skysight-inc/HackerNews huggingface dataset:
If you have an expectation, you have a probability. Not a numeric one, but a probability nonetheless.

Nobody has ever landed a rocket before. But we don't expect the rocket to turn into an alarm clock or suddenly develop antigravity. In fact, we have quite reasonable expectations on what behaviors the rocket will exhibit. We might, for instance, expect the rocket to crash more than we expect it to land. What else does that say rather than p(crash) > p(land)?

(Of course, this may well come down to "probability as ratio" vs. "probability as anticipation", which is probably a matter of preference.)
but they're all related hostnames

Huh? I used to have ~100 hosting clients per IP address, none of whom were in any way related to each other (other than in having chosen me as a hosting provider).
What is the actual windows service that is involved/vulnerable?
Free Porn Videos – HD Porn Movies
It's IIS.
You know, I'm not sure I want to take advice about what makes a great product from somebody whose own homepage fails to properly hyperlink to their own projects.

Sure looks like good design though. Pity about the functionality. :P
What service outages? I have seen like exactly 1 for github ever, and npm used to have issues but has been rock solid since the company launched.
Show HN: Brainfuck with threads and assertions
That likely isn't sufficient to absorb the current population growth, let alone make inroads into the demand/supply imbalance that has built up.

You probably need 3x that construction to start to have any effect.

I don't buy the 'nowhere to put it' argument either. There is tons of ex-industrial land around San Francisco that could be repurposed into high density neighbourhoods. Look at the Canary Wharf development in London for a good example.
Creating a CC-BY-SA video archive of a Chopin-era piano
Great idea but i would doubt the cost of service maintenance when it comes to a machine. Human labour ends up to be more cheaper than getting a robot.
So the disclosure mentions that there are no mitigating factors. does this mean that certain versions of windows run Http servers by default that users can't disable?

That's pretty scary
It says HTTP.SYS. Which is IIS if listening on HTTP, and anything else that uses the HTTP API (like .NET's HttpListener).

It's so awesome when you move HTTP stacks into the kernel, where they rightly belong.
Let it be said that the Rust community believes in defense-in-depth. A low-level language with safe defaults is only one piece of the equation; a complement rather than a supplement to testing, auditing, fuzzing, sandboxing, and so on.
The phrase "looks like shit" borders on begging the question. If it means anything at all, it's presumably referring to an appearance that's inherently as repellant as, well, shit, and sure, that's tautologically no good.

It's also not clear to me that the appearance of even most bad apps reach repelling depths. My experience is that utility failures are a lot more common than complete aesthetic failures.
This is interesting, so this mean that you can not change the insurance company of your house offered by the bank to other company during the mortage?
SQL is an initialism for Structured Query Language. So the correct pronunciation is "s-q-l". Acronyms have a natural flow and can be read as is (NASA, LASER etc.). Initialisms do not and must be read one letter at a time.

Grammar. It's magic.
San Francisco Supervisor, Mayor Proposes Tighter Regulations on Airbnb
I don't know if HTTP.SYS is included in every install, but you do not need to be running MS's webserver to use it. Instead of letting apps bind to port 80/443/whatever and doing HTTP themselves, MS encourages using their special interface to make the kernel listen for you. So yes, people might be accidentally running this.

Does Remote PowerShell bind to HTTP.SYS or do its own thing?
They're still supporting IE9 in 2.0. They're dropping IE8.
...but I just finished updating my servers!
TokuMX still provides a lot of features that TokuMXse (vanilla with the tokumx storage engine) doesn't, like multi-document ACID and clustering keys. I would happily use it over vanilla if I was confident it was going to be well supported.
Just a note: the comparison with foundation db isn't all that apt -- Sun/Solaris+ZFS/Oracle is probably a more apt comparison to what could hypothetically change if RethinkDB is bought up (by, say, Oracle..).

I'm not suggesting that is likely, but that it's more what would/could happen -- there is already a real, working, full product that wouldn't disappear over night. And a commercial fork would likely be pretty painful for everyone, just as closed Solaris is looking less and less interesting as both many of the minds behind the great parts of Solaris work on Open Solaris in one form or another, and as fewer community resources go into closed Solaris.

I see the AGPL (as opposed to some ad-hoc license) as another benefit for RethinkDB. Many might not like the copyleft-part -- but at least it is a known and well-documented quantity -- no surprises likely to come from/with forking and/or when trying to merge with other Free software (be that BSD or GPL or...).
We're alums (YC W12 and S09). We do mock interviews every batch. If you're interested, reach me at jason at 42floors.
That's not the common case, though, and is completely awful to use as an anonymity measure.
Have a read of the linked page again. A large chunk of the performance issues are because in many cases you can't just "use BNDMOV/BNDMK rather than BND{ST,LD}X".

There are a number of data structures where managing bounds explicitly has... issues. Namely, you end up with a lot of overhead. And the entire purpose of hardware support is to prevent the overhead.

Something like, as I said, an opt-in assert when you read past the end of your stack frame, or write before or after your stack frame, doesn't have the overhead. It doesn't prevent a lot of things - about the only thing it prevents is stack smashing - but it's better than nothing and doesn't have the overhead.
I've been developing on lots of platforms for many years, but mostly have preferred Apple platforms because I liked the UI, and because I liked the API. But I have never liked the company behind it.

I'd rather code for Haiku (http://www.haiku-os.org/) however I don't see a way to get paid for it yet.

I'll get back into Linux. I've tinkered a bit with the Linux kernel and drivers. I have the O'Reilly "Understanding the Linux Kernel" and "Linux Device Drivers" books. I'll read them, I have some ideas for the kernel I'd like to try out.
Bubbly (YC W15) Is Firing Its First Engineer
When crimes are committed by law enforcement, the penalties should be higher than for non-LEO.
WinRM (AKA PowerShell Remoting) uses HTTP.sys and is on by default on server SKUs.
The idea that process and policy addresses this problem is wishful! By design and by law, the most popular and important TLDs are controlled by governments, and, particularly, the US and UK governments. The most popular generic TLD after COM/NET/ORG is IO, which is controlled by the world's most unhinged signals intelligence agency.

You are advocating for a PKI that is literally shrink-wrapped around government-controlled namespaces. For a security protocol on the global Internet, that's an utterly unforced error. It boggles my mind that anyone had ever considered it, and I am thankful that it is a dead letter now.
Since I got a couple of RPi's for fun, I've been thinking of uses for them, that would augment the security of my regular Windows PCs. I've set up a file backup method, where the RPi "pulls" files from my PC via my home network, but does not grant the PC read or write access. This is all just garden variety Linux commands, mounting the Windows share, and copying files from it. I think that my method is immune to "ransom ware" attacks. To cloak itself, the ransom-ware has to decrypt files when they are fetched, until it decides to lock you out.
Water is not very compressible, and it's very cold. Two things that a hot, thin rocket engine probably won't like.
You should link to your site.
My guess is that it'd be dangerous for those who might be swimming when a storm quickly moves in.
I hesitate to comment (we've had a few copyleft vs BSD etc-discussions...) -- still, I think the best way to look at the AGPL is as the GPL patched to work around the move from software distribution to software as a service: the end user no longer gets a copy of the software, and so the GPL doesn't protect the end user any more (which is who the GPL is for, incidentally the end user might also be a developer -- but that is incidental: the first Freedom (Freedom 0) is the freedom to run code. You don't have that freedom with SaaS -- if the service provider goes away, so does your ability to run the software).

Now, one can be in agreement with the idea that the four freedoms are important, especially as we increasingly live in a world where software is not only convenient, but necessary in our daily lives -- but the idea with the AGPL, and why it is needed for server software -- is pretty clear.
At AWS Re:Invent last year someone from the MLB gave a great presentation[1] on technology usage in baseball and its benefits. It really opened up my eyes to a whole segment that I had never really considered.

[1] - https://www.youtube.com/watch?v=847HY-JATrs
this mean that certain versions of windows run Http servers by default that users can't disable

Apparently yes; this is on Windows 7 and above:

http://www.mikeplate.com/2011/11/06/stop-http-sys-from-liste...

So those on Vista or below aren't affected unless they explicitly running IIS or something else that's using HTTP.sys; and I can confirm that nothing is listening on port 80 on my XP box (nor is HTTP.sys loaded.)
Are you suggesting that off-the-shelf frameworks/CMSes are somehow inferior to writing everything from scratch? That seems pretty myopic. We gain a lot from using Drupal.
Inside Microsoft: sequel, outside Microsoft: s-q-l
For me, the problem with emacs is that (1) it's slow and (2) so many features are half-broken. To use the most random example, I'm using something to intelligently soft-wrap code (which is great!), but for some reason sometimes it doesn't work in C# mode. And in fact, loading C# code gives some random error in font-lock sometime. (Maybe these are slightly unfair since they're 3rd party code, but trust me, the entire emacs ecosystem lives in a state of "kind of, sort of" works.)

Here's me complaining about slow text rendering: http://www.reddit.com/r/emacs/comments/2e8byy/slowass_text_r...

Still, I keep using emacs because so far nothing else I've tried touches it. But I dream of an editor with the flexibility of emacs, but a strong focus on speed and correctness. (And terminal support -- terminals are very much still with us!)

A tall order, I know :)
FIX is for execution, market data is still via their API and client software.
I don't mean to imply that Chris gave up, just that LT is not going going to reach the features discussed in the original pitch.

> Those of us who have been working in this field for awhile already guessed that many of the features promised by the original lighttable kickstarter would require a new programming model to really work out.

I guess I was naive, I presumed Chris knew something I didn't.
Yeah most people don't do that. They don't care that someone else has to clean up after them. Happens all the time in many other contexts of pure greed and self-interest and simply not getting caught and told off about how they're pissing in the pool.

Seriously, people need a lot more Pei Mei in their life.
I am perfectly fine with craigslist look and as you said things are where they are supposed to be and do what they suggest they will do.

I know of designers who rail against that look though. I think HN follows most of the same craigslist principles.
Are you sure you understand how a toilet works? The tank on top is not the toilet. It's a tank that pours water into the toilet. I've looked in the tank and understand how that works.

The toilet is the thing you sit on that holds water. It works by siphon action (something I didn't know until reading links in this thread).
This. I can't believe how bad of an idea this was.
How do you deal with user authentication, authorization and data encryption? Do you have a web server/application server or do you just combine static js/html/css resources and RethinkDB?

I'm kind of enamoured with the idea of couchapps -- but I'm still not entirely comfortable with having my db be my web and app server, as well as having it manage passwords etc... as I'm reading up, I'm slowly convincing myself it's possible to both make it work, be easy, support a sane level of TLS, load balance and be secure with proper ACL support... but very few tutorials/books seem to really deal with that to a level that brings me confidence.
But domains under .COM are exactly as trustworthy as Verisign, right? The root key signing ceremonies are just theater, right?
It's a bad time for the C programming language. First OpenSSL. Then SQLite this week. Now HTTP.sys. They didn't move HTTP into the kernel as a driver lightly; it was done on the assumption the code would be vetted and tested throughly. Clearly that has failed.
Our Ops guy did it using Nexus.
Why the Time Is Ripe for Smartwatches
I have witnessed birds who mate for life act very disturbed on the loss of said mate -- for long periods of time. Of course it is not possible to determine what they are thinking exactly, but this is part of the problem.

Most people are so disconnected from animals. You might have a pet or 2 in your lifetime -- some people never have pets. Even if you have had pets in your life, then you might understand dogs or cats, but you don't understand the daily lives of the millions of species of animals on the planet (I googled for the "millions" bit, but actually I don't really know how many different animals there are). And finally, even if you know dogs or cats really, really well, you tend to know them as pets and not in terms of the culture they might have if given free reign.

So we extrapolate greatly from our very limited understanding of what an animal thinks. For the most part we don't observe them for more than a few seconds at a time and have no way of understanding how they might express sadness or happiness. In fact, last night I was subjected to watching "Frozen" (again) and I couldn't help but notice how the reindeer acts like a dog. Is it because dogs are more expressive in their emotions than reindeer? Or is it because nobody in the target audience would have any reference point to understand the emotions of a reindeer?

I have kept fish in tanks before in my life and watched them enough to believe that I could discern when they were happy or sad or stressed or carefree. There was once an unfortunate incident when a small fish had a mishap with the filtration equipment and I happened to witness it. The rest of the fish seemed absolutely shocked for the rest of the day. Were they traumatized by the event? Were chemicals (or blood) released into the water by the killed fish that affected their attitude? Was I injecting my own feelings into the fish. These are things that I don't, and for all intents and purposes, can't know.

I don't know one way or another, but it seems likely to me that animals think and feel in some way that is similar to humans. It is more my lack of exposure to their forms of communication and culture that makes it difficult for me to understand and emphasize with their feelings. At least, I think this is more likely than an animal's brain and nervous system working in such a different way from a human's that they do not have these kinds of feelings.

From that perspective, it seems reasonable to err on the side of caution and do your moral reasoning as if animals had at least some capacity for these ideas and feelings.
... Please. You're talking about the difference of a single paid plan or something. There's no viable product or company out there now where $30 a month is even make anyone blink.
How to Be a YouTube Vlogger
Why is craigslist still popular when there are better looking sites around?

Why are sites like HN and the one linked earlier following a similar style.

Cause core of design != look which is how the 3 apps mentioned above seemed to be looking at.

Function needs to be the core of design.
After inspecting the img tags and skimming what is required just to load them, I'd say they overengineered things just a bit.
Ouch, hopefully doesn't turn into blaster 2.0. These days you're just asking for trouble if port 80 is open and you don't have a need for it, though.
You can add some irregularity to the NFA construction. It's no longer "regular" but you can decorate it with some things like lookbacks, remembering multiple matches and more, and still get the benefit of the NFA. I remember adding a few such features a couple years ago.
Rough numbers indeed - you forgot to define what a "server" is -- dedicated hw 16 core xeon with 4xssd in hw raid0 or a Digital Ocean vps with 512MB ram? ;-)
The article talks about a decline in growth, and towards stabilization - not a decline towards vanishing.
It's a chicken and egg situation. Developers propose larger than they want because inevitably the negotiations with city and neighbors reduce their plans.
Then just freakin' sign up already! With the amount of time you've spent typing these screeds, you could have registered, decided you didn't like it, and killed your account about 10 times over.

This is not helpful criticism in the least - most people don't object to sharing something as innocuous as an email considering they just did something nice for you.
"s-q-l". It is ambiguous if pronounced "sequel". :)
Few language rules are absolute and universal. Language is, at its heart, an agreement among people about what words mean what. So the fact that many, many people say (and understand) "sequel" means that it can also be correct.
Noting that I applaud the introspection: He was embarrassed for thinking he sounded stupid whereas I think he should have be embarrassed for seeming like a jerk.
JIT sounds interesting. Do you have a good ref?

I don't feel the constant factors are large on Thompson. It's essentially linear to construct IIRC, and matching next char is then proportional to the number of current States which are valid. Which is bounded by the vertexes in the NFA which will mostly be less than DFA.

I don't see how you can get more efficient than that, because you're just keeping track of all the matching states which would seem to be the minimum required. I'm really keen to learn an even better way.

The proposal is a workable heuristic ( use the practically working algorithm rather than the one with a theoretical low bound which is costly in practice ), and people do well to heed it in many places, however I don't believe it applies here because Thompson is great in practice.

You sound like you know a lot about this, what am I missing?
Thank you for writing this! We definitely have social game traction, 3.5 years after this pitch. (I come from that industry as well)

It's validating to hear from an industry veteran that our thesis isn't totally off base :)
It's 2015 and Microsoft still has a kernel space HTTP component, thus needing to run some part of the web server code paths in SYSTEM user's context!

I am curious as to what the reasons are - what are the benefits of this that outweigh the huge risk (as demonstrated repeatedly by the various vulnerabilities) of running in HTTP code in the kernel? Only thing I can think of is they are trying to squeeze the last bit of performance / scalability but surely that could only mean that there are parts of the kernel (ctx switching overhead, threading scalability, page cache performance, etc.) that need to be fixed in order to not need these type of hacks in 2015?
Are you being sarcastic? Or do you genuinely think the lack of office space in SF is a drag on the world?
This is what happens when you create a project. 99 times out of 100, you make something that isn't what you'd hoped it would be.

So what?

The key is to recognize that failure is not the lack of certain project XYZ being at certain state QPO. Most people will not have the lifespan long enough to see a project they work on go perfectly. This notion of failure, that it is the lack of some future state of being showered in dollars/accolades/kisses-and-hugs, means that every project, ever, is a failure.

Failure is giving up.

Failure is letting that experience, where you didn't magically achieve your hopes and dreams, and letting it drive you back into the warm bosom of punching a clock at a gigantocorp or cargocultup. Instead of relying on yourself for your livelihood, your purpose, your mark on society[0], you go somewhere safe where you get told what to do and you just bide your time, collecting a paycheck, until you escape that particular bouncing dead cat on to the next one.

Success is not giving up. It's taking your lumps, "oooh, I made a shitty thing, woe is me, I'm not as smart as I thought I was" [1] and telling yourself that it doesn't matter, that you'll try again.

Chris, if you're reading here: start another IDE project. Use what you've learned. If you really, actually cared about the things you said, don't let your perceived failure with LightTable[2] prevent you from starting something new. It won't be the same story all over again, because you aren't the same person now as when you started LT in the first place.

In the end, no project is a failure, unless we let it have no impact on us, unless we learn nothing from it. Don't squander the lessons learned through bad projects by choosing to not continue onto new ones.

[0] And don't for a second think you don't owe society a mark or two

[1] Check my username

[2] I wish my projects have failed so well as LightTable
Not so fast. We don't know if this is actually a memory safety issue. It be some sort of non-memory logic error.
Chrome starts pushing Java off the Web by disabling plugins
"If you use React, doesn't it basically mean that you de facto license all your patents to Facebook whereas Facebook licenses those required strictly for React?"

No.
The only patent grants you give are through CLA's.
Otherwise, i'm not sure i follow the concern?
Not a bad idea, although you'd want extra protection for the pylons so a truck running into one didn't take out the grid.
I appreciate the support, and I'd be flattered if your group were to find this post useful!
Amendments can remove stuff. These amendments seem to just add things though, so... yes, oxymoron.
Bad Layering
One big difference is that an innocent policeman infected with the flu is not put under the secret mental domination of a criminal puppetmaster.

Even if you give the police the benefit of the doubt and assume zero malicious intent, the fact that malware appeared on the drive suggests either:

(A) Mishandling of evidence by cycling it through an insecure/unofficial system.

(B) Official systems have been pwned, and they are no longer trustworthy!
The symbol of a man nailed to a cross with his side run through with a spear is also pretty dark.
> Fair enough. Out of interest, used to = how many years ago? I'd wager it's waning.

Quite a while: 10 years-ish?

I doubt it's changed towards credit card; most companies have a 3% surcharge for using a CC.
I might believe that more people are using BPay.
But direct debit is the easiest: no interaction required from customer, and merchants prefer it as you need to do less in the way of credit checks.
Your second bridge might not be better if this turns out to be true:
http://en.wikipedia.org/wiki/The_Mythical_Man-Month#The_seco...