skysight-inc/HackerNews huggingface dataset:
Oh maaaaan the old graylog2 site had probably my /favorite/ branding in all of software. The heading was "Manage your logs in the dark and have lasers going and make it look like you're from space."

https://web.archive.org/web/20130302051347/http://graylog2.o...

Sad to see it's gone all "professional" now :(

The web service had some hilarious bits too. Does it still say "enraging gorillas... | mounting party hats" etc when you log in?
I don't like the shot at Flipboard here. HTML was designed for marking up (hypertext) documents. It's a perfectly fine language for marking up documents. It's a terrible kludge for defining application user interfaces, as anyone who has ever built such an application can attest.

What we're seeing now is a shift to JSON-over-HTTP from HTML-over-HTTP as the protocol of choice for connecting the internet, along with a whole pile of different tools for defining application user interfaces (partially because, up to now, no decent standard exists).
As i'm not too familiar with email as a standard, could you elaborate on how this undermines it?
If you re-installed your OS and didn't use the factory image (which always includes other bloatware), then you were not affected. Or if you installed another OS (Linux, BSD, etc) then you were not affected.

I love my thinkpad... but I've always paved over the factory image the moment I got my new laptop. This is egregious beyond a doubt, but it does not affect me so I'm not worried about buying more of their laptops.
As part of "fixing their mistake" Lenovo just outright lied about the security implications. So what does that tell you about them?
It's only reasonable if you work in a C Pound shop.
If I'm reading you correctly, you're making the argument that Lenovo, the company that was just discovered to have been intentionally shipping a massive security vulnerability on their laptops, is still thought of by you as listening to their users better than Apple, the company that would never in their wildest dreams even remotely consider the idea of putting something like Superfish on their computers, simply because Lenovo changed their minds and stopped shipping the security vulnerability?

"Oh, no, my husband's a good man. He even promised to stop beating me!"
I don't mind that kind of mistakes that much. Well, they don't understand the security implications, maybe they didn't listen to someone when they should have. Yes, sometimes it's a fuckup, but intentions were at least honest. As strongly as I hate scumbag marketers and sales, I strongly (and publicly) applaud those who have good intentions and are aiming for a win-win.

But here, in this particular case, you clearly have bad intentions with a side order of criminal negligence.
This is crazy. Every open protocol starts with a proprietary app. Also, the examples cited make no sense.
Kuhcoon (YC W15) Automates Facebook Ad Campaigns for SMB's
Well the saying goes - if you aren't paying for it, then you are the product, not the consumer.

People using twitter or google or facebook are not clients because they aren't paying. The clients are the people who pay those companies for valuable information and advertising space.
It is amazing that the % of traffic using IPv6 is higher on the weekends... I wonder what is causing that cycle
Hey all founder here,

Advertising on the Internet is a complex, fragmented nightmare. Different paid media channels require different strategies, tools, expectations, and most of all: time.

Our goal at Kuhcoon is to completely automate the creation, management, monitoring, and optimization of every paid media campaign on the Internet. For now we do this with Facebook Ads, but soon our advertisers will be able to automate their entire paid media strategy across every paid channel on the web.

We want to help advertisers of every size spend a few minutes a week telling us how much they want to spend, what their goals and creatives are, and who they plan to target. Our Intelligence System will then automatically segment out their audience during creation, A/B test multiple creatives and messages, pause poor performing ads, create and rotate new ad variants between target segments, and drive the budget into top performing campaigns.

The beauty of this automation is that it requires no extra work from the advertiser. There are no complex rule-based systems. There are no unnecessary bell and whistle features. There is no need to anxiously check campaigns every few hours.

Give us these three simple data points: budget, creative/conversion goal, and target demographic. Kuhcoon will then automatically drive your budget into the top performing ads with the lowest cost per conversion and the highest volume.

Happy to answer any questions!
Perhaps Microsoft could put out a security update to remove any Superfish certificates left. Still after the fact, but better than doing nothing (and leaving these suspicious certs around).
> Furthermore Google appears to be making another old Microsoft error: deprioritizing mobile.

> Just as the evolution of Windows got sluggish once Microsoft had domination of the computer space, so Google looks to be resting on its laurels in mobile with Android. I’m a huge fan of Android 5.0 Lollipop but in hindsight was prioritising ‘Material Design’ (illustrated above) over combating performance, battery life and fragmentation issues really a wise move? After all Android’s native UI is the first thing most handset makers throw out the window.

What? Project Volta focused on Battery Life. They changed the entire runtime to ART for performance. Material design was a much needed solution to coherent UI across Google's properties.

Also remember that Google brought us HTTP/2 when Microsoft and Apple were completely ignoring the web.

GMail is great but they are still bringing Inbox which I find to be a good step towards better Email management. I understand it might now work well for everyone but still, they are trying to evolve it.

And they are focusing on moonshot projects while continuing to improve existing successful products in a meaningful way for exactly the same reason - not to be complacent. How otherwise do you not rest on your laurels?

The article is a bunch of baloney really.
In Praise of the Real Conversation
Show HN: Build and Explore Graphs (OS)
Micro-Benchmarking JAX-RS Applications
They have acknowledged that the issue exists, but not what it actually is.
Upgrade to core HTTP protocol promises speedier, easier web
If the private key/certificate really is the same for every installation of superfish, it would be interesting to investigate whether the the key is shared by all the other customers of the SSL interceptor as well. Their references mention Barracuda Networks and Astrill, for example.
Does Backblaze still forcibly exclude /Applications on my Mac? Because that's a deal breaker.
I like that, mind if I borrow it for future discourse?
You are absolutely right, managers could ask developers for those metrics. It's actually how it's it's done right now, in my experience.

The value I see for developers is to get some objective metrics on a feeling they have. If they think something is inefficient, they should be able to be able experiment with their process. But that needs to be done a bit more objectively.

I think developers could also use this as proof that that the problem is not always with the team but sometimes it may come from management.

The scope creep is a good example of this. A manager keeps adding stuff to the current iteration and the dev team gets swamped. A widget could clearly show the impact of that scope variation.

I see value for the dev team, end-users and management if it's done right.
GE Repurposing RFID Tags as Tiny Explosive Detecting Sensors
I'd argue that so far, that's exactly the point, their response makes it worse.

"We have thoroughly investigated this technology and do not find any evidence to substantiate security concerns" is a laughable statement to have issued.

I can understand the legal reasons for not admitting to the security issues. But outright saying that they can't find anything to suggest they exist indicates a company I wouldn't want to do business with.

To expand on that, in this case I know enough about the subject matter to understand that it's ridiculous to suggest there aren't security concerns. But I can't guarantee this will be the case for other problems. So going forward I'd probably avoid being a customer of a company who I have positive proof is prepared to issue blatantly incorrect statements about security issues.
Thanks for letting me know! Someone created a pull request to fix this, and I have pushed the change live.
Thanks @sfeather for the post here!

But wouldn't you know it, I just found a bug in the iOS version that breaks searches. :facepalm: An update has been uploaded to Apple but it has to go through their review process. The Android version works in our testing.
Looks really great. Has anyone compared this to CloudWatch Logs? When I initially looked at CW Logs, it seemed fairly incomplete compared to Splunk.
Thatse why it is important to know that, statistically, hospice provides better and longer life than aggressive treatment of advanced cancer. Hospice patience enjoy more hours of non-treatment "real life" than agressive-care patients (who spend far more time in hospital beds or surgery instead of outside, with family, Etc)
Scala is cool
But think about it... Suddenly every company can have Search Ad Services as good as Google's.

Also, if you don't like what company X is doing, you just need to find N qualified people, and you can start your own X.
How to remove nasty Superfish adware on your Lenovo PC
Contango is the key element of a futures contract, at least in my opinion. The only real difference between this and, say, a grain future is that the nature of the product allows the farmer to deliver on the immature product than with many futures, and thus the bank has to take less of a risk while giving the same benefits to the farmer of a regular future. There's less fear that something disastrous will happen before the cheese matures because the bank can control that to a great extent, unlike a bad summer, which could ruin a grain harvest, rendering a grain future worthless.
Click bait at its finest
Alibaba founder Jack Ma was rejected from 30 jobs, including KFC
From the article: A123 Systems is a pioneering industrial lithium-ion battery maker, which was backed by a $249 million U.S. government grant. It filed for bankruptcy in 2012 and has been selling off assets.

So, they take taxpayer money, go bankrupt, and then attempt to block former employees from getting jobs?
Show HN: FSCSwipeCell – Makes it easy to build that Inbox clone
This is also very nice: http://www.dhteumeuleu.com/the-momentum-equation
Announcing #SIW15 Startup Showcase Competition and Featured Speakers
Does it run on Linux, last time checked it didn't?
You know, I often feel as though I'm living in a cave, because there are many things out in the world that I'm unaware of, and I often wonder if it's because I use Adblock.

Take Uber, for example. It's apparently a popular ride-sharing service, which I've only heard of recently due to a bunch of articles about them getting into trouble with the law. So how did that service get to be so popular to begin with? How did people first hear of them? I'm guessing that there were lots of banner ads for them all over the web, which I've never seen.

Of course, my curiosity as to what goods and services I might be missing out on is not strong enough to cause me to turn off Adblock, because good lord, the web user experience is horrible without it.
Which tool(s) do you use for Glacier backups?
Like buying nokia?

About the only thing I've seen that is remotely interesting is supporting docker in Azure.
Let's make broad claims about how people in tech marketing must be idiots!

See the funny thing is that I've worked in the PC making business and the parts business (Newegg) and the way this software makes it into the preload is not because of marketing, it's a product or finance decision. Hardware is a low margin business so you get paid to add in some pre-installed software and structure some revenue sharing deals. Lenovo isn't lying when it said that it wasn't financially meaningful; in fact, that's probably why they stopped installing it (not because they did some survey of users, etc.).

I don't think any reasonably competent marketer would ever suggest installing some adware as a "feature" so that they could market it. The fact that people are only finding out about this Superfish now meant that Lenovo and Lenovo marketing didn't advertise it's existence. Can someone show me some marketing material that say's "Lenovo PCs, now with more Superfish to enhance your online shopping experience."?
> a lot of people who understand why "positive growth" is not only wrong, but a load of brainwashed crap

I mean it's sort've a redundant term, but in context (positive growth of Firefox users, something that has been falling for a while now) it makes perfect sense to me. What did you think he was saying?
I've resently made the switch back to Safari from Chrome and I can say that it seems faster and more responsive (which is why I went to chrome in the first place).

Memory usuage is also less and I don't get a bunch of non responding Chrome Worker processes.
I was just browsing some pages on the Lenovo forums where users were complaining about SuperFish (some from January, one updated complaint from today). I refreshed a page and received a message stating that the forums are down for maintenance. Either this is damage control or the forum provider (Lithium?) was ill-provisioned for the current level of traffic.
Yeah, there is a whole host of things that are left unsaid. He does a lot with TDD, and other principles like SOLID, refactoring methodology, and testing patterns that are normally associated with clean code. This topic could easily be expanded into a whole book for beginners. This is just barely scratching the surface, probably more like just wiping the dust off.
It's their job, but sometimes it's easier to argue or prove your point with some clear graphs and objective metrics. I see it as a tool to improve for developers and as an objective view of what really happened.

Sure it helps managers do their jobs, but I think that in some cases we might not even need a manager at all.
Apple told people for almost ten years (both on their website and in their retails stores) that "Macs cannot get viruses." They act like that wasn't a big deal.
It's slowly getting better overall. In Europe, recent laws were passed that forced the mobile ISPs hands and it's now possible in several countries to get service anywhere in the EU as if it were your home country.
This is not a mistake. This is an outright attack on the user, and it is straight-up disingenuous to claim it otherwise.

Anybody can MitM any HTTPS connection coming from these laptops. Anybody! The private key is public knowledge! This is so transcendentally bad and so impossible to implement without understanding the consequences that somebody should go to jail for this.

It is not a "mistake."
you don't need to fake IPs or DNS requests - if you have MITMed their connection then all their traffic flows through your machine and you can present whatever content you desire on any domain.
My biggest pet peeve with Google has always been their slow roll out of non-search and ad products. They could have shook the ISP world with Google Fiber. They carry the clout necessary to get stuff done. Rather they did a slow roll out and that lottery style is less hopeful and more aggravating.

A lot of the products Google has released were either terrible, stupid, or makes you go "WTF?". Google Glass was so worthless that I often wondered why they even bothered. I think Hololens will move the market regardless of its success. It might take MS one or two iterations to get it right, but if MS is willing to become bellicose on its strategy, people will take risks and develop. If Google had pushed out Fiber to more cities in a shorter period of time, I think Google could easily expand its product line beyond search and ads.
Metrics are very hard to apply to engineering, and software development in particular. This has been shown many times. Metrics became all the rage with statistical process control, where you monitor production of widgets. The problem is that engineering is by definition not creating the same thing over and over again - if you think it is, go use Excel to send email, and word for web browsing. There are lots of similar things among different pieces of code, and hence design patterns. But good metrics have proven difficult. Lines of code produced turns out to cause people to add redundant comments, and if you exclude comments it causes other things. Closed bugs/issues is better, but to be really effective you need to identify how new bugs are introduced. Some people create as many as they close and that would look good if you monitor closures. Other things have been tried with varying success. The core problem is that engineering is not a well defined process and never will be.

Another way to look at is this: none of the marketing metrics he mentions have anything to do with peoples performance. Click rates are a measure of the effectiveness of a marketing strategy, not necessarily the effectiveness of a person in marketing. You use that data to drive decisions about how much to spend on different marketing activities. The equivalent for engineering is to determine how much to spend on each developer. In other words, who to keep and whom to fire, and that shouldn't be a really dynamic process. Even if you had good metrics on development, what knob are you going to turn to cause a change in those metrics?
This is my first CocoaPods pod (I just got into iOS a few months ago) – all feedback appreciated!

This library gives you a swipeable table view cell which unlike the others out there just focuses on the physics of swiping and lets you deal with the views yourself. This is useful for cases when you want the entire cell to become an options bar, or if you want to reimplement the Google Inbox UI (which you can see in the example project).
So far I like crashplan for remote backups on my personal machines (a few Ubuntu and one Windows machine). I did a little research and it fits my needs.

Initially looked at Backblaze and saw Mac and Windows only support so that was a no-go.
Every department could be run by a separate company. This also ensures quality at the department level.

These companies could then be hired by the hospital itself.
A free compiler and dev tools? Revolutionary.

Or, completely the norm in Ruby, Python, Java... um, every other language.

Did they OSS the IDE?
It's not a problem until it's a problem.

That is: At least 90% of code is not CPU-limited. It's fast enough. So, as an initial approach, ignoring performance is fine.

The problem is that, if and when you run into real performance issues, you need to know some tools for dealing with them. If this book doesn't teach you those, well... it's a language introduction. It's not an advanced text. Maybe it would be the better for a warning or two, a paragraph here or there, but performance is (quite properly) not the point for the book.
True, and that's one of the reasons futures contracts spread beyond the agricultural sector, where they originated. The key difference with agriculture is that it's really easy to see how futures work--it's the model sector for futures--whereas in other sectors, they can be somewhat more nebulous.
What questions to ask when hiring a JavaScript Frameworks Architect
Not sure if I agree with this (Linus Pauling comes to mind), but speaking anecdotally, I once had breakfast with a recent winner of a MacArthur grant (the so-called Genius Grant) expecting to be the recipient of untold wisdom. Instead he gave me a blow by blow explanation of the delayed burial of William the Conqueror, his pet topic. Seemingly unconcerned that describing a dead king's corpse exploding wasn't great breakfast conversation.
Apple telling users not to hold the phone the wrong way is different in kind and several leagues of degree from "we are enabling anyone, ever, to MitM your connection to any website."

I believe you are raising this point in good faith, but it verges on disingenuous to compare them.
There's advertising, and then there's advertising. Maybe a hundred years ago ads were about product discovery, they are not about that anymore. For most of the needs we have there are already products so you can just discover the product categories via well... interaction with other people. A new class of product gets often gets its spread organically, or at least via product-discovery-ads.

So for example, you didn't learn about the existence of cameras via ads - you probably saw your parents or friends shooting photos when you were a child. And you know that the ads of cameras you see on the web are offering subpar products, and you're better off searching for a camera that fulfills your needs yourself.

Another example, of a relatively new category - iBeacons. You probably read about them on the Internet, or maybe in a magazine like The Economist. Sure, maybe you read an infomercial, but what you've learend is that there is this new category of products, and that they can help you make phones more context-aware. But if you're thinking about what beacons to buy, you are again better off researching yourself and consciously ignoring anything that looks like an ad.
Well over $10 million? http://www.cnet.com/news/security-firm-rsa-took-millions-fro...
I would agree with you if this were only about adware. The problem is that the adware opens a massive security hole that is exploitable by everybody.

The Lenovo adware wants to hijack SSL connections. To do so, it installs its own CA, and the private key for that CA can be (and has been) extracted. This means that if you own such a laptop and access your bank's SSL website from a random coffee shop, anybody could MitM you, since they can use the publically available "private" key of the rogue CA to impersonate your bank.

Smart phones enable turn-key surveillance-based dictatorships beyond anything we've ever seen in the west, but unlike this Lenovo thing, it is not an immediate threat. Hence people react differently to it.
but what if you're a windows user? is the backup image on the drive adware free?
I think what I'm going to do is record the first hour or so of setting up a new project today, then post about it on the reddit site, G+, and here.

I'll watch the views. If people are interested, I'll post some more.

What I can't decide on is whether or not to do it live or recorded. This first part I'm going to record -- much more control that way. I would imagine doing this live would involve a lot of looking at me stare blankly at the screen <g>