skysight-inc/HackerNews huggingface dataset:
I'm sorry if I missed this, but what will happen to the Freebase software? I always found that to be a strong asset, but Wikidata's is less than stellar. They only mention the data and APIs here.
Plus you'll likely still have access to it years later. And it will remain private.
This. This is why I am moving to iOS.

I installed Pocket. It wanted permission Contacts and Calendar.
Contacts, I understand for sharing purposes. Calendar? Yeah, fuck off.

Maybe they are bundled together like "read phone status and identity" and Pocket has no way around it. Maybe it is not.
As a user, I should not have to worry about that.

Contact and Calendar in no way should be bundled together.
Top 15 sites built with Ruby on Rails Part 2
Alive, yes. Well, not at all.
Nothing you said makes sense because the Saudis didn't increase production and at 12% of global supply do not have the capacity to change the price on the scale we're seeing without it being glad you obvious. The price is dropping because the Chinese and European economies are soft and becuase of increased supply from Libya in the short term along with the long term increases from the US, Russia, Canada, etc.
I guess the idea of looking a person's profile is foreign to me. Perhaps I should get into the flow of doing that.
>"Committing a crime requires you to have awareness that what you are doing is likely something illegal. Children like these have no idea."

Most recent laws do not require mens rea.[1] It used to be that conviction of almost any crime would require mens rea, but there are now so many complex laws in the western world, (over 10k felonies in the USA, and at least 3000 federal ones;) that this requirement has been relaxed in most cases.[2] I believe that mens rea should be a requirement of all laws, and that the criminal laws should be drastically simplified, but my will is not law.

[1] http://en.wikipedia.org/wiki/Mens_rea

[2] http://www.wsj.com/articles/SB100014240527023043198045763896...
This is interesting because it's essentially the same security model as the web.

Your app runs in a controlled environment, and it has the option to nest another app (on the web, in an iframe) which it can send messages to, but can't affect the code or UI of.

The fact that the UI cannot be manipulated by the nesting app, is crucial, since it allows the security model to tie certain user actions, like pressing dial, to certain actions, like making a phone call.
Blackberry had very successful corporation-friendly software. They could try to fight BYOD, enter the BYOD fight with decent phones or they could embrace BYOD and make their server software compatible with Android and iOS and let corporations go on with unchanged processes.
Coding on a Tablet
Rhebok - High Perfomance Perforked Rack Handler
At a glance, looks like most of 'em are used for error handling. Sort of a `try ... finally` for C. This is actually a fairly common pattern -- check out Python's source code for more examples.

The other way I've seen it used is to break out of multiple levels of nested loops, though that's far less common.

`goto` is bad when it's used in an unstructured way: e.g. A does some stuff, then `goto B`. Then B does some stuff, then `goto C`. C sets a flag, does more stuff, then `goto B`. B does something different this time around based upon the flag set by C. Jumping around in a completely uncontrolled way such that the code can't be comprehended is where goto is "bad".

goto isn't inherently bad, it's just easy to use it in bad ways (and once upon a time, people did so more so than they generally do today -- which iirc was Dijkstra's major beef with it)
This wasn't a game, it was an engine. A novel motion control scheme, more satisfying to wield than any one currently extant, and a realistic and historically accurate simulation which supports different sword fighting styles. I know a thing or two about motion controls, and game development, and sword fighting for that matter, and I am dramatically less convinced than you that this is trivial.

(Even if you are able to donate a year of developer time, valued in the six figures, which in fairness to your point is not something Stephenson brought to the table along with his relatively modest personal assets. Semi-famous authors aren't as rich as people think, either.)

I'm not saying I'm impressed with what they made, but I'm not too surprised either.
Good grief. The smartass style of the article is annoying at first, but when you consider the massive degree of fail involved it starts to seem strangely appropriate.
The author claims roughly 2x performance when compared against Unicorn.
https://twitter.com/kazeburo/status/545034467190898688
It was a great spontaneous idea the first time around. Since, OfferHN has increasingly correlated with "will work cheap." An effect of the evolving community I suppose.
I would have been delighted to know the FPGA bitstream formats, place&route is certainly hard, but not at all impossible.

And some of the GPU vendors are publishing their datasheets specifically in a hope that an alternative open source driver stack will appear.
In the story, BurpSuite was used only on the attacker's machine for ease of use. You could also hand-craft the requests using curl.

Cert pinning doesn't help when someone installs their own certificate authority. It stops other CAs that came bundled with the browser from working, but if it stopped self-installed certificates from working it never would have gotten off the ground because many organizations demand the ability to use their own certificates for signing things.
make building your site more complicated than compiling an entire Linux distribution from source

http://browserify.org/

Browserify is not at all complicated.

spend days choosing between a bunch of almost identical micro-libraries for every little thing you need to do

Just search npm and pick the one that is being used the most.

lock yourself into a proprietary framework that will be considered legacy code as soon as next week’s trendy framework arrives

The problems that npm and browserify solve are at the level of builds and package management. You could use any number of trendy frameworks and tools on top of this.
A Living Search Engine for Unknown Destinations
They shipped something similar enough to what they said they'd ship that the project was a nominal success, but far enough from what people wanted that nobody's very happy about it. (AKA, a Kickstarter.)
NASA Awards Launch Services Contract for Transiting Exoplanet Survey Satellite
This simply doesn't work for pausing audio when the phone rings. The ringer doesn't request audio focus.
Where does "one year" come into it? ROI means the total discounted future returns divided by total present investment. Talking about ROI is nothing to do with short vs long term thinking.

ROI should always be taken to mean expected ROI. Now I'm not dogmatic when it comes to probability. If you say that the probability distribution of a given projects future returns is not well defined, that's fine. Nonetheless, we implicitly always use something roughly similar to probabilities when evaluating uncertain outcomes. I'm not even saying that doing this explicitly with numbers is even useful. I'm just saying that there is no fundamental difference between saying "we should(n't) do X" and calculating the ROI of X.
Nano sculptures
Most laws are arbitrary and/or self-contradictory, yet we are still punished if we are caught violating them. In addition, there are so many laws, that most of us are constantly committing crimes (at a rate of three felonies a day).[1]

[1] http://www.wsj.com/articles/SB100014240527487044715045744389...
What are you typing at 167 wpm? I played on typeracer.com and topped out around 130 wpm.
Bayesian Case Model: A Generative Approach for Case-Based Reasoning
I really liked your article on how to take over Rails servers if they leak their secret.

http://robertheaton.com/2013/07/22/how-to-hack-a-rails-app-u...
It totally depends on your manager. My first manager encouraged me to do good work and make sure I got customer feedback for it. My new manager starts every one-on-one meeting with phrases like "not everybody gets promoted" or "the reality is that you will be compared to your peers"...

You can guess which one I prefer.
I also have an audio app with a background audio service on Google Play, and I also have to request the READ_PHONE_STATE permission. I have an explanation in my store listing but I still get emails about it every week.

It's totally nuts. Knowing the phone is ringing or off the hook should not be privileged information.
Fastmail Development Process – Testing
I wonder if pieces of the Watson API would work for something like this?
I personally attempt to use 'hipster' to refer only to ironic culture, people who enjoy things defensively (potentially the opposite of 'geek' whose enjoyment knows no bounds, including social expectations), and whose choices are primarily driven by fear of embarrassment (for instance, looking ridiculous so that they cannot be embarrassed by it, to know it was on purpose instead of trying and failing).

And yet, other people use words in other ways. I do not like what _I_ mean when I say hipster, but what the Priceonomics fellows mean is very different (closer to the true definition of 'indie'), and I have no problem with them associating that with makers, me personally, our industry (although tech in general encompasses much more), etc.
I don't feel that party schools can exist in places that have a good amount of snow and ice but that's my opinion. It's also possible not to experience the pitfalls of a party school even if you attend one if you hang with the right crowd.
Take it a step further, I should be able to forge the contacts in my address book, my GPS coordinates, the list of installed apps.. The list goes on.

But I would happily start with incremental permissions. Baby steps.
I also read through the comment thinking.. deja vu?
But yeah it was a copy paste from three weeks ago.
I'm looking forward to the release of the Blackberry Classic and hope that turns the tide. My spidey sense tells me that people are starting more and more to appreciate old tech, diverse tech, tools that do one job and do it well. Hopefully instead of machines and platforms dying, their capabilities can be maintained and used by those who see their value.
My beef isn't with the people who don't know they don't know, it's with vendors that encourage this. It makes the vendor look like amateur hour.
Well if you bought Google or Amazon in 1998 and rode that out you would be sitting pretty right now!
"Knowing the phone is ringing or off the hook should not be privileged information."

It seems like it could be a privacy concern. It seems a common enough need that it probably shouldn't be lumped together with other things, though.
In an All-Digital Future, It’s the New Movies That Will Be in Trouble
I've got two points to consider with this:

1) On a proper keyboard, I'm faster typing than writing. But on a "soft" keyboard like a tablet/phone (which I'm more likely to have with me), I'm much slower. This is probably due to a combination of inherent response times in the screen, and some increased degree of lag between keystrokes to aid touch detection.

2) When writing, I can easily jot down things like rough graphs to accompany data. Or rough layouts of a webpage to accompany the copy. I can quickly circle a block of text and draw an arrow to another block with a note about why they are linked.
Whilst typing is faster for block text, I have yet to find an app that can even come remotely close to the ease of pen and paper for these quick sketches.

EXTRA: Not to mention the ease with which you can pass a sheet of paper to a colleague for them to read, markup edits, etc...

EXTRA 2: Plus it all works during a power cut ;)
Heroku is one of the offenders, but you're absolutely right and I went ahead and fixed it.
> The existing Freebase dumps are far too useful for a Google would be competitor

from the article:

> The last Freebase data dump will remain available

and even if it wasn't, I'm sure archive.org will grab a copy (if they haven't already).
X-Ray Line May Have Dark Matter Origin
The costs-money kind of server SSL certificates and client SSL certificates are two very different things.

Client certificates are generated by the user's machine and signed using your server's private key. The user's client presents them to your server to prove that the client is who they said they were when you signed their certificate. These certificates don't cost anything, besides some CPU cycles on both sides of the process.

The kind of server SSL certificates that cost money are generated by you and signed by a CA that most users' browsers will trust. Your server presents them to the client to state to the client that the server belongs to the domain it says it belongs to.

Most CAs will charge you money for the service of signing those certificates, but that process has nothing to do with the lack of adoption of client SSL certificates.

The parent article does a good job describing why client certificates aren't used more often: the UX doesn't make sense to users and there's not a user-friendly way to protect them with a second factor (the way you can encrypt your SSH keys using a passphrase or authentication device).
Not a question, just saying thanks. Your articles in the 1990s on VGA's modeX were the basis for a long-time obsession of mine: writing VGA graphic drivers to support better ways to display fractals. My college senior thesis was based on it.

Since then, Dr. Dobbs has been the shining example of highly technical material.

Thank you for everything your magazine meant.
Rather than repeat the same information, see my response to this question asked earlier:
https://news.ycombinator.com/item?id=8759328
I disagree, jQuery is awesome, even for seasoned web developers. Of course you don't need it, but it makes life a lot easier when working with XHR, events, selectors, etc.

If you're worried about dependencies, you could just compile your released library with the Google Closure compile, and strip out everything you don't use. You could even set up a pipeline to produce two releases: one that has bits of jQuery embedded, and a smaller one that requires jQuery.

EDIT: Thanks to dmethvin [1], I just learned that you can also build your own jQuery [2] that only includes the modules you need.

[1] https://news.ycombinator.com/item?id=8760352
[2] https://github.com/jquery/jquery#modules
Palantir seems to have stopped lettering their rounds after G. Though I'm not sure about the distinction between a $400 million Private Equity raise and a $1.2 billion "Series E" a la Uber
First, I'm really glad that we let new accounts submit stories that don't get autokilled now, because people like 'aretx need them.

Second, you won't have much luck job hunting over Christmas, although you should use it to clear your head and do some passive investigation of the job market.
No automation. I had a feeling I'd read it before, so I checked the profile.
A large number of phones sold in the US (and presumably other early release countries) are grey marketed to China though. I dont see any reliable estimates on the size of the market today though.
Gimme gimme gimme! alex at themade.org thanks!
While strictly speaking it's true that going on-site _can_ solve these issues, being on-site won't actually solve anything unless you pay attention to your surroundings.

In the "boiler room" case, I simply assumed I'd get a private office because everyone in the same hall as my manager had a private office. I simply assumed I'd be on that same hall.

Rather than explicitly asking about where you'd be sitting, what the lunch room is like and so on, perhaps it would be more diplomatic to request a guided tour around the facility.

It's quite common to be taken to lunch during job interviews. If that doesn't happen, maybe it's because the lunchroom sucks.
That looks great! I should really stop relying on the human-friendly documentation and dig into the manpages where all the gems are.

If I were really paranoid, I'd still be a little worried about possible information leakage via the local cache, which seems to be necessary for deduplication to work, especially without being able to read previous archives. But I don't have enough money to buy that much tinfoil :)
> I thought you couldn't handle SIGKILL

The process that gets sent the SIGKILL can't handle the moment after it gets the SIGKILL. But, the rest of the system could handle the "killing" clenaup (other process and management of resource). That could be another process (a supervisor). Another process an another machine. Or it could be the same process when it gets restarted. First thing it always does is deal with its remnants and after-effects of when it was killed last.

> SIGTERM just lets you do a bit more of the operations you've guaranteed are always safe.

What does that mean? Can you expand a bit. I don't quite understnad "guaranteed are always safe". If the process that gets sent the SIGTERM catches it and does some something "clever". That clever part is never guaranteed. Because the power can cut out, SIGKILL and come unexpectedly (supervisor decides that SIGTERM handler took too long and send), etc.
Am I missing something? Nothing you quoted would seem to argue that deporting an illegal alien child would violate UNCRC.
The best thing about jQuery is that it abstracts away most of the browser-specific quirkiness for you. Using jQuery for that feature alone makes it worth using.
https://en.wikipedia.org/wiki/Russo-Georgian_War
NASA Study Proposes Airships, Cloud Cities for Venus Exploration
Contrary to popular reputation, there are a handful of use cases where "goto" makes the code simpler, cleaner, more readable, and (in rarer cases) faster. In these cases, you should use goto statements. A good programmer can recognize these cases and use goto appropriately. Goto is never necessary in a strict sense but occasionally it can eliminate some pretty ugly spaghetti code.

The use cases for goto I see are primarily complex/thorough error handling (e.g. unwinding some concurrency control mechanisms) and certain low-level state machine patterns. I would expect to see these kinds of use cases in the Linux kernel.
Kubernetes on Mesos – Try It Now – Mesosphere
they can't just walk up to the guy's house and demand to see his green card just because.

Sure they can! All immigrants are required to have proof of status on them at all times. It's rarely enforced, but it is the law.

Before I became a citizen I carried a copy of my green card with me at all times.
You can try it on either Digital Ocean or GCE.
The most crucial distinction where paper wins is that writing is a "nonlinear" process whereas typing with the tools we have today is "linear". You could use something like a mindmapping tool, but you're again constrained to a fairly rigid format rather than giving you the ease of switching. Eg: you can write down a bunch of things and draw arrows between them. Or draw a graph/sketch. Or draw a link between the thing you had on the first line and something related that came up towards the end of the page, etc. To me, that means that thinking on paper is much more free than typing, and one has available a space of a larger dimensionality, to represent one's ideas.

However fast one can type, the rigidity of typing is the biggest obstacle, imho. I do not think speed of typing-vs-writing ought to be a significant factor; I can think while I write, but not while I type (but that may be because I've written a lot, over decades, as a student growing up in India -- and nowhere near as much typing).

I've tried typing(laptop, phone, tablet), writing on a convertible tablet (Lenovo X230T and Xournal/linux) and paper is still the most usable, by far. Once I have something worked out on paper, I transfer the notes to the computer for storage -- either typed-up using markdown/Pandoc (since I use a lot of LaTeX math) or handwritten. Of late, I also occasionally use Google Keep for jotting down small things.
QuickLook plugin for BPG image
As I was recently doing some reading, it seems like the cookie stealing could be made more difficult by adding something harder to fake? I think for flask-login they add in the ip and user agent. https://flask-login.readthedocs.org/en/latest/#session-prote...

This probably wouldnt work given that I am assuming its the external IP and a user agent is pretty easy to copy/clone.
Seems like there should be another value mixed in that might be hard to figure out for a third party behind the same NAT.
That's kind of a silly argument. If you go and kill people, you're called a murder. If you steal from someone you're a robber.

If you do not have legal status in the US, you are in the country illegally, thus you are an illegal immigrant.
Skype has launched an instant translator
If you just want to contract with them, it is easy and you are just a contractor. If you want to be a vendor then below is my experience & opinion.

We have been successful in breaking into the EMS/Fire and more limited in Law, but it took a long time and also I do have contacts in the industries.

As MalcolmDiggs already pointed out, most times these deals are awarded to the lowest bidder and take time, 6-12 month sales cycles are not abnormal, 3 months is considered quick. Additionally the RFP is usually a multistage process, not just submitting a quote and response. Many times you have to appear at minimum to one Q&A session, plus submit your RFP and prove your bonafides. Depending on the agency as well, if the value exceeds $5k or $10k (or whatever their threshold is) then you will have to be bonded, prove you carry all the proper insurance for the state, blah blah blah.

Where this can get a little easier is if you have developed a product that one of the agencies wants to acquire then it is usually a longer sales cycle but you get out of the RFP process a lot of times. They will sole source things, or many times write the RFP/RFQ so specialized that only one product fits it.

In general though, once you get 1-2 of these deals they are easier to get, because there is a certain amount of the safety in the fact you have been trusted before so the next time it gets easier.

Our last Response to an RFP took us the better part of 30 days and 2 people (over 3 months) to properly write, assemble, document, respond to Q&A and get everything sent in. Plus we had to provide financials, resumes of principles, bond, proof of all relevant insurances etc. Luckily since we have done these before a lot of that is just refreshing documents but it still takes time to make sure it is all in order. One we responded to claimed to have rejected our proposal because we put two sections out of order in our response, a stupid mistake that didn't materially change anything, but it wasn't in the specific stapled order they required.
How to Recover Data from Samsung Galaxy Note 4
sounds like somebody's girlfriend got pulled by a hipster
The jQuery library is 45k, half that if gzipped. If it's taking 20 seconds to load, your birds are too slow.[1]

[1] https://tools.ietf.org/html/rfc1149
Why not pass the small operation off to someone who has the chance of keeping it alive?
if it takes 20 seconds to load, you have bigger problems than jquery.
Unidentified Creature
Because they're not bad when you use them for actions which would go in a "finally" block in a language that supports exception handling.
You're right it will only work for one class. This is actually a perfect example of jQuery smoothing out the rough edges for you. I think the split method would work (provided you remember to split with \s instead of just space). It actually took me a while to come up with a regex replace that won't break in some corner cases ( I think)

document.getElementById('foo').className = document.getElementById('foo').className.replace(/(\s|^)foo(\s|$)/, ' ');

\b is out because it matches - and would kill stuff like foo-bar.