skysight-inc/HackerNews huggingface dataset:
Their new Director of Operations is absolutely the nicest person and best manager I've ever worked for in my life.

It's time to start taking this company seriously.
I'm not a big fan of languages allowing mutability anywhere. You can use it, sure, but advertise in big bold letters as to where. This plays out repeatedly for any side effect.

There are some OO systems with effect types I suppose. Those would be interesting.

There are also OO systems that don't have mutability. But I think that it you remove mutation, all that class nonsense, and are careful with subtyping (since it breaks things badly often) then you basically have (badly typed) ML modules with open recursion.

The open recursion (a.k.a. late binding) bit is probably the most interesting thing but you can play with it in Typed LC just fine. It's just another form of recursion.
Basically because bindiff (http://www.zynamics.com/bindiff.html ). The moment an updated binary is available, the clock starts ticking towards a vulnerability being reverse engineered from the update. A few years back, there was a huge amount of research in the infosec community whose goal was to automate extraction of these vulnerabilities (yes really - a robot automatically producing 0-day given an updated binary). Symbolic execution trickery aside, this remains a straightforward task for a reverse engineer to manually perform given a set of debug symbols (which Microsoft supply for developers).

Your options become either to release an update the moment it's tested, immediately making vulnerable customers who have a change management policy (usually also the biggest and juiciest targets - fortune 500s including ironically the likes of Google), or delay any release until some coordinated date, giving everyone an equal and predictable opportunity to cope with the exposure, which is how Microsoft do it.
WhatsApp and Snapchat could be banned under new surveillance plans
> knowing fully well that a patch is to be rolled out in 2 days.

I haven't come across a source for that. Does one exist?

For all I know, Microsoft announced it in reaction to the publication, but I have no clue Google could have been made aware of it beforehand.

Edit: nevermind, I've found one.
In C#, this is significantly more elegant:

public IList<String> getDistinctTags(IEnumerable<Article> articles)
{
return articles.SelectMany(a => a.Tags).Distinct().ToList();
}

The entire LINQ "empire" (.NET 3.5) is built on top of IEnumerable<T> which was around since .NET 2.0. Streams seem to be very artificial; why not rely on Iterable<>?

Oh, and no "yield" in Java.
>Its primary purpose is to increase the efficiency and fairness of the securities market for the benefit of investors, corporations, and the economy by accelerating the receipt, acceptance, dissemination, and analysis of time-sensitive corporate information filed with the agency. source: http://www.sec.gov/edgar/aboutedgar.htm

"Delaying" the filing of required disclosures makes it more difficult for investors and potential investors to make informed decisions, and possibly defeats the purpose of requiring its disclosure in the first place.
WhatsApp being banned under these plans would be doubly hilarious, since its encryption is a joke. There's a single hard-coded AES key for everyone. I'm sure SnapChat isn't much better.
It is a political problem, but I think it's one that has to be solved very very soon, because the majority of the population seem to acquiesce quickly to these new restrictions and "safer" (against them) systems without thinking much of the negative aspects. To let it reach the point when freedom is completely associated with malware, terrorism, or whatever else is used to frighten the population into comformity, it may be too late to oppose.
Is it actually possible to fly FPV with that much of a delay?
It seems the Moto E was chosen just because it's a current phone that was cheap to buy.

Anyone think a Project Ara phone could be an option? http://www.projectara.com/

I like the idea of buying one configured as a Wi-Fi phone with no baseband or GPS module and with the right secure communication app could be "secure" enough. Maybe someone could see a market for a "open" baseband module for it and make one?
Evaluating D for games
The laws absolutely scream to be mocked.
The last commit was Nov 5th, 2014 - a merged pull request :)
This isn't necessarily due to erasure. This actually about boxing. Reified generics is one way to solve this. Another option is tagged pointers. That is how OCaml handles this[1].

[1] http://stackoverflow.com/questions/3773985/why-is-an-int-in-...

edit: clarity
The problem is that Google can't force phone vendors to support old devices or carriers not to slack on allowing them. Suppose they did release a patch for 4.3 – how long would it take for the phone vendor to update their custom UI value-subtraction patches, package a release, test it, ship it to the carriers, who will do their own branding and testing, etc?

This only applies to old devices so the manufacturer sees it as pure cost unless many people get exploited so badly that they will never buy a new model again; similarly the phone carriers only consider this a problem if you leave your contract – and given that the most likely reaction is “Android sucks – I'm buying an iPhone” or “Verizon/AT&T/etc. sucks – I'm switching to the other one” they obviously haven't been feeling much pressure to change.

What we need is a legal fix to avoid them punting the costs onto customers: e.g. not shipping security updates within, say, two months requires the carrier has to unlock your phone and release any remaining contract without penalty. Unless it affects revenue, they're going to continue to treat support as a cost-minimization exercise.
It runs on 32bit ARM at up to 1GHz with 512MB of RAM. Completely different league.
I think because they still collect information from your phone and correlate it under your Google Account. I created an account solely to install software (security) updates to the built-in components, and it greedily grabbed my contacts from my OwnCloud instance and sync'ed them to my Google Account. As colordrops mentioned in another reply, they are very sneaky about building a user profile.
oh, yep, sorry, 2 months :)
If your code is wrong you want to fail as soon as possible.

# authenticator == null
if (authenticator.getSessionError(session) == null) {
# Assumed session is okay, actually the bug is null authenticator
}
I think the eventual solution will be a software subscription fee that ends up going to the carriers. They are motivated to get people to upgrade their phones right now, and unless they are legally obligated or financially compensated, I doubt they will change their practices to enable people keeping their phones.
The diff shows you what changed. The commit message is a comment on the diff and absolutely should say what it's for.

This enables you to easily compile release notes, for example.
You could argue Google have already fixed the bugs - in Android 4.4 and newer - and that it's the carrier and manufacturer's responsibility to issue those updates. In many cases even if Google issues a patch, carriers and manufacturers don't bother to issue an update for their own devices. So is Google really entirely to blame here?
we'll make our own list with black jack and hookaz)
Except it's really not that good of a deal in most places Uber is active. There's no amount of spin that will make spending $40+ on transportation to and from the bar be less than parking fees, gas, and mileage. All that totals up to $20 max. If I'm bar-hopping, forget it.

You're cutting out certain sources of overhead but introducing others, specifically a driver and the organization managing that driver. Uber has to find a way to cut costs to the bone because humans are more expensive than machines and resources and that's not going to change anytime soon.

It's even worse for commuting, because you'd have to be working for a real a-hole if you're paying parking fees at work. Uber estimates that it costs $16-22 one way for my commute. $32-40 is pretty steep to get to and from work.

They have a long way to go before I'd be able to replace my car with Uber.
Isn't it a bug in the default browser and WebView, which affects every single application using WebView?
> people here regularly consume frozen meat

Unless they eat it while it's still frozen, why is this noteworthy?

Also:

> Most people use outhouses, because indoor plumbing tends to freeze.

This is due to their poverty, not the cold. If it was just cold there, as opposed to cold and impoverished, they could either keep water constantly running through the pipes, or, if that won't work, insulate them better, possibly with heating coils.

"It's so cold, they make sure they have to go outside just to perform basic bodily functions" sounds a bit... insane? Idiotic? Poorly-written and probably badly-researched?

> Cars are kept in heated garages or, if left outside, left running all the time.

This isn't unusual. Block heaters also work, and might represent a fuel savings once the electricity infrastructure to plug in all of them is in place.

> Crops don’t grow in the frozen ground, so people have a largely carnivorous diet—reindeer meat, raw flesh shaved from frozen fish, and ice cubes of horse blood with macaroni are a few local delicacies.

This isn't so much due to the cold as it is due to poverty, and possibly local culture.

> Chapple found it difficult to speak with the people he encountered, as many people were rushing as fast as possible from one oasis of warmth to another.

Was he determined to do his interviews outside? I can understand him wanting to take pictures outside as much as possible, and his camera freezing wasn't something I thought modern cameras were especially prone to, but interviews don't need to be done out in the cold.

Unless you're the kind of person determined to climb a radio mast to get an overview shot of a town. Maybe if you're that person, everything needs to be done in the most... dramatic way possible.
How do you push updates to webview through the play store?
> Because who lets a user just add and remove resources without using a process or handler to handle the user input?

I'm not sure what you're talking about:

1) It's user input and the user can craft a DELETE request just as well as add a _method=DELETE to the form body.

2) Most frameworks use the _method parameter as the http method, meaning when routing or when the application asks for the method so as to take specific actions. No general framework just deletes or creates stuff for you (unless you specifically set it up to, and even then you can normally add an authorization check hook).
My point was that it is not a simple trade-off between "privacy and security" and a lack of those things. In order to get software updates for critical components of the phone, you may need to get a google account, sacrificing some of the "privacy" for software "security". Obviously it does not have to be this way, but it is the way Google has mandated it in their ecosystem.

Edit: One can make the case that it's better to use encrypted SMS with TextSecure, rather than using the push messaging. But, from a metadata standpoint, I believe the push messaging might be better. SMS metadata seems to be automatically handed over to the US government, while they would likely need to issue a NSL, warrant, etc. to get that same information from Google. So using the push messaging may side-step some of the metadata collection that is happening.
Libertarians aren't allowed to use marketing?
A true real time system is likely over kill.

General time-sharing systems generally are accuracy to +/- 4ms. Which is acceptable for most applications, as 60fps is ~16ms per frame.

If you (ab)use Linux properly you can get most your threads to only halt on blocking for IO. So they'll get scheduled practically (not always) once that IO state is satisfied.

This requires heavy multi-threading not horrible, just isn't amazingly optimized for cache.

I control high pressure fuel systems and we don't need to use Real Time OS's (always), and generally sigh away from them when I don't.
>"Fuck off" - seriously?

It's an exaggeration for effect (the downvote effect, I suppose), but recommending emoji as a commit log guideline is totally silly. I cannot take this document seriously.
Despite the long wall of text I just posted, I forgot to mention: some clever person is inevitably going to come at the end of this whole process and say "oh hey guys? I figured out another way to trigger this bug" and you start over from the beginning.
Japan’s sexual apathy is endangering the global economy (2013)
The few brief glimpses of the actual product included in this intro video appear to have very little to do with the "rah-rah entrepreneurship is great" cheerleading which takes up the bulk of the time. Work on your elevator pitch, guys; what you have here isn't selling your product. (All I'm getting here is that it's a reasonably attractive-looking link-sharing social network of some sort.)

Also there is disappointingly little to discover about eels.
Obama isn't able to beef up much with Congress voting on the laws first. That might prove difficult given the current makeup of Congress.
VPN in a can
Yeah, we did UberX in Seattle and got picked up by a BMW 5-series. I don't think it was Black, but certainly better than expected.
The static AES key is for local log storage. This is about encrypted communications. They are working together with Open WhisperSystems to bring the e2e-encrypted TextSecure protocol to Whatsapp: https://whispersystems.org/blog/whatsapp/
As I remember it, most of these critical bugs are in the Android browser, which is considered a core part of the OS in those versions. The trouble with that is there's no way to update it without doing all the work of a whole OS update, including the usual mess of getting approval and merging changes from device manufacturers and local carriers.

It seems more understandable that way that Google told them to just upgrade to a newer Android version instead.
Google really needs to figure out how to keep Android phones updated, preferably for 3 years, because I think that's how much most people keep their phones.

The biggest problem Google is facing regarding that is the fact that essentially every OEM creates its own "distro" of Android, which makes it very hard for Google to fix everything. Some of the bugs could be in software of those OEMs.

I think Google should build-in deeper customization frameworks that allows OEMs to customize the OS quite a lot, while still doing it in a "standardized way" that would allow Google to fix the problems.

In a way Google chose this. They could've done what they did with ChromeOS - make Chromium OS open source, but only promote Chrome OS, which is why all OEMs choose the proprietary Google version instead of the open source one. That's how Android should've worked as well. But they probably thought of this too late.
Unfortunately, Android device manufacturers have no obligation to update their old devices. Many that only support 4.2 or 4.3 haven't even pushed out the latest updates with the security fixes to those versions.

This is one reason the latest Android releases don't have a 'Browser' app and have Chrome as the default (as they should). Granted, some manufacturers probably still have 'browser' because they want more control over their users.
These are small and coloured, so they're easy to see in a list.
It's so hard to put a value on something like Spotify. I use the Spotify Pitchfork app pretty much every day to find new music. Before that I'd have to read Pitfork.com and then either torrent or buy that artists music. This forced me to be super selective in who I gave the time of day (because reading + downloading would take hours). With Spotify I can listen to 4 whole albums in one day.

If I find an artist I like I will definitely go to one of their live shows. I feel like I spend more on an artists now than I did when I bought their album outright.
Amazon is killing my sex life (2014)
Or pay the $10/£10 the times you need it and cancel the subscription straight away. Seems like an awful lot of work to setup PayPal accounts to avoid paying $10. I understand that can be a significant amount of money for some people but why is it so important to have Spotify from time-to-time that you would go through that process?
This place is actually colder than Mars.
Multiplayer Tron light cycles through SSH
Correct me if I am wrong, but this seems to be a bug in the default browser, which was not updatable.
Android now uses Chrome as its default browser, and it is automatically updated when you activate your terminal.
Same thing for the new Chromium-based webview.
The solution is to update the terminal to a new version of Android and yes this is not without issues.
There used to be hardware rental and line maintenance charges in fixed line phone networks. There still are in cable networks. It's just another source of revenue, and it doesn't encourage software updates.
Another park.IO success story: designer.io sells for $3,000
I enter "offline mode" and listen to songs that have been downloaded only. This allows the other device sharing your account to take over and play async without affecting you.
In general, technical problems can be permanently solved, and political problems cannot be. Where possible, it's always preferable to turn a political problem into a technical problem.
I don't think the article should have framed it as "let's replace traditional looping constructs," but "let's apply a filter or query to a data set." That's how I've typically seen .NET LINQ written up, and it makes more sense to me.
Some of us don't mind paying for our tools.
What Teens Really Think about YouTube, Google+, Reddit and Other Social Media
It's a bad deal on those metrics outside of some very small cases (basically, ones where you'd otherwise park for a long time in an expensive location).

And you're paying the fuel and milage costs any way you look at it (in fact, you're paying for more fuel/milage, since the driver has to drive to you). I don't understand why this error constantly crops up -- surely everyone understands that car fairies don't come down from the sky and put gasoline into the tanks of UberX cars. You're the one paying for the ride, so you're paying for the gas. The fact that you aren't physically present when the gas gets put into the tank of the car has no effect on it.
Today IE8 is one year away from end-of-life
Today, IE8 is one year away from the end of security patches and technical support (http://www.zdnet.com/article/microsoft-to-drop-support-for-older-versions-of-internet-explorer/).

If your organization still develops for IE8, this is an excellent anchor for the beginning of a plan to end that support.

Most development teams I've talked to support IE8 because of a single client they can't turn down. By talking about the looming security issues and development challenges IE8 presents, as well as their plans for moving off XP, you can help inform and move their process forward.

If you've had success migrating off IE8 or talking to a customer/client about the move, please share your experiences!
They are definitely not small and coloured on my terminal screen. Maybe we should update git or github with proper tracking and tagging (wait, git already supports tags! But that's for a different thing anyway) instead of using something that was not intended for this purpose. Especially because, as I said, it's ambiguous and it really doesn't bring any benefit on the table.
This demonstrates a major problem with development of Java since the Collections work (which was fantastic): the libraries suffer from over-engineering and surface far too much implementation flavor in the API.

Who cares about streams? Who cares about Optional? We just want to filter a list in a clear, terse manner. (Some people do care about streams and Optional, and I wish them well, but that's orthogonal to the question at hand.)

Consider the examples given. Here they are implemented in Gosu:

getFirstJavaArticle() : Article {
return articles.firstWhere(\ article -> article.Tags.contains("Java"))
}

getAllJavaArticles() : List<Article> {
return articles.where(\ article -> article.Tags.contains("Java"))
}

groupByAuthor() : Map<String, List<Article>> {
return articles.partition( \ article -> article.Author )
}

public getDistinctTags() : Set<String> {
return articles.*Tags.toSet()
}

(I cheated a bit on the last one by just using a Set, but that's more appropriate and communicates the uniqueness of the elements in the collection to the API consumer.)

Beyond the dot-star flatmap operator, there isn't anything very fancy going on: just closures being passed to methods, returning familiar classes that don't require additional transformation to pass on to the rest of the world.

It's too bad, because this is certainly good enough. As Jack Nicholson said: What if this... is as good as it gets?
what is the % impact on endurance?
Text Input Effects
Supreme Court seek Obama administration views on Google-Oracle dispute
Presumably he 'just ignores' your request.
Congress doesn't seem to be shy about passing national security legislation. That often trumps partisan politics.

I think we've entered the age where we can no longer ignore our national IT infrastructure shortcomings. As someone who has had more than a few sysadmin jobs, and at a couple places you've heard of, its incredible how little security matters, how poorly software is written, how few developers can write secure code, and how management can force IT to make boneheaded implementations that bite everyone in the ass later.

I would love to see a HIPAA-type regulation for all businesses, encryption everywhere, force change of default credentials, etc. The wild west days of the internet need to come to an end.
The examples feel very much like Ruby to me. In a good way. This sort of chaining of operations also feels very natural for someone thinking in terms of a chain of Unix commands piped together.

However, having that explicit "stream()" signifier is a very Java-y thing to do and appears to ask the programmer to decide how best to compile the given line. I would expect the compiler should be doing that work for us.
Since I've been looking into a data-driven approach into Github Archive data, I have a few comments:

1) A blog post is not a Show HN topic: https://news.ycombinator.com/showhn.html

2) If you're plotting a density scatterplot in ggplot2, you must used a reduced alpha, otherwise there is no indication of density. (e.g. the conclusion of "Almost 90% of our repositories have less than 20,000 stars and 20 languages." is not apparent)

3) Why did you use a "repository index" for the second chart? Why did you sort it descending? Why are you using a scatter plot instead of a histogram?
Ask HN: Anyone working on some cool mac apps?
I love working mac apps and am curious what other mac devs are up to on HN. Share screenshots and or links. I'll post mine once others do :)
Google expended their resources to find a flaw in a MS product, in which MS was treated as any other vendor. If MS requires the ability to dictate the time alloted to fix their own mistakes, and are unwilling to change their own internal priorities for the sake of their own user base. Then perhaps, they should have found and fixed this prior to Google needing to point it out for them? I am amazed at the blind hatred for Google on this when MS has had a less than spectacular performance with its patches in the last year. Did all the MS fanbois forget about the bsod's just a few months back from MS's own "flawless", as you all seem to believe, patch schedule? (MS14-045 and MS13-036) If this deadline, self imposed by MS, is so greatly beneficial to MS patching why didn't the magic of patch Tuesday prevent those incidents?
Neither the old android browser nor the old webviews could be updated through the play store.