skysight-inc/HackerNews huggingface dataset:
Hard-Charging Uber Tries Olive Branch
Right now, I could be posting pictures of the horrific amount of phlegm I'm coughing up while I recover from the flu. But I think I'll stick with pix from recent trips to Iceland.

Mild depression seems a healthy response to seeing people do fun things while living a boring, monotonous life. Take a road trip, buy plane tickets somewhere fun, get out and live a little. We're not here forever.
wow. Microsoft is pulling out all the stops.
I say this as a highly introverted person who spends most of his free time alone with this thoughts.

How much of your work time do you spend alone with your thoughts? If this isn't a problem you have at work, then I'm not sure how much you really understand the point of view of the demographic under discussion.
It looks like each page a user navigates to is appended to the URL. I hope the team develops the notion of "browsing modes" with the option (on by default I would think) to use canonical URLs for a given page. Otherwise, a user trying to visit a bookmark at a later date will (1) wait for all prior pages in their browsing stack to load before the page they bookmarked, and (2) may potentially exceed a maximum URL length depending on how that particular wiki is served.
That's quite valuable information to me; given I'm sick of troubleshooting that damn wireless music box and have been trying to get rid of it for months.

This is ammunition much needed.
http://area51.stackexchange.com/proposals/80441/vi-and-vim
Schlacky Lead developer Flyoff
Ask HN: Anyone got the try the DuoCode beta? C#-to-JavaScript compiler
It does for me (Fx35, Windows), but yeah this looks pretty obscure, like the recent bash exploits from 30-year-old features barely anyone knew.

Apart from exploits, semi-related, I just hope the ad industry won't find out about using inline data URIs any soon. This would make ad blocking way more difficult.
Free Cydia download for iOS 8.2 by Pangu 8
7 Elements of Kick-Ass High Performance Sales Teams
LLVM seems to be where the interesting action is these days, I think mostly because it's adopted a superior modular design. GCC's technical design was compromised by RMS' desire to keep it tightly coupled for licensing reasons, and in the past few years the pain of that has really started to be fault. Which is somewhat ironic considering how the free software movement started.
Mayor of city that threw out Microsoft told to end attacks on Linux
Science’s Biggest Fail
Microphones: the potential uses of a common sensor
Rand Fishkin: Inbound Marketing Lessons for Startups
Where does the author establish that people are not enthused about gcc anymore? Or does he not even imply that?
const description = (nameAndOccupation) => {
const [[first, last], occupation] = nameAndOccupation;
return `${first} is a ${occupation}`;
}
description([["Reginald", "Braithwaite"], "programmer"])
//=> "Reginald is a programmer"

This is going to make code a lot more readable. I'm excited!
Seeking work - REMOTE or NYC

Would love JS/Node.js work - I'm your guy.

Full stack web developer, Shipped in JS, Node.js, Python, Ruby and PHP.

More details: http://github.com/chrisabrams

Email me at: mail@chrisabrams.com

Keywords: Ruby, AWS, EC2, Docker, CI, Git, Rails, Node.js, JavaScript
I had no clue this was about async functions. I assumed it was safe/unsafe functions until I got to the part about it not being. I think that is a much stronger issue than sync/async.
AdSense Abused with Malvertising Campaign
Most ads use multiple tracking pixels for various 3rd party analytics and measurement. Some of these analytics require runtime inspection of the page to confirm things like domain, viewability, height and width, page language,etc. So your average ad requires loading a dozen empty images ("pixels") and running a bit of JavaScript.
I feel the title should mention that this is just a newsletter sign up and not even affiliated with the React team.
I'd argue that that's a bit low-level, actually. If you're starting to manage your own memory like that then you're still at a higher level than C, but not as high-level as the functional languages, for example.

Honestly, if the end of your collection is beyond the addresses of that collection's valid data then you've just malloc'ed. Is it worth the bugs?

How to malloc in a high-level language(assuming a typecast always succeeds): 1. Make a reference in main (this way it's object will never be garbage collected) 2. Make this reference to an array of objects(hereafter referred to as the "block"), where each object holds n integers. 3. Whenever you wish to save an object to the block, cast it to the class which the block contains and cast from that class when you want to retrieve one.

Is the above idea good for performance? Possibly. Does it belong in a cryptography library/program? Nope.
Thanks for the praise. I definitely have considered the legal ramifications. I'm going to do my best to keep the data up to date. However, I've attached a disclaimer in the app that explains the data may not always be accurate. It should be used for informational purposes only.
I for one noticed that they made the water more blue, but didn't connect it to the "blue and orange" color scheme, despite having read about it again just a couple of days ago.
Why Economists are wrong about Tech
Everything you said applies to humans using normal web browsers as well. And yet people still fill pages with JS, and browsers still execute it, and people still see stuff.
I believe that by carrying lock picks you were breaking the law right? Unless it is your trade of course.
You would have to go out of your way to do so and handing out buffers that allow reading them without initialization would be a huge warning sign IMO.

So was doing that in the original C code, but no-one noticed.
So, the bar for contributing to the wiki has been raised from "has access to a computer" to "has access, knowledge, and resources to run a wiki server"? I hope one or more WaaS (wiki as a service) providers will emerge where a user account == a fed wiki node.
"What's wrong Timmy?"

"This computer sucks, Dad! I tried to debug into an NT system call and it didn't work."
I dug into this for personal reasons some time back, and the thing that stuck with me to this day was the act of consciously looking at the aggregations in my life and trying to identify their cause. It made me consciously empathetic to others, and helped me identify the things I could actually change in my life.
Ask HN: 18 years-old, still in school. How do I part time freelance?
Been programming purely for fun in my spare time for about 4 years. No real portfolio.

Is it at all possible for me to freelance on my weekends and some nights to earn money? Obviously not huge projects, just small websites people want designing.

If so, any tips on where to find clients looking for work like this? Freelance websites seem impossible. No idea where else to look.

I'm in the UK.
TLDR: Microsoft fanboy mayor of Munich's unfounded public criticism is creating staffing problems. Difficulty in finding Linux-capable staff is cited as legitimate reason for not switching to Linux.

Excerpt of particular interest, to me:

> Commenting on the findings, Jim Zemlin, executive director of The Linux Foundation, said the foundation is aware of the need for a larger number of people with the skills to maintain and develop Linux-based operating systems within large companies and organisations.

> "Preliminary findings from our annual Linux Jobs Report, to be released in February, show nearly 88 percent of hiring managers are having a very or somewhat difficult time finding adequate Linux talent. This is why The Linux Foundation has expanded its efforts to train Linux professionals with expanded training courses, a free Intro to Linux MOOC with edX, and the new performance-based Linux certification programs."
Joke aside, I highly recommend watching this talk about Comcast's HTML based APIs: http://www.infoq.com/presentations/web-api-html .
There's no reason the page can't display some sort of progress indicator while it waits for data. If it doesn't actually do this here then that's silly, but that's a problem with the implementation, not the concept. I'm seeing more and more apps that perform potentially long-running tasks (usually involving network access) without any indication that anything is happening. It's frustrating.
After reading about ternary number notation, it shouldn't be hard to solve one of my favorite brain teasers:

Given a simple balance scale with pans on both sides, how many weights does a merchant need to be able to weigh any whole number of grams from 1 to 40?

Most people have trouble getting the right answer, but its easy with balanced ternary. Try it!
Pity that it doesn't work in Webkit/Blink browsers, only in Firefox (and old Opera).
Linux is beyond user friendly these days. It just depends on what you want. I gave my wife's parents, two old hippies who live in the middle of nowhere and have literally no computer skills, an old laptop with Ubuntu on it. It's been totally fine. If they can use it, anyone can. Long gone are the days of needing editing configuration files in a terminal editor. Of course power users still can, but for novice users it's just as friendly as Windows and more friendly than OSX I would argue.
While it's true that some artists just feel entitled to a paycheck, there are other reasons to support paying for content.

I have no problems with anyone willing to part with their money for content. I do it myself from time to time. My issue is the sense of entitlement whereby people think they should be getting money because they are performing an activity the feel should earn them money.
encrypting helps no? maybe not all bets are off in that case.
It's hard to believe this is javascript. I write that with a lot of love. These are some of my favorite language features but It's going to take some adjustment to be comfortable using and reading them in JS.
Clipart.com claims to be the "web’s largest collection of royalty-free clipart, … available by subscription. Subscribers pay one flat fee, and download whatever they need from over 10 million digital assets."

Much of it even looks like the old Microsoft clip art.

They also have a Clipart.com Schools Edition specifically for teachers:

http://schools.clipart.com/
My dad had me do a C tutorial when I was 14 or 15. It was straightforward enough, and went through basic syntax, data types, arrays and pointers. I thought it was easy peasy, except that I didn't know what it was all for and lost interest.

My next foray was the intro to Java course in college (was not CS major). Again the same issue, plus objects and some weird looking String[args] thing you were told to just go with.

I finally picked up programming (as in built stuff) 10 years later through Udacity's webdev course. Finally I had an application, and an efficient way to know how to build one. Previously, it was all "learn this just in case" and if you got stuck on a bug it may be too obscure for your experience level to figure out.
This. Clever way to opt-in a bunch of people interested in react type technologies, I guess.
Says experience. Tritely, why should I believe the contrary? I've certainly seen it tried enough. Yet to work.

There is also the parallel to spoken languages. Where there are pretty good patterns of speach for making different points. Why haven't all of those been converted to simply an atomic linguistic structure.
Thanks. Fixed in the app description.
The counterpoint he tries to consider at the end of the article is missing the point. No matter how those successful companies operate today, how did they operate when they first became successful? If it was an open plan, how many people were in the room, and how many different things were they doing?
You say "reduced the potential password complexity", I say "reduced the minimum potential password complexity".
All this was done at no cost at the spare time by guys interested in retro computers.

All chip decapsulation/microphotography work took ~10 hours, vectorizing layers and making actual schematic/verilog took about 1000 hours.
Isn't 2FA the best approach? I'm just asking.

A problem here where I work is that every application must have a different password and it must change every 90 days. Consequently everyone has a spreadsheet with his passwords written down because nobody could possibly remember them all.

It seems to me that with 2FA, one simple password is adequate. Two independent devices need to be compromised and brute force is ineffective since the turn around time is at least several seconds between tries.
'photon beams' seams like an unnecessarily complicated way of saying x-ray?
> That quote is so insulting to me as an introvert because it takes such a solipsistic and ego-stroking view of the world: that people who are successful are successful because they fit into the world better, not because they are comfortable and adapted to living in a world that isn't perfectly suited to them.

This was my reaction too, but I was delighted to find that _Quiet_ does not have that tone as a whole.
This is one reason why we use BitLocker with TPM unlock on all of our student PCs. If the system is booted in an usual way like this, the disk won't unlock. We had issues our first year with a student who booted a Linux DVD and reset the local administrator password and another instance where the student removed the hard drive to do the same (after we'd locked our BIOS settings). Encrypting the drives has 100% prevented these problems, and makes us feel better about sending failed drives to vendors without wiping them.
My parents bought the family a 48k spectrum back in the day, and the cassette deck didn't work. It being the 80s all the shops were closed for the Christmas period.

I learned to program (BASIC) via the big orange manual that came with the machine. A week or two later I was happy to play Hungry Horace, etc, but I kept up the programming, eventually moving to z80 assembly, then later PCs.
PFQ 4.1 is out
I was really bummed when Song 2 by Blur wasn't used at all in Starship Troopers. Lying trailer!
This can be solved using any of these methods: https://developers.google.com/webmasters/ajax-crawling/docs/...

I maintain a client side rendered website and while SEO can be problematic it can also be done.

I don't see C2 using any of these methods at first glance tho.
logic errors are always going to be there, at least until the compiler is an IA strong enough to catch them for us (and by then we probably won't need coders anyway...)

This raises some interesting philosophical questions: will the ultimate judge of correctness be a human or machine? If it's a machine, what is to say that its definition of "correct" is what humans want?

For some reason, this quote comes to mind: "Freedom is not worth having if it does not include the freedom to make mistakes."
Framework could be applied to first-person shooters.
I don't understand what you're saying? What is something one might want to "tinker" with in windows that is more complicated than "tinkering" with it in Linux?

I assume you mean install drivers or possibly configure an internet connection?

This can be a head ache on windows just as much as Linux... and believe it or not there are ubuntu certified PCs that literally work out of the box.

I'd argue learning to "tinker" through a whole bunch of GUIs specific to one OS isn't a good starting point for anyone.

If you plan on using complicated UIs and powershell then the learning curve is already really steep, so Windows doesn't really offer any advantage here.

Knowing Windows != Knowing computer science
After the first Rakudo Star release, I personally volunteered to spend my Parrot time fixing bugs which affected Rakudo, improving the performance of Rakudo, and adding features for Rakudo, in that order. I offered several suggestions (including native registers, better profiling, object system improvements) and was repeatedly told not to work on them. I will say this, though: there was no friction to working on the profiling system (though it went unused). This happened to other people as well.

I've documented this at length elsewhere.

Those specific features we were told explicitly not to work on were on the top of the list of "Reasons Rakudo Must Abandon Parrot". I find that disingenuous, as if Parrot had been set up for failure.

Perhaps I should apply Hanlon's Razor here, but that feels even less charitable.
Random tangent: I recently had two copies of a key made, and noticed that the guy at the duplicating machine was able to remove the original after "scanning" it to make the first copy. Seems obvious in retrospect, but I hadn't realized that nowadays those machines had memory like photocopiers, instead of just being purely mechanical.

With that in mind, seems like it should be possible for someone to scan a key, save the pattern, and be able to use it later on to cut new keys on-demand. Does a service like this exist?
meh, not even responsive. ;)
That gif https://www.osha.gov/OshStd_gif/10gfg_9.gif could do with a bit of love.
That page makes the same mistake I did, which caused Ted to write the article in the first place. There's no memory safety issue at play, at least not in the way memory safety is usually referred to. As the TFA shows, the problem is explicitly reusing the same buffer. I don't think there's a general way to prevent this kind of code.

I guess more than just me assumed Heartbleed was a typical blindly allocate and read, going past the buffer bound. But that's not what happened. Writing the same thing is totally possible in OCaml. And in a safe language with GC, it's not unheard of to reuse objects for performance. So in fact it's perhaps even somewhat probable to end up with a Heartbleed-like bug.
This is a good option, all images are svgs so you won't run into scaling issues, the quality generally very high, and all images are CC licensed (or public domain) with options to pay to waive attribution. The only tricky bit would be getting them into word in an efficient manner.
Sensory (www.sensory.com) - Application Software Engineer - Boulder, CO - full time

As an Application Software Engineer within Sensory’s Vision Technologies team, you will bring your intelligence and drive to our patented and award-winning speech and vision products. We’re looking for someone with strong skills in UI design and application development (iOS, Android, and/or Web) to build new user experiences with our multi-platform SDKs, to help build internal tools for data collection and annotation, and to help scale our model building infrastructure using Apache Spark/Hadoop and EC2.

Sensory is a leader in providing speech recognition technologies for consumer products. We’ve recently established a Vision Technologies team to create SDKs that combine speech technology with computer vision. Sensory’s speech technology has shipped in over half a billion units, and we want to do the same with our vision technology.

Here’s the full job description: https://careers.stackoverflow.com/jobs/78744/application-sof...

Contact us at jobs@sensory.com
Me too. I'm hoping that V8 starts to support destructuring soon (https://code.google.com/p/v8/issues/detail?id=811) so I can optimize my io.js code.
So just keep trying addresses until you get a reset link sent to you. It's really unacceptable for any service to leak its user list in the way you suggest.

EDIT: x1j7xJuzX in the sibling subthread has it right for email addresses. It's true that separate usernames would be difficult to handle in a user-friendly manner without leaking, but with a valid email address a separate username is probably unnecessary. It doesn't help the user interact with the site. If users interact with each other, they can just choose non-unique display names. To prevent impersonation, just use display name plus some other invariant account property to generate a hash that is displayed alongside the display name.
SEEKING WORK - Remote only

At one point or another I've been paid to develop in Python, C, Perl, Java, x86 assembly, Matlab, Fortran, PHP and a few other languages. I do mostly Python these days.

Some things I've recently completed:

- RESTful API for a mobile app (Relational database design, PostgreSQL, psycopg2, Flask, Jinja2, collaborative filtering, NumPy, SciPy, json, Sphinx)

- A couple of scrappers for large amounts of data (BeautifulSoup, lxml, PyQuery, pdftotext, pdfminer, requests, MySQL)

- Concurrent, asynchronous, scalable tool to check wide variety of responses over HTTP (Python 3, XML, ElementTree, concurrent, requests)

- Scalable, non-blocking proxy for Android/iOS/BlackBerry push notifications (Tornado, Supervisor)

- A couple of mobile-optimized websites (jQuery Mobile, SQLite, PHP, Symfony)

I'm partial to FreeBSD, Vim and the command line, but adapt to whatever I have to use to get stuff done.

I've also completed a few dozen gigs in a major freelancing website across a wide variety of skills, you can check my work history and feedback there: https://www.freelancer.com/u/denep.html

If you think I'm a good fit for your project, contact me. I'm available for part-time or full-time work.

Email: hndenep@kaffeeschluerfer.com
One simple password is never adequate as that then trains the user to continue doing that across other sites - regardless of their use of 2FA.

I've found the best solution for me is to use a password manage (Personally, I use LastPass) and enable MFA/2FA across everything that allows it.
Yes, Microsoft has been kicked pretty hard by free software and open hardware. Now they're adapting. However, I don't see a problem. Microsoft is making that hardware market even larger. If Linux is "cool" and interesting enough, kids will boot Linux and run it on one or more of their Raspberry Pi's.

Linux developers should also consider that the "hackable system" feature is only one of many features that people consider when choosing an OS. It might be good to add a few more carrots to Linux rather than beating people with sticks for not using free.
I've encountered the "truly quiet" environment a few times, and really found that the worst of all: Every noise of the most meek activities, from the clicking of a mouse button to the quiet clearing of a throat, rings throughout the area. After you realize that, concerns that your own minor noises are irritating others puts you on edge, as you try to click the mouse button as softly as possible, ignore that tickle in your throat, etc.

If there isn't good sound suppression, I've found the best alternative is sound camouflaging -- the HVAC fans always distributing noise, or even something as ridiculous as an area fountain. Something to make a base level of white, ignorable noise that stops you from focusing on the small noises.
[Satire] Djokovic Denies Deflating Tennis Balls
Bill Gates can't continue espousing the ideas that everyone should have access to healthcare/technology/internet and be on the board of a company that charges way too much for an OS that --let's be honest-- isn't really miles ahead of any other OS...

I did like the fact that he posted a picture of kids using Ubuntu on his FB page though.
As @Tommi mentioned, hover isn't a great concept in general, as UI elements are hidden and user has to discover them. Though, this is less of an issue in an app the user will be constantly using.

Otherwise, excited to see this unfold!
"Just show a good password strength meter to the user and fine-tune it to your security requirements."

That's the approach I follow in my projects.

I offer a Javascript (window.crypto powered) Diceware passphrase generator and use zxcvbn to let users know the relative strength of the password they've supplied.

I've also been planning an experiment to see if the width of a password field results in users choosing longer passwords, because more empty space. :)