skysight-inc/HackerNews huggingface dataset:
Wasnt on HN this weekend. I started really simple with HTML/CSS. Then I moved on to Ruby, and then learned the Ruby on Rails framework. Now I write apps that analyze web data.

Start with CodeCademy.com. It's a great intro for people who want to get started. There are also classes on Udacity you can check out. Feel free to email me if you want to connect further. My contact info is on my profile.
I've built several apps with Meteor, and so far it's been fantastic. Development is lightning fast, the interface is snappy enough, and it's easy to maintain. My latest Meteor app is online at http://stoplight.io.
This trade-off is also why I love Lisp. Although you can easily write something totally incomprehensible, people well versed in Lisp manage to be very expressive with a very powerful language. Of course lisp macros are the key.

It's extremely easy to do LOP with Lisp thanks to s-expressions (all those parenthesis :). But you can be much more expressive with LOP.

EDIT: elaborating
just out of interest which editor is this?
Networking is what got me this job. I am admittedly lucky that the network I built was as well connected as it was. Now that I'm in I'm just making sure I keep up. So much to learn. I love it.
Sony hack probably an inside job, says co-director of The Interview
What's the difference between this and Xamarin?
Website micro services provider, Elto, is shutting down for now
I have called and complained many times about their password policies.

They let you choose a random user id, as in, change the user id whenever you want. I bet you the security guys over at Schwab are using that as a reason to not improve password options. I can see the argument being - "The idiotic password limitations are not a big deal because of the random userids".
Here's the tweet https://twitter.com/stefpac/status/455132477724852224
I recently filled out a support ticket concerning password policies too, after opening an account. I received a rather absurd reply and decided not to transfer any of my money to them.
Author here, let me know if you have any questions, comments, insults, etc.
British company crowdfunded $1.9M for nationwide network of electric carchargers
Sounds good. Just have something clear for your email subject so I know who you are :)
We do. I was just using a quote to express my opinion on the matter.
Access to the websites listed on this page has been blocked
This reminds me of a bug I was hunting years ago in an obscure web server software written in C that was ported from Unix (Solaris perhaps) to Windows. It implemented connections to backend-systems and databases using sockets. Sometimes we got random file errors out of nowhere on Windows but not on Unix.

Turns out BSD sockets are closed with close() just like file descriptors but winsock requires applications to use closesocket(). The guy that ported this to Windows didn't know this and used close() on sockets leaving them dangling and sometimes closing random files on specific circumstances.
Isn't that what Simple advertised themselves as? http://simple.com
Cat Litter Boxes and DRM
Google is surrounded by pessimism
Smoking gun is more ad riddled than I remember it, but they post a fair number of concert riders.

http://www.thesmokinggun.com/backstage
Apparently they insure you against someone breaking into your account, but this is clearly the case of a bunch of old boys who don't understand tech being in charge.
To activate my newly received token, I was instructed to go to the homepage and append the six digit token code onto the end of my password during a login attempt.

This sounds like a symptom of the multilayered bureaucracy that often goes on in banks and similar institutions - a change to the UI to add something as simple as an extra field for the token code, and the changes required to hook it up to the backend, might have been accompanied by so much "enterprisey" management red-tape cruft (specification writing, approval documents, approval meetings, meetings for scheduling meetings - I wish I was joking, etc.) that it made the programmers find creative ways around the system.

At the least, if I were forced to concatenate fields, I'd use a separator that couldn't occur in either one, like a comma or something else that their password policy didn't allow... but then again, I wouldn't be surprised if something else in their system would reject that.
I'm not talking about an information leak I'm talking about a potential denial of liking attack ☺
That talk posted by one of the creators of Siri last week highlighted plenty of things that can still be done with search. Google's been doing a lot of those things, except with text. I don't believe they've fully given up on their search service. Search in the future will be more about compiling different structured information services together in order to show as much information about a given topic as possible. For example, if I search a movie on Google that is currently playing in theaters, I get a Wikipedia article, IMDb page and showtimes for the movie. DuckDuckGo does stuff like this too and I believe that is one of the more innovative parts of their engine, apart from of course the privacy features. While the voice recognition part of Siri is damn cool, the real killer feature of that app is the ability to pick out words and context from what you're saying (or typing, as the original version did allow just typing out what you wanted to say to Siri) and use that context to perform queries against an amalgamation of services to figure out what you want.

There's no question that Google still wants to "own search", but their idea of "search", in my opinion, is more about what it will become than what it is today.
So what is their incentive to do so? (That causes them to actually do so)? You are insecure because anyone can just kill you with a rock when you're not looking. So what - nobody is going to do so.
Sorry for the delay. I generally abstain from HN over the weekends.

Feel free to email me, there are several addresses in my profile entry. I reply fastest to the GMail one.

I really should blog about my experience of writing a book. Some parts were easier than I expected, while others were about as hard as I expected. All together, I think with the facilities available through services like LeanPub and CreateSpace, it was easier and smoother than I initially expected.
Rather than believe or disbelieve them, you can weight them instead.

Which leads us to an interesting question.

What weighting should be given to unsubstantiated claims from the FBI?

They don't exactly have an unblemished record for accuracy, so it is tempting to weight them negatively.

I guess I probably weight them slightly positively, but not by very much at all, which is why I am taking the opinions of independent security professionals over the FBI on this.
> I'm surprised that this comment has been voted to the top.

Chuck's been around HN for a while, and has insightful comments frequently - that he posts this sort of "radical" comment implies that a non-nut is seriously considering it and quite possibly it's worth pondering as an idea.
This has been a problem for years that they refuse to fix. The legacy password thing (Strike one) is bullshit, they could just force everyone to update their passwords when they implement a properly designed system.

I would be even more disheartened if customer complaints and an article in Ars can't get this fixed, but someone "passing it on to a contact" could. It's disgusting that this is how they've handled it. I minimize how much money I keep with them and will be closing the account when I get back to the States.
Next time you feel the urge, think about me.

I will be there. Looking at your code. Judging you.
> We need to go to Mars at least three times and bring back the men and women successfully.

First we'd need to find a way to bring back pretty much anything else successfully, no?

The first is an easy problem to solve, compared to pretty much every other issue. More space (or better space) is a non-linear issue.
I complained to Schwab about their password policies numerous times over the 3 years I was a bank/brokerage customer. A few months ago I finally moved my accounts to TD.

Schwab's standard response was 1) to assure me that they had "intelligent" fraud monitoring systems on their backend and 2) to offer me a hard token, which would have been a pain and may have caused issues with Mint.
ejabberd is written in Erlang which was a turn off for me. Maybe not for you.
I can still add Google as a regular Jabber service in the programs I use. Is that also scheduled for deprecation soon?

I am disappointed about Facebook. Not a big fan of the service, but I maintain an account on XMPP so Facebook people can get in touch, and now I will just have to tell people to stop using it to contact me. Maybe that's for the better anyway. Seems like a minimal effort required to maintain compatibility for people who don't use their software, but I guess they decided they're popular enough that they don't need those users.
There is no protection against fraud on Freelancer. If a buyer issues a charge back on his credit card after the project is paid and delivered, you are screwed. Freelancer declines any responsibility for cases like that.
Yeah, would love to chat with you more on OSHW. Mail? alex@makeystreet.com
The great part is that Rust has a bot that will ask for thorough code review if something inside an unsafe { } -block has changed.

Static analysis for pragmatic reasons is really common in Rust even now.

(BTW, unsafe {} is still a whole lot safer than standard C)
Quitting the secure and high-paying Day Job and freelance doing dog knows what at uncertain rates. I'm older than most of you here on HN, and retirement is ever on my mind. It's hard to go all-in on a dream at this stage of my life.
great!
...but now you have 3 problems! :D
The fact that so many dismissed it without giving it a serious look made me interested in seeing what it was really about. Long/short - it's an amazingly focused, fun and easy stack to work with. I think the fact that it's easy, or at least seems easy and probably because it's another javascript framework makes it an easy target to dismiss on HN. If you are coming from a web background like myself (aspx, ruby, etc) then it's quite a revelation how fast, fun and easy it is to work with.
Specs of Tesla Patents and Research
Yeah, this flow is completely nuts. After setting up 2fac, in general, though, the thing to do is probably test that you can't log in without it.
From what I recall, the hackers first claimed to be going after The Interview well after Sony and most of the press announced it as a possible motive.
I've been though jabberd2, ejabberd and has since a couple of years stuck with Prosody.

The main strengths are that it is very simple and lightweight, and uses less resources. The drawbacks is that it is simple and lightweight, so anything more complicated for corporate deployments is something you often have to roll up your sleeves and implement yourself.

I was scared to run it at first because it is written in Lua, which is an unknown language to me. However, I must say it is quite an elegant language. I could get an authentication plugin running after looking at an existing one, and I trusted it enough to run in production internally for a small team (and it turned out to work well for us).

Edit: Be sure to get a real certificate (startssl is fine), if you intend to use s2s. During the past year or two, most public servers has started to care.
What's your current career?
> As with any future-looking thing, it's all probabilities in the end.

Actually, this was the exact opposite of my point and my own personal experience. On average, a medical degree would have paid out more than the option I went with, but I ignored this simple ROI calculation. Instead, I did a deeper analysis, mixed with some intuition about myself, and went with what was at the time a fairly low ROI option (masters in AI/CS - at a time when the average MS in CS was paying 5k more than a bachelors). I did this because I knew it would open certain doors for me, not for any monetary gain. I'm confident it's served me better than the "just go to med school" advice I was repeatedly given when I was 20 - advice that was strongly backed by every monetary statistic you could find.

So, maybe that's still an ROI estimate, but it's a complex one that explicitly rejects averages. It's not what people typically mean when they refer to "ROI".
I might buy it if two factor activation wasn't a one time operation.

As it stands, there's no need to confuse existing users. You just need a separate pathway to activate the token.

THEN you just ask for the token as a step two in the login process. That's actually how Schwab handles things right now.
Evolving regexes or programs is not an unknown topic but this is the only online tool which is able to find out regexes for text extraction, a real world application, that works for real.
I have not find out other sites or applications able to do the job, providing a good solution.
I worked for a medium-size web agency who used a third-party marketing company. That marketing company cold-called companies on their database, kept track of things like when they last had their website rebuilt, what technology they used, the features, the name of the decision-maker or person responsible for procurement, etc.

I believe the marketing company were on retainer by a number of web agencies, and when they found a lead, they referred it to the most appropriate agency (for a percentage commission) - the agency then continued the sales process (e.g. with a pitch, an RFP response, etc).

I suspect there are a few reasons this model worked:

* The marketing company maintained their database over the long term, so they could discuss previous developments, plans the customer was making, etc.

* Providing leads to a number of web agencies (rather than each agency having a small in-house telemarketing team) gave the marketing company a greater economy of scale, which meant they could afford to invest in tools and training that were specific to telemarketing.

* Providing leads to a number of web agencies allowed the marketing company to generate revenue (commission) from a more diverse set of needs, e.g. sharepoint projects to one agency, wordpress projects to a different agency, etc. If a small agency were doing their own telemarketing, their conversion rate would generally be lower, because they would end up missing out on potentials leads, from not having a particular specialisation.
I "third" that.

A nice C++ client library is by the way http://swift.im/swiften/.
It might not be great for humans, but it's good for cargo mass. Send the big stuff the slow way earlier and the people the fast way with a later departure.
> If you're offering JSON you have to provide SDKs for all the languages, since there's not even a standard IDL.

I disagree. It's best to, but if someone wants to hack together something with python/requests it's not hard to use the returned dictionary. Even with Java, we'll frequently do some requests to get representative payloads, generate models, clean them up and we're on our way. Or you could just use Map<String, Object>.
Not that this is an excuse, but keep in mind that Schwab probably has had the mentality that a compromise of a user's online account, while bad, is not the end of the world.

They have been frustratingly slow in implementing features like linking external bank accounts using trial deposits instead of mailing them a voided check from the external account.

Their slowness to adopt these new features has meant that if you got access to the online account, there wasn't much you could do as a third party that moved money out of the already linked accounts of the victim. You could cause headaches or buy/sell securities but not access the money easily. And if you did link an account or add a biller the victim would get an email.

Things have probably changed recently since I think you can link external accounts now, and there's probably a way to send yourself a check as a bill payment.

Totally not an excuse though.

Note:

I was fooled by the password length as well. Sometimes I would hit what I thought was the wrong last few letters on my phone keyboard yet the password would still work somehow. Turns out you can just type the first eight and be done.
>but tis whole thing just screams False Flag

When you're a hammer, everything looks like a nail.

Sony is trying to blame others for their security incompetence. The US is posturing with "We don't tolerate this."

Nobody really cares and nobody is going to war because Sony had their emails and some media stolen.
I've had similar success, probably over the course of 8 or so years. I've moved it from from machine to machine a few times, and generally haven't had any issues with it. I've had to hack the source once or twice to work around various stupid things on my machine (for instance, my Kerb setup was very slow once, and I had to hack epam not to time out); the source is pretty reasonably maintainable.

I've heard good things about Prosody, but haven't compared the two of them directly.

It is said that ejabberd supports XEP-0136 (server-side message archiving), but since it's not a default (at least, I don't think), I haven't turned it on yet. One of these days I will give that a try.
It's not too often that the top response to the Stackoverflow threads I find via search comes from the main author of the software, but antirez is all over it with Redis - above and beyond, definitely one of the people I most strive to emulate.
"OCaml offered the same proposition for 10+ years."

No, it didn't. In addition to the already-observed point that Go's concurrency story has always been better than OCaml's, Go also offers it to you in an Algol-esque syntax. It isn't C, but if you know C the differences are dialectal, whereas OCaml is from the ML tradition and is radically different. ML is the language family probably most distant from C in current medium-scale usage.

I don't like or celebrate this fact, but it seems that broad-scale success right now requires that you be an Algol-descended syntax.
Wow, that's a lot.
Response Time Meter
To be clear, the caniuse.com stats are sourced from StatCounter Global Stats[1], not from the site itself, so they should be fairly reliable, albeit averaged across the world. Obviously, nothing beats measuring for your own site and audience.

[1] http://gs.statcounter.com/
Agreed. I think a lot of that is based on Meteor (understandably) pushing their entire stack. I've always been intrigued by their docs which state:

By default all apps include the meteor-platform
package. This automatically pulls in the packages that
make up the core Meteor stack. If you want to build your
own custom stack, just remove meteor-platform from your
app and add back in whichever of the standard packages you
want to keep.[0]

Granted, I've always used the full stack but I'd be interested in seeing some examples of taking a more modular approach at a lower level than adding packages on top of the core stack.

[0] http://docs.meteor.com/#/full/usingpackages
Not exactly what you want but Im writing a LuaJit inspired VM (hope to use some of its code as well) for clojure and Im using rust to do it. That said, I have no plans of writting any persistent datastrucutres in rust, I would like to keep that code in clojure.

https://github.com/clojit/clojit-vm

Rust updates fucked me over and I have not time to fix it atm, but work will go on.
It saves client engineers some small amount of time from implementing it on their end, but building these screens shouldn't take more than a few days.

It's a terrible UX though. I wrote a blog post with some images about it if you want to see what it looks like: http://mark.gg/2013/07/17/linkedin-2.5-factor-authentication...
I use MongooseIM and it is a base platform for building high performance messaging systems leveraging XMPP. It is designed to provide communication for millions of concurrent online users in high growth sectors such as Social Media, Gaming and Telecommunications. It is highly customisable due to its clean and modular design allowing easy integration with pre-existing solutions within a company.
MongooseIM is truly innovative for building high volume scalable instant messaging solutions, having features specifically designed for enterprise and business.

It's a port of eJabberd and brings it up to ErlangOTP standards.

https://www.erlang-solutions.com/products/mongooseim-massive...
I always wonder when I hear these sort of stories out coming out of odesk, freelancer or elance, if the sort of highly qualified developer is actally their target market. Now I am not saying that people on freelancer are incompetent but like the original post said they now don't have a network outside of freelancer which is far more imporant for an actual freelancer web developer as opposed to someone in india or the phillipines were freelancer.com or similar is their only opertunity for work.
Some of their competitors are just as bad. I remember I started to sign up for a TD Ameritrade account a few years ago, but when the password "requirements" came up (which were very similar), it was clear that they were probably storing passwords as plaintext, so I stopped.

Then I got phone calls from them asking why I hadn't finished, so I had to explain to a person that clearly wasn't technical (not his fault, of course), that his company had no idea what they were doing security wise.

Maybe they finally fixed it though. I can only hope.
It's a little M&M flow sorter! They even kind of look like cells. If you really want your mind to be blown, go read about flow cytometers: http://en.wikipedia.org/wiki/Flow_cytometry#Fluorescence-act...

Fluorescence-activated cell sorting uses the same idea as in the M&M sorter linked here, except with lasers instead of an iPhone camera and uses an electron gun to deposit charge onto a droplet containing exactly one cell as it falls through a magnetic field to sort it into bins. Madness!
For context, this is the poll being referenced: https://docs.google.com/forms/d/1DiW2iS1hLclldPY2EJNpXGswirF...
(developer also, web and ios) Recently, the logic board on my 15" Macbook pro died (just shy of 4 years old) and I ran to the Apple store to buy a new one.

Not wanting to spend almost $2000 again, I went with the base 13" retina this time (128gb ssd, 8gb ram).

I have almost 0 complaints. The screen is beautiful, it's significantly lighter then my 15 inch was and it's plenty fast. Photoshop / Illustrator have been fine when cutting up mockups. Xcode hasn't given me any problems either.

My only complaint is no built in ethernet jack (had to get the $30 lightning adaptor). This is obviously understandable given the thinness of the laptop, it just didn't occur to me it didn't come with it when I got home. Lack of CD / DVD drive hasn't bothered me yet.

Oh yeah - can't upgrade the ram either; had I known that, I might have gotten more (was panic'd and needed a laptop that weekend)
> All hail the ambiguity of the spoken word....

But this is actually about the (lesser, but still present) ambiguity of the written word.
Scalability as a Service
Well, there's the superficial argument to "input mechanisms we are already very familiar with" - given that we as a community are probably drastically undervaluing removing typing as a prerequisite skill for computing.

However, if we're using a human as our black box (e.g. input via eyeballs, output via fingertips), then I'm admittedly more excited about VR from the input side.

To make a hardware metaphor, the additional sensory channels can be looked at as feeding functional units in our brains that are hitherto being underutilized. Adding or widening channels takes us into SIMD interface design. (I wrote superscalar, but that sounded like a terrible buzzphrase)

The caveat and challenge of course is whether or not these new resources can be effectively utilized. At least for anything less trivial that a richer consumptive experience (no offense intended to anyone in the multimedia industry).