skysight-inc/HackerNews huggingface dataset:
Well an inventive architect could incorporate the theme of these into a new structure, if not actual pieces. I could see bringing some of the decorative structure for a large indoor area, or modeling the exterior on it.

However similar sentiment can lead to stagnation as areas are not developed and instead become depressed from disuse. Now granted most of the push is likely coming from the lack of housing for the rich than trying to find new space for the poor
The strange case of (sharing the story of) babies sleeping in boxes
PCBmodE – A printed circuit board design tool with a twist
Maybe, but many cities have massive churches (e.g. Baltimore, New York, Washington D.C., et al).
Could you please email support with your issue so we can take care of it?
To Win a Deal on Shark Tank, It's Best to Be in a Team
I remember playing with this image back in July. It's pretty handy, and pretty easy to get up and running. What's changed about it recently that it's getting publicity again?
FF FF FF FF FF FF

maybe Nike hired Sony random number guy(return 4)?
Pretty amazing. The whole document is canvas and Javascript. It doesn't need any third party plugins like Java.
Show HN: My Shop Heroes – WP Curve for Shopify
Not sure what the title of this submission should really be - the original article title sounds far too much like the original article, and the interesting part IMO is the discussion about online sharing habits...
Nitpick from a Mexican raised in Mexico: we never say "día de los muertos". This is a literal back translation of English of "Day of the Dead". We say "día de muertos", without the "los".

The only times I see "día de los muertos" is in English-language media.
+1

(I also agree with the points below about the housing shortage being localised. We should do what Silicon Valley did a long time ago and move some firms to a new area.)
An introduction into Ceph storage for OpenStack
The ones at Kings Cross are being converted into a building. They are listed.
Chill

It was evident they were speaking from personal experience. Whatever works, y’know?
> Which means none of the existing drag and drop solutions will work (any DOM manipulation without react knowing about it will cause trouble)

Um, we totally use jquery-ui's drag and drop in a React component in production and nothing bad happens.
Why the quotes? The film consists of "footage shot by a British army film unit cameraman of the liberation of the Bergen-Belsen concentration camp in 1945".
'PC culture' isn't about your freedom of speech
A Beginner's Guide to the Redpill Right
True, these are very open standards. Microsoft even provides a pretty good xml editing tool to inspect a docx of xlsx or whatever once it is made to see how it is made https://msdn.microsoft.com/en-us/library/office/bb448854(v=o...
FYI: we built this using the 7 Day Startup method that was used to build WP Curve. We blogged about the whole experience each day: http://retromocha.com/7-day-startup/

If you are wanting to do a startup and get validation fast, it's probably worth a read.
You didn't say "all", but you did say "plenty" when there aren't any. When implying mass murder, that is indeed a sore point - when there IS another [sub]group which IS, today, beheading Christians and pushing homosexuals off buildings for their views.
Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation
Somehow I don't qualify a misplaced apostrophe (either by human error or bad autocorrect) on the same scale as choosing a fundamentally bad database or failing to understand/take advantage of powerful technologies such as client side certificates.
The freedom will trickle down.
If you have to watch a video though, try increasing the playback speed (it's in the little settings gear on the YouTube player).

I normally listen for a few minutes at double speed, then drop down to 1.5 if necessary.
What are you looking for in a developer?
What characteristics do you want?
What core concepts should they know?
What would you want in a portfolio?

Platform related:
What do you want in an iOS Dev and a Ruby Dev?
ISP pie graph might help indicate that this is an industry problem rather than something a regional implementation group is guilty of.
Ask HN: I am confused about ReactJS Native
I understand that ReacJS works natively and that there is no DOM. But isn't it just that. A web view builds views from the html file, but react js builds it with native function calls and its own renderer. After all the over head of javascript still exists.

>> ReactJS native just replaces the DOM rendering part of webview with something else of its own.
64% of self-identifying evangelical millennials support same-sex marriage:

http://swampland.time.com/2013/03/21/why-republicans-are-say...
They are extremely beautiful. At least the classic Victorian ones.
I feel like a fraud and that’s a good thing
I know many people in the security industry who are willing to waive the CISSP requirement if you have a CVE on your resume.
Since I already know ObjC & Swift, the most interesting part of this is at 8:17. "What if we could server-side run native apps? ...we could do it".

Hmmmm.

An interesting idea, however Apple might have something to say about that (App Store Review Guidelines):

2.7 Apps that download code in any way or form will be rejected

2.8 Apps that install or launch other executable code will be rejected

Still...I like the idea of pushing the boundaries of native iOS development.
Structural Editor and Thoughts on PureScript
We should abandon physical retail immediately, but we can’t
> I don't know about community in Buddhism or Kabala, but in Christianity, once you experience healthy, constructive, no-judging, be-yourself community with other Christians, your tastes change.

Its generally an error to make general statements in the second person and the indefinite sense of the present tense based on experience in the first person past.

Further, I don't see why one would particularly expect "hipster churches" to feature "healthy, constructive, no-judging, be-yourself community with other Christians". Certainly, there are some Christian communities that feature that, and plenty of Christian communities that don't (particularly the "no-judging, be-yourself" parts.)
Exactly. If you can't update the car's software, then you can't patch bugs/vulnerabilities.
Ah, ok. Good to know. You just listen to the drop events and then update the state of react?
Java8: Learn about ForkJoin, Lambdas and how to deal with exceptions
It's there buried in the discussions somewhere. The basic (and old) idea is to shove the IP of the user (or spoof as the case may be), as seen by the web server, in to the QR code and then tie it to with the session token using a MAC. When the SQRL app passes the signed SQRL data back to the web server it passes this back as well. The server can then reverify the users IP (remember they're now using the app on another device).

IP binding is worth doing but there's no way for the app to warn the user that the IP differs. You have to trust the server implementation of SQRL (which despite what Gibson claims, is actually fairly complex on the server-side)

Other issues are discussed on the page you linked entitled "Details and Limitations of IP-based MITM detection"
Yeah, the Windows-based alternatives (RDP, VNC, or even shudder something like GoToMyPC) are waaay better for quick dead-simple system administration. /s

SSH works great for systems that didn't have to have networked multi-user support hacked in later in their lifecycle. Systems that let you actually get stuff done without having to paint a whole GUI environment to do it.

I can automate running "git pull && mvn clean package && deploy-tool-of-choice" across N servers. I can't really automate "Okay, wait for the GUI to paint and then be sent across the wire, then click Start, then click on the GUI Git tool start menu entry, wait for it to load, then click the 'sync' button, then wait for it to finish, then open a GUI(!) command prompt (in my GUI environment!) and cd to the right directory, then type 'mvn clean package' and wait for it to finish, then click Start, then click on the deploy tool start menu entry, then wait for it to load, then click 'deploy'".

The fact that there are a number of tools that try to hack that sort of behavior in by emulating pixel-scrapeable virtual displays and mice/keyboards is a testament to how shoddy the alternative to SSH is.
I always laughed at the movie Live Free or Die Hard, but now I'm thinking it's more and more likely that hackers can completely bring down society from behind a keyboard.
NYC Space/Time Directory
My first OpenBSD port
They picked a great timing for the announcement because I needed to use native components with a React app, similar to how Ejecta (http://impactjs.com/ejecta) reimplemented the WebGL API to run js apps without DOM/WebView) but had settled with Cordova plugins because it would have taken probably too long to implement otherwise, so I have high hopes for React Native :)
The housing shortage in Silicon Valley and surrounding areas is caused by a complex mix of land use, taxation, urban planning, and development problems. These are technical issues that require contextual solutions. Projecting emotional moral constructions like "class war" onto the already difficult circumstances is not helpful except possibly to energize the search for solutions.
It does! And that’s OK!

A proof is a proof if you’re convinced. Ideally, a proof is correct, but that’s not always the case.

(Except for undergraduates! Show your work! ;))
I've seen this in various circles. People seem to be getting used iphones pretty cheap. Some of them even buy apps.
All of that, including "a better value store than diamonds", is true of a cinder block. But you don't see people congratulating themselves on how they savvily bought one of those.
I have a Customer who uses this equipment (the Vedeer-Root gauges that the article describes) in unattended fueling stations. They moved from dial-up modems in the stations to Internet connections a couple of years ago (to facilitate modern credit card processing) and, at that time, the vendor who handles the tank gauges asked me to forward a port through each of the the stations' firewalls to the gauge. The idea that I was going to terminate a VPN in each station and accept no unsolicited traffic from the Internet was completely foreign to them. With that in mind, I'm not at all surprised by what rapid7 is reporting here. It's likely that those IP addresses where they're finding tank gauges also have other targets (like video surveillance systems, environmental monitoring systems, automated fire suppression systems) receiving Internet traffic on forwarded ports, too.
Basicaly its nothing but a new webview, offcourse with privilage api access.
Because car colour has a measurable correlation with the chance of getting into an accident.
Watch Mommy Full Movie Streaming
> What do you program?: the languages, the type of program and in what domain (medical, developer tools, etc)

Javascript, end-to-end. I build RESTful APIs for consumer-facing web applications (social and ecommerce mostly); and the occasional single-page-app client. I lead a small cross-functional scrum team.

> What kind of writing (and other communication) do you do?

Lots of emails, lots of shared google-docs, lots of diagramming and flowcharting, the occasional powerpoint or PDF presentation, and the occasional proposal or technical spec.

> What kinds of audiences do you write for? Who's the hardest to communicate with? How is this influenced by your seniority and role?

There are 3 distinct audiences: Higher-ups (product stakeholders and managers), team-members (people actually building the products with me), and the support team (offshore QA and pentesters, etc, who aren't really part of the core development team, but are still helping quite a lot). Communicating UP the foodchain is by far the hardest. Stakeholders often have only a vague understanding of what the team does all day; and might have an understanding of the product that is outdated or simply false. These communications have to be tailored to each specific listener. You have to understand what that particular investor/manager/product-owner thinks before you can attempt to inform that opinion. You also have to gauge their technical expertise before you can "talk tech" to them. Otherwise you'll sound like you're from Mars.

> How much time do you spend writing during a typical workday?

I'll go days or weeks without needing to write anything substantive; then a report or presentation will be due and I'll have to write all day.

> How important is writing (and other communication) to such things as salary, prestige, and promotion?

Important for your TEAM's prestige, not for your own personal benefit. Writing (especially to stakeholders) should praise team effort, but IMHO, a good team-leader will fall on the sword for any shortcomings in the product. So, the writing you do should get your team-member's well positioned for a promotion or salary-increase; but not necessarily you.

> What would you focus on in learning and preparing to write better for a programming job?

Two things:

1. Learn how to communicate technical problems to non-technical people.

2. Learn how to communicate business problems to technical people.

There's often a "ships-passing-in-the-night" problem there. So my role as a senior person is often one of "translator" or "ambassador" between the two camps.
Generally with tube amps there are two places the tubes can go, either the preamp stage or the output stage. Most tube amp enthusiasts will scoff at the idea of having only a preamp tube stage and not power tube stage. These things look tiny, I'd be impressed if these can deliver the wattage required by output tubes.

Also interesting will be to hear how they actually sound. All tubes aren't built equal, and even with traditional tubes you can find people arguing about the merits of the 6L6 or EL-34.

Of course, if this thing delivers on both fronts that would be incredible. Tubes are in short supply, and my friends who play on tube amps are always complaining out how expensive it is to replace the damn things.
Infix notation is when the operators goes in the middle. For instance, the expression: x * (y-z) uses infix notation. When I look at it, I can see at a glance that x is multiplied by the difference between y and z. However, were I to listen to it, I wouldn't know when to expect the parenthesis to close. I would have to remember that I am within a parenthesis.

Postfix notation, or reverse polish notation places operators after the operands. So that same expression would read " x y z - * ". The idea is that you push x on a stack, then y, then z. Then comes the minus sign, you pop the top two elements, y and z, and push their difference on the stack. Finally you pop the two elements, x and y-z, and replace them with their product.

In reverse polish notation, you still need to remember something, the state of the stack, but there are no parenthesis. I get the impression it would easier to parse if listening to the expression, but I may be wrong.

So which parses most easily for you? x * (y-z), or x y z - * ?
Amazon Earnings Crush Expectaions
The output of his model is contrarian to what every accelerator and VC firm in the Valley says about investing. They believe the team is the most important factor of success. Thurston says its 12%. We love pushing the envelope!
If you read to the end, you'll discover the author comes to the same conclusion.
I guess you wouldn't, you'd have a sort function afterwards.

...for Unix' insistence on composability, the shell tools are often unnecessarily monolithic, probably because that's the only sane way if the only type you have in interconnect is `string`.
It's precisely those idiosyncrasies of early modern orthography which make it difficult to use an off-the-shelf OCR package, which is presumably why these are hand-transcribed instead.

Perhaps there is a specialist antiquarian OCR package which can deal with long s, interchangeable u and v, non-standardised spelling, etc, but I have yet to come across one.
It’d be fine. Notation doesn’t replace prose.

The best feature of mathematical notation is its ambiguity. It needs to be parsed by a human, not a machine. Poetry is similar. There’s tradition, but few rules.
Prefixes are a problem, no arguing about that. But...

> is awkward to build (compared to just giving options to a command or arguments to a function)

Idiomatic bash:
apt-get install package_name

Idiomátic haskell:
apt_get $ AptInstall package_name

What is so awkward about that?
Cultivated Disinterest in Professional Sports
A resume is only used for the screening process. Once I've decided this person might have what it takes, I invite them in for an interview, and the resume isn't looked at again.

The interview process equally checks technical viability and culture fit, and the interviewee will not be hired if they don't pass both with flying colors.

To answer your questions: The characteristics I look for depend on the culture I'm building within the team. The core concepts are more or less "Do you know how to solve this problem?" not necessarily "Here, solve this problem in this interview, without any of the resources you would normally have." A portfolio isn't required, but gives us another window into your technical ability. A GitHub profile chalk full of open source contributions, or a StackOverflow profile with high reputation showing very high communication skills are always a plus.

I don't have any experience hiring iOS developers or Ruby developers, so I'll abstain from answering that question.

Hope this helps!
yep, android phone ( nexus 5 ) and some hci bluetooth sniffing on a nexus 4 ( you can enabled it on 4.4.4 under dev settings panel )
I want to thank the author for testing this out and doing an implementation. When Mozilla Persona came out I thought it would be cool to make an identity provider which support SSH based auth. I never had much time to work on it so seeing the various design problems was really great. I do think you can make some improvements when paired with a system such as persona but the fundamental challenge that SSH is not integrated into the web remains.

Still, as programmer, I would love it if I could auth to github et. al with SSH keys. I would actually feel more secure doing that than with the password. Keep the 2 factor token either way. I completely agree with the author's assessment that this type of system would not work for the average web user.
Anyone doing this in a serious fashion will have something similar to this kind of setup:

Device has a per-device key burned in at the factory and the private keys sit in a manufacturer HSM. Updates are signed by the manufacturer and also encrypted with the per-device key for each device. The device itself will have tamper-proof (well, as tamper resistant as they can be) chips and a secure boot-loader that will do all the dirty work.

Nothing is ever 100% secure, but you shouldn't believe it is something similar to a piece of software on your computer where it is just "hit this https URL for the executable and run it". Or maybe you should believe that and force manufacturers to come out and state otherwise :)
How Putin Secretly Conquered Russia’s Social Media Over the Past 3 Years
When I was a kid in the 70's, nobody wore a bike helmet. If we saw a kid wearing a helmet riding a bike, we'd probably beat him up. Today, my wife won't let me ride without a helmet. I've either been civilized or emasculated. In retrospect, I don't think we were neanderthals. But we definitely should have been wearing helmets.
Is Amazon a legit company?
Yes, the author clearly has, because he talks about it in his conclusions. The exercise, then, is one of re-discovering why things are the way they are.
JavaScriptCore executes javascript embedded in the app, it's not like a webview that would download an arbitrary webpage/script, so it wouldn't conflict with the guidelines
Scrolling parallax storytelling
I disagree with the concurrency part. Node.js has excellent built-in IPC support through the process and child_process objects.

Since Node.js is JavaScript, you can't possibly argue that Go code is more 'portable' than Node.js. For one, JavaScript can run on more machines than any other language.

Go will not run in the browser because most browser vendors will not let that happen. On the other hand, JavaScript is already universally accepted by everyone and it's everywhere - You can run JS in the browser, natively on mobile devices, on the server, on set-top-boxes, on robots/IoT devices and just about everywhere you can imagine. Anybody can implement and modify their own JavaScript engine to suit their specific needs.

No need to worry about protocols - Since JSON is a subset of JavaScript, you can seamlessly pass objects between the client and the server and no need to context switch between programming styles when going between client and server.

People who don't like JavaScript mostly feel that way because they don't understand it well enough (it's a lot more expressive and powerful than people imagine). I have programmed in many different languages - C/C++, C#, Java, ActionScript 3, Python, AVR Assembly (ATMEL ATMEGA8-16PU microcontrollers and family) and a few others but I feel that no other language has the expressiveness and elegance of JS.

Before I got into Node.js, I considered myself 'language agnostic' because I often switched between languages because no one language could do everything I needed. I no longer consider myself an agnostic - In fact, I feel quite comfortable saying that C/C++ and JavaScript are the only two languages worth knowing.

In reality, you can't be 'fluent' in that many languages because fluency requires constant practice - It makes sense to settle on fewer languages - Mastering a language/tool allows you to focus on what's really important - Logic and structure.
Generally it's best to have one role (some would say one process but that isn't always pragmatic) per container. This approach advocates having multiple roles within the same container (e.g. app, db).

I can appreciate the benefits of the underlying phusion-baseimage for addressing some common pitfalls and hurdles, but this layer on top takes things too far in my opinion. Ok, you have the option to customise it, but that comes across as an optional extra rather than an advised approach.
author here ... it's not THAT easy, that specific piece of code was highly obfuscated by proguard ( you know the a.class, b.class, c.class thing? XD ) and everything made me think about the "correct" algorithm, still I can't find where that 0xFF... is being set :P
The executable code limitation is likely geared toward security. For all other purposes, it's just data.
That was my point though — British banks don't post each other cheques on anyone's behalf. There's an older BACS system for electronic transfer, and a newer one called Faster Payments.

The numbers show 13× as many electronic payments as cheques, and I can believe 10 electronic payments per person (salary, six or seven bills, couple of credit cards, plus business use).
Why? I write mathematics to share with mathematicians, not machines.

Would you ask a poet to make the same sacrifice for machine comprehension?