skysight-inc/HackerNews huggingface dataset:
A site owner would normally know when their logs are no longer accumulating traffic that something was wrong. When their site still appears to be up and they get as far as analyzing router logs to realize that they're actually getting no traffic, even though the site appears to be functioning normally would be a huge red flag that something is very wrong. I would expect any operations team worth their salt to understand this inside of 15 minutes anyway.

Certificate Transparency may help to alert people, it's certainly a step in the right direction, but it doesn't fix the problem in my mind. I honestly don't think the problem can be fixed. All we can do is try and mitigate the risk of our trust being broken.
> Each compile job gets its own short-lived container

Just curious, how do handle input and output? Do you prepare a volume with the input and then grab output from there as well, or the program inside the container is fetching input from somewhere first, runs exec latex and then uploads the output elsewhere?
> Eh, if you're worried about politics of the form of resignations/splits/forks

Splits, forks, and resignations sure do happen. However, it doesn't require votes, committees, lobby groups, rants, arguments and flamewars on blogs, bugs and mailing lists, complete with news coverage of the drama. It doesn't need to drag on forever... I think that's the part that makes it very much look like politics.
Namecheap down
Moz keeps a record of known Google algorithm updates:

http://moz.com/google-algorithm-change

In 2014 alone there have been more than a dozen of major updates. Keeping up takes significant effort.
Well, there are two separate problems.

First is phonetic similarity. This is mostly just to allow users to be able to understand each other and to help automatically catch alternate latinizations so you find out "Hey, he already registered under a latinized-spelling name".

The second is glyph similarity. This is the security concern where you have two glyphs that are graphically similar but phonetically completely different, but can easily be mistaken for each other. These glyphs are used to trick and confuse users. The first kind of check won't catch these, but they're the reason we don't have unicode in domain names.

Probably a correct system would have a very liberal interpretation of glyph similarity and would treat strings as matched when they contain similar glyphs.
Debian:

[wget]-depends-[libuuid1]-recommends-[uuid-runtime]-depends-[libsystemd0]

Ph’nglui mglw’nafh Cthulhu R’lyeh wgah’nagl fhtagn
Aggregating Ranges in Postgres
What It Would Really Take to Reverse Climate Change
Spree Commerce Upgrades MailChimp and Mandrill Integrations for Wombat
Watch Earth's Yearly Carbon Cycle in Just Three Minutes
I don't understand the conclusion that urges the move to sha256 certificates. If the cost of an attack is going down by a factor of 1.5 every year and sha256 is only 1.4x more expensive, then doesn't transitioning to sha256 only serve delay the problem by less than a year?
Israel Demolishes Family Home of Palestinian Driver Who Killed 2 Pedestrians
You have never, ever, taken the side of a woman in any HN discussion.

Easy enough to refute: https://news.ycombinator.com/item?id=7539622 https://news.ycombinator.com/item?id=7539709

That discussion is almost the opposite of this one - the author spurred negative emotional reactions, but I defended her due to her careful definitions and reasoning.

This one also defends a specific human: https://news.ycombinator.com/item?id=7312188

As samreidhughs points out, you are incorrect in this claim for a second time. My mistake, I remembered that comment, didn't remember it was you who made it.

I pretty rarely defend a person of any gender, however. Most of my comments tend toward abstraction. I barely view the comments I've made here as defending Uber, and more as simply advocating against mobbing.
Yes, not opening here.
Data Elixir #11: maps,recommendation systems, document mining, stats display
The Corrupt Latin Alphabet and How to Overcome It
How to Reddit: A Practical Guide for Marketers
$200-$300/month from ebook sales on Amazon. It was more ($600-$700/month) when I was releasing ebooks more frequently, but I haven't written any since July.
> battery takes me for a good chunk of 48 hours.

I'm actually quite surprised it's only 48 hours. My is keeping 3-4 days without charging. I have it configured to check 3 IMAP accunts and sync facebook, twitter & gmail once per hour, with a couple of most used apps running constantly. To be honest I never expected that I will be to find a phone that will stay charged for more than single day.
Huh? A software cooperative?
The systemd is a make dependency only. Unless you plan on compiling it yourself, you don't need systemd to run it.

~ $ y -Qi libutil-linux | grep Depends
Depends On : None

EDIT: conversely, these are the packages depending on systemd:

~ $ y -Qi systemd | grep Required | fmt
Required By : accountsservice chromium colord crda cups
device-mapper gnome-session lib32-systemd libgdm libgusb libpulse
libusb libvirt libwacom lvm2 media-player-info mesa mkinitcpio
netctl polkit procps-ng qt5-base qtwebkit rtkit spotify subversion
systemd-sysvcompat udisks2 upower xf86-input-evdev xf86-video-ati
xf86-video-modesetting

As a sysadmin and developer I don't understand this systemd-hate. If you ever have written a /etc/init.d script for a python non-daemoning script running in a virtualenv, or something to the same effect, you'd notice the improvement over SysV init scripts.

Upstart is nice too, but as a Linux desktop user I love socket activation: I can have cups, avahi and other optional/non-critical daemons "active" but not actually using any resource, until effectively used by some other process.
Because they represent a well-known concept in category theory and symbols are a simple, uniform way of representing that concept. It's terminology. Math has terminology and so does category theory. Should we write (3 multiplied by 2 added to 5) in math? No. We write 3 * 2 + 5. Once you know those symbols, they're well understood and concise.
Can you share a link? I'm curious to see how the AdSense ads are integrated with the content/layout.
How to use Pure DI
Pure Handlebars Bound Helper via Object.observe
I've found that you have to work on something that you're passionate about, something you want to use. I don't have the magic formula for finding these things, but after trying several side projects and having them fizzle out, I've finally found something that I want to spend almost all of my free time on, and I do. I do hope to sell the product, but what keeps me working on it 40 hrs a week, in addition to my full time job, is the promise of actually using the device.

The closest I can get to making the process formulaic is to find a hobby that requires gear of some kind. Before you ever build something to improve that hobby, you need to enjoy the hobby. Then, find some aspect of that hobby that could be improved, most likely through some sort of automation.
An hour on GitHub
Pingometer - Website Uptime Monitor
Reading the docs now, I like the reverse revenue model.
He got Rule #2 slightly wrong, should be: "Strong static typing with optional dynamic typing".

Makes much more sense, but I am going to forgive him.
The problem here is that getting a vetted cert - or worse, compromising the authority that vets those certs is relatively trivial for a nation state, or even someone that's morally compromised enough to say, kidnap the CA Director's family. The fact is, trust is easily compromised and the current infrastructure needs to be hardened against that.

Even if the browser only had a single authority you do trust... how easy would it be for someone to force them to do something to compromise your trust? For instance with an NSL bound with a gag order?
I'm inclined to agree with you however there are as many pitfalls in making permissions too granular as their are in leaving them too broad.
New Particles Found Using Large Hadron Collider
More unethical than manufacturers of nuclear weapons components, missiles and drones?

Makes for a nice soundbite but I hope he doesn't actually believe this given Lockheed, Texas Instruments, General Dynamics, etc. are all a part of SV.
Obama to Announce Executive Action on Immigration Friday in Las Vegas
No :) It's not legal in America for people resident in America on an H1B visa to operate businesses.

You could just ignore this, like I do, but if you're in America on an H1B visa, which I'm not, then you're probably best off following the rules, lest they expel you and never let you back in, without giving you time to organise getting all your stuff back first.
If they're not normal humans, it's only because they have more willpower than you. That's the best news ever, because it's been proven in studies time and time again that willpower can be built up just like muscles through exercise. Conquer your will, and you'll be able to use it to build what you want. Start with meditation if you're not doing it already. Regular physical exercise and meditation are excellent ways to build your willpower, and I guarantee that an inordinately large percentage of HN users meditate compared to the general public.
At least the vote is on the record. Time will tell whether this is another Elop moment.
Then you're saying maybe all three of us aren't so smart? No argument here :)

I'm not claiming to be smart, but I'm not going to hesitate for a second to call out people who start putting others down, no matter what.
And as a result "We have reached the todo list app event horizon, where it actually takes longer to evaluate all the existing todo list apps than it does to write your own todo list app."

http://blog.codinghorror.com/todont/
The thing about Chef is that it tries to simplify the process of configuring and installing many applications that might run on a server.

Docker pretty much removes the the need for such complexity. Don't think of it as a provisioning tool, like chef. Don't think of it as a VM. Think of it as an isolated filesystem and process environment that eliminates the complexity of supporting multiple, disparate application stacks.

The storage for persistent storage with Docker is less compelling, because now you have shared resources between containers that should be isolated. That said, we run Cassandra clusters in Docker and have no trouble.

Also, If you want to re-use the work you've done with Chef, there are chef plugins for Docker which make it easy to provision Docker images with chef (solo, I think)
Our company appointed an ECD as our CEO. His personal thoughts on that
We just opened Pingometer up to the public!

Take a look, create a free account, and please send your feedback. :)
Try Gentoo if you're not happy with FreeBSD.
article.published_at = Time.zone.parse(elm.css(".byline time").first.to_h["datetime"])
# timezone seems inconsistent, no big deal because we only care about date anyway

I've written a TechCrunch scraper myself, and it turns out the reason the time-zone is inconsistent is TechCrunch outputs the time in 12-hour AM/PM...but forgets to include the AM/PM. So the hours just loop around from 0 to 12.
How Medical Care Is Being Corrupted
A quick history of why Asians wear surgical masks in public
Yes, we use a volume to get files in and out of the container, and then we upload the relevant files to Cloud Files for the client.
On my vanilla iPhone 6, all it does is turn the whole screen white.
What SDK did you use?
two comments here:

first congrats if this is your project, on demand virtual machines with focused tasks and recording terminal sessions to evaluate later is pretty interesting and seems like no easy feat and even, outside the context of an interview, seems like it has a fun puzzle

that said, as somebody that's been interviewing technical candidates for the past three years or so, this doesn't appeal to me at all, primarily because it only time-shifts the "i'm staring over your shoulder problem" that makes even competent developers make stupid mistakes.

and to be honest, i'm not sure that as an applicant, i would be overly thrilled to receive one of these screens, it makes me think that the company can't be bothered to look at my resume, or ask me in person, or do a reference check, or even look at some code that i've provided. arriving here signals to me as applicant "this company isn't even willing to put in a 15 minute screen to ask me fizzbuzz" which, to my mind, is a bad smell to give off.

but mostly coming from the side of "i talk to a fair number of candidates" i never find that code samples or projects or anything really gives me as much insight as talking to somebody about their work, about the things they valued in their sample projects, or the things that they're presently passionate about.

on the spot code interviews are already problematic, but looking at a realtime playback and scrutinizing it feels like a net loss over having a candidate walk me through their thought process for `fib(n)`, a process which is already stressful enough when you can explain yourself. it's great that these eventually run through a test suite, but

that said, i think there's truly something novel here for non-job situations it's like, you have ten minutes to write an ansible playbook to configure a machine with "git+nginx+memcached." that's a scenario where you're testing yourself against some unknown challenge in a domain you're probably strong in. but i don't think i find it an appropriate challenge 'experience' for applicants.
Funraising is very envy-inducing. Envy tends to be good for advertisers (look at womens print magazines, if you have any doubt). I'd be interested to see how this impacts their advertising business metrics.
You misparsed that line, it's talking about the time to complete a single hash rather than the amount of relative time to find a collision. SHA256 has 128 bits of security to SHA1's heavily wounded <80 bits, there's a significant increase in complexity between the two.
Really interesting - We've just implemented a html5 drag and drop which supports IE all the way back to IE9 but not mobile!
This looks great
Hire a good lead developer and slowly expand their responsibilities. here's a good example:

https://overflow.bufferapp.com/2014/06/06/from-android-contr...
The double tap example never resizes on my Chromebook Pixel. The others work nicely.
Actually JavaScript seems to be used more commonly for Sailfish apps. It is supported out of the box as Qt/QML allows you to use either C++ or JavaScript.

Here is a simple sailfish app built with JS (not my project):
https://github.com/Simoma/tinytodo
Angular Announcements for November 2014
What's your point? Correlation is not causation.
The Fundamentals of a Killer Reliable Transport Protocol
Yes, that quote is incorrect. An FPGA is the epitome of reprogrammable computing devices, they don't have memory within themselves and must load a bitstream from an external memory device on every power cycle.
One option is Boku[1]. Several companies I know use it to great success for non-credit-card, non-paypal payments.

[1]: http://www.boku.com
"We bred them to be tasty, but humanity's reign over nature crumbled when they learned to taste"

"We bred them to be tasty, but no one could foresee that it was us that would be devoured"
a) Obviously you structure it as payments after unification, and you let them set up up an industrial organisation like Samsung or Hyundai. That's plenty of power for most.

b) S. Korea would love to be able to fund almost any kind of opposition to the current regime in N. Korea. That's not what this $500B is for, but if there was a credible place to spend some money to undermine the regime I'm sure they'd be happy to do it.
"Politics" is how humans interact with each other. It's often ugly because humans don't have nice interfaces.

Any project of more than 2 people has politics.
To be clear, we're talking about running a country in your home country, not in America, while you are currently on an H1B in America. I'm sure you know more about this than I do -- could you provide me with a link? I'd love to learn more.
It's up! https://www.gitignore.io/docs
If everybody agreed that most other languages are much better and more productive than javascript then we should have had one of them in the browsers already. And if the problem is just social/organizational then we might never get anything better than javascript, in which case Flow is awesome.

I think Dart seems to be a great language and IE, Firefox and Safari should have implemented it years ago, but they didn't. Now I think TypeScript is a great addition to javascript and I hope they build it into the browsers but I suppose they won't (maybe EcmaScript 7 will have some parts of TypeScript in it, or parts from AtScript from Google).

By the way, you probably still want minification and concateneted files when you create js from other languages. That stops me from using them, I would have many levels of tools between my source code and the production code.
Yeah, but inetd was just about TCP sockets. systemd also supports unix-socket activation, which can block the client when the buffer is full, preventing data loss. I agree that TCP socket activation is iffy (though I still use inetd for non-critical stuff), but unix-socket activation seems safe to me.
I'm surprised Huffington Post isn't blocked from HN. It's nothing but blogspam and cranks. How about we list the original content, either the study[1] or the op-ed that most of the content was taken from[2].

1: http://mct.aacrjournals.org/content/early/2014/11/12/1535-71...

2: http://www.washingtonpost.com/posteverything/wp/2014/11/18/h...
Ctrl-F "there goes" found this comment just fine.
We're considering that. Would you prefer a daily digest with the top x stories, or a stream of hourly posts?
Is that a hard number to hit? It seems like it could be, without getting great deals on auctions, where it might be hard to predict necessary repairs.
I get just $45,00 month with my web app. I have 1800 users.

www.easypnr.com

It's just a few bucks but, at least, pay the server bills.
ClassDojo Adopts Deletion Policy for Student Data
On #2, using binary block/allow lists for sites works, but long term, it
can be problematic in the sense of maintenance effort (i.e. your time
;). A less common but more interesting approach is to use site-based
weighting. There will still be some manual wrangling involved, but you
might be able to automate some of it eventually (analysis of content on
the site, dns, linked-from analysis, google page-rank lookup, etc.)

With site-based weighting, you can still block with a threshold, but you
gain the benefit of adjusting rankings based on past/known site quality,
and the advantage of setting with a "default weight" for unknown sites
you've never seen before.

It's really just a different approach that you might want to consider to
handle the webspam/blogspam problem.
Show HN: TechWatching personalized news aggregator Tag Directory
What to you guys think about the arguments in this article? http://www.centask.com/a-eulogy-for-the-manual-to-do-list-th...
Is Entrepreneurship Addictive?
I followed a link to webarchive and, coincidentally, ended up on the slashdot homepage from about 2000 I think, RedHat was becoming a threat to Linux, just like Microsoft, and it's interesting to me how well they predicted the future, they noticed that GPL, open source... (as Microsoft's github account shows) wouldn't stop a company from maneuvering, entrenching its position and dominating the marketplace.
Anyone have a source that explains the mechanism of action behind cannabinoids disrupting cancers?
The specs say "up to 32gb", hence my question. But that's great news that 64gb works. Would 128 work as well?
Show HN: Farecast for Uber, my first iOS app
C++ as the default means that things like MOAI can come onboard as rapidly as possible. That's a good thing, yo - it means freedom and variety - and also, very important, compatibility with an existing plethora of libraries and sources. Ports are a very important aspect of their strategy, I think .. and C++ opens the door for lot of things, one of which is of course an alternative language environment, albeit portable. But, then again, things like MOAI mean that getting the host up and running on Jolla is probably going to be easy, and then .. suddenly .. there are hundreds of potential apps to be brought to the platform ..
> The performance problem with classes is that the browser has to traverse the DOM to find them, starting from the deepest element and working up. It's pretty quick, but not that quick when you have a deep tree. Whereas finding an element by ID is literally just a single lookup in an index regardless of where the element actually appears.

Best I'm aware this was true until browsers all supported getElementsByClassName:

http://caniuse.com/#feat=getelementsbyclassname

The only material difference between that and looking up a DOM ID is that the first yields an array (of a potentially wide range of tags) instead of a single element.

Plus, as already highlighted in a separate comment, `div.class a` or `div#id a` will both work the DOM tree from every `a` element up (just like describe) anyway.
If your house gets repossessed after missing a payment, you have something very wrong with your legal system. Not even my $5 VPS gets repossessed after missing a payment.
How to Make Streaming Royalties Fair(er)
sounds like you need a better lawyer
If I had a penny for every Debian bust-up I've read about on LWN...

Debian will survive. That constitutional document and those processes people like to moan about all the time, are the same document and processes that ensured Debian's success, solidity and continuous development. For every great engineer stepping down, I'm sure Debian will attract new talent who wants to make a difference. For every controversial decision like on systemd, there will be a time when that decision will be either vindicated or corrected. Like the Linux kernel, the Debian project is now too big to die because of a single but controversial technical choice.
I think Google created Angular in part because of some problems with GWT. Of course some developers still uses GWT but others have switched to AngularJs and seems to think it is much more productive. And some combines Dart with Angular which really looks interesting.
"Reddit is a self regulating marketplace of ideas." -> I like that.
Doesn't the whole "...with no currently accepted medical use" part automatically obsoletes with research such as this?

Surely the DEA has a mailing address to which it's possible to send relevant research papers?

Surely they read the literature?
>> that is simply FUD

You should educate yourself about FUD, I recommend the Halloween documents, where they explain the unfeasibility of FUD tactics against an open source project, and that if someone tries to do it they won't get anywhere.
That's probably because util-linux has a command, logger, which can optionally log to systemd's journal. Take a look at http://man7.org/linux/man-pages/man1/logger.1.html.
It stops mass spying, targeted is fine if legit.

The NSA will not stop because DC wants to spy on governors, lawyers, judges, companies, etc. NSA has been illegally spying domestically since its inception, which was itself an undemocratic exec order. Only Supreme Court will restrain, and doesn't protect against Chinese and Russian hackers. So encryption throughout consumer tech stack and net protocols is the only answer.
Cool, inspirational that you were able to get the business up to that level alone.
First of all, I know very little about RE. However, this seems quite high, no? Is this for a property you need to do some redevelopment on yourself (i.e. put in a new kitchen and/or bathroom, and do some painting), or for something that is in an acceptable state to rent out?
I'm curious if there is a reason you don't use Quicktime's built in screen-record functionality?
Introducing Shake's Image Release Form