skysight-inc/HackerNews huggingface dataset:
FYI: Your link has ); appended to it.

http://varidesk.com

I also had a varidesk and wasn't too fond of it. There was no real good way to place a keyboard/mouse on the tray and it was a bit wobbly for my tastes.

The product itself was well built, and it was very easy to move up and down though.
Neat. I've also used an in-memory SQLite db for testing ActiveRecord models.

Also, the same list if uses can be applied to nedb as a lightweight alternative to MongoDB.
Bluetooth toothbrush tells you how well you brushed
That's one huge advantage with Rake, just add `p VARIABLE_NAME` anywhere in your Rakefile, and you'll see the textual value of it at that point.
What gets me is Amazon. I'd love to be able to see the Germany (country) site in English. Right now trying to return a tablet that went bad, and google trans is of limited help.
How Google terminates Business accounts
> So, and this is a naive question, why on earth does a Vanguard fund charge a percentage for what seems to be very simple administration (sell 1000000 shares in X, buy 100000 shares in Y, make sure VWAP is good).

Because Vanguard's prices are the lowest. Where else are you going to go?

The typical fund charges between 1% to 2%. Vanguard charges 0.05% if you qualify for Admiral Shares ($10,000 minimum). Various ETFs can drop down to that amount, but you still have to deal with tracking error and commissions. $7 per trade typically... while Vanguard doesn't charge commissions if you own a Vanguard account and buy Vanguard Funds (or ETFs).
Not saying anything really about EFF's efforts or publication, however the topic is common now ... Please don't senselessly "encrypt all the things".

May I encourage some requirements gathering and threat modelling? Who are you trying to keep out (in?) of your application communications? Why?

The unfortunate requirement of common business systems is that we need visibility into what these systems are doing for troubleshooting, audit, and incident detection. Logs are good, but packets and flows are better. Trust, but verify.

Driving to encrypt all traffic, all the time may be a noble goal^1, but please understand that there are good people who need to adapt requirements to their organizations and projects. This is one of the points, along with firewall policies, user privileges, useful remote logging, and ... well, have a look at the CC20[1] for more.

http://www.sans.org/critical-security-controls

^1 though doing it effectively may be much more difficult and expensive than you imagine.
The reason it is powerful is not this particular attack. It's a demonstration that they are willing and able to inject malicious responses to any request going to a Chinese resource (web site, analytics service, ads, etc.). Imagine if instead of returning some DoS javascript they deliver a payload to silently exploit a vulnerability in your browser/OS (and they are surely capable of finding or purchasing those) to do whatever they want with it:

- Add it to a botnet

- Steal your personal data

- Infiltrate your corporate network

- Wipe your system (punishment for those accessing or producing GFW circumvention software)

Are you confident your browser never makes HTTP requests to Chinese servers? Are there tools we can install to prevent it?

[EDIT: It looks like two separate HN stories got merged, and the comments along with them. Didn't know that could happen, but this comment now appears twice here.]
This looks to be a great solution! How hard is it to transform from sitting to standing and vice versa?
That would be incorrect. I just used numbers that weren't reflective of the article.

To keep (dumbly) using my simple numbers, while still using their percentages, it would be more like this:

You could get $100 by using an index, but instead, you hire a guy who gets you $103 for not using an index, then charge you a $2 fee, leaving you with a "profit" of $1.

At the end of the day, the fund recipients still come out ahead, just not as much ahead as if the managers charged no fees. If you can figure out a way to get people to work for free, and do a good job on top of it, then you'll have surely cracked the code (or reinvented slavery). Until then, it's hard for me to demonize a money manager who charged two percent over ten years, even if it was two percent of a very large number.
It's easy to evaluate if you have seizures. You don't need to wait for it to be definitively proven to make use of the anecdotal evidence. If you learned that aspartame could trigger a seizure, wouldn't you be cautious and want to see if a change to your diet would reduce your seizures?
Not a problem; here are the answers

1. No, you do not need to format your calendar in any special way. We've developed a machine learning algorithm that automatically figures out the correct phone number and PIN number (if available). It works in 99.98% of the cases. In those rare cases that it misses, Callr will ask the user for a feedback and adjusts the algorithm based on that input.

2. There are a couple of important points; Callr only looks at a few days worth of events at a time and we did that by design. This will ensure that Callr does not have more information than it actually needs. Once the data is pulled, Callr is built like a fortress; we encrypt it with AES-256 to make sure it's fully locked. We wrote about clearly on our privacy page: http://www.getcallr.com/privacy-policy/
One thing law students learn in law school is that by far and away the most cases that chip away at constitutional protections are drug cases. The war on drugs has done more to eliminate constitutional privacy protections than any other government program. And now of course "the terrorists" seem to be the next justification for final, complete, mass surveillance.
Sharpie?
Yes, I was referring to this, made possible by "special" IBM System/360s that the Russians thought were black market, but that they were intended to get...
Alright, fair point!
This was the book that shook me to core. After this I realised no matter how much problems you face, there is always hope.
Excellent book.
This website only works in Firefox. A rare occurrence.
Yeah, but at least they let you do cross-country purchases. I live in the US and send my son in Europe gifts from the DE and FR Amazon sites. Lucky for me I know enough of the languages to muddle through the process. :)

Other companies are MUCH worse. Apple and Google being good examples. Try either being in the US or having a US credit card and purchasing in the EU. Nightmare!
Part of the reason the subway is so messed up is it's run by the state, not the city, as part of the general state-wide public transit. The city/state relationship is messed up, the debacle of the subways shutting down for only 6" of snow was because the governor mandated it without talking to the mayor.
Seconded, both examples. I get strong impression, working with Lua, that Roberto Ierusalimschy is a devotee of the MOP. Lua in a sense has a MOP but no built-in object system.
Cylon.js releases 1.0
If We Dig Out All Our Fossil Fuels, Here’s How Hot We Can Expect It to Get
Thanks for your interest pdiddy. Thousands of scientific studies in the biological effects of low-level RF and ELF are summarized and referenced in the independent Bioinitiative Report:
http://www.bioinitiative.org/table-of-contents/
The $78B budget for the city doesn't include the transit system. MTA's budget is $14B/year, with $7B of that going to NYCTA (the part of MTA which runs the subways and the city's buses).

http://web.mta.info/mta/budget/pdf/MTA%202015%20Adopted%20Bu...
> Logs are good, but packets and flows are better. Trust, but verify.

shrug You're not wrong, but it's more important to have wires that can be trusted than to have wires that can be perfectly audited.
5 best VPNs for Colombia
I'm Looking forward to get a new Phone. I am however undecided on Firefox OS and Ubuntu OS. Leaning towards Ubuntu but this device looks like a first-gen smart phone... once you see the bezel you can not unsee it!
Hey it's not lazy if you actually found the link ;-)

Yeah I've used mosh and it comes under the general category of UDP based protocols (of which, there are many). The purpose of designing the PacketZoom protocol (and it's attendant infrastructure) is to design something particular for the mobile native apps use case. Including things like app session based sessions, moving around between networks without breaking the session, take a single round-trip to setup the session and zero round-trips thereafter to start file transfers etc.

And then, once the transfers are started, taking care of the packet drops with a more measured backoff and retransmit policies than are available with TCP. E.g., PacketZoom protocol packets don't have to arrive in order. The receiving side can send feedback back to the sender with an exact list of what packets went missing. The sender can then make decisions about backoff on not just the fact that a packet dropped, but how many and in which locations.

Lots of other details like this allow us to handily beat TCP in all varieties of networks all over the world in speed and user experience.
I dunno, I think this means that when you visit a government web site, half the time you will get a box that says the certificate is expired.
I mentioned this as a reply in the other thread on this topic, but just to make sure it is clear to those who may not have read or reasoned about the full report:

The reason it is powerful is not this particular attack. It's a demonstration that they are willing and able to inject malicious responses to any request going to a Chinese resource (web site, analytics service, ads, etc.). Imagine if instead of returning some DoS javascript they deliver a payload to silently exploit a vulnerability in your browser/OS (and they are surely capable of finding or purchasing those) to do whatever they want with it:

- Add it to a botnet

- Steal your personal data

- Infiltrate your corporate network

- Wipe your system (punishment for those accessing or producing GFW circumvention software)

Are you confident your browser never makes HTTP requests to Chinese servers? Are there tools we can install to prevent it?

[EDIT: It looks like two separate HN stories got merged, and the comments along with them. Didn't know that could happen, but this comment now appears twice here at different places.]
TopShelf looks interesting, I have written quite a few Windows services over the years and there have always been lots of gaps in the MS offering.
> and smuggle them the same way they have for hundreds of years

Well, there has been some innovation.

http://www.cnn.com/2015/01/22/world/drug-drone-crashes-us-me...
Agreed, although it technically would have helped against attacks like the ones we just saw where most of the parties involved – including Baidu – are using .com domains. No question, of course, that this would only result in heavy pressure on everyone doing business in China to use .cn domains.
What are those zillions of empty lines under “Nimrod” for? No code needed?
The same team @ Dropbox is developing the conceptual successor, https://composer.dropbox.com

As a (paid) Hackpad user, I was offered the chance to migrate to Composer and try it out. It was clear that Hackpad.com is not getting sunsetted too quickly.

Now that there'll be an open source option, we'll also have the ability to just migrate to that. This is very considerate of users IMO.
Takes less than 10 seconds. Just squeeze handles at sides and lift or lower. It's spring-assisted.
> I believe you mean parallelism, not concurrency right? Concurrency is dealing (correctly) with more things at the same time, parallelism is doing more things at the same time.

Yes, parallelism makes more sense in this context. I wanted to express it in a more general way because running multiple programs on different cores at the same time I understand as concurrency, which is also made more efficient by parallel performance rather than sequential - IMO the terms are a little bit fuzzy at times, i.e. it's not that easy to convey the ideas behind parallel programming easily such that there is no ambiguity.

Edit: About ARM vs. Core M in benchmarks: After looking at it again, apparently the two are still quite far apart, you were right about their performance numbers: [1]

[1] http://www.fool.com/investing/general/2014/09/22/intel-corpo...
Lets not forget the context that the Snowden disclosures brought into light. Borders and diplomatic relationships has been systematically ignored when it comes to developing and deploying offensive capabilities on the Internet. Sovereignty does not seem to exist in nations mind when developing malware, breaking into critical infrastructure, stealing information, or causing sabotage online.
To be honest, a simple Makefile is very simple to write and efficient once you know the syntax fairly well. Then you add more and more things as the time pass, and it starts to morph into a giant huge monster that eat puppies.
The opposite, actually. With those sorts of assets you have to start getting worried about algorithms front-running your trades and things like that.

Also, "the market" is big.
Dumb question, but how do you get home after kayaking down the river? Is it a two person operation?
http://i.imgur.com/4v2VI3q.jpg
Love the concept & code, but I cannot abide the color scheme.

Here's hoping that if I come back here in a few hours some designer will have posted something better...
The point being, location != language.

I've been doing eCommerce for a long time now and the number of site that realize this is shockingly limited.

With a few exceptions, the translations you are using for a country website's language are possible to use for any country where a visitor wants to use the language. Exceptions include things like country specific product features and such. Those kinds of things would need a little though.

The data is all there and the tech is all there. It's just a desire or realization that is missing.
I look forward to using SQLite again. In 2010ish I used it for an airport and aircraft database to be installed with our iOS app for 'find near you' feature. lookup performance was perfect. but did have some performance snags on application start, a server call retrieved any DB records needing to be updated. I found SQLite update statements were slow (10mb DB of 10,000 records, less than 100 updates took 30s on first gen iphones), so instead of retrieving the records that were changed, we modified it to retrieve the latest 3mb (compressed) of the 10mb DB from the server, decompress and replace the single file which turned out to be simpler, more atomic and required much less code.

I really enjoyed the simplicity of it all.
Why You Need a Fast Website – Interesting  Facts Compilation
RT is certainly more free than any US news channel ... and this for someone that remember the first cold war, this is really worrying.
Why are you looking to move away from Openfire? I used it years ago and liked it.
There are Ikeas in the US.

If you are not near an Ikea and can't think of an excuse to do a day road trip to the nearest one, you might consider some of the motorized/adjustable desks on Amazon (just search for those terms).
Actually, it would have stopped this particular variant because Baidu serves the script from baidu.com:

http://www.netresec.com/?page=Blog&month=2015-03&post=China%...

That said, it would only matter if Baidu was doing something like serving the script only over HTTPS using HSTS which I imagine would incur a non-trivial backlash for them.

I'd also be surprised if they couldn't relatively easily move on to another similarly insecure script requested by many people outside of China.
You're right its not artificial... my mistake. It is however rather new to the market in the USA and Canada. It has been around for a long time, but in small markets.
Learning site for all ages; also offers freelance ways to earn an income
I've actually long advocated that the pocket brick is a temporary form factor for a phone/computer. The watch will soon be the brain of your computing, to which you will be able to pair any number of dumb displays, keyboards, earpieces, etc.

But you're right, I will likely get an iWatch. It will go in my QA toybox with my macbooks and ipads and iphones.
You can add echo commands to Makefiles just as easily. Rake is cool for Ruby programs, but that's about it.
Introducing ReSharper C++
> The US...has a much better track record with respecting free speech and human rights.

The rights of US citizens, yes, but our track record on human rights and free speech worldwide is not so good.
I feel this is one of those rare cases where some feedback about the downvote I just gave is called for. I've downvoted you because someone has asked you to apply the principle of charity to someone's post, and you've chosen to dig in instead. Even if you want to continue this otherwise-interesting discussion, please don't do it this way.
If I had more time, it would be interesting to run a phylogenetic analysis of makefiles. Could we find the most recent common ancestor? Can we add spatial information to track their geographic dispersal?
Livejournal.com
Fastmail.fm
Using open source software and equipment for video production
THE NEED TO WIN

When an archer is shooting for nothing
He has all his skill.
If he shoots for a brass buckle
He is already nervous.
If he shoots for a prize of gold
He goes blind
Or sees two targets—
He is out of his mind!

His skill has not changed. But the prize
Divides him. He cares.
He thinks more of winning
Than of shooting—
And the need to win
Drains him of power.

From "The Way of Chuang Tzu", as translated by Thomas Merton, © 1965.
There are a lot of tokens which are not strictly necessary, but which make a programmer's job easier. There's more to designing a language than making it use as few tokens as possible. A programmer's job involves a lot of different things - merging two pieces of code, reading and editing someone else's code, viewing diffs of code, moving code from one place to another, searching large amounts of files for specific code.

A lot of the choices in Go (and its standard formatting with gofmt) were made with all of these things in mind, not just the raw textual efficiency in mind.
Playertwo.io: Stories behind games and people making them
I didn't say we had to go to any extreme, I'm simply pointing out that the universe lives somewhere on a line between them. If you argue that teachers don't deserve the blame you are also arguing that teachers don't matter.
Some I've recently finished...

Epidemiology-focused

- Virus Hunter - C.J. Peters with Mark Olshaker

- Panic in Level 4: Cannibals, Killer Viruses and Other Journeys to the Edge of Science - Richard Preston

- Asleep: The Forgotten Epidemic That Remains One of Medicine's Greatest Mysteries - Molly Caldwell Crosby

- The Woman With a Worm in Her Head and Other True Stories of Infectious Disease - Pamela Nagami

General good nonfiction

- Voluntary Madness: My Year Lost and Found in the Loony Bin - Norah Vincent

- Trinity: A Graphic History of the First Atomic Bomb - Jonathan Fetter-Vorm

- Life, Animated: A Story of Sidekicks, Heroes and Autism - Ron Suskind

Fiction

- Funny Once - short story collection by Antonya Nelson (sad, weird, but very good)

- It's Kind of a Funny Story - Ned Vizzini

- Backward Compatible - Sarah Daltry

Also definitely recommend the Magic 2.0 trilogy by Scott Meyer (starting with Off to Be the Wizard).
Because these aren't the values we want to uphold in our public discourses. As a society we all think our leaders, our chiefs, our representatives are good people acting for the common good.

Of course we all want that, but I'm sorry, history proves there is very little evidence that we consistantly get it, so expecting it, it seems to me, is like expecting rain in the middle of the desert.

It happens, yes, but it's a fools game waiting for it.
IIRC hackpad was originally a form of etherpad.

It's gone full circle.
Most current implementations support the MOP.
Actually, Yes! and it's been studied!

A group of Cherokee Indians in North Carolina got some money from opening a casino. They decided to share profits, giving $6000 a year to each person in 2001 for instance. It's more or less a basic guaranteed income. So what happened to these people who'd lived in poverty before and now got a bit more money?

Children who were moved out of poverty saw behavioral problems declined 40%, crime declined, and high school graduation rates increased. Like magic! See [1] for more. Main takeaway -- money increased parenting quality; parenting is key to success.

Money can solve a lot of problems. Do you know how regular people try to actively become wealthier? They work more hours a week at minimum-wage jobs (ok -- add a second 20-hr/week part time job to your 40 hrs and you make less than 550 extra a month after taxes, and you are working 60 hrs/week so can't care for your own children that well). Or they become real-estate agents. That's a waste of time. If actively becoming wealthier were so easy these scrappy hard-working people would have done it.

[1] http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2891175/
I think the big difference here is that it's being used to launch attacks outside of the country. For too many years, the assumption was that these large scale attacks either didn't happen or were only limited to people already subject to a particular government.

> HTTPS everything

… and with HSTS, too
I've noticed the Moto G can typically go 36-48 hours (or more?) without a charge (depending on how light your use is).

Sometimes I come in and crash without putting it on the charger and realize what I've done the next morning. When that happens, I don't have to worry about immediately charging it even then; usually it still can make it to the end of that day (business hours) without being on a charger. This happens around once a week or so, maybe more sometimes.

I'm on my second Moto G, and this has been true for both, so it's not a one-off thing.
Not to be a cracked record, or anything, but this is why I don't use cloud services.

What else is hanging around on profiles you don't know about and didn't ask for? You don't know! It's all hidden in ~the cloud~ where you can't see it or do anything about it.

The answer is not to have a go at the hackpad guys, it's to not centralise everything on google.
you can't accuse them of being naive I will.i am of the opinion that any country that thinks they can be a big player in the global economy and introduce open markets to their country whilst simultaneously limiting freedoms of speech and choice has a certain amount of innate naivety. This may be a silly notion, but is there any chance this was a mistake like the way Stuxnet broadcast itself to the world?
How does SQLite handle replication? Can I have 10 app server nodes reading from one SQLite DB? NFS?
+1 when non-programmers start fixing bugs, I'll worry about how hard it is for them to read the language.
This is wrong about so many things.

It presents JavaScript as only available in the browser, and therefore not able to do any file I/O (wrong). It also says that Javascript doesn't run in an interpretive environment (wrong). Calling it "sequential, procedural" is misleading (asynchronous programming anybody?), and calling it "object-oriented" is definitely wrong (although OO is one style of use, it is neither required, strictly enforced, nor exclusive).

There are so many WRONG oversimplifications and subsequently flawed extrapolations that I think it's shamefully misleading about the nature of JavaScript (ECMAScript, but the author probably doesn't know the difference anyway). It's like they don't understand the distinction between a language and an implementation of the language, and they definitely do not understand the (important) nuances of the language.

JavaScript is not just Fortran that can run in a browser. It is a distinct language with distinct programming paradigms.... SO DO YOUR READERS A FAVOR AND PRESENT IT AS SUCH! You don't do them any favors by misleading them.