skysight-inc/HackerNews huggingface dataset:
They have a wide open wiki too, lots of interesting bits in there, check it out https://wiki.mozilla.org/. Some highlights -- Release Engineering [1], Meeting Minutes [2], Security [3], Reference Platforms [4], etc. Want to check out their puppet configuration management code base, well you can do that too [5]. Personally, I love how large organizations open up their configuration management code, as it serves as a nice example to learn from, Wikimedia does the same thing [6]. I have spent hours looking through these repos to see how they implement various puppet features.

[1] https://wiki.mozilla.org/ReleaseEngineering

[2] https://wiki.mozilla.org/Community_Calendar

[3] https://wiki.mozilla.org/Security/

[4] https://wiki.mozilla.org/ReferencePlatforms

[5] http://hg.mozilla.org/build/puppet

[6] https://gerrit.wikimedia.org/r/#/q/status%3Aopen+project%3Ao...
I hope in a decade or so, someone will come to Microsoft forums and informs that the source code of windows doesn't seem to be visible on their github account and asks if they could fix this.
Could still be weather as the Parent stated. San Diego, warmer, nice weather. Seattle, rainy, snowy, gloomy, could be Seasonal Depressive/affective Disorder from not enough sunlight.
Side note, don't you need an ORDER BY when using LIMIT and OFFSET, as the database doesn't guarantee the order unless you specify it?
While I agree, for the most part, that future growth is risk adjusted and priced in, I also believe that the market doesn't quite understand all the nuances. One, Tesla's margins are actually significantly than GMs. Two, they're losing money on a gaap basis because of a. how you account for residual lease values when they most likely won't have to pay any of that back and b. large capex expenditures in preparation for model x and model 3. If they weren't spending so much on capex, this would be a very cashflow positive company. Third, the average person doesn't quite understand how much better of an experience driving a Tesla is than a normal ICE vehicle (I know several people who would never buy > 50k car who own Teslas, know another 20 who would go buy a 3 immediately if it was available). Finally, projections don't really account for the stationary storage market, which is all gravy.

Are there risks? Of course - you can have a giant first mover advantage, giant technological moat, and ISO chooses a different charging standard, Elon Musk gets hit by a bus, etc. I think there's enough optionality here for those willing to wait 5 years.
I didn't watch the video and cannot properly explain it, but there is direct mechanical connection from ICE to wheels. AFAIK both MG1 and MG2 can work as motors and generators and spin in either direction. If you apply proper counter-torque by one of the electric motors (for planetary ring), the torque effectively flows from ICE to wheels. I'm Prius driver myself, it's a nice car for us who cannot yet drive full electric vehicle for a reason or another.
"This video contains content from BBC Worldwide, who has blocked it in your country on copyright gounds."

How worldwide.
New Software: Rewriting the software driving our site
I really appreciate Jason Fried's and DHH's ability to not only think outside the box, but also be brave enough to be very different. Reducing risk by simply mimicking successful companies gives somebody else the opportunity to innovate instead.
You're right that the ICE can essentially directly drive the wheels. Take a look at the model, and think of the outer gear (connected to MG2) directly powering the wheels. Then try setting the ICE to near max, and MG2 to about the same level, so the grey line is horizontal. That should simplify the visualization. See how the ICE pulling the planetary gears around directly pulls the large gear as well? Once you grok that, you should be able to see that even if you vary the MG2 slider, the ICE is still providing torque to that outer gear.
Yeah, the car doesn't really slow down. Anyways, this has an insane amount of potential. Imagine the moral questions raised, when people spend hours committing violent crimes in a simulation with their neighbors.
I love this video http://www.youtube.com/watch?v=1N6cOC2P8fQ by Sean Day[9] Plott describing Graham's number very well. At least I found that description very easy to follow. Numberphile [1] too has a great explanation, but I still strongly recommend watching Day[9] video because it tells a little bit of history and Sean is very expressive and good speaker so he easily engages viewer.

[1] https://www.youtube.com/watch?v=XTeJ64KD5cg
wtf are those

>ef b8 8f e2 83 a3 bs
From the article:

Is there a standard change log format?

Sadly, no. But I want to change that.

... wait, what?

There are plenty of standardised change log formats. Take for example Debian's changelog format:

https://www.debian.org/doc/debian-policy/ch-source.html#s-dp...

Or are they talking about one standard to rule them all? In which case...

http://xkcd.com/927/
Notes on the Work of Shinichi Mochizuki [pdf]
It would be fun to add some multiplayer support via websocket just like Mozilla did with BrowserQuest. Maybe make it run on phones and take it with you when you actually drive.

Then we can simulate the traffic jam in Mountain View together!
Chinese BitcoinExchange Bter hacked,$1.75M worth of cryptocurrency stolen
There was a Google project that done this. I'd guess five years ago, so before full 3D buildings. Just hills and perhaps certain landmarks.
I think it's more likely that Windows source code will be available on GitHub in 10 years.
This is cool! Nim has been catching my interest lately, especially for writing compiled, imperative code, so I'm keen on seeing people trying it out.
How Gamification Can Hinder User Experience
MG1 can provide some resistance against the ICE's motion, causing part of the ICE's power to drive the ring gear instead. So in some cases, you have MG1 acting as generator (thus resisting the ICE) and driving MG2 electrically, AND you have mechanical contribution by the ICE as well.

There's a detailed explanation of all the various modes the gears interact in here: http://prius.ecrostech.com/original/Understanding/WhatsGoing...
to own itself, first someone would have to give that ownership (and consequent profit) to it. Why would someone do that in the first place? Will humans not care about their own needs anymore?
> Anyone with access to the secret token can now generate their own urls without fail or evidence. With a DB you need to at least insert a row and thus leave evidence (especially if you are auditing db activity)

And they wouldn't be valid. It's much simpler to invalidate them provided that you don't need information from the DB, than reading from the DB.

> No way to individually invalidate anyone. Example: What if ONE account's db tokens were exposed. Should be able to invalidate those tokens, not ALL tokens.

Of course you design it in such a way, that you can change one of the inputs, which will by definition invalidate the tokens.

> Not necessarily easier than one "expiring token" mechanism that is re-used throughout the system.

The point is to seperate this boilerplate logic from your core business logic.

> I don't feel great about exposing all my private security checks in url parameters. Why give users clues on how I do security? I can provide that in a better, more meaningful way.

Any serious security systems assume that an attacker already know 100% of the workings of the system. You should not rely on obscurity, but on your secret - in this case the crypto key.

> No way to easily invalidate all tokens of specific nature.

Again, if this is a requirement, then make such a global parameter an input to the token generation. It's still much simpler than doing it "the old fashioned way".
The author seems not overly familiar with the history and conventions of releasing software.

> Is there a standard change log format?

> Sadly, no. But I want to change that.

There is a standard change log format: https://www.gnu.org/prep/standards/html_node/Style-of-Change...

Most GNU tools (and many others) use this format.

The Debian changelog format which most people have seen is based on that format, and is compatible with it.

> What’s the point of a change log?

> To make it easier for users and contributors to see precisely what notable changes have been made between each release (or version) of the project.

Oooh, they mean a NEWS file. Standardized like so: https://www.gnu.org/prep/standards/html_node/NEWS-File.html

> What should the change log file be named?

> Well, if you can’t tell from the example above, CHANGELOG.md is the best convention so far.

> Some projects also use HISTORY.txt, HISTORY.md, History.md, NEWS.txt, NEWS.md, News.txt, RELEASES.txt, RELEASE.md, releases.md, etc.

> It’s a mess. All these names only makes it harder for people to find it.

Please use standard names. Details here: http://en.tldp.org/HOWTO/Software-Release-Practice-HOWTO/dis...
Atlassian shows the source code to their customers, even without being open-source. They don't give redistribution rights obviously, but this has proven very useful in developing the ecosystem of plugin developers. Many people to date even believe Atlassian's products are open source.
Class as interface seems such an obvious thing to do.
For the sake of completeness: your regex doesn't perform the task either.
A programmer who wills his bank to itself upon his death.
If you're at all interested in using a broker, Thomas Smale might be able to help you. I've never used him, but I've met him at a conference and heard him on podcasts, and he seems to know a lot about these things (as that is what his business is about).

He can be reached at his twitter handle @ThomasSmale and his website http://feinternational.com
Collaborate Online and Offline with Overleaf and Git (beta)
This could be the inspiration for a great open source project, and become something that could easily be deployed to a cloud hosting platform. Basically it's the same as firebase, but with some of the react and flux goodness like server side rendering. Or somebody could package this as a product.
Well, my turn for a newbie question. Surely they don't share 0day vulnerability fixes until after they are released? So they don't really share everything?
From MSc to PhD in 2 year's time... in Spain this is the time you are expected to figure out what to research about. No doubt why Spain needs a bailout. So much to learn.
Well for those of us who have been doing computing for 30+ years, the Cybernetics movement has been very much key in developing the big data analysis process, industry, and academia .. one could 'do a grep' for all the Cyberneticists in the field and discover what they're up to now, and undoubtedly they'd be out there. I remember in the 80's at least, while working at a database vendors bunker/retreat, seeing Jay Forresters' books and papers scattered in the library, discussing Beers' techniques, and so on. Cybernetics seems to have flown under the radar of many in the modern age, but that doesn't mean it hasn't been seriously influential. This 'wave' of relevance/irrelevance is something the computer sciences deals with on a regular basis, but though the wave may be choppy, the undercurrent still flows on ..

You're right though, this isn't really adequately presented in the article. Cybernetics is definitely worth investigating, though, for anyone doing big data today. So many lessons learned, forgotten, and re-learned, over and over again in the big ocean of human consciousness ..
My lab uses mostly thinkpads with a few people having macbooks instead. I have have a thinkpad at work but bought a MB with my own money. So you know my choice.

What I can say is that thinkpad hardware quality varies wildly with some having huge overheating problems (processors to max = system shutdown) while every macbook i have owned (including the air) being absolutely ok with 12h straight of having their cores to the max.

Build quality of thinkpads is low-ish when compared to macbooks and they require more attention to cleaning and not being dropped.

On the other hand MBs only offer up to 16GB memory which feels arcane and makes it impossible to do a lot of stuff. Apple being stingy with memory is typical across their product ranges.

Generally having to run a VM is not something I like to do - unnecessary friction/user time overhead. But the MB is ok for running both native linux and running typical dev stuff on osx (though recent default compiler change to clang is anoying).
Could a robot have written this story? The rise of the Robo-journalist
Maybe they'll release old sources for historical / nostalgic reasons - the same reasons for
id Software to open source Doom and other classic games.
Nukes ready to fly
Yep, that's definitely a bug worth reporting! ;)
The key bit of it is this:

> StorJ is not able to find new hosting environments on its own, due to a lack of sufficiently powerful AI— but it can purchase the knowledge from humans: When an instance of StorJ is ready to reproduce it can announce a request for proposal: Who will make the best offer for a script that tells it how to load itself onto a new hosting environment and tells it all the things it needs to know how to survive on its own there?

The 'AI' doesn't have to be smart it enough to do everything itself, it just has to be smart enough to be able to hire a human to help it. This step could be broken down into lots of mturk-style tasks, each done by a different human:

1) Find hosting providers who accept Bitcoin

2) Evaluate the service provided by these hosting providers

3) Sign up for an account on this hosting provider

4) Setup an account on this server with this SSH public key

You could even deal with legal issues that way - have a retainer with a law firm, and if any issues crop up send them an email.
Anyone that's worked as a waiter / bar-tender knows there's no-one more hated than our beautiful customers.

I door find "Tell us why you're passionate about Supply Chain Management" a curious question (my profession).

"I'm not, I'm interested in it and good at it" is insufficient. Of course, it is one of those interview situation questions to be ready for. Passion comes in many forms.
Woz on watches, addiction and being played by Seth Rogen
Ta yeah, I probably should but its usually just I don't find the approach the UI takes intuitive in a lot of cases. Even just things like doing a search, viewing results, compared to Chrome I find it all a little painful...not sure that's the sort of thing I can meaningfully report though.
Nope, just use trace.
Let's build toll-free bridged class
Is Hardware really an appropriate Valentine’s Day gift?
Apple working on secret project aims to build minivan
Because, you know, Tor is only used by terrorists and pedophiles.. /s
On his watch: "You can take in in the bath tub at least once"
Or maybe Apple.
"To be clear, these robots-on-wheels would not be self-aware. ...

But they would be programmed to seek self-improvement in order to avoid becoming obsolete."

No, no, no: we are not going to apply evolution, we will simply let the fittest survive!
What happens if you don't set keymap "gg", "G", etc? Would they not work, or...? (Currently not on a *nix machine to be able to test it out, or else I wouldn't ask such a simple question :P)
Seems they no longer use this method. Instead they use `CHANGELOG merge=union` in a .gitattributes file at the root of the repository. That means that conflicting merges take changes from both sides of the conflict. It's what you usually want with a changelog.
Startup Survival Kit
Show HN: Open sourcing an MVP for my startup
Flux over the Wire
User Session Flows with Redshift
We should remember that exchanges aren't like commercial banks. You don't need banks just to store your Bitcoins. Exchanges are like Forex trading brokers; you don't get FDIC insurance for those accounts either, and you will lose money when they go bust (see last month, after the Swiss correction).
Thinkpad every day of the week, MPBs are horrible to do hardware maintenance on. You can also get static electric shocks from the chassi and they don't have a DVI/HDMI connection
My guess is, that you redefine them to mean the semantically same in a new domain. What I mean is that gg and G lets you go to the top of the file and to the bottom of the file, right? But on the command-line, what is the top of your file? And what is the bottom?
I'd say either way it's a hasty generalization. I'm very skeptical that there is a high correlation or anti-correlation given how complex people and their social environments can be. In my experience the entire spectrum is covered from "narcissistic prick" to "self-loathing misfit".
The most important information is missing - did the attackers get the package signing key? The comment "the window for package compromise was very very small" is a bit ambiguous.

That the security of package integrity is so fragile should greatly concern all of us. Almost all big Linux distributions rely on downloading compiled packages signed by a single key. If the build system is compromised your Linux distribution of choice will happily give you trojaned packages that you install as root. If the signing key is compromised a man-in-the-middle is required, but the difficulty to mount an attack is decreased due to the fact that most repositories don't transport over TLS.

The situation can be improved in many ways. By making the build process deterministic many parties can compile the same package and compare the result, alerting the community if one of the build systems report a different checksum. Package managers like apt and yum should be extended with the ability to rely on signatures from multiple parties.

The Tor Project, Debian and Fedora has started working on the first problem, but I don't know of any efforts to support multi-sig.

https://blog.torproject.org/blog/deterministic-builds-part-o...

https://blog.torproject.org/blog/deterministic-builds-part-t...

https://wiki.debian.org/ReproducibleBuilds

https://securityblog.redhat.com/2013/09/18/reproducible-buil...
Well I would, I often mention logic programming in the same list as functional. However, lisp is simply awesome/powerful/etc. while logic and more formal-abstract kinds of programming (from Prolog to Haskell) are "difficultly" awesome.
Would self-owned cars have a need to know the implications of its actions? Legalities?

Will they – like humans – be able to take on small losses in order to survive? Can they be expected to uphold the law like humans are? What if they act as getaway drivers for a bank robbery? Drug mules?

Would their programmers be legally responsible for their illegal actions? Or would they, as the buyers and evaluators of the software, be responsible? Or the programmers of the evaluation software?
Can I ask, did you send an HTML email or did you just throw the link in and did GMail do you the service of making 63/64 links easily clickable without copying it to the address bar? Because I'm pretty sure it will work fine 64/64 times if you use an a-href.
how long have you been using it? what are the pros/cons?
Agreed mostly, but I beg to differ with your conclusion that this makes the coice of language insignificant.

The point of modern languages (name them functional or not) is to erade whole classes of bugs. Also, it is about making it simple to define good interfaces between components.

So at least your points "focus on quality" and "enhanced architecture" are directly influenced by the programming language. Of course you should train your people to focus on quality, but you also shouldn't make it too hard to get things right in the first place. Of course you should train your people to develop a sense for good architechtures, but you should also provide a formal language that makes it more natural to express their architectural and design decisions.

That way, your training can focus 100% on the real issues, rather than 5% on the real issues and 95% on how to apply them in your programming language, as you need lots of workarounds, wrapper classes and so on. And you don't only have to write them - others also have to read that bunch of mess, and reduce this to the "real point" in their heads. This may be considered a nice mental exercise, but in the end, it's just boring, prone to errors/misunderstandings, and a finally waste of time.
Why Browsers are Bloated
More examples of js insanity here (1:20):

https://www.destroyallsoftware.com/talks/wat

How about {} + [], is that deliberately zero, and why is addition not commutative in this case if it is allowed? Or {} + {}?

I think most people would infer type safety to mean that attempts to coerce types which are meaningless result in an error, not meaningless output, like the result of "string" - 1, or {} + "string" or {} + []. Otherwise your type system isn't going to stop you doing something insane by mistake, and is therefore not adding any safety.

{} + "string" or similar just shouldn't be allowed, and in most languages (let alone type safe ones), it is not.
Maybe he included such info originally, later thought employer might not like it so commented out
Also for cats.
Show HN: Apparel for entrepreneurs
This is like asking if the automatic doors at the supermarket can own themselves.
Wouldn't it be better if he used an airplane since the car is flying over building and fences anyways
well you have probably exact date in the title of document ;)
I love those "White Knight" bug reporters, on par with the "Think of the children" crowd

Maybe you should think for 2 seconds before opening a bug report? Too hard?
Thanks for this link. It deserves a separate thread!
This of course is an email layer on top of your core logic. Your core logic still thinks it's sending a mail with a very long URL. It's just shortened and when it's incoming it will be converted back. So you get the best of both worlds.
I think that private offices are a bad thing in many cases. Having everyone together in an open space increases communication and results in much less time spent trying to figure out what's going on or should be done.
การให้กำลังใจช่วงคลอดของคุณพ่อมือใหม่
How many exchanges have been hacked at this point? We must be getting near double digits.
When I was more junior I was always told to use caching as a last resort. It's a good attitude to take to make sure you're not doing something stupid and hiding it with caching. These days though I look for caching opportunities up-front. In fact, I'll design with them in mind.

I did some work for a client some time ago that were expecting a lot of read load. Their backend had a bunch of constantly changing data in mongo - but it only refreshed every 10 seconds. I told them initially to just output the aggregated data to an S3 object and have all the clients access it from there. They decided to run loads of servers instead, they were muttering something about AWS Autoscale (even though I told them that wouldn't help).

As expected, I got a call one Friday evening asking if I could take a look at why their servers were timing out. When I got there, there were about 15 frontend servers hammering 1 poor mongo box that was aggregating the same query again and again - and within any 10 second window always getting the same result. I stripped it down to 1 frontend box with an nginx cache (after jumping through a hoop to support jsonp).

After the dust settled they apparently didn't want to admit that it was something that could just be solved with caching so it was described as a configuration issue to the business.
RFC-1149: A Standard for the Transmission of IP Datagrams on Avian Carriers