skysight-inc/HackerNews huggingface dataset:
The other reason energy storage could get big in the next several years is an elevated risk of blackouts due to aggressive retirement of coal-fired power plants -- blackouts like the one in Washington last week that shut down several government agencies (e.g. the Department of Energy) and which was probably related to the shutdown of the Potomac River Generating Station.
Looks like a very similar product to Medium. It's a great concept, but Evan Williams is tough competition!
Final Thoughts on the Get Satisfaction Acquisition
Is this the first thing of Apple on GitHub?

(is the first one that I recall seeing)
(for future reference, you can reply to followups by following the link directly to the comment - click on the post time like "2 hours ago")
True, naming is hard.

But coming from an EE/CE digital logic background, if it doesn't have 1's and 0's (or T's and F's) in it, it just ain't a Truth Table to me.

Of course I could just as easily be criticized for "Expectation Tables" by someone in obstetrics, so what's fair is fair.

I do like your design. Nice job.
Good point. You're correct on both areas.
Useful tip:
http://isup.me
You don't like the CA system. I don't either. I go farther, and say "it's a very bad idea to replace the CA system with another hierarchical PKI the top of which is controlled be NSA and GCHQ". I'm not sure I understand your rebuttal to that point.
We had this in VoxImplant for a few months already :)
Ask HN: When the new Heroku pricing will be out of beta?
I think users simply don't know enough to understand why their privacy is important. As such, my guess is that privacy concerns have hurt Facebook as much as they will already. This isn't the first or the largest instance if Favebook violating users' privacy.

What's more insidious at this point us that Google is only marginally better, but a lot if people have much higher opinions of Google.

When it comes down to it, trusting a company just isn't a good idea. Companies inherently aren't trustworthy. Even if the current leadership is trustworthy, companies can change hands and the data is still there. Companies get hacked, try to do what's right but compromise to stay in business, etc. The only way you can trust that a chat service isn't sharing your data is if they mathematically are prevented from doing so through cryptography.
tptacek:

> I don't understand the point you're trying to make.

I am trying to understand how the attack you say is possible truly is possible.

> In this case, you're talking about a zone (COM) the USG explicitly controls. They don't need to spoof the delegation from the root to COM, or the anchor key for the root itself.

Verisign operates the .COM TLD registry and has documented in excruciating detail how they handle the security of DNSSEC key material: https://www.verisigninc.com/assets/tld-gtld-zone-v1.2.pdf

Is your assertion that the NSA would order Verisign to bypass those controls and make a change to a DS record (and associated NS records) to redirect people to another site?

If so, how would they do that for just me? It would have to be a much larger redirection of people.
Have you ever tried Flight, http://flightphp.com? It has a smaller footprint than Slim but still has the ability to drop in PHP components. Disclaimer, I'm the author of Flight.
EmojiTracker: Realtime emoji use on Twitter
Scientists create invisible objects without metamaterial cloaking
GitHub was never solely meant for code, but anything that is textual data which can be transferred to a revision control system. Including books, blogs, and yes, lists with bookmarks.

As a aside personally I like them a lot, given that I am a polyglot programmer. Saves me tons of time finding the better kind of libraries, tools and/or frameworks for any given language and environment given a specific technical or functional requirement myself.
The other big issue I see is: if you try to do any kind of population or cohort study with this, how on earth do you correct for the bias that comes from only sampling iPhone users? It's borderline facetious to claim that there is no sampling bias, and it will be a nightmare to control for.
> It's not about knowing they kill people and such. It's about believing that the cause justifies it, which most of them did

So you're only evil if you don't believe in an evil cause? :)

Plus, joining Waffen SS wasn't just about "killing" - this could be said about Wehrmacht.

The SS (I mean proper SS, not the foreign SS units that were formed under auspices of the SS because only citizens of the Third Reich were legible to join the army) were, by and large, death squads.

They specialized in mass killings of civilians and other atrocities, and it's not a coincidence that Waffen-SS was later - during the Nuremberg Trials - considered a criminal organization, while the regular army wasn't.

See http://en.wikipedia.org/wiki/Obersalzberg_Speech#/media/File...

There is a reason why their symbol was a death's head (Totenkopf). The purpose of these troops was explicit.

That's why you can't really compare it with modern soldiers that invade Iraq or whatever (I'm not saying that all such invasions are justified or that no atrocities are ever committed).

> People actually making an "evil moral choice" are not that many -- aside from Hollywood evil masterminds.

By your definition - quite so, and this is exactly why I feel that this definition of an evil moral choice is nothing but moral relativism, or even nihilism in thin disguise, and ethically useless.
> Ok, how large is an average HD space on a server?

Average on a server is irrelevant, since the report was of specific servers, and the storage of those specific servers was compared to a number of laptop drives (implicitly invoking some "average laptop" to warrant the comparison.) No idea of an average server HD size is necessary in that comparison.

Of course, it would have been more useful to people who actually know anything about the field just to have had the actual size of the seized storage reported, rather than a comparison to laptop hard drives, but that's a different issue.
Enlightening Storage and Networking Experts to Follow on Twitter
I realize you were trying for a reductio ad absudum, but actually I kinda like your idea, because it suggests a wide range of other promising ideas. Imagine a software company whose programmers were chosen for being immune to procrastination. They would run circles around competitors!
This "just SHA1 it" approach to data anonymization is getting really old.

Previous: http://dataabinitio.com/?p=442
It's scary to think about, but one of my college roommates had a similar setup for years. This story was a big walk down memory lane for me. His bedroom (and I think the common living room in our suite) was on a webcam 24/7 for my last two years in college (1999-2000). I think it was influenced by Jennicam, but there were a number of people that had similar sites (I remember a Lauracam...).

I had my own webcam, but wasn't very keen on being as transparent. I was happy to live as a role player (Roommate #3) on his site.

The site was "bixworld.com" if anyone ever visited it.
I'd like to see the data on this, or a variation.

First variation is with the candidates ability to solve the problem. Like you said, Microsoft and Google seem to have determined there's no correlation between that and job performance.

Second variation is with a panel of interviewers who propose the problem. Based on how the candidate responds, the panel chooses whether to 'hire' the candidate, based on their ability to reason about the problem and communicate, rather than on their ability to solve it.

I wonder if there's a correlation between the yes/no of the interviewers and the candidate's job performance.
They thought they ended the debate with that Twitter post, but they were merely joining it... on the wrong side!
I agree, although I probably wouldn't ask this in an interview just because of the risk of them seeing it before. At least when I was solving it it felt very much like debugging; you have a few snapshots of the variables and you have to reconstruct the whole logic flow.
That's fair. C devs are also a little more used to being tied to specific OS facilities such kqueue/select. For me boost shines as an ASIO implementation. When that becomes stdlib, I'm not sure I would be compelled to use it.

This is along the lines of the traditional abstraction level debates, rather than anything particularly wrong with boost. I think it gets singled out unfairly as being a particularly difficult 3rd party library.
+ For chronicle

Have look at my profile. Also there is KVEngine from H2.
The thing like going through all of the http://cryptopals.com/ exercises is that it raises your overall awareness (as of specific attacks) that this stuff is much more breakable than I thought. It is more enlightening than just how to protect against a specific attack.
Personal anecdote:

At one of the first programming companies I started at, there were no coding/database standards. When we decided we needed them, we appointed a few people to go over all the commonly used standards and present them to the group.

As we went over each standard, we either accepted it, rejected it, or proposed alternatives as a group. Often, we would have multiple people arguing different sides over each issue. Generally, it was just a case of someone being used to doing things a certain way, but having no real justifiable reason. In those cases we ended up voting on the outcome.

In the end, we had pretty good standards (in my opinion). While this wasn't consensus-driven, it ended up being strongly accepted in the company. I think this was because everyone was involved in the process, and you had a positive say in at least 1 or 2 of the standards that made it. Of course, eventually we added commit hooks to sniff out if you weren't following the standards :p

Sorry, there's no real point I'm making here...

Every company since then (except my current one), management just "decides" how standards/processes are going to be and announces it. Those usually ended up not being adopted.
The attack scenarios you described are against an implementation whereas I said your statement regarding protocols was too strong. Having that in mind, our comments don't disagree.
If we do get cheap scalable energy storage, it's pretty much game over (in the long run) for everything but solar and wind. We are basically drenched in free energy, but we can't store it cheaply enough. If that's fixed, we're done here.

Nuclear fission may still have on-paper advantages in some markets/climates, but the high PITA (pain in the aXX) factor would probably mean we wouldn't bother going there. We'd just build transmission lines, more solar/wind, and more storage even if it were marginally more expensive just to avoid the headaches of nuclear energy.
Hello Alfred Raises $10.5M to Automate Your Chores
Amazing, I've tried to do this for Wipeout 3 in the past (extract the tracks) and was defeated - this makes it seem fairly easy!
Wow, I found this to be a great stimulus for thinking about the concept of instinct. For some reason -- maybe it's the subtle movements by the chick to adjust its "flight path" -- it really makes me intuitively understand instinct as pure mechanical inclination, rather than something more magical.
What about Couchbase? Specifically for the niche on the spectrum between Redis and Cassandra.
The camera path is a cheap hack, extracted from certain track faces and has a lot of damping to smoothen things out. Going through the track in certain parts was a tradeoff.
Mozilla wants to drop HTTP support in Firefox, eventually
> jocluteseh: Can DNSSEC be re-directed to incorrect public keys? Sure.

Please explain how. The whole point of DNSSEC is to provide a cryptographic validation that the material put into DNS by the operator of a zone is the same information you get out of DNS when you perform DNSSEC validation.

I'm quite tired of seeing the assertion that "DNSSEC can be re-directed" without people actually walking through HOW that redirection can occur. (Thank you in advance for doing so.)
> It's also far less learning than most other functional languages, quite frankly.

The type system is pretty recognizable to most people, unlike something like Haskell where it's a big part of learning the language.
> Thus the remote access to the RPi wouldn't pose a risk for using the protocol beside the obvious risks that you always get in such a scenario.

That risk didn't exist without the custom cipher construct (KC-system is still independently vulnerable as it was without the CC-system). This means the construct has increased the attack surface, potentially critically.

> The system I described is not trivially defeated because defeating it implies defeating KC.

Your system introduces potential new vectors to defeat KC. If KC were not broken, this construct likely weakens KC. If KC were broken, this construct may provide some minor protection. Whether it provides sufficient additional protection to actually protect the data from an adversary capable of breaking KC is extremely unlikely. Given KC is a peer-reviewed secure ciphersuite and CC is not, the emphasis should be on keeping KC secure - not weakening it to introduce an untested (likely insecure) ciphersuite in a custom composition. This is doubly the case given significant and on-going real-world costs of implementing and maintaining this custom solution.

> My point is that _if_ AES is broken without our knowledge, using the system I described can still make untargeted-surveillance impractical.

An adversary capable of automating AES decryption would already have automated weak-cryptosystem decryption. This adds nothing except cost, complexity, and faux security.
Ah, trite adages. The best fallback when you can't compete on substance.
What happens if I plug my win7 main SSD into another friend's secondary SATA port (the one in the disc bay of a laptop for instance) ? Does the BIOS/(U)EFI act as bootloader ? If not: does the original win7 detects another win7 on a different partition and then triggers a bootloader ? If no bootloader are involved, what mechanism is in place to detect the other bootable disc ? It's all BIOS boot menu ?

(replace win7 with any linux)
This seems very similar to Google's Pagespeed [1], but after registering and diving in a bit, I see some very useful extra features.. recurring monitoring for one, cache/connection simulation, and some other niceties that GPS doesn't give you.

Very nice!

FWIW, I don't share the hatred of registration that the others here do. I don't think it's asking a lot for an email address and a password after you perform a useful service for someone.

[1]: https://developers.google.com/speed/pagespeed/
> Average on a server is irrelevant, since the report was of specific servers

This is true, unfortunately I somehow missed the sizes when I read through the article the first time around. For that I am sorry. I found my mistake only about an hour ago due to another comment. That said I stand beside both the fact there there is no such thing as an average server/computer HD size (not one anyone can calculate at least) and the fact that it's still a stupid comparison to try and make.
PyCon 2015 Talks: Best of
Well one stumbling block is that we need to get thousands more people trained to service these energy storage facilities, let alone the windmills and solar panels. There is already a shortage there as the skill set is not one side, part electrician, part mechanical engineer, and so on.
Perhaps they are talking about the syphon?
Insecure HTTP Deprecation Plan
That's completely new to me, but it looks nice. Thank you. I only knew about stylus, http://learnboost.github.io/stylus/ but that's just a preprocessor.
I disagree, I got it very quickly by writing the dates in order, crossing off all that were impossible after the first statement, then with those were left crossing off the ones that were impossible after the second, then there were three, with only one possible according to the third. Now what if I did not have a pad of paper handy when interviewing? All this question would do is predict if someone would enjoy a game such as Professor Layton more accurately than flipping a coin.
Isn't that liable for manipulation by bitcoin miners? Why not use some other public source of randomness instead?
Journey of a startup that's creating one of the best realtime app, ever
Fair enough then. I guess I got hung up on not being able to model it on paper, or relate it to any maths I've studied, but I can't deny your definition.
Seems silly to use the pipe to feed the collection into the first map call. Otherwise pretty nifty, I’ve been enjoying learning Elixir the last few months.
What I was doing is so trivial, you don't really need this information. This was my reference SQL query:

select path, count(*) from posts group by path;

(I don't have the exact Rethink query written down, but it was analogous to the SQL version.)

You can demonstrate RethinkDB's performance issue with any largeish dataset by trying to group on a single field.

The path column in this case has a cardinality of 94, and the whole dataset is about 1 million documents. Some rows are big, some not; each has metadata plus a JSON document. The Postgres table is around 3.1GB (1GB for the main table + a 2.1GB TOAST table). Postgres does a seqscan + hash aggregate in about 1500ms.

It's been months since I did this, and I've since deleted RethinkDB and my test dataset.
But all forms of exchange are potentially vulnerable, the point of using multiple channels for authentication is to increase the challenge-space for potential attackers. Indeed the chief benefit of public key encryption is that the key can be exchanged over a multitude of channels and a compromise of just some of them does not jeopardize the entire operation. Perhaps we need more authentication systems where this is made implicit, with trust based on the number of different mediums the key is transferred over (or the number of different third party signers).
Yes! Haha I realized that when I'm working double the hours without noticing, because the challenges are finally unique enough to be interesting :)

I think you hit the nail on the head again too, since frameworks as a philosophy don't intrinsically value shared-nothing (SN) principles which is the other 'dimension' to scalable concurrency--from a devops perspective, anyway.

And while there's never complete isolation, minimizing that interdependence makes your builds that much more environment-agnostic, and easy to provision dynamically.

Honestly what I'd love to see is a kernel-up PHP environment/container that doesn't focus on runtime in isolation, but the entire TCP stack from syscntl to the webserver (h2o?) and maybe even with some experimental support to extract frequent commands to compiled modules with C headers.

But by that point you'd probably just be using Go or Haskell because that's what compiled, statically-typed languages are for ;)
How to (try to) Lie with Wikipedia
> event loop blocking with a streaming JSON parser

Apologies for taking this opportunity to shamelessly plug my streaming JSON parser, which I recently open-sourced here:

https://github.com/philbooth/bfj
I'm a php dev (amongst others) and I use it everyday at work but if I'm getting to the point where lumen or something like it is the bottleneck I'd just dump PHP altogether and go to a compiled language.

There is a niche I think for faster than laravel but not incredibly optimised, its another tool not the tool.
Correct me if I'm wrong but that wouldn't stop a NIST insider from making the system output the numbers at lottery selection time would it?
Ah yes, who could forget Flooz. The original Bitcoin.
Very interesting. I did this, as well. It was possible to put the Wipeout 3 CD into a CD player and play the tracks as though they were audio files. Realizing this, I used a simple audio ripper to extract the audio files. This was (I think) around 2001 or so.
With automation cutting more jobs in other industries, this could actually be beneficial. I don't think that training someone to be a serviceman on a solar plant takes as much pain as e.g. training a good programmer or a mechanical engineer.
One caveat with this: if your project is open source and has accepted submissions from non-affiliated entities, you would either need to get them to assign the rights to that code to RethinkDB or remove them from the source if you were to relicense under something that would break the AGPL. This is where things like code releases come in.

This is also why many open source startups don't accept code submissions from outsiders until they've determined they're going down the path of a consulting-focused business model. It's just too risky.
There's no reason you couldn't bring up a infrastructure for technician level training to get those spots filled. I think you could just tap into the bureaucracy for existing job re-training efforts and it would work out fairly well.
Fortunately, solar photovoltaic doesn't need servicing.

Energy is big business, revenue will be there for servicing once market share is there.
"Fibonacci as a mathematical pattern is useful in several fields" != "Fibonacci is a scientifically proven method"
Even if Javascript did become an assembly like language with multiple well used languages compiling to it, wouldn't something like npm still make a lot of sense? Then all these separate languages won't need to reinvent package management and every package every time.
Storage helps nuclear too, with less demanding requirements. You can keep running your nuclear plants at full blast and use storage to average the load. If the storage is cheap enough that'll cost less than partially idling the nuclear plant.

Wind and solar, like nuclear, have costs dominated by capital cost, but with less predictable output. To run civilization on those alone, we'd need quite a bit more storage, to cover times when it's cloudy and still for a couple weeks. Long-distance transmission helps but that's not free either.

Particularly now that Gen III+ plants are on the market, fast reactors are maturing (in Russia at least), and half a dozen startups are working on molten salt reactors, I wouldn't take nuclear off the table. We need every non-carbon energy source we can get.
>If you get 5 MB of JSON in N different requests (N=number of cores) at the same time, I don't see go generating free CPU time out of thin air.

You don't, but the scheduler normally won't allow one thread to completely starve the cpu. Of course, its clear they should be using limits, however JVM, glibc threads scheduler or Go's green threads likely wouldn't allow a single thread to completely starve the CPU, eventually the scheduler will step in and divert resources to another thread.

Without limits in a threaded solution, you would see the latency increase, but you wouldn't see the application stop taking requests altogether.

However there are real benefits for having an event loop concurrency, so this shouldn't be taken as a reason one model is strictly better than another.
Lessons from a Failed YC Pitch with Paul Graham
18-year-old Vulnerability Lets Attackers Steal Data from All Versions of Windows
I don't know how good this is, but I recall Sailor that was posted some time ago here. Here's the submission link, so you can view the comments: https://news.ycombinator.com/item?id=8673676
This is a great point but it's not orthogonal to mine. Basic income doesn't provide a framework for self worth; it simply replaces a need to toil for money with a state-provided guarantee of a reasonable standard of living. If you have some side project or external, monetarily low-valued way of spending your time (full-time parenthood, art, a cottage business) then you've solved the worth problem on your own. If you're a displaced factory worker, you now have a new (admittedly nicer) problem.

To your coda, I think a lot of contemporary angst comes from precisely that - a sense that jobs really are basically worthless. Most of us behind a desk have felt that at some point. Even my frontline public servant friends in the military, healthcare, and police report similar feelings from time to time.