skysight-inc/HackerNews huggingface dataset:
>some level of "privacy" people are so afraid to lose could probably be relinquished, yielding more benefit than harm

But, I think the question is who gets to make that decision? Who gets to say how much should be relinquished and decide when there is more benefit than harm?

You could say, "well, anyone who doesn't like it can elect not to use X technology." But, that will become increasingly difficult as more and more "core" technology adopts less privacy-oriented models.

So, I am cautious about advocating an approach of continuing to push and erode privacy as long as there is some argument for additional benefit. I think it is very much a slippery slope and we have already experienced some of the slippage. A little privacy here. A little privacy there. And, it is difficult to walk it back.

So, we are redefining what we consider a reasonable expectation of privacy as a society. Too much of that definition seems to be coming from commercial interests and, I believe, many people are feeling uncomfortable with the increasing erosion of their privacy and the decisions that are being made for them.
Really? Have you tried it? If your shell expands globs and you have any directories below / (both very common conditions), rm will not receive any arguments that are the root directory, and your --preserve-root will not alter its behavior. --preserve-root would help if the author of this particular nugget hadn't made the additional mistake of inserting a needless /*, but with that there the root directory would never be an argument to the rm.
I would really like to know. NOAA has a really impressive map here[0] (with a really impressive name) but I don't think it's set up for "surface area of ocean above X elevation."

However, I would expect dragging to occur in shallower waters rich in life because economically we're looking to extract maximum value. I'm worried that might roughly correlate to maximum damage. (Sure we could do more damage if we tried, we could bomb a coral reef, but we're essentially mining for certain lifeforms from an ecosystem.)

[0] - http://maps.ngdc.noaa.gov/viewers/bathymetry/
Mandarin is a spoken/audible dialect, you meant to simply say Chinese.
You have to look at it from the lawyers perspective. 30% or whatever their cut is of $415 Million is a huge pay day for them. Why go through the time and hassle of seeing the case through when you can have a huge payday now with no more work.
I don't think DNSSEC ensures the hostnames are secret. From RFC 4033 [0]:

"The DNS security extensions provide origin authentication and integrity protection for DNS data, as well as a means of public key distribution. These extensions do not provide confidentiality."

[0] http://tools.ietf.org/html/rfc4033
Frankly put, it's a fantastic development environment -- mostly because it's targeted at developers/power-users and not the average user.

It has the added benefit of being inside the "RHEL/CentOS" ecosystem (similar commands, structure, etc), provides a glimpse of what's-to-come in future releases of RHEL/CentOS, and since majority of servers in the enterprise are RHEL/CentOS based, it's a natural fit.

All that aside -- have you tried Fedora 21? It's a complete overhaul from previous Fedora releases and has a lot to like and offer.
This. Thank you.

And if I may digress into some meta-HN analysis, the original comment received about 7 upvotes in the few minutes after it was posted (i.e. when it was near the top). But when newer comments came in and it was near the bottom, that's when the downvoting started.
Because it was himself? And also getting immunity, that would be clever phrasing.
This is probably the most concise introduction to awk I've read.

For more extensions[0] and advanced features like arrays of arrays and array sorting, there's also gawk. And for larger files there's performance driven mawk which can drastically increase processing speed[1].

[0]https://www.gnu.org/software/gawk/manual/html_node/Extension...

[1]http://brenocon.com/blog/2009/09/dont-mawk-awk-the-fastest-a...
You should send an email with your suggestion to the moderator: hn@ycombinator.com
Nice! I though for a minute about using find, but I didn't know about those options to stat, and I just punted and used ls. I need to study the stat man page, apparently.
How to gain business success from Google+ in 2015? • vlogg.com
by association it reminded about current issue of returning or not returning back the Latin America kids coming to the US.
here is a podcast where they cite error handling stats of C++ vs Erlang.

http://mostlyerlang.com/2014/11/19/049-supervisors/

starting at 28:45 although you might want to listen to the whole podcast
Put down the iPhone
Thanks for this case study - super important. We use Hubspot and I brought up this issue with them as we want to add a blog to our site using Hubspot, and the only option is to use a subdomain. They pointed me to that Cutts video and said they have the Hubspot blog on their subdomain and it's no problem. But in their example I'm pretty sure the Hubspot blog does well in spite of being on a blog.hubspot.com subdomain and not "no matter where it is". I would trust Rand on this one over Cutts as well.
You are correct, a long time ago when reading about the Draco I was under the impression they were used on the early Falcon 9 as thrusters, but according to this : http://www.spacex.com/news/2013/04/04/draco-thrusters they were only used on the upper stage and on the Dragon.
SeaGlide
Beef cattle, yes; but it may take a while for dairy to go artificial. I can see a few places like France holding out and supporting an industry focused on "traditional" methods.

No one want's their cheese to have the texture of Kraft Cheddar, or their milk to taste like UHT.
Previous discussion: https://news.ycombinator.com/item?id=8892747
This is pretty standard advice. You want your blog on the same domain. Subdomains are generally treated not exactly the same as content on the same domain.

There are a lot of very good reasons to have your blog on the same domain and relatively few to have it on a subdomain. The extra traffic outweighs any benefit to putting it on a subdomain.
"The horse raced past the barn fell."

It's a http://en.wikipedia.org/wiki/Garden_path_sentence
Diane Goes for You: A living search engine for unknown destinations
Howdy!

I'm the team lead of the Jetpack plugin for WordPress. I've passed it upstream to our in-house counsel just for a cursory review should it conflict with trademark scope or something.

(What do I know, I'm a dev, not one of those lawyer-types)

(But as the Mozilla Jetpack thing existed before we did, and we both coexist, I'm not expecting a kerfluffle, but who knows -- I am not a Lawyer!)
I've been seeing this off and on for about a year now and I still have no idea if this is legit or some long-con troll type thing. Anyone care to shed some light on it?
> I need to be able to asynchronously get data from all kinds of places before I can even think about calling React.renderToString

You can define middlewares, as you would do server-side with expressjs:

router.route({
method: 'GET',
path: '/users/:userId',
handler: function (ctx) {
// load user async
getUser(ctx.params.userId, function (err, user) {
ctx.user = user;
ctx.next(); // exec next middleware
});
}
});

There is a `demo` folder with a detailed example. The main entry point for the client is here https://github.com/gcanti/tom/blob/master/demo/client.js#L21
I wonder how much of the market for Raymond Chandler-esque private eyes was driven by high rates of marriage, and relatively high bars to divorce?
I'm always annoyed when I see UUIDs in my directory structure, it's the same feeling I get when I see a big mac wrapper littered in my yard, or MSOCache in Windows system root for that matter.
'That's essentially the same question as "would I buy it now"?'

Says the math. Strangely, human psychology doesn't quite agree.
http://notepad-plus-plus.org/news/hacking-npp-site.html

The Notepad++ official site was hacked on 12th January 2015, due
to its controversial new version 6.7.4 "Je suis Charlie" edition,
released on 10th January 2015. The site was restored on the same
day.

The binaries of this edition are on another server and they are
not compromised (the SHA1 published on 11th January 2015 is always
available on SF). The automatic typing in Notepad++ "Je suis
Charlie" edition after installation is a feature.

The message of the defacement accused Notepad++ of inciting hatred
towards Islam and accusing Islam of supporting terrorism. The
statements of Notepad++ "Je suis Charlie" edition support nothing
but the freedom of expression and only that. The fact of Notepad++
supporting the "Je suis Charlie" movement has nothing to do with
any accusation towards a specific community. In fact the "Je suis
Charlie" movement in France, as far as I can tell, deserves no
label of racism or of Islamophobia. I have many Muslim friends who
are for "Je suis Charlie". And sincerely, I don't think that two
extremist fools can stand for all Muslims or Islam itself.

If you don't like "Je suis Charlie" edition, that's fine. You can
still use Notepad++ v6.7.3 - they are the same in terms of
features and bug fixes. notepad-plus-plus.org could be hacked over
and over again, but I will always find a way to distribute
Notepad++ "Je suis Charlie" edition - that's my freedom of
expression which I claim as my right.
> I don't know the answer to your question but it should be a required exercise for every web developer to use their website with a screen reader and a blindfold. It would change the way they/we build websites.

Really ? Are you going to ask every developer as well to try to use a website by binding their arms as well, to see how mutilated people feel about the navigation ?

There are good cases for adapting designs to make it usable to most people, and there are good cases as well where the people with disabilities need to have tools to access what's not made for them in the first place.
> If a doctor accidentally removes the wrong organ

Incidentally, that sort of thing does happen sometimes.

http://www.cnn.com/2010/HEALTH/10/18/health.surgery.mixups.c...
I find this is a great way to honor the efforts of people who contribute to Open Source and motivate others to do so. Good job!
Even if we're talking about such a massive roll-out to millions of machines, with various versions of the OS running on various hardware? I don't know how easy or not the actual patch is to produce, but it's not out of the realm of possibilities that they did run into a compatibility issue that they wanted more time to sort out. Think of the outcry and damage to their business if they rolled out a patch that accidentally broke some installations.
My apologies, I read 'to rotate' as passive but it isn't at second pass. I should have tried rewriting it as active voice and it would have become obvious when I failed.
I honestly can't tell if you are attempting parody or being serious.
How Facebook Does Storage
It's a "troll" of computer scientists in roughly the same way that Bitcoin is a troll of economists.
To paraphrase what b1twise wrote below I would say do not do as Google says when common sense, lots and lots of case studies, and practitioner consensus say otherwise.

Sure...you can move it to a subdomain and if all goes well, great. If not you can cite a Matt Cutts video to say who could have known: https://www.youtube.com/watch?v=_MswMYk05tk

If the organic traffic matters then trust people who are actually affected (http://moz.com/community/q/moz-s-official-stance-on-subdomai...) and figure out another (yes, much more involved) way to deal like reverse proxying if you have other demands to contend with.
Much like Segway became useful only for guided city tours. It's presumably only a matter of time before Segway tour operators start augmenting their operations with google glass heads-up annotations.
I guess I have always had ideological issues with RedHat, as a distribution. It doesn't surprise me that they would put the -i alias in Fedora; this kind of "helpful" addition that is actually totally annoying and inappropriate is, IMO, emblematic of the distro.

I'm sure it works for some but it's not for me.
Aquaculture can help, but there's been big problems from aquaculture (anecdotally, here in New Zealand) from the intense concentration of species in one area (where that concentration was never present before) and the effect of all their defecation on the ecosystem of the area they occupy. This has been quite a big thing around the salmon farms in the Marlbourough Sounds, for instance.
Correct! Instead of using compressor(s) and recirculation plumbing, you're using an accumulator [1]. Weight and complexity savings.

[1] http://en.wikipedia.org/wiki/Hydraulic_accumulator
It's a bit tricker than that though.

In software, if I build a toy, and release it to the world, many people may find it useful. They might trust it with their most personal data, or vital business documents. But, it is still a toy.

If I build a toy bridge no-one tries to make it span the grand canyon. They see it for what it is - its faults are obvious. They try to cross my toy bridge and it easily collapses under the weight of their foot without costing the lives of anyone. And, if they somehow managed to string along my toy to the point where it could span the grand canyon, do you think anyone in their right mind would find me liable as the toy maker?

Ultimately, this is where the differences are huge. People are building toy bridges, pet bridges, foot bridges, bridges for single cars and bridges for 10 lanes of traffic. It's very difficult to accidentally substitute a bridge built for 1 person into a spot you need a bridge for 10 lanes of traffic.

But it's trivial in software to put a "toy bridge" or "pet bridge" where you need something like the golden gate bridge.

So, when someone takes my toy and tries to use it as the golden gate bridge, whose at fault?
Simply that if a venture capital firm makes bad bets it can go out of business.
Lots of applications (like Emacs and vim) don't use the system file dialogs though. It'd be nice to preserve old-fashioned file access for them.
> I think it's amazing achievement for the very first attempt.

People don't understand this enough. They took the stage of a rocket from supersonic speeds to a tiny barge in the ocean. Even though they didn't complete the objective, they were successful in showing that the theory holds up.
Mt. Gox CEO Denies Silk Road Involvement: 'I Am Not Dread Pirate Roberts'
you have clean water? food?
heh i am always nervous to use this macro... while i agree it often makes things much simpler & more linear i feel like working without it would probably lead to quicker learning of how to mentally organize/dissect the normal syntax
SpaceX also does them cheaper and with a higher max cargo due to Dragon being a more advanced vehicle than most, it can also return significant cargo from the ISS.

So no, the other big players currently aren't on the same level as SpaceX when it comes to ISS missions.
That's doubtful.

It was a $1500 accessory that never really solved a common problem. Many confused it with Augmented Reality, even the top comment on HN.

If anything, it's analogous to the segway - ie. an expensive, niche piece of technology seen as a novelty.
TIL blind people use smileys.
DHS Believed Mt. Gox CEO Might Have Been Silk Road's Secret Mastermind
> It's also wrong to say that public key pinning (which addresses PKI/TLS weaknesses) makes DNSSEC redundant. I suppose the proper comparison would be to the (optional) DANE?

It wasn't so much specific to pinning as a general thought that most sites will be in the situation where they need to deploy the TLS-specific measures because they have too many clients which can't assume DNSSEC but if you're already doing that, it's not clear to me that many places would see enough additional value deploying something which is less mature and harder to manage. This is particularly a big deal for anyone who doesn't control all of their infrastructure or works at a large organization.
I used to work on telephone switches. We had 31 million lines of code. I can't remember the entire details since it was over a decade ago, but I believe Bellcore required us to deploy fixes for 70% of all reported bugs within 30 days. We were a huge, fat-ass company with 5000 programmers working on the same project and managed this. 90 days is a lifetime to fix a security problem.

The point behind having a deadline before publicly disclosing is that if one person has discovered a security problem, then some other people probably have as well. It is fair enough to give vendors time before you make disclosure but if the vendor is moving too slowly -- for whatever reason -- you want to give the consumers a chance to implement their own security work around. Because if you don't they are vulnerable.

Giving Microsoft 90 days to fix an issue is fine. They can prioritize it anyway they want. If they think it is super urgent, they can almost certainly get a fix out. If they think it is not so urgent, then they don't have to make a fix -- but they know that the problem will be disclosed.

Nowhere in Google's documentation of this problem do I see a massive issue. Google gave MS 90 days. MS found a fix but there was another bug so they couldn't meet the window. Google released the information. Nowhere do I see MS requesting more time or any indication that anybody in the process thinks that anything went badly at all. It didn't meet the disclosure deadline. That's just the way it goes sometimes.
No, they simply overwrite it.

The only way around that would be to take advantage of bugs in their parser. HTTP is a moronic spec, and it allows inane things. For instance, these are valid HTTP headers:

X-LineWrap: Hi my name is
Header Boy

The value of X-LineWrap should be "Hi my name is Header Boy". Edit: Actually I'm not sure if the space before the comment counts or not. Terrible text protocol formats FTW.

X-Comment: This is the value (but this is a comment!)

The value of X-Comment should be "This is the value".

X-MoreFun: I don't recall (offhand) how
this header value should
(really, the spec is a mess)
be interpreted.

The value of X-MoreFun should be (I think): "I don't recall how this header value should be interpreted.".

So, you might get lucky if they have a non-compliant parser and the target site has a compliant parser. In that case:

X-UIDH: garbage1
garbage2

Might get turned into:

X-UIDH: verizontrackingvalue
garbage2

In which case, a compliant HTTP parser would read the value as "verizontrackingvalue garbage2", which might be enough to mess up their tracking.

Also, HTTP has special handling of headers that are "comma separated lists". This should only apply to special-cased built-in headers. But you could try sending multiple X-UIDH headers, with commas in the values, to trick an overly ambitious parser. Maybe.

Anyways, this all depends on bugs in HTTP parsers, which probably exist. (Can you tell I despise the HTTP format?) But if exploited enough to matter, they'd simply patch them.
Still waiting for my check. Wondering if I didn't miss the window for that.
are there a lot of applications where this matters? maybe for CLI utils or something?

i mostly make web-apps or data-mining apps, never really understood this criticism of long (1 second type of long, maybe 10 for EE server) startup times for jvm since i can't imagine many apps worth putting a ton of development care into that aren't worth a 1 second wait to run.

i'm not trying to be a smart-ass (i dont believe everything should be blindly forced onto jvm), really just asking why this is such a common concern when in my mind it is an edge-case
Agile and Lean in the Health Care Industry
Libreboard, an open source project that mimics Trello features
For the record, plane geometry wasn't solved by Euclid's "Elements"; the conjecture about the 5th postulate remained open for a substantial amount of time, and other axioms were introduced when it was pointed out that Euclid's work relied on numerous implied axioms.
An obvious perspective that I had not realized..
Here are some practical things you can do as an individual or household:

http://www.whaleresearch.com/#!orca-conservation/cbuu
Spy: Melissa McCarthy Donne La Réplique À Jude Law
The clearance sales will be fun.
Why not have Apple require apps to run usefully with just basic permissions? Anything beyond access to own files is optional. This could certainly be gamed, but scrupulous app authors could gain a ton of trust from playing ball.
On top of what you've said I don't think enough people get the scale of this task. This is decelerating, balancing, and maneuvering a 14 story tall object, from supersonic speed at the edge of space, onto a tiny barge in the ocean. It's mind boggling when you look at the scope of what they are pulling off.
Yes, even then. Imagine if the bug had been found by security researchers who believe in full disclosure. You think it's reasonable for Microsoft to allow dozens of rootkits and viruses to proliferate for more than three months, for botnets to grow to hundreds of millions in size? Microsoft's release process is broken.
I have google glass... sad to see it sunsetting but look at the bright side... this announcement makes the current version of google glass collectible and limited edition... :)

cheers,
Nash, http://joday.com
wow, it doesn't just mimic Trello features, it mimics everything Trello-related
It matters quite a bit for CLI utils. More than a tenth of a second is not "instantaneous" - which isn't required, and of course won't always be possible, but starting with substantially more than that isn't great. And of course, if you're using that utility in a loop some pipeline, that could even wind up being a bottleneck.

For any single long-running application that doesn't spawn more processes, of course it doesn't matter - but most performance issues only matter for some set of applications.

I think it's such a common concern because 1) people often start out writing CLI utils as they learn their way around a language, 2) people would love to see Clojure be better for this use case, and 3) it's one of the few things to complain about.
When I was a kid, the media had convinced me there wouldn't be any wildlife left on the planet and pollution was going to render large sections uninhabitable by humans.

That was really my first experience with reasoning by extrapolation and it really affected my thinking. Later, when none of the things that were forecast came to pass, I began to examine the whole process of reason by extrapolation and its application to dynamic systems.

That isn't to say that there haven't been pollution events, or that things that shouldn't have gone extinct haven't, instead the dynamics of the system shifted and pushed things in different ways.

I also read about the many extinction events in the planets history and how things came back from each one, different than before.

It is always possible that humans will be the cause of the next major extinction event, and if we are, that event will likely take us with it. And that would demonstrate that ultimately the system stays in balance. And that ultimately the planet doesn't really care about us at all.

That said then, do we as a species kill off our own fishermen? It has been estimated by some [1] that less than 2 billion people can live on the planet in "harmony" (what ever that means) so do we go kill off the other 4 - 5 billion losers? And then take up residence in caves?

Or do we focus on harnessing the energy and technologies we need to support as many people as we would like and to move them to other planet too? Ultimately someone has to tell the general population that whether it is humans, an asteroid, a volcano, or something else this place is a death trap and we better get working on a plan to go elsewhere.

[1] http://na.unep.net/geas/archive/pdfs/geas_jun_12_carrying_ca...
The Kaminsky bug was disclosed 30 days after it was announced, and by then, pretty much the entire internet had been patched. Google is being generous with 90 days, and Microsoft is being utterly incompetent.