skysight-inc/HackerNews huggingface dataset:
When developing a web application for phone, tablet and desktop, is it a good principle to use the same HTML for the three and a separate CSS for each device?
They already exist, particularly for GPUs. We know that there are few open GPUs and gcc being GPL is not going to open them.
> Feels like modularity is missing, though. Is there any support for "require" or "import" or something similar?

I haven't personally tested it, but i imagine everything is supported, including require and import. It doesn't look like Spider does anything weird to scoping, so to use a global you simply use it with `::global(foo)`, or `use global; global(foo)`

I imagine require would be `use require; require('mylib')`, and etc.
Images not downloaded default. Both the fetcher and the phantomjs proxy is totally async.
> But because cost is one of the greatest barriers to making self-contained villages

I think they're talking about up-front capital, not recurring/maintenance costs, but it's hard to tell since we don't know whether the $8,000 a month includes the amortized costs...
This seems like a good idea - there need to be more solutions in this area. Although I'd prefer something entirely self-hosted, still, I look forward to seeing the source code somewhere.
The web framework that is chock-full of security blunders continues unabated.

How do people persist with it? Inertia?
The main reasons I reach for Coffeescript for my personal projects are:
* built-in support for comprehensions and other array/object operations
* simple syntax for context binding
* automatic module isolation.
These eliminate a lot of boilerplate littering my JS code. At my company gig we use JS but rely heavily on Underscore to address the same pain points; I prefer to have it built into the language syntax instead. ES6 probably has enough of this built in to make me switch back eventually.
Clojure can also do this, since it has a Typed module [1].

[1] https://github.com/clojure/core.typed
But there is no problem: "programmers writing in other languages" - they will keep using those other languages, while you will use your new language with unusual syntax. Alone.

Now if you want to persuade those other developers to use it, then maybe you should meet them half-way?
Philae's landing is commonly represented as a vertical descent. In fact, it seems there was considerable lateral velocity.

My guess is that Philae landed tumble-weed style, jumping, and rolling until it hit a wall, in this case, the cliff that shadows it.
So what do you think of things like Apache Mesos in this regard?
Jermaine could maybe sing as well as Michael but could he dance like him ?

Michael was in another league altogether. Even Quincy Jones says about Michael , "Sometimes the hand of god just lingers a bit longer over someones head".
The Nexus 10, Lollipop, and the problem with big Android tablets
For Wearable Tech, One Size Does Not Fit All?
How to get rid of diarrhea
I actually agree about this - two ways to do exactly the same thing is generally a bad thing when it comes to language design. But I think that a more important goal is to make the transition from Spider to JS as easy as possible.
Launch.it took off and came back to earth
I suppose the issue would be that Amazon are now directly competing with Netflix via their own video offering, so may be reluctant to give Netflix the means to outdo them at their own game.

In my own personal opinion, Amazon's UX for video is not all that great either, so it would seem both parties have plenty of room to innovate in this space at least, which can only be a good thing. I'm paying a subscription for both, and although I currently use Netflix more, it really wouldn't surprise me if Amazon started rapidly working on their video UX - they've got 'buying stuff' down to a tee, so it'll be interesting to see what they can do with streaming video.
Gombe, Tanzania: the forest home of Jane Goodall's chimpanzee research
Show HN: College Match – Tinder for the College Search Process
> REST was in the original HTTP spec.

No, it wasn't. Fielding's dissertation, in which REST was defined, argues that a certain set of principles were an underlying foundation of the structure of the WWW architecture in its original construction, proposes REST as a formalization of and update to those principles, and proposes further that updates to the WWW architecture should be reviewed for compliance to the REST architecture. [1]

So REST is a further elaboration of a set of principles inferred from the original HTTP spec, not something present as such in the original HTTP spec.

[1] http://www.ics.uci.edu/~fielding/pubs/dissertation/web_arch_...
I'm betting most people have this setting already:

irb(main):001:0> Rails.configuration.serve_static_assets
=> false

But anyhow, it's an easy upgrade since it's just the security fix.
Slightly off-topic, but: I'm currently working as a remote contractor for a company and am able to travel wherever I please (And have done so). Actually planning to move to Thailand, rent an apartment from Airbnb, and camp out there for a few months come February. I'd love to talk with you about your experience if you could spare time for a few emails. My contact information is in my profile.
The thing is, you might want to pipe the output to something else instead of saving it to a file. If you check that you're outputting to a terminal, then the terminal behavior is different than the pipe behavior, which might be confusing.

Maybe if it's a terminal print a warning with a simple explanation, or a Y/N prompt?
Some of things the newbie wannabee saleweasels, sorry, recruitment professionals, will do are truly awful.

I have personally seen candidates blown out of the water for a role just because the agent can get a bigger payoff for another candidate. Even though the process was basically complete - the agent lied to both client and candidate to accomplish this.

They will try to pump and harvest new candidates for their network of contacts to spam them for leads.

They will advertise fake roles to harvest CVs.

They will nuke your application with big companies when you are represented by an alternative rival agency (usually accomplished by forwarding your CV again for the same role, to make your overall application look unprofessional).

They are scum. But it seems today we are stuck with them...
Does it work if I am in North Korea?
No, he reasons that it must be humans because why would a completely alien, 5th dimensional race give a damn about some primitive lifeforms on the 3rd planet of a minor star in a minor galaxy.
React Rocks: Redesign Your Front-End for Composability
Of course, but I think he meant native modularity support, which is important IMO.
Iosjailbreakguide.org
Obviously it does. Just put the North Korea timezone!
Actually it's probably more secure than the vast majority of frameworks.

And certainly it's more secure by default than most web apps. Have you looked into how many PHP apps still suffer from obvious SQL injection attacks?
Well for one, its gotten a lot better and continues to get a lot better. And for two, the ruby on rails community is great. But for three: Mike Hartls beginning rails tutorial. Is there any other book like that on any other language? His book is a critical reason why I choose rails.
Algorithm Designed to Show the Benefit of Quantum Computers Finally Tested
Cut That Crease and Paint Those Lips Makeup Tutorial (TIME LAPSE)
Blockstream closes $21M round
I think the confusion is probably that people didn't realize that "c" stood for "cat" in "cURL".
OK, so I admittedly don't have the time to fully analyze this, but it looks like the bug is in the code that processes client certificates. The default setting in IIS is to ignore client certificates so does that mean that by default you can't trigger this exploit against an out of the box IIS setup?
Getting Started with Pandas and HDF5
yes, that was just an emdash not meant to be command line syntax. Sorry for the confusion.
Gravity assisted boosts, it's how we already travel around the solar system. A little device is better anyways, less stress from tidal forces, less chance you get ripped to shreds.
"Why are we trying to turn programmers into product managers?"

Nobody is doing that AFAICT, it's just why being a consultant is different from having a job.

"Aren't you going to see a lot of the same requirements from projects as a consultant? <snip> That's just paying for experience."

Well sure. It's the experience and the domain knowledge that makes that somebody can do something at a higher speed than someone else, and that somebody knows what a customer is looking for without them having to spell it all out. I'm nobody special, and I'm certainly not claiming that I'm a '10x consultant' in the sense that I'm 10x better than the average or whatever. I was just reflecting on the underlying mis-assumptions in the GP's question.

Also, it's not because somebody bills 200/hour that they make 2004050 per year. Jobs are not like doing consulting. I'm doing OK, but (after discounting for everything) I'm making roughly what a senior employee would. Some do better, again I'm not claiming I'm anything special (and I guess I shouldn't have made this about me by mentioning an example from my own work) but some of the 'calculations' I've seen in this thread are nonsense. It's like people saying 'Mohammed Ali made x million per second in his fights'. Uh, sure.
Architecting on AWS: how to use AutoScaling
No, that's different. Cooking sprays usually include Soy lecithin, which can cook on (if you don't wash it off) and forms a sticky brown residue. The polymerized oil is slippery.

The residue issue is more pronounced in thick/dark pans like cast iron that retain heat for a long time -- unless you clean them immediately, the residue cooks on. If you cook some eggs, eat, and go back to clean your cast-iron pan, the oil will have been cooked on.

The solution for this use case is to use something like the "Misto", which is a spray pump that lets you spray plain oil on a pan.
As an experienced developer who as had to implement dozens of API's over my career, therre are two things that I care about:

1. Documentation - If I have to spend the next month doing trial+error to get your API working, thats no good. The best APIs have a page that describes how get up and running quickly.

2. Good error messages - When something goes wrong I want to know what went wrong. The error message being in a consistent format isn't that important, as long as there is a description of what happened. "Oops, an error occurred, try again later" is not a good error message.

Most of the stuff in this article is superficial stuff that I don't think matters.
Implementing a shell for Bytengine using 'state functions'
I've put together a really trivial example here (in semi-pseudo code): https://gist.github.com/jool/1e83b22fec9d948194a4.

In the example I've modeled each of your uses as a load generator. So you would have to add one load generator per user. Let me know if you have any questions.
C.f. stenography, hiding in plain sight, etc. Drawing less suspicion generally, and if you are in the "mainstream" e.g. a crowded place, your signal becomes more difficult to parse out of the chaos.
Why Apple Employees Learn Design from Pablo Picasso
SharkTank-Backed Groovebook acquired by Shutterfly
Because usage and popularity brings more eyes including security audits?
There can never be enough articles and books supporting API best practices.

Here are two of my favorite REST resources (pun intended).

Richardson Maturity Model: steps toward the glory of REST

http://martinfowler.com/articles/richardsonMaturityModel.htm...

RESTful Web Services Cookbook: Solutions for Improving Scalability and Simplicity

http://www.amazon.com/gp/product/0596801688

And I am looking forward to widespread adoption of the REST problem standard posted here a few weeks ago.

http://www.ietf.org/id/draft-ietf-appsawg-http-problem-00.tx...
Well, a "solution" is a typechecker-as-lint, something like mypy[0]. I think it's also for this "pluggability" (it's an external program, not the interpreter, so you can freely choose what to run) that GvR proposed it's usage in the python devel ml[1]

[0] http://www.mypy-lang.org/
[1] https://mail.python.org/pipermail/python-ideas/2014-August/0...
Case Study: 300% Increase in App Performance with India Rail on Pivotal GemFire
I thought this would be a good opportunity to use 'state functions' to implement a shell for Bytengine. Rob Pike mentions the use of state functions in his talk "Lexical Scanning in Go" https://www.youtube.com/watch?v=HxaD_trXwRE
I like that they instrumented the STM code enough that you can debug slowdowns when writing your code. Never understimate the power of well instrumented languages.
Beyond MVP: Creating Your Minimum Loveable Product
Good work. Love the title for your blog too :)
The apple tidbit is interesting, but it also sheds some light on how/why to appreciate Picasso.
Barbie Fucks It Up Again
Smash is very difficult to stream, with the two biggest factors being that it's not on a computer and the lack of built-in PvP in Melee and Project M. GIMR of VGBC is doing some very innovative things, though.
In my experience aspiring to this would be a mistake.

You can pull off very high production numbers for a while [under whatever metric you choose] before you start babbling in a corner somewhere, but invariably i's mostly crap and you'll end up replacing every 100k lines with 10-20k lines later, but this time it will be well though out, tested, and maintainable.

I've met a few people who have convinced themselves this isn't true, but nobody who has managed to convince anyone else.

So you can paint yourself into a corner where all you can do is crank as fast as your tooling allows, but it's like deficit spending, it will cost you more in the long run than doing it right would. Of course, if having a long run at all to worry about this depends on your current output, crank away.
Hi, author here!

It's intentionally tiny, so a bit trivial, but here's a URL shortener in Scotty. Scotty is a library that gives you a toolkit for making webapps in a manner similar to Sinatra.

http://bitemyapp.com/posts/2014-08-22-url-shortener-in-haske...
It's one of the most capable tools of its kind.

I've thrown hundreds of thousands of nodes and edges into it and it's worked great.

Cool test is importing a package dependency graph for all the ubuntu packages.
The sad state of server-side TLS session resumption implementations
23 maps and charts on language
Web browsers have a human intelligence driving the interactions. API clients don't. Hence the huge gap, and as far as I can see, the rather pointlessness of HATEOAS.

In fact, I'm still totally lost as to the usefulness of REST at all, except as a generic term to mean RPC over HTTP except not as clunky as SOAP. Which isn't what REST is. I've yet to see or use an API that was easier to deal with because it was REST.
OK, since a lot of comments here are discussing Software Architecture in general, I would like to ask a question that I've been wanting to for a long time: As a Developer with ~2 years of experience and desiring to be a Software Architect, how do I get there? And by that I mean: how do I develop the talent to design large/complex/distributed software systems, when I'm actually really working on much smaller things on a day-to-day basis? Is it all just something I have to learn in my free time? If so, then how should I go about it?
"Slightly in favor of typechecked (he typed smugly). But that's not really enough. It's not clear there's even a 5% bump in productivity."

One question would be "does it compound?" A "5%" advantage (leaving aside how we could even define something that precisely) that compounds every 1000 lines is hard to detect in any reasonable study but could have an astounding effect by the time you've written a 50,000 line application. Even a 1% advantage compounds quickly to significant differences at scale, yet in the small will be virtually impossible to detect as it will be more than swamped by the noise floor.

Part of the problem with these studies is that yes, programmer skill probably does dominate at the smaller end of the scale. I've come to really not like dynamic typing for the sort of work I do, but I still can and do crank out 500-line Perl scripts at times, because if that really is all I need, static vs. dynamic typing aren't the question. It's about how comfortable I am, how comfortable my coworkers are, what kind of library support I need, and a lot of other considerations long before I worry about typing. By contrast, putting together a multi-dozen-thousand line codebase leads me to entirely different considerations in my language choice.

My summary of the summaries is that we still have virtually no hard evidence to go on that has any utility or relevance to real-world software engineering. At best we have some suggestions about how we might teach students how to do their tiny school assignments and a couple of interesting-but-inconclusive case studies on code of real size.
I remember Google made public some very interesting statistics about hard disks and their modes of failure, which was unprecedented in scale.

Google has lots of code in C++, Java, Python and Javascript, and their employees all have passed very rigorous assessments before hiring, so language comparisons should be less skewed by individual skill variance.

I would be surprised if they didn't already perform these sorts of analysis internally.
What status code should one return when the server receives incorrect credentials for an authentication API ?

401 - Unauthorized looks like the correct answer, but if you read the Wikipedia article 401 is specifically intended for HTTP Authentication using usernames and passwords set in the headers.

I recently ran into a situation where a third party library on receiving a 401 proceeded to then ask for HTTP credentials and try to resubmit the request when actually the server indicated that we had just submitted the wrong username/password for our login API (which doesn't even use HTTP Auth). We don't use WWW-Authenticate headers but the third party library seems to be following the standard.

So should we be returning 400 instead ?
Hush: The World's First Smart Earplugs
StatusCake Website Monitoring now free
Isn't that a huge problem to solve though? I don't think i've seen a consistent model for this that suppots both Browser and Server(Node). Node is simple, but Browser has a lot of possible implementations, and a lot of preferences from userspace on how it should technically be implemented.

Ie, i have a strong dislike for how RequireJS handles this. I much prefer simply embedding with Browserify and the like.

How would you handle this issue, i wonder?
Search behaviors in your C++ source code
Neat! Did anyone make a grunt plugin yet? :)
The most useful resource -- and its quite concise -- on HATEOAS is this 2008 blog post from Roy Fielding (who defined REST, so it's straight from the proverbial horse's mouth):

http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hyperte...
I put it back online, but seems like there are some segfaults happening in the markdown parser. Will look into it.
Temptations to Quit – Dillon's Startup Journey
Ptolemy's PI is Ian Wright at the Open University:

http://www.open.ac.uk/science/pssri/research/missions/rosett...

But your point stands; I know a lot's under embargo right now, I was more wondering if we knew if the drill had successfully retrieved a bit of comet or not rather than specific experimental results which will take some time!
If you haven't already, do watch which orbit changes of Rosetta were needed to deploy the lander:

https://www.youtube.com/watch?v=4a3eY5siRRk

Must watch. The video was made by ESA.
Doesn't seem to have notably more security issues than comparable frameworks, like Django, so I think you're probably overstating it.

It remains popular because it's a pleasant and efficient build common web apps. It's not suitable for every scenario, but it hits a pretty sweet spot in most cases. I certainly keep coming back to it, regardless of the time I spend with other tools and frameworks.
Detroit is an extreme example, but the same phenomenon can be seen in cities across the country. In the last few years I've seen the results first-hand in places like Wilmington, Baltimore, Philadelphia, and Buffalo. To the extent that businesses haven't automated-away jobs or off-shored them, they've moved them to anti-union states like Tennessee and Georgia: http://www.edmunds.com/autoobserver-archive/2011/08/tennesse....
> or have parallel typechecked and not implementations

InfraRuby (at http://infraruby.com/live), compatible with Ruby interpreters, is typechecked.
rms himself has "traded away a way to encourage others to keep it open in return for wider adoption" in the past. It's called being pragmatic.

It's always fun to see people being more papist than the pope, though.
You are welcome to make one! :)
I think it's quite good - it allows a programmer to conceptually separate her "normal" functions from lambda expressions, even if they're essentially equivalent, and one is syntactic sugar for another.
LuaJIT, PyPy and the top JS runtimes are similarly fast nowadays.
You're stuck with them only if you don't build good networks. This doesn't happen overnight, but over time, you should be able to get a heads-up on new opportunities without having to deal with recruiters.

Most recruiters are terrible. Turnover in their industry seems to be sky-high. If you find even one who is good at what they do, maintain contact with them. Otherwise, they often aren't worth the time you'll inevitably waste.
Lovefield: a powerful JavaScript SQL-like database query engine for the web
* proxy filters it because of the shit in the URL.
Thanks Tom! I was wondering how could this impact our applications.
Traffic Analysis allows to reveal majority of users on Tor Network
True, but with so much confusion over a blatantly clear definition I figured I needed to keep it simple.
Screencast: Hello, Weave
Bailed out by Microsoft's $150 million investment?
Disruption of the payday loan industry
But from the point of view of both the Origin and the Destination(assuming they maintain similar frames of reference) it takes... 4 years.
You're assumming that programmers will only switch languages if they already "know it". What about other benefits to other languages, such as different paradigms, type systems or other semantic features? Surely to someone who actually writes code they're just as important as the syntax?
Brooks states 200 lines/year, not counting scaffolding and including management and the time spent designing, documenting, and testing.

Seems reasonable for real software (as opposed to 'copy-paste, who cares if the user has to hit F5 once a day?' code) to me.
Facebook building 'workplace network' to challenge LinkedIn, Yammer
This is a huge issue, and I'm still thinking about it. That's why I didn't add native require support yet. I'm hoping that the community would come up with a good idea.
> So should we be returning 400 instead ?

403 Forbidden (or 404 Not Found if you don't want to leak information about the existence of a resource to unauthorized users) is probably the right one to use when the access is unauthorized in the general sense, but not the specific kind of HTTP Authentication issue that 401 addresses.