skysight-inc/HackerNews huggingface dataset:
tptacek - I was waiting for your reply... almost thought about setting a timer! Glad to see you didn't disappoint.

Toward the end of the article you'll note I point out that this is a great example of a hole in the operational process that has been identified as more and more people have deployed DNSSEC:

http://www.internetsociety.org/deploy360/blog/2015/02/cloudf...

The process of updating (or removing) the DS record NEEDS to be automated. There is a group within the industry working on ideas around this now and I think we'll see that work happen inside the DNSOP Working Group within the IETF.

There is a public mailing list open to anyone interested to join.
Here's a scenario: you and your coworker end up at a bar together, maybe for a team event or something. There's alcohol involved. Nobody got coerced into being there. You're not her superior. Can one of the two people hit on the other in that context?
On Secretly Terrible Engineers – A Rebuttal
The problem with deducting from one side of a story is you can't reach a definitive conclusion. For example if you read the first 4 paragraph, that is 'the essence' of most interviews. Assuming it is, what the interviewer is doing after, are inappropriate but "thanks, but no thanks" would be adequate response in my opinion. People make dumb mistakes some time.

But if OP highly suspected that the interviewer does not intend to do proper interview from the beginning and only interested to her personally, reporting to HR is the only way to go.
Most important thing about iterative creativity is the cycle of iteration. When the project is distributed the cycle automatically becomes large which slows down the iteration cycle. That is the reason why startup succeed at coming up with interesting solutions in the beginning of the there journey.
> "The images revealed dividing cells, indicating the bacteria were healthy and not starved to an abnormally small size." but the write up says they appear to need other bacteria to function properly - and suggests the pili are involved in that. If they can stay healthy and divide in an environment without other bacteria then what do they need the other bacteria for, entertainment??

I require food and water to function properly, but I'm not currently eating or drinking. These microbes were isolated using filteration, so presumably they were surrounded by other bacteria to leech from, right up to the point they were isolated.
How to format password protected HDD (SATA?)
"A center of European culture and a repository of the Western tradition that escaped Hitler and survived the Blitz may finally be destroyed by British bean counters.”

Aliens are living amongst us. Unfortunately they are Vogons.
ElasticSearch is now “Elastic”
Indeed, but you can compile a lot into h/w. For example, you can compile recursive and higher-order functions and ground-type mutable state. You can also have a type system that tells you at compile time whether your program can be compiled or not.

Here are some entry points to the Verity/GOS project:

* Paper describing the theory:
Dan R. Ghica, Alex I. Smith, Satnam Singh:
Geometry of Synthesis IV: Compiling affine recursion into static hardware.
ICFP 2011: 221-233

* Compiler from Verity to HDL:
www.veritygos.org
As far as I can tell, the JVM GC is (not surprisingly) significantly more mature. The JVM has a concurrent mark-sweep algorithm that works similarly to what's described in this document, but more importantly IMO the JVM's GC is generational, and it appears Go's GC is not.

In the JVM, the CMS only occurs on the oldest generation which contains objects that were in use for a while, whereas objects that are created and discarded quickly are cleaned up in younger generations with a copying collector, which avoids memory compaction by switching back and forth between 2 equally sized memory blocks. This means much of the time the JVM can avoid doing a full CMS and keep the time spent in GC only a few ms per second.

I guess it depends on what your use case is. If you're writing low-latency server applications that don't have loads of long-lived internal state and you have memory to spare, the JVM's CMS GC is going to be way more efficient than Go's. But if you're constrained for memory then avoiding copying collectors and generational heaps is your best bet, but you'll pay for it in GC time. Of course the JVM has other GC algorithms like G1, but I don't have much experience with those.
Interesting, OrientDB seems to have really grown lately. It is advertising itself in the same way I talk about my own javascript based opensource database project (http://github.com/amark/gun), multi-model, relational/document, graph, multi-master, etc. Obviously Orient is much more mature than mine (not production ready or stable). Maybe I should give OrientDB a try, and see if it stands up to its claims!

Great work, keep it up.
So what are the rules for contacting someone you once interviewed in order to suggest social interaction?

NOTE: I said "social interaction" rather than "a date" because I'm asking about more general situations.

For instance, suppose you interview someone, and (unlike the guy in this incident) are not using the interview to try to find someone to date. You stick to questions specific to the job, plus more general questions about the things on their resume, including open source projects they say they contributed to.

You find them interesting and witty and enjoyed talking with them, but there is someone better qualified who gets the job.

Six months later, you are planning to attend a one day conference on an open source project you contribute to. It's a 3 hour drive to the conference. You don't know anyone in your area who works on that project to ask along to make the drive more interesting.

Then you remember the person you interviewed six months earlier is also a contributor to the project.

Is it acceptable to contact them and tell them you are driving to the conference and would like to find someone to come along to make the ride more social, and asking if they would like to be that person?
This actually raises a good question. I don't think anyone disagrees that if immortality is possible, humanity has s responsibility to figure it out. All truths are revealed eventually, etc.

You're right. Google is one of the few entities with the resources to throw at this problem. But what responsibilities does that place on them?

If google discovers a "cure for aging" (for a convoluted example), how do they select who gets to use it? Does google enjoy 100% autonomy in dictating how its used, since they discovered it? Or should the government step in and subsidize manufacturing so every citizen can access it? What about developing countries? Are we going to have 450 year old Americans and only a few 450 year old Ethiopians?
popcorntime.io also comes with a vpn now, from https://vpn.ht/popcorntime, but you have to create an account separately.
> Having used both, I'd say the security focus of OpenBSD means it's often lacking consistency and "polish".

I wonder why you think so. I've only ever used OpenBSD and NetBSD on PCs and Unix workstations. I have never, ever, in any domain found NetBSD to have more "polish" than OpenBSD.

From the initial installation where OpenBSD helps you with everything and NetBSD, well, doesn't, to reading and using documentation (OpenBSD's man pages are the best around, with the possible oddball exception of some old Open Group pages which include code examples), OpenBSD seems to be miles ahead.

So I just wonder what you're talking about specifically.
If you're finding your system is unstable, it's probably due to using XtraFinder. That hack does various unsavory things that can cause stability issues.
While I agree DNSSEC has its limitations and problems, I haven't heard many alternatives (in general).

DNS has two inherent issues:

- Hijacking traffic via spoofing responses.

- Private information leakage.

With DNSSEC combined with HTTPS it is very reasonable to say that both you're connecting to the party you're expecting to connect to and in addition, no third party listening on the line either knows what host name or page you're visiting (only the IP address of the box).

A lot of people dismiss these limitations or just point wildly at certificate pinning to solve all of our problems (while ignoring that HTTP isn't the only type of traffic the internet was designed for).

Plus with NSA mass surveillance, DNS makes seeing what domains you're visiting and building a "picture" of you as an individual absolutely trivial. The IP addresses still may help them do that to some extent, but it certainly becomes very easy if they can see your DNS packets.
Verhuisdekens en pakdekens voor veiligheid van meubilering bij elke verhuizing
The most relevant part of this mail seems like the announcement of the reverse-engineering success that allows programming an FPGA with a FOSS toolchain. That that toolchain currently uses C seems like a minor implementation detail; if the bitstream format is understood well enough to generate it, it should be possible to use an HDL to as well.
The Campaign Cash That Can Kill the Open Internet
Entire thing had me thinking "How did Huxley get it so right ~80 years ago?"
Thanks. Keep us posted and feel free to reach out if you need help.
Get iOS 8.2 Update for Apple Watch Support, Better Health App and Many Bug Fixes
I believe the issue is less that advertisers are unwilling to buy display web ads; it's more that they no longer place a premium value on buying them from branded publishers when they can reach the same users on many different websites with programmatic buying.

This hugely devalues quality publishers and increases the value of lower-investment publishers who successfully create a lot of pageviews. The latter inventory used to sell for bottom-of-the-barrel prices, but advertisers have decided it's pretty similar in value to reaching the same user on a high-quality site.

The best offensive weapon quality websites have against this trend is native advertising: create high-quality sponsorship offerings that commodity display ad impressions can't directly compete with.
As far as I know there is no such thing, as baseband chips and firmwares are controlled by telcos and they won't allow anything unlicensed on their networks.
The article missed:

1) W^X protections

2) ASLR

3) Stack canaries

4) strlcpy

5) OpenSSH!

6) Heap guard pages

7) Software NX

8) Etc.

Maybe project PAX invented some of those, but massive deployment was in OpenBSD first. Well if you can call them massive..
I've been around long enough to see what a toxic superstar can do. It's really easy to look at the "superstar" and see it as an asset, but forget how much liability to associate with the toxic - and therefore to conclude "net win" when it isn't.

Not saying it could never happen, but it tends to leave your company a prisoner. You can't lose the superstar, but you can't attract other top-level talent because the superstar is toxic, which leaves you even more dependent on the superstar...
Any Full Stack Web Design Courses? Hacking 101?
Hi, I am an "Analyst" who wants to "Code". Specifically, on the web, gitting all these cool things I see, modifying and combining.

The class I am looking for is "Hacking 101"...

Greatly appreciated...

nb
"Then if the NSA"

That's a big IF and one that will be almost impossible to prove. I don't see how the case holds any merit if they can't prove this happens.
No attempt has been made to bring someone else in (either internally or a new hire) to understand the algorithm and the code behind it? Even if this guy is obnoxious, it's smart to have a back up plan in case he leaves.
I used to think that DNSSEC was a good thing. Authenticated DNS lookup, what's not to like? Incidents like this make me question that.

But dropping DNSSEC leaves the problem of securing DNS unhandled. What would you propose in its place to address securing DNS?
I wonder what would be wrong with a new DNSSEC2 that would be designed for online signing of DNS records from the beginning for example (so no NSEC/NSEC3). It would not replace DNSCurve, but would be usable for DANE for example.
Erlang is mostly an immutable functional language without pointers, so for most scenarios not involving large binaries, its GC is completely trivial.

For large binaries, a relatively primitive reference counting system is used.

If I were to study GC from scratch, I'd start with http://www.hboehm.info/gc/.
That depends to a large extent of who will be in a position to influence those laws and at a guess the uber-rich would be very well placed for that.
Watch Kalappadam (2015) Tamil Full Movies Online – Watch Full Movies Online
Millennials Are More Racist Than They Think
Benchwarmer | https://chrome.google.com/webstore/detail/benchwarmer-new-ta...

Great for designers. Beautifully displays top / new Dribbble submissions on new tab page.
Firefox's name and logo are trademarked, and the source license they use does not allow you to use that trademark. The result being that you can't distribute binaries of Firefox, whether modified or not, with the Firefox name and logo - not because of the copyright on the code, but because of the trademark on the name and logo.
DNSCurve, for one.
my 2 cents:

* Say no to date in person

* Decline the job for reasons that you explain to the HR department: He asked you out on a date in a professional setting (I must inform you .... I regret ... best regards). Writing this in a friendly form (the HR person receiving this mail has not asked you for a date). This person will be up in arms for you. You will receive a very very friendly call from someone up the foodchain.
See, it happened in person .. so you cant prove shit. But if you are a boss.

* Do not send the mail CC to the interviewer

* Close the mail friendly with best regards

* Document what you can. I guess the interviewer did not do this in written form.

* Go on and strike this company off the list of companies that you aspire to work for. Do not believe this was an single incident. When hiring people everything should be extra shiny (normally you discover problems after starting).

So with 15 years experience in the field: that shop is crap!

One thing: The tech job market is a sellers market. More people want to hire than there are able engineers. You are not the one asking for something only. The company is as well. A work relationship must be on the basis of a mutual understanding what is ok and what not. Seems you have a difference here.
Good luck for the job hunt. The good companies are out there (and many people who can show you the way for harassment free work experiences).
Is it ? aren't there differential circuits with history that won't activate the subsequent circuitry in case the read value didn't change ?
Box: why we run an open source program
Aha, that also reminded me of my favorite name for the thing, the Blotto Box.
If you feed MYSQL an invalid date for a date/timestamp field it will quietly insert 0000-00-00 and produce a warning, not an error.
With the GOP in control of both the Senate and House, keeping net neutrality is an ongoing issue.
Isn't this a little premature to announce a victory? After all, they've been using MongoDB for 5 years and it delivered for most of the time. Who knows if this new shiny SQL thing will be sufficient for next 5 years? I'd say it's quite likely after few rounds of excited development the database will be slow and crappy again ;)
I had problems initially but it turned out my keyboard shelf was not at the right height. Since I've corrected that I no longer have problems.
Sounds like the kind of "10x engineer" who gets there by demoralizing the rest of his team to 0.1x productivity by being an asshole.

Do not want. Do not need.
GTFO
yet another example of how horribly "male" the entire industry, how hostile it is to females, etc.

Yes it is, exactly. And the grandparent comment is yet another example how people will contort any way they can to give men behaving in unacceptable ways towards women the most charitable possible interpretation.
For tests we should use DAMP, Descriptive And Meaningful Phrases, instead of full DRY
> When a policeman tells you to pull over, there's an implied "or you'll be arrested" that we all understand even though he never comes out and says so. When your crappy boss asks you to come work overtime on the weekend without any additional pay, there's an implied "or I'll make your life at this company difficult, or maybe just fire you" that he usually doesn't need to state.

Both are those claims are simple to explain. Policemen clearly do arrest people if they don't pull over, and bosses clearly do penalize or fire people for not following orders (even unreasonable orders). And intention doesn't really come into play for either of those examples, because it's clear that both policemen and bosses intend to be issuing threats.

You haven't given any similar explanation for why asking someone on a date after interviewing and rejecting them carries the same implication. (For clarity, note that I don't approve of doing so, but for a different reason.)
Export app designs as Android .apk prototypes in one click
It's an expression from the days when "the contacts app" wasn't a thing. Like the save icon floppy disk, expressions tend to last beyond societal changes that make them meaningless.
I've been thinking of the same changes for a few months.
We are running on MongoDB with a few M entries, and around 10GB of data. We use Scala and ReactiveMongo on the application side. So, my main fear is we're going to have a lot of overhead when trying to migrate to something like "ReactivePostgres".
What Does HN Think of Oracle APEX?
Did you read the post?

> A few minutes later he sent me an email saying he'd spoken to his team and they were looking for someone with a lot more experience

It was a team decision, and while the quote is not final, points more to the fact that he _isn't_ able to just unanimously reverse the decision. At that point, the entire team would have to be colluding.
This is a digression though. The subject came up in the context of a claim that bitcoins were "just as convenient as credit cards".

Cold storage is essentially isomorphic to keeping treasure in a safe, and needless to say very much not equivalent to making a credit card transaction.
That's exactly how you make a sales pitch. It doesn't matter what year it is, it matters who the customer is.
Sounds like Tanenbaum vs Torvalds redux..
Different sides of the same dice I guess. There's a chapter in SICP dealing with conversion from functional to register machines. Sure, FP maps the electronic dataflow quite nicely. But stateful imperative expression isn't that far from the hardware too.

My dream : FP-ish abstrations at any layer (so called hardware would become just another interpreter for a different level of data flow)
I can't load the site at the minute, so I don't know, but I've used gource[1] before, with great results

[1] https://code.google.com/p/gource/
"OwnLocal (YC W10) acquires Squarespace competitor to help newspapers"

I find it funny that the acquired company is so insignificant that it is easier to refer to it by it's competitor.
I don't hire nor value 10x engineers. So no problem there.

I hire and value engineers that elevate those around them to 10x.

And this behavior lowers people, not elevates. So no, that person is not a valuable asset. He's the very definition of a liability.
Does the estate tax actually work in the US? Our equivalent in Britain appears to be a joke - anyone with a reasonable amount of money can just hire accountants to find some trivial way around it.

I think it's probably the most important tax, in terms of social equity - if you can easily pass down all your wealth from one generation to another, there are no wealth taxes, and capital reliably grows faster than the general economy, that is an obvious formula for the creation of an aristocracy - but I don't know whether it's compatible with the global financial system. Or perhaps it's just British politicians are particularly lackluster on cracking down on obvious avoidance schemes.
> but I suspect that's the kind of project shutupalready was referring to

Yes, those are precisely the kinds of projects I was thinking of. (I was worried that if I gave examples, the conversation would derail into the viability of fusions reactors, ion drives, human level AI, or whatever.)
I've switched about 50% of our internal applications and all of my side projects completely from ActiveRecord to Sequel and it's an absolute joy to to work with once it's fully migrated.

The main reason we started using it the first place was composite primary keys (not supported in AR, at all), and we've never looked back!
Looks pretty but it's going to take a lot to pull me away from Sunrise.
504 Gateway Time-out

nginx/1.1.19
You should learn SQL and understand relational databases. But using an abstraction (ORM) to cover 80% of the use cases is much better than writing tons of boilerplate SQL. http://java.dzone.com/articles/martin-fowler-orm-hate
Example App: https://apexea.oracle.com/pls/apex/f?p=1629:100:170273557740...:
Not a peep was made while the intelligence community got in bed with tech companies. It was mutually beneficial and still is.

The only reason you're hearing about this is because it's good PR for Apple, after their intimate relations with the security apparatus were exposed.
Complete opposite.

Won't even be able to charge it after anything happen to that port.
It's hard not to think of Ricky Bobby:

"No one lives forever, no one. But with advances in modern science and my high level income, it's not crazy to think I can live to be 245, maybe 300. Heck, I just read in the newspaper that they put a pig heart in some guy from Russia. Do you know what that means?"
Yea, it is fortunate that people on Twitter quickly figured this out.
Why buy anything?
Not quite--plan to throw away the internals, not the interface.

This lets you do things like writing shitty hyperlinear naive solutions to get all the pieces of a system in place, and then going back and optimizing each in turn. You don't spend a lot of time fussing over little details, and instead make rapid progress.

If you don't spend time on the interfaces between the pieces, though, you're absolutely screwed.
You have a pretty wild imagination there.

The rich are making huge amounts of money compared to the rest of us now, and paying little taxes. What makes you think that longevity would change that?
Wow this Pannini projection is awesome and I had never heard of it before!

One of the first links of the article: http://tksharpless.net/vedutismo/Pannini/
> The NSA does not surveil domestic communications without a court ordered warrant and I have heard no arguments to convince me that this is not a legitimate use of authority.

Oh what faith you have...

<snowden> How are things over there?
<poitras> I'm at the Guardian. They’re publishing TEMPORA today.
They are very nervous about an injunction.
<snowden> The NSA love that program.
<poitras> Why?
<snowden> Because they aren't allowed to do it in the US.
The UK lets us query it all day long.
Yeah, could we talk? Give me an email: mark@gunDB.io, I've been talking to the RethinkDB guys, Firebase, Dropbox Datastore, Meteor, etc. Would love to chat with you guys too.
GnuPG News for February 2015