skysight-inc/HackerNews huggingface dataset:
>I think the definition of architecture should be a dev team effort with the architect role making the final decision (be that lead dev, CTO, whatever job title for that person).

I find the quality of decisions made by a single person in this role are never as good as decisions made by team consensus.

Architecting is by its nature a job that often requires subtle and delicate trade offs, and the more you concentrate the role in one person, the less experience you have to draw upon to make those trade offs.

I find that giving somebody authority to make the final call when there is still team disagreement is something of a false economy, too. The whole idea that discussion should be minimized for 'cost reasons' is how a lot of fantastically expensive bad decisions get made.
Save Your Lenovo PC from Superfish Adware
Who else thought of this line in Fight Club?

“You are not your job, you're not how much money you have in the bank. You are not the car you drive. You're not the contents of your wallet. You are not your fucking khakis. You are all singing, all dancing crap of the world.”
The landing attempts are (1) technical tests of proprietary systems and (2) in the middle of the ocean. Not broadcasting live is to be expected; releasing anything at all is at their discretion.
For the ones looking to take this further, there's Cathode[0] (Mac only) - http://www.secretgeometry.com/apps/cathode/
This is very true. However trusting that open source does not include such vulnerabilities is a leap of faith we cannot make which is why auditing and quality control process are needed.
I'm mainly responding to the first part: "As much as I dislike class action law-suit trolling", as in I don't like their methods but I like the results in this particular situation. I also don't see how I have simply re-iterated the same post, OP and I are looking at different angles of the same issue. Fundamentally I think we do agree: Lenovo did a shitty thing and should pay for it.

I simply don't think there is anything wrong with the method or the result here. This is exactly what a class action lawsuit is intended for, there's no trolling about it.
Both.

Superfish is profiting, they're being held accountable for their actions. Lenovo is responsible, they are being shamed duly.

The same happens with, for example, gun manufacturers and other war profiteers.

I'm not trying to pick a side here, just pointing out: blame doesn't need to fall on just one party. They are partners in crime.
"Whoops, looks like something went wrong." oh dear :(
I suppose the author missed the letter 'd' in this statement.
I find both of these to be a little counter-productive. As it is, the tone of both of these posts just serves to alienate people from one another and to harden the lines in the sand by straight-up dropping anti-tank fortifications on them.

My answer to the original post would be this:

""
Some of the problems you are seeing sound fascinating and i have never ever seen them in any team i worked with. I would love to hear more about them. Some of the other problems you mentioned I have seen crop up, usually only when there has been a disconnect in communication between developers and managers.

This is an opportunity for both of us to learn some things, if we engaged in a dialogue on the matter.

You have chosen to post on two platforms where no useful manner of dialogue is offered, so it would need to happen elsewhere. If you're up for it, what would your preferred platform be?
""
It's technically illegal for the NSA to intercept the Internet traffic of American citizens, but that doesn't mean the US Government can't supply certificates to GCHQ and company.
"situation normal": OEMs looking for a way to make a quick greasy buck.

"All fked up": self-explanatory.

Not "cyber-attack": despite conspiracy theories I've heard about the Chinese government, my belief is that the intent behind this debacle was the aforementioned quick greasy buck, not backdooring users' computers for subsequent criminal or military exploitation. It's the distinction between murder and manslaughter.
This is astonishingly high quality for pop science. It deserves more upvotes!
I think all those articles into details also help to triviliaze the issue.

"They do this specific thing, or they do that specific thing" -- at the level of implementation / deployment etc.

The "unsettling" thing should be that they spy on citizens, period. Not how they do it, if it's 200,000 or 40.000.000 targets, how long they retain the data, if they're "allowed" to see them, etc...
Wake up by 8.00 AM (+/- 15 mins)
8.00 - 8.15 Loo break (Checking email, twitter etc over mobile. Yeah! Multitasking)
8.30 Tea with wife and kid.
8.30 - 10.00 Playing with kid.
10.00 - 10.30 Getting ready for work (bath, cloths etc)

And Then ................ WORK ! WORK ! Worrrrrk!
I'm kind of surprised that superfish (and similar) products are legal.

I don't understand why someone would willingly install such software. The reasons the software makers list are deceptive.
Unless they want to be connected to superfish forever, now is the time to publicly distance themselves from it.
We should come up with a certificate authority that's distributed and based on real trust ... but who do you trust?
> It's technically illegal for the NSA to intercept the Internet traffic of American citizens

Do you really believe somebody will go to trial if they are caught spying on American citizens?
I am Danish too and I am not sure why we should be able to offer 100% green energy better than the German or the Dutch..?
>Spying is often seen as a necessary requirement to diplomatic stability.

Also for having the upper hand in negotiations and forcing the lesser states and their politicians to do as you please...

Which is much more important than some BS need for "diplomatic stability" without any other major player like USSR around, except maybe with China.

If you're the 10,000-pound gorilla you don't get instabilized by the small 10 pound zoo animals...
None of them appear in my Windows PC (Windows 7)…A Windows 7 PC has 38 Certificate Authority certificates installed. My Mac OS X Yosemite has 217 Certificate Authority certificates installed.

This is a poorly-reseasrched comparison, because Windows downloads root certificates when they are first encountered (see http://support.microsoft.com/kb/931125).

"When a user goes to a secure website (by using HTTPS SSL), reads a secure email message (S/MIME), or downloads an ActiveX control that is signed (code signing), and then encounters a new root certificate, the Windows certificate chain verification software checks Microsoft Update for the root certificate. If the software finds the root certificate, the software downloads the current Certificate Trust List (CTL). The CTL contains the list of all trusted root certificates in the program and verifies that the root certificate is listed there. Then, it downloads the specified root certificate to the system and installs the certificate in the Windows Trusted Root Certification Authorities Store. If the root certificate is not found, the certificate chain is not completed, and the system returns an error. "

This means that Microsoft can add a new root certificate to a user's system at will.

I'd argue that this is actually much less secure, given that by default a Windows machine has an unauditable list of root certs, which change based on what Microsoft supplies. That means that a third-party (let's say a government) can force Microsoft to add an arbitrary root cert to the list, and a user's machine will blindly accept certificates signed by it!

Of course the entire model is broken, if you are looking for un-crackable end-to-end security.
Cathode is closed source. How can we 'take it further'?
Gemalto says that Gemalto sim products are secure
Fuel your randomness. It will fuel everything else
Show HN: System to organize and name your documents
Does 2% of our user base use IE8 on Windows XP and the expected revenue from those sources is less than the cost of supporting that platform? Then I’m sorry, but they can fuck right off. That’s not worth the time it takes to support.

That decision is absolutely not the place of the developer. Failing to support a particularly market segment has implications far broader than simply the bottom line dollar value of each user. Even if those users bring in zero revenue it can still be worthwhile developing the code base so that they're supported. This sort of thing is an example of something that you, as a developer, simply aren't equipped with the necessary information or knowledge to make decisions about on your own - it has to be a collective decision informed by developers, marketers, product managers, and C-level managers.

A trivial example - the decision whether or not to go with a single page Javascript application design versus rendering pages on the server can be influenced by user demographics but have a massive impact on everything in the business from hardware costs to how you integrate payment reporting in to the workflow of the business.

Any developer who puts their needs in supporting particular users over the requirements of the company as a whole, frankly, probably ought to be shown the door. They don't understand how the whole business process works and they will almost certainly screw up something really important later.
Not exactly distributed, but it is based on a somewhat different trust model than conventional CAs: https://letsencrypt.org/

It remains to be seen if it actually makes an impact upon launch. It certainly can't replace all the types of certs in use today.
Yes, sorry that, I am currently getting the Citizenfour.2014.720p.WEB-DL.AAC2.0.H264-FGT version and will update the post once ready.
Actually I believe Apple is going for a long term renewable energy strategy like Amazon, Google and Microsoft. The additional electricity from wind(and maybe solar) can also be sold into the danish/European energy market.

The big picture I see, is that if you look at the Nordic countries, you see that Finland and Sweden has several (unpopular)nuclear power plants. Denmark has a mix of everything, mostly coal and wind. And Norway get most of its electricity from hydro.

Google has built a data center in Finland, Facebook in Sweden and now Apple will build one in Denmark. And I also believe Microsoft is building a data center in Finland.

But few are considering Norway and that may be because electricity in Norway is already very cheap and neither wind or solar can compete with hydro. And you want additional profit by selling energy to the energy market.

Selling electricity is a good sustainable long term investment.
Qt GUI – Icons and Actions
The best introduction to how to manage icon themes in Qt in cross-platform and platform specific ways, depending on your target.
An ex manager from DARPA, which was responsible for similar stuff there said he believes that 5nm is the physical limit of scaling. but making them will be more complex, hence expensive, and he think the economics could stop working before.

Also if we're talking about the economics, there really are 2 foundries(TSMC and Globalfounries/Samsung alliance) make top-end chip for others(Intel doesn't count, chip designers don't/won't trust them). Do with almost no competition - do you expect prices to go down ?

So maybe we will see further performance improvements, But no cost reductions.
Interesting article. My company is actually trying to tackle the problem of how to make better group decisions within large organizations. You can check out our website at: paramountdecisions.com
Heat Map: Look at Your Site with Your Visitors Eyes (Infographic)
If American values are so great, why do they stop at American borders?

Ok, I know why. But it's infuriating to watch the U.S Government throw it's weight around in other countries under the guise of spreading democracy or "cooperation", but then operating like a totalitarian police state anywhere it sees fit.

It's not O.K. that Americans get a better deal than everyone else when it comes to privacy and security. Especially not when the U.S government acts like the World Government in real terms.

I really don't have a problem with the U.S running things. I have a problem with the U.S. running things for the the exclusive benefit of America... whatever America is these days. It's certainly not the American people anymore.

EDIT to add, I'm not attacking your comment by the way. I'm jumping on the "illegal to spy on American citizens" bit, which we also know is untrue in real life.
It's worth looking at this from the flipside as well, new hires that are a bad fit for the company can be insidious in the long term, and poison the company culture. I'm a big fan of vetting potential applicants over a number of days (if resources allow!) and seeing how they fit.
The behavior of strict mode would have broken existing code. That's why you have to opt-in.

New syntax, on the other hand, can be added without breaking existing code. These new constructs would have been syntax errors beforehand.
Of course not - but Viborg has plenty of energy, and a brand new 400 kV connection [1]. Would be ideal by Apple to use that, and they've probably gotten a good offer.

[1] http://energinet.dk/DA/ANLAEG-OG-PROJEKTER/Anlaegsprojekter-...
*Almost* Open Data
What do I talk about when I talk about DevOps
A technology architect should be technical and be able to keep himself on top of new developments in his area (software, networks, storage, etc) as well as having a good solid understanding of the adjacent or related areas. The focus is how newer and greater things fit together into the big picture.

A solutions architect looks over the fitness for purpose and is accountable for the delivery at project level which means that he might have to make decisions (together with his stakeholders) about which technology, framework or methodology to be employed in order to ensure the deliverables are mapped to the requirements with minimal or no slippage. The focus is business benefits from technology.

An enterprise architect is a whole different beast and I'm not even going to go there at this stage. I'll just say that being technical is as useful as being tall in that it makes for a good first impression but does not correlate to quality or effectiveness overall.

I am of the opinion that everyone involved in IT should have a good understanding of the past, present and future of technology as well as a systems thinking capability that allows one to understand how different systems interact and react to his own area of expertise. The balance of knowing how to do it and why do we do it is the difference between slave labor and expert work.
Ask HN: How to get a job when just starting out?
> Was it really necessary to add "class" syntactic sugar?

Yes. Now your editor/IDE knows that that thing is supposed to be a class. The doc generator also knows that it's a class. Furthermore, this makes things more compatible since framework A and library B use the same kind of classes.

Finally, it means that you won't have to waste time with evaluating a dozen semi-popular options to handle classes/inheritance.

It does of course also make your code a lot easier to read and it makes it easier for new developers who used some other language with classes before.

> Hopefully ES7 doesn't get the verbose syntax of Java/C#.

I recommend to take a look at TypeScript and Dart. Optional types aren't verbose. You just add some types to the surface area, which, compared to JSDoc, is drastically less verbose. Inside functions, you can generally omit the types.
replying as breadcrumbs.
I think jelly focuses on getting answers to each and every question posted. But the main focus of +ask is to identify the most interesting/pressing questions we have in the society and to get the public opinion for them.

The identification of those questions-worth-asking-the-public happens by the usage of '+ask' button by the users.
It's flown under the radar, but Apple has gone big on renewable energy for datacenters since 2013. Idk why I sat on this article but I finally submitted today:

https://news.ycombinator.com/item?id=9093657
Yes but the reality of decisions is that one person needs to drive that decision - a group of people will often struggle to make a clear decision every time
The double irish is under pressure but core Corp Tax is still 12.5%. Much lower than anywhere else. so tax is a good reason to do this in Ireland.

In addition, Irish gov are talking about new R&D scheme which will be like 6-7% corp tax on companies that focus on R&D. Alot of European companies have such schemes and Ireland can't be singled out for being "dodgy" with this. I suspect Apple will benefit from this.

Of course we (being Ireland) wouldn't get all this investment if Apple (and all the other US multinationals) was allowed to repatriate profits back to the US without paying the draconian US corp tax of 35%.

Companies like Oracle, Apple, Microsoft, Google, Facebook, Cisco have huge amounts of cash sitting there in their balance sheets. They spend it in other countries (and/or issue new bonds) to avoid paying the stupid 35% US corp tax.

Once the Republicans and Democrats get their act together on this, Ireland will be screwed.
I didn't say I assume the right to drop support, I said I will fight tooth and nail to drop it, that does mean following necessary process to do so. If the specification doesn't change because the stakeholders don't go for it, then that's life.

As much as the business doesn't want to be wasting money, I don't want to be wasting my time on something that has a detrimental effect on our ability to get the job done.
Couldn't have said it better myself, a really well said point or series of points.
If we banned the hotplug of new devices when the system is in a locked state, would that be sufficient to mitigate these attacks via system buses with DMA access?

"No password? No hotplug for you." seems like a rule we ought to be enforcing.
Sorry for downtime. Currently resizing server.
And a first class ticket to the nearest prison for an individual.
> My job is to deliver robust solutions for the target users in the quickest time possible, and if that means dropping support for a barely used browser or something that’s not financially viable, then I will argue tooth and nail to drop it.

Eh. I am a SW engineer and guess I can't be the only one to be happy whenever I don't have to decide the cutoff point for web browsers.

I can be opinionated on this and other points yes, but I strongly disagree with the tone of the post.
the call to revolution falls upon the deaf ears of the well-fed in the silicon valley, my friend.
"You think your HTTPS connection is securely encrypted, but wait, couldn’t the U.S. government generate a brand new fake certificate, give it to the NSA, and then serve that to you? Your web browser won’t raise any alarm bells. The SSL certificate is valid, and it is signed by a Certificate Authority that is trusted by your computer."

I think it's highly unlikely that they'd do that, as there's a chance that the fake certificate could be used as evidence against them later. A valid certificate for google.com signed by the US Govt CA would raise a few eyebrows.

If the NSA really wants to MitM you, it wouldn't surprise me if they had backdoor access to the real GeoTrust Global CA, either by bribery, National Security Letter or even "dark arts" that the real GeoTrust knows nothing about.
Actually after looking into it the current permissions are:

Grants read/write access to profile info only. Note that this scope includes user:email and user:follow.

Still too broad, but it doesn't give access to repos.
I will change it to only user:email as soon as I get off my daily job.
> Well, one of the big advantages of Ireland is that it's the coldest country in Europe [...]

Perhaps you are confusing Ireland with Iceland? (seems improbable since you work in Ireland) Even then, Finland is colder than either of them although its coldest parts are not so easily accessible.
Sounds like you would love Cookie Clicker: http://orteil.dashnet.org/cookieclicker/
>I believe software can be planned to near-perfection by one or more architects. If you establish a design, the implementation can be verified, at least to the level of detail defined in the plans.

^^^

I'm sorry to say that this presumption right here is responsible for an awful lot of the terrible code I've seen.

Doing architecture isn't like solving an equation.

Architectural decisions are nearly always trade offs and the worst trade offs are made by people who believe that there is a Perfect Answer to problems that have no one one right answer. They have a tendency to get religious about approaches, technologies, languages, etc. (sometimes even text editors and where to put the braces).
What is your background? Both educational and industry related work.
Video Game Tester Jobs at Home: Get Paid for Playing/Testing Video Games
Damn, thanks for your feedback
Plenty of Linux changes have broken my system - removal of devfs, breaking of not only binary module compatibility but even source compatibility (e.g. I can't build my qc-usb webcam driver any more).
I'm not sure that this is particularly interesting news. For starters, when "the government" wants to spy on you, they generally want to do so in such a way as to not reveal that they are doing so - using their own CA is a big tell that something fishy is going on (yes, only if you have the know-how and inclination to do so, but I'm thinking that this is probably the case for most people trying to keep secrets from the government).

No, if they want to hack your SSL comms, they aren't going to do it by using a MITM attack backed by a government-issued root CA, they are going to do it by gaining access to a "neutral" CA (such as Verisign), and obtaining the root certificate's private key. Now you would have a much harder time of figuring out that something has gone wrong, but then, if you're paranoid of the government spying on you, and you are using a CA other than one you own yourself, you've already lost the battle.

Trust is a Hard Problem(tm) to solve. Without using Certificate Authorities that you don't personally know, it is difficult to create a sufficiently trusted network. I think the best attempt at a description of such a system that I have seen is in Cory Doctorow's "Little Brother" (http://craphound.com/littlebrother/download/), but even there it seems to me that there were numerous problems for scaling, or even just avoiding invaders.

All of which is to say that certificate-based technology couple with CAs that you don't control is not a solution against state-level adversaries. Which in turn makes this entire article fear-mongering rather than a real discovery of a potential threat. In a more cynical mood, I might wonder about the author's motives, was this an attempt to distract away from the fact that the main CAs are not secure against state actors?
In my opinion both has strong and weak point.
I love how flow can capture generic for higher order function and I love flow non-null types.
In the other end typescript seems 'safer' especially in the field of type inference, sometimes flow infer union types where you really would not expect to happen. Which ends up with some weird bugs.
As a SW Engineer recently turned Project Manager, I find the original post of the "Product Manager" patronising, ignorant and offensive.

It seems to say "Your job is not to code, your job is to code and in addition to do my own job as well".

Technical/funcional requirements to satisfy, platforms supported, how to carry out changes made over the production environment, should be all decisions made by the product manager in agreement with sales, his boss, and of course the development team itself, to ensure that they are feasible.

If he has not the necessary technical knowledge or he cannot be bothered to take these decisions himself, he has no place as a product manager.
Does it look strange to you? Have seen this a lot these days, at least in the EU.
URL experiments (includes Space Invaders)