skysight-inc/HackerNews huggingface dataset:
That is a terrible interview question. First, it's likely to make candidates more nervous, rather than set them at ease. Second, it tells you very little if they can't solve it, or if they solve it immediately.

My rule is that you should stay away from aha! type questions that really only tell you one bit of information.

Designing a program to solve this kind of problem might be more of an interesting conversation…
Article starts with "I despise Facebook." Aside from that possible bias, the best it asserts is that a partner at one of Facebook's VC investors is on the board of In-Q-Tel.
A physical button for digital reminders
Three Types of Harmful Hackathons
I hope they will open Swift, like Microsoft is doing with C#.
Last I checked that was stupid expensive. Here in the Bay Area Caltrain doesn't have wifi (lol?) so I went on a kick of "I'm gonna get THE BEST MOBILE INTERNET AVAILABLE ANYWHERE" to use on the train. I ended up with a simple Verizon jetpack because the satellite internet stuff comes in briefcases, is CRAZY expensive (like thousands of dollars for the equipment and hundreds for the service) and on top of all that it's stupid slow.

$2,239, up to 492Kbps: http://www.groundcontrol.com/BGAN.htm
Yeah, that's a good point, heh. Although I think the potential to abuse might as well be the same, even if they can't legally use it.
Show HN: All You Can Optimize on Your Website in a Single Report
Did you read the post you're replying to? I didn't see anything in there about "freeing the sale of opiates to anyone over the counter tomorrow." I did see a reasonable concern that adding paracetemol to prescription opiates can lead to liver failure and death. And you don't have to be an evil drug addict hippie scum to be bothered by this. People who take multiple medications prescribed by multiple doctors might be damaging their livers without even knowing it.

There is no logical reason, besides the "drug war", to add paracetemol to prescription opiates. Is your argument really that because opiates might have "side effects when mixed with other commonly abused products such as alcohol"... that therefore we should stuff them with paracetemol? It's safer to kill people who overdose or get addicted than let them experience a possible bad drug interaction with alcohol? I don't think you thought this through.
Falcon 9 is a SpaceX rocket, not a ULA rocket.

Yes, I'm aware of that.

There are advantages and disadvantages to both approaches. ULA has a long track record of going to space very reliably on single engine platforms.

That's true. Both the Atlas and Delta programs have been pretty reliable.
Is this the same thing discussed at length here:

https://news.ycombinator.com/item?id=9372913

I'm mobile so can't easily compare.
Feel free to stop with the strawman attacks at any point.

That said, I would prefer comcast ad injection to someone running firesheep. And hiding which comics I looked at for two hours isn't going to help my job very much.
Not just efficiently parallel, but easily distributable to multiple nodes.
Thanks for sharing. I didn't know that the Apple engineers were so accessible. Maybe they should run this type of conference more than just once a year, oh and without them marketing hype.
Kickstarter, Inc. and angellist
EDIT (To Clarify) Warning I am Strongly Anti-Apple Bias:

Apple has a fairly decent Open Source history.

http://www.opensource.apple.com

There is things to complain about but there are more I am concerned with in regards to Open Source (Oracle).

EDIT: I don't like Apple's products or the way the conduct business BUT I think they have done more good for Open Source than bad.
> I just wanted to show the common idea of "cryptography is black magic, you should never touch it, you can only do bad things" wrong.

Per the other thread, this is overwhelmingly likely to decrease overall security without any practical benefit.

> My scheme adds security through obscurity which may be worth the trouble.

It adds potential side channels and likely no benefit over KC alone. You've sidelined many potential problems by focusing on "if the composition is properly implemented," but that's a huge problem. The likelihood of properly implementing the composition is vanishingly small. It is very likely to be improperly implemented and provide less security than KC alone (and it costs more!)
I'm pretty new to using WebRTC, but I was able to implement it really easily using icecomm.io's wrapper. I'd have to look into twilio some more, but icecomm has been more than effective enough.
Not really, no. It's part of a whole class of similar puzzles, and they're easy to solve formulaically, so all it proves is that the candidate has done these puzzles before (which I don't personally find to be a good indicator for job aptitude). It's also the sort of thing that will make nervous candidates who haven't seen such a problem choke without giving you any indication as to their quality.
Doesn't this mean there will need to be a dynamically detachable connector between every fuel/gas line and every electrical wire that runs between the tank and the engine?

Isn't that introducing quite a few potential points of failure? Or was this all thoroughly solved in the 60s and is boring and not an issue?

This happens at lift-off for all rockets. The rockets are fueled at the pad, and the connections stay attached until the last moment.

This kind of thing was also done with the Space Shuttle.
Illumio is now worth $1B
There's a built in assumption here that you need credit... if you don't need credit then all this is moot. Everyone's so keen to be part of the system that they never stop to wonder what they're chasing... there are justifications and rationalizing and whatever else it takes to belong. None of it's necessary. The 1-3% cash back and the air miles and the fraud protection and all these other goodies they promise you are bribery to use their card so that they can get the scale they need to make the system profitable for them. They sell your information, aggregate it to marketing companies, it's a means to track your every purchase electronically etc. etc.

If you'd paid cash you could have got a better deal from suppliers by negotiating cash discounts and nobody would be aggregating your information or tracking your purchases to target advertising to try to further their way into your wallet. If you'd paid the $10K up front, which you had the cash to do so, what did you do with that $10K? Did it just sit in your bank giving you an illusion of a bank balance or did you invest it to make some return to justify putting it on credit and putting off until tomorrow what you could have paid for today? You purchased this kitchen effectively putting a lien on that money, it's no longer yours... but having it in your account still gives you the illusion that it is. It only takes something unexpected happening and that money that's not yours [which is still in your account] is easy to dip into for an emergency with the expectation that you'll pay back into it another day when you can afford that - a day that never comes, until that kitchen you've been enjoying for the last 18 months and now can't live without needs paying for...

It's ridiculously easy to get sucked into the trap of cycling one debt after another and then you're stuck with your only options being: Sell everything you own to pay it off, claim bankruptcy and start again from scratch or strive for a higher paying job, putting yourself under extra stress... and for what? The ability to raise your debt load. It's not really much surprise, the entire capitalist economy is built on debt, without it, there would be no economy. The U.S. currency is loaned (at interest) by the Fed to the U.S. Government, so debt goes right to the very foundation of the entire economy. So it's an ever perpetuating cycle.

There are rationalizations on both sides of the fence. For the record, I'm not dead against credit, I'm just saying that for every rationalization that can be offered to use credit, there are equally many reasons to avoid it.
The title should perhaps mention that it's about video decoding.
His point does bear consideration - the expert-written libraries are only expert-usable. You can still badly mess up encryption even if your basic building blocks are written perfectly. It's not just the algorithms that need to be expertly written, it's the way they're combined that also needs to be expertly written and the latter part doesn't exist. OpenSSL allows you to shoot yourself in the foot pretty easily, like choosing very weak ciphers, calculating the mac of the plaintext, etc.

OpenSSL is still too low-level for the generic developer. You want things like HTTPS, using which is still too complicated for most people (hello certificate management), but you can get it right more easily by following an online tutorial. Basically anything that is more complicated than "open socket to destination, here's my certificate" is doomed to be misused by non-experts. Oh, and it better have strong default settings so it won't pick RC4 as the cipher or something.
> how mobile operators shape their data traffic

What I've been wondering is if Apple gets any QoS concessions from the carriers for Facetime, because it usually works pretty well on 4G. Not sure if Facetime's quality is due to robust error correction, or because they've been able to wrangle special QCI/bearer status for Facetime data.

> mobile phones, WebRTC video is not yet usable

Once VoLTE + Video becomes common (eg, Verizon Advanced Calling), then it'll be interesting to see the impact on video-call quality, and whether V/VoLTE sessions can be established with the other end of a SIP trunk, and hence (browser) WebRTC from there.
This is a good talk on (what I believe to be) this software:
https://www.slideshare.net/diogomonica/bletchley
I'm quite sure you're expected to create an app from scratch.

If you're familiar enough with making an app (as it seems that you are) then I would try your best to make a new app as the idea is to present an application that is about you — think of it as an 'app resumé'; done as creatively as possible, of course!

Last year, I made my app while studying for university finals that started a week after the submission deadline — it's not implausible ;)
Very glad to hear that. I tried using RethinkDB with Clojure recently, but there are two drivers. Both are mentioned on your pages. Figuring out which driver I should use isn't a great start — so even if you don't do a lot of development, just pointing to the drivers you consider "canonical" would help.
This is a bit of an aside, but I'm genuinely surprised that Apple has a mailing list server that is totally unthemed and just like every other!

https://lists.apple.com/mailman/listinfo/researchkit-users

Frankly, it makes me like them a bit more that somehow this was allowed -- sometimes they strike me as not only design-thinking, but design-hostage, and it's nice to know that some pragmatic developer was able to convince someone that the gold standard mailing list software was good enough for them, as-is :)
win-R

f:\omghax.bat

(enter)

Still only takes a (figurative) second to run.
Being controversial is not a big deal if it is optional. You simply can not do modern web development without JavaScript. There are tons of alternatives to Ruby.
This.

The problem is that in this community you are witch-hunted if you talk about crypto and you are not a famous cryptographer.

People start with the assumption that what you are saying is wrong (this is a good thing). But then many don't have the competence to judge what you are saying (no problem. we all are ignorant in many subjects). And then, they react as if you were really wrong (this is a huge problem).
As Slava mentioned, you can use Compose.io. It requires using an SSH tunnel, though, which is a little tricky in Heroku. Here's a tunnel script I made to simplify this:

https://github.com/fanout/leaderboard/blob/master/tunnel.py

In particular, it reads the entire SSH private key as an environment variable, so you don't need to commit the key to the git repository.
PHP the runtime was built with a reload on every page load in mind, so a lot of cleaning up simply didn't need to happen. If it's in the runtime or how it's used doesn't matter.

It was a big deal when transitioning to the FPM runtime. That's why persistent PHP runtimes like FPM still have the option to completely reinitialize itself after a set number of pageviews. It's a bit like fixing leaks by rebooting, but it's fast enough not to be noticeable.
Workshape.io: We're coming out of public beta
The instapaper action disappeared again. Will it be added again eventually?
Here is their complete IP list:

https://www.cloudflare.com/ips
I was able to buy a cell phone from walmart with service for $40 for the phone, $30 for 1 month unlimited service. Paid cash, didn't have to show ID.
You'll need to change the RAM primitive to the Altera equivalent, but it should fit just fine. Then you have to figure out how you're going to interface to it.
There are some decent samples on MSDN, 56 in F# at the time of writing. Most aren't GUI apps, but some are.

https://code.msdn.microsoft.com/site/search?f%5B0%5D.Type=Pr...

My "WPF Image Cropper" sample might be interesting to you - pure F# WPF via XAML type provider. I am not a GUI dev, though, so it's probably crap design :)
Yes, indeed, and I actually suggested this on the Mozilla thread.
What makes you think anyone is going to notice? DNS is a distributed system. The NSA is a byzantine attacker. There is no instantaneous convergence on a single answer; CAP applies; a byzantine DNS attacker can deliberately introduce inconsistent answers. Virtually none of the DNS resolvers in the world also function as inconsistent-answer detectors.

There's this weird presumption among DNSSEC advocates that DNS is somehow resilient against targeted attacks (you see it every time an argument lands on "but people will notice that"). No. Not only is that not true, but it's even less true than other protocols where we know that to be true; for instance, BGP4 is also not resilient against byzantine failures, but at least BGP4 updates propagate (BGP4 is like a "PUSH" system in that regard, where DNS is "PULL").

What's even funnier about this "people will notice" objection is that people routinely notice corruption at certificate authorities... and nothing happens to those CAs. Compared to the DNS roots, CAs are trivial to blacklist.

Nobody is going to notice targeted attacks on DNS, but even if they did, nothing will happen; there is no disincentive to those attacks for the attackers.
If anything, corporations co-opted the internet from (government funded) academia. Then the corporations handed the internet over to us plebes.
Just like I can disable javascript? Oh wait, I can't!
Does having ftp support in firefox affect anyone's security? Getting rid of HTTP will in best case make people think that they are more secured, that's all. Most of the malware that is active today propagates not because HTTP is unsecure, but because we made the web an Advertisement Delivery System. Malware now attacks browsers, through Flash, Javascript and Java.. first fix this before you start working on getting rid of an established protocol.
> One is presumably Eric Schmidt warning users that Google is subject to the Patriot Act.

His intent is opaque and irrelevant.

What is relevant is that it is, and has been for a few years at this point, a matter of public record and declaration that you do not have "a reasonable expectation of privacy" when using certain internet services.
This type of behaviour would set off alarm bells at the lottery company for sure:

> The ticket Tipton has been accused of buying went unclaimed for almost a year, until Hexham Investments Trust, a mysterious company incorporated in Belize, tried to claim the prize through Crawford Shaw, a New York attorney, hours before the ticket was set to expire in 2011.

> Lottery officials refused to release the prize because those behind the trust declined to give their identities, which is required under Iowa law. Shaw asked officials whether Hexham Investments could claim the money and then turn it over to the state to be given out for charity. Lottery officials rejected the offer and said the prize winner must accept and distribute the funds.

> Shaw withdrew the claim to the prize in January 2012. At that time, Iowa Lottery officials asked the Iowa Attorney General's Office and Iowa DCI to investigate.

They don't hand $14m out without making sure the buyer is legit - - and an attorney claiming it on a behalf of a foreign company is definitely worthy of investigation.
I can sense some Strong Anti-Oracle Bias here.

Oracle is one of the major contributor to open source, see the lineup here, chances are you're using some of them: https://oss.oracle.com/ starts with Java
Exactly. Too bad nobody else pointed that out. On the contrary, Pi is transcendental and therefore cannot be constructed.
I hope it is the journalist and not the Stanford math teacher who got it wrong ;-)
>Interactive Brokers has a very robust API

IB's API is anything but robust. It is inconsistent, poorly documented, and IB have a history of changing it without notice.

It also requires all communication runs through their client side Java GUI app, which is also prone to a variety of problems.

That said, IB are a very good low cost broker with amazing product breadth. But I would suggest caution if using their data API for anything remotely serious.
Unicorns vs. Horses
Show HN: Use Email Subjects Lines to Create and Manage Lists
U.S. State Dept Releases Newly Digitized 1866 Volume on Assassination of Lincoln
> This is a lie.

It's a prediction about the future. The fact that you have a contradictory prediction about the future (layoffs and a new wave of unemployment) doesn't mean that people who put forth the opposing view are lying. Unless you have a functioning crystal ball, only time will tell which view is correct.

There have been plenty of examples of such innovations over the past century or more (dating back at least to the cotton gin) which have obviated certain manual labor and arguably have ultimately (directly or indirectly) freed up workers for more creative/skilled tasks. But somehow you're able to confidently assert that such a prediction in this case is a lie?
Briny puddles could dot Mars, new research says
Fast Overlap Ad Targeting Over 200Bln Data Points
update.bat

Who's going to take a second look at that in logs or history?
Last Startup Weekend I went to had 7 devs out of 110 people. Definitely an issue.

EDIT: All but one of the 11 teams were tech/programming required startups guys. I'm not talking about "Startup Weekend" as a whole, I'm talking about my experience at the event I went to.
Moving to Mars
Gordie Howe in high spirits, doing 'very well' after stem cell treatments
jocluteseh: Can DNSSEC be re-directed to incorrect public keys? Sure.

jocluteseh: DKIM signs the message and provides a body hash which is validated against the public key in DNS.

tptacek: SMTP email isn't end-to-end secure with DNSSEC, SPF, DKIM, and DMARC. It isn't even close. It is unsafe to authenticate CA certificate requests via email before DNSSEC and remains so after DNSSEC. SMTP is insecure.

in short: DNSSEC and SMTP hang together by threads. cut one thread and the whole thing collapses. "It's better than what we have right now" isn't an argument because we actually don't have it anyway. tptacek is 100% correct.
SleepWake, no more sleep-driving
Will Instagram Add a “Buy Now” Button?
Yeah, you got it, the people at NIST and M$ are going to do better than you.

'Academic and useless' research huh? Go read DJB's website some day, it is far from inapplicable. All the research that publicly disclosed HUGE holes in SSL? I think it's incredibly important.

As to good security being of little value, maybe ask Sony and Adobe (and even NSA) if they wished they had better security.
Google’s War on Guns
I believe what happens is it registers the functions callback on the event-loop which it'll check the next time around to see if it's done, then pushes the work to be handled in a separate pool of threads that libuv manages. When it's done, the next event-loop tick or the next time around it will execute the callback with the results. This is how asynchronous functions work anyways, but some functions are actually synchronous functions such as JSON.stringify, so if you are doing a JSON.stringify on a huge JSON object, you're literally grinding everything to a halt until you're done doing that
Hi everyone. I work on the security team at Facebook. While investigating the claims of this post, we've confirmed that Facebook doesn't use Recorded Future -- an open source aggregator of public data -- to scan any private content. That means we haven't partnered with or directed Recorded Future to scan anyone's message links.

It's hard to tell precisely what's going on based on the amount of information in the post. It's possible that another interaction, including one that could be occurring on the client machine, is consuming the URL and generating this behavior.

We'll update if any new information is discovered.
If One can't write bubble sort, a genetic solver or iterate through data (array, list, dictionary, whatever) while making decisions I think it is safe to say it is not coding.

If you can't go through a CS curriculum with it then it isn't coding? Maybe that's the distinction.

Yet I do see your point and there's probably nothing horrible about using it in your title. "Learn HTML and CSS Markup" may have been a better title, possibly even from an SEO perspective.

Again, not trying to be pedantic. Not a big deal. No data structures were harmed in the making of this title.

BTW, that aside, this nicely done. I am going to have my son go through it.
I've been working with the language for a few months. Overall, I love pretty much every single aspect of the language. I am even starting to feel like the few things that I would like to have aren't necessary (such as HKTs and ML-style functors). In terms of platform support, F# has done almost everything right (I feel like Scala made boat loads of bad compromises to support Java interop, which I don't find at all with F#). There are entire classes of frameworks for web and mobile development in C# that are made obsolete even by the simplest language-level features like Agents, ADTs, Computation Expressions, Active Patterns, Type Providers, etc.

My disappointments so far are super frustrating though. Like Jarcane, I've found quantity of documentation to be an issue. Most tutorials assume that you a) already know C# and b) are using VisualStudio, and the whole ecosystem is still very Windows-centric. It is nearly impossible to learn the language without an IDE, and all of the non-VS IDEs are pretty crappy in terms of F# support. The whole msbuild or whatever it is behind the scenes doing the building is completely opaque and incomprehensible. The compilation order issue (you basically have to tell the build system the order of compilation, with no cyclical dependencies) is pretty difficult to understand and sometimes very difficult to work with. It also makes code organization very unintuitive (you can't put code in directories?!).

All in all, it is pretty frustrating, but at least they got the language right. The frustrations will likely go away in time, so I'm willing to put up with them for now. Maybe I'll get good enough at the language to actually fix them :)
"youthful foolishness".
When Computers Cook: IBM’s Chef Watson Teaches You a Thing or Two About Flavor
> Now this is not very robust, as it does not manually incriment semver.

That was the parent's criticism. Other systems do increment semver.
Major Security Problems with Automatic Crash Analysis
H-1B visa: imminent threat to innovation
Trackers and bank accounts
Inspiration: http://www.statlogger.com
The certificate is sent before encryption is established.

But that's a red herring. Even if it was all kept encrypted, even if you ignored DNS and reverse DNS, you could connect to the IP yourself.

Yeah, technically there might be more than one hostname, but they're all related hostnames.