skysight-inc/HackerNews huggingface dataset:
This looks like a very sensible workflow in general. The one thing that worries me is long lived feature branches. This workflow is fine as long as features never take more than a few weeks. If it takes longer you end up with bugs that have been fixed on the development branch still appearing on various feature branches. Also if you do a lot of refactoring on a feature branch while development goes on in parallel there will be difficult merges. It is especially problematic when work on a feature stops for some reason and an old branch sits around for months.

In general code should be merged to the development branch as soon as it is working, tested and reviewed, even if not all the functionality of the feature is done.
- Commands to create and sign keys from the command line without any
extra prompts are now available.

=> thanks god, at last
Even if you just want one platform, there is a lot of machinery you need even to boot up, load something from disk, access a USB keyboard and mouse, and display some text. ACPI and UEFI add considerably to this.

Then there's bugs and debugging. If you have a bug in your disk driver you can slowly lose data without noticing. Quite a lot of other bugs will lock your system and you need to debug painfully from whatever logs you can find. Building in a non-C language might make this a bit easier but won't save you from the hardware locking up.

Once you've done this, what have you gained? You have an OS with no userland and no applications. What bits of Linux/BSD do you actually want to replace with something else? The code is fairly modular and OSKit exists to help with this.

The nearest to what you describe is probably retrocomputing; people building their own considerably simpler systems from the ground up. If you want a simpler platform to start on without having to first build the platform, consider Raspberry Pi; the bootloader there effectively just pulls an ARM ELF executable off the SD card and starts executing it. Have a look at https://github.com/dwelch67/raspberrypi
One advantage of the status quo is that DigiCert won't be issuing certs for "facebookcorehttp.onion" or "facebookrotflbbq.onion" or whatever else you might be able to brute-force. If they were issuing those certs, it'd be hard to tell if you were on the actual hidden service operated by the entity known to humans as Facebook -- given how ad-hoc the name "facebookcorewwwi.onion" is, the cert isn't making a useful statement the same way a cert for "facebook.com" is.

And that's not even considering the fact that Tor's transport to hidden services implies authenticity... DigiCert is unable to usefully contribute to the claim "these people own facebookcorewwwi.onion" or "these people own facebookrotflbbq.onion" because Tor is already making that claim strongly, so the only claim they can help with is "these people are/aren't who you think of as Facebook".

If DigiCert were able to issue an EV cert for "Facebook, Inc. [US]", that would be another matter entirely, but the industry rules on EV certificates are tight, and in particular I think there are rules about being in the public DNS. I'd imagine one thing they're working on is being able to issue EV certs for .onion domains.
Totally agree. Testing should be done BEFORE merging, like this article explains: http://www.yegor256.com/2014/07/21/read-only-master-branch.h...
^. Simplest use case I can imagine for big data analysis on financial transactions, detect sudden spikes in income (esp. from different sources) and expenses, flag for further investigation. I'm sure the tax services do this. Banks too, to detect mules and other suspicious activity (repeated transactions of $999 to a different account are suspicious already imo).
30 years?! Erlang was published internally by Ericsson in 1986, so you were (or know someone) on the original development team or among the first users?
complete graphical rendering system

You can get a lot smaller than 5mb source on that if you're willing to ditch the X protocol. You'd end up with something like RiscOS, Amiga Workbench, PC GEM, or very early MacOS.

> shortest/fastest path to me being able to write my own entirely custom UX

Take your existing windowing environment and language tooling and ask it for a fullscreen framebuffer. Draw in that. You can be up and running in minutes.

> Preferably something I could do in HTML/CSS/JS and be able to run on a desktop/laptop/phone

.. oh. That requires an entire pile of browser machinery and is very far from 'bare metal'. Fullscreen node-webkit?
Not sure I agree with the conclusions:

1. Binaries: this isn't really an issue. We ship the JVM with anything that we do in Java. Unzip, run, done. Go is probably ideal there but it doesn't support embedded resources without some hideous hacks so you're still going to be deploying more than just a single binary in a lot of cases. CLR is pretty good at this as well.

2. Sockets: 0MQ/WCF/JMS/any stream abstraction wired up correctly.

3. ASN.1: Everything has ASN.1 libraries these days. I've never had to use one in the real world in any of the sectors I've worked in.

3. Let it crash: we do this. In fact we force threads to crash if they do anything bad by throwing an exception that isn't caught. All threads are designed to be idempotent, restartable and transaction aware. This is true in JVM/CLR at least.

4. Supervision: New thread, new state, no shared state. Not hard. PHP does this...

5. Inspection: I've seen the Erlang toolchain and it's pretty good but I'm not joking but inspecting and debugging the state of a system is better when there is lots of pooled knowledge (google) and lots of diverse tools. JVM wins there every time.

7. Messaging is not RPC: It's not in JMS either or WCF. It abstracts the transport away. In fact we have inproc transports in some cases that use concurrent collections to throw messages around.

8. Dialyzer: compiler, static typing (Java is less strong here to be honest than say C#).

I really like the idea of Erlang but the worse is better mantra applies here. It's easier to get staff, the knowledge when something goes pop is available, we benefit from the reuse of billions of lines of code written and tested by others if we pick a JVM. If we have to think a bit or throw some more kit at it, so be it.

Edit: just to add, I'm not knocking Erlang and quite like it in principle (I spent 2 months disassembling CouchDB to see if we could maintain it so it's not a foreign language to me), but the justifications in the reply aren't particularly unique ones nor are they major advantages.
LibreOffice IDE integration
I'm guessing they treat the first login via .onion as a new location and require some additional verification but subsequent ones as if they were coming from a known location. They could achieve the same by just treating all exit nodes as the same location but this looks much more elegant to me.
Did you miss the part about rebasing?
E-commerce, the makeover
Exactly. My parents have been running a company since they were both in their twenties. Starting in a country where literally no one has heard of funding or investment(early years after communism fell), they have started with nearly nothing. For the past 20 years they have been spending every second of their time at work, well into their forties. They kept growing, hiring more people(now almost 200), opening more shops, and they just couldn't manage, there's only so many places you could be in at once. Until in the last few years they hired a couple managers to take the load off their backs. Now they only need to visit our offices a couple times a week, are a lot more relaxed than they were some time ago. But my point is - they didn't arrive at this conclusion that they need managers by themselves. They always thought that if they spent 5 minutes left at the office the whole thing would fall apart. Someone else told them that they will burn our completely if they don't start hiring other people to do their work - and it worked. There's no point in having money if you never have time to spend it.
I agree, and I think a lot of people are at least intrigued by the idea of something like that. I'm guessing that that last bit is sort of like what an "artist colony" is, except more multidisciplinary.
It looks like rebasing is only done after the feature is complete. Maybe that was just a simplification.
Your country's government has been toppled by a totalitarian junta. You, as a leader of the opposition, use Facebook to mobilize the persecuted democratic counter-revolution. You don't want your government to know where you are, but you need identified access to Facebook.

There, that's why you need the Facebook .onion. You can have reason to fear the initial hops of your packets but not the destination.
Very nice! Would be a great project for an FPGA also, wouldn't need all of these wires :P
I don't know anything about Rocket, but I think the reason that it might actually work in YC's case is the size and success of its alumni network.
Interesting to see so many people are still using an iPhone 4s. I recently lost my 4s on a night out, but until that happened, I had no desire to upgrade, as it did everything I needed.

I suspect there's a lot of people like me who don't use their phones for 3D gaming, or other intensive tasks, so just have no need for a faster phone.

The only reason I've now upgraded to a 5s is because I couldn't buy a new 4s with more than 8 GB storage. Can't see myself upgrading from the 5s any time soon.
Physic Health Presentation
Repost

https://news.ycombinator.com/item?id=8560579
There are a thousand more or less easy ways to pull this, but it is hard to stay unnoticed at this scale. You'd guess that every plugin/toolbox/freeware used by hundreds of thousands of people is running on some test-boxes/honeypots set up by security companies/browser-vendors.
Qu'il est bon ce .VIN californien – JDN Média
Haha... I have to wonder why something so noncontroversial got downvoted without mentioning why I'm "wrong" about this.

I guess a knee-jerk, lizard brain fear response? Haha... Oh boy, I bet they'd really downvote me if I mentioned canvas fingerprinting. :P
Interactive map shows where native and new Berliners live
Lutris: an open gaming platform for Linux for game management
He's talking about dealing with binary data when he says 'binaries':

http://www.erlang.org/doc/efficiency_guide/binaryhandling.ht...

http://www.erlang.org/doc/programming_examples/bit_syntax.ht...

Erlang is really strong for that.

As to Java, sure, you can do anything with it, and do a decent job of it. But sometimes, as a startup, you are resource constrained, so if you can do more with less because you have a good grasp of a tool like Rails, or Erlang or Lua or whatever, that might make the difference. For a large company, Java is definitely a safe pick - no one ever got fired for choosing it: you'll be able to get whatever you need done, and "If we have to think a bit or throw some more kit at it, so be it." For a group like WhatsApp, Erlang seems to have been a good pick.
But I'm almost there
Fireserver Project Linux distribution that incorporates a Firebird database
Show HN: Interactive DOS prompt in an HTML5 canvas
Crowdsourcing nanoparticle cancer curing strategies
if MS charge a high price, biggest winner is apple.
Demonstrating the Philae Lander on the Space Station
I have an (unfinished) anti-bot PHP project that does customizable automated bot tests and blocking (both via 403 forbidden, and iptables). A custom version of this script is running at one e-commerce site since 2012. The 403 page has a "ticket ID" so the (very few) real users caught can still contact the website admins to be unblocked.

The (almost feature-complete) version running at the site above was able to automatically identify and successfully block a number of bots found scraping (or, attempting to scrape) the site since 2012. Though it wasn't an easy task, it has been quite successful at blocking most of them since their second (often first) request.

In fact since the beginning, and largely upto now, most bots and botnets can still be easily spotted. Some by their user-agent, some falling into bot traps ("honeypots") which are invisible to regular users, some failing to load images (something that a regular user wouldn't do), some crawling the site at an unreasonable pace... most usually don't provide an http referer, some even appear to have a number of cookies set for your domain.

It's not always easy to spot them though - some botnets can only be undone by blocking their full IP subnet, or permanently banning their (sub)domains, like .cn, .ua or .br (if you don't have legitimate traffic from those domains).

Unfortunately, I haven't had enough spare time to complete my project (which tests all of the above conditions to spot bots, but is not ready for a release), but I could if there is some market - or I could sell the project if somebody is interested.
wrt point 1, that's poor phrasing, when he says binaries, I think he means binary data, not executables.
ZeroMQ gives you the same but better: messaging in any language. That means you can interface to any component you want written in any language you want. Also hiding native sockets, which means networking is not 1:1 but based on scalability patterns. At some point people will realize what a big deal that is.
> 1. Binaries: this isn't really an issue. We ship the JVM with anything that we do in Java. Unzip, run, done. Go is probably ideal there but it doesn't support embedded resources without some hideous hacks so you're still going to be deploying more than just a single binary in a lot of cases. CLR is pretty good at this as well.

Not sure you read / understood what that point was about, due to its native binary types, tail recursion and pattern matching make dealing with binaries easier in erlang than most other languages

As far as most of the other points, you are mostly agreeing with the statement "nothing is impossible with other languages compared to erlang, but its better designed for this"

PHP does not so long process thread supervision (I mean it can but close to 0 people use it that way), Being able to inspect running processes is useful as well as the fact google is helpful, the JVM's entire ecosystem isnt based around a let it crash concurrent process isolation philosophy and java in particular is one of the worst offenders at having to ember error handling code at almost every point of your application logic
https://news.ycombinator.com/item?id=8571868
I think we will arrive at a future where it will no longer be legal to create such software. The FBI will then go after the developers of said platforms.

Of course they will still go after the large sellers and such using traditional investigative techniques.
GnuPG 2.1.0 with ECC support released
Give us some super strong privacy legislation that I can trust and believe in, and I'd buy this in a flash.

But as it stands today, this is a dangerous and creepy product.
How to Really Be Successful on Reddit
I don't think it's a problem having a lot of interesting stories, even if they aren't related to hacking.

For example I don't care about web development and Javascript, but you can see a huge amount of those sometimes.

Hacking is not just about coding and IT. You can hack basically all aspects of life. Coming across a topic that makes you think how to address and resolve an issue can be a hack as well.

I love this site because it's not biassed and covers a lot of things.

And lastly, look at the 'Guidelines' for regulations.
I too was surprised how the listing of all the things that were lost (really important things in life) were suddenly swept under the carpet with "the experiences.... were priceless".

I don't think that the experience of not seeing or having a family and not having a life (traveling or hobbies) is a priceless experience!!!
Yeah, but censoring in Bing Maps is a bit "if a tree falls in a forest"...
Thanks for the clarification! My bad.

Yes it is far superior from a representation point of view at least there. I have no doubts about that.
It's a perfectly accurate characterization.

The NRA's entire schtick since 2008 has been, well, um, pretty much what I said. Plenty of analyses running around of ammunition prices/shortages and their relationship to the frankly vicious campaigns run by the NRA and other even less reputable organizations on its side of the issue.

What is juvenile is continuing to act -- and see this thread for examples -- as if reasonable gun policies are being held back by extreme gun-confiscation advocates who can't be trusted to know what they're talking about. Meanwhile, people die.
You sound to be in a bad way.

Remember, people are more important than things.

When you see African countries torn up and people fleeing with nothing, do you stop and think "why aren't they carrying all their important belongings?"
The belongings and "stuff" are worthless; they can always acquire things again. What is important to them is their family and friends.

You cannot easily acquire lost friends again. But you can acquire "stuff" again.

Things don't make you happy; people do.

Out of interest, what have you been working on?
Yes thank you for the clarification.

My point is more that regardless of the syntax, runtime or approach, the same outcome is possible without having to enter a risky niche.

PHP does nothing, but if you throw it in a prefork MPM module in apache, it does that.

Sure we don't let it physically crash and we handle the exception at the base of the thread and decide what to do, but the outcome is the same. Java error handling is absolutely fine and in some cases, far less painful that the "err" semantics of Go.
The government of the United States is not going to be held in check by people with rifles and canned goods.

We are past the point where the weaponry available to the average civilian is sufficient to form a militia capable of holding back the armed forces, should the armed forces choose to cooperate in suppression of the civilian population. Syria doesn't have the capabilities the US forces do, and it shows.

So if the point of the 2nd Amendment is to defend the people from the government through the threat of the people taking up arms against the government, it can be deemed a failure.
Buying a car
It is a serious decision to buy a car. It appears to be a financial commitment and everything should be carefully counted. That is why customers should be able to rely on the dealers, being sure that they will be given trustworthy information.
Find us on www.calemonlawinfo.com
What does this even mean? How can you use facebook anonymously?
1. Binaries refers to binary pattern matching, not how you build/deploy the software

3. it's not only letting it crash, it's supervisors, restarts, cascading crashes when the parents retried enought times. Yes you can do it in other languages, but in erlang it's already done and battle tested.

4. that's not supervision

7. in erlang sending a message to a process in the same cpu and in another server has the same syntax and it's the common way of building software, in other languages calling a method and doing a jms message are two different things that you have to deal differently.

8. I would add quick check to the mix, but yes, dialyzer is just a kind of progressive typing
Amazon Echo surveillance program. Always on. For only $199.
Linux in Antarctica (Nov. 1994)
Surely that's the claimant's problem, not Youtube's?
What you are missing is that your expressed attitude perpetuates the system which causes people to feel a need to purchase weapons with the expectation of actually using them to kill other people. And what you are missing is how to change that.
Passwordless WordPress Login with Clef
Right, so: that's a yes? If the stats showed your dependents would be in greater danger if you were unarmed, you'd still be disarmed?
I feel quite the opposite Tomte, a world without GPG would mean that the bad guys who want to invade innocents' privacy have an all access pass to our inbox. That world would be horrific.
Agree, and to look at it from a different angle - to me writing Erlang felt like I was writing config txt files to some underlying system. The system performs good following your "config" but all the hardcore feel is lost for you.
1. I don't see how this is related to working with binary data.

2. Apparently you haven't worked with Erlang. The point here is you don't
write much networking, you write message handling exactly in the same manner
as you would for communicating inside the application, without any networking.
0MQ, WCF and JMS don't even remotely resemble the operation model for network
connectivity in Erlang.

3? (Let it crash) And you needed to specifically design your application,
including supervision (you do have it, right?). Erlang provides all that
already.

4. You didn't get what supervision is about. It's about restarting process
when it crashes, crashing all the related processes and aborting when
restarts are too frequent.

> It's easier to get staff,

It's easier to get some staff, but it may be much harder to get good
staff. Signal-to-noise ratio is very bad among Java programmers. And it's
quite hard to find bad Erlang programmer once you find somebody who can write
in Erlang (or learn it quickly).

It's not that Erlang provides one specific killer feature that makes it great
choice. It's that Erlang provides plenty of nice things already built in, and
all that sums up to a platform that one would want to use every day. You don't
have good binaries syntax on top of JVM. You don't have good logging framework
in standard JVM. You still need external libraries for sensible network
programming. You have to design your application specifically to handle
thread failures. You can't just spawn a thread for every request running and
be done with the job. You don't have a distributed soft real-time database.
And the list goes on.

You just need to do much work before you even start programming, and then to
manage all that (which is no easy task), just because your platform doesn't
provide any of the mentioned things and its working model is less convenient
for writing network services.
There's also the problem of being sure your conversions are attributed to you.

But these aren't that much of a problem in practice, really. See how affiliate marketing works: it's CPA for all intents and purpose masquerading under a different name. The biggest difference might be that the vendor will contact you, rather than make some kind of bid, if he thinks you've the right kind of traffic.

If your audience is interested in a particular product, you quickly discover it through common sense and trial and error, as you can normally see the click-through rates.

Also, a big ticket item with a low conversion rate sometimes earns better than a smaller one with a high conversion rate. As such, maxing out your ROI is really a matter of seeing what contributes to your bottomline.
I just posted this Linux Journal article from 20 years ago, "Linux in Antarctica." We've come a long way.

[0]: http://www.linuxjournal.com/article/2843

[1]: https://news.ycombinator.com/item?id=8571947
Ask HN: Have you ever rejected a project based on programming language?
Warning: Your company's proxy may flag this up for adult content and nudity. There isn't any, on that page at least. Maybe there's some elsewhere on the site, or maybe it's just overreacting to the URL.
Happy Friday the Vintage Video Taylor Swift’s “Shake It Off” Was Meant For