skysight-inc/HackerNews huggingface dataset:
It's sad really. I continually have incredibly high expectations for OS X and it's new releases. However, they keep proving me wrong time and time again.

I used to be incredibly "gung ho" about upgrading to Apple beta's. Then, with iOS 7, that all changed. I had to do something I've never had to. I took the beta off my phone and put back on iOS 6. Same with iOS 8 -> iOS 7, despite the nagging feeling at the back of my head that I shouldn't upgrade.

I think the real issue is, that ideals like Facebook's "move fast and break things"[0] (important to note they've stopped using that technique) has become the moral of big companies to fight the decreasing return on investment each new developer brings. To compare, the impressive thing to me about Google is that they ship so fast, with so few issues.

Despite Tim Cooks solid leadership, I think Apple is really in a grey area right now. Yeah, their profits are at an all time high, but the reason the profits exist is because they have the best hardware and software combination. As soon as one side of that edge goes away, then it might be prime time for a dedicated Microsoft to step back in.

[0] https://www.facebook.com/notes/facebook-engineering/reflecti...
You might want to care about your own community and use your own local vendors.
Stop this Randian nonsense.

This is the kind of unnecessarily provocative embellishment that HN guidelines specifically call out:

When disagreeing, please reply to the argument instead of calling names. E.g. "That is an idiotic thing to say; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."
I read jenscow's comment as "if you don't use a framework, you will build a utilities library which effectively becomes your framework".
Net Neutrality at Stake in India; Airtel Starts Charging for VoIP Data [Updated]
Doesn't mean we're going to use github.
This leads to the big philosophical question that has been relevant for some time. If we have the choice, which society is preferrable:

(1) Most services automated away, and those who don't have the skills or abilities to earn money are supported by taxing those who do

(2) technological progress is actively hindered in order to ensure that everyone has the skills to hold a job that pays enough to live on, or

(3) most services are automated away, and those who don't have the skills or abilities to earn enough to live are left to live in poverty (or starve)

And as technologists, which world should we push for? Ethics is not given nearly enough consideration among technologists, and this is one prime example.
Unionize? What for? They aren't forced to work for Uber. Organize? The very same people, many of whom never did this type of work before, let alone organize, you expect them to step up and try to?

As in, before Uber what were they doing, when Uber leaves what do you think they will be doing. Pretty much what they did before Uber, not be a taxi.

Unions were a necessary part of life when industrialization first took off, now they are not. In heavily regulated countries they are abusive of both the public and private entities they have workers within.
Sounds like Google isn't doing any validation beyond checking that the token is valid. At the very least, they should consider adding validation against various accounts (if any), the IPs associated with the token, and a few others. It sounds like it would help to reduce the false positive rate.

As for a bot getting a human to "seed" it, there isn't much they can do aside from throttling the rate of automatic passes to once every 20 seconds or so. They could tune that parameter to balance between usability and bot detection.
Actual info about the new ReCAPTCHA at https://github.com/neuroradiology/InsideReCaptcha (original discussion: https://news.ycombinator.com/item?id=8722846)
Or...maybe some payment to themselves for their work?
Unambiguous rankings of explosions is basically impossible, so claiming it was the biggest man-made explosion in history is nonsense. This overly-bold claim was promulgated by former Air Force secretary Thomas C. Reed.

http://seanlinnane.blogspot.com/2014/12/largest-man-made-non...

https://en.wikipedia.org/wiki/List_of_the_largest_artificial...
Hmm, judging from the source code the default listenAddress is on '0.0.0.0:3100' so it's listening on every interface, but it's instantiated to use TLS and in server.go HandleServerRequest does SSH authentication.

This service is separate from whatever the developer is working on that needs to call to it. If the work in progress exposes temporary credentials it's not the end of the world.
No, everyone and every system puts a price on human life. The only question is who decides what cost is worth it.

We could basically eliminate car accidents tomorrow through extreme measures. We could lower speed limits to walking speeds, cover all vehicles in cushions, and require everyone to hire the services of a (licensed and bonded) crossing guard before crossing the street. If it saves one life or debilitating injury, isn't it worth it? Obviously not.

So at the end of the day, someone is balancing things like time, money, and effort with safety. The only question is who should decide what a reasonable cost is. I would argue that, given the right tools, you are better at protecting your family than whoever runs the taxi commission, DMV, or even the city council.

Reasonable people can disagree on what a reasonable cost is. They can disagree on who makes the decision and how. But it's not reasonable to jump into polemics about who has a morally superior worldview.

Disclaimer: I'm not a Randian, so I don't care to defend Randian mistakes, but I disagree with your logic on this point.
For working with AWS apis, securing access keys, and granting least privilege, the first step to take is to make completely separate AWS accounts per environment. Make a Bigco-Prod, Bigco-Test, Bigco-Dev AWS accounts. Developers only access the Development account, so even if they connect with a highly privileged key / role and a bug wipes out your services, only the Dev account is effected and production keeps on humming. AWS makes this extremely easy to do, they offer consolidated billing to pay one bill for multiple accounts. Takes no more than 30 min to set this all up and I would recommend this for even a company with just 1 developer.
I wonder how HN'ers would feel if the U.S. government decided to respond to a "cybersecurity crisis" by requiring licensure and fulfillment of a host of legal requirements (such as posting a bond or insurance) before anyone can program or administer any public-facing computer. After all, they'd just be looking out for the public interest. Surely no one wants laissez faire software development!

That's not to say there is no "public interest", but rather that the public interest is something that has to be balanced against other interests, and the freedom to ply a trade is a pretty important one.
I'm sorry, but are we talking about the same company? Uber is not replacing taxi drivers with robots, it's replacing taxi drivers with taxi drivers. It's a dispatch service with a nice payment integration system. No matter how well it is done, there is no quantum leap to it.
The Class Struggle in the North Pole
Did you miss the comment I originally responded to?

> The drivers need to unionize and break Uber's back before Uber replaces them all with self-driving cars
That is definitely a very good practice.
Still it does not eliminate the need for something like Hologram, since you still need to take care of your keys (both for security reasons) and to make sure your dev env is as close as possible to your production and ...
> it's created a world where we can't "contribute to open source" without permission from a gatekeeper maintainer.

Hasn't it always been the case that you need permission from the maintainer to get your code included in the official version? But you can still fork your own version at will, and github makes that a one-click process, which seems considerably better for distributed responsibility than the old CVS / SVN style...

> algorithms dynamically find us the optimal code for doing X from around the internet without X being a single privileged master branch temple on GitHub.

Sounds more like a publicly editable wiki for snippets than open-source project hosting
This is anti-intellectualism: "architecture is hard, so let the smart people at Google handle it."

If it's hard, you learn it so it isn't so scary. You build one to throw it away, as Brooks recommends in The Mythical Man Month.

I want nothing to do with an industry so obsessed with maintaining its own passivity and ignorance of practices. The truth is: a good architecture is highly liberating. It segregates responsibilities, enabling developers to spin up quickly. It makes it easy to spread work among devs of varying skill and experience. It makes maintenance a pleasure or a complete grind.

You have the ability to make working in your code base an enjoyable process of exploring a particular problem domain. But to get there, you need to think deeply about how data flows from inputs to outputs. It's fine to skip these steps via a framework, but you're also trading off how good future maintenance.

There is nothing special about the web that requires frameworks. They're a modern preoccupation, just like OOP was, or components were. In the end, good engineering is what's required, not blind faith in commoditized tooling.

Learn the fundamentals of software design.
Mortgage tax deductions and gentrification
I have had a soft phone at my last two jobs, and it was never used. We used Skype or Slack for our text communication, and Google Hangouts for more personal communication. And it worked perfectly well for maintaining a good flow of communication.

Voice mail is, like texting, an asynchronous method of communication, but it requires more hardware and mental context switching to receive and respond to voice messages.

I think the biggest hurdle to adopting something like this is going to be the different perception of voice mail (and phone calls in general) between generations.
To me, React is a rendering library. The flux architecture implementations is the "React framework" that people seem to be using.
I don't think it was a bored teenager, because they'd have to have access to 100tb of storage, which runs a few thousand dollars. It also seems beyond the capabilities of a single person. A group of bored teenagers, possibly.
In the Trans Siberian pipeline explosion the KGB stole some Canadian software that had been booby trapped.

http://en.wikipedia.org/wiki/Siberian_pipeline_sabotage
Work is not supposed to be a religion. Try to figure out what you would be doing on this planet if you didn't have any obligations. You may find it is exactly what you are already doing, but if not, you seem to be in a good position to spend some of your time for your own sake.
"React isn't a framework, it's a library!" There I said it!

Jokes aside, React provides a Virtual DOM which isn't available natively. I'm sure sometime in the future browser's DOM tree estimation and computation would be so efficient that you wouldn't need a Virtual DOM anymore. Until then, React is the best way forward. There are plenty of thin VDOM libraries (some even more efficient than React) out there but the joy of working with code written as composable Components outweighs efficiency (I'm sure those libraries would fare far worse in benchmarks if composability is put into the equation). Couple this with a library like Om/Reagent and you get FP (code as data)+immutability handed to you on a silver platter.

Without the "right" libraries you introduce a lot of incidental complexity into your application development lifecycle.
I'd recommend listening to StackExchange's podcast (http://blog.stackoverflow.com/category/podcasts/); They always discuss this problem, and I think the choice they made (be strict on rules) is a good one for the type of platform and community they wanted.

Basically: if you wanted to discuss a vague subject that doesn't have a limited set of possible answers, you should probably use a discussion board instead of using a stackexchange website. That's part of the reason why Jeff Atwood left to create Discourse.
The idea of a 'business park' [0] seems like it could solve these problems, but the only examples I've seen (in the UK) are dull and lifeless blobs of concrete in the middle of nowhere.

[0] https://en.wikipedia.org/wiki/Business_park
Existing-Home Sales Lose Momentum in November as Inventory Slightly Tightens
They use a fatty "well marbled" cut of beef and add a lot of butter. The steak is pretty large too.

There's about 400 calories in 8ozs of steak; there's about 350 calories in 50g of butter.
IF you don't like Ubers pricing or safety mechanisms take a different taxi. That IS the point

This is a reductive and overly simplistic view that invites that total absence of regulation of any services.

The problem is that consumers are unfortunately not well informed, and that 'fair competition' is extraordinarily difficult to maintain in practice. That's why regulation happens in the first place – to prevent the worst excesses of the market.

I honestly don't understand how you can be on a news site for start ups and be against fair competition.

Then stretch yourself a little harder. Nobody's against fair competition - is it that hard to believe that some people feel fair competition is most effectively achieved not through uncontrolled free markets, but through broadly free markets with some state intervention to ensure a fair playing field? That's not too left-field, and it's the principle that every western state is operating on.
It looks like that's a Mozilla Labs project, not a Mozilla Research project.

https://mozillalabs.com/en-US/pdfjs/
There's already been one organised protest when Uber tried to screw the drivers. Uber backed down. Seemed quite effective really.

http://www.businessinsider.com/uber-new-york-city-office-pro...
I don't know that it is the popular opinion in my country (USA) but I'd choose to live in society (1). I grew up being convinced that a successful person is one who "earns" one's keep, but it's becoming clear that by turning our backs to those in poverty, we make the world a much worse place than if instead we normalized the class bracket to keep the poorest at an approximate income value of ~$30k/yr.

Maybe I should just move to Denmark.
No, if all the services are unionized, those same unions will then use every means possible to get new laws passed that say you can't have a driver-less taxi. They won't just go quietly, as they watch robots take over, just like taxi drivers aren't now when confronted with uber.
If the lower classes are having to work three jobs, it's because of the scarcity of housing, not self-driving cars. Most poor people's biggest monthly expense is rent. An oversupply of housing would go a long way towards helping them.

Of course, the landowning classes will never allow this. We haven't really moved on since the middle ages.
Speaking as a security consultant - don't give a reward. What they did is technically illegal and not in the spirit of security testing.

If someone finds a vulnerability accidentally (I've done this before), they won't ask for a reward if they are professional and the company has no bug bounty. It's reasonable to tell a company out of respect - it's unreasonable to ask for payment, that implies almost a ransom and will encourage more of it.

There is a problem with bug bounties these days in that they attract a lot of people desperate to get into the InfoSec industry who don't necessarily know what they're doing and have no professionalism (see @CluelessSec for example.) Don't encourage it by giving a reward.

Cold calling (or emailing) companies to solicit penetration testing is okay, casing the company for vulnerabilities and asking for payment is not. I do suggest you find someone to do a solid penetration test of your company however just out of principle.
The bad part is that prosecutors are generally held in regard in the community while defendants are not. Further things which are written down often seem more factual than things which are spoken.

Combine the two and you've seriously un-leveled the playing field between prosecution and defense. And that's before you consider that many defendants don't have the means to pay for their lawyer and thus are represented by overworked, underpaid public defenders.
An elegant and readable Game of Life implemented in python
Encountered one yesterday that required me to assemble a jigsaw puzzle. Approached the threshold of not being worth the effort.
"The problem is that now you have two systems to learn, HTML+CSS+JS, and the framework."

As opposed to the non-framework case, where you have HTML+CSS+JS, N libraries, and all your custom glue code... Yup, that's WAY easier.
Legally, maybe yes, maybe no. But morally? I say yes. Corporations are not autonomous blobs bereft of accountability.
A little bit off-top, but what are you using as your Host Machine? I've been trying to get Yosemite to install on VBox w/ Ubuntu as the host to no avail.
Sure, that was just one of the examples. These are all valid points for argument – one of the benefits of regulation is ensuring that taxi services are accessible.
Voice mail is too often used by windbags to hear themselves talk instead of getting to the point. In protest of those that seek to waste your time and mine on unnecessary formalities, I purposely don't leave nor listen to any voicemail. Period. It's just too slow and infringes on other people's time, like that step uncle everyone always dreads seeing at the holidays.

Instead, send a very short email with the content in the title and <EOM>. You're done.

(And no, Google Voice transcription isn't good enough.)
If Uber drivers do not have valid insurance[1] then the only "choice" I can make to avoid that is to not use public highways at all (an uninsured Uber driver can crash into me even if I'm not an Uber customer). I'm sorry but arguing for filling the roads with uninsured drives is just sociopathic.

I honestly can't understand how an adult in the 21st century can arguing against vehicle insurance. You don't even own a stake in Uber! You are arguing for adding uninsured drivers to the roads that you use, just to make other people rich. It's not even in your own self interest. Talk about irrational.

[1] e.g. because they have regular non-commercial insurance that isn't valid when operating a taxi, and Uber fails to check that their drivers are insured or educate them about what insurance they need. This has been a common complaint against Uber in various jurisdictions.
Didn't mean to imply no need for Hologram or not to keep dev as close as possible to production. However, I do think you should be doing this before looking into a solution like hologram. I've seen many startups that run all their environments on a single account and eventually something bad happens knocking production offline. If you were to use hologram, but still only a single AWS account you could still just as easily kill production.
We're always busy because we're trapped in a debt-money system. The Fed creates money out of thin air, the big six banks get it at 0% interest, we can get it at up to 30%. Therefore we're on a perpetual hamster wheel because taxes and interest means we'll never 'catch up' to the people who get the money at 0%.
You're correct, of course. That said, it can be difficult to maintain composure in the face of purposeful ignorance.
Buffer Style Guide
Not every union is a political powerhouse capable of doing such. Eventually you'll reach a point where it becomes economically feasible for a company to wholesale fire it's drivers and roll out it's fleet of driverless cars. It's certainly possible that a union could push for a law against such, but that sounds a bit more like fear-mongering and an anti-union bias than anything else.
Year-End Tax Planning for REALTORS
When I was young and idealistic my first impulse wheen seeing someone in need was to help. If somebody asked me for help I was happy to do so. Unfortunately people would take advantage of my helpful nature or they would not reciprocate when I was the one in need. Too many years of this and it has turned me into a cinical bastard. I've done my best to supress my impulse to help people indiscriminately.
In my office voicemail as just used as proof you tried to get a hold of someone. "They didn't answer my email, and when I called they didn't answer, so I left a voicemail". Once you leave a voicemail you have satisfactorily established to management that you have made every effort to reach someone. I haven't listened to a voicemail in over 3 years.
voice mail is asynchronous for the person sending it, but it's somewhat synchronous when you're on the receiving end: you cannot skip through the boring parts right to the interesting content, you have to linearly listen to the entire message. I think this is the biggest problem with voicemail. If all voicemail could turn speech into text, and it would end up in your e-mail inbox or "voice mail" app on your phone, we'd have the best of both worlds.
well, if you would optimize of the patch-process (Creating PRs in Github is much faster than creating patches and uploading them to Bugzilla), it would lower the barrier.
Voicemail doesn't seem as "on the record" as email. I wonder, does this matter?
Hey there - founder of streak here. would love feedback on how we can make our mail merge functionality better? We know there's a little jank right now because we do a lot of it client side but we're looking to mover it over to running on in the background on our backends.

Any features specifically you're looking for?
LLJS is listed here but the last commit is over a year ago. Having spent the last month hand-coding arrays of structs in js, I'm really feeling the need for better low-level constructs. Looks like I'm stuck waiting for rust + emscripten to be a valid option.
Having to work with vendors a lot it would be difficult for me to give it up. I know, they could simply email me, but the reason for the voice mail was the immediacy of the situation. Likely if they leave one they will zip out an email, but those take more time to write than leaving a voice message.

Now I can see the reason for ditching voice mail if this is how some people are dodging responsibility. Seen that, where people will ignore calls and pretend to not be present. Instant messengers only work if they are mandatory, where I am you can simply leave it off so again your "not there". Many email programs can block return receipts.

So what problem are they really trying to solve?
There are open source wiki platforms so wikia is not the only option.
I don't see that working out significantly differently in a Marxist system. Or at least a Marxist-Leninist system. There'd be a change in the boss's motivations, but it'd only be cosmetic. Instead of "Great, that means we can double production, which will earn me rewards because we can sell more stuff!" it would be "Great, that means we can double production, which will earn me rewards because it will impress my superiors!"
Government agencies like the NSA already know how to do this.

The usual firmware update happens over the regular SATA interface, and is also controlled by the firmware itself; however, there is a "factory mode" that requires physical access and is always available - it's how the initial firmware is loaded - so even if you use firmware that doesn't allow updating via regular means, you can still update it if you really need to. The factory mode might be via JTAG, or require a specific voltage on a pin upon reset to enable, and that's something that no malware can silently do...

I wonder if OCZ might've not suffered the same fate had they open-sourced their SSD firmware after they bought Indilinx, since one of the biggest problems they had was firmware bugs.