skysight-inc/HackerNews huggingface dataset:
> In fact, the quoted 1700 miles is roughly 25 degrees of latitude, which I don't believe would get to you South America, starting from Nova Scotia.

Although not as far, the much smaller (.15oz versus 4.2oz) ruby-throated hummingbird makes a lengthy, non-stop trip across the ocean as well. Their average trip entails a 500-600 mile journey from the Southern United States over the Gulf of Mexico to Central America and then up to 1000 miles more over land. Unlike the warbler, hummingbirds leaving from Louisiana or Texas have no land mass in between, so they're most assuredly going non-stop.

> Edit: not sure why I was downvoted. Did I make a mistake?

Maybe it wasn't intentional. I know some people accidentally mash the wrong arrow on mobile devices and you can't take back a vote.
Don't forget your power regulation.
Download some blob from the internet, then run it?

No, thanks
April 1 is also the beginning of a new business quarter. Could very well be that they were looking at the quarterly finances, and decided not to continue running a sinking ship.
I'm having a really hard time understanding what the purpose of this is, or in what sense it's a "reading guide". The vast majority of it seems to just be paraphrases of the kernel config documentation. For example:

> Here, we are asked about “IBM Calgary IOMMU support (CALGARY_IOMMU)”. This option will enable support for IOMMUs that belong to the xSeries x366 and x460 by IBM. This will also allow 32-bit PCI that do not support DAC (Double Address Cycle) devices of such systems to run properly because this system setup will have issues accessing more than 3GB of RAM. If needed, these IOMMU devices can be turned off at boot time using the “iommu=off” parameter. (These kernel/module parameters will be discussed in a later article.)

Compare to the original: https://github.com/torvalds/linux/blob/v3.19/arch/x86/Kconfi... And this goes on for page after page.

Is this kind of thing really useful to anyone? Because it looks to me like its only purpose is to attract and farm ad clicks.

---

EDIT: also much of it is confusingly written at best, and factually wrong at worst. For instance:

"Rados devices are block storage units that use CephFS."

"The following feature allows modules to be loaded into user space (Userspace firmware loading support)."

"The Linux kernel can use a rewritable compact-disc as cache space (Enable write caching). This feature is still experimental."

"Asynchronous I/O is input/output processing that allows other threads to get processed before transmission is complete."

And so on... these are just the most glaring examples that jumped out at me after 5 minutes of reading.
Unless it has changed, Cmder is just simply a VTTY for Windows, similar to/replacing cmd.exe from Microsoft. I don't believe it includes, out-of-the-box support for Unix tool chains. You would need to install Cygwin tools, or similar, to accomplish that. If you've ever tried to administer large groups of systems with Cygwin installed, then you've shared my pain.

The quickest, fastest way that I know to get the Unix shell commands/stuff up on Windows is to use the packaged Git installation (which I referenced in my previous post), but the issue then is that if you have ever dealt with semi-large code bases that involve one or two separate programming languages, then every developer has to track down all the various packages (if they exist), build them, or otherwise install / get them to work. This is often why in companies Windows devs are just given a shell account on a central Linux server to run their unit tests, or runs them inside a VM on Windows. Windows doesn't have any kind of central package manager akin to apt / yum / port for Unix systems that would allow for easy and quick installation of widely used open source software. While they are trying to push their own package manager on Windows, I don't see that as being successful anytime soon.

And, ultimately this approach (of installing Unix toolchains on Windows) is just a hackish workaround, and doesn't address the root issue that the most powerful automation toolsets in the world are all written / developed on / designed for Unix-like systems, and they simply do not run natively on Windows. If Microsoft genuinely wants to join the modern development ecosystem, they will provide cross platform versions of their browser and keep them synced and up to date across platforms, so that they can be plugged into the existing infrastructure (and thus investment) companies have made in their development environments, automated testing, and continuous integration/deployment.

Microsoft can not ignore (by virtue of exclusion) Linux / OSX (and other Unix-es) if they want wide-spread adoption of this new Spartan browser, simply because they want to push the Windows platform. That strategy may have worked in the late 90s, early 2000s when there was no other options for a readily usable, simple user experience desktop platform , but that's not the case any more.
SEEKING WORK / remote or local engagements throughout Europe.

I'm specializing in scalability consulting for web apps, refactoring, and bug hunting and I also make web app prototypes, MVPs, and proof-of-concepts.

Languages: PHP, JavaScript, Ruby, Java, C

Environments: LAMP stack, NginX, Node.js, Mac OS X, Linux, BSD

Web Tech: HTML5, CSS, jQuery, MySQL, JSON message passing, WebSockets, WebGL, mobile web development

Semi-random facts about me:

- started my career at an advertising agency
- ran a web startup for a couple of years
- have a background in bio-medical research
- made a toy programming language called np: http://np-lang.org/
- I'm a Ludum Dare fan: http://ludumdare.com/compo/author/udo/
- my pet project, a dice roller for RPGs: https://rolz.org/

--- --- ---

My profile: http://udo.click/

Contact me at udo.schroeter@gmail.com
Reducing residential water usage is not 1. expensive and 2. massively inconvenient. It's low hanging fruit that's just a total waste. Getting mods for your shower and toilet to conserve water will run approximately $40-$100 to do both. While transitioning your lawn into something that either doesn't require any water at all to a more water efficient garden will save you money in the long run.

Cutting down that 9% makes a difference.

However, I do agree with you. Ag and food corporations need to do their share as well under regulation.
The tokens are CS-PRNG, e.g. 32-bytes or larger. The preimage is stored on the client as the token. The token value received by the server is sent through a hash or HMAC before being compared against the persisted value on your backend database.

If the backend database is compromised/leaked whatever, the attacker sees the result of the Hash/HMAC, but cannot generate a preimage, so your tokens stored by clients do not need to be reset. Otherwise, a leak of the backend token database grants full access to the attacker.

This is particularly useful for long-lived tokens, like API tokens, but can also be used for short-lived sessions alike.

This is not currently considered a must-have / expected best practice, but I believe it will evolve into one, because it's hard to get wrong, and it protects against a reasonably common attack vector. Guaranteed timing attack resistance is a bonus add-on which is valuable in its own right.
You forgot to actually include the hop-ons joke from last month: https://news.ycombinator.com/item?id=9128405
Note that some cities optimize for driver inconvenience, to discourage driving through the city center.
> Another way to feel better about dilution is to realize that the valuation after every round is a mutually agreed abstraction. Until some actual liquidity event puts cash in hand, you have valuation not value.

Yeah, but your ownership stake tells you how much of the value is yours. So it kinda doesn't matter that valuations are hypothetical -- 75% of $any amount is less than 50% of that amount.
They have a typical use failure rate 10x worse than an IUD so that is pretty bad. ~10% odds of pregnancy each year you use it as your only form of birth control, whereas an IUD is less than 1%. Over 10 years, that's a 35% success rate for condoms and a 90% success rate for the IUD, isn't it?
Depends on how fundamentalist libertarian you are. Private property is the heart of libertarianism. Theft, trespassing - almost all laws that govern do so to protect private property which comes in many forms - including, but not limited to - your body, your person, your family, your house, your possessions.
One alternative is to use the database you're already using (like Postgres) until you actually need Redis.
I still don't see the problem. It is a well known argument that liberties are tend to ratchet down (never up), so that any time you give up your liberties for some new threat (say, terrorism) you are making a short-term/long-term trade off.

The biggest difference was just the Franklin was talking about self-governance rather than individual civil liberties, both these are obviously closely connected. I think your version ("people who give up their rights to self governance for temporary safety don't deserve either to govern themselves or be protected") is very compatible with the sense in which this quote is used by modern civil liberties proponents.
Thanks for taking the time to clarify. FUSE was actually a big drawback of tup and especially on the OS X platform, so, I'm definitely gonna look into Ekam!
OpenStack tries to support too many different backends for most components and is a consultants' wet dream when it comes to custom work and patches required that can be readily milked into an expensive and lengthy deployment, as well as expensive post-deployment maintainence and upgrades. It's only that at a significant (Netflix) scale can the costs of DIY be cheaper than just paying the AWS tax. (Last I heard, Yahoo employed a team dedicated to maintaining OpenStack. Also, I hear from others that this is the norm, not the exception. We looked at OpenStack at Stanford, but there are other IaaS clouds that have better opinions about architectural choices (only supporting say Xen and Vmware because they're production proven) and less code.)
So the project was built for a hobby, I wanted an encrypted phone service. But I wanted every aspect of it to be encrypted, from the signaling to the RTP. I wanted to make sure that no unencrypted client could connect to the platform. I would be interested in peering with oslec though.
I could have easily written the same post months ago, yes. None of these thoughts are new.

It's actually precisely because FDB isn't a perceived competitor anymore that I can write this. As a vendor, I actually have much less of an agenda now. It's not like I'm worried about FDB stealing a customer. If I had posted this months ago, it would have been less credible and it would have felt tacky.

The other point is that I think there's actually something to say here. I'm not just dumping on a dead product, I'm trying to show there's a lesson to learn here about trying to bolt SQL onto things (a trend). To contrast, if NuoDB disappeared tomorrow, I could write a solid post on why they could never technically achieve what their marketing said they could, but there's no lesson there. "Don't make bad engineering choices" is too generic.
Pretty much all projects can benefit from these kinds of skills. I'm a community manager and technical writer, and I make non-code contributions to open source projects. My process is something like this:

1) Find an open source thing that I use or think is interesting. This has included OpenStreetMap, LocalWiki, MediaWiki, an interactive map project at my former university, a tool my hacker/makerspace has built for itself, an educational website about open source, a tool made by the local Code for America brigade, etc. The important part is just that I like the thing.

2) Get in contact with the people - join the mailing list, IRC channel, forum, meetups, or whatever they use to communicate; look at the bug tracker and blog. Start learning about how the people work and what they're working on, and start asking and answering small questions, pretty much making friends with them in a low-key way. At this point you can probably tell whether they're reasonable people to talk to - if they're unfriendly or non-responsive, abandon ship.

3) Ask for suggestions for what to work on, and find tasks for yourself based on your expertise. Things will come up as needing improvement, and you can propose solutions to the group and start getting them done. For me, this can involve recognizing and filing bugs about user experience issues, improving website copy, writing marketing materials like social media posts and blog posts, organizing documentation, identifying holes in documentation that people have overlooked, and so on. This kind of non-technical work usually requires getting some amount of buy-in and trust from project collaborators, which is why step 2 is important.

4) Yay, you are now contributing useful things to a cool project.

I've written a little more about this as part of one of the projects I volunteer with, OpenHatch (https://openhatch.org/), an organization that helps people get involved with open source: http://blog.openhatch.org/2013/how-i-found-an-open-source-pr... + http://mergestories.com/s/improving-a-project-homepage/. The second post is from Merge Stories, our collection of posts where people explain how they made an open source contribution, to help give newcomers a realistic picture of what contributing looks like: http://mergestories.com/

This is also a helpful article: http://blog.smartbear.com/programming/14-ways-to-contribute-... - a list of ways to contribute to open source that aren't just writing a pile of code.
In a world of selfies and shared profiles, how can someone whom has painful memories of seeing themselves in photos ever since childhood supposed to join the party?

How can someone who suffers from a pretty serious criminal record ever feel comfortable meeting new potential partners who will almost surely run a background check and discover unsavory things that really cannot be explained away?

I ask these question because I live them every day.

Self-esteem and confidence about your looks is the elephant-in-the-room here. I often feel Social is like welfare for the rich.

The people whom benefit the most are perhaps the same ones whom need it the least.
Strictly speaking it's a MTV framework (like all traditional web frameworks really).

But half the time people use it as a MVC framework where URL's act as the final link back to the model.
As someone with (mild) dyslexia I didn't even realise there were people out there making friendly typography so I had a look around, e.g. dyslexie font [1] is a pretty cool read.

[1] http://www.dezeen.com/2014/11/09/christian-boer-dyslexie-typ...
Great idea. But awful theme. And no longer really relevant.

CMake is now all the rage. Like krapht said, just learn CMake and be done with it.
A global salt is not a salt.

Term people are using for a secret is pepper.

H(pepper | salt | password) type of thing.
Because all they knew of taxation was theft of the poor to line the pockets of the rich with no true benefit coming from taxes paid (other than avoiding prison).

Sound familiar?
You hit it on the head. I am not interesting in anything but calls not working. After that I have no need or want for the data.
What does "machine learning" mean here? How does the algorithm guarantee the trip is optimal?
This is clearly not the optimal road trip, since it passes through Nebraska.
^ I agree.

In general I dont understand why people think that government must act (that too via taxation) when they are not getting what they think they are entitled for. None of us are entitled for any cheap land. If someone is spending his own money and hoarding it I have no business complaining about it either.

Hoarding of natural resources is actually well studied and theorized concept in economics and is best explained by using the example of Oil. We all know that as time passes by Oil supply will only go down. But does that necessarily imply that prices of Oil will shoot through the roof ? Not necessarily. Any Oil producer will reduce the supply today if he thinks it can fetch him more value tomorrow. But more he hoards, the future availability goes up and hence the expected prices of Oil in future go down. This is a fine balance that all the people in this business understand and play accordingly. Not to mention the other sources of energy compete for the price too.

Same if true for land. The reason why people keep the land unused is because they think they can get much higher value in future when the land is even more scarce. But the very fact they keep the land vacant ensures supply of land in future and/or at sufficiently high price. If somehow the person if forced to sell of his land today, whatever reduction in land prices we get today, we will have to pay it back in future by even higher real estate prices.
FoundationDB solves completely different problems than Teradata. FDB isn't an analytical store.
SnoopSnitch – An App That Detects Govt’s Stingray Mobile Trackers
I have never personally used the service, but the design from the ground up on ghost call is encryption, using all open source phones/etc (I think ostel does this as well) I also wanted to prevent any unencrypted client from connecting either intentionally or by misconfiguration.
Completely agreed. There are such a ridiculous number of edge cases here, that it makes much more sense for this to be done by a JavaScript library that either comes with a huge number of configuration flags (which would be totally inappropriate for a built-in DOM function), or else whose source code is designed to be edited directly. (E.g. do you want a bullet to become a "•" or a "*" or a "-", etc.)
It's not good for NSA if companies/people have private clouds.
For single people moving to NYC, Battery Park City would be the last place I recommend (I would look at NoHo, North Williamsburg, and Bushwick). But if you have kids, it is a great option.
Strictly speaking... it depends.

Lets assume the hash function being used is SHA2-256.

The input block size there is 512 bits (64 bytes).

So if adding the salt pushes the total length of the hash input past 512 bits then it doubles the runtime.

I do not see any particular advantage there over simply running the hash function twice.
Make sure you are using TLS, it will always fail if you don't have TLS on (port 5061)
Just to add to this:

Current traffic light controllers and/or vehicle detection system (VDS) units are also fairly ruggedised: they're designed to live in outdoor cabinets with minimal active cooling, survive up to +50C (or more) while still operating, and have long replacement lifecycles.

Modern equipment capable of processing imagery "in the field" - some kind of x86 machine - would have a hard time meeting these requirements for the same cost. Ruggedised machines do exist, but at a significant price premium.

The other option would be to ship that data back over fibre (common), but that also creates a dependency issue on the network and may require network hardware upgrades to deal with the big increase in h.264 encoded video traversing the network.

I'd love to see more of this happening, but it's an extremely conservative industry/market.
I like how any other .google domain leads to a default IIS page
It would be good practice to reset your auth tokens in the event of a database compromise anyway. In most cases that's a low-cost operation. The advantage is that it rescues you from the possibility that the attacker logged auth tokens when they were passing through one of your servers.
Why do I feel like some of the EFF articles are distinctly one-sided when it comes to certain topics? For example what about illegal government expropriation or interest-based selective-quasi-legal interference in economic affairs (i.e. Yukos) - or rampant ignorance of patent and copyright laws (various Chinese Manufacturers).

Unfortunately when an issue is presented entirely black and white as:

confer expansive powers on corporations and undermine democratic rules

we cannot let such a secretive, corporate-driven agency to pass digital regulations in secret.

etc. etc.

It's hard to come away with any real understanding of the issues at hand.

Disclaimer: I am longtime supporter and EFF member.
For me part of what makes the interactions subpar now is that one or more parties is participating via mobile devices and input on mobile is borked. I am overly eager to be brief since typing on the mobile is so painful. This makes it difficult to have nuanced conversations.
As a new-comer to open source projects recently, I found it was hard to get a handle on the 'roles' in a project. I was used to working on corporate, in-house technology projects where there are plenty of non-technical activities to perform (PM, Business Analyst, End-User testing/training, Governance, etc) - but it isn't obvious how those apply to most open-source projects, or even if they are required at all.

I found this link pretty useful to breakdown the activities and roles:
http://oss-watch.ac.uk/resources/rolesinopensource

Like everyone else will say...first involvement is a bit nerve-wracking (How will people respond? Can I make a decent contribution? Will I look like a total noob?), but you'll only feel that way once.
At least their code is on github and you can inspect..
Use bcry—ah, fuck it.
Fair enough. You can also build the binary yourself, since it's all open source. https://github.com/exercism/cli/releases
I don't really see a comparison of the meat industry in California compared to other agriculture in the state. I see a lot of facts and numbers comparing eating a steak vs showering, for example, but if the steak came from the other side of the country, then it would make little difference in terms of the Californian drought.

Looking at a source from the HuffPo article (http://pubs.usgs.gov/circ/1405/pdf/circ1405.pdf), I can see 188 million gal/day used in livestock in California, while a staggering 23,100 million gal/day is used for irrigation.

So no, giving up meat would not really help with the Californian drought. It is true that meat consumes a bunch of water, but that is a drop in the bucket compared to the agricultural use.
'Germanwings passenger video' is authentic, says French magazine
It already is for me. I had to spend ~2-3 days recently debugging IE11's utterly abysmal dom performance and stylesheet performance. Smooth as butter on chrome, 4 FPS on IE. The only way to fix it was to display: none everything I could, and we're only talking about a few hundred dom elements.
Nah.

You're not interested in talking about this intellectually. Have a good evening!
At first I wanted to complain about BuzzFeed, but this article is actually solid journalism. Thanks for the share.
I've had a lot of fun working with Code For America brigades. It's social, low pressure, very newbie friendly, and a great way to meet other people who are passionate about tech.

http://www.codeforamerica.org/brigade/
Groovy? There's a transpiler called "Grooscript" that generates Javascript from Groovy syntax, if you don't like Coffeescript's indentation take on javascript.
this whole discussion is a red herring. Of course all current KDFs include salting as a form of key stretching. That's because no one designing them is writing off rainbow table attacks.
My last employer wanted to look at OpenStack as a drop-in cheaper replacement for VMWare vSphere - and unfortunately, it wasn't that simple.
Interesting. It's clear that this goes way beyond merely the paper in question.
Hehe, well spotted. Hundreds of miles and of course I should have said a '$9 billion water bond' too.

Of course, one day headlines may read 'California to import water from Moon,' and I will be hailed as a great visionary. You read it here first!