skysight-inc/HackerNews huggingface dataset:
> I've never heard of this happening in any Linux distribution. Can you be more specific?

It was a couple of years ago. I know somewhere I have notes on it, but I can't find them just this minute. I remember that it had something to do with one of the components in my apache-mpm-worker--php5--libapache2-mod-fcgid--apache2-suexec-custom--libapache-mod-security stack. It was something like, mpm-worker no longer supported libapache2-mod-fcgid or some such thing. At the time, I was really good about doing regular server updates, so when it happened, I spent some time researching it but eventually found the package had been removed during the update and was no longer supported, with no workaround aside from finding a new way to build an apache server.

Either it got fixed or I'm running a slightly different stack now than I was at the time. Sorry I can't be more helpful.

> This is because of a shortcut that somebody took...

> You might want to look into "DevOps"...

That somebody was me, and I'm aware of devops. Pretty big fan of it actually. Unfortunately, I'm just a small MSP, the owner and the senior tech and the sole software developer and the sysadmin, and I don't charge enough. The servers exist as an add-on service for my clients, especially ones that have special needs that other hosting companies can't easily meet. They work, the stacks I built a few years ago are robust and efficient (one of my customers was featured on a popular national radio show with a reputation for killing websites, but their site stayed up and responsive the whole time). Reproducible deployments, centralized management, further improvements to automated security, etc. are all on my to-do list -- along with like a couple dozen other things.

I was supposed to rebuild all of the servers during last December, typically a slow period, but instead it was unseasonably, hair-on-fire, brain-meltingly busy, and it still hasn't let up.
This is offtopic, but I need to ask this question and I fear I may loose the opportunity to field it to this audience of experts. I'm interested in two things and am wondering if this book, or something else, would be of use to me. Assume I have strong math background, and assume I understand the Maxwell equations. What book/resource provides a good understanding of the approximations (from first principles) needed to provide a reasonable simulation of say a (layered) circuit board and increasing frequency signals? How about if you went more complex and wanted to understand (and again simulate in software) say the behavior of 28nm CMOS circuits? Any help would be appreciated. This is more of a longer-term/backburner project for me, but I'd love to understand this aspect of hardware.
'Speed-Read' Through a YouTube Video with the New HTML5 Speed Controls
The worst part - Apple has a great reputation for customer service, and as today's numbers prove, they could easily afford making me and my fellow owners of problematic 2011 MBPs whole, but they've kept their head in the sand about it.

It's unfortunate, because I used to be a promoter of Apple products to people I know. These days, not so much. In fact, I typically don't have much good to say about them at all. This might not have been the case had they been proactive about fixing this problem.
Neat idea? Question though. My work process for every project is to have a vagrant file, and a docker container. The vagrant file has almost the exact same shell script that I use when setting up a production environment. (There are a few extra security scripts I run that I don't need to run on my virtual box).

So when spinning up an instance of the project I need on a new machine, I go through the following steps:

1) Install Orcale VM Virtual Box

2) Install Vagrant

3) Install cygwin and necessary libraries

4) Install git

---- Up till this point, everything I need can be carried on a pen drive and be done in under 15 minutes. I could probably automate it further but there's really no need to ---

5) Clone git project

6) Run vagrant up

And that's it... That really is it. I now have a production environment that stays synced. The vagrantfile almost never ever changes. The docker container does change, and then it's a simple pull. Guaranteed, bower probably syncs stuff with 1 less step but I'm still not convinced that it's a major leap ahead in managing the problem of dev/prod environments.

This really isn't intended as a negative comment. It's more a question of, how does bowery compare to my current work process.

Also, I'm a super basic in this area still. An experienced systems person who would actually be in charge of this stuff in a big company would probably have a much more efficient way of getting a new hire on board (a script to automate all the above for example).
This can be done in an append-only way, not fast, not efficient but as long as you separate writing the change from committing it in the log, you're fine.
Tomahawk on linux is the best I've found.
The idea here is that the frontend as rendered on the client is the same as the frontend rendered on the server.

This isn't about putting the API and service code in with the UI.
How much response time improved in the typical case?

If you serve your html, JavaScript, and CSS through a CDN, the user should get those lightning quick. A dynamic API response should be returned faster than a dynamic full page response. Then the client-side rendering will take place, but JavaScript is pretty fast now-a-days.

Surely, this will be slower than a server rendered page, but how much slower than your typical RoR site?
I am currently building my first side project a android app which send users location based tweets alerts ( if user has subscribe for a particular location) and also let user location based tweets searching and following is mine schedule of day

8:00 AM - Get up from Bed and get ready for office
9:00 AM - 6:00 PM office timings
6:00 PM - 9:00 PM come back from office after dinner take rest a while
9:00 PM - 12:00 AM Side project work

Out of my hectic routine i only manage 3 hours + full Saturday & Sunday.

For you my suggestion would be to move to Ruby on Rails framework because it will save your time spent on auth/login/registration (donkey work) it only take take 5 minute on rails to configure Devise gem if you cannot move to Ruby on Rails move to Laravel ( php framework similar to rails) + you really need to stay motivated during 0 implementation till you get your production DONE
Best of luck
We wrote a quick blog post on this. The main meaningful feature is a table of distros, versions, and whether they're not vulnerable, vulnerable but with a patch, or vulnerable with no patch yet. I am accepting requests for other distros, and of course if you have any corrections I'd love to hear them!

http://chargen.matasano.com/chargen/2015/1/27/vulnerability-...
Interesting. My experience (as someone low on the totem pole) is pretty much the opposite. E-mail requires the recipient perform the critical "three Rs": Read, Remember, Respond. This is, apparently, a significant barrier to conversation for many people in the workplace.

If I had $5 for every time I've sent an E-mail, re-sent as a reminder, then re-re-sent as a final reminder, then found it was not read by anyone on the To: line, I could probably retire today. My favorite is sitting down in a meeting, with someone projecting their screen, and seeing the little "unread mail" badge on their mail icon that shows they have 12,802 unread E-mails in their inbox. So THAT'S why I never get a response from that guy--it all makes sense!

I've pretty much given up on E-mail for anything important. For folks in parallel with me on the org chart, generally, I'll send an E-mail (which will go unread) so I have a "Cover My Ass" record of communication, then immediately have either a face-to-face or telephone conversation. For folks above me, I'll send the C.M.A. E-mail, then work with their assistant to get a 5-15 minute slot on their calendar wherein I can deliver the message face-to-face.
On the other hand, as a kid I was amazed by Sylpheed (megacd version) and always thought that it was 3d/vector graphics when in fact most of the visuals were pre-rendered videos (leveraging CD-ROM capacity obviously).
Run these numbers on Yahoo :)
I think isomorphic JavaScript applications are going to replace the current frontend paradigm. Microservices are becoming more popular, so imagine an isomorphic JavaScript application as a frontend consumer of many backend microservices. Plus there are a slew of security considerations that cannot be solved with current frontend JavaScript.

For instance, how do I call a protected API without leaking the API credentials to the consumer? Currently you can do this with trusted hardware or the traditional server side rendering. An isomorphic JavaScript application can solve this problem using server side rendering without needing a separate backend.
shingles isn't just for old people, I'm 27 and I had it. Wish I hadn't. Caught it early and the doctor said I was lucky, but it still hurt to even move.
Last I looked into this 6 months ago, there were a few things keeping me away from Unreal Engine and keeping me on Unity. I need to be able to deploy to the web and have the client execute there. And I definitely need to deploy to iOS and Android. Last I checked, the workflow for deploying to web was very wonky, not something to stake a business on for things that must deploy in summer 2015. And similarly, deploying to iOS and Android yielded really battery hungry apps that didn't feel best of breed. Are things better now?
> with as ultimate beneficiary local citizens.

Yep. See the Thiel essay about how the point of business is to acquire a monopoly, at which point you kick back and let the cash flow come in because there's no competition: http://www.wsj.com/articles/peter-thiel-competition-is-for-l...

One theoretical use of tariffs is to sacrifice economic efficiency in the short run to maintain healthy competition in the long run. Don't get me wrong -- tariffs also serve many more interests (protectionism, regulatory capture, etc.), but the there still is a short-term/long-term difference I think you're discounting.
This looks great. I backed a project called Beddit which is similar, but just a single strip that measures your breathing and heart rate, but it never worked very well for me. Part of the problem was it required opening up the application and connecting to the Bluetooth sensor every. damn. night. [1][2]

The only way I can integrate quantified self gadgets into my life is if they are totally hands-off, passive data collectors. I don't want to charge a fitness tracker every night and remember to put it on in the morning. The best I can do is remember stand on my Withings scale a few times a week.

[1] http://www.beddit.com/

[2] https://itunes.apple.com/us/app/beddit/id794968897
FCC: Blocking Wi-Fi in hotels is prohibited
New HPC Capabilities for the Enterprise
Something orders of magnitude faster than anything else that I can't use or see the source to.... Yawn!
There is a moral hazard here, which has nothing to do with arrogance or superiority.

We have all sorts of predictive analytics and common sense that makes it pretty trivial to figure out that the 19 year old with no income can't afford 72 months of payments on the shiny new BMW.

But who gives a shit? The buyer is ignorant. The salesman gets paid to move the car, the bank charging usurious rates makes a profit for the few months the buyer pays, and the repo-man with the license plate tracking recovers the asset.

This is a problem, because none of these parties has any expectation that the counter party can fulfill the contract. That's a moral hazard, and arguably fraud. (Actually, if you are a private individual, it is fraud in most states! If you're a federally chartered bank, no problem) That's why before banking became a national industry we have usury laws. It's unfortunate that we have loopholes allowing states like South Dakota and Nevada to neutralize these laws.
from the same post,what about this I found in the comments?
https://code.google.com/p/chromium/issues/detail?id=234779
How the iPad Went from Massive to ‘Meh’ in 5 Short Years
Not only was it an awesome streaming client, I found it to be pretty sweet client for ripping/burning CDs at that time. It was sad to see it fall, but once Winamp got a bit more polished I never looked back.
It's astounding to me that the anti-vaccine movement is so strong in Marin of all paces, good percentage educated overall, good tertiary education and pretty high income.

But, as they say, people will believe despite evidence or overwhelming evidence to the contrary. One can excuse religious people on the basis that their belief is based in faith rather than interpreting the data their way. What happens in Marin, among other places, is that people believe despite data showing otherwise.

In other words, people in Marin aren't saying, well, but I have faith that vaccines are bad, no they're saying we believe data says vaccines are bad. It's incomprehensible.
Dolgopolsky list
Why do you want to access bookmarks?
I love that idea, as you could polyglot it inside something mundane like the assets folder of a website.
Blast from the past: reprint request postcards
That's insane. He does flip tricks that I still don't see current pro skaters doing some 20 years later.
Apple now has more cash at hand (AU$178bn) than the Australian government (AU$136bn)
Yeah, until the video recorder on your cell phone gets a little nicer.
+1 on the API.
More importantly, the force of the parachute(s) braking the plane would put a lot of stress on the plane structure and it's likely to break apart since it's not designed with sagging or hogging in mind (to borrow from naval architecture where those forces are explicitly modelled due to wave action.)
The pace Ghost has taken up, I think he can easily replace wordPress.
Or, if you're using VMs, just take a snapshot and roll back if something doesn't work right. For anything that isn't virtualized, there's ZFS.
My usecase is that I have c# and java code that call each other but I need some kind of checker that validates "yes, the c# method signature is still compatible with the java method signature". It sounds like Kythe is the right tool for that, what is your take on that? Does srclib support something like this too?
It's not as easy as it sounds because the c# or java method signature may have attributes which alter the compatability in custom ways, so I cant just compare "yes all 3 params are compatible and the name is correct". I'd have to plug in some custom logic that takes into account what the attribute does.
What do you think?
W-a-a-a-y back in the mists of time, during the MacOS days, it was recognized that Macintosh power users wanted even fewer context switches than the Macintosh was already delivering. There were hooks that allowed savvy software companies to create extensions to the MacOS file dialog, which allowed just exactly what you call "stupid and inconsistent". For users who wanted to work as much as possible through the GUI via the keyboard, these file dialog extensions allowed a lot of customization to workflows. These customizations were apparently popular with the graphics artist set; when I spoke with some of these folks out of curiosity (since I agree with you that cramming these features is wildly inconsistent with the Mac design principles, but an awful lot of them were buying these packages from me at the time), it turns out that it was a very practical way to wrangle lots of projects and lots of files in each project going on at the same time.

It was a variation of the highly customized key bindings you see lots of vi/emacs/terminal users create, often by those who deal with workflows that have a repetitive aspect, but not repetitive enough to automate. It just so happened these key bindings were all in the file dialog. Since these were primarily graphics artists who I found were the most vocal about these customizations, it totally made sense to me then why they wouldn't be living in emacs and customizing that instead. Mostly actions like "jump to this folder", "copy this filename", "search in this folder", "recursively search from this folder", "serialize these filenames", etc. Very edge case activities compared to mainstream GUI users, but it turned out immensely useful to this subset of users; literally saved them up to an hour per day, which added up really fast.

I sometimes wonder if they weren't onto an aspect of GUI development that seems to have languished in recent years. There used to be a sense in GUI design development of an incremental, iterative progressive disclosure of GUI features to accommodate neophyte to expert users alike, and slow down no one in that entire spectrum of operational expertise and/or desire to manage complexity. The Windows and Mac GUIs these days seem to be far more monolithic in how they treat the user spectrum (Windows a little less so, in that there is more room customization, but I don't really see a lot of users adopting the available customization software), and seem less layered and nuanced. I'm sure this reflects really well upon vendor support costs, but some days I wonder how we can bring to the mainstream GUI-oriented users the deep customization benefits that we programmers take for granted on our text-oriented tool suites.

At the same time, the KDE and Gnome environments allow this kind of customization (and then some), and they haven't really taken the mainstream GUI world by storm either, so I concede that this might easily just be a worse is better situation, and the kind of advanced GUIs we programmers think are cool are simply not practical for everyday users.
Well not all the acquisitions were bad.. ViaWeb ;-)
Language Learning Obstacle Course in Virtual Reality
I wonder how much profit they would have made if all of their offshore and manufacturing jobs were moved to the US.
In this case the bug isn't caused by dynamic allocation though, is it? The problem is the validation logic for detecting if the caller didn't allocate a big enough buffer when making the call.

In fact, it looks like if you get to the dynamic allocation section, it will fix the problem. One could argue that the whole problem stems from having a bug in a complex computation of buffer size to handle lots of different bits of data, rather than dynamically allocating the individual bits as needed.
Shipping with the API calls pre-loaded helps unless you need to fetch additional view code. There's a lot more potential usually for multiple round trips than just API calls. Iso JS frameworks seek to solve the whole range of problems and provide structure for clean implementation. They're greatly aided by the portability of JS. Injecting local-fetched API results as JSON into the page solves one of many potential causes for multiple RTT on fat clients.
My take on building more products for small businesses
The pilot can aim for an empty patch, then activate the parachute so that the cabin lands softly and the rest of the plane falls on an empty field. Having the chute system installed doesn't remove any options from the pilot.
Mishtakes Were Made: Another Misguided Cancer Testimonial
I agree. And what's more, in the ample discussions about Apple, this is rarely mentioned or analyzed.It's like people prefer not to burst the illusion, and continuing living in it, and enjoying the psychological value the illusion gives them.
From memory, from js downloaded to rendered html in DOM was about 1.5-2 seconds.

Rendering when the JIT has warmed takes 25-250ms depending on the complexity of the page. First run maybe 10x that.
agree

and also GO FANOUT
> I think that the OpenBSD team has more than definitively shown that C isn't a problem, programmers' attitudes is the problem.

To err is human, no matter what your attitude. While having the correct attitude can help, this line of argument - that it's the programmer fault and not his tools - is part of the very attitude that causes problems!

Any decent programmer embraces the fact that they'll make faults - and beyond simply trying to improve, they'll also embrace tools that help them compensate. Such as static analyzers. Fuzzing frameworks. Safer programming languages.

Perhaps they'll choose tradeoffs that sacrifice some of these options - I certainly do, coding in C++ all day, a language with at least 40 references to "undefined behavior" in the '03 standard alone. But that doesn't mean those tools aren't worth considering.

> I do agree with them on active reviews, active documentation, and enforcing code hygiene, which prevents the sort of problems that proponents of other languages harp on about when talking about C.

I see zero inherent reason to rely on extreme vigilance by programmers to catch errors that better tooling can catch without having the occasional shared blind spot where 5 programmers all miss an uninitialized variable.

You can help use these to help compensate for C's weakness if that's a tradeoff you need to make, but that's quite an opportunity cost - leaving them with far less time to catch other logic bugs and ship features.

There's a reason nobody preaches about how it's going to be the year of the OpenBSD desktop (and that's not a knock at OpenBSD!)

Vigilance also requires the right knowledge. A coworker recently revealed to me he'd only recently learned that C++ member variables will generally have unspecified values if you don't initialize them. He thought other threads were to blame for garbage values.

Every now and then, I check to see if any of the compilers we're using have added a warning I can enable that will catch leaving members uninitialized after a constructor completes. So I can enable it. And configure it as an error. So everyone who builds the code knows there's a problem. Immediately.

So far, no dice.
Looks very realistic, and there is a bit of the "uncanny valey" at 1:40
Yes. When there's an exploit available now, you really don't have that luxury.
I believe it just doesn't work.

The measles vaccine is actually one of the most effective vaccines in the world. According to Greg Wallace, lead of the measles, mumps, rubella and polio team at the CDC, two doses are 97 percent effective against infection.... But in some people, that response just doesn’t happen. No one knows why. Either your body doesn’t produce enough antibodies, or the ones it does produce aren’t specific enough to latch on to the virus and kill it.... even with two doses, you can get some failure,” says Wallace, “whether it’s because the initial response isn’t perfect, or because the response waned in some people.”[1]

The sad thing is that once the numbers of unvaccinated people goes up, really infectious diseases like measles are transmitted to those who have the misfortune of having an ineffective vaccine much more often:

If you have a group of 1,000 people concentrated in a small space—like oh, say, hypothetically, an amusement park—about 90 percent of them will be vaccinated (hopefully). One person, maybe someone who contracted measles on a recent trip to the Philippines, moves around, spreading the virus. Measles is crazy contagious, so of the 100 people who aren’t vaccinated, about 90 will get infected. Then, of the 900 people who are vaccinated, 3 percent—27 people—get infected because they don’t have full immunity.[1]

[1] http://www.wired.com/2015/01/vaccinated-people-get-measles-d...