skysight-inc/HackerNews huggingface dataset:
The important conclusion:

The core platform this application appears to be designed on is Fiksu (http://www.fiksu.com). Fiksu’s describes themselves as a “user acquisition” company, focused on analytics, social tracking, advertising, incent, and interest mining. ... Unlike most applications that incorporate analytics packages as a secondary module, it appears that Whisper is built on top of the Fiksu platform, where Fiksu acts as the primary application delegate, and the social networking element of Whisper acts as secondary to the application’s subject tracking and analytics core.

Putting the users unique Whisper ID into the EXIF data of uploaded pictures - now that was sneaky.
I sent a tweet to Noah offering to covert all costs of an export. We'll see what happens.
Sorry, I'm out of touch. I visited CJCLR a long time ago (maybe a year or two) and had the impression it's a work in progress and a lot of basic things are missing. Is that no longer true, or was my initial impression invalid? Can I start learning Clojure with it and expect it to work more or less like “proper” Clojure?
A great write-up on the problems associated with getting https up and running. It's no wonder huge swaths of the internet are unsecured. I recently had to set up SSL for a Facebook app at work, and jump through a lot of these hoops (whilst missing some too it seems).

So my question to HN is: What is being done to simplify this process and make it a simpler, more user-friendly process? (other than what Cloudflare have done).
Your post is so self-contradictory and illogical that I see little point in discussing this further with you.
Show HN: Lugg – Your on-demand mover
Wow, a typical bunk HN comment that adds nothing of substance.
It definitely implies they designed the board. Apple certainly designed their own board.

If Apple was buying fully-functional iPhone hardware that only lacked a case then it would be ridiculous for them to claim they had created the iPhone.

For you to say 'complete box' is misleading, because the plastic shell doesn't actually do anything, the bare board is functionally already complete.

The board is not a mere component, it is 95% of the end result.

And especially the wording of creating a model, then evaluating the performance of the board, then designing a case... creation can only apply to the uncased board in that paragraph. If they didn't make the board it's a pack of lies.
I will have to give that a try again. I had it working for awhile, but the drive disappeared.
In a time when mobile phones were scarce, putting them on a local area code ensures that a large portion of their usage (calling to and from landlines within a geographic space that actually IS limited) doesn't require additional long distance charges for everyone. These days it may seem like a quirk, but really what 20-year-old technology decision doesn't?
Totally! Arcadia is based on the Clojure-CLR port (an official project) maintained by David Miller for five years or so. It supports Mono.

We had to fork the compiler to introduce a small number of changes to make Arcadia work in Unity, though. Unity ships a very old version of Mono with their own changes, so stock Clojure-CLR would not work.

https://github.com/clojure/clojure-clr
https://github.com/arcadia-unity/clojure-clr
Fig still requires boot2docker, which uses VirtualBox.

See linked page at https://docs.docker.com/installation/mac/

Note VirtualBox is one of the only modules blacklisted by the Linux kernel not for being proprietary (it's Open Source) but because it's terrible.

http://www.phoronix.com/scan.php?page=news_item&px=OTk5Mw
> StartSSL doesn't generate it in the browser (on a secure piece of hardware IIRC),

You can also submit a CSR so that key generation happens on your local machine. Only the pubkey and metadata will be included in the CSR and get signed.
If your not then your missing out on utilising your resources, check out Mesos or Kubernetes for instance.
That's a very nice idea.

Of course, you sound like exactly the kind of sysadmin I'm not concerned about ;-)
Paying for hosting? They were making money from ads they put next to our pictures. They were using our content to drive traffic to their site. Without the user's photos, the site is worthless. They should have been paying users a cut of advertising revenue like YouTube does. "Free" means they're pocketing the profit for themselves.
Companies like coca cola and mcdonalds have to advertise that much because they offer poor quality products that would otherwise be irrelevant: https://news.ycombinator.com/item?id=8344345
Just happened again. The error is:

Line 128,493 - INSTALLER LOG SHARED BUFFER IS FUL

This time I only opened the log viewer briefly at one point during the upgrade, and again after several hours because it seemed to have hung again. I can't imagine I'm the only one who's affected by this issue. I'll report back when/if I find out how to fix it.
> This comes from Effective Go: https://golang.org/doc/effective_go.html#maps

> They explicitly call it the “comma ok” idiom

The "comma ok" idiom is the idiom of accessing maps w/ `thing, ok = m["key"]`, not the idiom of what to do with `ok` afterwards. Nothing there says to prefer `if ok {` over `if !ok {`.

---

I guess I can see a case for null-ability being more complex than not. I think the argument for them being simpler is that most of the time values are "actually" nullable (ie, the function can return nil and you should check for an error), in which case the implicit "pointers can be null" rule seems like a simpler mechanism than introducing option types (and, potentially, variant types or whatever other machinery will be needed to implement them).

As you said, the "return an err as well if the function can return nil" rule does a decent job of alleviating the complexity here. Compiler-enforced checks here seem like something that adds complexity (there's now more to the language), even if they do achieve stronger safety.
Don't backup or copy your private key. Should you lose your private key or it gets compromised you generate a new one and issue new certificates. And naturally also revoke your previous certificates.

And before you start pushing out SSL on every page you have, stop using public WiFi. They will always be insecure, no matter what you do. Tether your phone or use a VPN.
I'm really interested in using Docker but I'm having trouble understanding how to manage stateful applications, like databases.
I used Cloud9 for awhile and they were able to provide a pretty good search solution for remote projects. I just preferred having a local IDE.
In their defense, it's entirely possible that they simply don't have the capacity to handle the large volume of requests...
California readies pay-as-you-drive tax test
I don't believe they were trading with themselves. They were accumulating stock in the opposite direction to hedge their imbalance-only order. However, the way they accumulated that stock was done in a way that would impact the price received on the closing order.

So imagine they sold 10000 shares imbalance-only in the auction at 3:50. They would then buy 2500 immediately, slowly pick up another 2500 in the next 9 minutes, then do the last 2500 in the last second. The initial trades would get them into their hedge at a low average price, and the last-second ones would push the price of the closing auction up, maximizing their return on their imbalance-only order.

If you read the case, it seems like this didn't always work if they had slippage on the close or they got so aggressive that they would "flip" the imbalance and not get filled on their closing order at all, instead being stuck with a bunch of shares from crappy prices. The people trading with them in the last two seconds could also keep replenishing their orders and prevent them from spiking the price. Sounds like a dangerous game of high-stakes chicken.
Actually they vary by state in the US. Texas has wide ranging and draconian non-complete restrictions. California forbids them. I have worked in both places and I can tell you that California is much better from the POV of employee AND employer.
About HTML Email
Seeing as they're shutting down the company/service in a week, they're probably out of cash. While it sucks for your customers, that's what happens when you run out of money. It sucks for everyone. I'm guessing they were floating the company on personal funds in hopes the acquisition would go through, but it did not - so now they're doing everything they can to stop this turning into a personal financial bloodbath from the bandwidth costs spiral due to everyone rushing to get their photos before the shutdown.

Just an ugly situation for everyone.
I fear SSL isn't going to see wide adoption by normal people until two things are done:

* It's easier to set up. Having personally been through the situation in the article a time or two in my life, it sucks, and there's no reason for it to suck.

* The prices stop being extortionate. 10x price differential for a literal 1 bit change in the final product to make a wildcard cert? Fuck you! Everyone mentions StartSSL. Sure, the basic certificate is free.. if you don't miskey your domain name.. or you don't select the wrong options.. or OpenSSL doesn't get owned, in which case you get to pay $15 for the privilege of their server spending a few milliseconds of CPU time to spit a few kilobytes of data back at you that represents the thing you already had.

PKI as it exists today is a fucking scam. It's a scam because it's overpriced, it's a scam because it's exploitative, and it's a scam because it's incredibly easy to do things that render the whole exercise pointless.
Emacs 24.4 RC 1
Another good source: http://htmlemailboilerplate.com/
If you just want your site to "sit and do nothing", you still need to worry about security updates for software. Even with many static sites.

So staying up to date is worth it no matter what.
The state Senator responsible for this is up for election in 2 weeks. This is his opponent and she accepts donations: http://www.voteforshari.com/
> I don't usually complain about downvotes, but it's pretty evident that people are downvoting this because they disagree

I think you're getting downvoted because people disagree with your advice to the author. In other words, you aren't adding value to the discussion about what value the book can bring because your premise is rooted in a totally obsolete measuring stick (i.e. # of pages). The value of information/education is immeasurable. Let the market decide.
In fairness, the archive team is attempting to download 120TB of data.. which is going to cost Twitpic about $15K in outgoing data charges from Amazon.

Maybe they just don't have $15K to pay for this. (and that's not counting all of the users who are also downloading their data)
How to read METARs: http://www.wunderground.com/metarFAQ.asp
Clojure from the Ground Up: Debugging
I'm actually surprised that more countries haven't create specific remote worker visas; they get all the benefits of having a new citizen (ie tax revenue) without the work of creating or nurturing local industry to employ that person.
The first site you ever set up will take you 2-3 hours of screwing around. The next will take you about 20 minutes. After that, it'll take you 5-10 minutes per site. If you decide to go with CloudFlare, it'll take a different amount of time because you'll be setting up DNS through them as well.

It is worth it. Here's why: nobody is going to target your 10-visitors-per-month site directly. You are right, most people don't care. However, there are two types of attacks that will get you in trouble. First, where I decide to sit in a coffee shop and simply hijack every HTTP request. In this case, I am not targeting you directly, but you are susceptible. Even if you don't care about that (say, you know that none of your readers are coffee drinkers/public Wi-Fi users), a much worse situation is where a network attacker is able to attach a large number of sites hosted with e.g. a specific provider. Let's say I discover that Digital Ocean has a vulnerability where I can spoof your IP. I would then MITM all HTTP traffic to all DO hosts, and if you happen to host with them you are screwed. Note that Google doesn't care whose fault it is: they blacklist first, ask questions never.

So in short, it takes very little time/money, it's a skill you should have if you run your own site, and it's warranty against bad things happening.
I saw the recording of the presentation at StrangeLoop.

First of all, let me congratulate the developers.

Another idea that this presentation gave me was to profit from Clojure and ClojureCLR, as a mean to write portable code across Android and Windows Phone systems.

Specially given the anaemic support for OS APIs in the NDK for C++. At least Clojure gets an easier life to the Android APIs.

So, assuming that Clojure 1.7.0 gets an improved startup time and profiles, coupled with ClojureCLR 1.7.0, it would be a nice way to write portable code with native APIs.
I believe the point OP was trying to make is "if it hurts, do it more often" [1], hence it's worth setting up HTTPS for a personal static site not due to hijackings but to practice the best practices.

[1] http://martinfowler.com/bliki/FrequencyReducesDifficulty.htm...
Does your old 20" lcd screen have a CCFL backlight?

For some reason unknown to me, the light emitted by the LED backlight in my life (in an iPad 2) tend to cause a little unpleasant tension in me, but the CCFL backlights in my life (in an HP w2007 monitor and in a Samsung LN32A450 television set) do not.

(All MBPRs have LED backlights.)
Lead poisoning is a major threat at America’s shooting ranges
You can expect a full, "proper" Clojure 1.7 experience using Arcadia.
Let me make this simple then, your veiled insults aside:

There is a difference between public and private information, and you don't seem to know what that is.

We're discussing censorship of public information.

Why did you choose to invoke the NSA bogeyman in a discussion about already-public information?

Why do you think the "wealthy and powerful" will be able to censor information when the wealthy and powerful are massive failures at it already?
I believe the author was really focusing on "operational" complexity more than code complexity and language features.

For example, a language choice like using Python can add accidental complexity because it usually requires a container (uwsgi, gunicorn, etc..), sometimes a front-end reverse proxy (nginx, etc..), some way to package up your application and dependencies (tarballs, virtualenv, etc.). You also have to deal with deployment host issues like is Python2.6 required and available on your OS, do you have multiple apps with conflicting shared libraries that need to co-exist on the same host, do you need some system libraries installed on the hosts, are components compatible w/ each other (nginx x.y.z + uwsgi a.b.c) and can developers run that on Macs (dev laptop) and prod (linux).

I believe this is the accidental complexity the author is trying to highlight that can be avoided with Go.

I think if you look at the overall system (dev workstations, deployment envs, OS choices, CI, config management, ops, etc..), projects that use Go tend to have fewer components to manage and integrate and result in a simpler overall system.
If they had profits, maybe they wouldn't be closing down. Those ads were to pay bills and they are broke. Allowing massive bandwidth usage now is just throwing bad debt after bad.
Religion and birth control are both a question of indoctrination by the state. The Soviet Union and its satellite states managed to reduce religious belief fairly effectively, in the Czech Republic ~70% are atheist / non-believers, East Germany has similar numbers. They provided free access to birth control, abortions and infant child care. Of course none of this would be possible in most of the world, religious belief is too entrenched and there are no strong ideologies left that are prepared to fight it.
Clojure-CLR is the real deal, too - 1.7, transducers, etc. nREPL support's probably coming soon.
Yes. This was discussed at length with the Twitpic founder. He said something to the effect of: "don't worry, I'm working on a deal, trust me. But stop downloading the pics"
Apple Pay would let any app do this. The merchant could send a push notification to their own app on your phone, which would get the transaction details and request payment via Apple Pay, which would have already been set up on your phone.

The reason this doesn't exist now is because of the way banks and credit cards work. They're issuer-centric, not user-centric.

Your credit card isn't yours. It's your bank's, and it's issued in partnership with the credit card network provider, MasterCard or Visa. The credit card network provider has the relationship with the merchant, which is why some merchants don't take Discover or American Express. Both the bank and the credit card network make money off of fees from the merchant. Yes, it's you who has to spend the money, but you're not the customer of the two people with the power (the bank and the credit card network): you're ancillary in their equations. You're only valuable to the merchant, and the merchant would prefer you to pay in cash.

Apple Pay is the first to do this for the exact reasons they stated at the launch: they're not trying to make money off the transaction. They're making money off of you, the user, by selling you hardware. So it's in their best interest to give you this great feature, which is user-centric payment, abstracting away the merchant and the bank and the credit card network, because it sells you hardware.

Cell phone networks have the same problem; your SIM card isn't yours, it's your network provider's, despite being your electronic ID to them. There's no way for you to consolidate or control all these pieces of your digital ID, and there's no incentive with the way the industries are set up to allow you to.
There is a lot of Clojure code out there using Java interop. That said, a lot of "proper" Clojure runs across all three major runtimes (Java/CLR/JS) without any significant changes.

(while I'm here, let me also point out http://hylang.org in case you use Python - it's a nice gateway drug, if you'll pardon the pun)
Another subtle example of military camouflage was the UK Sherman Firefly of WW2 - which was a Sherman tank with a gun upgrade to a 17-pounder to allow them to take on German Panther and Tiger tanks.

As the size of the 17-pounder gun was quite noticeable and the Firefly Shermans were a significant threat to German tanks the German tank and anti-tanks crews were instructed to attack them first. So the guns of the tanks were camouflaged to make them look like the standard gun.

http://en.wikipedia.org/wiki/Sherman_Firefly
I generally point fellow sysadmins at https://wiki.mozilla.org/Security/Server_Side_TLS. Unfortunately, it doesn't include configuration advice for IIS.
.sketch file doesn't include bitmaps.
From my comment:

"...less stays in my pocket, which means that less will be available for me to spend on the local economy (though it should be benefiting us locals indirectly via taxes, or so goes the theory.)"

I'm not excluding it, just acknowledging that money paid to the city via taxation at best takes an indirect route to benefiting local actors.
Price assumptions based on page count?

Some people are willing to pay for brevity.
X-37B Military Space Plane Lands After Record-Shattering Secret Mission
It's true that number of pages doesn't say anything directly about a book's breadth or value ... although for technical books, and particularly user-manual type books, it's generally a decent proxy, because these types of books, by and large, have similar information densities.

That's not to say that there isn't any variation at all. This book may, in fact, be more information-dense than similar books in its category. But I was observing that publishers' prices and book length do tend to be correlated, warranted or not, and so to be competitive, it may be beneficial to price accordingly.

Edit: I just read through the sample chapter, and I didn't find it much more information-dense than other similar books. Which doesn't really surprise me, because you can only write so tersely when you're doing things like feature set walkthroughs. So I think I'm going to stand by my statement that for books of this particular type (a user guide for a piece of software), the length of the book is probably a pretty good proxy for breadth and a not-bad proxy for value.
Congrats. I watched the StrangeLoop videos as well, and have been itching to play with this -- I look forward to your next posts, and particularly like the exposure it brings to Clojure CLR.
Was this in the last 48 hours? I'm hanging out in #quitpic as rumbles if that's a better place to discuss.
Stupid question about this line on p.11:

> Respondent Athena cease and desist from committing or causing any violations and
any future violations of Section 10(b) of the Exchange Act and Rule 10b-5 thereunder

Why does the SEC order a firm to desist from committing violations of some rule? Aren't firms supposed to be not violating them anyway, regardless of whether they are specifically ordered by the SEC not to?
Show HN: Node.js Auth for Email/Google/Facebook on Web/iOS/Android with Eskimo
9. Make sure to renew your certificate ON TIME. Someone needs to be responsible and this person needs to have it in their calendar. If you're not up to that, because it is in fact your church group and you're not sure you'll be there in a year, don't do this.

Also:

> 4. Use a strong cipher suite such as this one

Check out Mozilla's best practice. They'll give you configs for different levels of support.

> 5. Use nginx, at least for front-end proxy. Your life will be easier.

Be careful. It's tricky to configure and if you cut and paste your configuration from the Internet you will open up to arbitrary code execution.
They're straight-up refusing to talk to Jason about giving Archive Team a data dump. There's an ugly situation, but only one side is precipitating it.
The current plan is to release on Monday.
> Don't backup or copy your private key. Should you lose your private key or it gets compromised you generate a new one and issue new certificates. And naturally also revoke your previous certificates.

I disagree. While yes a new key would be ideal, generally while you are dealing with the existing problem you will want to reach for the old key. I am not talking about situations where you misplaced the key or the server got compromised. I am talking about a situation where your current server/VPS suddenly dies and you need to spin up a new one fast. IMO, in this case wasting time on issuing/re-issuing a cert is inappropriate. On top of this, I tend to generate the certs on my laptop (I trust its RNG and physical security more than I trust the server). The key is already here. Now I can encrypt it with GPG with the full force of my 4096 bit key that only I can decrypt and store it fairly securely this way. I believe this is good enough for personal and professional sites. In the ideal case scenario, I'd also only keep these on an encrypted flash drive for even greater physical security.
FYI
https://twitter.com/whispersystems/status/522795025189462016
Predictions of 'Peak Oil' Production Prove Slippery
You're probably feeling terrible right now. And that sucks. But remember, shit happens. And while ultimately you are responsible for your own success, it's your CEO's job to build the organization and make sure that people––including you––are setup to succeed. And my guess is that the organization itself is losing a lot by losing you. Bummer.

But as you will quickly discover, the past is the past in startup world and the only thing that matters now is what you're doing next. Enjoy the endless possibilities that are future. Be proud of what you've built. And be proud of yourself.