skysight-inc/HackerNews huggingface dataset:
I work in IT at a major Canadian University. I hear what you are saying, but the solutions provided by universities IT departments are usually sub-par to completely not useful. There have been attempts in the past to partner with other schools and develop solutions jointly but are often cost over run disasters.

It is really hard to attract any top development talent, or even try and convince current employees to stay up to date with current trends. Lots of development teams are stuck in old waterfall mentalities on huge java stacks.

We have laws that protects students data and doesn't allow us to host student or even employee information on U.S. servers. Provincial laws and mandates handed down from deans because of the Homeland Security Act hinder the use of any sort of SaaS's. It makes it really hard and disheartening to provide and develop good solutions.

I can't suggest someone go use certain survey tools, or use mailchimp to handle a small campaign for example. I am not supposed to promote the use of Google Drive or Dropbox for day to day use with other staff because of fear they will start storing data they aren't supposed to on it. We often end up with sub-par self hosted copies of great applications, but no one wants to use them. Google classroom looks really cool but there is no way any schools in this province would be allowed to use it.
Which Shellshock logo should be used?
Lets get a feel from the community on which Shellshock logo should be the official one. Did I miss any?

Vote here:
http://goo.gl/forms/Hul5NdbRUk
Violence Is Mine
Show HN: Purrrl – file sharing for developers.
Because learning new products each semester or term is a PITA? Just imagine how long books last in a curriculum, there is nothing that iterates quickly in education. A question though is do all teachers use the same software in a school or is it all ad-hoc?
> QEMU

Don't.

I developed a from-scratch operating system as part of my PhD thesis. We initially ran it on qemu due to its speed and simplicity, but the truth is that while qemu would run something developed on real hardware, it would also run a lot more. What it accepted was very, very loose and when you developed for qemu, you generally couldn't take it and run it on real hardware without days worth of debugging and trying to figure out where qemu did things just a little more loosely than actual hardware did.

We ended up using Bochs for that purpose, which is a lot slower but a lot more faithful (and unfortunately lacks a lot of secondary hardware that's important, but it will take you a long time in development before you hit that particular limitation).
A minimal WordPress theme for bloggers
This is the nail-clipper defense. For cases where a terrorist might take over a plane by threatening to give people tiny cuts or jabs, taking away nail clippers 'protects enormously'.

How often have you encountered read-only network access? It doesn't happen in reality; even the middle hop in a route has total control over the flow of traffic and thus can terminate it and mitm on reconnect. In any case, confidentiality is next to worthless without integrity and non-repudiation.
google voice. google browser sync. google send to phone. google wave.

then there's a list of things that are STILL around but have stifled competition anyways: gmail (hopefully people might get behind mailpile but i doubt it), gtalk (again, we have to wait another decade at least before a sensible IM standard is used), G+ (how many in the tech community have moved from one company (facebook) to another (google Plus). Just because they haven't axed a product like they did with reader of voice doesn't mean they won't misuse their power. Look at all the features they've removed from google maps because "mama google knows best". And no one dares to compete with them.
Some Things Are Just Hard
Tragically, the larger the organization, the more likely computers are to increase manual labor and repeated data entry, rather than reduce it. In the days before automation, you'd have simply written a letter on a piece of paper, in a second or so per student. I am not surprised to hear that "designed by committee" results in replacing something fast and easy with a long complicated process.
> What I dont understand is how they will be doing this at no cost.

The same way that they're doing the first-mile encryption at no cost, by partnering with a CA that will sign certificates for free. StartSSL (http://www.startssl.com/) has been signing certs at no cost for years.

The marginal cost for a CA to sign an additional cert is negligible, particularly when there's no customer support involved (i.e. Cloudflare customers won't be calling Comodo or Globalsign's support numbers).

> It looks like the certificates being issued automatically are to "xxxxxx.cloudflare.com", and not to the origin domain.

Not having one in front of me, I can't say for sure, but they have to sign the cert for the origin domain or the browser wouldn't give you a padlock when you went to the origin domain. Certs may contain extended Subject Alternative Name fields that include other hostnames for which the cert should be considered valid. I'm guessing they're using something like this to add the origin domain alongside the xxxx.cloudflare.com domains. This is traditionally how you can have a single cert which works for both the root domain as well as the "www" version of the same (i.e. yourdomain.com and www.yourdomain.com use the exact same cert).
Actually, that aspect of selfishness is a part of the barrier keeping me from it. It's a terrible thing to inflict upon the people close to you. And yes, I've been pretty depressed sometimes.
Vote here: http://goo.gl/forms/Hul5NdbRUk
I am going to sign up in hopes that these hot girls on beaches will flock to me.
Cross-platform DSLs in C#
Posted upthread but it's important enough to repeat:

> qemu

Don't.

I developed a from-scratch operating system as part of my PhD thesis. We initially ran it on qemu due to its speed and simplicity, but the truth is that while qemu would run something developed for real hardware, it would also run a lot more. What it accepted was very, very loose and when you developed for qemu, you generally couldn't take it and run it on real hardware without days worth of debugging and trying to figure out where qemu did things just a little more loosely than actual hardware did.

We ended up using Bochs for that purpose, which is a lot slower but a lot more faithful (and unfortunately lacks a lot of secondary hardware that's important, but it will take you a long time in development before you hit that particular limitation).
Thanks for the reply. English only. The only fuzzyness I've told my users about is "phrase here"~20 which would search for the given phrase within 20 words of each other. That helps for the imperfect OCR'd documents. A lot of the stuff we're indexing is best-guess OCR so it's nowhere near perfect. They are boring agreement documents that people have scribbled all over (setting up the redactions) so fuzzy is somewhat interesting to have. But it's not fuzzy in the sense of a typo, it's fuzzy in the sense that it's OCR'd garbage.
Ask HN: How much do companies contribute to Open Source
have been trying to find info on this recently. I wonder nobody has tried to solve this yet using some combination of web hooks with the FOSS license in a way so that companies/individuals can earn "brownie points" by releasing their fixes back into upstream or claim being originator.

I think what is missing in the GPL and other licenses is a machine readable field like:
"Organization:" or "Contributor:" which follows (maybe an XML like) namespace convention with which original releases of code could be identified by originator. Along with an URI (the mentioned web-hook) which can be called in order to register the new source file in a independent body which tracks this.
Any Montrealers looking to learn web dev?
We put together a part-time course teaching front-end web development in Montreal.

Happening end of October for 8 weeks in the old port.

If interested register for our free info session on www.decodemtl.com.
Just had the exact same experience, this is still great though. Looking forward to enabling SSL on my site (at no cost).
Some of the smartest people I know tend to do this. There's one Google engineer who is a friend of mine who's incredibly talented, she graduated from a top school, straight 4.0. She did her undergrad+masters in under 4 years without taking any summer classes. Extremely well respected at work -- yet outside of work she likes to wind down and read gossip magazines.

Another friend graduated valedictorian, went to work at Goldman Sachs, and on the offtime he enjoys listening to hardcore rap and ludacris.
That should be the headline for the page. And put all the marketing mumbo jumbo that only appeals to VCs lower down.
There's a draft for X25519 (as the key exchange algorithm is named now) already. Future use for new curves has been referred to CFRG by the TLS working group for recommendations; Curve25519 is one of the lead contenders. Discussion is lively, that's about all I feel comfortable saying right now. :)
Part of what is great about C++11/C++14 is constexpr's. It moves ll this "compute ahead of time" logic in to a simpler and more familiar structure.

There is actually a tremendous amount of value of precomputing a lot of work that is currently computed at runtime (the amount of wasted CPU in your typical C++ program, particularly at start time, is kind of crazy). It's just that the real hot spots in real world programs programs tend to revolve around runtime dynamic logic.
"The reason people buy fucking bitcoin is to stay anon"

That's just one reason that somebody might use bitcoin. There's plenty of others.
Do any of these tools show you a distribution of variable your trying to optimize? I am just thinking that some product features might be polarizing but if you measure, the mean it might give you different results than expected. I am thinking that's where the two-tailed comes in.
Mixed content (http vs https) on your site - how should we as possible clients trust a financial company who can't manage their content properly?

EDIT: and the eye candies on the front page gives me eye cancer. Seriously.
That's a one-sided view. The three-letter agencies may have done horrible things, but they are also leading the fight against even worse regimes, like Russia. There is no moral purity, and insulating oneself from the gray areas of geopolitics is a cop out.
How Bash Shellshock Bug Could’ve Been Avoided 7 Years Ago
8 THINGS YOU NEED ON YOUR BUSINESS WEBSITE
Threw my hat in the ring also: https://d324imu86q1bqn.cloudfront.net/uploads/asset/attachme...
When the internet annoys me, I try to hit the back button. Though sometimes, I just have to turn it off.

[Disclaimer: this was written instead of dumping gasoline on the fire with the first version.]
I don't understand this situation at all. Are people using bash as a secure jail and expecting it not to be able to arbitrarily execute code and access the user's complete environment?

I think the maintainer is right. Bash was never marketed as a secure sandbox and anyone who uses it as such is taking that risk on themselves.
> Using macros to pre-compile the lenses is clever, but feels like a hack around typed-clojure instead of being aligned to it.

I couldn't help but feel this way as I was reading it as well...forget compile time though. I wonder if there's any way/plans to eliminate this kind of type erasure period from typed Clojure eventually?
Definitely Yelp. It's huge over here.
Why are you anything but a 100% supporter of democratic self-governance?
Senior at the International Academy here (a public high school in Michigan). One of my classes uses Google Classroom.

I think that Google truly took a "Google Plus" look and morphed that into a website for teachers. I love how it has a clean and easy to use UI. The assignments are on a side bar, announcements are clearly displayed in a "stream". You can easily post a message to your class, and you have access to everyone's email (making it easy to communicate).

Teachers in my school have used three platforms. Moodle, Google Classroom, and Edmodo. Quite frankly, I have come to like Edmodo much more. They're identical to Facebook, but the layout is so much better than the alternatives (in my preference). Edmodo has truly thought everything out.
How Amazon Could Improve Its Prime Landing Page and Boost Subscriptions
John Cleese will now fine you a herring for whistling any tracks by the Beatles.
http://www.w3.org/TR/html-markup/p.html#p-tags <p> don't need closing tags

i prefer closing tags personally, but its not required.
Will the U.S. National Academy of Sciences Fumble Its Reassessment of GMOs?
How to Convert Octopress Blog to Use Discourse Instead of Disqus for Comments
I know how the banks are gaining revenue on me, and I sleep safe knowing that they benefit from having me.

Your case - everything is free, are you going to use the bitcoin reserve, similar to banks? I am not buying the fluffy ponies story, hiding the revenue is just making you look suspicious.
We're launching the exact thing you describe which also includes an API later this week. We don't plan to be a data broker just to let you backup all your data from any source and provide you with an API to access that data. We're Muxy.io
If you really want to understand how excited Jeremy Allaire (CEO of Circle) is about Bitcoin, I suggest you read the testimony he gave at the US Senate hearing on Bitcoin in November 2013. He was 1 of the 7 witnesses invited to testify: http://www.hsgac.senate.gov/download/?id=2369099f-b70d-42e2-...

I do agree though that the Circle.com website is vague. What they offer as of today is buying and selling bitcoins. I believe the website is vague because the company has multiple other products coming down the line (some speculation: payment processing like BitPay, a Bitcoin-backed credit card, etc) and Circle does not want to advertise itself as a Bitcoin-exchange-and-nothing-else company. From what I have heard from Allaire in the past year, they don't even seem to want to restrict themselves to the Bitcoin currency, but may work with alternate crypto currencies in the future. So how could they advertise themselves? "Crypto currency service provider"? The general public does not know what a crypto currency is. "Digital currency service provider"? This sounds almost as bad.
10 years ago, people would have welcomed this. Today, the brand Google is a red flag for any school that cares about their reputation and any parent who cares about their child's privacy.

It's utterly unsellable unless Google follows the old "evil" Microsoft route and simply bribes schools. And even that won't be enough to counter the shit storm that will hit any school that delivers the privacy of it's students into the hands of Google.

(The link sends me to the Dutch version of this. Google is seriously tone deaf it they think they can still sell this here.)
Swift Code Samples
Yeah seems good and I will check it in depth. It seems not provided out of the box, but I assume I can use MS SQL/HDInsight as a backend, instead of Redshift? Maybe you should consider including Azure as an infrastructure partner. I'm a consultant in the non-valley space (rest of the world). Lots of folks like me are looking for what you've developed. Most are pretty big MS fanboys. Just saying :)
I thought his comments on management were quite interesting regarding how management would have to change.

""" Our greatest managerial failure rate comes in the step from middle to top management. Most middle managers are doing essentially the same things they did on their entrance jobs: controlling operations and fighting fires. In contrast, the top manager’s primary function is to think. The criteria for success at the top level bear little resemblance to the criteria for promotion from middle management.

The new top manager, typically, has been promoted on the basis of his ability to adapt successfully. But suddenly he’s so far away from the firing line that he doesn’t know what to adapt to—so he fails. He may be an able man, but nothing in his work experience has prepared him to think. He hasn't the foggiest notion how one goes about making entrepreneurial or policy decisions. That’s why the failure rate at the senior-management level is so high. In my experience, two out of three men promoted to top management don’t make it; they stay middle management. They aren’t necessarily fired. Instead, they get put on the Executive Committee with a bigger office, a bigger title, a bigger salary—and a higher nuisance value because they have had no exposure to thinking. This is a situation we are going to eliminate.

From experience, I think this is still somewhat apt today in that we push people to go through the grunt -> middle manager -> upper management chain with a detour through an MBA program possibly tossed in for good measure rather than grooming people to think and develop a different kind of leadership. It's an interesting thought.

I'm not sure how applicable it is to entrepreneurship as to small to mid-size companies, but I think it's worth nothing.

Interesting stuff!
This is a configurable setting in Chrome.
Oh god help us. No wonder social engineering is still one of the more effective hacking methods :\
Show HN: Valcu – DIY Startup Incorporation, Setup and Corporate Management
Not a lawyer, but the Google privacy policy does seem very nice to the student here: http://www.google.com/policies/privacy/#nosharing

This is to contrast it with the privacy policy of other systems like Canvas: http://www.canvaslms.com/policies/privacy-policy

Selected out of context quote from the Terms of Use: "You warrant that the holder of any worldwide intellectual property right, including MORAL rights, in Your Content, has completely and effectively waived all such rights and validly and irrevocably granted to you the right to grant the license stated above." Caps to add emphasis.
It's called "the password file" for historical reasons, the same way we "dial" phone numbers.
+1 for http://keen.io
> Not having one in front of me, I can't say for sure, but they have to sign the cert for the origin domain or the browser wouldn't give you a padlock when you went to the origin domain.

Correct and under this scheme you wouldnt have a HTTPS connection with the origin site by default. The automatic configuration of Universal SSL is their "Flexible SSL" set up, where Cloudflare communicates with the origin server unsecured, but the connection between the client and Cloudflare is secured via a generic SSL issued to a subdomain at Cloudflare specific to each user account/domain.

If users tried to hit the site directly (such as when Cloudflare throws up those overload errors where you are able to circumvent their network) they would not get an encrypted connection.

If the customer then sets up a certificate on their own server then they will have a "Full SSL" connection, aka end-to-end encryption. The details on how this can be set up for free are forthcoming from Cloudflare.

There seems to be three ways of doing this: Their contact with Comodo/Globalsign also allows for more certificates issued directly to the origin domain; the origin domain will use a self-signed certificate which Cloudflare's network will trust (also will keep the origin domain reliant on Cloudflare to get trusted HTTPs); or they could be using StartSSL's free certs but given their partnership with Comodo/Globalsign this is unlikely.
Seems nice at first glance, but where the topics start to get a little less trivial (where, for example, the brokenthorn series on OSdev stop being relevant as well: the harddisk driver), the draft ends.
I certainly agree with you and I feel the same way but we aren't corporations (well, I'm not and I'm assuming you aren't either). I host e-mail for many others on my personal mail server and the only times I've looked at someone's mail was to troubleshoot an issue (and that just involved grep'ing to find the right file (maildir) and then examining the headers).
Why it’s critical to find early customers outside of Silicon Valley
If you arrive at the conclusion that there is no point to any of it, why not end your life on your own terms?

Because... If you don't believe there is any point to life, what makes you believe there is any point in death? At least with life there is a possibility of change, and capacity to help others who don't share your outlook.
My numbers are from the OpenBSD ports tree.
Collaborative Mathematics with SageMathCloud and Google Cloud Platform
Getting rid of scores on the top 10 was a step in the right direction, but ultimately the long-term goal should be to get rid of scores for the top 2000.

Slashdot used to have a thing where your karma would eventually just say something like, "Lots".
Cloudflare has offered SSL & SNI for paid customers for ages. You're missing the point.
Will Cloudflare take any self-signed certificate in that scenario? I assumed you'd have to confirm the fingerprint (essentially pinning it) from within Cloudflare interface.
Single Speed Camera on Ocean Parkway Pumped Out $77,550 in Tickets in One Day
Not new.. dated 2009.

Oracle seems to be doing alot of the lately where they are posting really old collaterial
Spanking Isn’t Culture. It’s a Cycle of Abuse
I will post for my kids who suffer under the same restriction, that it's yet another email address they don't/won't use, but the admin types will only use it for CYA purposes. So risk adverse administrator sends email to the unused address that its "dress like a hippie day" on thursday and 99% of the students don't check an unused addrs so they never know.

"Obviously" they just need an email forward feature, but of course that would require admin effort for the kids that screw it up or intentionally create mail loops or mess with another kids account, so for CYA reasons that can't be done.

So the net effect is we've gone from a modest amount of paper correspondence to no correspondence at all because the tech doesn't work and nobody is interested enough in the message to fix it.

Another problem is for privacy reasons each kids email looks like "a java GUID"@something.k12.edu and nobody wants to use an address or username like that. ts impossible to remember their email addrs or passwords (they're written down on stickers on their devices) but I think it would be funny if its not "a java GUID" but actually their SS numbers run thru md5 or something even dumber from a security perspective.

As an adult, I have an email address like that from my cable company. I don't even know what my cable company email addrs is, much less its password. I've never used it and never will. God only knows how much marketing spam the cable co has sent to it. Maybe electronic bills too, who knows.
"Owners of the copyrighted works will only be able to sue if the parody conveys a discriminatory message.

"It would then be down to a judge to decide if the parody is funny."

Can't wait to see that lawsuit...
I think - please correct me if I'm wrong - that Ada has pretty much the same problems as C if you use manual dynamic memory management. Ada supports Garbage Collection in theory, but it is optional, and I don't think many implementations actually supply a GC. Especially since Ada apparently is often used in realtime systems where dynamic memory management is usually avoided altogether (there is a subset of Ada specifically designed for building realtime software that explicitly prohibits any dynamic memory management).

Ada is - as far as I remember - much safer with regards to buffer overflows and bounds checking. But the bigger problem is probably that far more developers know C than Ada, and that something like an SSL library intended for widespread use needs to work with many different compilers and linkers. If you use GCC, I think it is possible to compile Ada code using the GNU Ada compiler and link it to C code compiled using the GNU C compiler, but I am not sure how things look if you use some other C compiler.
Next Gen Monitoring DataLoop.io takes 800K seed round