skysight-inc/HackerNews huggingface dataset:
From a full-system threat analysis standpoint this seems like a truly bad idea. You think you have some kind of fancy rng but actually what you have is an rng that your adversary can sneak in and swap out with an infinite generator of zeroes while you're in the bathroom of the airplane. Essentially you've made yourself way more vulnerable to rng attacks than you would have been with a regular entropy source. If you bought one of these you'd have to be totally committed to keeping it on your person at all times.
"In practice it's simple - if you're paid to build a thing for someone, that someone owns the thing. It's known as a "work for hire". That's what your customer will expect, anyway. I mean, would you pay someone to build a thing for you and think didn't own the copyright on the thing?"

I don't think that this is true, at least in the US; the default is not work-for-hire, the default is that creators own works. While it is possible that I'm mistaken, I'd imagine that it is jus the case that you're generally working in situations where it isn't an issue (for instance, you don't want to reuse the code, the folks you're working with don't specifically care, or something).

Otherwise, I agree with you.
I'm surprised Graylog2 isn't mentioned more here. We've got tens of terabytes of logs in Graylog2, and I couldn't imagine not using its streams, alerts, and search functionality. It's become a core part of our alerting an monitoring infrastructure.
No way to tell. Just because both are swirls, is it warranted to make the connection?
Pretty amazing comment too. Did companies spin start up children that explore the current trends, being small => quicker moves, while benefiting the mother-ship with their discoveries so to have a faster transition.
> Be careful when taking legal advice from websites. Ethical rules would probably bar an attorney from writing such an article.

Ethical rules bar giving specific legal advice online, not generally describing the law. Tons and tons of attorneys post general advice about what you should and shouldn't do. To pick a random one that's the first hit on Google: http://www.bpmlegal.com/tmdodont.html.
Apple didn't give Xerox $1 million in shares, they gave Xerox the opportunity to buy $1 million in stock, which Xerox did.[1]

There was no agreement that Apple was allowed to use the technology. Ten years later, Xerox tried unsuccessfully to sue Apple.[2]

Microsoft did pay Apple for the rights to use Macintosh-style interfaces in Xerox but there were disagreements as to whether it covered later versions of Windows. Apple tried to claim extremely broad protection for the "look and feel" of a program covered by 95-year copyright! Those claims would have been terrible for the software industry if upheld, not just in this particular case, but many others.

[1] http://books.google.com/books?id=mXnw5tM8QRwC&pg=PA75&dq=%22...

[2] http://www.nytimes.com/1989/12/15/business/company-news-xero...
Interesting! The handful of Danes I know / met were all very adamant that Denmark is the happiest nation on earth, so it's interesting to me to hear a Dane disagree, even partially.

The comment about beggars & hookers being foreigners also rings true with my experience of CPH. I'd been led to believe that everyone has access to welfare in DK, but it would make sense if non-citizen non-EU immigrants do not.
I have used both splunk and elk. Splunk at a bank and now elk at a startup. My experience is splunk is not worth the money. You can pretty much do everything u wish to with elk or further processing the data and loading it back to elastic search.. Which is what we do at my current place..
[0] is a classic example of comparing programming languages attacking a problem with different algorithms.

I see that the author insults Fortran a couple of times, and I don't seen any indication that they tried to implement the better algorithm in Fortran. Did I miss something?
Maybe the driver can verify that the real thing is there.
Unrelated but you don't have contact information and this is the most related thread I could find. Here is context:

" I've been trying to get my mind around this kind of stuff for maybe a year. And I have to say that monads don't look like the solution to any of the problems that I actually face or have ever faced, in a thirty-year career." - https://news.ycombinator.com/item?id=8815973

You might be interested in this link:

http://haskellrescue.blogspot.com/2011/03/cooking-delicious-...

If you respond quickly enough and I can delete this, I will ;)
I like what they are doing. But my response to DRM coffee machines is basically this:

http://www.amazon.com/Bodum-Brazil-French-Press-Coffee/dp/B0...
It drives me crazy when this doesn't happen– especially in news articles talking about some study here or there- why not link to the actual study?! I end up having to Google for it, click around a bunch of bad navigation... very painful.
I not only miss blogging, but RSS feeds as well. Seems like everyone is ditching it in favor of Twitter and FB
Independently I was just wondering tonight why weather forecasting does not use some Machine Learning techniques as there is an abundance of training data. Wouldn't any number of regression ML algorithms find a more accurate prediction model? If Google did weather....
In my experience you don't get anywhere asking a vendor to do that. There isn't enough Linux desktop market share to justify a change to their business model.

hell, vendors can't even be bothered to use consistent chipsets from one shipment of product to the next. The Linux community are left with checking serial numbers or product skus and maintaining wiki sites with cross-referenced tables that tell us if a given product is known to work or not. That's the world of Linux webcams and wifi.

Sadly, if there were more Linux desktops the vendors would take more care. Until the vendors take more care there won't be mainstream Linux desktop adoption.
If you're interested in building GraphQL with Node+Mongo, checkout this github project: https://github.com/lutherism/GraphNoQL
Under this scenario you 1: either laugh at them or keep quiet, but have new understanding of how much the problem is worth to them, then 2: offer to fix it with a project - priced at a number that reflects both your inconvenience and their need. Whatever that price is, it will be a lot cheaper than lawyers at dawn against someone who has no ability to pay.
Meanwhile the acquiring company should have done their Due Diligence on the software and these sort of loose ends would have been tidied up or deliberately ignored as part of that process.
I do not believe in contracts for small gigs - but an email chain is good to have. If you then perform work, send invoices and they pay you there is a good enough contract in place.
Probably, but who could have predicted WhatsApp getting $19b?
Well, an instruction set is said to be Turing complete if it can be used to simulate any Turing machine. A single instruction can't, so if you design an instruction set to implement Chess and then don't use it, that's not really the point of the question.

Any ideas about how to better specify the rules of the competition to exclude degenerate answers like the one you provided? The goal is to answer the interesting question. You'd never find such a high-level instruction in a real instruction set, because it wouldn't be useful except to play Chess.

I'd add a rule like "The goal of your instruction set is to be useful while still implementing Chess," but then that would exclude answers which give interesting instruction sets that aren't necessarily useful except in implementing Chess in the fewest possible bytes.

Thanks for pointing out the flaws in my ruleset. I've been toying around with creating a blogpost about this, so having a bulletproof ruleset or at least one that isn't so easily sidestepped would be great.
I don't see how you got there. Numerical analysis is a whole branch of computer science which regularly deals with slight differences in computation. The usage of a constant (like pi) that is one bit different could cascade into massive differences in the results between the two programs.

Neither are completely wrong (as their results are similar) they just aren't exactly the same, especially when dealing with 7 day forecasts, this isn't to be entirely unexpected. We are trying to approximate massive systems we don't fully understand. A physics simulator is decent at getting a broad sense of things, but is not precise enough to get it exactly right, even though we use them to fly airplanes, same thing here.
Moreover, the fact that a reader had to email him served as sort of as a pre-screen, wherein someone had to take those extra 2 or 3 steps to put something together instead of just dropping whatever thoughtless or halfbaked idea came to the forefront of their mind in the comment box and hitting enter because you're logged in with facebook. I don't think having comments allowed on a blog are indicative of quality discourse at all.
>That fact is that 99% of blogs are complete shit. Along with the democratization of opinions came a lot of crud.

But good stuff came out of that crud. Now people do their writing on Facebook and Reddit. Those have much lower or no placement in Google.

I find google results impoverished compared to 6-10 years ago. You used to get commentary from people, and it wasn't half bad. Now most searches return commercial results.

I often give up and go search relevant subreddits for many types of queries.

99% of Reddit and Facebook are crap too. Anything produced by humanity in general will be. But good stuff gets produced too.
I've also made more thousands of knots than I can count while tatting. If you want a handmade knotted lace with even less equipment needed, then Armenian needlelace is a step further. The picture at [1] is one of mine

[1] http://en.wikipedia.org/wiki/Armenian_needlelace
Or both are right, and the software is hitting some undefined behaviour in the compiler. The article does in fact mention that a different compiler version was used.

With C is quite easy to happen, don't know about fortran though.
Can Microsoft make R easy?
You also need a way to revoke old and/or compromised keys (so maybe also have an option to send keys that should be removed from the known_hosts file) otherwise you can't use this to rotate to new keys: sure, clients will automatically know and trust the new key, but that's useless if they still trust the old/compromised key too.
Ask HN: Is there a way to disable JavaScript popups asking for my email?
I'm getting very tired of this design fad. The only true difference between these and "normal" popups is that my popup blocker does not block them. If you are a designer using this technique, the message I am getting from you is: "I refuse to respect your preference to not see popups." I used to just exit out of these, but now I fill them in with fake email addresses whose names express my anger.

Sorry to rant, genuinely interested in knowing if there is some way to block these, and how other people feel about them.
Maybe I don't see a lot of good photos because I'm not looking hard enough. But the problem with "GAS" is that it puts all the focus on the gear and takes attention away from technique/lighting/composition etc. You can make great photos with a pinhole box camera if you wanted to (and I'd probably want to see them more than some rich shmoe with a brand new DSLR with 400 mgpx's photos).

Spend your money on books, classes and prints. Not on cameras/lenses.
Spring – A library to simplify iOS animations in Swift
You haven't seen the work of thecatamites, have you?

http://harmonyzone.org

Search on Rock Paper Shotgun for reviews. Or just dig in. If there's anyone else out there consistently cranking out this much weirdness in game form, I'm not aware of them.

Also Frog Fractions, which is... certainly surprising, anyway. Read nothing about it if you haven't played it already. Just GO.

http://twinbeard.com/frog-fractions

My GOTY for the year for 2012. I'm not kidding. It's so meta though that I'm not sure it's quite what you mean by weird.

Lots of games in the "weird twist on X" category. Horse Master, Hatoful Boyfriend, Hotline Miami... huh, that's lots of words starting with H. Tons of others. Lots of games messing with classic concepts/mechanics in new ways.

http://noncanon.com/HorseMaster.html

http://clione.halfmoon.jp/hatoful-boyfriend/english.html

http://www.hotlinemiami.com

Hammerfight's weird in the way you mean, I think. Steam link because the official site is really bad. So's the game, really, though the art and concept carry it for quite a while.

http://store.steampowered.com/app/41100/

Blendo Games' Thirty Flights of Loving, Atom Zombie Smasher, and Gravity Bone are all this sort of weird. I can't speak for their other games only because I haven't played them, but they're likely weird too.

http://blendogames.com

There are more. Free stuff tends to be the weirdest. Poke around in Rock Paper Shotgun's archives for articles about free games and you'll find weirdness in abundance. Lots of weird-for-the-sake-of-weird but plenty of weird-due-to-experimentation-and-childlike-fancy too.
M&S is one of the areas I work in, and there are quite a few things to examine. Hardware floating point implementations are one area. Compiler (internals and/or flags) and assembly language differences (as author alluded to) are others. Heck, even a thread race condition might be showing up now for whatever reason.
If only this was true for dust on the rear element of the lens as well.
I avoid selling hours. Instead a maintenance contract should sell a solution, e.g.
- they have an actual contact address
- you send them new versions of your software (nothing in GPL forces you to publish new versions),
- you send them database updates necessary to reflect legal changes of the software
- you help with database migrations, when new software version require them
- you might also sell hosting, including the above service, backups, security updates, ...

Create a nice pile of things that have a good value for the customer, and either are easy to automate (like hosting), or likely don't eat to many hours. You'll lose the ability to invoice your customer for the 10 minutes mail or phone help, but you would need more then 10 minutes for book keeping and invoicing of those small things. So better sum them up, if you want to keep contact to a good customer. As funny as it sounds. The annual maintenance invoice was often the starting point for a custom asking me to solve a total different problem.
Nice! Now if only we could finish reverse engineering the Tassimo barcodes..

https://reverseengineering.stackexchange.com/questions/3919/...
I don't doubt that immutability in databases is expensive, but is anyone really arguing against that? The article seems like a straw man to me.

From watching Rich's talks on Datomic, the argument seems to be that for many problem domains, we can spend the cost of immutability to get a much nicer development environment.

If you're already sharding your DBs in a frantic effort to keep your web startup scaling, obviously switching to an immutable database is a bad idea.

But if you can fit every transaction your company has ever done in memory, why wouldn't you go append only?

While the latter might be a niche market today, if Moore's Law keeps up for another few decades it'll be the common case. I'm not clicking on more links than I was 15 years ago, but I've got three orders of magnitude more memory.
Thanks for birthing this project, it's very appreciated! You've done man kind well with getting this project rolling. Best of wishes moving forward!
reply
We have always been at war with East Asia, like my status!
What's "JSON payload control" exactly?
Will this all work by default?

E.g. other than simply being enabled by default (looks like it is), does OpenSSH automatically generate new host keys every time the new host key algorithm is started being supported? If it's system-dependent, e.g. rc(8)-based, http://mdoc.su/o/rc.8, how do most systems behave here?

Also, looking at the code, http://bxr.su/o/usr.bin/ssh/clientloop.c#client_input_hostke... will be calling http://bxr.su/o/usr.bin/ssh/hostfile.c#hostfile_replace_entr..., doesn't it mean that it's quite easy for the attacker who can actually do MitM and has indeed obtained the keys, to effectively cause a race condition, and deprecate the non-exploited spare keys? Together with the existing key that has been compromised? In such a scenario, it sounds like the attacker could effectively replace the key they compromised (plus all the spare keys) with their own brand new key, which will then make the ssh client generate warnings should it try to connect to an sshd without MitM attack going on.

I'm kinda confused here -- is the possibility of such trick-playing not considered a big deal?
The only problem with this theory is that the right wing is not "my side". Browse my history - you'll see me favoring things like open borders while opposing nationalism and religion. Kind of the opposite of what I said right wing sorts favor. Similarly, I described Modi as favoring big change, but that doesn't mean I support Hindutva (I'm a non-Hindu foreigner, that would be pretty silly).

I'm a left winger who takes the stated basic principles of the old left (individual rights, equal treatment), and I eschew the cognitive dissonance necessary to support every left leaning special interest group. I.e., I'm a heretic, not an infidel.
13 softball questions with Mark Cuban. What a load of crap.
No, it appears that they are automatically replaced. http://bxr.su/o/usr.bin/ssh/hostfile.c#hostfile_replace_entr...

I'm not sure if it's a good thing, though -- it kinda sounds like a race condition -- whether the good guys or the bad guys will be first to replace the keys. :-)
Precisely. My point was don't assume one system is right, the other wrong.

Touched upon compiler (internals and flags) in a separate post.
Love that this is by the Rogers Family. I but their coffee is k-cups at Costco - at first out of curiosity and price, but now because I've found that it's pleasant and helps bring clean water and education in their growing regions. Much like 3 Avocados, except for 3 Avocados doesn't do K-cups.
Improve Your API Dev Workflow with Postman REST Client
Ah, I see. If the "buy button below the fold" and "sales letter format" works then ignore my first three feedback points. I based them on general design principles and A/B testing I've seen over the years but you're right, they don't work for all startups.
I would call an error placed by the compiler due to failure to exactly follow standards a problem in the system.

We are talking totality of systems here, the compiler that produces the programs is part of the system that uses the program.
> In practice it's simple - if you're paid to build a thing for someone, that someone owns the thing. It's known as a "work for hire".

This is generally not true in US copyright law. In US copyright law, a "work made for hire" is either made by an employee in the scope of employment, or is one of certain classes of commissioned for one of several specific purposes enumerated in the law where there is a written agreement signed by both parties specifically designating it as a work made for hire. If it is not done by an employee in the scope of employment, then if it is not also commissioned for one of the purposes explicitly described in the law or, even if it is, if there is not a written agreement designating it as a work made for hire, then its not a work made for hire.

Note that the purposes enumerated in the law include commissions:

* as a contribution to a collective work

* as a part of a motion picture or other audiovisual work

* as a translation

* as a supplementary work

* as a compilation

* as an instructional text

* as a test

* as answer material for a test

* as an atlas

...and that's it. Most specially commissioned software won't fit into one of those categories, so even with an explicit written agreement purporting to designate a work as one made for hire, it still won't actually be a work made for hire for copyright purposes, and the copyright will rest with the creator. see 17 USC Secs. 101, 201.

> That's what your customer will expect, anyway.

If your customers expect that, they will generally be wrong.

> I mean, would you pay someone to build a thing for you and think didn't own the copyright on the thing?

To the extent that someone commissioning a work that is not in the categories that can be a work for hire in US law wants to own the copyright of a work created in the US, they should seek to recieve a signed transfer of copyright, otherwise they will be disappointed. see 17 USC Sec. 204.
You only need one instruction for a computer: http://en.wikipedia.org/wiki/One_instruction_set_computer
Even further, most of Twitters users don't have accounts, which is why they like to annoy people with the sign-up prompt ("Not on Twitter?") just to view a user's page.
> If I'm going to not-javascript, then I think the answer is to go to something that is completely type safe and static, instead. I'd really like to be able to write-once-and-run-desktop-and-browser. I used to do C++, and now there is Emscripten, but I'd really rather not get back into C++ again.

I agree completely, about type safe, static types, and not wanting to get back to the mess of C++ (header files, makefiles, ifdefs, complexity, etc.).

Which is why I think Go fits the bill so well.

> Go looked interesting, and there seems to already be a fair amount of work towards transpiling to JS.

There is indeed. I've already done quite a lot with it, but with smaller side projects for now. That's where I gained the confidence and I will work towards applying it to my main projects now.

I can link you to https://github.com/shurcooL/play/commit/e53557dd9c070ce0ec52.... You can look at the latest code, it's all in a single main.go file, and it runs great in the browser.
Sometimes Machine Learning is the wrong approach. Direct mathematical modeling, if the underlying causal phenomenon are well known, bypasses the whole learning aspect of an explanatory system. Machine learning might help make sense of the residual noise that can't be accounted for with direct mathematical modeling. But at the level of sophistication that I've seen (predicting wind patterns using Finite Element Analysis methods mapped to topographical patterns fine-grained enough to model small buildings), I can't imagine any machine learning methods that could make any sense of the residual noise.
graylog2. they have worked around the shortcomings of elasticsearch for log management (in the end it is a lucene based full text search engine for general purpose tasks) and the 1.0 that is about to go GA soon has crazy stability

https://www.graylog2.org/
Office furniture with sound absorption
React JavaScript Link Roundup
Could you give an example of a site that gives you these? I don't recall seeing anything like that with my collection of ad-blockers.

Also, install umatrix https://chrome.google.com/webstore/detail/%C2%B5matrix/ogfcm...
Show HN: I completed 100 days of coding
I'm sorry your experience left something to be desired. Given that we deploy across far too many hosts to actually monitor, or, frankly, care about monitoring, I use it only at the application level (logentries.log([string, object, etc[)).
What window manager/DM do you use? How does software like browsers or other non-terminal based applications work with the HiDPI screen?
HipChat Security Notice and Password Reset
(Released >1 month ago)