skysight-inc/HackerNews huggingface dataset:
Anyone else think it is a bad move that they have a separate site? Atlas by Facebook - http://atlassolutions.com/. I understand that they want to sell ads to companies but they aren't fooling anyone (nor are they trying to) and they might end up confusing more people than they help.
Actually, that's a good model. It would have kept the memory (and code execution domain) of the application server independent from the memory of the SSL terminator during Heartbleed. If you terminate SSL on the same box as your app server you're putting many eggs into one basket.
I connected about 4 accounts and the rewards/week were $0.60.

Have not tried giving them access to my debit/credit cards, that would definitely raise the reward but now sure by how much.
On an abstract level quite often where I have to process things in a certain order and similar problems. It seems to me that this happens when I'm rather overworked
wow, those guys are just ...
"Full SSL" is still useless against an advanced attacker as it does absolutely nothing to prevent MITM.

Only "Strict SSL" does, which makes sure it's a valid CA-signed certificate.

What we need (and what myself and others have requested) is Full SSL with fingerprint checking so you can keep security with a self-signed cert.

I honestly think CF should remove flexible SSL and full SSL as options - they're just too vulnerable to be valuable.
UIX Testing: How to Find Your Site's Mistakes
This is similar to my experience (iPhone 5S, 8.0.2), though often I don't even need to reboot. Open the Health app; no data; close it; do something else for 1-2 minutes; reopen - data is now visible.
While you are right that /dev is typically a filesystem provided by the kernel (these days, previously it was a normal "static" filesystem), bash specifically handles various filenames under /dev when used in redirection, including /dev/tcp and /dev/udp. See http://www.gnu.org/software/bash/manual/bashref.html#Redirec...
Do you know why he killed himself later if he felt such regret immediately after the first jump? That seems odd, unless the first jump caused enough problems physically for him going forward?
My biggest pet peeve in the world of data storage is that the most powerful ideas from relational data theory are still mostly locked up in books and papers, and most programmers who think they know what "relational" means aren't aware of the full picture.

The people who did all the pioneering work on the subject (mostly E.F. Codd and Chris Date) seem to have made several blunders in trying to popularize their ideas. For example, one of Date's later books ("Go Faster: The Transrelational(tm) Approach to DBMS Implementation") contains some very useful ideas. But it was written in 2001 and not published until 2011, because he was working with a now-failed startup that was trying to keep it all a trade secret.

Most of their writing is not available online. You have to buy their books. Which is an author's prerogative, but seriously limits the reach of the ideas.

The world thinks it already has relational databases that are good enough. Convincing it otherwise requires a web-savvy marketing approach that has so far been lacking.
thanks for sharing this! I've already built a few single page apps, and found that the challenges are often not worth the result :(
>> It's ironic in the Alanis Morissette way.

No, it was calling name callers incompetent, which caused an unintended self reference :-) I suppose it's not irony, but I don't think it's as far from it as Alanis.
The real story is that Uber leaked confidential information without consent. The discussion about Lyft is tangential.
Bang-on. But it's not just startups, it's companies - period. Stallman, love him or hate him is correct - in these cases, you're the product. If the source isn't open, or at least if enough of it isn't open, you can't trust the company.

My favourite, most gregarious example is Privacy Polices. Sure, in certain jurisdictions (i.e. mine) they're legal documents. But equally, a company could bury in their terms of service something along the lines of 'We, the organization, to the best of our knowledge abide by the Privacy Policy. In the case where this is untrue, our liability is limited to XXX'.
Sounds like Google's toolbar pagerank, which was a neat way of seeing the very generic "relevance" score Google assigned to a page.

Then Search Engine Optimization really started catching ground, and some SEO's would obsess about that number, going through all kinds of work to manage that number, and basing business decisions (such as: should we link to this site? should we request a link from that site?) far too heavily on that number, as opposed to the actual business relevance of what they were doing, and as opposed to whether it would be a useful result for their own visitors (or those of the other site).
Note on SumAll

All users who use SumAll should be wary of their service. We tried them out and we then found out that they used our social media accounts to spam our followers and users with their advertising. We contacted them asking for answers and we never heard from them. Our suggestion: Avoid SumAll.
Nope. Its just an excuse people use to be dickbags or to justify dickbaggery. http://en.m.wikipedia.org/wiki/Dodge_v._Ford_Motor_Company

> More recent cases such as AP Smith Manufacturing Co v. Barlow[2] or Shlensky v. Wrigley[3] suggest that the approach in Dodge no longer represents the law in most states, including Delaware, which regards the balancing of stakeholder interests as within a director's business judgment. Dodge has not been expressly overruled, but ceased to represent the law in most states.

Courts will bend over backward to defer to an executive's business judgment when there is no conflict of interest or similar wrongdoing in play.
Scala has value types & (limited to same-method recursion) tail call optimization.
Keep Users Coming Back with Good Search Design
What good would that do? A self-signed cert is about as secure as no cert at all. (Unless they implement their own form of certificate pinning for the origin, which would cause problems for sites with multiple certs on the same host, which is quite common)
In order to obtain value from anything, you have to exist. So, the value of nonexistence is always going to be zero. Unless your current existence has a negative value (i.e. constant pain, severe depression) existence is always preferable. Nonexistence also has the opportunity cost of all the things you can do if you continue to exist.
https://soundcloud.com/floatingpoints/sets/shadows
http://en.wikipedia.org/wiki/First_normal_form#Examples
limit your use of cash altogether. find a credit card deal that won't charge you extra fees or give you non-market rates when making transactions in other currencies.
I think the public educational IT system should not be outsourced to the private sector, where schools completely lose control of the data and depend more or less on the good will of the company. University courses should not be organized by Facebook and pupils should not be forced to use IT systems of non-trustworthy companies like Google, which earn money by profiling their customers.
Maybe my view is too German, but I think of education as an sovereign function of the state, where everything (theoretically) can be controlled by the citizens (yes, I know that this is some kind of optimistic). We should teach kids to think critical about centralization of data and knowledge and show them how to manage their digital lives with free and open tools which respect the users rights.
If only this could be cheaper :(
"For a school or company, in which the computers are provided by the organisation itself, the Plan 9 way is very obviously better than insular systems."

Only if you can guarantee 100% (or close to) access to high-speed network connections at all time. The value of a computer with meaningful local storage and execution is that it continues to work when the network is gone or isn't performing well. And it takes a lot less bandwidth to send data to a user's computer and let local applications worry about dealing with the data than it is to send a full screen to the user, if you're talking about GUI. You can also smooth out latency issues a lot easier.

So I don't think it's obviously better in those cases. But it's very obviously worse OUTSIDE of those institutions. Here's Pike's description of his dream setup[1]:

"I want no local storage anywhere near me other than maybe caches. No disks, no state, my world entirely in the network. Storage needs to be backed up and maintained, which should be someone else's problem, one I'm happy to pay to have them solve. Also, storage on one machine means that machine is different from another machine. At Bell Labs we worked in the Unix Room, which had a bunch of machines we called 'terminals'. Latterly these were mostly PCs, but the key point is that we didn't use their disks for anything except caching. The terminal was a computer but we didn't compute on it; computing was done in the computer center. The terminal, even though it had a nice color screen and mouse and network and all that, was just a portal to the real computers in the back. When I left work and went home, I could pick up where I left off, pretty much. My dream setup would drop the "pretty much" qualification from that."

That's fine, so long as all you want to do on your home computer is do more work. But that's such an incredibly narrow vision of computing. The truly personal computer enabled a lot of things that weren't possible under the old dumb terminal model Pike pines for, and has made computers accessible to many more people. We'll continue to get some of the benefits of this as the "cloud" continues to be integrated into things, but I don't think we're going back to the "communal" computing model, and if we do, it's going to be because someone looks at the benefits of the personal computer model and finds a way to provide them in the communal model, rather than sitting there and pining about how it was in the old days before the peasants ruined everything.

1) http://rob.pike.usesthis.com/, thanks to tjgq for providing the link below
What is Ring and why should we care?
Once IPv6 is a bit more popular, will CloudFlare use a unique IP per customer to get around SNI or will it still be used on IPv6? It seems a bit like NAT; something that can safely die once IPv4 is gone.
That sounds really unprofessional.
Here's part of Wikipedia's description of the case you cited:

> By 1916, the Ford Motor Company had accumulated a capital surplus of $60 million. The price of the Model T, Ford's mainstay product, had been successively cut over the years while the cost of the workers had dramatically, and quite publicly, increased. The company's president and majority stockholder, Henry Ford, sought to end special dividends for shareholders in favor of massive investments in new plants that would enable Ford to dramatically increase production, and the number of people employed at his plants, while continuing to cut the costs and prices of his cars. In public defense of this strategy, Ford declared:

> “My ambition is to employ still more men, to spread the benefits of this industrial system to the greatest possible number, to help them build up their lives and their homes. To do this we are putting the greatest share of our profits back in the business.	”

> While Ford may have believed that such a strategy might be in the long-term benefit of the company, he told his fellow shareholders that the value of this strategy to them was not a primary consideration in his plans. The minority shareholders objected to this strategy, demanding that Ford stop reducing his prices when they could barely fill orders for cars and to continue to pay out special dividends from the capital surplus in lieu of his proposed plant investments. Two brothers, John Francis Dodge and Horace Elgin Dodge, owned 10% of the company, among the largest shareholders next to Ford.

I don't have time to read the actual court documents, so I'll assume this is reasonably accurate.

It seems Ford was trying to say "screw shareholder value, we're doing the right thing because we want to support society." This was of course a losing argument. But it sounds like the whole problem was the argument. Couldn't the argument be "we did the right thing and took a short-term loss, but we believe this is in the company's, and by extension the shareholders', best interest because [it will create tons of goodwill | it creates tons of good PR for us | whatever]"?
How to test if my server is vulnerable to the ShellShock bug?
Can't you summarise all of that simply: "a database schema should be able to represent only valid data".

e.g. employee, department, location is not good because that schema can represent invalid data: a single department can't be in 2 locations but the schema can represent that.

The same rule of thumb applies to types in programming: a data type should be able to represent only valid values. This is why sum types are superior to error codes: a function can return a result AND an error code, when what we usually want is that the function returns a result OR an error code. When invalid values are unrepresentable that makes a lot of errors impossible. Though sometimes your type system can't deal with all the constraints that you have, e.g. an array should be sorted (an unsorted array is representable but not valid => bad).
it allows you to submit bugs to apple
Overview of Shellshock vulnerability
If you replace 'steel mill' with 'data center', he was not so far off. At least if you don't count phones, tablets, laptops as computers.
Java EE 8 Is Kicking Off
I'm glad! It's possible to be happy without ignoring the facts of nature that you alluded to.
One use case where Postgres FTS fails spectacularly is when your search has to return results ordered by some field (e.g., timestamp). This is critical for applications that have to return close-to-realtime results due to the queried content being time-sensitive.

Neither GIN nor GiST indices support such document ordering. For a top-N query of the most recent results, the entire result set has to be processed. With common domain-specific words, this can be more than 50% of the entire document set. As you can imagine, this is insanely expensive. When you are in this situation, it helps to set gin_fuzzy_search_limit to a conservative number (20000 works for me, less if you expect heavy traffic) in postgresql.conf, so that pathological queries eventually finish without processing every result. Result quality will take a hit, because many documents are skipped over.

If you need any type of ordered search on more than a hundred thousand documents, do yourself a favor and use something else than Postgres.

I'm not sure what search back-end Wikipedia is using, but it seems like they are not quite immune to this problem either: https://en.wikipedia.org/w/index.php?search=a+the
What is gained and lost with 63-bit integers?
> Spoken like someone who never leaves Manhattan

That was my first thought as well.

For those who don't live in an "outer-borough", the way you obtained car services was by dialing a phone number, talking to a dispatcher, trying to communicate pickup and dropoff locations through the fog of accents, and then you have a 25% chance of the car showing up when promised, a 75% chance of it showing up no more than 15 minutes late, and sometimes 2-3 additional follow-up phone calls were required.

If I'm going from tribeca to the east village at 11pm, sure, I'm taking a cab. But if I need to come home from New Jersey, being able to press a button and get a car is a huge convenience.
Ask HN: Next Step for CIO Turned Bootstrapper/RoR Dev?
Looking for a bit of career advice. I started back in '99 as a developer, and was fortunate to make my way to CIO of a small IT service company. I like people, understanding businesses and how technology can help, and I always kept my fingers dirty in tech, but never really hardcore development.

Four years ago I decided I wanted to build software products, so I left for an opportunity with the federal govt b/c I knew it would provide me with the flexibility and income needed to still support my family while working on the side to build products.

I've build a few SaaS apps on the side, picking up some RoR along the way, but after 4 years of working in the govt, I'm losing my mind and am looking to leave and work back in private industry/for a startup, but am unclear on what I might essentially be qualified to do. In other words, I've got a well-rounded 14-year career, good at what I know/do but only have 3 years of RoR experience.

So my questions are these: Is it worth reaching out to companies offering to volunteer my skills in an effort to learn/solidify my skillset, or am I better off spending the next few months working on the fundamentals and then trying to make the leap out? Aside from focusing on RoR, any thoughts on where someone with my type of background might fit in?

Thanks for your time and assistance.
I wonder if Canonical could be talked into getting an SNI-enabled wget into 12.04. Though if it were me, my response would probably just be "use curl" (which does work in 12.04.

I don't know what the status is in Ruby. Python 3 supports SNI natively. Python 2.x does not with the included libraries, but can be made to. (You're shooting yourself in the foot by using Python 2.x's included libraries with HTTPS anyway -- it doesn't verify certificates. Oops.)
> If you SSH-ed into my personal computer and started typing into a file, everyone would laugh if you claimed that what was in the file was your data. You're not doing anything different when you type into Facebook.

Actually, I disagree on that detail. An account on a Unix computer, accessible by SSH, is a known thing with known cultural implicit privacy guarantees. I have servers, which I can certainly call “mine”, with users, who have SSH access. I would absolutely not consider any file they type into to be “mine” — it is theirs.
Is it? It shows a pattern of sleaze that raises the question on if Uber can be trusted.
Turn GitHub Issues into Pull Requests with Hub and Fish
$ ll /dev/tcp
ls: cannot access /dev/tcp: No such file or directory

That explains it, thanks.
Record censorship of China's social media as references to HK protests blocked
This is exciting. Lenses are really powerful and ought to be used in more languages to accompany immutable data types. It'd be nice to see if this technique can generalize to traversals and prisms as well. In practice, I use those two in nearly any lensy computation.

Using macros to pre-compile the lenses is clever, but feels like a hack around typed-clojure instead of being aligned to it. All of the information needed to determine a lens' action is available at compile time even prior to expansion. Can a van Laarhoven representation be made in typed-clojure that recovers this information?

> type-safe, efficient, concise, idiomatic and flexible handling of deeply nested data structures, and that's what we got. Prima facie, these were unreasonable requests - it's not as though other languages were lining up to answer them

and since the line was crossed: yes, other languages are exactly lining up to answer all of those. You don't even have to burn-in the choice of lens. It's exciting to see this technology developing all around, but it'd also be nice to see it with a bit more humility.
Apple's 'double Irish' tax dodge is coming back to bite them. Again
How much did you mine? :P
seeing the padlock will only tell you

Seeing the padlock has never told you much interesting to begin with.

You have to click the padlock and compare the fingerprint to a known good one.

Yes, nobody does that. And that's why SSL in the browser is a red herring (as far as 3-letter agencies are concerned).

Why no browser vendor ever tried to fix this basic design flaw is left as an exercise to the reader.
CloudFlare has never installed any law enforcement software or equipment anywhere on our network.

CloudFlare has never provided any law enforcement organization a feed of our customers' content transiting our network.

which is all great, except that the NSA is not a law-enforcement organization. It's an intelligence agency.
I think it's awful. I only finished it because we're discussing it in a book circle.
This is an increasingly important issue, especially for US citizens. Many foreign banks will not open accounts for US citizens (or residents) because of FATCA reporting requirements. This means that opening up a local account for local payments is problematic.

Additionally, if you truly are a digital nomad, you may find that your bank inexplicably cancels or suspends your ATM or credit card because it is being:

--used for the first time on an 'unknown' computer (i.e., at an Internet café)
--is being used from a country that you have previously not traveled to.

The bank security procedures usually require an automated telephone call to the SIM number in the US that you haven't used in months during US business hours (it doesn't matter to them if you are on the other side of the world) and if you do not answer they will reverse the charges if you were lucky to complete the transaction in the first place. There is, of course, no number to call because the lost and stolen card section is different from the funds authorization section. Worse, if you have a small community bank in the US, they may outsource card services and that company has no relationship with you at all.

The only banks I am aware of that are not flummoxed by international transactions (and whose debit cards may routinely be processed as credit cards, greatly facilitating US car rentals) are Swiss banks. But good luck trying to open a Swiss bank account as an American.

In SE Asia, to apply for certain types of visas you must show financial stability and this means cash in local currency in a local bank. Not being able to open a local account means further discrimination.

One would think that in this day and age a bank would set up an expat desk to handle these things. I've heard that Channel Islands banks are good at this, but I really don't know.

Law enforcement assumes that foreign banks=criminal activity. You would think that the US hadn't joined the WTO.
NYU Eats World: An alumna laments the rise of an imperial university
Cannot agree more with this. Open source software is a perfect fit with public institutions. I don't understand why any government uses proprietary platforms. It would be cheaper and far more effective to hire a dozen open source devs to cater a particular platform to the public's needs, and have it be open and free to use forever. Developers aren't that expensive compared to software licenses for thousands of machines.

As I understand, Germany and many European countries are heading in this direction.
Only a publicly traded company would be subject to Dodge v. Ford.

...or startups that have publicly traded corporations as investors (which is approximately all of them).

Don't delude yourself into thinking you can trust a corporation. Corporations are sociopathic by design, barely kept in check by threats of lawsuits and bad PR.
OCSP?
It's been 16 years today since the first commit of WindowMaker
Google Glass makes doctors better surgeons: a Stanford study
Here is a great list of a bunch of open source static site generators - some geared toward blogs and some to generic sites:

https://www.staticgen.com/

(not my project, just a happy user)
Scala value types and tail call optimization are just workarounds.

Since they aren't visible at the JIT level, there isn't any guarantee that optimized assembly code will be generated.

Additionally, it is very dependent on which JVM it gets to be executed.
How Magento Shopping Cart Price Rules Help to Create Promotions