skysight-inc/HackerNews huggingface dataset:
>1. It's reliable/durable

I would personally contest that. I've seen MySQL corrupt tables before and the insanely unhelpful defaults which make MySQL accept and alter invalid data really don't strike me as neither reliable nor durable.

Your other points are valid reasons for sticking with MySQL though. If you're happy and the tool does what you need, that's fine.

But once you've seen what you can do as you gain access to the more advanced SQL features and once you've burned by MySQL not starting up because of data corruption, then you might want to investigate other options.

Postgres happens to be a very good alternative with good tools, predictable performance, very advanced SQL features, but also really good reliability and durability.
I'm sorry to have offended the Bay Area Software Overlords?
So according to the WP definition it's mostly about "swift decisionmaking" in contrast to consensus seeking in Swedish culture. But the Linux process doesn't really seem to be about swift decisions, it's against extensive consensus seeking for other reasons.

The WP article isn't helped by the longest section dismissing itself as tangential in the first sentence...
Did t61 even get acquired? They seemed to just toss their users for fun.
That's some panoply of configurations! It's a pity the most common configuration is the worst of them.
I agree with most of this, however, I think rote memorization does have a role in education. For example, one of the current difficulties I'm facing as I get into more advanced mathematics is gaps in my knowledge of calculus and manipulating sums. I know all the basics well, but when it comes to integrating a difficult integral or finding the closed form of a tricky sum I have trouble. And this is because my schooling focused too much on concepts and not as much on the mechanical operations that mathematics requires. My lack of facility with these operations has made learning theoretical probability (which involves a lot of analysis) more difficulty than necessary.

You need both a repertoire of mechanical skills (typically acquired through memorization and drilling) and a conceptual understanding of what you're doing in order to do mathematics properly.

That said, I agree with the substance of the article, however.
I have a similar opinion. Not to mention I have a many clients/projects already built on MySql databases. Moving to a different DB is expensive and unnecessary.
How to handle a client comparing your hourly rate to cheap overseas development
Yeah, here's a company saying an amusement park was using their RFID wristbands in 2006:

http://www.wristband-rfid.com/en/amusement_parks.html

Here's a 2004 article about using them in Legoland:

http://www.networkworld.com/article/2332669/network-security...
2015 Hackaday Prize: Calling Hackers to Fix the World
Sounds like a good way to get people to spend more money, that's for sure.
Redshift is great for some use cases, and completely unsuitable for others. If testing the waters with Postgres is your objective, Redshift will not be a good representation.
The difference is that when the intelligence community discovers a hole in US-produced software, they will keep it to themselves to exploit the computers of individuals around the world in various operations of dubious value and/or legality.

At DEFCON, exploits are publicized so that software vendors and algorithm developers are motivated to strengthen the security of what they produce so that the software that all of use is more effective against attackers.
There's one very important reason that I always return to MySQL:

- If something goes wrong at 3am, I know how to fix it.

Whether it's performance, server setup, or weird edge cases, I have it covered.

This being the sole reason, does anyone have any "when you're in trouble" guides for Postgres or others?
I am talking about the Luxury market.

At that price range you are competing with luxury watches, which will still retain their value 10, 20, 50 years from now.

But with this smartwatch you're investing 10,000 usd in something that will be outperformed and obsoleted by a 350 usd watch in 2, maybe 3 years and reach end-of-Life soon afterwards. Are there people who are still willing to pay for such a device. Sure(Think the Vertu crowd). Are they a big enough market to be worth the trouble. I am not so sure.
It's perhaps developers fault, but my company recently adapted node.js and usually when you rewrite an app it is much better than the older one, not in our case, the app crashes on average every 30min in production, looks like express comes with a monitor that restarts the app which implies that this happens often enough to warrant such program. We also had situation when the monitor just died and nothing was there to restart it.
Ask HN: Spam email protection apps/SaaS for Linux server? (Free preferred)
Hello,

I have a CentOS 6.x server running EXIM w/ SpamAssassin and a few RBLs setup, however, spam is just out of control for incoming email.

I'm using http://spamdrain.net for a few accounts that I have access to, however, it's not nearly as effective.

Does anyone have any suggestions? Unfortunately migrating to Google Apps isn't an option as we do not have the ability to move every email address on the entire domain.

Thanks!
WatchSim
> The robust response generated by the vaccine, as well as its novel mechanism, has the researchers undertaking additional experiments in mice to determine whether it can be used to treat individuals already infected by HSV-1 and HSV-2.
> Or, why is the NSA not getting to grads early on, helping their career, while having them really be agents all along?

It would be naive to think that they (and other agencies around the world) aren't already doing this.
> Maybe they are prepping to do something on their own.

As listed above, it's probably because they're already in the middle of their own[0] (assuming that they will appeal, which I'd imagine is almost certain assuming they can fund it).

The EFF has been fighting this battle long before the Snowden revelations, so it's certainly not for lack of interest that they're not a claimant in the Wikimedia case.

[0] https://www.eff.org/deeplinks/2015/02/jewel-v-nsa-making-sen...
How stable is it? When is it supposed to be used in production?
Postgres' ecosystem is a joke compared to mysql's.
Just try finding a:

- mysql-to-postgres import tool

- mysql workbench for postgres (pgadmin is terrible)

- phpmyadmin replacement for postgres (phpPgAdmin is terrible)
Why China? $10k is a very normal price for high-end watches world over. It's only a question of whether Apple has the same appeal as say, Omega or Rolex- two other watch-brands that sell in that price-range.
iOS at Scale
Most of the principals at Eazel the company that originally developed Nautilus were involved in the early development of the Macintosh.
NETMF 4.4 Beta out on GitHub
I think she misinterpreted the Code of Conflict as she also tweeted:

> Am I alone in reading the second para of [the Code of Conflict] … as deeply fucked up? YOUR FEELINGS ARE UNACCEPTABLE. Wat.

The second paragraph begins with:

> If however, anyone feels personally abused, threatened, or otherwise uncomfortable due to this process, that is not acceptable.

She seems to have understood it to mean it is unacceptable that you should feel uncomfortable and your feelings are unacceptable. I interpreted that is unacceptable that anyone should be made to feel uncomfortable by the review process which makes slightly more sense if one applies the principle of charity.
Part of the criticism in that Twitter thread seems to be based on a deliberate misreading of the following passage,

> If however, anyone feels personally abused, threatened, or otherwise uncomfortable due to this process, that is not acceptable.

taking it to mean that people feeling abused is not acceptable, rather than abusing people being not acceptable. This deliberate misreading was couched in terms of unearthing some sort of Freudian slip.

Seems rather disingenuous to me.
There are two issues with this statement.

Firstly - you compare securing against the NSA to securing against "hackers". This massively underestimates the reach and resources of the NSA (or any nation-state actor).
You can, to a point, keep out all but the most determined and skilled individuals.
You almost certainly cannot keep out the NSA if they really want to target you. Even a physical airgap may not be enough (see: stuxnet).

Your example mentioned HTTPS specifically - how does this help if they can force/compromise the host to give up their TLS keys and MiTM your connection?

Secondly - all this does is encrypt the contents of your communication - it doesn't hide who you are, it doesn't hide who you're talking to, and other metadata besides this (yes, I know metadata is at this point a painfully overused term - sadly I can't think of a good synonym right now).
You significantly undervalue how important it is to hide this information from an adversary.

Right now, if a major nation state targets you specifically, you have almost no chance. You'd need perfect operational security to anonymise yourself, encryption that can't be broken by forcing a local entity to surrender the key, and to implement this every time without making a mistake. Some people have managed this, but not very many.

If you're just looking to avoid dragnet surveillance, you're in a bad place too. The information we have suggests that it's the metadata, not the content of the communications, that is stored - and very little of that is hidden by using HTTPS rather than HTTP.

None of that should suggest that HTTPS isn't worthwhile - it very much is. And there's little reason not use use HTTPS everywhere these days. But it won't on it's own protect you very much from the NSA - that's why court cases like this are being raised (though I doubt it'll achieve anything in practice).
Machine learning and magic
Only adults have charging privileges and even then you need a PIN (that the cardholder does not need to share).
Wikimedia's evidence that it was targeted was due to a leaked slide. What's going to stop the court from dismissing that key piece of evidence due to it being a "state secret"/"matter of national security" that was not meant to be publicly disclosed?
How Remote Working Makes Startups Better
Under your point (3), it is important to note that this has been a major focus area of MySQL. I have two comments to make on it:

1) Peak throughput is not as important as consistent throughput (i.e. less variance between response times). This makes it a great fit for front-facing web apps, and we have Percona/Facebook/Google in particular to thank for their contributions in improving this.

2) Often users do not get the performance they are entitled to, because they lack the visibility. MySQL 5.6 and above (and particularly mysql 5.7) have performance_schema to be able to track down and diagnose issues. Memory/transactions/stages/replication/prepared statements/statements/mutexes.. these things are all instrumented by Performance schema. Just today I saw a new query written to show a breakdown of latency per schema/per statement type: http://dba.stackexchange.com/questions/94723/getting-databas...
Link between autism genes and higher intelligence, study suggests
Microservices. The good, the bad and the ugly
REVERSING FEMALE HAIR LOSS
I've been saying exactly this for quite a while. It is so incredibly stupid to replace the ads when the back button is hit. The probability that I hit the back button to click one of the ads is quite high, and the probability that I'll want to click one of the new ads that replace the one I was trying to get to is virtually zero.
It definitely bugs me that the entire submission was a link to Wikipedia and...that's it. No "Ask HN" about this historic console, and not a link to a blog post about how cool it was to finally play this mythical home system or on the technical challenges it overcame. Just..."here's a wikipedia article".
>Google is simply too good at matching viewers to advertising that is valuable to them (and therefore the publisher).

This is so wrong, I don't even know where to start. Google is very good at managing ad inventory and putting ads from said inventory in front of people. What they aren't good at (or even care about being good at) is getting the right inventory mix for the right site. That requires focused sales teams.

I'm not going to go down the native advertising rabbit hole because I don't have time ro have the conversation it needs to have, but I will say that whatever you think it is, it's both better and worse than that. And everyone who is successful in publishing does it to some extent, maybe just by a different name. And it's not new. It's been happening since the beginning of mass media. I can understand not liking advertorials or content that is unclear, but there are not plenty of people making native advertising that doesn't interfere with editorial missions.

>Running your own advertising is hard to be successful with, unless you can convince your advertiser to really overpay.

Again, this is not true. For a small publisher, running your ads is probably not worth the tech or sales investment. If you're the scale of a GigaOm, you need to take control of your ad game yourself. You can supplement sith ad networks, but the real money comes from doing it yourself. And with good ad ops, you can also provide a way better experience for the ad buyer.

Again, we're not talking about small one person publishers. We're talking t about sites that do millions of uniques and have full staff. If you're doing that and not maintaininf tour own sales staff, you're leaving money on the table, incompetent, or you have a product no one wants. Or all three.
> Am I alone in reading the second para of https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.... … as deeply fucked up? YOUR FEELINGS ARE UNACCEPTABLE. Wat.

The document's second paragraph is:

> If however, anyone feels personally abused [..] , that is not acceptable
> If so, please contact [..] work to resolve the issue[..]

I had to backtrack a couple of times before parsing the sentence, but it's absolutely clear to me that it means that it's the abuse that it's not acceptable, not the feeling of being abused! If not so, what is the Technical Advisory Board supposed to do?
To fix you so you don't feel being abused?

It seems to me that it takes quite a bit of prejudice to misparse someones sentences like that. Or is this some kind of joke I don't get?
In the context of this post (MySQL 5.7) it does not accept invalid data :) The default sql mode has changed.
The RFID chip / GPS locator inside matches up against data for the camera operators. I imagine when a family and camera operators data "matches" that indicates they stood still for a picture and I'm sure DIsney tries to find every opportunity like that to display those images to the visitors as a chance for them to purchase memories they hardly realized they were making during a picture they didn't realize they were taking.

All in all I think it's really really amazing what they are capable of doing.
Improvements to DSC v1
Don't confuse a lifestyle business that people do as a labor of love with a successful full media organization that can afford to pay people salaries and benefits. Not diminishing LWN, but it's not the same as a Dr. Dobb's or GigaOm.

Also, most successful smaller media publishers who are not purely ad-based have diversified into other areas.TidBITS is a smaller operation and can pay some salaries, but they supplement with their fantastic book business too. They diversify and have built what they can sustain
If you're not going to do it professionally, at least use one of these:

http://smile.amazon.com/GE-3-Wire-Receptacle-Tester-50542/dp...

(that's US wiring but surely there's a UK equivalent)
Corruption issues are fairly true with MyISAM engine. InnoDB did a lot to help reliability of tables (it can auto-correct them in cases where you had a hard poweroff or other related issues). No more needing to manually run table scans to detect corruption.

What "advanced SQL features" do other DB products have that you cannot do with MySQL?
Isn't this more like "professors _can have_ tons of leadership experience"? Just because someone is "managing" or a "manager" doesn't mean they do a good job at it or know what they're doing.
Productivity Is Deeply Personal: Don't Listen to Anyone Else
Why You Need Case Studies to Have Clients Lining Up
5.7.6 is what we call a "Development Milestone Release", and is stated to be of approximately release candidate quality.

We do not have a release date, but we're committed to a 2-3 year release cycle, with 5.6 being the last release in Feb 2013.
There is a good chance that Cook, like anyone else is vulnerable to other charges; and in case he is a saint, they would just make something up. It won't be 'brave champion of freedom Tim Cook takes a principled stand and is persecuted by the NSA for it.' It would be either something like what happened to Joseph Naccio, or worse.
7 Tips to Follow When You Use a VPN
Orient Technologies Hires Former MongoDB Director Luca Olivari as President
Apple laptops have their share of woes (see the video issues on earlier Macbook Pros).

But, whatever the reason, Apple hardware tend to hold on to its value longer, without doubt.

I recently sold my 2010 13' Macbook Air, dented and with a cracked screen a for 300$ on ebay (and I expected more based on similar auctions), about 1/4 the price of a new model for a broken 4.5 years old model.

Technically you could just upgrade every year and recoup at least 60%-70% of the original price.
You point out that this is sexism against a woman, yet a recent (2010) study purposefully defined forced sex where the victim was forced to penetrate as not being rape (a definition that almost exclusively impacted male victims). Not just any study, but a study by the CDC. This study has been quoted numerous times, often by people looking only at what the study officially defines as rape, leading to a massive misunderstanding of the problem by subsets of society.

So I doubt your notion that for men we just express outrage when large institutions are able to wrongly redefine things in a way to dismiss male victims.
It would be cool if you could get a text message for the charge amount(if it was over some set limit), location, and possibly itemized bill(since disney does control every system after all), and respond yes or no to allow or deny the transaction.
Introduction to asynchronous programming
I did the reverse engineering on RDP 4, almost 10 years before that vulnerability report. With each RDP release they did very big changes to the security layer as well as other pieces. Somewhat surprisingly Microsoft did base RDP on open standards, especially a whole bunch around video messaging.

But those standards were developed by committee, so the number of ways you could do things was usually the same as the number of committee members. Then their implementation had bugs (eg drawing some parts from bottom to top when the standards said top to bottom), but they didn't know this since they didn't try interoperating with other implementations. The initial "security" was some half assed hack, and yes in later versions they did switch to TLS.

Note that the security is complicated because of domain membership, WAN vs LAN, and a bunch of other related issues.
No. Viruses require a live host in order to replicate. That sounds tautological, but I'm not sure how else to say it briefly.
Why Linus Torvalds was wrong about C++
Another good one is The Talos Principle. Fans of Portal will love it for its puzzles and similarly mysterious back story. And it has a time-travel feature (record / playback yourself) in some later levels as well.
"Non-maskable interrupts triggerable by guests
" http://xenbits.xen.org/xsa/advisory-120.html

"Non-standard PCI device functionality may render pass-through insecure
" http://xenbits.xen.org/xsa/advisory-124.html

the others also released today
Dear lazyweb,

How active is the MariaDB development compared to MySQL's?

Should we still be concerned with Oracle trying to kill MySQL? How has that whole debacle played out?
While I'm fully supportive of unionization and organized labour, that doesn't seem like a particularly good example. What exactly did they gain from the march, besides getting shot at?

The 1941 Rouge River strike it mentions in passing seems like a much better example.
>Seriously. This isn't even bad....There is no need to blow normal research and security work out of proportion.

Is normal security research done with the goal of finding/creating holes with the purpose of keeping them secret in order to use them as attack vectors without letting the owners of the compromised systems know about the vulnerabilities?

What's bad about this is the purpose of the research (not to discover and strengthen security, but instead to destroy it), combined with the weaponization of it (the entire goal of doing the research is to use the exploits), and the actor carrying out the attacks (the state).

It's obvious on its face why this is alarming.
Twitter Now Tracking User IP Addresses
Thank you for writing this tip. Hopefully I can cut some of my hobby projects & finally complete one thing even with less features.
There are only two security levels, Mossad and non-Mossad. You cannot win against Mossad. Period. It may be exciting to talk about but you have no chance. Zero. HTTPS everywhere and encryption are only a tiny part of the threat surface.
Check out the JavaEE tutorial from Oracle http://docs.oracle.com/javaee/7/tutorial/ and the 1st Cup https://docs.oracle.com/javaee/7/firstcup/index.html

There's also an excellent GIT repo of JavaEE7 samples that is maintained by RedHat here:

https://github.com/javaee-samples/javaee7-samples
Isn't this a market opportunity, though? Make a website that provides product information for people who want to sell an item. Give tips on how to advertise and mail the item. Sell packaging supplies. Why isn't Ebay already doing this?
I agree that the technical solution is the most important one, but it is a) not a solution we have ready right now, and b) one that will never be 100% effective.

HTTPS everywhere is a good start, but it it does a poor job of defending against the NSA. Certificate authorities are fundamentally broken and users don't have the background knowledge to understand certs or why they are necessary.

Even technical people don't understand this. The last time I saw a post about certificate authorities on hacker news, the top comment was about how most people don't want authentication, they just want encryption. You can't have encryption without authentication: unauthenticated encryption is fundamentally broken. But the user who posted the comment was ignorant of this, and enough other people were ignorant of this that they upvoted his comment to the top.

The solutions proposed also don't address the problem that popular centralized services are bound to be compromised. Even if you're sure you're connecting to Google or Facebook services over a secure connection, Google and Facebook are such high-value targets that they will be compromised by an entity with as much money as the NSA. The defense against this is also technical, but it requires a fundamental shift from centralized to decentralized technologies, and I don't think that's easy or at all ready.

> Basically securing against the NSA is the same as securing against hackers, it should be treated as a security threat like any other.

This drastically understates the attacking power of the NSA.
Simple and directly to the point - I think it's great. If I was in the market I would certainly pre order.
Ask HN: Online English copywriter/translation service
Hi, I am a non-native speaker and I need hassle-free copywriter/translation service for my startup.

Few weeks ago I saw a startup here on HN where native speaker would correct your sentences as you type, they used "catnip" as currency, I've been googling for 30 minutes but can't find them. Any help is welcome.
Because familiar is not necessarily good. After many decades of use, we have realized that C has many suboptimal syntax decisions.