skysight-inc/HackerNews huggingface dataset:
Here are my Reddit comments on this story:

I've always programmed thus:

* Try to assimilate a mental model of the bit I'm working on, and as much of that bit's dependencies as is practical, into my head. This may involve fiddling with the code and seeing how it breaks when I do certain things to it, or hammering at it inside a REPL or similar. The bit that I'm concerned about could be a single method, but is usually larger.

* Try to develop a mental model of the bit as it _should_ be. Do a diff between the 'is' and 'ought', make code changes as necessary, fiddle with the new code to make sure the shape of its function is roughly the 'ought' shape.

* Update the unit tests with specific tests for the 'ought' case, run tests, fix failures.

* Check in or submit code for review.

This is not how software is written now. How software is written now is a hill-climbing algorithm where each cycle is one "red-green-refactor" sequence. Write a tiny failing test which no matter how small or trivial still has a few lines of setup/teardown boilerplate, make the smallest possible code change to make the tiny test pass (change minus sign to plus sign?), run the ENTIRE test suite to make sure that your sign flip didn't break anything anywhere else, if the code needs to be refactored do so and run the entire test suite again, fucking repeat. There are a number of theoretical advantages to this from a management perspective:

* Developers produce working code quickly in the early stages of the lifecycle, whereas with the slow approach you do a lot of sittin' and thinkin' up front without much to show for it -- maybe some design documents or UI mockups, I dunno.

* Development no longer relies on developers' internal mental models of the code. Developers now code against a model which is incarnate in the test suite -- itself a deliverable, documentable artifact.

* Because programmers no longer work from internal mental models but the single-bit state of "do the tests as written pass or fail?", the concept of "code ownership" -- along with related management problems of coders waxing territorial over the pet modules they've spent days or weeks ruminating over in order to understand deeply enough to change -- evaporates.

* Programmers look busy all the time, because they are constantly typing out test code to exercise even the most trivial of changes.

* Thanks to pair programming, you no longer need worry about the "guy in a room" problem. Your dev team is always seen to be interacting with one another.

But I hate it because it is incompatible with my temperament. I like to think about _what_ it is I intend to write, before hammering out test cases to exercise it.
So basically: lead mixes with trace amounts of uranium. Refining removes the impurities, including uranium. However, the uranium leaves behind trace-r amounts of lead-210, which refining cannot (easily) remove. So your choice is to carry out expensive isotope separation, wait a couple hundred years, or find someone who refined the lead long ago so you don't have to wait.

Is that about right? For some reason I thought that being shielded under deep water was part of the deal, which confused me. Don't know where I got that idea.
I see. And yes there have been some module/syntax changes between apache versions that makes one less motivated to upgrade. Also upgrading doesn't always give you better security, you might be introducing a new issue/bug. But i could see their reasoning, why not to upgrade/change the version.

The scanner most likely does a simple version compare. The scanner assumes anything under version X.Y == vulnerable. If it would be hiding or faking the vendor and version to latest IIS (or apache, or nginx or etc), possible it would simply report all is A-Okay. Unless the scanner really test the actual exploit/vulnerabilities, i assume the simple version compare happens.

Though i'm quite certain the malware didn't get *there via a method that only utilises the webserver; more likely a poor coded (php, perl, etc) script allowed 3rd parties to download/write to disk of your webserver.

If for example shellshock wasn't patched in time, and there was a vulnerable cgi script or similar on the website/server, it could have been that script+bash, that has been exploited. But that doesn't make the webserver vulnerable. (even though the malicious upload/ action was executed via the webserver)
Looks good! I'm not a prospect, but if you're going to go public, I really think you need to get something up on that page to capture email addresses. ("Sign-up to be notified when we launch" etc...)
First you have to understand that a black hole in fact, doesn't have anything really special (until you enter the event horizon), except that their escape velocity is greater than the speed of light.

But gravity applies to it like for any other thing.

So let's say you are the object going into the blackhole, and I'm looking at you.

From your point of view, the closer you get to it, the faster you will travel, just like when you get closer to earth, because it's gravity is stronger and stronger.
So you will end up colliding with it (entering the event horizon) in a finite time (where time, is the time YOU feel, your proper time).

But a black hole is so massive, that space and time get stretched to extreme extents. So from my point of view, you'll be speeding up into the blackhole until a certain point, where you'll appear to be slowing down and stretching (the point where your increase in speed get smaller than the stretching of space-time), and the dimmer you'll get (because of redshifting). So i would see you going slower and slower and appear dimmer and dimmer until almost not moving at all, up to a point where I would simply not see you anymore (before you reached the event horizon).

All this also apply to other object like earth, It would appear to an astronaut that time on earth is flowing more slowly than it's own time (in reality it is of course unnoticeable , but it is true).
Good guy HIV.
Show HN: Jason – A new JSON Library for Go
Yes it is definitely a failure of the tooling and I hear it is actually being worked on.
By not being insulated from the consequences of bad ones + iteration.
If I remember correctly, revealing if an email address is already in the system is considered information disclosure vulnerability in OWASP tests, presumably because then you can do spear phishing against that email using the information that is subscribed to the service.
Indeed. I don't think anyone is saying that the high retractation rate implies that Nature paper are worse than other papers. However it is a sign that they may not be that much better either.
As is so often the case, William Gibson came pretty close to predicting this:

http://everything2.com/title/J.D.+Shapely
I rather use TLS nowadays, until that gets cracked and we'll have nothing \o/
Every time I come across this sentiment—that death is natural, and we have to accept it, and so on—the Fable of Dragon-Tyrant[0] comes to mind.

[0] http://www.nickbostrom.com/fable/dragon.html
Charter schools by law do not have selection criteria. The example you mention, the Bronx High School of science, is a public school with an entrance examination, usually called an "exam school" for short. No charter school anywhere in the country can operate on that basis, as all charter school statutes everywhere explicitly ban examination requirements for entrance.
Mastercard submission to Australian Senate Inquiry into digital currency [PDF]
Location: Mendoza, Argentina

Remote: Yes

Willing to relocate: Yes

Technologies: Puppet, Mysql, Apache, Nginx, Gitlab, LXC, Docker, Nagios, etc

Resume: http://fredrikson.com.ar/cv_pablo_fredrikson_en.pdf

Email: pablo-at-fredrikson.com.ar

My name is Pablo Fredrikson and I'm a Linux System Administrator with 8 years of professional experience. I love working with automatization tools, specially with puppet. I love Nagios. I have a lot of experience with webservers.
Am I correct in interpreting this as 'No true Scotsman' applied to enterprise architecture?

"What is wrong with Enterprise Architecture?" => "Nothing, you just have not met an Enterprise Architect yet!"
Ah yes you are right. I had figured this was the case but was not sure. You can look at this map of the Eagle Ford Shale and it matches up almost perfectly.

http://shalenow.com/wp-content/uploads/2013/03/eagle_ford_ma...
Between the Council of Trent and about 1970, the Roman Catholic laity took communion in one kind only, and the chalice was reserved to the priests.
That article reads like the inverse of the Japanese "salaryman" (company as family, patriarch, protector, provider of all material comforts), which is also sometimes fetishized in Western circles (in terms of results) as "more efficient" or somehow better than American working culture.
I had a nearly identical "so what" thought when I went to college. I had just settled into my dorm when one of my roommates called us over to ogle some freshmen girls in short shorts somewhere walking by. They were preoccupied about it, but I had grown up in Florida near the gulf. I was honestly surprised by their interest: I had never met these young ladies and thus they were just unremarkable background people. But these guys acted like they had found an oasis in a desert. Sure they were pretty, but most girls were, right? I was informed that my opinion was incorrect and confusingly out of touch with reality.

In contrast, I once went to the Hayden planetarium and saw the galaxy for the first time. If I'm honest, I may be willing to admit I teared up more than a little. The experience utterly awestruck me, and that was merely a simulation. Bad eyesight combined with poor night vision and light pollution means I had never seen the Milky Way.

Hell, the first time I got glasses in second grade was the first time I could make out leaves on a tree! Up to that point, they were just this thing I knew was there, but I had never seen one rustling in the wind. Just some shape blobbing about. To this day, I can be content to just sit outside and watch trees sway in the wind for an hour. It honestly is just the most peaceful thing to see such detail moving all at once. A lot of people just don't understand it, as trees are about as ordinary as you can get; but to me, I remember how they used to look (and can just remove my glasses). They're rich in beauty.

TL;DR: If you lived without it, you'd be amazed how much you'll appreciate it.
Also, the lottery is used to choose from those that apply (not all students in a district). Students with parents that are more involved are the ones that apply for the lottery.
You are probably right about the marketability of "slow" as a movement, but in hacker circles these ideas need to be discussed honestly and directly.

The analogy with house building is flawed. Home construction generally follows a preplanned architecture, schedule, and process that has been refined and tested over a long time in an environment which doesn't change much over time. The process of building houses is well understood and if a delay occurs it can be attributed to a lack of skills as you say (or funding problems, etc).

Software has a different nature. If you have thoroughly solved a problem, the solution can often be automated. There is no button you can press to build the same house you built once before. It still takes time, money, and materials. With software, if you are not spending a large portion of your time working on a problem that has a novel component or two, you or someone else has probably failed to automate enough.

As a result, you never quite possess the necessary skill set to solve your current task. You are always pushing some boundary, even if small. Gross skill set mismatch is a separate problem, of course, but a transient skill mismatch is an inherent aspect of good software development and I don't think it's justified to place any blame on moderate and transient skill mismatches as a result.

Whenever you are dealing with something novel, you will need to go slower than usual. It's the same for new types of buildings that use newer construction tools or technology.
If you use Amazon's AMIs they do a lot of updates for you. Recently, they updated their AMI for the bash and SSL security exploits. If you have a permanent instance, you would have to run some updates yourself, but if you use auto-scaling, you can just update the group and then when the instances cycle, the new updates will be applied.
Includes the recommendations:

- A requirement that all transactions go through regulated and transparent administrators subject
to supervision by Australia authorities (rather than just the current block chain process)

- Protections for the consumer (e.g., reversal of unauthorised charges and consumer complaint
processes).
Everything in Java? Thanks but no thanks. I understand the author's point, but he's choosing the wrong language. Does the perfect language for this purpose exist? No - sorry. I've been charmed by Go lately and replacing python, small C/C++ and shell-scripts with small tools written in it. It has great potential for services and small tools and has a surprisingly large amount of libraries available for it given the language's age. But would I say Go is perfect for everything? Hell no - but it happens to be pretty good for what I need.

My view of Java may be a bit biased, since I also tend to look at things from the sysadmin pov nowadays. I can only tell that I never disliked Java until I had to take care of the monstrosities the Java developers bring to life, and mind you - I started out as a Java dev back in 2000.

The main issue I have with Java is the JVM and memory usage and leaks. No matter what people claim - no memory leaks in Java is a fairy-tale. We run both custom C++ and Java services (about 50/50) on a few hundred servers - and I cannot find a single issue in our ticketing system related to memory problems with any of our C++ services. Java services? Every. Single. Week. When I get an alert some JBoss unexpectedly died or became unresponsive - "java.lang.OutOfMemoryError" is most likely going to be the problem. A lot of those are permgen space errors, and yes you can try all the "fixes" like increasing the permgenspace, permgensweeping, enabling class unloading, ... but these don't always fix the problem and slow down your services. Every time this happened in our own services, this had to be fixed by our developers. It takes weeks to locate the problem, and you end up deploying new versions, upgrading JBoss, JSF, Bouncycastle, ... whatever.
I don't think either of the posts you've replied to in this thread state that all employees at all companies require physical proximity to collaborate effectively. Just that Matasano (by virtue of its leadership) prefers proximity.

It's entirely reasonable that some people prefer proximity over remote arrangements. People who don't aren't likely to enjoy working at Matasano. That doesn't negate the existence of other perfectly good options for them, as tptacek pointed out.
A lot depends on who you are programming for. Usually it is for a company that places more importance on a deadline than anything else, including quality. Other "ilities" are even less relevant. So you just hunker down, and produces something that "works" very fast. For, say, a small dataset.

Then either the project finishes (abandoned sometimes), or it grows (exponentially sometimes), and what was created fast no longer is usable. So you do it once again, now to support the new requirements. And so on.

We are constantly rewriting systems, as we continuously copy data from different media. It keeps us employed. It is much easier to be remembered for doing something fast than for creating something that lasts.
Is it reasonable to compare Apple to Mercedes + BMW? There are other luxury car brands.
Until the beginning of the 1980s, 18-year-olds could drink at least beer in most states. In New York they could drink hard liquor, in Colorado 3.2 beer, for example. Then the Reagan Administration decided that stopping under-21 drinking would reduce traffic deaths as much as mandatory airbags. States that did not raise the drinking age would lose highway funds. By the mid-1980s, the drinking age was 21 pretty much everywhere.
But we already know that raw education spending is not the problem.

http://www.huffingtonpost.com/2013/06/25/oecd-education-repo...
It's missing the ability to publish or lock to a particular version, which is a game breaker for shops with >5 people, and the go maintainers don't seem to see it as a problem, making it a permanent game breaker.
Alas, if only you had been there 14 years ago to create that cleaner, yet performant solution.
Docker and S6 – My new favorite process supervisor
Thanks for the clarification, I'm glad I qualified that comment!
It's worth pointing out that light pollution doesn't mean you can't enjoy the stars. After 20 years living in cities and forgetting much of the sky I loved as a country child, I moved from the heart of Manhattan - a 'white' area in this map (http://djlorenz.github.io/astronomy/lp2006/overlay/dark.html) - to a suburb half an hour away which is colored red.

In the city, I could see Jupiter clearly, and three moons through an ordinary pair of 12x36 binoculars from my 19th floor apartment window. With a very tired $40 yard sale 4" Newtonian refractor I could see bands on the planet on a winter's night. With the naked eye, the Summer Triangle, Capella, Sirius, and a few other very bright stars. None of it all that impressive from a quick glance upwards, but still stuff there to study with conscious effort.

Out in my new back yard, the view is breathtaking by comparison. On a very clear night with dark-adapted eyes there is just the hint of the Milky Way. On a normal night, the Pleiades are clear. The Andromeda galaxy is lovely through binoculars. But the real treat is the constellations - gorgeous and vivid, separated, teachable to my children.

I've been up Mauna Kea and nothing on earth can compare to that, but as an everyday treat, a bit of mythological theatre wheeling in the sky on a dark night, or even an evening's worth of nebula hunting, I'm blown away by my heavily light polluted back garden.
Use a marketplace that ensures payment like Elance or Odesk (I'm able to make a few k/month freelancing there).
.... I smell a killer startup idea in there.
Perhaps I am looking at the wrong part of the said developer community, but I haven't noticed that. In the mainstream news he was indeed painted as a nouveau riche, but then you have to wonder if that was (not) related to the hostile vKontakte takeover by the state.

Any other douche incidents aside from these money paper planes?
Yes. Principles of law and media are based on philosophy. Business model and technology innovations inevitably encounter unprepared laws. At those boundaries, you are either equipped with the philosophical tools to chart new precedents, or you are left to choose from a menu of canned options, none designed for your innovation.
1,500 Python test cases across 16,000 lines of unittest code. Add tests when I add new code, or as regression cases for bug fixes, along with coverage analysis to find untested or dead code. In version control in the same repository as the code. Tested across multiple Python versions and configurations using virtualenv+tox.
Also, to clear things up, you are mixing two point of view here, so here is the separation (you are the object going into the black hole):

"the universe would appear to be slowing-down/getting-smaller until it had dimensions of zero"
From your point of view it would appear to be getting smaller, although I don't think it would go as far as dimension 0.

"(or to put it another way, time would "stop")"
It would appear to the external observer, that YOUR time had stopped. But from your point of view it did not stop, nor did their time from their point of view.

"An outside observer would see me moving faster and faster and "stretching" longer and longer."
You would feel you are falling faster and faster.
The external observer would see you stretching longer and longer.
(Although you would also feel like you are stretching, because of the difference of gravity between your head and your feet, but much less than for the external observer)
agree and adding: i recently learned the Key is different to the password to associate, ie you must capture the session key exchange when each client device joins the network, it's not just enough to know the network's passphrase. If you know the passphrase and capture the key exchange, then you can decrypt traffic. My local coffee spot runs a public/guest WPA network, even though we all know the passphrase, even plain text traffic is moderately secure. I guess forcing a key-exchange is possible, but just sharing what i recently learned. I think it's called EAPOL. https://en.wikipedia.org/wiki/EAPOL
Location: Culver City (Los Angeles)
Position: Many
Visa candidates welcome

Company: Scopely - mobile games publisher, recently funded $35MM in series A.

Compensation: Competitive with most bay area jobs with cost of living adjustment

Roles: MANY
Data Scientist - Req. scripting exp, mathematical proficiency, and deep statistical knowledge
Sr. SDK Engineer - Req experience w/ large scale SDK applications, Java and C#
Senior Server Engineer - Java, functional programming, Hadoop
Sr. iOS Engineer - Objective C

Find our open positions via www.scopely.com/join-us
One step more towards the Democratization of knowledge!
My brother lives about 10 miles outside Flagstaff Arizona. Flagstaff has anti-light pollution laws due to the observatory there, so all the lighting in town is shielded and directed all downward. Ten miles away on the other side of mountain it's very dark indeed. Add in the elevation at 7000 feet, and the often exceptionally clear skies and there's an overwhelming amount of stars to see.

The Milky Way is so bright it always takes me time to realize that's what it actually is. And even though I'm familiar enough with constellations to use them as a sort of clock at home, I struggle to find the stars I know when I'm visiting him. There's just so many more!
Stash 3.5 now with comment likes, commit tags and syntax highlighting
There is a reason why i have a extension installed in Firefox just for the ability to say when a gif is to play.
Frontend Software Engineer @ Fleetio - http://www.fleetio.com

FULL TIME - Birmingham, AL or REMOTE

=== US ===

Fleetio is changing the way companies manage their vehicles and equipment. We're a growing, bootstrapped & profitable SaaS company with hundreds of paying customers and thousands of users around the world.

We're a small team of 4 at the moment. When we say you'll have significant & meaningful impact on the product and company, we mean it.

We're based in Birmingham, AL but you can work remotely full time (we already have one full time remote team member). We use some great tools to make remote collaboration easy.

=== YOU ===

- You have deep knowledge of Ruby, Rails and other Web technologies

- You understand the balance between scrappiness and long-term code maintainability

- You feel compelled to make things look beautiful and work flawlessly

- You are organized, and take pride in abstracting and refactoring

- You are creative, ambitious and you get things done

Would be great if you also...

- Know a thing or two about cars and engines

- Have used a variety of frameworks (server side, browser side, or for desktop software)

- Have a technical background: a degree in CS, EE, math, physics, etc.

=== SKILLS ===

- Master of frontend web technologies: HTML, CSS, JavaScript

- Know extension languages like HAML, SASS, CoffeeScript

- Framework proficiency: Ruby/Rails, Bootstrap

- User experience (UX) prowess

=== COMPENSATION ===

$70K – $100K Salary; 0.25% – 1.0% Equity

=== GET IN TOUCH ===

Email me at tsummerville@fleetio.com and let me know why you're an amazing fit.
Can the upload go into a non-www directory via a php? A non-www directory is not viewable. If this directory is accessible then would it be server or application level exploit?
Firefox founder here. You are correct and the reply comment is incorrect. Firefox was created to take on IE. Period.