skysight-inc/HackerNews huggingface dataset:
After reviewing the code it looks like I was wrong. The code from the tutorial won't provide any encryption for your sessions, only integrity.

In order to encrypt the values in the session, rather than just encode you have to do a NewCookieStore([]byte("HMACKey"), []byte("CipherKey")) instead of a NewCookieStore([]byte("HMACKey")). I guess to answer your question, separate keys.

https://gist.github.com/steakejjs/6c17f07c4ca72115bfec

Here's a gist that shows a regular session, created with NewSessionStore([]byte("something-very-secret")) having the value's inside recovered easily.

The strings "foo" and "bar" are pretty easy to spot in the base64 output
Compressed air systems don't need lithium though.
Sorry to hear about this, I had an extension taken down by the Chrome Webstore for a name violation. I did get a "Removal Notification" e-mail for it, maybe yours got lost in the mail. I hope someone from Google gets back to you soon!
Wonder if JC will decide to make a comeback? I assume AA was suspended for lack of funds to expand the development program - but, say, fuel tests were wonderful.

What Mr. Mueller would say? :)
How countries compare Expat Explorer Survey world's largest expat survey
So thinking about cause and effect gets people to examine their beliefs a bit more, and reduces extremism. But, why should anyone involved in law and policy, including voters, care about cause and effect? It has little place in our legislature and our justice system.

Something I've been thinking about for a little while, that is sort of related to the topic of this study, is how to tie laws with intent. If we assume that legislatures make laws for reasons, and that these reasons involve some desired effect that the laws are intended to cause, then we should be able to draw some theoretical causal chain between the law and the desired effect.

The trick would be, that if the law does not cause the desired effect, it would be automatically repealed. So if a Senator wants to draft a bill banning drinking on Sundays, he would be required to establish some causal chain - in the text of the bill itself - between the policies that would be enacted by the new law and the desired effects (e.g. reduce traffic fatalities by x%, increase church attendance by y%, etc., within z years). If, after the law is passed, the desired effects do not occur, and the proposed causal chain therefore proven false, the law simply winks out of existence and ceases to be. No act of Congress, Supreme Court review, etc. It just ends.

Of course, we're dealing with humans here, and this being politics, there would have to be some oversight of the process to ensure fair play, and I imagine it would be similar in design and scope to our existing justice system, though largely separate from it. You'd have to be sure that legislators couldn't submit causal chains with time horizons of 1000 years (without a very good reason), or alleged "causal chains" that don't really follow (e.g. ban drinking on Sundays so that the sun rises on Mondays). I don't underestimate the task here - it would be at least as involved as criminal and civil law already are. However, when it comes to law right now we mostly just study the impact on people who break the laws, or occasionally whether the laws conflict with other laws of greater precedence. There doesn't seem to be any formal approach for evaluating the logical validity of laws: whether they do what they say, what they're even supposed to accomplish in the first place, much less how they do it. Should there be?

Perhaps if we implemented this, among other things it would get people thinking more about how the policies they support do what they are supposed to do, since it would be ingrained in the system itself.
In the hosted eCommerce space BigCommerce, Volusion, SquareSpace and Miva are some of the biggest competitors. Magento Go is/has been shut down, but other downloadable carts are now moving to a hosted model like PrestaShop and LemonStand. Self-hosted options also abound, many of them free (and open source), like WooCommerce, OpenCart and Magento.

Shopify's POS is more of an add-on for an online store, competing with the likes of Square, Lightspeed and Shopkeep.
I don't think you sounded like a jerk. To me you just sounded like someone who doesn't have a canned reply ready.
`thread::scoped` attempts to use lifetimes in order to enforce that values on the parent thread's stack would live throughout the life of the child thread, such that it would be safe to pass references to values on the parent thread to the child thread. However, the actual implementation used unsafe blocks. While this is unfortunate (thread::scoped was pretty cool), it isn't a hit against the Rust borrow checker.
How the Best Baseball Video Game Ever Has Refused to Retire for 10 Years
There are other possibilities than nuclear and fossil energy without those vast risks.
The OP article is all about that.
Nuclear is not a viable alternative energy.
New optimizations for X86 in upcoming GCC 5.0: PIC in 32 bit mode
Maybe people can show new stuff they make on HN etc before using it in their apps.
Gemput – The easiest way to manage your Gemfile
I think the strawman here is that people are wary of adding boost because they are afraid of compiling it. Where did you get that idea from?
Selenium Webdriver for Mobile Web Testing
No, but you seemed to imply that one can only learn from certain people in certain contexts. I find that I gain surprising insight from unexpected people at unexpected times. HN is not an exception.
There is going to be an interesting startup market around this is my prediction.
What you say is generally true. But we know that the lawyer's AV caught it. I have trouble believing that a law firm has better IT than a police digital forensic group. I guess one way of determining if it would have been caught by outdated or marginal AV software would be to figure out when the variants mentioned in the article were identified and added to most AV DBs. A project for another day perhaps.
Oddly, you can have absolutely no product at all, and still acheive wide 'distribution.' Think about that for a minute!
TIOBE Index April 2015: Java back at the top
Show HN: GrepSlash, Portal for curating tech content
Apple Watch will be actually also good for Android counterparts. This is probably the first gadget that will actually boost the whole ecosystem (all wearables) and create more commercial opportunities across different OS platforms.
That sounds really interesting, can you share any articles or videos about his work on live programming?
By OpenSSL are you referring to HeartBleed? Windows has already had a similarly serious (let's call it) "bug" that allowed remote execution in IIS servers. Except unlike Heartbleed which only existed for 2 years, Microsoft's bug was in Windows for 20 years.

But since Microsoft (on purpose) didn't make a unique name and logo for it, the media didn't pick it up. They gave it an obscure name and made it part of a larger Windows update, where they also added a few other "security improvements", which the media actually reported on more than on the bug.

Some were calling it "WinShock" if you want to Google (or Bing) for it.
We have a lot of our equipment tested in Florida (where they have some large testing centers) for lightning tolerance. I've been told, that you don't actually verify the equipment can be safely struck by lightning - as anything that is hit by lightning, is immediately destroyed. The objective is to ensure that equipment nearby a lightning strike doesn't suffer secondary damage (possibly from a power surge in the line). We install lightning arrestors near our electronics, but anything that actually gets hit is replaced.

Airplanes though, are supposedly struck by lightning, and continue to work. I'm guessing that this has something do do with them being suspended in air, and not having a connection to ground.
seanmcdirmid I just checked out your paper about live coding (with pacman video). Did you see http://worrydream.com/LearnableProgramming/ ? Do you guys consider collaborating?
Show HN: Pressing the Reddit Button Using a Robot [with rainbows]
I disagree with the declaration of open faced sandwiches not being a sandwich. You're telling me smørrebrød isn't a sandwich? I realize it's not American, but it's a sandwich, baby.
If it crashes (the notifications get stuck), just go to chrome://extensions and click "Enabled" to disable it. And then click "Enabled" again to re-enable it. That fixes it.

The with rainbows version is just uploaded to the Webstore now. Maybe it's up in a few minutes. Pic here: http://i.imgur.com/Zp5D8na.png
Design should lose its seat at the table if it keeps chasing fads without thinking.

Here's my latest pet peeve...

Remember when the Android Gmail client first got the feature where you would drag the inbox or any list view down as if you were trying to scroll past the top of the page, and it would put a little colorful horizontal animation bar at the top of the screen while it checked for new messages, and then the messages would show up there?

This was brilliant. After all, when a list of messages is sorted with the newest on top, if you want to see an even newer message you'll naturally try to look at what's above the topmost message. There's no real difference between scrolling somewhere in the midst of the list and scrolling when you're already at the top: if you drag the list down, you want to see something newer than what is currently displayed.

Then Material Design came along and turned that unobtrusive animated bar at the top into a circle thing that follows you and spins as you drag down and then spins back when you let go. Unlike the animation bar which was displayed exactly where any new messages would appear, the circle jumps up and down saying "Look at me! Look at me!" In fact, the spinning circle obstructs your view of the messages in the list: "Don't look at those messages! I, the spinning circle, am much more important!" A far cry from the previous unobtrusive animated bar.

But even though the visual appearance became annoying, at least the gesture still did the right thing.

Part of what made this gesture work is the fact that it's non-destructive: Checking for new messages has no effect on the messages already in the list on your screen.

But then things went very wrong.

The Chrome team for Android saw this and said, "Wow! Dragging down is the new way to refresh. And it has such a cool animation. We'll make that gesture refresh in Chrome too!"

So try to scroll to the top of a page and you'll get the spinning circle unless you stop just in time. If you're a very fast thinker, you may see the circle and realize you can cancel that pending reload by dragging back up a bit. (Don't let go!)

This is pure stupidity. Reloading a web page is a destructive operation. You may end up with a whole new version of a dynamically generated page. It may blank out the entire page if it can't connect.

This doesn't in any way resemble the nondestructive act of checking for new messages at the top of a Gmail list. It's something you're very likely to do by mistake - I've done it hundreds of times since this change rolled out.

Refreshing a web page should be something you explicitly request, not something that happens to you when you were just trying to scroll to the top of the page and accidentally dragged a little too far.

This chasing of fads is why I am fed up with Design.
That's my understanding as well. Nuclear Power plants are base load, and are contracted to do such, with long term guaranteed capacity. Peaker Plants take on load that exceeds the base, are paid on the margin, but aren't guaranteed any particular load.
I believe it is considered a significant break in a block cipher if you can distinguish messages encrypted via that cipher against random bits constructed in a similar way (i.e. constructing an adversary such that it has a non-negligible advantage in the PRF security game against the family of functions for the block cipher).
Grocery Delivery Startup PepperTap Grabs $10M Series A from SAIF and Sequoia
Transitioning to GNIP: Feature Gaps vs. DataSift
Implementations are even more sensitive to tiny bugs with huge consequences than algorithms. It's fine for people to write their own implementations if they're never used, but anything that will be used needs a large number of experts and a large amount of time before it should be trusted.
Not sure why this is getting downvoted. Perhaps the truth here is harsh, but it's the truth nonetheless. Perhaps not the whole truth, but at least part of it.
Oracle's fix is to recommend people use a different browser. http://www.java.com/en/download/faq/chrome.xml

Also a list of unsupported plugins: https://support.google.com/chrome/answer/1247383?hl=en
Doing nothing? Most likely they are already busy with something, and adding this means more resources and cost to produce reports for the government.
ARM is taking over from MIPS in the 802.11ac supporting products. MIPS is still around, but is now in the second tier of popularity alongside PPC. The single-core MIPS 24K and 74K that have been so popular just aren't fast enough for doing smart things at DOCSIS 3 speeds. They've also largely switched from NOR flash to NAND flash.
It was some things he demonstrated at WGLD meetings; here is a blog post with the same title as his talk:

http://gbracha.blogspot.com/2012/11/debug-mode-is-only-mode....

And later:

http://gbracha.blogspot.com/2013/04/making-methods-live.html

He is giving a keynote at ECOOP on the topic in June.
Mercurial Offers More Choice Than Git
Share and discover the best programming tutorials and courses online
It can be, but that doesn't capture the value a consumer with fast response, controllable generation/storage supplies to the grid. Compensating the consumer for power or storage they supply at a particular time is complicated.

Existing net metering pays a fixed rate for power supplied to the grid by, say, a solar-equipped residential grid customer.

But in fact, fast response power delivered to the grid when the grid managers call for it commands much higher prices in the dynamic electric power market. So does the ability to store power on demand (absorb power from the grid), when generation briefly exceeds supply.

So imagine a residential grid customer with local solar + storage that's controllable by the ISO (grid managers). Rather than net metering (a fixed feed-in tariff), the ISO should pay instantaneous market rate for power delivered, or absorbed by, the residential grid customer.

I think we'll soon converge on bidirectional power delivery/sink services that are controlled by either the ISO or perhaps by local smarts on the resident's grid-tie interface. That would engage the resident's system as a grid stability enhancement tool, and would bring more revenue to the resident than simple feed-in tariff schedules. One assumes the resident would participate by an opt-in choice in exchange for enhanced revenue.
This is written by someone who isn't in the advertising business and doesn't understand the dynamics of that industry. Extrapolating from stock prices doesn't cut it.

Google is not going anywhere anytime soon, it's the defacto unspoken leader in online advertising and the closest competitor these days is Facebook, and even they have a very hard time getting to parity. Google owns so much of the adserving stack and online ecosystem that it borders on ridiculous. Any issues they might face with shifts in advertising would be the same challenges anyone else will face, but Google has more talent, money and scale to solve these problems.
It's not a sandwich as it isn't made with some form of bread. At least according to the criteria the article uses - which I agree with.
imho, design is made or broken on the initial conditions. first, what is it you've chosen to concern yourself with? if you chose wrong, the design might just never be good.
I feel like this suggestion is a little misplaced. To use a scheme like this you must ultimately tell the hardware what the bounds are, and that layer is going to be error prone in the same ways as what it replaces.

From this vantage point I can say the abstraction that already exists for this is the page table. The MMU knows what regions are mapped and it will generate a fault for an out of bounds access. But within mapped regions the array bounds are all fiction. As they should be in the eyes of the hardware. That is for higher level layers to worry about.

I feel like the c-haters don't get that some layer of the system must work this way. By all means build your higher level stuff on top. But things like virtual memory and allocators are well understood, frankly when it gets to that level there is little reason for it to give a damn that a[] has an element count of 5. At some point something must chop up larger blocks into smaller ones, and create new bounds from nothing.
The more I play around with musl (the author's C library) the more I'm convinced dynamic linking was not worth the trouble.
Is the stack trace saying that the Rust parser tickles a bug in jemalloc or somehow uses it unsafely?

A parser (which uses malloc) seems like a pretty basic use case for 100% safe code.

When I think of unsafe code, I think of needing to make raw syscalls, libc calls, or inline assembly. Not string manipulation and malloc.

I am not super familiar with Rust, but I imagine you don't have to use unsafe {} every time you need to malloc, right?
Infinite Ulysses
Damn, I thought I was cynical. You think that 90% of the US population couldn't be made to understand equity investment?
Cool, I printed out your paper a few months ago and will give it another look!
I agree that worrying about the time complexity of the non-parallel portions of pmap is unlikely to be an issue for most use cases. It's still interesting to think about the tradeoffs though.

Hitting the degenerate case depends on the function you're computing in question. It's quite possible that the tasks will complete in the given order. I think you're giving too much credit to Erlang's task scheduler.

Also I'm not sure how one would even implement a tail recursive map function on a singly linked list. The cons operation can only add elements to the front of the list. I looked up how the map operation is implemented in Erlang. It isn't tail recursive:

https://github.com/erlang/otp/blob/172e812c491680fbb175f56f7...

I'm interested to know how you'd implement a tail-recursive version of map (continuations aren't allowed).
The error is not building the second bridge, it's trying to create a new design from the ground up rather than improving on the first one.
I saw that in 2012 (I started my own research in 2007). At the time...I sent an email to Bret Victor, but he never replied (I hear he is busy).
there's a lot of fucked up things about my country, but our sandwiches aren't one of them.

never trust anyone who doesn't like a sandwich.
Hey, I work at SpaceX, and made the initial contact through HN. What kind of position are you looking for? If it's software, I can at least make sure someone internally looks at your resume.
I'm about to have to manage our company's transition to GNIP for Twitter data and it's not going to be pretty. I've used DataSift for about a year now and can confirm GNIP is way behind feature wise (though DataSift can be quite quite clunky as well). I sure wish they would have bought DataSift instead.

Having had a bunch of experience now with "historical query" use cases, I had considered trying to branch out on my own as a niche competitor solely focused on the historics space. It would be for companies with research-oriented goals such as social science, policy analysis, etc. I'm glad I didn't waste my time now seeing how Twitter has decided to handle their exclusivity...
Two things.

One: I don't know what is the idea of keen.io after watching the video. I guess it is some sort of generic data collection platform with querying capabilities.

Two: based on the pitch (6 mins) I don't know why should I not just roll with opensource components are assemble this platform myself, tailored to our use case.

During the video the keen.io guy kept mentioning mongodb as a competitor, I am not sure why. Bringing together a very similar platform that is able to collect metrics, able to process them and query the results for meaningful analytics is roughly two weeks project for a seasoned guy. The value of such a system provided is not extremely high. I am pretty sure they got a revenue and all that, I am just not sure if it is profitable to provide this service. Seems a little thin to me.
Opening the Doors to the World-Famous Abbey Road Studios
My company does work in the UK, and we're putting together communications system that will allow the wind generations systems to stop loading the network when the transmission lines get too hot (apparently it's less expensive to shut down the wind power x% of the time, than it is to build new transmission lines).

I'm wondering if you have any insight into what happens when our comms system sends a signal to those wind turbines and tells them to "Stop" - it has to happen fairly quickly, we have working factors of 15, 30, and 60 seconds, at which point we start escalating and instructing groups of wind turbines, and then eventually the whole farm to cease production. The wind turbines also have a keep-alive that has them auto-shutdown if they lose comms, as obviously it's far more important that the transmission line isn't damaged, than it is to stop producing energy for awhile. (From the perspective of the Distribution Utility, obviously the private turbine owners take slightly different perspective).

I see you have familiarity with wind farms, and I'm wondering if you know what the turbines do - do they free spin? Send load to ground? Come to a halt?
I believe I had spoken with 1 or 2 investors total about the company before that moment.

You're right: practice really seems like the key to getting this stuff down. One can have a clear intuitive understanding of their vision long before they have a clear way to express it in English.
How to Find Long Tail Keywords Using Long Tail Pro SEO Tool – ProBlogTricks
How could that be a sandwich?! I don't want to cite the dictionary but a sandwich is distinctly a food where fillings are sandwiched by bread. A smørrebrød or tartine can be tasty, but don't claim they're a sammie.
I'm primarily a windows user, but I learnt vim so that I could more easily edit files on linux servers, since it's pretty much guaranteed to be there on any box I'm on.

I don't particularly enjoy programming in vi, but I tend to do it quite a bit when making small changes to our codebase on my dev box in the sky and I don't want to deal with the overhead of starting an IDE locally.

It also stopped people from laughing at me when I ran nano. :p
If you've set PDO::ATTR_ERRMODE to throw exceptions and you're still seeing warnings then yes, that's a bug in PHP. Perhaps you could submit it.
> Panini is just Italian for sandwiches.

That's Italian. In English, it denotes a specific kind of sandwich.
I've got 3 Linksys E3000s that seem to be working fine with DD-WRT and Tomato. One's the main router, one's the VPN endpoint(s), and one's a spare.
This person doesn't know how to read a stock chart (https://d23f6h5jpj26xu.cloudfront.net/2ihthwrngo9lfq_small.j...). They clearly ignored the years where 2007-2012 when that would be considered a flatline. That is a huge flatline.