skysight-inc/HackerNews huggingface dataset:
It is messy because VM layer is unnecessary. If OSX had native support for containers or if ur dev laptop was linux then all you had to do was use docker directly with dockerfile. That is the purpose of docker. To make usage of container virtualization easy and standardized and to be used directly on baremetal. All the convolutions introduced by the VM virtualization will evaporate as container support becomes standard across all OS.
The whole article can be boiled down to:

"The trouble is that I’m obstinate: I’ve paid for a VMWare Fusion license, and I’m insisting on using it."

VirtualBox is free, and all the work to make Docker run easily has already been done. But the author only wants to use VMWare, so it got complicated.
It's fascinating to me the power of the spirit of an age. Lord of the Rings was in all its explicit elements a novel pining for agrarian feudalism. Yet in spite of this it could not help but be progressive. Were it written in the climate of today's never ending 70s tape loop, the moral would be that Frodo should never have left The Shire to begin with.
Show HN: Common web dev tools in a box
I really hope these are in the spirit of being "with Uber" against Taxi cartels and not "with Uber" in personal vendettas against critical reporters.
Regarding The Machine Stops, I think you mean E. M. Forster:

http://archive.ncsa.illinois.edu/prajlich/forster.html
youtube-dl can do that out of the box, try

youtube-dl --username pimlottc :ytwatchlater

If you get a problem, please file a bug report at https://yt-dl.org/bug . Thanks!
If you use ZIP, some implementations will compress, and you'll get security vulnerabilities. And even if your implementation rejects compressed ZIP files, other implementations won't. Better to use a container that doesn't support compression and never will; for instance, tar.

PGP/GPG has compression support built-in, for that matter; I wonder if anyone has looked for vulnerabilities like CRIME or BREACH in it?
Big fan of keybox, used it massively at my old place. So handy to remove contractors from servers at a push of button.
Indeed -- if the batteries were being made in China, perhaps they'd start manufacturing the cars there too.
Is a city-scale version of this possible?
This is equally fascinating and terrifying. The infection vector is still unknown, and they haven't even been able to recover the 64 bit version.

Neither China nor the USA is among the ten countries with most infections.
PlanGrid (YC W12) is hiring a back end engineer to revolutionize construction
How Dangerous Is Satoshi Nakamoto?
I needed a simple way to give a friend access to the same tools as me for a project. So I made this simple Dockerfile that just gets common webdev tools like Gulp or NPM. If you like it and/or think a tool is missing, please let me know here or on Github :-)
Which is why I only use it on solo projects.

That being said, ~indexOf is hardly tricky. if(string.indexOf(term)) is far trickier, because if you didn't realize it returning 0 was a positive result, you easily could write it without a -1 check and not notice it during testing if no values had an index of 0. Then months later you would have a hell of a time debugging it because it would look so innocuous.

On the other hand, by including the tilde, you ensure two things: 1.) Future developer knows what it does and has no problems. 2.) Future developer hasn't seen it before and goes straight to google to see what it does - at which point they learn and now will recognize it in the future.

So at the end of the day, by using a ~, it is explicitly clear that indexOf() should not be used directly as a coerced boolean, and it ensures that anyone touching the code will either know or learn why.
This post is a follow up to my recent blog post "What's next for Cachet?" http://james-brooks.uk/whats-next-for-cachet/
I am not vagrant user... but what role can it play when my dev laptop is ubuntu for eg? Does it become redundant layer if all my virtualization,configuration and deployment needs are met by docker and dockerfile?
Yeah a thousand days ago, nice one.
What about springs for energy storage?

https://www.youtube.com/watch?v=YCs002BywAE
> 7. Have my car keep a web record of everywhere it has been, how it is doing, and what needs fixing or updating.

There are a lot of worthy problems on this list, but #7 has been completely solved by the current connected car devices like Zubie (http://zubie.co/) or Automatic (https://www.automatic.com/).
MS sadly won't add a UTF8 codepage. If they did, people could write UTF8 Windows apps. Alas.

http://utf8everywhere.org
https://code.google.com/p/parallel-ssh/
Yes, but he didn't write it as a cautionary tale or even attempt to portray it as a stupid thing done out of youth. The delivery very strongly portrays it as a good thing that was a good idea, and a rational step towards advancing yourself in the world.
I don't know what to tell you - there is no cite for that claim in the filing, and Caltech's own CDS filings say that they do consider race. Is there any statement from Caltech that says they do not consider race in admissions?
honestly, I'd make an exception of those vicious tactics because it's tesla and that electric cars are for the public good. the automotive industry never developed it and would never have, so I don't care about those tactics at all. GM already is quite in the red anyways, so why should tesla be any better ?
I think Elm is very interesting and inspiring. The time travel debugger especially is very impressive.

However, can someone please tell me why Elm needs two kinds of values? There are simple values and then there are "signals". I don't understand why you need to make the distinction.

If you want to apply a function to a signal, you need to use "lift". From the Elm documentation:

"The lift functions are used to apply a normal function like sqrt to a signal of values such as Mouse.x. So the expression (lift sqrt Mouse.x) evaluates to a signal in which the current value is equal to the square root of the current x-coordinate of the mouse."

Why can't you eliminate "lift" and just have all values be signals? Then "lift sqrt Mouse.x" would become "sqrt Mouse.x". (Which makes a lot more sense, if you ask me...)
An anti-copyright freedom fighter downloading stuff from YouTube is not unlike an anti-capitalist punk rocker buying her clothes at H&M...
Wasn't WOT (Web Of Trust) supposed to fix this? Basically, I get other people to sign my public key asserting that it's actually me and not someone else, and if enough people do that it's considered "trusted", but in a decentralized fashion that's not tied to "authorities"?
I suggested ZIP simply because it's so widely supported, it's built into the stdlibs of many higher level languages and most operating systems have GUI tools to browse the contents. I don't know of any other containers that are as widely supported, but I am all ears.

If it's a container that requires the recipient install 3rd party tools, then we may as well skip that part of the proposal entirely.
Single point of compromise. :(

I wish people would just stop with these things.
The appropriate way to be able to manage many users is called LDAP, it's been LDAP for decades and it's unlikely to change.

These days it's super easy to use SSH keys with LDAP, still using the standard openssh-lpk schema but now not requiring any patches to OpenSSH itself, just need to use the AuthorizedKeysCommand and an appropriate helper (which normally ships with distro).

By forgoing the above gateway style thing you now have central key management without a single point of compromise. Revoking a key is as simple as deleting it from LDAP or disabling that users account.
Leaving Gmail Behind (2013)
It is not Teslas fault that Nevada offered them a good deal. You can expect nothing less from a private company, then for them to get as good deal as possible.

It is irrational for states to compete for individual businesses, instead of competing with general good business rules. This is the way it is in the U.S nowadays. Big companies let states compete for their largest investors. When big companies, politicians and unions stand side by side you have every reason to worry. But pointing the finger at the big company is useless, because they are not under your control. It is the political side that is under democratic control, and should respond to the interests of the people. The company will to it's best to advance its own goals and interests.

As it happens, in Tesla's case, that goal is pretty decent. So I'm not that distraught in this particular case.
Show HN: Yes Chef keeps food off your phone/keyboard when you're cooking
You can also do it without any mirror, using Background Oriented Schlieren. Basically, you print a bunch of random dots on paper, and use a camera to see the subpixel shifts in the dots. ( see http://en.wikipedia.org/wiki/Synthetic_schlieren ). By cross-correlation, you get the change in refractive index/density of air.

One of the main limitations on a Schlieren system is that you can only image objects that are smaller than your mirror. That makes the BOS systems are pretty neat, because at least in theory, you can just print out large backgrounds to image large areas.
The solution, at least for something decentralized, seems to be a web of trust established by multiple other identities signing your public key with some assumption of assurance that they have a reasonable belief that your actual identity is in fact represented by that public key.

That's what PGP/GPG people seem to do, anyway.

Why can't I get my personally-generated cert signed by X other people who vouch for its authenticity?
Spot on. I can't say enough good things about COM; it's enabled some quite amazing things for me over the years and really top notch distributed systems that are easy to manage.
Hey everyone! We're doing Startup Weekend San Francisco this weekend. There's four of us - three from Brisbane, Australia, and one from the north-west of France.

We made this app because we were sick of reading recipes off our phone while cooking and having to wipe down our fingers all the time. Also it was a cool excuse to learn more about voice recognition and extracting useful data from web pages.

Happy to answer any questions! Pitching is this afternoon at Citizen Space in SF.
This is the kind of thing I currently use Ansible for. Is there a big advantage to using KeyBox for this instead?
It is up to us to imbue the technological world with morality
Show HN: Nectar – A modular MVC framework for PHP
Excellent idea and such a simple execution.
https://news.ycombinator.com/item?id=8610781
There are some details in the whitepaper.

I don't think this post comes off as an attempt to make more money.

Rather, I think it's applaudable that they release information on threats from governments (and not only traditional spyware/virus).

Since this is (probably) built by a government, one can be certain that a government somewhere (presumably Western, given the infected countries) is upset about the release. And they didn't cave in to that, which is good.
I personally don't care much about the desktop environment as long as it doesn't take up a lot of resources.

I mean all I really need is a panel at the top of my screen with a calendar/clock and couple of indicators/applets (battery, network, sound, email) and some kind of file manager, system configuration is usually easier done by just editing the conf files directly.

That said, I agree that the Desktop Environment situation in Linux is just bonkers, a lot of time and effort has been invested in a bunch of different DE's, each being used by a good chunk of the user base and new ones pop up every now and then just adding to the fragmentation.
"These days it's super easy to use SSH keys with LDAP"

Are there any articles that go in to detail on exactly how to do this?
Reminds me of the days when the 680x0 series was still a Mac thing and Yellow Dog Linux was a compatible distro.
I do the same, but have ethe -K option also whch keeps the original DLd video.
Pi doesn't make much sense as a signal (a time-varying value).
"Life in high-density civilization will require privacy sacrifices"
What more do you want beyond what the first few web search hits gives you for that question? One of which is http://www.ebi.ac.uk/luscombe/docs/imia_review.pdf. Or what's on http://en.wikipedia.org/wiki/Bioinformatics ? Or the 2001 paper titled "What is bioinformatics? A proposed definition and overview of the field"? See http://www.ncbi.nlm.nih.gov/pubmed/11552348

Without knowing what you know it's hard to say anything more helpful than those.

Edit: Looking at your HN history, I see you have asked a lot of questions - one per day for the last month - with topics like "Who's doing some c64 stuff?", "CoffeeScript or ClojureScript for writing a game in JS?", "Best server log viewer for Mac?", and the statement "We're planning to release a product for Agile/Scrum professionals, magnetic, erasable story cards that you can use on your Kanban whiteboards."

I get the feeling, perhaps wrongly, that you are using HN as your personal advice board, rather than learning how to research things yourself.
Adding the browser to the mix won't make it much more secure, I fear.
I would guess they didn't cave because no Government has registered their upset at this. If they did, it would be pretty clear which Government it was - making me think the Government in question has few levers to pull against Symantec.
Purely out of curiosity, has anyone used this in conjunction with a linguistics study to visualise sounds made during speech? I did a quick literature search but couldn't find anything. Not sure whether if features would be too subtle to see anything interesting...

Edit: Spoke too soon. Did find one paper[1] (though I can't read it) which uses it to compare the production of 's' and 'z' sounds. Would love to know if there are any more papers though.

[1] http://dx.doi.org/10.1121/1.4784877
This is basically true. It's the same packets on the wire - the biggest difference is that for most packets libx11 waits for a response while xcb returns a token representing a promise.
> When companies can force states ...

I must've missed something, but where was "force" applied? Did Tesla threaten to sue Nevada (or Texas)? Did they send in teams of lawyers, threatening to shut the state down?

No. All that happened was a bit of aggressive negotiation with adult parties, who were more than willing to play the game. Nobody "forced" anybody to do anything.
You'll be in favour of shutting down the army then? Short of pillage, they are never going to break even.
Infinity.js
just make sure you have some money set aside for sudden loss of job, and use your time for finding a new job in your area. After all, you're in a big city so the jobs are there for sure.
ESCORT CALL GIRL XENIA – Golden Diamond Escort
I don't think the street lights are supposed to be on poles. It appears to be a tunnel with lights mounted overhead.
Web-based proxies are not anonymous. Specifically, Javascript proxification is lacking in all of them, and your IP address will leak one way or the other.
I have no idea how you drew that conclusion from my post.
> No, no distress here at all

Sarcasm noted. I am not saying that there is no distress. But, all I have tried to do is give light to missing information. There is always some bias and opinions that bleed through.

But everything I have said is verifiable. If I mentioned something that is incorrect I would be happy to accept it and not repeat in the future.

Back to that email. It says "Goldman Sachs is now panicked because feel that if Morgan Stanley does not open", how does that statement in anyway prove that they had an internal reason to worry?

Again not saying that they were not distressed, the inevitable sell-off that would result from MS not opening was huge, and could possibly create a bank run and possibly lead to bankruptcy as all bank runs do.

But it does not indicate that there was a choice for GS/MS to be bank holding company. If anything the email itself notes that the option for them to be a bank holding company was unlikely.
The link i have provided you is the filing and it says Caltech does not consider race.
J.S. Bach-Chromatic Fantasy and Fugue BWV 903
The thing about keybox is that it's nice and fast to get better. For someone that doesn't have an ops team, or even an ops person, it is a neat solution.

Yes you need to be careful with it, I ran it on an internal VM, with only 2 users who had access to the admin console.

I'd love to see something as simple to use as keybox based around LDAP, I've had a google and can't see anything.
George Ripley and the Philosopher's Stone
A Minecraft world that has been played for 3.5 years
I wasn't aware of closure trees before, thanks. The presentation that you link to by Bill Karwin, along with a few other resources are in the comments by coleifer and chdir.
>>> Its capabilities and the level of resources behind Regin indicate that it is one of the main cyberespionage tools used by a nation state.

Wow. Just wow.

It should not surprise us, but I wonder what the reaction was when people first realised telephones could be and were being tapped?
But they're called street lights and they aren't in the tunnel!
Ansible is a good idea for something like that. The groups is a handy feature.

Also the multiple terminal session stuff is rather useful in an emergency patch across a ton of servers. (Drupal patch last month it was very handy)
Agree. That's how I see it. Uber is a fantastic product, it's a game changer but people who support the "personal vendettas against critical reporters" are just idiots.
There's about 300 million in the US.

And of course, we're all super optimistic :-)

Of course, what we call Reaganism in the US, they would call Thatcherism in the UK/Scotland. So much for progress, hail stupidity and greed forever!
It's interesting to see several posts about people leaving Gmail in the recent months pop up on HN.

What I don't get about this one is that the author, Christopher, put the email server on a Digital Ocean VPS. If I'm not mistaken, DO is a US company and the gov can probably get access to the server's contents as easily as to a Gmail account.

Of course, if Christopher uses PGP for everything, then the gov would still have to find a way to decrypt stuff. But PGP doesn't seem to be commonly used (yet).

I used to have a Gmail account too but switched to Fastmail about 16 months ago and recently renewed my account for 3 more years. It's reliable and the web client is crazy fast.
Thank you for posting this. I do think some companies undervalue their engineers, but it's crazy how frequently managers are disparaged on this site.
>> It should not surprise us, but I wonder what the reaction was when people first realised telephones could be and were being tapped?

Outrage?
Uber vs. Lyft? (Opinions after the “scandal”)
I've only used Uber but would like to try Lyft too. Which one is the best?
HN itself is perfectly readable without cookies or Javascript.

Even if you want to login, vote, comment, and post, all of that can be done without Javascript (though you do need to at least temporarily enable cookies).

I am really grateful to HN for making this design choice. Javascript is superflous for 99.9% of websites. It's an unfortunate design choice to use it anyway.

I wish I could say that I hope website creators would move away from Javascript and other "dynamic" (ie. turing-complete, overpowered) technologies. But it's clear that's not going to happen.

In light of that, privacy and security tools will have to adapt and somehow find a way to protect their user's privacy and security despite having Javascript enabled.

Right now, the best hope I see for something like that is having light-weight disposable VMs/jails/containers and sandboxes. At least that could limit the damage that Javascript does to a single tab or session.
At my school a printed student directory with photographs of all first year students was distributed to that class. It was called the Facebook. Circa mid-70's. The billion dollar idea was to digitize it and let people leave comments. Sheesh.
Thanks, you are right that I shouldn't have focussed on just floating point. I emphasized it because it better matched the frequently quoted "teraflop in a single card" measurement. As you say, the Phi is equally strong at vector integer operations as floating point, in both cases operating on 512-bit vectors.

But I'll quibble with the assertion that all GPU's are "integer pansies", although it's a fantastic phrase. Historically, NVidia GPU's are much stronger at floating point operations than integer because of their graphics origins, and NVidia's Tesla is definitely what Intel views as nearest to the Phi's target market.

But AMD/ATI cards have excellent vector integer performance, several times that of NVidia/Tesla, and much better per dollar than Phi until this recent price drop. This is why AMD cards were the best choice for bitcoin mining until the recent arrival of dedicated ASIC's: http://www.extremetech.com/computing/153467-amd-destroys-nvi...
Customs. Import taxes are absolutely crazy.
I would be very careful about taking anything in this study at face value. Be sure to look at available responses before taking advice from the Atkins, Inc. folks.

e.g.
http://carbsanity.blogspot.com/2014/11/that-new-volek-phinne...

Palmitoleic acid is a MUFA and while it may be true that it can act as a biomarker, there is an insanely huge amount of research against there being any direct deleterious mechanism of action for this fatty acid. To the contrary, palmitoleic acid is often shown to have protective, insulin sensitizing effects. More on that later, but come on. How can you write that when even perusing Wikipedia should cause pause!

But let me ask you this. When was the last time you heard that saturated fat caused an increase in the saturated fat circulating in your blood and that THIS was the cause of heart disease? Answer: Never!
https://www.youtube.com/watch?v=TwA7c_rNbJE

Incredible little movie, well worth watching.

Quite neat to see how many of these features we already have today and which ones we definitely do not and probably never will.
Those are stereotypical bad managers, not ALL managers. I know a lot of great managers who are not like that. And even the ones that failed didn't fail due to malice or vanity. Most people I've encountered want to build cool things, even the managers, and they often know their strength is not in coding.
Is there a cheap way to connect this to my Macbook pro? I do a lot of MD simulations, and this would be great to play around with when I don't want to use research funded computing time, but I feel like the connection to my laptop could end up being more expensive than the board itself.
>However, can someone please tell me why Elm needs two kinds of values?

Because not all values depend on/change with time. A euclidean distance function is the same no matter when in time it exists. But, the distance between a player and an enemy is something that changes with time. So, you'd want to lift the euclidean distance function onto a signal like 'lift2 distance playerPos enemyPos'. I don't actually program in Haskell or Elm, so I don't know if that is the correct syntax, but you get the idea.
A good point. They cannot force anything without revealing involvement, and after the details are published it's too late to try to influence.
Blast.js: JavaScript Library for Creative and Safe Text Manipulation
It's a neat system, but I also like that it's written in Java. Given all the new things coming out with Go, Scala, clojure node.js and what not it's inspiring to see people still also building things on top of the Java platform with just straight up Java. I haven't used struts but it doesn't look that crazy when looking at this code. It looks pretty sane.