skysight-inc/HackerNews huggingface dataset:
At this point, if you are surprised by this, you should not be working in the security field.
You can point to any feature (excluding reliability) and claim that feature doesn't make something 'pro'.

I know one senior sysadmin - the kind of guy other sysadmins go to for advice - who's getting a Novena laptop as his next machine for work. That thing doesn't come with a keyboard and exposes the motherboard when the screen is up.
explorminate.com: This has to be the most poorly designed website I've ever visited outside of some one off hobbyist crap and random AOL properties...
Thanks so much for sharing this. Any thoughts on the role of Rap Genius as the online version of this? Truth told, I'm so repulsed by the brand that I haven't checked it out to see if anyone's using RG to annotate the news. Applying this kind of critical mark-up to the "news" is what interests me most.
I'm certain that the legal requirements can be met without outright lying (or admitting to unbelievably gross incompetence).

In fact, they seem to agree. I loaded the page just now, and "We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns." is no longer present in their statement.

Their statement is still unbelievably condescending and awful (and none of that has any legal bearing that I can see) but they at least removed the part where they outright denied any security problem.
Marilyn vos Savant and the Monty Hall Problem
3D printing produces a perfect replica of a sixth-century sword
I know and agree, but they have some weird syntactic/linguistic quality:

- both 3 letters each
- only differ by 1 letter a|d

None of the alternatives have these symmetry, and it (very subjectively) shows in the code.
Agreed; I read it as asking if there's any local community of YC-funded startups he might be able to connect with.
Which workstations should a startup buy?
Normally I would just build, but as a funded startup I feel like we should just save time and buy some nice workstations as new employees join.

Any recommendations? Dell? Lenovo? HP? ThinkMate?
Manage VBA Macros and Fonts Substitution inside Presentation, Export PPT to HTML
I'd skip the Lenovos.
Okay, Stripe. Can I accept bitcoins and automatically convert them to USD? I need an instant conversion back to USD after the transaction so I don't lose money due to volatility. Does stripe let merchants auto-convert their Bitcoin payments to USD? This would solve the problem entirely and I'd be happy to pass the extra savings on to customers.

I could probably give about a 6% discount because I wouldn't take profit from the transaction savings.

In fact, given the fee is .05% of the transaction, this could be the first service to ever enable micropayments. Perfect for a lot of internet/new technology services. The key is to convert the customer's USD to bitcoin instantly, pay with bitcoin, and convert the received bitcoin back to USD instantly again.
Does the Internet Make Us Stupid? Yes, but this may not be as bad as it sounds [pdf]
So you think we're better off just giving up on a perfectly good reason for these naming conventions and call "princ" "print" just because some poor language without the concept of Read-Eval-Print Loop named its function that way and then everyone else blindly followed?

Seriously, Lisp has long history and had half the "new amazing features of today" 30 years ago. There is a rationale for naming conventions. Just because you're free to call a string-spitting function "print" in Ruby or Pascal or whatever doesn't mean you can do it in a language with a proper REPL.
Try abuse or postmaster or one of these:

http://whois.domaintools.com/superfish.com
Not only did I have to remove the certificate from my root authority in the control panel, I also had to remove it from my list of certificates in Firefox. This was after uninstalling Superfish. Once I did all of these things, and cleared my history and cache and all that, the website that folks have been linking said that it didn't detect Superfish (sorry, I'm typing this from a phone).

So my explanation wasn't very technical, but I feel as though the part of the process where you also remove the certificate from Firefox had been left out, and I wanted to share it in case it helps out another person.

This news took me by surprise, as I just received a brand new Lenovo Yoga 2 for work last week, and it had this vulnerability.
Right. If on node, you can also use modules via NPM ( https://www.npmjs.com/browse/keyword/lodash-modularized ).

But as I said, this is common in many frameworks. Hell, you can even do with JQuery ( http://projects.jga.me/jquery-builder/ ). So having this ability doesn't make Lodash special.

This is not presented as the preferred method to use the framework on the project page either. You just get a link on the front page to the whole shebang. Probably because most developers just download the whole thing and stick it in.

What I was really hinting at was code complexity. Sometimes having something light and small that you can stick in there without worrying about anything is useful. Lodash can address that by having a light version linked off their front page, but they haven't done that.

On top of everything, Underscore is ribbing them on this very point. See http://underscorejs.org/ and bit down "(3x smaller than Lodash ;)" in bold. Seems like a really easy point to address.
I use a desktop as my main dev machine, and I haven't tried to supplant it with any of these portable machines, just supplement. I do run Visual Studio, WebStorm, Photoshop, etc. on the Surface though, no problem, to code and push real features.

The docking station and a large display or two would probably be a must for using it as a primary machine. I haven't tried the docking station myself, but I've heard lots of good things about it.
You may be right. I'm inclined to believe the provisioning team in Lenovo is understaffed, and that they don't really do much security analysis at all. So I believe their negligent, and that their process is negligent. But I'm open to the idea that I might very well be wrong about that. Either way, it doesn't speak very highly of what kind of quality one can expect to get when shopping Lenovo products.
The key phrase in his statement is "unless otherwise specified". Whenever an enterprise is dealing with a supplier -- and it doesn't matter whether it's software, electronic componentry, services, or anything else -- there is no such thing as an acceptable boilerplate contract or TOS... that is, unless the supplier is bigger than you and refuses to negotiate. Apple is notorious for bullying their suppliers for example, and Foxconn has gone so far as to purchase their own iron mine in order to control as much of their supply chain as possible. It typically takes 4-6 different groups (I feel like all this should be, and probably is documented somewhere... like every company's sales manual. You end up talking with the manager whose group requires the service/product, someone above or parallel to them as a sanity check, someone in the company's supplier management team, someone in the accounts payable org (to get your banking & credit details), someone in Legal to review contracts, a stamp of approval from one or multiple execs, and then finally whomever has to input the purchase request.) within an enterprise looking at it to get an approvable contract, and then another week or two to figure out whose signature it needs to have.

As long as money is flowing and there is no obvious abuse, no one really complains an regulators don't get involved. The wheels of commerce and all that.

Perhaps more apropos is the answer to a different version of your question, regarding a different EU directive: EU 95/46/ec (http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:...). This directive covers data protection and proscribes quite a few things that make licensing or operating SAAS services challenging in the EU. Some enterprises take the tack that "well, Safe Harbor covers us." and do whatever they want. Others are ultra-conservative and refuse to use SAAS services that aren't explicitly compliant with 95/46/EC. And, since it's a directive and not actually a law in any country (except perhaps maybe slightly Sweden... which is also quite a bizarre situation, having a FB data center there and all), it's clear as mud how it would actually be enforced, or what enforcement would look like.

To close, I will tell you that The Street looks very closely at the payables/receivables numbers & ratio, just like they care about inventory turns and other supply chain metrics. It's a big, and bad, deal when a large enterprise doesn't pay more slowly than they receive payment (in aggregate).

I could tell a lot of stories but that would be ... career limiting.
For people reading this, probably not hard, merely annoying. Though note that you may have to pay for the install media; the recovery disk / partition is infected with the same adware/spyware that came preinstalled.

For most people, it's not going to happen without help.
cheap ones. Figure out how much power and storage your crew really needs, then buy workstations that are only modestly above that capacity.

Even when you're funded it is important to keep a lid on your expenses.

also cheap, slow computers make performance problems in your code readily apparent.
Happy to share. :)
Yup. There's a very real aspect of neo-aristocracy happening right now in that the law is not applied equally to all entities. Just look at the HSBC money laundering case as the perfect example. If an individual is caught in a drug money laundering scheme they go to prison for a very long time. If a major multinational bank is caught laundering literally billions in drug trafficking revenues then they get slapped with a comparatively modest fine and everything is swept under the table. Same deal if Joe Schmo doesn't pay taxes versus some major politician.
I don't live on USA. But having watched Law & Order, C.S.I., et. al. I thought this use of DNA was very common.
Common Lisp has several "print" functions.See:
http://www.lispworks.com/documentation/HyperSpec/Body/f_wr_p...
Good question! With a lot of our discounts we do a chargeback. That is, they pay 100%, then we send them the 2%. Not sure if the prompt pay discount works that way though.
Previous: https://news.ycombinator.com/item?id=7224882
You're right. Further discussion in that bug and on twitter [1] confirm that Firefox is affected after a restart. The author of this didn't restart.

So any removal instructions which don't include clearing out Firefox's certificates are incomplete. This includes Lenovo's published instructions.

[1] - https://twitter.com/FiloSottile/status/568600661534875648
Yeah, I like car/cdr very much and use them where appropiate because of semantics. Indeed, car/cdr doesn't mean the same as first/rest or head/tail. E.g. head/tail makes sense only if you're talking about lists. But cons-cells can be used to compose different types of data structures.

As funny as it is, people whining about "car/cdr" and saying "language X did it better because it called them first/last, or head/tail" don't realize that it's the language X that lacks semantics to express anything else than lists using cons cells.
Indeed. It lets you clearly express in code that those cons cells are actually part of a different structure than a list.
You have to point it out after it is too late to edit... Sigh
Callbacks allow await/defer in Iced CoffeeScript, not to mention the other async libs as stated above.

Promises don't really offer any benefit to program structure overall, generally devs just end up creating long chains of anonymous functions rather than long nests of anonymous functions. Promises actually discourage flat code (and functional programming) for that reason. I understand they seem attractive but become a hack in complex situations.
I'm not sure the landlords will get anymore than they already do; that's a fixed cost.

Also, some portion of this will come right back to them, as it means employees have more money to buy their goods with.

I would not be surprised if they did this from pressure on their terms for fear of being forced into it. Or maybe they all of a sudden started caring about their workers.

Still, I hope it helps them.
A ZDI analyst’s perspective on ZDI-15-030
Note that the given C++ class in the Lvalue/Rvalue example could simply be written as so:

class SomeType {
public:
SomeType(int a) : p{std::make_unique<int>(a)} {}
private:
std::unique_ptr<int> p;
};

This version supports move operations as well.
The stickers are a lot of fun. Facebook tried to copy it, but it's not the same.
The company I work for has a strict policy of no direct outbound connections from the corporate network. This is to prevent (or just make harder) for compromised machines from "phoning home".

This has the unfortunate side effect that all internet traffic must go through a proxy, they have to MiTM SSL traffic.

I just use my smartphone's data for any personal internet browsing.
Can confirm! My company's typical turnaround time when requesting a PO for non-critical stuff is probably 10-14 days (and trust me, it irritates EVERYONE!), but if someone absolutely has to be paid or something absolutely much be obtained ASAP, we break all our internal rules and can get same day POs. This is obviously not something to be abused, but I wanted to emphasize that you're right.

I encourage everyone to write into their terms what will happen if payments are late. It would be insane not to.

Also, it is a jerkwad thing to do (for some definitions of the term) to right in a destroy clause into your terms (e.g. "When you stop paying maintenance on this software, you must stop using it.") but it really does lock in large enterprises who frequently don't even remember the name of the guy who set the thing up in the first place, and can't imagine committing current resources to figure out how to stop using it.

I feel like I sound either really bitter about my job or that I'm a really awesome enterprise IT manager. :D I'm not sure which is closer to the truth.
I would start with building the app to test the throughput. Once you have a repeatable routine to A/B benchmark each change then you are off to a great start.

One you mentioned is not a crazy idea. A lot of high traffic websites are loading data from a cache so processing might not be a big deal. If there is a significant amount of work to do than getting a queue involved is a great idea. Especially when you are sending a message to be processed and don't actually care about the response.

However, keep in mind that traditionally one of the hardest things to scale on a web site is the concurrency. If you are queueing messages to different systems and leaving sockets open on your single web server you might run into some concurrency problems.

This would lead you to do some research in non-blocking IO.
No, you do not. Any work you do is automatically under copyright as long as that is a reasonable expectation (given a site's TOU, etc.)
> You know the term REPL, right?

Yes, and notice how it doesn't stand for Rrepl-Evl-Princ Loop.

> There is a good rationale behind those names.

No, there is a good rationale for having separate functions, there is no logical rationale for prin1, princ and pprint.

Let's take "prin1 produces output suitable for input to read." from the link you provided. Since we are redesigning the language anyway, let's call that evalable-print or readable-print, or anything else in the world that semantically captures it's meaning. Because when you have a language with hundreds of obtusely named library functions it requires an unnecessary amount of cognitive load added to the already taxing act of programming. Functions that are easier to remember are directly related to code that is easier to read and understand.
Though not a frequent occurrence, I agree largely with tptacek here. My own most successful submissions have been almost exclusively about concerns with Google and privacy. At one point, the top three HN stories were all indirectly about my own G+ issues: https://i.imgur.com/YgEjUuI.jpg

Google and Facebook get a lot of flack here (and some support). Gates has his defenders and detractors (I heavily criticise his business practices, I'm modestly approving of his philanthropy), and there are numerous NSA stories.

What you likely don't see is how many stories total simply fall off the submissions page. I check it every so often -- perhaps several times a week, perhaps only every few weeks. But there's a lot of inflow and much of it sinks. That's typical of any curated site. An editor's job is to say "no". Hopefully their accuracy in doing this is better than random.

As sites grow in popularity, if the front page keeps the same capacity, any given submission's odds will fall. reddit's answer was subreddits -- there are now well over a half million: http://redditmetrics.com/history

HN's going to have to resolve this conflict somehow eventually.
lol, first of all - it is corps, not core. Second, these are the same people that monitor cctv feeds of border fences - it isn't some elite unit of super hackers.
0.5% is less than 5 cents + 5%.

For a $1 transaction, Paypal/Amazon would charge 10 cents and Stripe would charge 0.5 cents for a bitcoin transaction. Unless you're talking about credit card transactions.
Common practice in some workplaces.
Boostable (YC W14) Is Hiring Software Engineers in SF
Boostable helps entrepreneurs on marketplaces like Etsy, Udemy, Airbnb etc promote themselves online. By making advertising accessible to any seller on any marketplace, we help level the playing field and give any seller the ability to advertise themselves online.

About the position
- You’ll build new tools that expose data and services to end-users and admins
- Build an API to scale our product out to more marketplaces.
- Work with team members to figure out how we can improve ad performance and management.

What's in it for you
- You'll play an important role in determining our company's success as one of our company's early team members.
- Work with an experienced team that has been part of several successful startups.
- Work with a team that can bring your ideas to market. We already have access to several hundred thousand sellers.
- Stock options, competitive salary, health insurance.

Qualifications
- You’re a startup person: mission-driven, autonomous, a fast-learner.
- Ability to deliver on time in a fast-paced environment
- 3+ years of web development experience.
- Language agnostic. You’ll work primarily in Python/Django, but our stack includes Scala/Play Framework, NodeJS and AngularJS. - Experience building APIs and scaling out web apps is a big plus.

How to apply: Send an email to jobs@boostable.com and put (HN) in the subject line to get extra attention
Tell me again why we need a new linguistic construction when we have the word "which"?

"So which was it, Karpeles or one of his employees?" "Which was it, night or day?"
The Great Innovation Hoax in StartUp Land
If you care about filesize, you'll probably optimize as much as possible. You can do this with Lodash using modular imports.

There's little upside in hosting a light version, and fragmenting the docs. Min/max'ing on filesize lets you save 15 kB, or 0 kB. Creating a light build that saves 5 kB is a maintenance cost with a poor ratio relative to reward.
Man Ordered by Judge to Pay $30,000 in Support for Child That Isn’t His
I've been using Navicat Essentials for years and I still get frustrated with it on a regular basis. Only after bdcravens' comment did I find the section of the UI that allows syntax highlighting. Years ago, when I first tried, Navicat failed to import a standard pg_dump file so I've given up on it for import/export. Which is fine, I prefer the command line most of the time for things like that anyway.

I gave PGAdmin a shot, but it does not support left-right scrolling from a Magic Mouse. Getting to table views is cumbersome, 5-6 whole clicks. On the up side it does visualize explain queries really well. But 99% of the time I just want to browse some data to see what data is there.

I've spent 3-4 hours using Postico today and really like it. I can see it being really useful in my normal workflow. I can move data from the command line, browse tables and make quick updates in Postico and if I really need to dig into a query use PGAdmin. Syntax highlight would be nice, but I've been without it for so long (due to my own inability to find a button in Navicat) that it's a nice to have at this point.

Keep up the great work! I do hope there is a way to transfer my license over to the AppStore version when it comes along.
This Week in 'The NSA Knows Fucking Everything'
What're you doing? Does it require something more than standard laptops or desktops?
MT GOX trading bots manipulated the Bitcoin price
You've made Ed Tufte cry... The concept is cool, but the display is terrible. Black and white, seriously? There is no organization, no drawing attention to the relevant data (is anything recently changed? Out of the usual range?). Just a bunch of data thrown at the screen.

Don't give up, but you got some ways to go.
recommend opensource contrib & projs as resume. train on interview, practice begets success. failure is a teacher to success, be it building a company or an interview. teaching is worthwhile but rarely fiscally rewarding. choices on what matters to you.
Yup, and it is a temporary effect - that is why there is a graduated rank structure. As the mental conditioning (to put it charitably) wears off, you are further removed from danger and positions where immediate obedience to orders is necessary.
Great question. To me what Node is missing most is a ORM that isn't tied to a backend -- relationships can easily be expressed without needing to know whether data is fetched through an API or through SQL. This is how ORM is often done in frontend JS. We're working on and using such a backend-agnostic Node lib, but I don't think it's polished enough for release yet.
It's not illegal per se to donate to wikileaks, but you may be put on a list somewhere.

Do you think all free speech should be only with identified speakers? How would you feel if your entire spending history was in the public domain?

In most of your examples, you can easily pay with cash, which is anonymous.
Via the Lodash CLI you can "lodash underscore". This results in 6.7kb gzipped. In my experience, jdalton is a very solid coder and the lodash package is excellently maintained.
Or get someone else to write one for him :-)
> lol, first of all - it is corps, not core

You laughed out loud? That's good. You should tell Barak that, I just pasted his own statement:

--- http://www.komodia.com/about/

Barak Weichselbaum founded Komodia, Inc. in 2000, following his military service as a programmer in the IDF’s Intelligence Core.

---
The other common game is the "our fiscal quarter/year is about to end and if you sign by X date we'll be able to give you Y discount." Since most of the time enterprises don't accelerate for anyone, especially a small contract, this bluff is pointless and if your sales guy gets called out for bluffing, they'll be disinclined to do business with you in the future. But, on the other hand, it can sometimes work, and work VERY well. One of our suppliers negotiated with us to sign a 3yr, $5m+ deal rather than a 1yr, $1.8m deal simply by telling us we could lock in pricing if we committed to the longer term. Since it's a SAAS service, they'll getting a ton more money up front, at no extra cost to them. ... Or are they... this is the customer I mentioned in a different comment, where we negotiated quarterly instead of annual payments. It's a great example of a BATNA: we got favorable terms that impact our cash flow much less, plus guaranteed pricing for 3 years on a large opex budget item, and they locked us in for 3 more years with guaranteed on schedule quarterly payments. Everyone loves smooth (as opposed to peaky) sales forecasts.