skysight-inc/HackerNews huggingface dataset:
And they do HTTPS right (at least on 18f.gsa.gov) - it's pretty rare to see an HTTPS site get an "A" grade from Qualys' SSL server test. No weak ciphers supported, no support for SSL v2/v3 (only newer TLS), most ciphers support PFS, etc:
https://www.ssllabs.com/ssltest/analyze.html?d=18f.gsa.gov

Edit: not all their sites are doing HTTPS right :-/ 18F developed https://www.notalone.gov and this site has quite a few security issues:
https://www.ssllabs.com/ssltest/analyze.html?d=notalone.gov&...
> A major 'feature' of D3 is its ability to update the dom with the new svg elements.

A major feature of D3 is its ability to update the dom incrementally as data changes.

FTFY

> Given that libraries like Ractive and React handle dom updates in a much more sane fashion (just re-render the entire virtual dom instead of mucking around with individual nodes), all I really want is a library to generate path attributes for the svg elements, and hence find paths.js to be a much simpler option.

So it's more sane to "re-render the entire virtual dom instead of mucking around with individual nodes"? Is it insane that D3 does the mucking around for you so that you don't have to re-render the entire dom? Wouldn't that be a good thing?
If they were smart about Google Code they would update it significantly and make it a competitor to Github with full GAE and Google Compute integration.
Why the Oatmeal is wrong about Net Neutrality (and probably you too)
Great. This type of ideas drive me nuts! Two remarks:

- Both me and my girlfried would be capable of answering correctly. I'm an atheist, she is catholic. We are both engineers. And we also played the first 4 Professor Layton games, where these puzzles appear (and many more. Highly recommended games!).

- It appears that the article has a "religious people are dumb" connotation. Which, from personal experience, is very far from the truth!
Thank you for pointing this out. Send an email to support@generalbiotics.com and we'll add you prior to the next design rev.
I assume this is really only going to be worth it on big purchases. It's an interesting inversion of the usual process for discount retailers.

When I was young, my friend's dad managed the K-Mart in our town. In the 70's and early 80's, K-Mart gave a lot of autonomy to store managers to set sale prices and do promotions. He would nearly always have loss-leader sales going for basic stuff like toothpaste and laundry detergent. He assumed that if he could just get customers in the door for toothpaste, they'd buy enough other stuff to make up for the loss. It worked, too. After a while, many people didn't even bother stopping by Target. K-Mart finally forbade loss-leaders in the late 80's, his sales tanked, and he quit to become a buyer for another chain. The K-Mart is still there, but it's a ghost town compared to Target and Wal-Mart.

I wonder if Wal-Mart can pull off the reverse of what my friend's dad did. Could they get people who ordinarily wouldn't think of going to Wal-Mart in the habit shopping there by discounting big things?
void fun(int mandatory_arg, int optional_arg1 = 1, int optional_arg2 = 12, int optional_arg3 = 12);

No, this isn't legal ISO C. There are ways to simulate them though: https://gustedt.wordpress.com/2010/06/03/default-arguments-f...
They have implemented the C99 parts required by C++14 standard, plus few extra parts required by some well known open source projects. It remains open if they will ever implement the rest in MSVC++.

However, VS 2015 will have clang integration.
Neil DeGrasse Tyson Separates Fact from Fiction in 'Interstellar'
I also haven't read the code yet but malloc free may simply mean the code doesn't call malloc but it can still allocate things on the heap using New.
For visual trig, there's a great interactive unit circle here:

http://www.touchmathematics.org/topics/trigonometry

Study the way the color-coded lengths vary as theta increases around the unit circle and you'll develop an intuitive sense of sin, cos, tan, etc.
> "It remains virtually impossible to create a Ruby or Python web server virtual machine image that DOESN’T include build tools (gcc), ssh, and multiple latent shell executables."

At work, our tech team has found an interesting way around this for our Python app. We build out the virtualenv in the docker container, and then run our ansible-based deployments inside the same container. With that, our virtual environments are rsync'd to the app servers so we can avoid installing developer tools.
Yeah, it works now. I just wanted to notify you though..
It will get rebuilt on top of Thrust.
Also, memory. Remembering that you have already written a class/method/helper somewhere that does what you want, and looking at that rather than writing from scratch everytime
But the difference between $810 and $780 is greater than 3%. So even using your 3% example they have still broken even.
A Day in the Life of David Orson, Solution Architect
From what the Dad said in the article, he seems aware of the need for kids to be kids - "too much computing at his age is not good for him," "I just want him to do his best in whatever he chooses", and so on.

I learned to program for my own enjoyment around the age of 7, and I don't think it's done me any particular harm. I was not a social kid, but if I hadn't been programming, I'd have found some other way to avoid human contact.

No ragrets! https://www.youtube.com/watch?v=_DnKNClu2XM
If you take into account the indirect revenues to the economy that these investment generated, I would say that the US government overall is in a much better situation because of this investment.
While all of the changes look nice in terms of writing less code, they are the kind of syntactic sugar I learned to hate in CoffeeScript. Mostly because the code was so much denser and harder to read. Especially when reading other people's code.

As I write more and more code, the more I want simplicity and ease of understanding over typing a few less characters or having more elegant code.
This is the most obscene FUD I've seen in a long time.

Whoever wrote this should be proud of themselves. It's a work of art.
Yes, they mention that:

The report's findings are more of a political victory than a financial one. It took the program three years to break even after Solyndra's failure, while during that same time the Standard & Poor's 500 index increased 67 percent.
> think most of this could be solved easily by either a compiler option or golint rule

You mean like errcheck? https://github.com/kisielk/errcheck

I'm not sure if it can find spots where people intentionally throw away an error like in

val, _ := foo()

Usually people are more concerned with places where people accidentally fail to realize there's an error returned at all, like this:

func foo() error { ... }

foo() // errcheck finds this

However, it should be possible to find errors assigned to underscores, and thus detect that case.
SanDisk makes USBs compatible with Iphones
Right, that's the idea.

Regarding static initializers, I use them for precompiling regexps and templates, but not much more than that.
Storage an issue based on the % of solar adoption. At say 1% solar you don't need any storage and it's cost effective in most countries today. At say 80%+ you’re going to need a lot of storage.

Worst case is basically 100% solar which is how many home systems are designed. At which point storage basically doubles your costs now and it only gets worse as solar gets cheaper. Granted there are low cost utility scale solutions, but PV is still at low enough levels in most areas that it's cheaper to simply store nothing and vary occasionally let excess power go to waste.

PS: The important thing to note is solar is cheap enough that even without any subsides the market is going to stick with a solar component anyway simply because that's what's cost effective. And solar is only getting cheaper so that % is going to slowly rise over time without any intervention. The issue is people want solar to make a large percentage of the grid power and that's where there are problems.
Alibaba's $9.3B Singles' Day was really only $230M
Thanks! But actually, it pains me that we're still showing a SHA-1 cert.

Because bureaucracy, we're still waiting on a replacement SHA-2 cert, which once installed will bring our score up to an A+ like this:

https://www.ssllabs.com/ssltest/analyze.html?d=staging.18f.u...

We're changing up processes internally that will speed things up. The subject of a future post!

EDIT: And yeah, we're aware of the notalone.gov issues. There's some legacy infrastructure there, but we'll try to get it fixed up. Our future sites will be stronger.
iOS 8.1 jailbreakDownload Pangu and latest jailbreak tools
A friend of mine once had the best idea ever for a destructive piece of malware. Assume you have a reliable infection vector on Windows machines. Now, instead of deleting hard drives or enrolling machines into a botnet, just find every Excel spreadsheet you can, and subtly fuck with the numbers.

If you wanted to damage the US economy, a similar approach taken with compromised electronic markets could probably do some real damage.
Bret Victor is doing some amazing work in this area.
http://worrydream.com/#!/InteractiveExplorationOfADynamicalS...
They should offer this to Kahn Academy.
The Invention of the Jewish Nose
NSA is part of military, not a part of police force. Socialism or capitalism - this is irrelevant. As long as country has aggressive foreign "interests", organization such as NSA is a nice tool to have.
This the most extreme Gist I have ever seen. So fun to see a functional browser implemented with only a few lines of code.

Disclaimer, I'm on of the dev being Thrust. That's exactly why we built Thrust, but @morganrallen pushed the envelope by distributing that through a Gist. So cool.
cool! I will check it out. thank you
Inside Wildcard’s Tech Stack
The article is correct that there aren't yet best practices about building minimal and secure Docker images, but it seems like switching to unikernels would be much more work. Unikernels also suffer from the lack of VM resizing and minimum VM sizes being too big in many cases.
This program appears to use heap allocation, at least indirectly through its use of std::string.

On a more general note, libraries that perform zero dynamic allocation (and instead require the library user to pass in memory) can be very convenient for systems programming where portability is a concern. For example, I use Intel XED instruction encoder/decoder, which is a library that performs no dynamic memory allocation. This allows me to use it in user space and kernel space without hijacking the malloc symbol.
EBay designed fitting rooms for Rebecca Minkoff
The inability of electronics companies to get to grips with software has to be one of the biggest, and saddest, stories of the past thirty years of industrial history.
No such thing as a risk free rate for a government. You'd have to use the borrowing cost of the treasury to find out how much it really cost. But treasury rates have been very low recently. It's probably not totally made up, but it's probably close.
I will watch for it :-)
Put in a more expensive plan and say they get increased support with the more expensive plan.

Also, make it harder to use improperly. Can you block direct calls to the IP address? Etc.
If they wanted to they could turn Google Code into a real competitor for Github with full GAE and Compute integration. That would make it an amazing platform.
That's not very convincing, considering that, on closer inspection, the previous ones turned out not to be subsidies...
where could I find other quotes like this?
Do you have a video that doesn't require Flash?
I thought: E[IQ] = 100, SD[IQ] = 10
then SD (for n = 37) = (10 / sqrt(36)) =~ 2

So a 10 point deviation between groups is 5 sd's, p <.001 ?
I'm assuming your app servers are traditional VMs?
Congrats on the launch, Team Wildcard! Very exciting.
> As of today, all json parsers rely dynamic data structures to parse and store the json objects.

I'm not sure that's entirely fair. Callback-based parsers like YAJL leave the application free to store the data in whatever data structure they want, or even to stream-process the input without storing in a data structure at all.

But regardless, the meta-programming approach described here is interesting and novel. Generating structure-specific parsing code is a well-explored area (for example, Protocol Buffers is designed entirely around this idea), but doing it as C++ metaprogramming is a novel approach (Protocol Buffers relies on compile-time code generation).

I don't actually understand how the object inspection and compile-time codegen works with this meta-programming approach; will be interesting to dig in a little deeper and learn more.
Show HN: The 3d universe of npm
Well that's the first time I've ever seen the word "invigilators".
Why software development is broken
The more powerful politicians that run Congress cut off limbs to maintain the system, when necessary. That's exactly what they did to Frank Church.
Article says they're not using any American firms for the infrastructure. This just makes me wonder what companies are they using (Chinese maybe???), and why/how do they trust those people not to spy on them.
I'm about to try it.

Anyway, why the author didn't published the package on npmjs.org?
On a sidenote, there are 5 year-olds within spitting distance of "basic competence" in chess.

http://www.chess.com/forum/view/scholastic-chess/benjamin-ha...
Using Go in Government
The problem is that no matter how hard I think, I cannot find a solution.

It is not worry, it is despair.
What pills should I take to get the most positive placebo effects?
Bleeding edge WebGL requirements, but great 3D object control: http://cesiumjs.org/
One thing I have been doing lately is going through sites like Freelancer.com and browsing their projects section. I have been looking for "build a website" projects and gathering ideas this way. Feels a little dirty since they are not my ideas.
I chose not to because it's not really a serious project. It is more of a demonstration. But, I will be undertaking a more serious browser in the near future.
Yeah my 5 year old is sitting there eating a sock.
The Simplest Java SSH Client
I think I understand what you mean about native comments allowing me to do more to enrich their content, but I'm curious about what you mean by "spread?"

Could you elaborate?
Great! Any chance of hosting this project on Github so more people can contribute?
San Quentin prison seems to be doing a great job at engaging prisoners. The inmates write beautiful answers on Quora too.
Oh comon. Stop with your philosophic anti captialist meta ravings. Either make real arguments or g stop posting.
Are you referring to developers within the GSA, or to internal users? The public certantly doesn't need to go get a client certificate to access these sites.
If this is real and a cure can be developed, think about the huge free boost it gives to humanity in total since it might affect such a large amount of people. On the other hand, I'm skeptical. With such drastic effects, wouldn't the evolutionary pressure for the immune system to deal with it have been tremendous?
> Celebrities/followers yes.

Twitter is the new RSS, just less nerdy, basically.
Thanks for the link. I played around with it for a couple minutes and will be coming back to it later for sure.
Yes, so the attack vector is still higher than other solutions outlined in the article, but we've managed to avoid installing stuff like gcc. It's also significantly cut down our deployment time, especially when updating libraries/requirements.
vimeo should run direct html5, try this: https://vimeo.com/111388356
Lyft Launches Lyft for Work
Interestingly, one plant (partially owned by Google) recently applied for a Treasury grant to pay off its DoE loan [1]. As far as I know it has not been approved, but I'd be interested to know whether any companies have successfully done this.

[1] http://online.wsj.com/articles/ivanpah-solar-project-owners-...
What realistic threat(s) would a spy pose? I don't know how the NASDAQ systems work.
Given that the 'vanilla' async-await isn't always safe/bug-free, I can't imagine that the harder version will be.
The standard deviation of IQ scores is 15 by definition. (That is, raw scores on the item content of IQ test batteries are generally not reported at all, but rather what is reported for each test-taker is a standard score defined as performance at the norming population median level being an IQ of 100, and performance one standard deviation up from that being an IQ of 115, and so on. All mainstream individual IQ tests have been scored this way for just about all of my lifetime.)

P.S. I would take four standard deviations up or down (the IQ range of 40 to 160) as the outer limit of validated IQ scores, and indeed few modern IQ test batteries purport to report scores outside this range. See

https://en.wikipedia.org/wiki/IQ_classification

and the published reference books cited there for more background.

P.P.S. I should have mentioned when I first posted this comment that any IQ test has a standard error of measurement even if it is faultlessly administered and scored. Sometimes small-n studies like the study reported here have IQ score differences between two groups that are simply the result of the test errors showing a difference where no actual difference exists. IQ tests are often also very frequently administered incorrectly or scored incorrectly even if correctly administered, magnifying the size of the error band around the obtained score. For this study, I'm not sure if the human subjects tested were tested by test-givers who were "blind" to what group the test-takers were in, which could also be an issue.
Show HN: Build a Party Invitation Powered by Uber's API
Taking that kind of test is far worse imho. (Been there, done that...) It gives the parent a warm fuzzy "our kid is a genius" feeling as they encourage their child to do so, and the feeling oozes back onto the kid as an "I am a genius" anti-social attitude. Peer rejection won't be far behind, and there's absolutely no way anyone can argue this is good for the child with a straight face.
Rump kernels (http://rumpkernel.org/) are essentially Unikernels for POSIX. I'm currently working on running unmodified application stacks (base firmware/"not-OS" + rump kernel + userland application) on Xen and later, KVM and bare metal.

Will be giving a talk on this at http://operatingsystems.io/ in London on November 25th.
Do I have to be pure of heart to be able to ride it?
Stuck at “bleh”? A unique method, backed by science, for building a better life
The telco and internet backbone are considered public-emergency infrastructure. The government would need to build a PSA system with 100 percent coverage, if they were unable to camandeer one already built. That opportunity cost is huge, and why as part of the operational licesnses of cable/telcos, there is language to provide for emergency services.
Nothing not to love -- a whole bunch of syntax sugar that makes code cleaner without messing around with core concepts that breaks code conceptually. It's also great to see how quickly good ideas permeate the language landscape today versus ten years ago (or maybe it's just good ideas finally permeating the landscape all at once).
Thanks! This helps a lot. Part of my curiosity about commenting best practice stems from an ignorance of how spambots really work.

It's nice to hear from someone in the same space.
It's relevant because a Capitalist nation properly has a very small, very limited government. Under Capitalism, taxes - to the extent they exist at all - are supposed to be extremely limited. See: US in 1910.

You can't fund the military industrial complex with anything other than a modern welfare state, backed by something like the Fed. It would be impossible under Capitalism. That switch-over happened with WW2 in the US, with the massive enlargement under FDR of the federal government.
KDE4 Productivity Tips and Tricks
Announcements like this are a huge incentive for large Brazilian firms to get into the cloud hosting space, reminiscent of one large American e-commerce company (whose name happens to be a river of Brazil) entering the cloud hosting market. The prices offered by hosting services here are largely the result of a massive investment, so the first Brazilian firm that can make such an investment can offer competitive prices and learn from the mistakes that firms here made (e.g. AWS dashboard devolving into an enigma of overlapping tools).

In a country that has one of the fastest growing economies of the world, and where the government is publicly wary of American IT companies, affordable and local cloud hosting will certainly happen soon.
Solving the Makefile Problem
Startup Spotlight: TripTips uses locals to create custom travel itineraries
Both AWS and Azure have local datacenters in Brazil. That would should be enough for the laws being discussed around keeping data geographically within the country.

One important point though is that they have been traditionally charging in USD, so the financial processes might not be aligned yet.
Is systemd now able to work within user namespaces?
As I write more and more code, the more I want simplicity

I had a 24 year old developer report to me that apparently thought his bonuses were tied to how many operations he did on a single line of code.

He consistently wrote unbelievably complex lambda expressions with multiple conditional operators that would make a single line take up at least 1.5 screenfulls in Visual Studio on a 1920x1080 resolution monitor. These lines were impossible to debug and had to be inevitably broken up.

For a while I thought he was following the conventions laid forth in:

https://www.thc.org/root/phun/unmaintain.html

...but he really seemed to be genuinely thinking he was accomplishing something good by doing this.

I'm with you though. I'll take simplicity.
Do you have any data that supports this? Is there somewhere that publishes how many H-1B visas the exchanges hire, and where they're from? Considering how much money is flowing through these places (digitally, speaking), I'm skeptical that there's zero background checking involved.
Speaking in hypothetical, sure it would be possible. But I'd need more data to be convinced.
Your ‪‎Open Source‬ Software Defined Networking ‪(SDN) Round Up
Does anyone here know the people who are working with code 7370? I'd love to help in some way. I don't know if they're looking for code reviews or tutoring, or what I could provide, but I'd love to be of help.

It seems like providing the inmates access to something like http://kapeli.com/dash or mdn locally would be a godsend.
CYMATICS: Science vs. Music – Nigel Stanford
I love the new read-only auto properties. 90% of the objects I write are immutable and it's a pain to declare all those private readonly backing fields just to return them in getters.
Thanks.. I have. They only provide ranks and not raw traffic numbers.
Ain't a 'server' boss. They're running a segment of code. When someone hits your PHP page on an oversubscribed DreamHost box with 4000 other sites contending for resources, it's pretty much the same thing. Here we're getting some dedicated CPU/Mem, but it ain't a 'server.' Where's the dedicated disk and ability to install/run whatever I want? Nope, just a lil segment of JS running on a shared resource and billed in 100ms increments.