skysight-inc/HackerNews huggingface dataset:
When Google released their update punishing paid link posts, SEO companies started removing all incoming links from blog posts in case they looked paid. That's why you get emails like this now.
To clarify, "/dev/pcm virtualization" means FreeBSD does audio mixing and re-sampling in kernel space.
http://readme.localtest.me/
If you develop multiple websites on your local machine, you distinguish them by using different domain names for each of them. You might have site1.dev and site2.dev.

There are a variety of methods to handle this, but commonly you add a record to your system's host file to resolve these domain names to the ip address 127.0.0.1 (your local computer).

Using site1.til.io and site2.til.io instead eliminates having to manage that host file (which is a minor and repetitive annoyance).
Traditionally, one of the major drawbacks of init is that it starts tasks serially, waiting for each to finish loading before moving on to the next. When startup processes end up I/O blocked, this can result in long delays during boot.

For a server it doesn't matter, leave alone "broken". long delays during boot is grossly exaggerated, because delays are mostly due to network errors/timeouts or file-system checks, but you can do almost nothing "in parallel" without clean FS or configured network interface.

Well, for some Ubuntu for mobile devices they could have adapt some "optimized" sysvinit-scripts (not /sbin/init) replacement, but, please, don't tell us that everyone needs this. Leave servers and home workstations alone.
That's next! We hope to make enough money to make the iPhone version. Follow our launch diary to see what happens:)
I knew I recognized you from somewhere! For those who don't know, nirvdrum's one of the primary contributors to rubber https://github.com/rubber/rubber (it's a pretty critical part of our current infrastructure)

In my book at least, you've already contributed a huge amount to open source and I wouldn't worry about needing to do more :)
I believe we're in agreement then!
The point is that if you're paranoid, you won't pipe curl into sh just like you won't blindly trust an unauthenticated hash. There is nothing stopping you from putting more effort into installing this software just like there's nothing stopping you from putting more effort into installing an apt package of questionable provenance.
Some people value an open source product more than a proprietary one. Although in this case, the OP couldn't get enough funding to release it as open source.
Are there any lexically-scoped, higher-order, lisp-1 Logo's out there?
> In short, please pay for your software.

I regularly donate to several free software projects (kde, gimp, vlc, firefox, and occasionally others) because they respect my freedom.

I strive to avoid proprietary products. If other developers want my money, I want my software freedoms. Those that provide them get money from me. I do understand this is not the norm behavior, and it is awful that it takes developers disrespecting the users of their software to have them pay for it. Just nobody sees the value in software freedom (and yes, even if you cannot write code you benefit from being able to pay any developer to fix your problems, and you can also pay auditors to inspect the code whereas with a proprietary product you are screwed).
.dev? heathen! .local please :)
Good point. There's a lot of money going a lot of different ways in this: http://www.forbes.com/sites/ryanmac/2014/11/20/uber-investor...

I suppose I'm somewhat inclined to discount BuzzFeed's reporting. It's probably not fair of me, but my opinion of them has definitely been dragged down by the general "clickbait-y" property of the site as a whole.
If this were true, then the difference between plea bargain fines and court-ordered fines would be the cost of a trial. This does not seem to be the case.
That's demand pricing, which is the other pricing option.

The two models I am familiar with:

- Normal tiered pricing. Low usage is cheap per kWh; high usage is expensive per kWh. This is because of inflexible production capacity.

- Demand rates. You pay a large fixed price, get a lower kWh price, and (this is key) contractually agree to never exceed X amperes. The higher X is, the higher your fixed price. This is a special plan structured for people who need a lot of power, but only at a modest rate of consumption- think baseboard heaters. Again, this model is constrained by inflexible production capacity.
Any implementations of this for Python?
LumApps Blog Introducing LumX: Material Design and AngularJS with Love
I am totally sold, because my github repos are numerous and I'd love to tag them all. But the tagging feature needs a cancel button, not just save.

And drag and drop of the tags doesn't work, dragging them to the right on the green background only scrolls it sideways.
xip.io is great for testing on virtual machines so you can use the unusual private interface address of your host, or of the virtual machine itself.
Both of these are really useful, but a lot to type if you just need 127.0.0.1.
Commentary with voting sounds like a peculiarly civilized form of witch-hunt. Sounds more like a description of a debate.

Debates can be rowdy, but they need to really be followed with unpleasant actions against someone before they can be described as a witch-hunt, otherwise it is merely complaining.
And many others:
http://dailycaller.com/2014/11/20/buzzfeeds-ben-smith-plays-...

I'm not refuting any ethical questions that were being thrown around, but I would never trust Buzzfeed to do any honest and serious journalism. These are the same people that created the most annoying clickbait lists, sponsored news and their whole design seems to be centered around getting as many ad impressions as possible. Sensationalizing a story for their own benefits is not beyond them.
Perhaps if they could allow you to customize a vCard the recipient can easily save on their phone with one click. This way, instead of having them type my name, last, they just save me as I want.
Meet a Data Scientist Who's Helped Revolutionize Agriculture
What does open source mean in this context? From the article it sounds like a contracting platform, and nothing related to open source.
>You can't have justice if your mechanism of justice isn't proportionate

The people bashing Uber over this story were mostly the same people that have always bashed Uber. They weren't looking for justice over this particular event, and it was obvious that many didn't actually read the absurdly written story that started this whole thing. They simply saw a mob that agreed with their dislike for Uber and joined it.
I actually was using .local previously, but my co-workers all use .dev so I assumed that was more common ;p.
"If an attacker has full control over your DNS"

Shouldn't this be "over the CAs DNS resolver"?

/edit

well I guess if the attacker has control over your dns server, ofcours, but another vector is to spoof as the CAs resolver when the CA does a lookup for your domain.
OT, but someone should start the .JS TLD for the tons of useful javascript libs out there. How awesome would it be to just go to Angular.js or node.js and have that be their actual site?
https://github.com/cpettitt/dagre/wiki
I had a hard time un-packing this for a minute so I want to try and clarify.

The part about proving to Let's Encrypt is problematic for sites that do not already have TLS on the example.com domain. Any plain HTTP request that Let's Encrypt makes to example.com to validate that you've put up some content on the server is susceptible to a MITM attack. I guess that means for users setting up certs for the first time they can't just put some content up on example.com and need to use DNS or something else to prove ownership.

The MITM problem with requests to example.com doesn't exist if example.com is already set up for HTTPS, which is probably why the examples on the technical description show requests for https://example.com/8303. I was confused about that at first because Let's Encrypt is largely targeted towards people without any TLS encryption yet.
Absolutely. To be crystal clear, I am discussing whether the technical & intellectual work produced as part of your (as commonly understood by the layperson) property and business, ought (as a duty) to be furnished by the creator/owner under some license to the broader world in some sense (whether by specific request or generalized publishing).

I argue that, generally, if said piece of property has no other encumbrance, then after some event or period of time, if this property is not providing value, the creator/owner should yield the property to the broad public, as their duty to society.

In particular, I am not asserting that they have a duty to make it useable or useful, or have a duty to do anything besides a tar ball or the moral equivalent. I am not asserting that it is always possible (encumbrances exist...). I am asserting the principle that our duty to society demands yielding this property up to the world at some point when we no longer find it valuable to own in any sense.

I am founding my statement of duty based upon reading too many papers from the 50s-70s where really interesting systems were developed, and then redeveloped years later, when the original companies had disappeared or discontinued the initial product. I think we could be much further along if the publishing of source was a commonly done thing.
One better: I let them blow away. But I live on 80 acres; nearest neighbor half a mile away.
I've always used mywebsite.localhost
Hmm I didn't think about that. I guess that's a genuine option for popular applications. Personally, for some unpopular applications I've tried to compile, I just gave up if the standard `./configure && make` didn't work.

As for your second point, I think it comes down to two things: if the user's time is more valuable than their money, and two, if they can get support for the paid product (at least that's how I've seen some products doing it), so it's not as if the paid is without it's benefits. Your Hexchat example shows how important it is to not alienate your users though.
How does this work? Isn't 127.0.0.1 a loopback? How does it get to the internet?
People shouldn't be attacked for what they say.

My idea of free speech is a society where people are not afraid to speak their mind. Absence of government censorship is only a small part of it. It was good enough long ago, when governments were the only powerful groups that could scare you into silence, but today it's no longer enough.
Most of the time we don't actually operate switches of our own, and our setup is simple enough where we don't do a ton of automation around the config where we do. What we do automate end-to-end is our BGP: our prefixes are actually announced from servers (using exabgp), not routers -- and our config there is managed by ansible, plus some real-time automation around community strings.
Nice, thanks. (I'm running on Ubuntu, so should be good)
The ultimate vision is to make it even easier than that -- you set the "turn on HTTPS" option, and the platform auto-configures HTTPS with a certificate and appropriate ciphers. That will require upgrades to apache, nginx, IIS, etc., though, so in the meantime, we have the "lets-encrypt" script to semi-automate things.
I'm not sure why you're getting downvoted. Your opinion seems valid to me. Many of the benefits to writing C go away if you use extensions like this.
WebGL Music Videos/Experiences
I've also used django-mptt and just wanted to throw another vote behind it in case anyone is considering using it. Our data structure was a good fit for MPTT (many reads, few writes) so I can't comment on how it would behave in the opposite scenario. Nice API, very easy to use from a developer standpoint. We were using MySQL.
If you ever had time to put together a blog post with your config files, I'm sure more than a few people would be interested. I know I have struggled with setting up a reasonably looking Linux on the MBP Retina, and in the end given up.
Harvard researchers build $10 robot to teach kids to code
That's not just closing the barn door after the horse has fled, but beating any others that may have died in the escape attempt.

It is also completely true. As you might expect, .mil unclassified public networks are still strictly controlled and monitored, with all the invasive filters and MitM certificates you could ask for. I recall seeing mass-distribution e-mails "reminding" cleared personnel that they should not even be visiting WikiLeaks or Guardian.co.uk using their own equipment when they return home from work.

They actually expected people who saw classified material distributed from the web on their home computers to call and report it, so that the "spillage" experts could examine every bit of their privately owned hardware and permanently delete the classified material. It sounds ridiculous, but they were completely serious.

I cannot even imagine the sort of brain damage that would allow a person to have such an expectation.
It might help to consider the domain name part of the title. When I read this one that way, it doesn't seem to me to lack context.

I understand why the title changes sometimes seem mechanical, but in reality that is far from the case. Sample bias plays a huge role here, and rightly so, because titles and title edits shouldn't be the locus of attention. Unfortunately, though, when most of the data goes unnoticed, the remaining sliver of cases creates a misleading picture. I'm not sure what we can do about this.
Also, http://whatever.new/
Cable companies acquire a license to rebroadcast. That is how they operate.

Aereo didn't have that.

I think that is more than enough to distinguish Aereo from the cablevision law. But the Supreme Court doesn't haven't to follow Cablevision. That wasn't a SCOTUS case. And other circuits had conflicting rulings.
I live in one of the areas with the caps and this is how it plays out:

1. I tell my wife to stop playing so many movies on netflix.
2. I stopped watching youtube or other video services unless I really, really want to see something.
3. I watch my internet usage and choose when to use it.
4. I cancelled Hulu.
5. I grow suspicious of my neighbors when my usage seems high as there is no breakdown of where usage comes from.
6. I suspect comcast's own services are not counted towards the meter, but can't prove anything.
7. I stopped playing so many games.
8. I now strategize my downloads.

There is no real other choice in my area -- the closest competitor to Comcast offers less than half the speed and only advertises for 1/4 the speed.

In my opinion, as someone affected by this, it's just a way to squeeze the customer more and maintain a monopoly on content.
How does this work? How do you make multilevel subdomain wildcards work? Maybe they run their own DNS server in which case this seems atleast doable.

edit: It's smack on the front page of xip.io :) "xip.io runs a custom DNS server on the public Internet.".
Not really "modern", but the remade Broken Sword 1/2 on android have been really entertaining and fun (but a little short and abrupt in the endings), and Broken Sword 5 (the new one) is not bad too.
In defense of Uber
Wow, brings back memories. Thanks and... you fight like a dairy farmer!
Relying on a magical domain "just for development" is extremely careless behavior. Even assuming that these addresses always resolved to 127.0.0.1 with no interruption, slowdown, or redirection ever, do you really want to be leaking private hostnames etc. over the internet? Simply run a local DNS with forwarding, create a zone or two for your internal machines, all done. And you can even have other record types besides A and PTR...
Is there a normal keyboard listing of these? The keys are obscured in the photos.
Careful; if you or your coworkers use OS X, you may run into conflicts with Bonjour-registered hostnames.
That seems like more of a mess than just "messing with the hosts file." What happens when your ip changes and none of your links work correctly?
No. In a Chapter 11, the debtor (referred to in this context as the "debtor in possession") remains in control of the proceeding (with court oversight). Generally, the purpose of an 11 is to reorganize or restructure, but a company can also liquidate itself in an 11. Presumably by "debtee" you mean a creditor. Creditors can participate in a Chapter 11 proceeding as part of an "official committee", but they have limited powers and generally are left to complain from the sidelines. In a chapter 7, on the other hand, a trustee is appointed to liquidate the debtor's non-exempt assets, and the debtor is more or less out of the picture.
How dare he ask other people to use the software he wrote.
Well then in that case, can we ask the likes of Pando and Gawker to disclose at the beginning of their accounts that they were not actually at the dinner and all information is based on second-hand accounts?

Maybe if they are feeling extra generous admit that they have a vendetta and personal bias against Uber because the CEO made a reference to "boobs" in an interview? Something that most people in the real world, I have to tell you, probably don't actually care about.
Toddler Mode:

For iPads able to run iOS 6+, you can activate "Guided Access" mode. Apps being run in this mode can have disabled hardware buttons and deactivate certain areas on-screen.

Once the global setting is enabled (Settings > General > Accessibility), triple-clicking the home button activates and deactivates the mode. There is a passcode, distinct from the unlock code, to exit "Guided Access."

I became familiar with this as part of an iPad kiosk project, and when my toddler discovered that iPads exist, it has been very valuable.
Why do you encrypt your traffic?

If the port knocking feature exists to "hide" your network service, you're saying the security of your service is based on the idea that nobody can see your traffic.

But if someone could see your traffic, and therefore your connection, and thus the port your service runs on, they could also clearly see the contents of your traffic. So port knocking would be useless, and everyone could see your traffic, and probably be able to do anything they wanted with it.

But since you use port knocking, you clearly believe nobody can see your traffic. So it then follows that you don't need encryption.

So clearly you should be using telnet.
Windows 10 build 9888 shows up with a kernel version of 10.0
Excellent writeup. One little thing i will add is that i learned a few languages to varying degrees by reading magazines and websites on a specialized but not terribly complicated subject that i knew well, bike racing. That way I had a 40% comprehension before starting, encountered a lot of familiar words in italics and my brain was better able to interpolate meaning.

also that some things are harder or easier than you think. After learning French, Latin, Spanish and some Italian, in that order, i had a lot of difficulty with Brazilian Portuguese, but i once bought a "Learn Dutch in your Car" CD set and starting listening, the usual banal dialog about going shopping for groceries, when i realized i could understand a language that i had never studied or heard before, as native English speaker who understood German well
Bear in mind that this is all vaporware. The github repository for "AJAX" just has a spec, no code. They're selling a security "solution" no one has evaluated yet.

I'm bothered that this runs periodically. Will it auto-update code? How secure is the auto-update process? Who can run an auto-update? Does it run as root? If so, why?

If it was a one-time manual run, that wouldn't be so bad. You can snapshot a system, run it, and see what it changed. When it gets to run on its own, that's harder to test.
.local conflicts with Bonjour, so it's not as good.
Selling books in large quantities isn't all that probable with a traditional publisher, either. Even if they publish you, they usually don't market your book near as well as you'd hoped, and your royalties are a much smaller percentage of the sales price. With Amazon you can publish a book at $2.99 and keep 70% of that.

I've seen a fair number of articles by people who'd published several books with traditional publishers, then decided the self-publish route paid more and got more books in the hands of readers.
in the USA you can probably import power from the sunnier areas to the North - but it's much more efficient if it can be charged and stored locally.

Interestingly enough, the Upper Midwestern US has very high solar insolation values (http://www.solarmn.org/solarinmn.html) despite being just below Canada. We have relatively few cloudy days and very clear skies. My first summer living here after moving from the Northeast I noticed that the sun seemed "hotter" somehow. My guess is that a fair amount of sunlight was reflected back by the hazy Northeastern US atmosphere.

I've done some small scale solar experiments: on a clear winter day where the air temperature was -10F, I was able to get the temperature in a small insulated box over 100F using an 8.5x11" window pane facing the sun. And that was with significant air leaks.
If you use Vagrant for development, there are some plugins that will modify your HOSTS file automatically when you start your Vagrant VM. See for instance https://github.com/cogitatio/vagrant-hostsupdater
Your browser asks the DNS server for the IP address corresponding to the domain name. If you ask for google.com it will reply e.g. 74.125.228.228 and then your browser will connect to 74.125.228.228 directly. When your browser asks that same DNS server for til.io's IP address, it gets 127.0.0.1, and then your browser connects to 127.0.0.1!
Yeah but manufacturing competitive silicon nowadays requires mucho dollares. Making small-scale engines is probably several magnitudes below that.

Still, you've got a point.
Not really?

When you reduce with function f(T1, T2) -> T3 the result of previous iteration becomes first argument for the next iteration, so they must be of the same "type".

Or am I missing something?
So does localhost
Great project! Please also provide a yum repository and instructions (and any others you feel are popular enough). You may want to look at the way SSLMate does it, with an operating system drop down selection (Debian, Ubuntu, RedHat, Arch, Mac, Other).
I agree, but it would need someone to put up the $180,000 non refundable fee for it to be considered or whatever it is. Google could afford that, but then imagine the storm they'd get from the JS community..
This kind of reminds me of "A monad is just a monoid in the category of endofunctors, what's the problem?"
I Installed and used this a while back. It's seriously just an app that asks for an email address, then it sends the person a nicely formatted email with a link to your about.me and contact information.

I agree this is far more steps than pulling out a business card and handing it to someone.
The CDN URL can just be angular.js/angular.js
If someone won't pay for a closed product, and won't pay to open it up, they don't value it at all.
> There are a few self-contained products that could be verified now. A secure BGP gateway and a secure DNS server are within reach. Since those are often in standalone machines, they're good candidates for this approach.

I completely agree! There's lots of crappy but crucial components of networked systems ("the cloud") that we rely upon not to be bugged, that could do with a healthy dose of verification. While the examples you picked are excellent candidates, what's even more fascinating is that even if we only had a few extremely dumb systems verified correct - such as a trusted box that did nothing but provide a verified incrementing counter - that itself is surprisingly useful. The Ironclad paper does discuss this in Section 3.3, but it's worth looking at the description of the TrInc paper as well: http://research.microsoft.com/apps/pubs/default.aspx?id=7836...
DataSoft Nova Anti-reconnaissance System 13.10.0 || Stored XSS
If it's completely client side you can just put a ~/dev folder under Apache / nginx and never have to worry about any of that.