skysight-inc/HackerNews huggingface dataset:
That would make tokens valid across different applications that share a session. A compromise of one application would then jeopardize all your applications.

Just reduces the risk surface a bit.
I'm a Djangonaut whose also built an (extremely simple) app with RoR. I like them both. I'm more comfortable with Python, so I'm biased, but Rails is full of stuff that makes early prototyping fast, and lots of TDD goodness. I remember the first time I used Generate and it barfed out all these files, and I barfed rainbows in amazement.
If it's a single server then PostgreSQL would certainly give the best performance considering how invasive MongoDB is. However, I'm sure you'll soon grow to multiple servers so that wouldn't be as big of a problem.

Keep MongoDB on it's own server.
Interesting POC, I'll be keeping an e ye on it.

I wanted to thank you for meaningful text right there on the landing page that tells me exactly what the project is (and isn't). No needless scrolling, no giant-sized pictures that convey nothing. Just a concise description and a login box.
YC seems to have taken on a lot of partners in the last few years. What does this mean? What do partners do?
Any of those two will greatly help your employability. But if your goal is to start your own startup, and you're moving away from .NET only because

> The cool startups don't use MS stack

Then I recommend you strongly reconsider. Starting a startup is not about your coolness factor, but about the product you ship. Your users could not care less about what your technology stack is. If you take 6 months to master a technology you don't know, that's a lot of time where your are not actually developping your product.
Balancing the Art and Science of Content Marketing
It's neither. Instead of a blog, here's CBS news article from 2011:

http://www.cbsnews.com/news/heres-the-nations-easiest-colleg...
Another one.

https://github.com/str1ngs/jflect
I just downloaded and am going to give this a shot. I'm often taking videos for clients on how to perform very basic web actions on a CMS, etc, and a gif would be a bit more flexible than various video formats. But one comment.

Icon/website could use some work. Very interesting product, which unless I'm missing something, is kinda unique. But website/icon look like they're from 2002.
If we ever get a mascot, I really want it to be a vicuña :)
XMPP and OTR are not workable for mobile devices. The protocol structure assumes a consistent background connection that doesn't get killed, something that is relatively cheap to do on the laptops and desktops it was designed for, but is expensive battery wise for mobile devices.

Go download an OTR client for iOS, like cryptocat and notice how it pings you after 10 minutes that you have to re-open the app to keep on receiving messages! It's because iOS does not allow you to keep an app running in the background indefinately for battery reasons. This is required for the XMPP / OTR model to work.

You need a protocol of some sort that would work properly with mobile, and I think textsecure is it.
http://NoMoreCaptchas.com eliminates CAPTCHAS. Test it out. It lets humans in!
Hacker's guide to Machine Learning
Isn't that like a reversed touring test? The machine has to guess if I am human and not if I talk to a machine.
I wish that were true. I tried to switch to them after they did their 'next' a few months back but the results were most of the time not nearly as good as Google's for my queries and I had to switch back.
Read the proposed message a few comments up. It actually says "username & password do not match the records we have for username XXX", thus implying that username XXX is a valid username. "Username or password is incorrect" does not indicate whether the username is valid or not.
Suddenly I'm reading Java-come-back articles, which is nice. That convinced me to some extent I should learn Java more for serious coding, instead of spending the same time on php/python/javascript. Not saying the rest languages are bad, but life is too short to get good on all of them.

Also Java is important for android.
Pay It Forward Design Bundle – 100% to Watsi
Siggraph 2014: Tangible and Modular Input Device for Character Articulation
And then you'll do a captcha like they would have you done previously. So either you're status quo, or you get an improved experience if you're in the vast majority that don't do anything other than non-default. What's wrong with that?
The Fallacy of Cloud Lock In
Isn't that like a reverse touring test? The machine has to guess if I am human and not I have to guess if I am talking to a machine.
What about false positives though? What if I just happen to move my mouse, trackpad, or whatever in a way that is similar to that of the robots that the system has learned about?
SipHash's page is missing the recent analysis by Dobraunig et al [1]. The short summary is that it continues to look strong for its use case.

[1] https://eprint.iacr.org/2014/722
Yeah, you can. There's a couple of reasons you might not want to but there's nothing seriously wrong with doing that.

There's a good explanation here: http://stackoverflow.com/a/25475141/240921
Do you have data to back up any of that? The data I've seen says that, right now, unemployment is much higher and income is lower for people who lack college degrees.
CoreOS is still restricted to one machine. It's about installing one operating system, which will run on multiple machines. With CoreOS you have X number of machines, running CoreOS, and Y number of applications running on top, with the CoreOS installations coordinating.

I think the point of the article is to have one operating system, running multiple physical boxes. You could then in turn have something like containers running on top of that OS.
Create Your Account at Melonpix.com
AFAIK, the built-in developer tools in FFox > v33 log ajax calls now.
Agreed. Additionally, DDG is useless when searching for current news events. Google is great at flowing in headlines for recent events with searches, which often leads me to include the "!g" bang if searching for a recent issue/store.
Check Out Andrew Huang's Epic #KlickHealth #HolidayRemix
>The fact I need an IDE to make it workable (just) highlights this point. J2EE was terrible too, because it showed where things can go, if you let the Java astronaut architects lead.

IMO you could say the same thing about C# and VS as well. Using tools that require as much work from the developer as the developer requires from the tools has gotten way out of hand. Delphi turned this sorry state of affairs into an art form.
The train never levitates.
The one thing I can't tell about io.js or node-forward is whether any attempts will be made for PRs against Node 'proper' in an effort to eventually reunify and improve the entire existing ecosystem.

The vast majority of Node end-users aren't missing major functionality from the existing API, so being able to share improvements with mainline Node will be the only way to show that there actually are better features coming out of the forks. Otherwise features developed in the forks will have much narrower adoption and will likely seem unstable/untested.
Thanks Jerry! The home try-on is currently for help with sizing (as a lot of guys are between waist sizes depending on the brand). It seems like a good idea to offer it so guys can checkout different styles. Will look into it.
A compromise of any session ID is more serious than losing the CSRF token anyway. Once I have your session ID I am you from the POV of the server, so who cares about the CSRF token?

Also, you may well have different session IDs across different applications anyway - pretty good idea, if you want to be able to selectively deauthorise logins.
A link to the ISSCC keynote by Mark Horowitz, curator of cpudb. IMO worth a listening to for most anyone interested in CPU performance related issues.
http://isscc.org/media/2014/plenary/Mark_Horowitz/NewStandar...

The plots shown in his presentation basically show off the underlying data in cpudb.
MakeGamesWithUs (YC W12) is now MakeSchool, building an alternative CS degree
> We should be going to mars, as a species, for its own sake

> The idea that the thing that might justify our first visit to another planet, for some people, might be because it would make good reality TV

In this post-modern age of hyperreality, there's not nearly as much difference between the two as you may think.

> just horrifying and saddening and stupefying and should be confronted at every opportunity.

Yes, well maybe. You can fight it. You can wallow in it. You can also see it as a kind of gravity-assist :)
I was sad when I learned about this http_proxy environment variable and that things were actually starting to use it.

An http proxy setting is no more suited for an environment variable than anything else. I think it should just be a string in a file in $XDG_CONFIG_DIR/http_proxy.conf or something like that.
Liable for what precisely? What type of controversy? Reading naughty words? Reading opinions that disagree with the status quo? Perhaps reading a pamphlet titled Common Sense?

The district could actually not put in a filter. That is a thing they could just do. Then, when the newspapers complain, they can yes that's what they did. I promise you the world won't end.

Do you know where underage school children can go to access "controversial websites"? The public library. They can walk right in, sit down at a computer, and view the internet in all it's uncensored glory. For free. In public. As children. Shocking I know.

Also they can just use their smart phone because it seems like every kid over the age of 10 has a smart phone with internet. As best I can tell the world has still not ended.
I don't understand how this can't be spoofed. I can only see how it'll slow a bot down, and maybe reduce the number of accounts it can create/commandeer.
Thats great to hear Nate! We will keep on working hard to expand the line!
Open an estate under the probate laws of your state.
Appoint an executor.
Subpoena all files that Google has with respect to the decedent.
Done.
>Has calling someone entitled ever been useful?

Not useful, and more over, it's ad hominem.
There's no such thing as a Scala shop, there are Java shops and Java-and-Scala shops.
Computing's energy problem and what we can do about it
From my conclusions, that's also a valid take-away.

Looks like it goes both ways. Companies will gain better candidates if they stopped using resumes, and engineers will land better jobs if they started creating resumes that are different from what everybody else writes.
Electric Water Pipe
On the other hand, environment variables are useful for things you specifically don't want showing up in ps. If you've got to supply credentials (passwords, tokens, certificates, etc) or anything else that requires a modicum of security, it's much better to pass those in as environment variables rather than command line arguments.
> I can see that you might be mixing correlation and causation ... Those people would have probably been just as successful without college, but that's hard to prove empirically without a large control group.

There is a lot of research supporting my statement; it isn't something I came up with. I don't see research supporting yours, though it is trendy and often repeated around here.

> College doesn't necessarily cause people to earn more money, better understand the world or communicate well. It's that intelligent people who are likely to succeed in life tend to go to college

I think people who spend four years studying, guided by leading scholars, will improve their knowledge and skills. That seems like an uncontroversial statement. You claim these people are intelligent and motivated; that would seem to backup my claims.

> mostly because they are expected to by society

You may look at it that way, but is there a basis to saying how many others share your view?

On one hand, you can argue that almost everything people do is because they are expected to: Go to high school, listen to their parents, get a job, get married, etc.

On the other, I think most people I know went to college because they wanted to learn and grow.
I wrote a follow-up article about what we at Canopy.co learned from this incident. Check it out (this covers and expands on some of the ideas talked about here):

https://medium.com/@brianarmstrong/youre-probably-doing-dns-...
Aliens in the Valley: The History of Reddit
The interesting thing is there was a time when PayPal was successful partially due to their excellent security. The story that some ex-PayPal people who are at Palantir tell is that PayPal was very successful in blocking fraudulent transactions where other early online payment players were not. This allowed them to keep their margins higher (not losing to fraud) and spend their money on improving the product.

I have no inside information here, this was told to me by Palantir people when interviewing there.
Oldest human engravings
If people were doing things outside the authorized rules with their chemistry sets, for example, you can bet administrators would be pissed about that too.

I don't agree with the school's response, but I also don't buy kids hiding behind the "aptitude for computers" thing. In high school, I was programming in C++. Took a class in it. Got praised for it. You can display aptitude and interest in computers without indulging your adolescent urges to toe the line with the rules.
SBT is probably the best example of the total immaturity of the Scala community in terms of real-world engineering. Hey, we're building for the JVM, we've got Maven, it's arguably the best solution in any language for a very difficult problem that has stopped entire language ecosystems in their tracks. Let's rewrite it, from scratch, using unproven concepts! And put 'simple' in the title!

Afterwards, we'll call XML ugly and claim to be more 'functional', without even noticing that Maven's pom format is actually a nested s-expression structure that happens to use angle brackets.
YC partners: 1) recruit startups 2) select startups to fund and 3) advise startups. probably 90% of our time is in the third category.
Mesos!

If you want containers use kubernetes by google!

Was in the process of putting cassandra on mesos.

If you want to mess around with it, you just need a digitalocean account and head over to mesosphere they'll set up 5, 7, 10 clusters for you.
As a die hard fan of the M50x (and no qualifications whatsoever for judging headphones) I'll have to explore those Panasonics you mention. I haven't considered that company as a quality maker of audio gear since the portable CD player era. Did you do the test yourself, or are you going off of a review site? I typically rely on head-fi, but I'm always looking for a recommendation in this field.
Check out webvisum.com - from their website:

"WebVisum is a unique browser add on which greatly enhances web accessibility and empowers the blind and visually impaired community by putting the control in your hands!"

"Automated and instant CAPTCHA image solving, sign up to web sites and make forum posts and blog comments without asking for help!"
Wikipedia: Toby Ord
Commercial Haskell tutorials coming to NYC
Generally, if it really works, then it should work even if all the details are known.
My company is doing most of these things (except it's more complex because we're polylingual, and don't use Java for web apps), but Java still sucks.

The reason it sucks has more to do with the language and the culture that has grown up around it, than the mechanics of building and deploying that this article talks about. These mechanics have to be solved for most languages. They're table stakes; mostly just a basic level of usability from which you can start to measure against other things.

If I had to name the single worst thing about Java, it would be the tendency for business code to degenerate into a 1:1:1 ratio of interface:class:public-method. For any significant piece of logic, it ends up living in a class on its own, with its dependencies injected either via constructor parameters or method parameters. Whether the constructor or method is used doesn't really matter, unless the method is to be called many times, in which case the constructor acts as a kind of partial application. And of course the class it lives in needs to be the only implementation of a corresponding interface, which only has a single method, the method in question. All other interesting methods this method calls must in turn be called via single-method interfaces, with these interfaces injected via parameters, one way or another.

The cause of this is a religion around a particular style of testing. The development driven by the need to create tests for everything leads to code that has very little cohesion, very little structure, and most closely resembles 80s procedural code, but with vastly more ceremony. Code is hard to browse and read because the link between method call and implementation is hidden in a runtime indirection via an interface reference. This lack of legibility in turn encourages doing more work in these methods (albeit broken out into private methods), and instead of an OO decomposition of the problem, you end up with a poorly factored procedural decomposition.

The biggest symptom is classes with names that are close anagrams of their primary method. For example: StaleJobsCleaner.cleanStaleJobs, StaleJobsFinder.findStaleJobs, JobDeleter.deleteJob, JobDepedencyFinder.findJobDependencies, etc.
What am I missing? Breaking this looks much easier than a regular captcha...

This is the sort of problem that genetic algorithms are well suited for (a small, well defined input domain with a binary oracle). You'd simply generate a random path, run a smoothing function over it, see if that works, then iterate.

edit: does anyone know a site that is actually using this new widget? I only seem to be finding the older version... :/
It could have been intentional, I think, in this context.

Very unlikely, of course, but I think it reads properly with "loosing."
I remember that a couple of years ago a school did that the "if you're not doing anything wrong, you have nothing to hide" a little further, and spyde on kids at their homes via their webcams. I find it almost unbelievable that public official can sink so low, but apparently it did happen:

The "laptops issued to high-school students in the well-heeled Philly suburb have webcams that can be covertly activated by the schools' administrators, who have used this facility to spy on students and even their families. The issue came to light when the Robbins's child was disciplined for "improper behavior in his home" and the Vice Principal used a photo taken by the webcam as evidence. "

- http://boingboing.net/2010/02/17/school-used-student.html

Edit: The case was apparently settled for $610,000: https://en.wikipedia.org/wiki/Robbins_v._Lower_Merion_School...
I should say I did spend even more than 25 minutes per session just staring at the sky from one of the beach chairs.
Obligatory XKCD: http://xkcd.com/810/
It definitely depends on what your needs are. There are tradeoffs on both sides.
I work at Google, but not on ReCaptcha.

Google Brigade to the rescue again.
The email serves at the cover letter, in my experience
Limp Lispkit would be a much cooler name.
> what's missing is access to a teacher

And peers, and resources such as organization (clubs, teams, classes, etc.); labs, tools and machines, including IT; and the very many information resources that are not yet online.
Yup.

Java as a runtime is a really nice piece of technology, Java as a language is pretty good, if a bit dry.

It is the heavy-weight anti-YAGNI ecosystems that grow around it (the AbstractFactoryFactoryManager APIs that these Java shop cultures tend to produce) that makes working with Java suck, in my experience.

And yes, that stuff can be avoided if you aren't stuck working on a maintenance project and you are really careful to smash down any signs of that sort of culture growing when you see it.
What additional security would be derived from a second password?
I don't necessarily disagree, but that's likely not the reason your being downvoted. Your tone is incendiary and the comment is devoid of content. Claiming different parts of Java are bad without reason doesn't have any more substance than simply saying Java is bad.
The US censors a bunch of sites too if that makes you feel any better
This is well known by bars in many locations that pass out free lollipops and hard candies as closing time approaches. Anecdotally it causes violent altercations to plummet.
Which is what this is trying to help solve. They know they're getting harder, so they're trying to identify you before even hitting the captcha part so that you don't have to do it.
Did you read the article?

He explores (and technically explains) how higher sampling rates can actually be much worse due to equipment.
Most platforms have pretty fragmented build tooling. I think an exception might be Go because it has the build tool built into the platform.
That's quite an ignorant answer.

At the basic level, corporations should be able to operate and turn a profit, regardless of whether they're low or high margin. That shouldn't even matter in a discussion, since both high and low margin businesses create jobs, and are a good thing for the economy. Some businesses just need bigger scale, but that doesn't make them worse businesses.

Yes, they're avoiding taxes, but a lot of these companies are still highly profitable without the tax avoidance aspect of it. That's just the 'icing on the cake', and I'm pretty sure if they didn't, some (activist) shareholder could probably force them to do so. This is the world we live in. In the end, tax is just another corporate expense.

This tax problem can't be solved without significant international cooperation, and I'm a big fan of simplifying the tax code of countries globally.
aparently it is just a rename. i don't deal with any clients that use it anymore, but last i heard they are just adding lync support to skype, and decided to kill one of the brands. cleverly they killed lync.
> A) The bad guys already know, guaranteed

Such a tool would also be useful to prevent* "local hacking" - where your credentials have been hacked by someone in your trust circle. Sad, but it happens. However, luckily for the victims, such people aren't usually aware of the hints they may be leaving after they came.

I agree with your other points.

* Or, rather, retaliate after the deed has been done, but it's a good start.
The new Codenvy is a game changer and everybody benefits
As someone who has been down this road many times before - I can't stress this enough: DDoS mitigation solutions don't solve the problem of an app-specific layer7 attack and it is important to do some testing of how well your mitigation service responds (and that it isn't a silver bullet.) Additionally, you need to make sure your team has tested and proven procedures for engaging the service, respond to attacks, etc. Services like NimbusDDoS (www.nimbusddos.com) are good because you can do some real scenario testing and make sure your team and infrastructure is prepared. There are other services out there too that I am less familiar with, but either way really good stuff to do.
The interpreter is native, but the code that runs on top of it isn't.

In interpreted code, something like 'var i = 0;' could result in 100+ instructions, from the compilation/parsing of the script, to the actual running of that statement, and then the final execution on the hardware.

In C, `int i = 0;` WILL result in 2 instructions -
movl $0, -4(%rbp)
movl $0, %eax
I would approach this from a different angle than the other commenters suggested so far and make a list of companies you might like to work for. Find out what stacks they're using and make your decision based on that.