skysight-inc/HackerNews huggingface dataset:
Most security research firms have no links whatsoever to intelligence agencies, but every security researcher in the world gossips about those links. Clearly some do, though.

I have no firsthand knowledge of how these connections work (the gossip I hear tends to involve firms proffering vulnerabilities to middleman "commercial" firms --- not ZDI, by the way --- but who knows?). But I'm skeptical of the idea that security research firms are a real feeder for vulnerability intel to NSA, because based on the people NSA spits back out into commercial industry, they appear to have a very, very capable internal research staff.
At the time of this comment there are 96 comments with only 6 of them about Alaska. I find that to be an interesting commentary on HN commentaries. ;-)
if you add prison guards unions - which are formally non-profit, and that only means that they have no taxes to pay and they have nobody else to give the formal profit away, and as result they have all the money they collect to themselves - you'd get pretty much 100% of US prisons run by organizations with direct financial interests in growing the prisons in size and number.
I was surprised to find so much discussion around the concept of the 15-20 hour actual productive week here, because Hacker News is such a startup friendly environment.

I've often seriously questioned if I'm cut out for startups because of the relatively low number (much less than 40) of productive hours I put in when things are not pressing at regular jobs.
Sorry; I had read through most of it but was scanning for PHP or Hiphop. Honest mistake, I swear :).
I'm the same I'm a night person. When I was younger I operated the same as you. Chatting on irc during worktime and in the night do the work at home. But after marrying and getting kids I need the night time to rest...

Beste would be I work at home so during the day time I can take a nap. The kid wakes up early. Bring him to school. I take a nap. Pick him up again take some time out with him and when he sleeps I work. But because I have to sit at work I have to work during my least productive time. Because I don't have the energy to do 24/7.

So before marriage and kids I had 2 responsibilities. Going to work and actually working. But after marriage I had more and I couldn't cater it.
PSA: Don't use OneDrive if you value your privacy:

http://cryptome.org/2014/11/ms-onedrive-nsa-prism.htm
Any kind of internal service that listens and accepts an API. Like you could put a bunch of monitoring agents on all your machines and those agents get information about your machines and report back to the service that makes use of Proxygen. Your service would use Proxygen instead of hiding behind an nginx or apache server and running via some kind of fcgi setup. The agents themselves could be using the Proxygen client to talk to the service using Proxygen server pieces.
"Tossing Algebraic Flowers down the Great Divide":

http://cseweb.ucsd.edu/~goguen/pps/tcs97.pdf
What is the least interesting vulnerability whose sale you have firsthand knowledge of that fetched more than $20,000?

Have you personally ever sold a vulnerability?
I assume that you're a software guy so I would hope that you would naturally understand the benefit of simplicity. Let's assume that a speeding ticket currently costs $200. What percentage of speeding instances do you think are currently fined? I'm going to guess far less than 1%. That means you can lower the fine to $2 per instance or probably much less and still be meting out the same expected punishment for speeding.

The goal of this fine is not to partition drivers into good and bad drivers. It's to incentivize good driving. Yes, good drivers are going to get fined occasionally but it will be a very small fine. Why try to make a more complicated rule that never fines "good" drivers? That will sometimes lead to drivers who decide to speed this once because it's free.
I think something does not qualify as "work", in the sense thedufer was using it, if you don't stand an appreciable chance of being paid for it. I think that's an important sense, but I agree that we need to be careful that this does not cause us to overlook or undervalue productive efforts where that isn't the case.
Sticks and Brains - Palo Alto - iOS Engineer - Remote Possible

Looking for an experienced iOS engineer to help us iterate on our bluetooth-powered messaging application: Lynk Messenger (http://lynkmessenger.com)

Current team has years of experience scaling one of the biggest messaging apps on the planet. We're iterating quickly and need help speeding things up further.

Remote OK, local preferred.
Actually, if what you want is to avoid heat loss, reducing the number and area of windows is a pretty good strategy. Simpler (picture) windows are also easier to secure than complex ones that can be forced open.

It's the same with roofs: want to avoid leaks? Make your roof as simple as possible, with as few penetrations as possible.

Very large, complicated projects are harder to audit, to the point of infeasibility (OpenSSL in its pre-heartbleed form comes to mind).

Originally, a lot of people who were against "software bloat" (like Wirth with Oberon) did it because they wanted to run stuff on affordable computers (minicomputers rather than mainframes in the 1970s, microcomputer rather than workstations in the 1980s). That reason disappeared thanks to computing power.

But now, with the internet as Serious Business where attackers create a constant barrage, it doesn't make much sense to run a "full OS" created for minis and workstations when all you want to do is serve some Web content.

Unix-as-a-server-OS is a historical accident borne of the BSD implementation of TCP/IP and the usefulness of Unix-running hardware in the early days of the net.
The Chemistry of the Colours of Blood
Yeah, the idea is that you like the products enough to buy them after you graduate. Microsoft does the same thing with Visual Studio directly with many colleges.
This paper certainly appears to be produced using the LaTeX 'article' template but not sure why the fonts look so bad. I have never had this experience using LaTeX myself.
There is a problem in the author's views, but its not what you pointed out.

On one hand the author feels she loses her cultural identity by trying to mingle with a while group. On the other she advocates diversity. And yes, she also feels comfortable when working in a predominantly black team.

I think the solution that she forgets to mention is having people of all groups equally represented (most or less) in any field. With that happening, I can see how nobody would feel like an outsider, and get to preserve their cultural prefernces and tastes, along with mingling with other cultures and races.

It doesn't have to be a black team, a white team and a brown team. All that is needed is people of all races in the workplace with diverse teams. That will balance things out.

As for "What can you do as a white person other than not being a racist and voicing your prejudices openly" .. I don't think there's much you can do. I guess those of you in recruiting positions can encourage people from all backgrounds to come up. Not saying give special treatment to minorities, but generally try to keep bias away from recruitment procedures. Same applies to promotions, relocations and the like.
Show HN: ProFellow – Fast, Easy Search for Professional and Academic Fellowships
Well, its semantics right? Gravity causes acceleration, so its a force? It can be treated mathematically as a curvature. It behaves differently in different frames, but so do electromagnetic forces.
it's physical work vs knowledge work. When I'm trying to solve a problem for work I sometimes find a solution while doing yard work.

I've been thinking about it at work for 8 hours no solution. But doing some mindless activity I found a solution.

With knowledge work we should think about the value you deliver not at amount of hours you put in.
Well besides the fun of hacking around and building little HTTP servers, I could see this being useful if you want to save money by running fewer instances of your HTTP service. For instance, if you have a widely deployed python webservice that isn't scaling well, you could rewrite it in C++ with very little boilerplate using proxygen's httpserver.

It's early stages for the proxygen open source project. Maybe further down the road we'll provide off-the-shelf binaries, but we think the library is already interesting enough to warrant a release.
I fail to understand how this article (and the research that underlies it) have shown anything more sophisticated than "interacting particles interact"... Can someone help me understand the novelty?
This is interesting - it opens up the possibility of the usual design/coding separation of concerns that web development has had entering into web browser game development.

Also, the CSS syntax seems very straightforward as compared to the WebGL I've seen, which I haven't ever really been able to understand just by glancing at it.
Could you share your setup - Distro, Desktop Environment, settings, etc.
I like this idea and wanted to make it (or something approximating it) myself, but I got hung up on the concern that a location-centric "Who's getting up in $CITY?" webapp would, after achieving some traction, turn it into a useful tool to facilitate the citation/arrest of some of my favorite artists and writers.

On one hand, all of these pieces already show up on Instagram nearly instantaneously, usually geotagged or at least in identifiable locations. But I just couldn't shake the feeling that collating that data might have unintended consequences.
i wouldnt like to try compiling my work projects on anything less than 16GB ram, never mind 2GB
I am well aware about the two plant species and their uses by humans.

The original poster said MJ, which is not hemp. Marijuana is psychoactive and hemp is not, though they are the same species. The economic idea of "replacement" is that one good (Coca-Cola) can be replaced by a comparable good (Pepsi) based on price discrimination or differences in quality. My point is that MJ can displace a comparable good (another narcotic like opium) but it cannot replace corn or cotton as the uses of all these products are different.

Now maybe you mean hemp can replace/displace cotton or corn? I definitely agree hemp can displace cotton but that's because the water requirements, fertilization and effort spent harvesting are so much easier for hemp than cotton.

I am really confused by your assertion that a cannabis farmer is going to sell their MJ "on the cotton market." Maybe you mean that resources that would have been spent purchasing cotton commodities will instead be used to purchase cannabis commodities?
mirage is anything but retro; it's an attempt to build an operating system optimised for running network applications by picking out just the pieces you need and implementing them efficiently and securely. more excitingly (at least to me) it's an os and ecosystem being built from the ground up in ocaml rather than c.

also note that in getting her blog up and running this way she has (a) gained some familiarity with mirageos and (b) contributed pieces back to the ecosystem that will let the next person who wants to do the same thing have an easier time of it.

linux was similarly impractical when it started out; early adopters who built and contributed valuable tools to it could doubtless have had an easier time finding existing software in an established environment that would let them get their job done quickly. personally, i'm very glad they decided to help linux grow instead.
How so? You mean by having the server send the user's info to the ad provider? That doesn't seem to be a common setup, because of the advantages of cookies for tracking users across sites. Maybe I'm missing something though.
The handheld phone is moving, the accelerometers track it, it's no problem; since beacons happen only every 10s, you should make kale juice and do stretches then look, or wait for the drone to spam light near them (because they're still black keys.) It's not an instant joy and the antenna gain to make it so...
How is this a diary for the 21st century? Why should I use it? How is it better than a text document? What does it look like?

These are all questions I ask myself before deciding to sign up for something like this.
CloudWays told me they deployed the same stack on AWS/Digital Ocean. I do specify what instance type (m1.small 1.7GB instance) vs 2GB DO droplet.
There is so much in this article that is disingenuous.

For example point #4 complains that Angular redefines Constructor to mean something else.

The controller constructor IS a constructor, it constructs an instance of a controller and can request and decorate(or construct) a new scope by injecting $scope.

But the debate aside... the quoted revision is over a year old! (It also hasn't reflected the behaviour of the controller constructor for even longer than that, but that's a separate matter.)
Tracking mobile usability in Webmaster Tools
That's really intriguing. Not sure I've seen anybody else do it that way. Thanks for enlightening me!
As stated, (untreated) depression is the top cause of suicide, followed by other mental illnesses.

What's interesting is that suicide is contagious. http://www.nytimes.com/2014/08/14/upshot/the-science-behind-...

Edit: The article is relatively weak. There's many more interesting case studies of nations and cultures that went from a near 0 suicide rate to sudden spikes.
What is the trick? I usually use "!!variable" to ensure boolean conversion so I guess I would have been fine?
This sounds similar to Kevin Rose's TinyBlog prototype http://www.youtube.com/watch?v=N6UW0JY5PUs
This is one of those moments where I'm utterly distressed by the lack of a solution to curb all the frivolous consumerism of the world.

I don't think frivolous consumerism is the cause, it's what humans will do to others to get ahead. In other words, greed. The people that run the factories don't view the people as human, otherwise they wouldn't be able to treat them like machines.
That is totally cool. It feels like watching an oil painter slowly work from something very abstract (layers of brushstrokes) to something very recognizable (a human face).
Article author here.

You're correct. It's new code that's calling into old, unrefactored code. Hence the casts. convert_input() is new, string_convert_ext() is old. As is mentioned in the article, I'm working on a refactoring of string_convert_ext() that will obviate the casting (and incidentally also some allocating).
Appresenter: Showcase your apps professionally on high quality 3D models
it's not really a discussion point, it's sneering at people for "reinventing the wheel", when the entire point of mirageos is to start from scratch and try to make a better wheel. i'm really having a "how do other people not find this as exciting as i do?!" moment here.
And a blog post introducing Dr. SaaS: http://rowansimpson.com/2014/11/06/dr-saas/
Need a Developer? Maybe Quick Left Will Adopt You
http://www.ted.com/talks/tim_berners_lee_on_the_next_web
I've used Freshbooks for invoicing for years, and I've switched between their time tracker and other services/apps repeatedly.

Switched to timely first of August, and I'm still happily using it even though it increases my pain significantly a couple times a month when I have to invoice things--timely is just that much better for scheduling and tracking that it's easily worth it for me.

While I'm here, I would love if the web app had a multi-week view so I could plan a month more easily and drag tasks between days over larger spans.
Kickstarter: Great organic coffee direct from farmers (cut out the middle man). 100% Farmer Owned > https://www.kickstarter.com/projects/640878266/coffeecsaorg-...
INTUGroupedArray: A brand new Objective-C and Swift collection for iOS and OS X
That happened to me at my last job too. There was no real, actual discussion about what we would use, the party line was "Angular looks like the future of web development" (this claim came from people who spend all their time in C#, not front-end devs).
The paper argues that category theory is useful for computer science. Okay, which areas of computer science? I've studied quite a lot of algorithms, computational complexity, cryptography, computer graphics, machine learning - none of it seems to get any sizeable benefit from category theory.

Most CS folks who like category theory seem to be on the functional programming side of the fence, and use it to basically shovel code around, making things parameterize and plug together in just the right ways. Which is fine, but a far cry from all of CS!
Looks interesting, but I'm guessing there is a lot of stress on the recipricator mechanism that the pushrods connect to, pushing against an incline to cause the output shaft to rotate.
I'm curious to know why there is a file named PATENTS in the repo (alongside the LICENSE file). What kind of legal protections would this "additional grant" give you?
I work 40 hours a week at a minimum, every week, and have always done so. I'm a programmer primarily, but also do other related things (build, devops, customer support). But if I have a week with nothing but programming, I will still work a minimum of 40 hours a week.

The idea that you can't do more than 15-20 hours a week is not true.

I do love my job. Perhaps that's why I work this much.

I admit that I have a hard time relating to this general idea I see over and over about the need to fill up time with non-work. Also, over the years, I've met my fair share of those who also work just as hard.
Life expectancy numbers should be quoted at 'life expectancy at 10 years old' if you want to filter out child mortality in the past.
> The way you spell your parameters does not fall under the "semantics of the input program". That is purely syntax, and it should have no bearing on the execution of the program.

I agree that identifier names should not matter for semantics, but it's quite possible to write JS (and other language) programs that do. So, your first sentence is simply incorrect, it is part of the semantics.

So yes, it's not best practices to do this, but it's not exactly "insane". Constraining your design on non-semantic-preserving minifiers is not the answer.

Also: In your last sentence, like in the linked article, it sounds like you and the author are under the belief that framework/api design is easy - and anyone who gets it wrong is an idiot.
I don't work for Office 365 or have affiliation there nor would I suggest Office deploys in a way that is AGILE.

My question for you as a founder is, how else would you prefer that a product introduce new features? I want to make sure that our users don't feel like you do, but I also need to roll out new functions as we grow so there has to be a balance there,
Those are excellent!
I currently use nginx for all my projects, which for me mostly consist of (1) serving static content and (2) proxying to gunicorn. My setups are usually not overly complicated, basic redirects for stuff like www/non-www or ssl/non-ssl, installing ssl certs can be a pain sometimes, and for the most part I use a lot of default settings and have never needed to go in-depth with tweaking settings.

Does somebody like me have a reason to check out Proxygen?
This looks great but, before I give you access to my Coinbase account, I need to know a lot more about you. Knowing about your security practices is nice but let me know who is running the company and where the company is incorporated, etc.
In LA the GR and food stamp money is auto-deposited to a debit card: at least one bank I've heard of allows you to use their ATM without fee.
> Energy is conserved in any iteraction.

True. But gravity is a conservative field (again, neglecting radiation), meaning that the energy that goes into raising something against gravity, you can get back by lowering it to the original position again.

> And gravity is not a force. Gravity is the curvature of space-time.

If we're not in "overly pedantic argumentation" mode, then I'd say, go climb some stairs. Feel that? That's a force. But if we are in "overly pedantic argumentation" mode, then yes, gravity is the curvature of space-time in General Relativity. That may not be the final word, though. What is gravity in Loop Quantum Gravity?
I don't have ReSharper installed but get the same problem. The IntelliSense has improved but neither /// nor the "bring up IntelliSense and click the "How do I" button shown in the video works for me ..
I think "random projection", as used by the parent, can be things like "low bits of the pixels in this image". If the color depth provides greater resolution than the sensors, then you can expect to have some random data implicit in the image that it would be possible to change in ways that could be provably undetectable.

A tremendous caveat is that when we find ourselves shipping around lots of meaningless random bits, we often quickly reach for lossy compression that doesn't faithfully reproduce those bits, and that can break the scheme.
Invencia analyzes stack exchange sites to classify malware based on method calls:

http://www.youtube.com/watch?v=u6a7afsD39A
I agree, it's flawed design and a crutch that comes about due to the lack of a better type system. But the cited reason (that it doesn't work with a minifier) is bogus.
please add an SSL cert at least
This is similar to the Apache License, which allows developers to use the project with the confidence that we grant a license to any patents that may affect the project. This is a grant we use for all of our projects and is not anything specific to Proxygen.
I really like your idea of the 4-part abstraction. Still… Your library really is not "that" easy to use.

I'm currently working on my own library using libuv, http-parser, nghttp2 and wslay, which is very similiar in it's use to node.js. As you might guess a echo server is therefore only about 15 lines of code, but about as performant as your framework. The downsite is that it's not as flexible due to the missing "4-part abtraction" (really… an excellent idea).

That's why your release somehow saddens me: When I'm going to release my framework to the public, it might be pretty good for cross platform apps etc. compared to others, but it will never ever be as popular as yours. Heck… I don't even have 10 twitter followers.
If you need a really simple embeddable C++ webserver that supports websockets (and as the primary developer) can I suggest SeaSocks: https://github.com/mattgodbolt/seasocks
Maybe depression can't be 'fixed', but you can learn to understand it and find ways to ignore it. This helped me: http://youtu.be/drv3BP0Fdi8

It's different for everyone so it might not make a difference.
FWIW, I think you've got a really neat presentation of the app ui in the video there. I have no idea if it's effective for new people as I've been a daily user for three months now. Your 60 sec front page video sold me immediately three months ago.
If you start with "how common is my problem?" and the answer is "extremely", then it is reasonable for the next question to be "should I use a framework that solves this common problem?", and you should have very good reasons if you want to answer "no" to that. If you answer "yes", then you have quickly arrived at "what framework should I use?". I guess perhaps we agree that "what framework should I use?" should not be the first question, but I don't think it takes long to get there.

I personally prefer (and find it more fun and a better learning experience) to build things from scratch with no frameworks at all, but I don't think it's a very savvy business decision unless you're doing something very novel.
Ok, we added your "might" and took out the baity "how".
URI Beacons
It's the flipside of the android 'anything goes' mindset. But the Apple appstore seems to make more money for developers than the android store does, based on reports, so I am wondering if this kind of thing helps or hurts.