skysight-inc/HackerNews huggingface dataset:
For my use case this is less secure because I keep my computers clean of malware, and my hard drives encrypted. I don't reuse passwords and I don't log into my account from devices I don't own. My phone, on the other hand is easy to steal. Anyone who has my sim card can use it to log in. I've also heard it's trivial to use social engineering to redirect a phone number with some carriers. Also, I often don't have signal in buildings, so that makes this option useless.

For other people the SMS option might be better. They let you choose which one you want to use. I guess we'll hear about the results of this experiment later on.
I always use a vpn for that. Here is the list of top vpn providers which you can use to maintain your security online.
http://www.vpnranks.com/5-best-vpn-software/
That's a good process! My personal pain-point in this is paying way too much rent for way too little. (However, that's just the supply/demand mechanisms doing its work). But also, the landlord aren't delivering what it promised before I moved in...
Why is it so hard to create good keyboard these days? Where are Page Up, Page Down, Home, End and Insert keys?
The 4 Cardinal Virtues
I used to feel the way you do, that “guys” is gender-neutral. However, I have encountered a large number of women who appear to be unaware that they are included when people say “you guys,” and they feel dismissed.

I could lecture them about how wrong they are, but I could also use phrases that are not subject to misunderstanding.

Things like this remind me of code. If I write something that is compiler-correct, but subject to misunderstanding, I could demand that people who find it confusing go read a few more books. Or I could write it to be read by my audience.

With code, we’ve nearly universally decided that we write to be understood, and that the audience for our code is more important than whether we are “compiler correct.”

JM2C, but that’s how I feel about the word “guys” being gender-neutral. It is dictionary-correct, but not audience-correct.
Detroit’s Ash and Anvil Offers Clothes for Hard-To-Fit Shorter Guys
JavaScript – An Adventure (Part 1)
Scala Quicklens: modify deeply nested case class fields
Twilio SIP Trunking launches
It's not ready for consumers yet. The end result will be a Chrome extension anyway.
And $24.90 if you need a certificate revoked. Very helpful. Not.

Also, isn't there any CA that gives away wildcard certs for free? It's the only reason I'm sticking with CACert...
You raise an interesting question. Does accuracy matter for something like this? Would a more accurate version be better...?
Short version: They had seven figure salaries before hand so could afford to do it.
You list hyperdimensional hashing as one of the early methods that you tried without success. While only good for point-to-point distance comparison in its simplest application, it seems that geohashes meet the scalar/vector problem that you describe. Do you have any experience with geohashes, and if so, what's your opinion of them?
"No pull requests" and "It's a full on GitHub replacement" seem like incompatible statements.
I use rdiff-backup as my main backup solution. It's efficient and restoring from the latest backup is reasonably fast and simple. But I've found that the further you go back in time, reconstructing the file from all the deltas takes so long I don't consider it useful as an archiving solution. At least that seems to be true for large and/or complex collections of files. Have you actually restored large databases from years ago in less than a few hours?
Thank you. And may I say, gitbook is awesome. Imagine teleporting back to the 1980s and showing this to an author trying to write the next Windows 3.1 Missing Manual. They would swoon.
Hi, Aaron from GitBook here.

Thanks for the kind words! Yep, you might have seen the editor: https://www.gitbook.com/editor (the older version is on GitHub: https://github.com/GitbookIO/editor)

I think the publishing/documentation/writing industries have yet to see the benefits of automation and better tooling. Writing should be simple and accessible.

What we're trying to do is automate all the painful/boring parts so that writers can focus on what they do best: writing.

I'm not surprised you had the same idea :) If you want to share your thoughts or talk, you can email me at: aaron AT gitbook DOT com

And if you want to contribute to GitBook, our book format and toolchain is open source: https://github.com/GitbookIO/gitbook
How to keep faith, even in difficult times
Show HN: OS X menu bar app for managing your boot2docker VM
I've been using backup2l with a custom driver that just calls "tar | gpg". I wouldn't flag it as "lacking". Backup2l can be used with any archiver.

If duplicity had an option to chose a backup ancestor, you could use backup2l with duplicity.

backup2l is strikingly simple and very effective at managing restores from it's incremental backup hierarchy.

In one of my tests (more than 2 years ago), the backup efficiency of daily, 3-level hierarchical tar (such as backup2l) vs Duplicity for a 1 year period was only 15% greater yet giving much more redundancy in case of failure.

If you consider how simple archives are and can be restored in case of problems, it's almost a no brainer.
Well, technically you CAN do both, you just need the right adapter.
I'm not a lawyer, so I'm not going to give you legal advice. Generally speaking, it's very low-risk to use a boilerplate privacy policy for an MVP.

Ideally, instead of using a service like you mentioned, you should copy and edit the privacy policy of a service that is as similar to yours as possible.

Once you make your first dollar or get your first ~10,000 users, it'll definitely be time to hire a lawyer.

Some important questions though:

1. How sensitive is your data? Is it PII (personally-identifying information)? That includes full names, addresses, phone numbers, and a complicated list of other things.

2. Are you in Europe?

3. Have you formed a limited-liability entity? In the US, that would be an LLC.
So much vitriol, anger, suffering in this article.

I think that the author does have a point, and I agree that you shouldn't sell yourself off as a slave just because you're passionate, but that point is being pushed a tad too far.

There's nothing wrong with enjoying your job.
I had to fight to get to the bottom of the article which felt like a 'I know a few guys who...' article being used to define a trend.

All in all it felt like another 'someone who makes more than you took a risk' being written because the risk can be turned into a marketing campaign for their start up.

In the end it felt very light.
I mean xonsh. Oh'my exists for zsh, fish, git...
The problem is not that simple. Most webapps are compiled and minimised using systems like Closure Compiler, Uglify and R.js (for AMD apps).

You almost never point directly to a dependency as a standalone file.
Doing so would mean 15-30 requests per webapp and since browsers only accepts 5-6 parallel requests, it would slow down the page considerably.
> 70 students enrolled in an introductory undergraduate course in programming methodology

I'm curious about that too; is this course optional? Would people who can already program take this course?
"When what they operate is a website" - you mean like eBay, AirBnB, and others? From their S1:

1. 122 million is cost of revenue, which means their support staff cost, server/bandwidth costs, and transaction fees (e.g. credit card fees).
2. 40 million marketing, I'm guessing mostly paid search.
3. 37 million product development.
4. 50 million "general and admistrative"

Point being, they could probably easily be profitable if they wanted, but at this stage they are trying to invest for growth. As you point out, though, that growth will be difficult if they have this inherent limit on production capacity.
I don't know what is the exact problem that I am having. What you said about being careful what others would think or do has always haunted in my head. That alienates me from other people and I know how hard it feels.when ever I have to face a new challenge I feel that I am not good enough and I even forget all the technical details of the projects I did, things I have learned. Now I am facing huge fear having to go to job interviews. I even forget words to describe what I have done in previous projects.

Once I was the brightest students in the School. But now I feel that I have no knowledge at all. I'm worried. I wish if something could rescue me.
I personally wouldn't use it. It isn't a huge step up vs. sharing something on Facebook/Twitter. Doesn't justify me installing a whole new app and evangelizing my network to join it.
Thanks for your input. I'm a contractor and i've been asked to implement a system for which dynamic mesh subdivision seems like the best solution.. additionally i'd like to subdivide only small regions of the target mesh. I'm wondering if I should raise the question of this patent with my employer... the patent does seem overly broad... just wondering what to do from an ethical/professional standpoint..

There are lots of apps out there that do various forms of this.. dx11 has hardware implementations of it.. but if I implement a software version that implements a simple midpoint subdivision/smoothing, where I smooth the midpoint vertex by some amount based on neighboring edges.. seems to get close to some of the language in that patent.. I'll probably mention it to my employer just in case.
Another trend I've seen is for small shops to effectively replicate their entire store on Etsy, because that's where the buyers are. So a small commercial print shop may have an Etsy site, in addition to their "real" web site, and the Etsy shop may not even sell anything except have placeholder "deposits" that users can buy.
Continuing the thought experiment: What about the case of AirBnB which definitely had some questionable behavior relative to Craigslist? Does that change the dynamic for you? AirBnB didn't degrade the experience of Craigslist, but it did leverage their network to build their own business. I hear this story all the time as one of the best examples of "growth hacking" (along with Dropbox).
This was very surprising to me. I'm glad you linked it. I have definitely changed my mind about ted.

The fact they forced Eddie to have a roommate is weird, and creepy.

It seems like humans just can't live with out religion.
The only positive I can think of is if there is an easy to plug in hub with thunderbolt/hdmi out along with a few usb-c ports that would allow me to use one plug when setting up with my external monitor and timemachine drive. Then I'd be ok with one plug.

It would be nice to have one on each side and avoid having to purchase/use a hub. And be able to plug in on either side to charge.
Interesting points - isn't that similar to how Twitter developers often feel? I often see comments here about "Don't build a business around Twitter" - seems actually somewhat similar.
Charting the OpenStack galaxy, under the hood at TryStack, and more
The advantage is that it's free to host it yourself.

Github enterprise is super expensive.

And Stash (the self hosted equivalent of Bitbucket) is also fairly expensive once you go over 10 users.
My experience with attic (seems to be a trend with all of your dedup reviewed systems) is that it also takes a very long time to restore large amounts of data _however_ you have the option of restoring individual files via a FUSE file system which is _immensely_ useful.

An example was that a restore of ~200 GiB of VM snapshots took over a day from a NAS to the server in question.

Usually, the backups take about an hour to write out, so reading data from attic does take significantly longer.

This is probably because dedup is non-trivial to restore from (it can involve lots of random reads/disk seeks).
The fact that finance is ripe for (and now rife with) technological disruption is one factor pushing the bankers in that direction, but the primary one since 2008 has been this: it's the gold rush of the decade.

A certain portion of the population, including most of the type-As, consistently pursue whatever opportunities promise the most money and prestige in the shortest time for the least work. Until the financial crisis, the best path to that end was getting rich as a trader. Now, startups offer greater risk but even faster and more tantalizing rewards. The exodus of finance towards tech will continue exactly until the next investment winter, at which point it will likely turn into a flight from SV-style tech into yet another sector - my best guess is health and bioinformatics.
>I'm worried about living in a society where we've become overly dependent upon statistical methods for important decision making

That's very unlikely as people are incredibly biased against algorithms: http://lesswrong.com/r/discussion/lw/lsc/link_algorithm_aver...

There are many areas where even really simple algorithms have been shown to outperform humans for decades: http://lesswrong.com/lw/3gv/statistical_prediction_rules_out...

Even when humans are given the predictions of the algorithm and allowed to take that into account, they still do worse than just the algorithm on it's own. Sure the human might fix an obvious error of the algorithm in one case, but then makes 10 other worse errors elsewhere.

Despite that organizations are very slow and hesitant to adopt them. There are massive regulatory and liability issues in many areas. And people are just generally biased and scared of them. Even on tech friendly places like hacker news, your comment is at the top of the thread. I remember a post awhile ago about using machine learning to detect fraud in loans in the third world, and half the comments were about how evil and racist such and unfair such an algorithm would be. Not realizing humans are all of those things.

People are very overconfident in human ability despite overwhelming evidence we suck at predicting things and doing anything statistics related. Human error is just ignored or seen as an inevitable fact of life.
Mike from CertSimple here on old openid account, main one is submitting too fast:

We're not a big fan of trust logos either - though if you do want one it's included. As well as the tests you mentioned, usertesting.com ran some tests where removing them aids conversion:

http://info.usertesting.com/OnDemandWebinarOptimizeYourWebFo... at 36:15

> This is a case study I borrowed from Pep at ConversionExcel, that tested this for one of his clients. This is the original one"

https://certsimple.com/images/blog/trust-seals-stop-conversi...

> I'll show you the variation here. He removed some from fields, he also treated the copy copy and he also removed the stuff over here (the trust seals), so there's multiple things going on.

https://certsimple.com/images/blog/removing-trust-seals-conv...

> What I want to show you is that =the version without all the other stuff and the trust seals converted better=.

https://certsimple.com/images/blog/removing-trust-seals-conv...

There's also another study (trying to find link) where they found making your own trust logo improved conversions.

As with the nature of user testing: other people's results may not apply to you. Measure yourself.
My experience is that most of the finance majors start in engineering. And switch majors to finance once they get to the engineering weeding out classes.
Duplicity allows using gpg in a rather painless way:

PASSPHRASE="myBackupGpgKeyPassphrase" duplicity ...

I use one gpg key per machine for backups, so having the passphrase in cleartext on that machine is not much of a problem.
When should I use the Xamarin platform for mobile development?
Understanding SSL Misconfiguration
500,000 jobs in Software Development and Cybersecurity and 250,000 unemployed bankers who are all keen to work in technology? That sounds like nightmare material to me.
Self hosting is a big plus for Gitlab.

I've used it at a few places and had nothing but a good experience. Upgrades are easy and it's easy on boarding people who are used to Github.

I would recommend giving Gitlab another try...
Thanks for posting.. you mentioned working on similar stuff in the mid 90s.. could that qualify as prior art since the patent was issued around 99?
How original can you be if you want your product name to be explicit that it works with git?
They need on-demand email addresses too, then. Because I don't remember my yahoo email address, either. That's how long it's been since I've signed in.

Maybe every other month for one reason or another I'm prompted to sign-in to Yahoo. I sit there for a frustrated three seconds wanting to punch the screen and then just close the page. Can't remember the email address, know I won't be able to remember the password and no way I'm dealing with creating a new account.
I absolutely agree that an exception for legitimate use cases is necessary. (And that a proprietery Chrome API - which in addition is only available to approved extensions - is not an option)
However, I don't see what security benefits TLS or DNS records would bring in this case and why they should be requirements for the exception.

If your goal is to protect local daemons from malicious web sites, then I don't see why the usual CORS restrictions aren't enough. Maybe they aren't (You could tighten them a bit, e.g. not allowing "Allow: *" responses, treating all requests as CORS non-simple or even only allowing WebSocket connections if you must), but forcing TLS or a DNS entry doesn't seem to increase the security: If I were an attacker, there is nothing that keeps me from trying wss://localhost or wss://www.dropboxlocalhost.com in addition to plain localhost. So what security benefit would that bring?

If you want to protect a legitimate web page from malicious daemons, those measures won't help you either: I can simply download your legitimate daemon, extract the TLS private key and generate a valid certificate for www.dropboxlocalhost.com myself - or I just install a custom root CA certificate and use my own private key.
But I don't think defending against the latter scenario is very useful anyway: Either the "malicious" daemon has been purposefully installed by the user, in which case blocking it would be against user interests, or it is part of a malware. In that case, the malware will have dozens of other ways to compromise your web page and you will generally have bigger things to worry about.

So, why can't we simply use CORS to protect connections to localhost like we do for everything else?
Attic has still problems for large backups (when the block index gets >2gb). There are also several minor issues due to the tool being relatively new (file selection is lacking). Check it's issues page: https://github.com/jborg/attic/issues/
It’s worth noting that Counter-Strike has been around far longer than most games in eSports. But a few tweaks made in Global Offensive, such as more reliance on managing money/economy, made it as compelling to watch as games like LoL or SC2 because it’s more than just watching dudes shooting at each other. Now it’s getting more playtime in tournaments than ever.
Don't use StartSSL, they are shady and often a hassle to deal with. If you don't need EV certs, hope that "let's encrypt" comes of the ground quickly.
Doesn't mean they won't convince someone they can be your boss.
The less trend makes almost exact models looks different and their cost will vary a lot
I don't think being passionate about programming, or your job or anything else, means it has to be at the expense of something else that is valuable. It's more about preference and priorities. I don't watch TV, for example.

Being obsessive about something can be unhealthy in some cases, but I'm not sure if that's what the post is about.

Because the author talks about himself in the post, I found interesting that he defines himself at the bottom of the page as "SF author, software developer, occasional blogger. Buy my books and help me quit my day job.". So his passion is perhaps being a SF author and wants to quit his day job, which makes me think he's not very passionate about it.

Well, that's all right. Like being passionate about programming.
Problem with Snebu: it only does file-level deduplication I think which means storing something like virtual machine snapshots or images will not deduplicate well.

You need block-level deduplication to work well with things like VM images.
Yeah, I think I program with a lot of passion. However, after I've worked for not-too-much-more-than 8 hours in a day I force myself to go home. And when I'm home I make an effort to stop thinking about whatever problem was on my mind. Sometimes having an open source side-project can help with this tremendously.

The author is definitely establishing a false dichotomy here. Just because you would enjoy doing something for 16 hours straight, doesn't mean you have to.
The link says "en" but it's in russian for me.
Germany’s Merkel, Chinese vice premier open world’s largest computer fair
PyDev of the Week: Eli Bendersky
Good point, but I think you have it totally backwards: the usage in this case is audience-correct but not dictionary-correct. In fact, I think you guys is a good example where "language rules" have not caught up with usage.

An important thing to understand is that language is not governed by a strict rules, such as compilers, it's based on a social contract, in fact Wittgenstein pushed this idea to its extreme by declaring that a word's meaning is its use (this idea is not without it's own problems, of course).

I think the problem here is not that the people who object to the usage can understand the correct usage (in fact such usage is prevalent among the high-school crowd, which you can readily observe if you teach) but that they see it as sexist usage, e.g. similar to objecting to use of stewardess. I would suggest the correct approach here would give them the similar cases of y'all and you lot, not as a fry lecture but as a frank discussion.
http://seattle.craigslist.org/search/apa?maxAsk=775 (+ click Map)

Not a whole lot of options at that price -- at least, not anywhere near the city center. Things are a little better in, like, Tacoma :P
Securing jobs the FBI way! Cultivate criminals if there are none.
I found the article turgid and meandering (a fluvial influence? hmmm). The Wikipedia articles summarizes things ever so much more clearly:

Cospaia unexpectedly gained independence in 1440 after Pope Eugene IV, embroiled in a struggle with the Council of Basel, made a sale of territory to the Republic of Florence. By error, a small strip of land went unmentioned in the sale treaty and its inhabitants promptly declared themselves independent. An early centre in Italy for tobacco production, Cospaia eventually deteriorated into a mere smugglers' haven which, in 1826, was divided between Tuscany and the Papal States. Each citizen was awarded a silver coin by the church to help convince them to continue farming tobacco.

Today, Cospaia is a hamlet (frazione) of the comune of San Giustino in the Province of Perugia.

From http://en.wikipedia.org/wiki/Republic_of_Cospaia.
i think in most cases it's harmful to give one single iota of a fuck about whatever it is you do for work, unless you work for yourself. 40 hours of every week of your life, at a minimum, is being used to further someone else's goals, and you have no choice in this because you have to survive. don't ever work hard unless it's on something that matters to you or something that's altruistic. if you're in tech and aren't specifically working towards helping people, your job, company, and product don't matter. at all. stack your money, smile, nod, and GTFO as soon as you can.
My year of experience with Continuous Delivery
Thank you for your reply. We indeed thought about using those materials, but not sure if it is punishable.
1. Yes, the data is sensitive: full names, emails, and phone numbers and etc.
2. We are targeting US market
3. We have a C-Corp in the US
Browsing C++ and coming up mostly with nodejs libraries. http://libraries.io/search?languages=C%2B%2B&order=desc&sort...
Making Page Likes More Meaningful