as they choose. Now people are free to buy a device that cannot be accessed without the same password protection that its contents already have.
You generally collect miles on a corporate dime, and redeem them for personal vacations.
Is ello unsustainable?
Our experience with Parse has been absolutely terrible. A couple weeks ago, their servers went offline for hours in the middle of the day. When they came back up, all of the relation columns in an entire production database for one of our client's apps were magically deleted. This created a myriad of issues that we had to painstakingly traverse. To make it even worse, they have no true concept of backup and restore. Sure, you can backup and restore regular data columns and pointers, but there is no way to restore relational data through their data browser. Go ahead, try, it just errors.

If that's not enough, they constantly change the way things work on the back end. Is your app working perfectly this week? Great, it won't be next week. All of the sudden you could no longer check if an object was equal to [NSNull null] - the way I'd seen as a recommendation on their own forums multiple times, and something that was working perfectly until one day, it simply stopped working without any client or cloud code changes. This caused queries in a production app to suddenly start returning wrong data, and chaos followed.

As far as support, it has been a joke. We have reported showstopper bugs multiple times, and every time we are met with rude responses, followed by NO ONE addressing the issue for weeks, then the issue magically gets closed. I'm sorry, but if you can't backup or restore data on their platform, they probably shouldn't be spending so much time redoing your website every other week. It'd be nice if they'd fix mission critical features instead.

Lastly, the downtime and limitations. They go down literally 10 times a day for short periods. If you're an active developer, you've definitely noticed this. The least they could do is acknowledge the regular service interruptions on their status page, and have some accountability for the slowness. We will be developing a data migration tool for people who want to escape this terrible platform, and the tool will allow for migration of their data to a MySQL setup. In the time we've wasted trying to work around their countless limitations, we could have build complete custom REST APIs for our clients.
Not everyone has an optimally oriented roof, right?
What's stopping clones from replicating your UI right now? Are you concerned with loss of IAP revenue to clones?

I would suggest you open source it under a non-commercial license. Also, take a look at how some successful android open source projects are run. In particular, I like XPrivacy (https://github.com/M66B/XPrivacy). This is an excellent app. Open source with optional purchase, similar to yours. Personally, I paid the $6 they charge because I'd rather not compile the src myself.

You've already had a lot of downloads and are an established app. Clones can't replicate that.. If you are a recognized dev on xda, with your own thread for discussion, feature requests, bug reports etc, no clones will be able to replace that aspect even if they can clone your app.

You should be able to get more downloads/purchases from privacy-aware users. And you can have donations for feature requests if you want.

Just some thoughts.. best of luck with the app!
I'll throw urllib3 into the hat:

https://github.com/shazow/urllib3 -> https://urllib3.readthedocs.org/

There are tons of use cases and recipes littered in the Github issues and StackOverflow answers that need to make it into the official docs. Really there should be examples for how to do anything that another http library like Requests documents how to do.

That said, I'd suggest your friend starts with a project she has an affinity for. Perhaps she has used it before, or plans to use it in the future.
"The average programmers writes 10x more code than they read."

I am way below average. I read a ton of code for every line I write, though I guess that's since I'm usually doing more work on bug fixes than features.
I wonder how many bugs go unreported because the team or individual responsible for the code-base is too difficult to deal with it's not worth the time.

Those that aren't indifferent to feedback are often hostile to it and will get pretty aggressive when you point out flaws.

Additionally, many of these code-bases are so esoteric and needlessly complicated, many with quirky coding styles unique to the project or with layers of meta-programming that makes it hard to understand what's actually going on unless you've actually worked with that project for a while.

When I see M4 in a project I just sigh and move on.
Lags behind Chrome in general in that AndroidWebview doesn't gets single process Chromium, right?
DataDog uses elasticsearch for their timeseries data store: http://www.elasticsearch.org/content/uploads/2013/11/es_case...

Elasticsearch might seem like a strange option at first since it's historically a text search engine, but it's main datastructure is a compressed bit array which is ideal for OLAP processing.
> Simply not having the American system doesn't default to 'fine.'

Interestingly, that's the worst thing about Canada. Everyone just aims for "better than America", which is still a very low bar by Developed Country standards.
My grandfather was born to Prussian parents which came to Uruguay and then back to Prussia, but he was born in Uruguay, and lived in Uruguay from his teens onward.

When he went to obtain a German citizenship, he was asked to bring in a lot of additional paperwork (a church birth certificate being one I think). One of my uncles went to Germany to try to obtain it, but it was in vain.

I wasn't going to be granted German citizenship unless my grandfather, and then my father, were granted German citizenship.

My grandfather was as German as they come, but due to those quirks he wasn't granted citizenship, and so I wasn't able to.
Not only that, but the 0 (and 00 if applicable) also push the odds against you.
'But even if the direct economic output of the craft itself is assumed to be zero, the development of the satellite manufacturing and launch capability, which is a net economic gain too, whereas the replacement of a broken window does not have any innovative component (since the prior existence of the window means the capability to make it already existed).'
Can confirm the same for Github for Windows (msysgit again), Chef for Windows (embedded bash) as well as Cygwin's bash
Wow, this makes me want to ditch my iPhone...
You had me at "reading mode". I can't believe text wrap, pervasive in smart- and not-so-smart-phones of yore, is today considered a rarity. Thankfully I'm not alone [1].

[1] https://code.google.com/p/android/issues/detail?id=62378
No, I wasn't making that mistake at all. I was talking about racial diversity because YOU were talking about racial diversity, pointing to the Swedes as an example of an ethnically homogenous culture that is able to Get Things Done due presumably to the fact that most folks there are blonde. (Side note: if you'd like a meatier comment to respond to, there's always the parent's that you're ignoring: https://news.ycombinator.com/item?id=8368839)

I pointed out that you were talking like a Nazi because, in this instance, you were talking like a Nazi. Do I think you secretly harbor a desire to wipe out an ethnicity via genocide? Nope. Do I think that criticizing ethnic diversity as standing in the way of progress sounds suspiciously fascist? Why yes, yes I do!

Identity politics has no doubt hamstrung the American left, but that has had little to do with your cited example of the failure to implement a nationalized healthcare system. Diversity increases viewpoints, more viewpoints invite stronger debate. Does less debate lead to better outcomes, or faster outcomes? Which is preferable?
The payloads that don't do much of anything are possibly security researchers or white hats trying to get an idea of the scope of the issue and/or get ahead of this. Ex. http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-in...
Url changed from http://antikythera.whoi.edu/artifacts/antikythera-mechanism/, which points to this.
Ah, great info, thanks!