skysight-inc/HackerNews huggingface dataset:
I think there's value in writing code for yourself at times. Every other time in life engineers are told by their managers, professors, and anyone else who's overseeing them what to make and do. Doing a hackathon in this format minimizes that pressure and gives people a time and place to gather and just be creative for themselves.
Heheh, to each their own :)
Rocket engine with electric pumps
Would be great to see them merge the pull request for cocoa pod support.
Nomiku (YC W15) is hiring engineers to make cooking great food easy
If you use the same key for KC and CC, CC can (and hell, in all likelihood probably does) leak bits of the key.

So yes, there is a way of breaking this construct when used the way you said.
This is only the start of the corruption thats going on in the lottery. I'm the CEO of Jackpocket which is a mobile lottery app that we've been building pretty quietly. We're trying to bring the lottery into 2015, but a big part of our mission is bringing more transparency to the lottery and holding states more accountable to where to funds flow. I'm sure a bunch of you have seen the John Oliver video. The lottery has had a lot of dirty stories behind it. Really needs to be cleaned up because at the end of the day a lot of states need the revenue for social services.

Shameless promotion: If anyone is interested in giving our beta a try you can go to http://get.jackpocket.com for iOS or go to www.jackpocket.com on your Android device to download the APK
C# is 15 years old. F# is 10 years old. It's great that Microsoft is in the process of open sourcing their code. However, it gets a little old when they're held up as some example to follow. Objective C has been open source for a long time. How about, let's hope Apple open sources Swift like they did with Objective C.

http://en.m.wikipedia.org/wiki/F_Sharp_(programming_language...

http://en.m.wikipedia.org/wiki/C_Sharp_(programming_language...
Last one I went to - 2012 - was a whole mess of tech folks. One of the larger teams had... 17(?) people on it, 10-11 of which were 'technical' of some stripe. I walked by and heard 3 folks arguing "less vs sass".

Our team had just 4 people on it, and I was the sole tech person. We came in second place (well, tied for second).
You don't mention separate computers until now. It's a big difference. I thought we were discussing implementing crypto, not some theoretical properties you achieve when conditions are just right.

I'm not saying trust the Windows implementation of AES, you can put it through some other cipher with a strong implementation as well, but don't just make up your own one.
Hi everyone - the team here at Recorded Future looked into this and dug into our logs to confirm what happened.

Our systems followed this URL after it was posted on a public site. Our system constantly explores links published on the web. We've checked our logs and confirmed that this is what happened in this specific case. It's not related to any Facebook chat messages containing this link. Our system doesn't access that information.
I think to say we can't build safe cryptographic protocols is too strong. I'd say that it's very hard to design safe systems from the ground up. But it's still possible to realistically and practically work around certain threats without opening another vulnerability.
The modern argument isn't "don't roll your own crypto". It's "don't build with crypto until you've learned how to break crypto". There are plenty of resources for people to learn how to do that online. Skipping that step and then shipping weak crypto is inexcusable.
I'd love to hear from some of the team who built this about differences between Keywhiz and Keyczar, which to my mind was the best-practice open-source cross-platform solution to date (i.e. if you're not relying on things like AWS Cloudformation config or Heroku config vars to "manage" secrets).

Obvious pieces to me appear to be (1) roles and auditability (2) end-user front-end (3) filesystem interface & associated ease of access for various services. But I'm not an expert!
Show HN: PolyBrowser 2.0 – Linux/Firebug/LastPass compatible. What do you think?
e.e. spammings (2011)
GE and Ron Howard planning TV series covering science and tech
Bitcoin vs. USD: Can Cryptocurrency Beat Fiat Money?
This actually seems pretty useful. I'll be sure to check it out for my next Java project.
Looking at going to battlehack (from paypal) this weekend. Wondering how it fits in to the "3 types" from the article - doesn't seem to fit in to any of those 3 specifically.
I've done Startup Weekend once before and it felt like how the "The Business-A-Thon" was described. My friends and I did not know this would be the case going in and spent all of our time pumping out an MVP (which worked!) while the teams that won largely didn't have ANY code to show for their time. It was all slides and marketing talk. The winner DID have code but it was a <1hr rails app thrown together with no styling just a form to submit data to the backend and I don't even think they got it to process CC's (it was crowd fundraising thing). Ours was well thought out, looked nice, and WORKED yet we were beat out by people who could put together a more appealing keynote presentation.

It was a pretty big letdown and I haven't been back to SW or any hackathons since. I love banging out an MVP in a weekend with friends but not if we are going to be judged on our presentation and not our work. I know, I know that's how the real world works as well but I just expected better from the experience. I also understand that maybe SW is not aimed at being a hackathon but I just wish they could have given more weight to something that worked and was accessible today (also we spend the whole weekend minus about 8hrs total for sleep between 2 nights) vs a lot of marketing/sales talk (who left the venue early and showed up late).

Quick edit: Just wanted to say that I see this more as my failing to understand what SW was instead of me blaming SW for not meeting my incorrect expectations. SW is fine but it's just probably not for me.
Medieval Marginalia and Social Media
I would say tying language's main package installer capability to monetary need of the company hurts how I will node/npm as a stable platform.

Imagine if RubyGem/PythonPackage/NuGet goes with this stragtegy.
Joe Rogan Interviews Alex Winter about His Deep Web Documentary
Endless: The computer for the entire world
If you can wrap your head around advanced C++ concepts and idioms, learning other languages will be a walk in the park. All the knowledge will be 100% transferable to anything you use in future. Also a lot of companies using java, c# etc will take c++ experience as relevant experience even though you aren't a java/c# expert, but the inverse is not true.

It's never a bad idea to learn something that has shaped essentially everything that has come along since.
You didn't get your Webvan delivery this week?
You should give Snapzu (http://snapzu.com) a try. We're trying to keep improving on it, so any feedback is welcome!
http://aviationweek.com/space/rocket-lab-unveils-battery-pow...
I guess related to this?
Colorado now allows equity crowdfunding
The secrets to great commit messages
Microsoft acquires mobile BI startup Datazen to compete with Salesforce, Tableau
We’re pleased to announce PolyBrowser Version 2.0, which includes significant speed and technology enhancements:

- More popular addons, including LastPass, Firebug and Evernote
- Now available for Linux
- Faster UI and scrolling speed
- Support for enhanced HTTP/2 standard
- Misc fixes and improvements

Let us know what you think!
A Hackathon cost less money than you'd think. Typically for a day long event you can rent the place, get 3 meals, drinks and snacks including time spent for 40-50 people for about $2k. Which for a business isn't really all that much.

Disclaimer I help organize the described at the bottom of the article.
That's true, most people don't. Does it mean those who do know about what is happening with their information/trust should keep quiet?

May be (just an example), you might not have deep knowledge about cryptography, does it mean those who have the knowledge should not call out the problem when they find one?
Thanks -- fixed. Will take a little bit to push the site update live.
> Either this clause is needed for the entire world (since BSD is used for trademark'd software all the time), or it's not needed at all.

I'm not sure I follow your argument. Obviously, different individuals/organizations desire different licenses for the software they produce. If that wasn't the case, one could argue that only one software license should exist. Also, as we all know, software licenses are a fairly tricky legal matter. Perhaps Apple's lawyers just decided that adding that sentence is safer.
Twirssi for me with Pushbullet notifications and regex highlighting :)
Hahahahahahahahaha.

Fucking no.

Effectively all of Oracle's "open source" things come from Sun Microsystems, upon which Oracle happily latched onto and sucked dry.

Oracle has what's called the "sidaM Touch". It's like the Midas Touch, but instead of gold, everything Oracle touches turns to shit:

Java -> shit (though maybe slightly less so now).

Solaris -> shit. OpenSolaris -> shit, now dead (thank the Lord for illumos).

OpenOffice -> shit.

GridEngine -> shit. Lustre -> almost became shit and died; would have if it weren't for the Oracle-side devs jumping ship.

NetBeans -> in the process of becoming shit.

MySQL -> shit (though it pretty much already was; somehow, though, Oracle managed to make that worse and prompt the existence of MariaDB); I realize this wasn't Sun's, but it's still an open-source project that Oracle assaulted, robbed, and left to die on the cold streets by the dock where Larry Ellison's (admittedly pretty badass) sailboat is docked.

OpenDS -> dead (though it was mercifully forked into OpenDJ).

Project Wonderland -> now limping around as "Open Wonderland" after Oracle forcibly amputated its leg.

By some miracle, the only things that haven't completely turned to shit or died (or both) yet are Virtualbox and SPARC (though OpenSPARC is effectively dead since Oracle didn't continue it).
> "50/50 chance node will completely collapse within 10 years or so"

Wow, way to be real assertive with that statement. Hedging your bets for a prediction that won't really matter in 10 years.

I am not sure why you think ruby is dead considering the amount of Rails apps and the ecosystem that surrounds it.

If you read about their seed round, one reason investors invested is because a lot of other companies rely on npm/node. So their thinking process is that even if npm is not profitable, it at least makes their other investments more robust by making something that other companies rely on much stronger.
How would you compare and contrast this with http://openhft.net/products/chronicle-queue/? (which I knows does a bunch more but seems like it could be used for this purpose too).
Looks like they took it from http://opensource.org/licenses/osl-2.1.php
You are your first investor
> Initially I was partnering with Google, but now I side with Oracle's decision, as it is now proven how Google just pulled a Microsoft and fragmented the Java eco-system.

I'm not sure that's a good enough reason so say that it's "ok" to claim that an API is copyrightable. The idea that I might have to ask someone permission just to make API-compatible alternate implementation seems ridiculous.
> Sun would have sued Google if they had the money for the lawyers[0].

Actually:

> Just because Sun didn't have patent suits in our genetic code doesn't mean we didn't feel wronged

implies just the opposite.

The rest of your post has nothing to do with whether APIs should be copyrightable or not.
I wonder if people see "Good interview question." and think that also was intended to mean "This is a good interview question that would work well consistently for a broad swath of candidates and should be given a high weight and/or be used exclusively to rule people out."

For those people, it might be beneficial to stop making such assumptions -- doing so seems to reflect a tendency to jump to conclusions.

There is lots of room for tough interview questions that only a percentage of people do well, provided that your interview as a whole does not skew too much towards any one question.

Personally -- and I don't need people to agree on this point -- I'd rather setup an interviewing process where people don't ace all the questions and that is considered ok. I'd rather see how far a candidate does across, say, 10 relatively deep, hard problems, even if they only do well in a few of them. In other words, I'd rather find out where a candidate excels rather than "average out" an interview so that "on average" candidates don't think it is too hard.

To sum up what I believe to be true: heterogeneity and diversity is good, both in your interviewing questions and your team. Don't be afraid to ask tough questions -- but if you do, think hard about how you evaluate the responses.
How does Siri's biting humor work?
How it can answer to so many questions in a humorous way? I'm interested in this humorous algorithm.
> Actually, there is no need for that. Type safety has nothing to do with software being more reliable or more secure.

If you said this to me in an interview I would politely end the interview there and you would not be hired. A high school student with no programming knowledge at least can be taught. If you're confident in what you just said, you're both ignorant and unteachable.

I really can think of no more scathing indictment of Go than this is the thinking of a typical Go user.
I recently went to a hackathon where participants owned code they wrote, but no mention was made of who ideas belonged to. What category does that fall into?

Since the general HN consensus on such things is "execution > idea" is it all right if a hackathon says "We might use your idea in our products"?

PS. Obviously, it's never OK if they say "We own your idea and you can't use it anymore".
Well I am not sure about Facebook but a relevant comparison might be the British newspaper the News of the World[1]. It held an (assumed) unassailable position as one of the oldest and most widely read English language newspapers. It was shut down by the revelations that they (allegedly, and plausibly) hacked voicemails of a murdered teenager. A privacy issue.

[1] http://en.wikipedia.org/wiki/News_of_the_World
Static Single Assignment Book [pdf]
"We interpreted our findings to mean that anti-female bias in academic hiring has ended. [...] a time when women in academic science are seen as more desirable hires than equally competent men."

Welcome into the era of anti-male bias. You know, cause 'equality' and shit.
I think now that it's on GitHub, it's a lot more accessible and easier for developers to start pulling the source
Hey, its Hung, CEO here.

Thanks for your comment - this is something we have thought long and hard about. We have placed restrictions against obvious gaming tactics (i.e requiring added team member to have the same email domain AND verify it before awarding the credit) and will be relying on these, as well as the vigilance of the community to help us identify bad actors on the platform.

As with any response strategy, its an evolving game for us. We'll keep a very close eye on how employers behave and will respond accordingly
Before I pick apart the obvious points, keep this in mind: do you __need__ DNSSEC right now? Not would it be helpful or nice or make things a bit more secure, but do you need it?

--

> 1. DNSSEC is better than no DNSSEC.

You can't use your argument to defend your argument; this is circular reasoning and therefore illogical.

Also, the commenter has no idea what protocols use crypto in what way as many of them are proprietary.

> 4. [...]There may need to be some software adjustments to fully accommodate DNSSEC. However, there currently exist several DNSSEC plugins, extensions, or modules for several end user browsers. Thus, the code base has already been started, making improvements and merging code bases is the next step.

This is like saying "Replacing cars with driverless cars just requires a software update". Yeah. On every car and road. No biggie. I'll put it all on my Visa.

> In short, if a devops can type a few characters in a DNS record, a devops can deploy DNSSEC within a few hours depending on the domain complexity.

You don't need to be "a devops" to make a DNS record change, but ideally you would call this person the domain name record owner or DNS administrator. This shows little understanding of how DNS is deployed in the real world.

> Generally #6 is specious.

If you consider "we have to upgrade our OS on all our systems - which may range from 1 to 100,000 depending on the organization - to gain a marginal amount of security we didn't need before" to be specious [assuming Windows comes with a validating stub resolver now].

> There is a vulnerability in DNSSEC, that is openly listed in the RFCs, that indicates subdomains are enumerated. [..] However, for simple domains with a few hosts, enumerated architectures should be a minor problem if a problem at all.

"Please ignore this information leak."

> This sockpuppet Anti-DNSSEC rant is inaccurate, incomplete, and presents a picture of DNSSEC that is unsupported factually, mathematically, and architecturally.

"I can't argue the point that we don't need DNSSEC, so let's just throw some hyperbole around and hope nobody notices I don't even try to prove my claims."
I'm not surprised with Singapore's kids being smart, but Albert and Bernard really impressed me :)
Here's a solver in python (just an hack, don't unleash hate on me).

import collections

dates = '''may 15 may 16 may 19
jun 17 jun 18
jul 14 jul 16
aug 14 aug 15 aug 17 '''

def dups(xs,pos):
return [k for k,v in collections.Counter(x[pos] for x in xs).items() if v>1]

days = dates.split()[1::2]
months = dates.split()[0::2]
dts = [(d,m) for d,m in zip(days, months)]
# A doesn't know, and knows B doesn't know-- cut days occurring once
dts = [dt for dt in dts if all(not(dt[0]==d or dt[1]==m)
for d,m in zip(days, months) if days.count(d)==1)]
# now B knows-- cut dup days
dts = [dt for dt in dts if dt[0] not in dups(dts,0)]
# A also knows-- cut months with more than 1 day
dts = [dt for dt in dts if dt[1] not in dups(dts,1)]
print dts
Workflow for Apple Watch
Which is why scientific tests have a placebo option.

Very loosely, what hypothesis testing is telling you is whether your results are so aberrant that they can't just be explained by model variance (coins flipped at random). The hypothesis that can't really be tested is whether your model explain most of the variance in observed data.

If I take a random sample of people, ask them whether they're male or female and what's their yearly earnings, I'll find statistically significant differences in averages; however, that will explain only a very small portion of the total variance in wages, given that these also depend on education, skills, experience...

It could be that the main source of variance in the poster's experiment is the time of the day emails are sent. How would he know? When doing crude A/B testing one hopes that all the things in the world one _isn't_ controlling (is it raining? have local sports team won trophies?) are uncorrelated with the control variable. But here it might not, there might be something very different between the batches he doesn't know about.

And he's proud of that!
This is their second product. They have a private npm repo service, aka npm enterprise.
Microsoft Acquires Datazen for Multiplatform Mobile BI
Ad 2) most groundbreaking projects you know originated as messy ad-hoc personal projects and not in production-sanitized environments (look even at GPG, embarrassingly for crypto community with one almost bankrupt developer). Crypto-logy/graphy is an art, someone has a bright idea while lacking in other dimensions; the crypto community instead of embracing this idea and helping this person to bring something excellent to the world, shoots them instead down and point to obvious flaws that can be fixed in minutes by someone experienced, while keeping the new idea intact. The crypto requires such an enormous amount of talent that it is bright individuals, not companies, that make things move there, and quite often the more people involved, the worse results.
Exactly. And if the first cipher is a secure cipher, with no obvious sign it'll be broken any time soon (like AES), why not just use it instead of wrapping it over some homebrew solution?
Sorry it's not related, but what tool did you use to get your plagiarism report in the documentation? https://scrapple.readthedocs.org/en/latest/#plagiarism-repor...
I wonder if I can still bring a belfie stick
Interesting, I would be very interested in learning more about Metamarkets transition to Samza, as 1 yr ago they were using Storm instead [1] [2]

Or may be they did not transition and are actually using both, I don't know

[1] https://youtu.be/3Qb_2GGRz24?t=20m24s

[2] https://storm.apache.org/documentation/Powered-By.html
This is relevant now because of the United Launch Aliance's proposed method for capturing the first-stage engine block of their new Vulcan rocket.

We've captured missile payloads falling back to Earth using helicopters many times, so this isn't anything uniquely innovating, though hopefully it'll give the ULA a good return on investment, something that'll give SpaceX a run for it's money.

The ULA has been openly pessimistic about the ROI for recovery, so it begs the question of why they're even trying this in the first place. The reason is that SpaceX has forced them to. If the ULA doesn't have something to show investors, then they're going to be in trouble.

Heirs to even more hairbrained recovery schemes in the near future! This is great stuff!
You might be just one of the customers we can cater for at Dhi ( http://www.dhi.io ). Sorry, for the self promotion - but your problem is exactly something we think, we can solve.
We are attempting to change the way people perceptive programming, basically from a set of instructions to a set of features to have. If you are interested in Front End Development ( Building UI's ) then I would say check us out. We are still not out yet - but voice based programming is in our agenda of things to add( or you could just use some other voice recognition software! ).
I've done SW before (see comment above) and not all the ideas were tech-related but most were. There was one group working on vertical farms/fisheries(?) I forget the word they used but it was some sort of AquaPond or something like that. Also IMHO SW does not care about actually producing a working example it only cares about the business idea which was disappointing.
In TIOBE index of programming language popularity (based on web searches), Ruby is ranked 18th, down from 11th

The TIOBE method is rather meaningless below rank 10 (and probably above, too). The delta between spot 10 and spot 20 in their ladder is a mere 1.1 points (of 100).

Do you really believe Delphi and ABAP are more popular than Ruby, as their table claims?

It is supported by overall job trends

Huh? In both of your linked charts Ruby is trending upwards.
MySQL, which - as one of the worst victims of Oracle's sidaM Touch - ended up being forked into MariaDB, and is now effectively irrelevant outside of legacy deployments since anyone who knows what they're doing has switched to PostgreSQL and anyone who doesn't know what they're doing has switched to MongoDB.

MySQL as packaged by Oracle is quite literally a corpse. MariaDB is a reanimated corpse.

And such is the tale of an open-source product acquired by a multi-billion-dollar company who made those multiple billions of dollars entirely on selling a commercial product against which the open-source product competed. Competition-elimination-by-acquisition at its finest.
I wouldn't exactly count on this. Chinese "pi alternative boards" already include gigabit ethernet, Android apparently also includes support for wired LAN (but somehow the manufacturer of my tablet went broke before they could sell the adapter cable)...