skysight-inc/HackerNews huggingface dataset:
The main similarity is that Go was called a systems language for some reason, and the idea is now cached in people's minds.
Have you implemented the binary protocol? Where did you get the protocol specification from?
I'm not sure I follow your argument. You do realize that you are talking about two different kinds of attack channels right?

Cleartext-based attacks and snooping (middleman, network peer) are simply far easier and far more likely.

You know those happen all the time, right? Literally all the time for certain users in certain places. A cleartext exploit is source-based (or route-based) and the server owner can't ever do anything to fix it besides forcing encryption (or shutting down completely to that source).

In contrast, a server compromise is destination-based and will theoretically only exist for the time that it is not known to the server provider.
So... is bloat extra features, extra code, or extra resource usage? Is it bloated if you have the same features in fewer lines, or fewer lines with more resource usage?

It's almost as if bloat is a meaningless snarl term with a mostly illusory definition beyond "bad".
It's using Go's crypto/ssh from the standard library.
While looking at my own (ad-free) blog I saw amitabh banchan selling me life insurance. I don't want my readers associating me with this: http://www.hkyantoyan.com/wp-content/uploads/2012/09/AB-bina...

Switched to https shortly after.
"In framing a government which is to be administered by men over men, the great difficulty lies in this: you must first enable the government to control the governed; and in the next place oblige it to control itself. A dependence on the people is, no doubt, the primary control on the government; but experience has taught mankind the necessity of auxiliary precautions."

John Adams
Sites with advertising should be marked as insecure. Since they have been known to serve trojans, and also are used to track people without their consent.

Will Google and Mozilla both do this? No. Because their revenue depend on it.
Heck, we were doing that in Australia in 2009, before some of the less-terrible ISPs raised their data caps.
Ahh okay. So it isn't implemented on this specification: https://tools.ietf.org/html/rfc4253 Regardless it seems cool.
This is wrong. Saturday in Japanese is 土曜日, which is like "Earth day".

There's also "Sun day"(Sunday), "Moon day"(Monday), "Fire day"(Tuesday), "Water day"(Wednesday), "Tree day"(Thursday), "Gold day"(Friday), "Earth day"(Saturday). So your claim is wrong in Japanese for every day except Sunday.

If you see something written like 四日("4 day"), this refers to the day of the month not the day of the week(for Japanese).
> Can you hook a full ncurses up to this?

Yup! Any ncurses thing should work great. I couldn't find a golang curses lib that doesn't hardcode to stdout except for crypto/ssh/terminal, but it's fairly limited.

> Going by my input lag, it looks like all keypresses are sent to the server, can you implement readline somehow or can i configure SSH to buffer input locally? Cook terminal mode or something?

I believe that's up to your ssh client. There are things like https://mosh.mit.edu/ which try to mask the latency.

> What's pty.go used for?

For bootstrapping the pty request/response. :)

> If i write a line that's longer than my terminal width, it wraps onto a second line, but new incoming messages obscure the first line

Yea, there's a bug with long line reflow, not sure how to fix it. :(
Crap. I was expecting a good writeup about how Palpatine screwed things up.
Inside the Collapse of the New Republic
IME, Chrome is slower in terms of UI responsiveness, especially when starting up (massive disk usage) and switching tabs/making new tabs (pegs at least one core of my CPU, whole browser goes catatonic).
Securing is different to encrypting.

Most tracking of people is done by advertising, and marketing companies. Should we mark all websites with advertising as insecure?
Basic Startup Concepts
Free is not a lie, it's the simple physics of copying bits.

DRM and the old record companies are the lie you're selling. If they were fighting for their lives, they wouldn't have Washington DC, Apple, Google, Microsoft, New Zealand, Australia, Canada, Sweden, the United Kingdom, ... in their pockets.

The 100%-to-the-artists stores exist. I love 'em.

I'm not the man, I'm just another guy looking for a job. The interview process for computer jobs should make it obvious that I'm not the super-elite like Chris Dodd.

I just don't think people will ever stop freely sharing culture... long after the MPAA, DMCA, RIAA, and all DRM schemes are forgotten.
Excellent. While they're at it, maybe they should stop marking self-signed SSL as more of a security risk than plaintext HTTP.
I don't use spotify but if I feel like listening to music while programming it is almost always video game sound tracks. Among my favorites are:

Deus ex

System shock 2

Wipeout pulse

Final fantasy (sound tracks for all of them are great but my favorite is battle on the big bridge)

Monter hunter freedom 2 (The town theme)

As I am writing this I have Innocent sea (Sieken Densetsu) on repeat :) If you do listen to music while programming make sure that you don't leave the earphones plugged in for too long for me 30 minutes at a time works.
The point here is not that any given site needs to be secure, but that by having all sites secure, the whole web is better off for it. The downside for you is that you'd need to do some extra work, but the upside is that you can enjoy a much more secure web. For everyone who doesn't have to deal with upgrading to https (which, is by very far most people who use toe web) it is only a good thing.
Google and Mozilla have no problem blocking sites that use non-Google ad networks as malware http://marketingland.com/googles-chrome-browser-issues-malwa...
Kinda more interested in hearing about their ideas about starting an offshore country in a cruiseship. Now that should be an interesting experiment.
Because I can inject code into your page that infects visitors to your blog with malware. The NSAs QUANTUM system does exactly this, waiting for the targeted user to load a non-HTTPS page, then injecting javascript to redirect to an attack site.
If your site has auto-playing sound, would you be opposed to chrome adding the speaker indicator on the tab to alert users that your tab is causing the sound?
The problem is "fair" is hard to measure, but "cheapest" is very easy. Trying to determine what is "fairest" for all of the thousands of products we buy every year is impossible
> binary-trees uses artificial strictness for the sake of the benchmark

Using strict evaluation when appropriate is most certainly idiomatic Haskell code.

> Nine of the ten Haskell implementations are demonstrations of writing C in Haskell (without reaching C's performance).

This (C in Haskell accusation) is debatable, though I'm not sure there's much to be gained even given a totally successful discussion where we both communicate our points 100% effectively.
How to install it?
I've done the bullet proof coffee thing as my morning cup on and off, depending on how lazy I am. (I usually take it black from an Aero Press for the sake of convenience.) Anyway, I found it to be similar to a latte since it froths in the blender. You need to get grass fed butter or it is pretty nasty. But when I make it with Kerry Gold butter or similar, it's pretty good, if you like lattes.

As far as the, "it will change your life" crowd goes it just seems like different strokes for different folks to me. These are probably the same fad jumpers that were having their life changed by something else last month.
Oil prices fall again after the price maneuvers Saudi Arabia
> Netflix has already killed the old distribution model. For the price of about 8 full-price DVDs per year, you can watch any video in the Netflix catalog (...)

Lets not forget that they started out with video rental. I think video (and music[1]) rental already demonstrated that "pay2own" is overpriced, and has been since the early days. I mean, you could run a store (rent space, pay employees) and afford to pay "enough" in license fees for content that people paid, what, 25% of the price of purchasing a copy. Sure, I could lend a VHS I'd bought to a friend -- but does anyone really think that lending led to less profit, rather than more? (See: libraries aren't killing the publishing industry).

> with the assurance of consistent quality and convenience.

What? The files I've downloaded - they're consistent and convenient. They play back off line. They play back on the OS I use. I'll have them in 20 years, no matter what kind of licence bullshit happens, or if Netflix goes bankrupt or not. I do accept that it might be convenient to a lot of people -- but it's not convenient for me.

Spotify is a little better (off-line support) -- but you only get access as long as you pay rent. Their Linux support has been spotty (no pun intended). And while they are better now, I grew tired of feeling like I was playing the lottery every time I opened a playlist: How many songs would be left? How many would have disappeared due to distribution rights?

I used to buy CDs, buy some LPs. I buy some music direct from artists (eg: bandcamp etc). But I refuse to buy stuff that's "protected" with DRM[2]. I've grown up borrowing books, comics, music from people I love and respect. I want to lend out the stuff I've found that's good. I want to be able to do that in 10, 20, 30, 40 years. That doesn't work if the only copy of a song is on youtube, and I don't download it.

[1] In Japan, along with recordable mini-disks (with their one-digital-copy-drm-limit), music rentals on CDs was pretty big in the late 90s.

[2] I do love to go to the cinema. I think it's sad that the industry has pretty much doubled the price of projection equipment, just to enable DRM. But at least they've cut back on the cost of making prints, and the cost of distribution.
I agree with the premise of judging based on both action and context, power and relationship. I agree that hackers aren't the nerd-revenge underdogs (if we ever really were). I agree that we have power to do good, and we mostly piss it away trying to impress each other.

But I disagree that RIAA and MPAA are totally losing - they still have direct lines to power through the government and its regulative and, ultimately, judicial and military power.

There are more than 2 sides. There is not "the man" vs. "the underdog". It's less chess and more hungry hippos. Yes, we should build something better (for the market, for the world, for the commons) than TPB. But the regulative status quo disallows those things. TPB is a mushroom colony. What you want is a tilled field.

The government does not serve RIAA well, but it also salts the earth where we might grow internet-aware markets. TPB is a compromise solution, and better than nothing.

What we build is not in a vacuum.

Let's get started cultivating the field, plowing under the existing regulation which is defunct and self-serving, erecting new fences where boundaries represent newly-reasonable compromises, advantages, and common sense.
There probably isn't a point to it, as we're likely trying to argue different points.

I posit that using Haskell in such a way is a disservice to the language. If you want to code in such a way, why use Haskell?

Haskell is plenty fast as is and doesn't need to resort to unsafe code. What's the point?
> I love Haskell, but I still don't think it occupies the same space as Rust.

My opinion is that Haskell can overlap, but something that occupies the same space as rust would be Ivory[0] or ATS[1].

0: http://hackage.haskell.org/package/ivory
1: http://www.ats-lang.org/
Just as a point of reference, I don't ever want to see the inside of a Keurig that's been neglected for years in some office or other.
It would be interesting to see if we could clean up (refactor) the human genetic code into a more efficient form with less baggage, and maybe less chance at getting hit by viruses just by virtue of having fewer random flaws to exploit.
Technology Creates Income Inequality and Unrest
I was a little surprised by this take down. I thought they'd put major effort into making sure there was nothing much constant to take down.
Middleman Tricks and Hacks, specific techniques to building a middleman blog
1) it was a rant that I needed to make

2) what the exact fuck is "programming aptitude" anyways? The article defines it as "having good grades in a CS program". Which is part of why I needed to rant against CS education.
No one's doubting his prerogative to shake things up (not even, by this report, the editors he forced out, who had no problem with the concept of digital initiatives per se). But the main reasons to buy an old magazine, instead of starting a new one, are to gain access to its staff and brand equity, and the results so far are that he flushed those assets down the toilet. It's completely fair to judge him on results.
Why U.S. Women Are Leaving Jobs Behind
> it has some VCS detection in it so if you're using Git it'll only upload files in the Git index (staged/committed/not ignored)

So... if I have some docs in markdown, and a server-config to serve static assets -- it'll upload the config and the markdown, but not the generated html/css/js? The idea is that the server knows what to do with the git repo?

Or am I just being difficult now? (I honestly can't really tell -- I also have a hard time seeing how to make use of this. Not that it matters - if it works for you, then great ;)
> It imperial units for days

Imperial made quite a lot of sense when numbers were small and calculations done without the aid of instruments: Using bases divisible by both 3 and 4 makes mental calculation quite quick.
Got kicked out for not saying anything for 5 minutes. Kind of a bummed :) Would be nice to see if that was an auto-kick by the server, or someone actually kicked me out for kicks. There was no info other than [disconnected by remote server].
I get your point but you're kind of blowing it out of proportion. A lot of people like myself host really mundane content and that concern is really the last thing on the minds of those types of site owners and their users. You want HTTPS when it's critical that no one manipulate the request and response but for most of us it's not worth the expense and effort. You want SSL on WebMD, Healthcare.gov, your bank website, and those political sites you read when no one is around but if some extra tracking get inserted into the response body of our favorite cat picture site then I think only you and I will notice or care.

SSL everywhere isn't yet practical only due to the expense. It's not that much more effort to secure a site but when you run 10 sites then you're spending $100 a year for those domains. The expense of an SSL certificate each on top of that makes it impractical for solo "webmasters" to secure all their sites. We all know why we should use HTTPS and we do it when it makes sense but it's just not practical 100% of the time yet. Like others have said, this will make more sense once the EFF initiative starts being adopted and getting a free certificate is as easy as apt-get secure-me-please.
I was confused, too. My default interpretation of "patch" is a file for modifying an existing binary. Second place goes to the swatch of material used to repair holes in fabric or plastic. The last time I thought of the kind of patch the article was referencing, it was for my scout uniform.

To upgrade to version 1.1 of the repair material for the embroidered insignia, you will need a patch patch patch.
With "/exit".
IME chrome is faster when I have enough RAM. I have a notebook with 16G of memory and Chrome runs great on it- seems quicker than Firefox. But on my workstation I only have 8G and usually have more things fighting for it. When memory is low Chrome gets unusable but Firefox keeps going along at its not-quite-as-fast-as-chrome-with-enough-memory pace.
For example, if religious discrimination were to lead to members of your church being harassed because of their viewing habits, then the argument that the content isn't sensitive doesn't seem so strong anymore.

HTTPS doesn't hide the IP or even the hostname (SNI is sent in cleartext) of the site you're connecting to, nor the IP of the client, so it'd still be trivial to determine who is visiting the church's website - just not exactly what pages on the site they've viewed. You need something more like Tor or stronger to protect against that.
Your comment says absolutely nothing, and that appears to be the goal. What is the point of writing any code in any language? It is a benchmark, the point of it is to write the fastest code you can. You aren't obligated to write lower level code in haskell, nobody has a gun to your head. So why do you pretend it is a problem, and claim other languages are "better tools" for that job despite haskell clearly being very good at that job?
Category error. 'Hackers' are not a homogenous group; you and ~sounds are not the same 'we'. In particular, the ones who have 'won' are not necessarily the same as those still exploring the potential of a free-all-information world.

In the early 90s, both Bill Gates and Oracle Corporation expressed strong doubts or outright opposition to the idea of software patents. Later they 'won' and came to use software patents as competitive weapons.

Had 'hackers', at that point of the ascension of Microsoft and Oracle, 'won' – meaning the only gracious move would be to agree that the software-patent regime was good for them? No, the 'hacker' category had broadened, and many of the people doing the most interesting work still justifiably despised software patents.

Hackers and artists are creating systems for direct creative compensation, to replace the outdated idea of criminalizing digital reproduction.

Others, who are not necessarily the same people who could (technically or socially) sell out for the "four houses and a private jet" you dangle, still prefer to build other radically uncensorable systems. Don't adopt them into your royal "we".
Interesting - I had not heard of Fnordmetrics before. There are not many monitoring systems that implement dimensionality for metrics tagging. It looks like Fnordmetrics goes about it slightly differently, but it seems to achieve the same end goal of arbitrary grouping by like characteristics.

In the Atlas eco-system, Servo and Atlas client eliminate the need for StatsD. The combination of these products allow for code-level instrumentation and delivery of metrics. The Prana sidecar is available for non-Java applications to deliver metrics to the Atlas backend as formatted JSON objects.

Atlas supports multiple backend storage systems, although this is not easily pluggable just yet. Earlier iterations of Atlas had support for MongoDB and Cassandra as storage backends, but there were issues obtaining enough IOPS to satisfy the read and write performance requirements at scale, so storage was switched to in-memory.

Atlas can return data in JSON format (?format=json) which is suitable for JS or SVG based rendering systems such as Highcharts. There is also a streaming API that trades response time for increased data payloads.

It takes some time to learn the Atlas Stack Language, but the fact that it is URL-based means that the browser is the interactive query editor. Using tools like Chrome's Edit URL to help handle long strings, you can make small changes to queries iteratively and see the results in less than 2 seconds in many cases. Average PNG render time is typically less than 10 seconds; slow rendering can take around 30 seconds.
Many consumer and retail oriented ones: Birchbox, Rent the Runway, Warby Parker, Learnvest, Chloe + Isabel, Paperless Post, Makers Row....
>The point is that is unsafe

No, the point was that it is "far from idiomatic". Did you read the post I was replying to?
Yehuda Katz on Endurance [video]
Stress increases your blood pressure, releases adrenaline, and forces your body to go into overdrive. Chronic stress will wear down your body faster.

Simple analogy: Drinking acidic fluids will wear down your enamel. Do it for a long time and eventually all of your enamel will be gone. That will cause lots of other problems.

Feeling "bad" i.e. stress, is probably wearing something down inside your brain. Once that "something" is gone lots of problems occur. Schizophrenia may be the result of that "something" being worn out.
The Cheapest Airfares You've Never Heard of (And Why They May Disappear)
One of these days, I'd like to have a scheme for referencing secure third-party content that includes hashes. I'm never going to link to a third-party server for some JavaScript file that could be changed out from under me, but if I can link to it on a CDN along with a sha256 or similar, and have it grabbed from my own server instead if the hash doesn't match, great!

I've seen a few attempts at that, but nothing that has actually taken off. It needs an appropriate polyfill, so that in browsers that don't support it, either the content gets downloaded and hashed client-side, or the content just gets downloaded from the same origin.

> In the new secure-by-default world, what happens if a website has some large assets (e.g. video, game files) and would like to opt into caching by any transparent proxies that may be on the user's network?

The whole concept of a "transparent" proxy will hopefully die in a secure-only world. If you want some server on your network to MITM your traffic (for caching or any other reason), use a non-transparent proxy. (Or, install a CA certificate from your proxy, but hopefully widespread use of certificate pinning will kill that too.)
To a certain degree, mind-body duality has persisted even in the absence of a belief in a "soul" -- it's just that we think of "body" and "brain" as separate entities, as if the brain is just piloting a meat-vessel around.

The key thing here is that feeling bad is completely inseparable from the physiological mechanisms that underlie it. At a very high, very superficial level, the stress mechanism is something like this:

The amygdala, which is responsible for integrating sensory perception with memory and emotional processing, determines when a situation is "stressful." The amygdala then signals the hypothalamus via the amygdalofugal pathway and stria terminalis. The hypothalamus secretes a number of hormones which basically prepare the body for fight-or-flight behavior. Of particular interest is corticotropin-releasing hormone (CRH) which, along with vasopressin, activates the hypothalamic-pituitary-adrenal, or HPA, axis -- the physiological mechanism of fight-or-flight.

CRH is responsible for stimulating the pituitary to release cortisol, which is an absolute sledgehammer of a hormone: it stimulates glucose synthesis (NEED MOAR ENERGY NAO!), regulates the sodium-potassium balance in an effort to stave off hyperkalemia (probably an adaptation to deal with tissue damage), reduces inflammation (through immunosuppression), constricts blood vessels, suppresses the parasympathetic nervous system (shutting down digestion -- not important when you're trying to avoid being eaten), and so on. These activities are the result of cortisol binding to glucocorticoid and mineralocorticoid receptors; such receptors are found in all kinds of tissues.

Cortisol also overwhelms the cortisol receptors of the hippocampus, which processes memory. The hippocampus appears to be part of the downregulatory subsystem of HPA axis homeostasis, but if its receptors are flooded, it becomes ineffective at suppressing HPA axis activities. This results in both the impairment of the memory-processing functions of the hippocampus, and a reduction in the negative-feedback mechanism of the HPA axis. In other words, you can't stop stressing, your comprehension is impaired, and your body is going into overdrive.

HPA axis stimulation is useful when stress is a rare event tied to things with sharp teeth; it's counterproductive when applied to our modern world, when stress is more likely to come from deadlines, traffic, and trying to find that last parking space at the mall on Black Friday.