skysight-inc/HackerNews huggingface dataset:
> I don't think they have to overlap just because you defined them rationally.

They don't have to overlap, if you just define them as points or sets of points with zero area, or let them have varying size, or define them as weird subsets of the screen that aren't measurable. If your pixels are rectangles, though, they have to overlap or have varying size.

Edit: I'm taking countable to mean "countably infinite" since this conversation already assumes we're talking about infinite sets of pixels.
I disagree. It's an existence proof that there is a better way, and demonstrates that dealers are blocking our ability to access that better way.

Not long ago, one could have argued that the dealership model was the best you could do. Now it's impossible to argue that, since the best car-buying experience out there doesn't involve dealers.
Well, we've built the ingester/REST part and we're working on the frontend :) Our sync engine is open source: https://github.com/inboxapp/inbox
https://webmaker.org/app

This made a bit clearer to me what it actually does.

P.S.: What is going on with the submitted site? For me, it is a mixture between English and (machine-translated?) German, and a lot of images are 404
Between openssl-1.0.1k/l and openssl-1.0.1m, a major automated code reformatting was applied. Over 700,000 lines of code appear to have changed. (with whitespace ignored)

They've supplied tags to identify the start and the end of the code reformatting, but it's completely unclear if anyone has verified that they do not result in built binary changes.

https://www.openssl.org/blog/blog/2015/02/11/code-reformat-f...
The requests can vary. Sometimes they are simple GET requests, sometimes they're exploiting a cpu|memory|io-intensive process in the application and sometimes they can be reflected DNS attacks.
The problem is separating the legitimate requests from the bad requests. Sure I can see there are 5 Million requests to the main page of the app. But which are from poeple legitimately trying to use the application and which are from the botnet? You can't just do it by IP without running the chance you're going to cause problems for legitimate users.

There are ways to mitigate this but it requires being able to analyse current traffic and past traffic quickly, and at scale while having the expertise to set up firewalls and other filtering correctly
Bug 344724 – [Undo] Ctrl-Z deletes a copied project with no way to recover it
I don't understand this comparison. Meteor makes things simpler and removes a lot of low-level complexity. It makes software development simpler. By "some people want Windows", it sounds like you're suggesting that there's a better platform/framework for web development that's "plug-and-play" ready -- so easy that a non-developer could use it. I actually think that Meteor is the closest thing to this, and is the very best starting point for new developers. To this thread's question, it's also great for large applications. But at the end of the day, it's still web development -- you need to learn JavaScript, Mongo, html, CSS.
Thanks for the feedback.

In the case of Lantern, they were taking advantage of a bug in our system. Specifically, they were setting the SNI field (outside the encrypted packet) of a request to look like it was going to an actual CloudFlare customer (e.g., news.ycombinator.com) and then setting the host header inside the encrypted request to point to some restricted site. The bug was that we did not check that the SNI field matched the host header, which allowed Lantern to do what they were doing.

Lantern was not a customer of ours, instead they were exploiting this bug to essentially disguise traffic to look as if it was coming from one of our actual customers. One of our biggest concerns was that this would put CloudFlare's actual customers at risk of being blocked. And, beyond that, even if it weren't being used to avoid Internet restrictions, that someone could effectively impersonate the identity of a customer on our network is, per se, a flaw that we should patch. As soon as we became aware of the issue, we began matching the SNI header to the host header and, effectively, patched the bug.

We've always been very supportive of a free and open Internet. However, even if we support what someone is doing, we can't put our current customers at risk of collateral damage or keep open bugs that allow our network to be exploited.

Matthew Prince
Co-founder & CEO, CloudFlare
@eastdakota
These days, DDoSes are not just lots of GET requests, because, as you said, they're fairly easy to mitigate. These days, the most common attacks are various UDP-based attacks, like NTP reflection [1]. You send a spoofed header to a server that speaks over UDP, and they send a huge amount of traffic to the victim.

https://blog.cloudflare.com/understanding-and-mitigating-ntp...
Pebble pledges $1M for smartstrap development fund
The timing certainly could be worse, but this eclipse is right at the "morning ramp" period, where demand is substantially higher than during that big eclipse we get every night.
They keep fusion in the news as marketing for the uneconomical nuclear fission power that we're actually forced to use. "Any day now, we won't be producing all this noxious waste!"
A smartphone that doesn't rely on apps. No, really
What about this?

http://en.wikipedia.org/wiki/Mass_psychogenic_illness
You might like this: The Last Question by Isaac Asimov

http://www.thrivenotes.com/the-last-question/
You can't make it 100% watertight. You can't even prove to yourself on your own system that there isn't anything going on behind the scenes, unless on very restricted hardware with an open-source BIOS and no system management processor, verified all the PCI cards, USB devices, etc.
If a carbon-credit system ever gets off the ground, will Brazil have to buy credits from the USA with its steadily-growing forest cover?
There are things like amplification attacks (DNS or NTP) where a small amount of attack traffic generates a huge amount of target traffic. Even if the traffic is symmetric (1 byte to target = 1 byte from attacker) the bad guys tend to have botnets / malware-infected systems so they don't pay the cost of the attack side.

If the attackers are just sending GETs you might be able to filter them out, but if they're sending random packets you usually need upstream help to keep them from getting to you to begin with.

There are also things like Slowloris that just use up resources vs using bandwidth, those are harder to identify but easier to deal with on a server-by-server basis.
Google's Project Shield could help?

http://www.google.com/ideas/projects/project-shield/
We are rapidly moving towards making lots and lots of jobs on the low end of the skill spectrum obsolete. (and plenty of medium-to-high skill jobs as well) Non-self-service stations provide a lot of employment opportunities.
Proving Things About Biology with F#
Mobile publishing now available for Medium authors
Patriotism is not a justification for violating the law. Granted, modern politicians and civilians use patriotism to justify literally anything they want to do as long as it's in the name of the Homeland (similar to religious martyrs justifying anything they do as in the name of their God).

Usually patriotism is the last justification used by those who have nothing else to stand on, like the KKK trying to oppress African-Americans, or the Nativists trying to oppress Irish immigrants, or modern-day politicians who decry all Islamists as terrorists, or the border states trying to oppress migrant workers, etc. Each time they've exhausted all other excuses, Patriotism is the last justification for their actions. (I won't touch on Mao, Stalin, Hitler, etc because they're too tied to specific nationalist policies)

Personally, I wouldn't want to identify myself as a Patriot, because usually they're the ones standing on the wrong side of history.

Unless you were just trolling.... ;-)
'CPP' makes me think 'C Preprocessor.'
As a dishonest Schemer, I call it (inc c), less wordy, far easier to say.
Executive only needs to do a few things well but the reality is VERY few people can do those things well.

A good executive turns people into tools. You offload your problems into the minds of others and then efficiently recoup the outputs. This is far more difficult to do well than one might think. The sheer volume of things that need to be orchestrated and then mentally cataloged when you operate at that level is overwhelming for most people.
Fantastic! My only complaint is the lack of higher resolution scan - there's so much detail in these graphs that it's hard to make it all out. Fortunately, you can change the image URLs to see a larger size by changing the "format" parameter, e.g. "?format=original":

* http://static1.squarespace.com/static/54eec73ee4b0ae0904da0e...

* http://static1.squarespace.com/static/54eec73ee4b0ae0904da0e...
I think its SML in the book
Have a look at this topic, if you're curious:

http://en.wikipedia.org/wiki/Inductive_reasoning
Speculation, Trading and Bubbles (2013) [pdf]
Where I work, in .NET we use various static analysis tools: StyleCop, CodeAnalysis and CodeContract. Warnings fail the build. And we are using a statically typed language of course. Oh... and gated check-ins.

It takes a few more minutes to write some code that build but it sure avoids a lot of silly bugs. Code contracts especially so!
They are probably trying to localise the site using GeoIP. IT could be a problem if you're using a proxy like Tor.
Assuming 50 weeks worked per year (giving you 2 weeks of vacation/holidays), that's only $100000/(60x50) = $33.33/hr.

If you have the type of resume they're looking for and aren't asking ~$50/hr, you're either not very good, or more likely selling yourself short.
CryptoSteel Bitcoin Cold Wallet
> I've always seen rent defined as payment collected in excess of the seller's cost to make and hand over the product

What you described is nearly precisely the definition of market power. Economic rent is, from what I've read (IANAE), a special case of market power that applies to factors of production (particularly land).
Want to get tenure? Stay away from interdisciplinary research
We have really dropped the ball on fusion research. JET the current best fusion reactor was built between 1978-1982 (Q ~= 0.7). So from 1982 to now there has been zero count it zero actual progress with a physical device. (They waited to 1991 to actually start using it for fusion not just plasma experiments and the record comes from 1997.)

Arguably, if we had been building a new state of the art device every 5 years we would have had a working fusion reactor in the late 1990's. Though computer models suggested it would not be cost effective.

PS: Yes, the world’s best fusion reactor was designed in 1977 and people wonder why progress is so slow. Hmm, I wonder.
GC is not an answer to everything; sometimes works, sometimes you need to shortcut it.

Many people work on manual memory management for a reason http://event.scaladays.org/scaladays-sanfran-2015#!#schedule...

Security is a practice, not a programming language. Anthem uses C# and they are hacked almost every year. https://www.anthemfacts.com/
Hacker’s First Logo, Designing with PowerPoint
To be fair, when it comes to data consistency especially on structured dbs in high load environments, all-SQL solutions are usually better than, say, client side scripts wrapped in transactions
This is exactly what I was thinking. I read the blog post, then came to the comments. I completely expected something along the lines of ... "Hey, I'm the VP @ SomethingTech, we like what you're doing and will help you mitigate the attacks for free if you get in touch with us." ... to be the top comment here.
No one likes DDOSes from China. One can plead Amazon as much as one wants. Pay or get booted, there are probably 2 engineers paid 6 figures a year by Amazon getting paged for this DDOS, someone must pay for the time they spend tuning DDOS protection instead of their primary project to make attacked website accessible for everyone else.

Source: worked for AWS, was oncall during similar attacks. Nasty things with those they tend to start around 6-7PM (guess when does working day start in China).
I set up my own Postfix server about a year ago, because I wanted to send newsletters to my users and have an "official" mail box for support requests and such. I used a guide[1] to secure it against spammers. I don't use spam assassin. In the year that followed I received exactly zero spam messages. There have been plenty of attempts to send spam using my server, but the postfix filters intercepted all of them.

To make sure that my messages are not treated as spam by the major email providers, I checked that my VPS IP is not in any of the spam blacklists and configured SPF and DKIM records. Gmail spam-flagged the messages for a while, but after a couple of months it learned they're not spam. Surprisingly, other email providers (yahoo, ms, aol) never batted an eye.

I'm quite happy with my own server.

[1] https://honeypot.net/filtering-spam-with-postfix/
Yes, Project Shield is the best solution.
You can weigh the trade-off between needing to configure your environment with what Meteor gives you. I would say Meteor has a value proposition that's definitely worth looking at. The list of things it helps you with is more than most other frameworks, and at the same time it's modular so you can swap in components that are better for your use-case. You also have the benefit of still being in the JavaScript/NPM ecosystem, which is easy to take advantage of.
my recommendation, show me what's going to happen before I do it. I don't want to make a subdomain and go through the process just to look over the builder itself. Maybe show the youtube videos on the main page or some nice screenshots?

I like the page operations though, being able to edit and remove modules was quite smooth.

I would recommend on that sidebar instructional panel to put the hide button on the top right corner, not on the side.
In theory, yes - but in practice it rarely works that way.

Brands switch names to be forgotten (Comcast -> Xfinity, Blackwater -> Xe)
The answer to this question will always be "Not until X is available" where X is something needed by the company of the person answering your question.

By the time everyone agrees, it'll be 10 years down the road and we'll have a new framework.
I think it is absolutely hilarious (and infuriating) that in their opening paragraph they forgot to list spam blacklists, like themselves, as being perhaps the biggest hurdle for small companies and individuals running mail servers.

I ran a mail server for almost five years, and 9/10 of the issues I had to resolve were various anti-spam blacklists or individual hosts blocking our emails and then having customers complaining because we never emailed them.

There was never any reason given for the blocks, and our logs didn't show any outgoing spam. However all of these spam blacklists would accept a "donation" if you didn't want to wait the 24-72 hours for them to unblock you. Essentially it is a shakedown.

I've just given up self-hosting and I recommend others do the same. The issue isn't the spam, it is how much time you'll waste fighting the anti-spam blacklists and large email hosts. A job better left to e.g. SendGrid or SES.

PS - We sent tens of thousands of emails a day.
Paren ink see paren?
You need to apply the OpenSSL patches today, not tomorrow
That would be a matter of convenience and a ton of other factors. You really are comparing two totally different things.
Deliver me all my daily meals on the morning of the day, already cooked that morning, with an emphasis on it being healthy too.

Let me pick what I want for tomorrow in an app that sets out my choices.
Oh please, everyone thinks they could do a better job until they actually end up on top.

90% of being a leader isn't necessarily having a specific skill or specific domain knowledge, it's about having the courage to make unpopular decisions, dealing with the fallout alone, and leading by example when the going gets tough.
>"The thing that really gets me though is that, as a 22 year old, I (and all the other members of my generation) are inheriting the current system with no input on how we got to the point we are at now and little to no say on how it works."

If you will, try take that little spark, and reason it a little further. You'll find that the answer you eventually come up to is the following topic:

http://en.wikipedia.org/wiki/Social_contract

Perhaps, then, if you're like me. You'll conclude that it's a really poor answer, and one with a whole lot of holes. Let me know if you'd like to discuss this further, and my apologies in advance if you think I'm putting words in your mouth by making a few assumptions above.
My former employer was a medical device company (one of the big 3). While the firmware certainly played an important role, ASIC hardware did a lot of the heavy lifting. Open sourcing the firmware is a big step, but getting the hardware open too is important to truly understand what those devices are doing.
How we built analytics.usa.gov
On multipurpose-template-one, the hover-over text color change for the first row of content is not quite right.

Also I'm sure it's just in the works but the homepage doesn't seem to quite have received the design love that the templates have. Looking good!
The way I reconcile it is usually, "Monopolies are okay when the the good in question only exists because of the monopolist."

My monopoly on SilasX's labor? No problem.

Creator's monopoly on patterns that only exist because that creator found them? Reasonable.

Monopoly on all trade in salt? No, just no.

(It gets trickier for physical property because of what counts as creating, but you get the point.)
Is there someone? Of course. There always is.
Finding out whoever that person is and getting into contact with them is another story.
An Algorithm to Help Companies Become More Diverse
For them, using a DDoS mitigation service might be harder than it seems. Their project, "Collateral Freedom", depends on having a set of web frontends with some special properties. Namely, 1) the provider of the said frontends must be willing to ignore takedown / access restriction requests from (Chinese, Russian, etc) authorities, and 2) the access to those frontends can't be easily blocked by the Great Firewall of China / Russia / etc without causing massive problems to some unrelated widely used services.

(full disclosure: I do devops for one of the Russian sites that is currently mirrored by Collateral Freedom)
To be honest I could have probably used signed integers but conceptually representing DNA sequence (4 possibilities at each position) was far easier to think about that two's compliment. The idea was to make everything as small and lean as possible, to get the maximum amount into memory, and it seemed to work.

Bitcount / popcount / hamming distance as a CPU operation will have saved a lot of CPU cycles over the PG method I tried.

You sound like you know Postgres fairly well. How feasible would it be to write a CPU based popcount extension?
Mozilla MASCHE – Memory Forensic Library
regulatory compliance for biologics (stuff made by living things) is a bitch compared to normal chemicals... maybe the generics companies don't find it worthwhile.

on the other hand, making insulin with transgenic bacteria is practically kitchen chemistry, if you're not scared of injecting yourself with your own product.
PA as a service. Somebody needs to take care of all my shitty work like paying my bills on time, paying loans, managing my subscriptions.
When i move the apartment, some body should take care of the whole end-end flow. I mean they need to search and select some apartments for me, they should plan a move, they come and pack things and ship to new home.
"So — you have a name. Either it's the name of someone who has been recommended to you, and they are expecting your call, or it's someone who was on the first page of Google results for +oh +shit +need +lawyer +Pismo Beach +dwarf +public +indecency +hedge-clippers or something.

What do you need to do?"

Ah, PopeHat.
I'm sorry, but what noxious waste? You mean coal, right?
The idea here is that this will remove the need for pretty much all of that. My read on it is that it's meant to be an entirely new replacement funnel, not an additional one.

They're going to have a tough road ahead of them selling everyone on that idea, both employers and potential employees. But if they get some high profile success stories, it's possible. Hiring is faddish, there's no reason these guys can't leverage that to their benefit.

Personally, I think it's really cool they're trying this. And that the two HN posters I disagree with the most often (maybe because they post so often) are the ones doing a startup I think is really interesting. They've chosen a domain area that can have huge leverage effects on the industry as a whole (and thus the economy as a whole) if it works. I dunno if they're thinking of it like that, or would admit it if they are, but it's one of those frighteningly ambitious ideas.
Swift asserts – the missing manual
You're right, that's why we should hire the sugar water CEO to run this tech company. \s
Obama claims 'executive privilege' on FANNIE MAE
Hmm, I'm not sure what you mean by "first two squares of sidewalk". I lived on Coso Ave in Bernal Heights, where a bunch of garage doors are right next to the sidewalks. Some of my neighbors would park their cars in their driveways, with the tail end sticking out into the street, and blocking sidewalk users from crossing their driveways as a result. I can't imagine how that could be legal.
Lessons Learned Raising $1M, Then Pivoting Two Years Later
Hi, thanks for the feedback. I like the idea of placing the hide button at the top instead of the slide. We'll experiment with both.

Regarding the "show me what's going to happen before I do it." Absolutely agree. Our real homepage is: http://boldcanvas.com/ - the link in the headline is just a demo page I created so HN users wouldn't be forced to create an account just to try or product
>90% of being a leader isn't necessarily having a specific skill or specific domain knowledge

So you're saying there's a broad class of people who can do the job well rather than a tiny clique?
Nope. That "coming soon" is wrapped in an Elon-style reality distortion field and should be interpreted as "we intend to have one there one day."

What they don't tell you is they cannot open it. And that there is NO WAY it is opening soon.

How do I know? Well, I contacted the Governor of New Mexico's office, and I contacted the Global VP of Sales/Service at Tesla. That got me a call from a Tesla regional manager who told me plainly, "New Mexico is worse than Texas" and that the laws are set up in such a way that there isn't much that can be done. The law on the books states that the dealerships are protected by the force of the State Police and should any young whippersnapper auto manufacturer, say, Tesla, come sneakin' into town and try to set up shop, well the dealers will be there with the full force of the state government behind them, to make sure Tesla crawls back into the hole it came from . . . in some other state.

The New Mexico legislature won't consider new proposed laws until Jan 2016. You can bet I will be working on my representative in Santa Fe to introduce a meaningful law modeled after the legislation recently passed in other states that has allowed Tesla to do business including service its existing customers.

It is remarkable how protectionist these auto dealers are. They're staring into the future and the future is staring right back, and the future has no sympathy. They must know they're on the wrong side of history. They don't care.