skysight-inc/HackerNews huggingface dataset:
The comments here trying to rebut every argument against DVCS are missing the point. The point is not that DVCS sucks and we should all go back to SVN - it's that since DVCS is fashionable, it is seen as a solution to every problem.

Eventually this will wear off, and we will go back to using the simplest tool that gets the job done. For some jobs this will be DVCS, for others it won't.
That comment is really not reassuring.
I'm happy that you take privacy and security very seriously, that's great to hear.
However industry best practices is a little vague and 'to ensure that your computer is not compromised in any way' makes it sound like you want to do the job even the best antiviruses have trouble doing.

Furthermore I'd argue that if someone steals your machine from your house/car/etc, getting the keys to any remote machine should be trivial just by looking at the stored passwords and configuration.

But maybe I misunderstood what you were saying, sorry if that's the case.
This is amazing...
I have thought about the same tactic if you are selling your house, and the potential buyer is bringing an inspector.

"Break" three things in your house, e.g., remove the cover from a bathroom exhaust fan, loosen a faucet so that it rattles, and remove all of the light bulbs from an overhead fixture. The inspector will find these, the buyers will require that they be fixed, and it will be easy for you to do so.

If you don't do this, the inspector will find three other things.

Of course this would only work if your house doesn't need any significant work done in the first place.
In other words, explain the "what" and not the "how". I have always felt that this is a really key skill to have and even though it seems easy to do, it never is.
It changes the surface feel of the meat.

The concept shouldn't be too puzzling. There's a whole class of cooking (molecular gastronomy) entirely based on taking this to the extreme.
Glimmer: a new rendering engine for Ember
Setting up a build system can be a bitch. Not every developer needs to be able to build every obscure module of all your companies tooling. A .net developer shouldn't have to rebuild c++ boost just because he relies on a small native dll.

In some cases the tooling of one developer can even conflict with the one of another, one requires python 2.7 to be in your PATH while the other requires 3.3, etc.

I fully agree that it should be easy to set up but the reality is different, especially when you deal with legacy, rely on third party libraries or build open source projects from source.
I think he forgot "All this is a dream." by Michael Faraday
Huh, teachers. I had one teaching computer architecture who treated Linda Null's book as a Holy Bible of the course. She liked to correct students by saying "you're wrong, you haven't read Linda Null, go read the book". It was fine until the point when she disagreed with what someone wrote on the test - and when that person has pointed out that it's straight from the book, she shrugged and said, "well, Linda Null is wrong". sigh
Ember's Glimmer Engine
Interesting! I just submitted my ShowHN which includes a version of OpenSSL compiled to Javascript:

https://www.minaterm.com/

It uses it as part of libssh2 to implement a ssh client.
"Touches files it doesn't have to" is not a security hole.
Zawinsky's classic quote "Some people, when confronted with a problem, think "I know, I'll use regular expressions." Now they have two problems.", was apparently based on military humor where the serviceman thinks to ask an officer...

http://regex.info/blog/2006-09-15/247
Where can I buy Bulletproof SSL and TLS?
The variation on this that I'm familiar with relies on our perception of three as a magic number for choices: two options doesn't feel like a real choice, four feels like too many choices, but three is perfect. So when you're presenting design concepts, you show three: the one you want the client to pick, another that's very similar to the one you want the client to pick but with some obvious glitch in it, and a third that's so atrociously ugly nobody would choose it. The client goes for the one you want them to go for every time.
Something like The Flavor Bible [0] but in a database would be really nice.

[0] http://www.amazon.com/dp/0316118400/?tag=mh0b-20&hvadid=3521...
yo dawg I heard you need a computer to use your computer. Jokes aside, tablets/phones are carried with us everywhere and for on the go can accomplish most of what one may do when they are away from a dedicated pc. I can ssh into any one of my computers and do whatever is needed from my phone for the most part.

I'm really curious as to what the main use case would be ? I think this would make big strides in saving licensing costs if it were possible for certain cases where a shared computer may make sense.
Pro license doesn't give you source access, that's negotiated in their enterprise license, which had always been the case. Idgo so far as to say if you're not modifying the source having it available doesn't add much for you.
What the JavaScript?
The proxy will rely on distinction between GET and POST to know whether to cache.

More importantly, your enterprise Load Balancer with timeout and failover configured will feel free to repeat a GET request internally to a different server when the first server takes too long to respond. For a POST, it will instead throw an error to a user and perhaps trigger internal alert.

And if you think that's not a big deal, wait until your bank does a double international money transfer because their trigger call was implemented accidentally as a GET request and the network latency was bad. And hope, just hope, that they are not running 10 different servers behind the firewall and therefore falling over 10-1 times.... (true horror story from my tech support days).
We all know that the reason Google is running face recognition and photo recognition software on your all your files is to cross reference it with databases of paedophilia and terrorism !
If oil prices fall, fracking is too costly to be economical.

http://static.cdn-seekingalpha.com/uploads/2014/10/695520_14...
Actually, the startup[0] I work for has found a way to quantify subjective flavor space. We use data science, machine learning, and advanced algorithms to analyze human sensory. We're focused on the craft beverage market as of right now, mainly in quality control and flavor profiling.

[0] https://www.gastrograph.com
VNC between two machines 2 feet apart, connected through gigabit ethernet, has noticeable latency. I'll be impressed if Paperspace doesn't.
Git snapped into focus and I've had little problems since I was told it's simple a DAG, and all the branch/tag/etc. stuff are just labels pointing to a part of the graph. After that, I've seriously never been in a situation where I was totally at a loss as to what was going on.

Also, even in SF, Internet connectivity is often flaky enough that requiring a network roundtrip for anything to deal with my files is a non-starter. (Right now, downtown SF, and we only have a single Internet provider option. It goes to ~100% packet loss about 20 times a day. We get about 10-15Mbps out to the wider Internet (but 10x more to servers nearby - probably a shitty ISP using HE or something). So it's really quite a negative to need connectivity to do things.
There are pretty good arguments that the goals of superintelligent AI will not, by default, be aligned with human values unless we specifically work to make them so. The Russell piece I linked makes (a very short version of) this argument, "A system that is optimizing a function of n variables, where the objective depends on a subset of size k<n, will often set the remaining unconstrained variables to extreme values...". Nick Bostrom and others build this out in much greater detail.

There are lots of reasons to be skeptical of government regulation. It would probably be nicer if industry can self-regulate and allow governments to stick to the positive role of funding research into the technical questions of building provably controllable/friendly decision-theoretic systems. But a lot of people are claiming that the unified consensus of AI experts is "there's no problem here at all", and I think it's important to push back against that.
New job posted, we're looking for a Partner Engineer:
http://citymapper.workable.com/jobs/44898
It doesn't seem to respond to anything I ask...

"What's your name?"

"What color is the sky?"

"Who am I?"

"Why should I ask you questions?"

"Where is New York?

All I get is "gathering response" then nothing.
It'll only work if your buyer hires a terrible home inspector.

The last time I bought a house, the inspector worked for hours. In the end, I got a 14-page write-up, plus accompanying photos of any major defects and/or code violations.
Another effort getting Android Wear and iOS connected
"spurious exactitude" is the phrase you might be looking for :)
I will appreciate bold predictions about the future that may turn out to be wrong over today's writings where it's all about super safe post hoc analysis after the fact. Things like "Why X succeeded!" or "X failed because of these 5 reasons" don't impressive me one bit. I wish more writers wrote about bold predictions and explain why you predict that way.
That's not a hard dependency, it's a sensible default that you should be overriding if you're running composer install as part of your deployment process instead of including composer's vendor directory in your repo. Documentation: https://getcomposer.org/doc/05-repositories.md
Magic Mike XXL – BURP MIX
> As long as you explain why the term is wrong or sub-optimal and what it should be called instead

I think we're generally in agreement – I was trying to keep the focus on things which can be reasonably be considered objectively wrong and keeping the degree of wrongness in mind when deciding how to handle it. If you're on the low end of that scale, it's probably not a good use for everyone's time in a code-review session unless it happens a lot.
Does Paperspace Inc. have access to the unencrypted data? i.e. does user data sit unencrypted on Paperspace's servers?
CloudMine Raises $5M Series A
Instant Performance Profiling for Android Games
Intercom is now real-time
> Serious question: Do you think this is a conscious choice made by those in the tech field?

I personally find it to be similar to racism:

- Some are willfully ignorant

- Some don't care and want to keep the status quo

- Some don't care but try to appear to care for social reasons

- Some care, but are quiet for social reasons

- Some would care if they understood

- plus many others, but I think the above are most popular.
I like it but still want a database cluster behind it. :)
I am increasingly getting irritated with REST for our app. It takes too much thought to figure out the "correct RESTful approach" when building out an API endpoint. And then again, there are no right answers. And all the JSON serialization/de-serialization logic, for every single endpoint. Too. Much. Work.

I'm wondering why Thrift/Proto-buffers aren't popular? Even for browser-based JS clients. What're the pitfalls?
This brings up the other problem I have with adding ducks (yes, I'm anti-duck). Humans tend to fixate on the obvious - the more obvious problems you have, the more we'll fixate on them. That's great if people are just meddling, and you want to keep them occupied, but it's horrible if there might actually be flaws of consequence in your work. Given that we often tend to think we're more competent than we actually are, trying to game the review process may keep real, serious problems from being fixed.

With my work, a lot of reviewers do love to hear themselves talk, but every so often they'll come back at you with really good, insightful stuff that I totally missed. I don't dare game them because I don't want to be putting out garbage.

Except for CH. We totally owe her a duck.
Anexita TRATAMENTE NATURISTE
This Startup Is Building a Model for the First High-Tech Cricket Farm
Like every other technology, AI has risks and benefits. The main issue here, is that we are letting fear dominate the discussion, and that fear is not based on any supporting facts or evidence.

Meanwhile, we are completely missing the discussion we need to have about the realistic, short and medium-term dangers associated with the development of AI. Intelligent automation is about to disrupt economic production and existing power balances, much like software has done not too long ago, with significant social consequences. This is what we need to be talking about, and preparing for. We need to plan for a smooth transition to a post-AI world.

Regulating AI for fear that it may take over makes about as much sense as outlawing space travel for fear of aliens. Can we start having a sane discussion about AI now?
It can answer every single of those questions, but there was a glitch that broke it.

I just checked, and you're right, there was a modification in the code that I made that broke the bot just now.

The bug is fixed now, so feel free to try it again.

Thank you for testing and checking it out.
By extension, asking for a change in itself is presumptuous, so coming back with the same product is returning the favor.
For me, something would appear, then quickly disappear. Couldn't really tell if it was a response or a "loading" screen.

Nonetheless, I'm rather impressed coming from someone your age.

Edit: had some mild success asking about the weather. "You're asking what's the weather? I can't put my finger on it, but I'm pretty sure it's ' face and withstand with courage'."
I doubt they just said screw it lets release. This week is GDC so both companies were likely to make large announcements during GDC IT just so happens that epic didn't wait for their keynote, meaning it's more like unreal said "screw it lets just go for free"
Being able to tell the difference between the tiniest of arbitrary changes doesn't mean it's better. The anecdote could equally show how he's pointlessly stubborn.

All the praise in your comment only really works if the change is a clear improvement.
I'm glad someone is challenging this incredibly glib argument in support of taking away freedoms and smothering innovation under regulation, because of poorly-defined fears that experts mostly discount.

Sam's proposal for regulation depends on a prediction too. It is no less a prediction than those who disagree with him. Not every technology we can dream up is destined to come true. Is strong, hostile AI the same kind of tech as warp drives and teleporters and flying cars? Who can say? So to me this post argues against Sam's goal of regulations, because why should we take away freedoms for the sake of such a dubious prediction?
> I went back and checked, it was actually an nVidia guy who said that.

Hmm, makes sense. But then NVidia really loves OpenGL.
That's misleading. The cost to extract by fracking dropped pretty much because fracking was invented. In fact Fracking is a pretty expensive way to extract oil; so expensive that the recent falls in the oil price have made it uneconomical to develop new wells and has caused severe financial difficulty in the US fracking industry.

The peak oil fuss was certainly premature, we'll be extracting oil for many decades to come, but it is still a finite resource and new sources of production, including fracking, are proving more and more expensive to develop.
Great article. Too bad he felt he needed to add the dig about Nadia needing "handholding."
I avoid it as much as I possibly can. I don't know what more to tell you. I never said I'm proprietary code-free, but just that I avoid it at all costs.

Hell, I've recently been forced to install proprietary code to work with government generated data. Such a mess.
honeybadger. doesn't seem like the scope of gsoc.
"Users install program that touches files the users might not want it to" is a security hole. The unknown is whether Dropbox comes with malware which takes advantage of that security hole.
You need to get a Meteor category in there :)
Mining and Mapping the Production of Space: A View of the World from Houston
That conversation has been started with the Ghost guys, so we'll definitely build on this cookbook over time. I think it's mostly due knex.js[1] not supporting nosql solutions, ATM. There are tickets open for that though, so it shouldn't be too long.

[1] http://knexjs.org/
> People right on HN spend their time arguing over what is restful and what isn't ,because vague "semantics".

The defined semantics of HTTP/1.1 methods (REST is a style, but HTTP/1.1 is a standard) are not vague.

> And to be frank, if you're not using HATEOAS , there is very little difference between a api with beautiful urls and a few headers and rpc.

If you aren't using HATEOAS, you aren't using REST. That doesn't necessarily mean that it is indistinguishable from RPC.

> The original spec is brilliant yet way to vague to be useful.

What original spec are you talking about?

> RPC isn't HTTP,

Neither is REST, though HTTP is itself an example of REST and a protocol which is fairly convenient for use in REST services.

> which is totally handy in the context of micro-services as one can implement RPC over any protocol. that's not the case for Rest...

> On the contrary, it is rather central to the point of the REST architectural style that you can implement it over any protocol (or, given hypertext formats which support identification of different protocols, over any combination of protocols simultaneously.)

From the creator of REST [0]:

A REST API should not be dependent on any single communication protocol, though its successful mapping to a given protocol may be dependent on the availability of metadata, choice of methods, etc. In general, any protocol element that uses a URI for identification must allow any URI scheme to be used for the sake of that identification. [Failure here implies that identification is not separated from interaction.]

[0] http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hyperte...
I've been interested in full operating systems implemented /in/ the browser for a while (rather than access remotely).

The Linux in Javascript demo seemed like a neat demo:

http://bellard.org/jslinux/

But I think it would be neat to create an in browser operating system that forwards traffic via a Websockets proxy.

That's partly what prompted me to create minaterm:

https://news.ycombinator.com/item?id=9137496 (https://www.minaterm.com).

Which is a full ssh client implemented in Javascript. It creates complete ssh sessions in the browser and then uses a TCP proxy on the server to connect to the target server.

This was kind of a tech demo as a first step to implementing a complete OS in the browser. I can see that you could have encrypted drive images that the browser would download and launch (based on a user supplied password which never hits the server). It seems like a neat idea, though I'm not exactly sure what the practical applications are! :)
ML Pitfalls: Measuring Performance
You can integrate Unity with Perforce just fine. We started with the Asset Server, and then migrated over to Perforce at the last place I worked for. It did take a little extra effort to get it set up, but once it was, it worked great.
I just checked, and you're right, there was a modification in the code that I made that broke the bot just now.
The bug is fixed now, so feel free to try it again.
Thank you for testing and checking it out.
I couldn't be fussed to reverse it again, so instead used Rohitab Batra's excellent API Monitor [1] to figure out what's really going on.

Firstly to address files being accessed outside of Dropbox - this is true, but literally all it does is read the file attributes: https://i.imgur.com/TADvHp1.png. Moving up the call stack and disassembling the calling function, we can see that it's part of the Python runtime: https://i.imgur.com/1TBong4.png (presumably python27_lockdown.dll is Dropbox's custom hardened copy). A bit later on it does a comparison to ".bat", which identifies it as the function win32_stat() in Modules/posixmodule.c - the ensuing behaviour of this function corresponds to QueryBasicInformation as shown on the original author's Process Monitor dump. Why the Dropbox client calls stat() on files outside of the Dropbox folder (but on the same drive) is not clear, but, as the article above also mentions, that is all it does, so no problem there.

Secondly, the original author also posted evidence of Dropbox accessing various shell folders [2] - Desktop, Documents, Music, Pictures, and so on. This is true but again it's a side effect of an innocent function call, this time SHGetFolderPathW(): https://i.imgur.com/uXN31BI.png. It's actually SHELL32.DLL that is responsible for opening the folder and querying its attributes, not the Dropbox client: https://i.imgur.com/YCyTwNe.png.

Without reversing the entire program we can't say for sure that Dropbox isn't siphoning out data in some other sneakier way, but the accusations of data theft from these file events are simply not true.

[1] https://www.rohitab.com/apimonitor

[2] https://pbs.twimg.com/media/B_Kv4i3U8AEZLLt.png:large
Ask HN: Why should I learn OS design?
I'm considering diving into learning Operating System design, because I think it looks interesting and it would bridge a gap in my knowledge of how a computer works, full stack, but I'm looking for more practical applications too.

I know understanding the design will help me as a coder to make better design decisions about a program I'm writing, but what else do you think learning about the architecture of operating systems would help with?

Thanks!
He didn't say external developers wouldn't need any documentation to consume a REST API. The implication made was that developers are more accustomed to REST, hence REST is easier to consume. Speaking for myself, I've found this to be true.
I would really be interested in trying the experience before I pay, as well as understanding what the capabilities of the machine are
Isn't this just... sprawl? Sprawl with good infrastructure?
When clients give you tough love  listen
"Your attitude sucks" is not an ad hominem argument, "Your argument is incorrect because your attitude sucks" is.

The first is an observation and has no bearing on the facts.
I think the whole point the article is trying to make is that REST isn't really a step forward from RPC. It just adds an overly restrictive taxonomy (i.e. in a complex practical application, you're probably going to run into a problem that doesn't fit the REST model well), and doesn't actually solve any real problems.
Get Your Customers to Say “I DO”
Snowden in talks on returning home: lawyer
He also mentioned using a simple shared drive. It would have been difficult to know which of these solutions was the right level of complexity and capability without knowing more context (a point which he seemed to make clear).
A thought on readability:

It would be nice if there were either (a) two newlines between each quote or (b) only one newline between the quote and attribution.
I took the post to which I originally replied to be more concerned about the proprietary nature of the driver, rather than the size. The BIOS is a type of simplistic set of drivers, even a basic operating system, in essence. My point was that the comparison to CPUs with regards to not needing proprietary drivers was not apt, as there are certainly several layers of proprietary code in between you and your CPU, for most systems.
I'm sorry to hear this. For the reasons of running a proprietary version please see my other answer in this thread https://news.ycombinator.com/item?id=9139559

We have the CLA to ensure this we're on the right side of copyright law. But your article looks interesting and I'll read it.

Great to hear you plan to run GitLab CE, we hope you'll enjoy it.
Idiotically cynical? You're getting oddly personal over this. A 'sense of aesthetics' doesn't mean you know the objectively right size to fit the very very different hand sizes of a million people down to the sub-millimeter level.