skysight-inc/HackerNews huggingface dataset:
I went to one in 2012, and a majority of the projects, as well as 2 of the 3 winners were tech.
I think you're right, we're talking about different things :) I misinterpreted your comment - I was thinking of things like company cars, travel benefits etc. being considered part of the taxable pay package.
MySQL Percona snaps up Tokutek to move onto MongoDB and NoSQL turf
IMHO, tying language's defacto package management's capabiity to a single company's business model may hurts node.

No other language does this. you have all the same capability for propretary package with RubyGem/Python/Nuget, even Ubuntu allow you to add third party package repository.

It gives me the clue that npm may no longer improve, or many improvement will be "premium" feature.

I hope someone fork npm and add ability to parse semver from tag for github repo.
ZStack's Scalability Secrets Part 3: Lock-Free Architecture
I agree but you are the first person I've seen frame it in that way. I see people spew "don't roll your own crypto" often. Hopefully some variation of your "modern argument" becomes more prevalent in the near future. It is certainly more meaningful.
Correct. The runtime uses a copy-on-write implementation when you pass an array by value.

Duplicating an array in memory every time it is passed to or from a function would be awful.
What is going on in this thread where a 25 year old with 3 million in the bank is described with the word "only"?
Ah, yeah, that wasn't there when I posted my comment above.
Lots of congratulating on this thread and a hell of a lot of points for a software release. I've been on HN consistently for a long while and I didn't realize there was so much love and hype for RethinkDB here.

Have I missed something?
Why? Acetaminophen makes you act differently. Big deal. It isn't as if we're all being administered drugs like in Equilibrium.
Not the case here, my friend.

From the horse's mouth:

"Each process has its own input queue for messages it receives. New messages received are put at the end of the queue. When a process executes a receive, the first message in the queue is matched against the first pattern in the receive, if this matches, the message is removed from the queue and the actions corresponding to the the pattern are executed.

However, if the first pattern does not match, the second pattern is tested, if this matches the message is removed from the queue and the actions corresponding to the second pattern are executed. If the second pattern does not match the third is tried and so on until there are no more pattern to test. If there are no more patterns to test, the first message is kept in the queue and we try the second message instead. If this matches any pattern, the appropriate actions are executed and the second message is removed from the queue (keeping the first message and any other messages in the queue). If the second message does not match we try the third message and so on until we reach the end of the queue. If we reach the end of the queue, the process blocks (stops execution) and waits until a new message is received and this procedure is repeated."

The Erlang VM accomplishes this by providing computation credits to each process, which are spent to perform actions ensuring the complete, non-blocking, parallel system that guzzles information at a startling rate all over the globe as we type this :)
Thank you for replying here.

Can you give us more information including:

- Proof you are from Recorded Future

- The public URL at which you picked up the links

- Any evidence you have that what you say happened indeed happened? That is specifically the log information you report on having investigated. Publishing this will allow the original publisher and independent analysis to corroborate your story.

The more information you can publish to quell any doubts, if this is completely benign, the better for your company/Facebook/CIA.
At Tuenti, a cell phone operator in Spain, we have been using webRTC very successfully for audio. In fact, we built android/iOS/web apps to make regular phone calls (to mobile or landline) using webRTC, either from WiFi or 3G/4G networks.
Complying with copyright is the entire premise of copyleft aka the GPL.
Reading the article linked in point #9... http://geekfeminism.wikia.com/wiki/T-shirts

Wow. Women's clothing is so broken. (Maybe clothing in general.) The dual requirement of non-sexualizing women (or paying undue attention to their bodies) but also being able to provide flattering perfectly form-fitting t-shirts as swag.. wow.

I'd say just drop t-shirts entirely and go to patches, everyone brings their own blank shirt or vest or jacket or whatever that they like and have someone on hand at the event with a sewing machine to sew the patches on.
> No license is granted to the trademarks of the copyright holders even if such marks are included in this software.

This line was probably required to get some manager at Apple to sign off on this. There are few companies as protective of their trademarks--their _name_--as Apple, and they probably wanted to make sure that an accidental commit from a developer that included an Apple logo or the word 'iPhone' didn't cause irreparable damage to their trademark.

Valid fear? That's debatable. But I'd rather have a company add _one line_ to an already minimal license than not open source at all out of this fear.
Apple has funded clang and LLVM, maintains CUPS, funded MacRuby for a while and packaged a lot of OS Software for their system, promoting it.

Not all is gold, but that's certainly more than "complying with copyright".
I've been following RethinkDB on HN for quite a while now and have been eagerly awaiting them to make a production-ready statement. Everything I have read has sounded very promising and I am excited to try it out!
Ask HN: Server-side Lua?
Does anyone have recommendations for server-side frameworks in Lua? Ideally, I'd be interested in something that is less opinionated/MVC-ish like Node but I just want to get a general sense of what folks use. I've had a passing interest in Lua for a long time and now I want to mess around with it a little more.
> No, the AGPL uses strong copyleft, so any future derivative work must be released under the same terms (and the same license or later versions if I'm not mistaken). The only possibility is to start a closed source clone that doesn't use any of the original code from zero.

Slava @ RethinkDB here.

This has one exception -- the copyright owner can choose to start releasing enhancements as closed source, and they wouldn't be legally obligated to open source them. Currently RethinkDB, Inc. owns the rights to the code -- if we wanted to continue developing closed-source enhancements, technically we could. If we were acquired and our acquirer chose to do that, they could too (since they'd end up owning the rights to the code). Copyright and licensing are different things -- essentially the copyright owner has the right to relicense future code in a different way.

We have extremely strong incentives not to engage in bad behavior (and it runs against our beliefs), but I thought I'd point out that there is no legal barrier.
Web App out of Washington DC tech scene is shaking up meetings
I am not familiar with IPVS, I'll look into it.

From your description though I imagine it might have the same drawbacks that exist with the multiple HAProxy + iptables swap solution. With a solution where we run multiple HAProxies and move traffic between them I worry about port exhaustion, long running connections, and the maintenance costs of the infrastructure. It could just be the case that we're talking about different problems. At Yelp we have hundreds of services that are added, changed, moved, and removed from physical machines causing our internal HAProxies (which listen on hundreds of ports and many have long running connections) to reload pretty constantly.

As all engineering decisions, I could very easily be wrong and be overestimating the complexity involved with the multiple HAProxy instance solution. At the end of the day I made a call based on the data available, and I decided the solution I talked about in the blog post was lowest risk.
I get rather fine Skype video over 3G and 4G.
Nice concept - Main concern would be for me that the data points wouldn't apply outside web-development, E.g. game-developers or low-level roles. Cool though.
Sure, in the matrix product

AB = C,

C has the same number of rows
as A and the same number of columns
as B, and
each column j of C is from
column j of B acting as
coefficients in a linear
combination of all the columns
of A.

Next: For the set of
real numbers R,
positive integers m and n,
m by n real matrix A,
real numbers a and b,
and n by 1 x and y,
we have that

A(ax + by) = (aA)x + (bA)y

so that A is linear.

If we regard x and y as vectors
in the
n-dimensional real vector space
R^n, then we have that
A is a function

A: R^n --> R^m

and a linear operator
which can be good to know.

Then the subset of R^n

K = { x | x in R^n and Ax = 0 }

(where 0 is the m by 1 matrix of all
zeros)
is important to understand.
E.g., K = [0] if and only if
function A is 1-1. If m = n,
then A has an inverse
A^(-1) if and only if A is 1-1.

With C = AB, the matrix
product is the same as
function composition so that

Cx = (AB)x = A(Bx)

which also can be good to know and,
of course, uses just the
associative law of matrix
multiplication.

That matrix multiplication is
associative is a biggie --
sometimes says some big things,
e.g., is the core of duality
theory in linear programming.

And the situation is entirely
similar for the complex numbers
C in place of the real numbers R.
Was CC and KC both performed on the Pi? That introduces side channel attacks.

Does CC include implementation flaws enabling remote access? An attacker may use the Pi to enhance attacks against the system executing KC.

Does the Pi include any remotely exploitable flaws? See before.

If assume a perfect/non-exploitable CC/Pi, we may not degrade the security of KC. That key word, may, is the problem professional cryptographers spent years analyzing though. If we spent a month thinking about this, we might identify other requirements needed to avoid weakening KC. This is not recommended.

Systems which rely upon cipher-obscurity are not secure. Most amateur cryptosystems are trivially defeated without any knowledge of their internals (FBI has some nice articles on cryptanalysis of criminal ciphers). Advising amateurs to rely upon homegrown ciphers is unprofessional and encourages bad risk mitigation strategies.

We also disagree about the difficulty of breaking non-keyed bijections (trivial) versus AES-at-scale ("not trivial"). The cost of the latter easily exceeds $1B. The former would take a trained cryptanalyst less than a month. Is your data worth <$10,000?
AppTree ♥ Dart
I agree it'd be better if different hackathons were clearer about what gets rewarded, but it's possible the real reason the other team won was because they presented (even if they didn't build) something that people wanted.

"Whoah, I want that!" > "Yes, that is functional."
Stanford Researchers Unveil New Ultrafast Charging Aluminum-Ion Battery
As should be apparent, Oracle is focused on the high-end server market and those that have strict reliability and high scalability requirements; inevitably, that means that much of the community that is focused on commodity hardware is going to be less interested given pricing and focus.

I'm not sure what open source packaging projects you're referring to; the image packaging system itself is still quite alive and still open source and available at https://java.net/projects/ips

If you're referring to the general availability of open source software on Solaris, the reality is that the vast majority of compiles and works on Solaris. A large amount of effort has gone into and continues to go into making it easier to build and use general FOSS on Solaris.

In addition to that, based on customer demand and business requirements, FOSS components are integrated into Solaris and updated.

As for "completely ridiculous choice", I think that's an odd thing to say. Solaris has zones, ZFS, image packaging, openstack, and many other compelling technologies (third party or otherwise) that are still being actively developed and improved. Performance and reliability are pretty important attributes for an operating system.
Bower has a backend that is reading the git repo and converting tags into semver versions. They automated NPMs publishing process. Doing this in realtime in the NPM client would be very time consuming.
I haven't been doing Erlang or Elixir recently so I may be missing something, but I think that's destructuring, not selection (Erlang/Elixir supports selective receive, but the pattern there -- a source pid and message with no assertions as to structure -- is, IIRC, whatever everything deliver to an erlang processes mailbox looks like.)
Then lets be sure not to have any real-life conversations, though I do appreciate you being authentic about it.

I agree 100% with the idea that it's better when people know about potential pitfalls before making big decisions and I hate how much marketing is involved in promoting frameworks. Read any of my comments on a Meteor post and you'll see similar anger and points to those you made about Angular.

However, anger is over-rated as a communication tool and is automatically limiting your receptive audience. I use is without thinking and shoot myself in the foot all the time, like in my comments about Meteor. But comments are comments and easy to publish without re-reading to consider how the intended recipient will take your words.

Not so with blog posts, when considering your audience you should consider whether people who are turned off by blowhard advice are going to respond how you want. Or do you only care about reaching those people who like to be yelled at, or are already angry with you (and thus a part of a choir you are preaching to)?

I see there are others willing to express appreciation for your tone, I will not. The question is, because I don't agree with your tone, am I the one who misses out on what you (and other blowhards) have to say, or are you the one who misses out on the positive responses of everyone who feels the same as me?

Also, consider how much of what you opine on regarding patterns and standards or whatever isn't naively influencing those new coders you're trying to save with your bluster. Here is a relevant article from the homepage today, does it resonate at all?

http://jamisondance.com/03-29-2015/cynicism-and-experience/
All of the things you're describing are attributable to bad implementation of the basic idea that building software is not like building physical machines.

Scrum, or any other agile SDLC, can do the things you describe above. It can also do none of them.
I haven't been to a SW in about 3 years. But the last ones I went to were all people who brought their existing fledgling business they were trying to get started. Did who knows what for the weekend. Then just pitched it on demo day. That was maybe 60% of the groups that participated. Really a big let down.
Ruby was first released in the mid 90s and became the shiny new thing in around 2005 when ten years old.

Sometimes the shiny newness is in the public eye rather than absolute terms.
got any proof of any of this?

if the url is public, let's see it :)
The group that did that at our SW got eliminated during judging.
https://sergeytihon.wordpress.com/ is a good resource for F#
> Hi Andreas - I'm not saying it was posted publicly by you or someone in the Bosnadev team. Please contact me directly (matt at recordedfuture dot com) and I will share more details with you.

You left this comment on Bosnadev's blog. Mind sharing with the rest of us?
I know, that's a debate we regularly have with the other founders. Not sure if we'll keep that choice that way.

But still, I'm sure we offer checkpoints you won't find on other websites (cutomized tips according to your CMS, etc)
Zenefits Is Back in Utah the Beehive State
> I've done Startup Weekend once before and it felt like how the "The Business-A-Thon" was described.

To be fair, SW is meant to be a "Business-A-Thon" and not a hackathon in the traditional sense. This is spelled out in many places, and they make it clear up front that the business plan is key.

> I also understand that maybe SW is not aimed at being a hackathon but I just wish they could have given more weight to something that worked and was accessible today

But that's not what they want to be. I'm not saying you have to like it, but rather that your perceptions going into SW was for it to be something it didn't want to be.
Ditto regarding a java driver. It seems crazy for a database to not provide native java support.
"This line was probably required to get some manager at Apple to sign off on this."
I agree here :)

"Apple logo or the word 'iPhone' didn't cause irreparable damage to their trademark."

As I said, this is a problem either no company who uses the BSD license has or all of them have it.

"But I'd rather have a company add _one line_ to an already minimal license than not open source at all out of this fear."

I don't agree here at all.
Because this is how we ended up with the mess that caused things like open source license certification by OSI to exist in the first place.

Random companies would add random one-liners to licenses, like "don't use in nuclear reactors", etc.

Down this path is madness, and it starts with good intentions.
Thanks. So Node is actually using multiple threads behind the scenes or did I read that wrong? How do I know which kind of operations are pushed there by libuv?
And it has the added benefit from the NSA's point of view that your connection/data is precisely fingerprinted as 'homebrew-crypto-1629: refer to analysis cell 2865JQ'.

Then the computer is sub basement 19 goes 'ding!' and sends an automated SWAT team to your house.
> frequently find myself wanting a light append-only data store for pet projects

As someone who is mystified by that statement: why?
The puzzle is a simplified variant of the so called sum and product puzzle: http://www.cs.rug.nl/~grl/ds05/sumproduct.pdf
The WiPy: The Internet of Things Taken to the Next Level
Filesystem interface just by itself is a big difference.

Keywhiz lets you manage things like mysql or other configs which might contain things like username/passwords, passwords to unlock certificates, API keys, etc. If you don't have the resources/option to modify applications to use a specific API, the filesystem might be your only viable solution.
Ok, and thank you for listening to me, but let me just add that in every instance I know of where someone has been berated for shipping crypto without having a background in it, those people also hadn't taken the time to learn how to break crypto.

So agree that the argument you're calling out has the potential to be harmful in the long run, but do not agree that it has harmed anyone we know of, and would add that it has --- to the extent it's warded people off things like Cryptocat --- helped end-users.
They describe the editor as pugilistic and nursing arbitrary feuds. I happen to live in a place with a one-man paper like the one described, who has the same problem.

Being used to metropolitan papers (with real governance, ethics, etc.) on the one hand, and limp containers for ads on the other, I had not met this beast. It has been educational to say the least.

I never quite understood, at a gut level, A.J. Liebling's notion of "freedom of the press ... for whomever owns one" until this. It's amazing how much power this can give the one who operates it, whether or not they have anything to say.
Hi. You can easily find corroboration that I work at Facebook and my contact information. Please feel free to contact me with details of your issues.

If you have specific security vulnerabilities to report, here's a link to our Whitehat program: https://www.facebook.com/whitehat/report/
> I'm not embroiled in the PHP-world, so I don't know how many alternate PHP runtimes exist, but I presume that the default PHP runtime itself was being referenced.

So are you talking about the default PHP 4 runtime or the default PHP 5.3 runtime or the default PHP 5.4 runtime etc? These versions are very different beasts, so levying a vague "memory leak" criticism at PHP without substantiating it via code or even a version makes the criticism pretty meaningless.

> I think that equating bugs in the runtime with bugs in the language is something that happens even if technically they are separate things.

I asked for clarification because I was unsure what you were referring to. For example, about a month ago I was tasked with debugging a memory leak in a legacy Ruby application where I eventually discovered that the developer had used a proc in such a way that it prevented the GC from freeing variables that had been referenced in the closure. It was an issue somewhat similar to the examples described in this blog post:

http://victorarias.com.br/2013/08/13/leaky-ruby.html

I wouldn't attribute this memory leak to the Ruby langauge but more to a Ruby idiom that developers should take care to avoid. That's the type of clarification I'm looking for, but it appears that you don't really have anything to offer the discussion in this regard.

> And your comment seems needlessly defensive. I made a comment about general sentiment that I've gotten from people that have actual working knowledge of large-scale PHP deployments. I'm sorry that in the middle of the conversation I didn't start immediately interrogating these people asking why they haven't filed bug reports if there are memory leaks.

I have no emotions tied up in this discussion, I'm trying to make a point that your criticism is just anecdotal hearsay without any way for someone to verify if what you're saying is actually true. I didn't suggest that you ask your colleagues to file bug reports, I was simply pressing you for more details since your vague anecdote runs counter to my own experiences with PHP as I relate it to the rest of the imperative scripting landscape.

> Also, is it devoid of substance if I'm basically stating that I've talked to people "in the trenches" (and presumably know what they are talking about) who don't have the opinion that PHP is some beautiful, but misunderstood language that gets a bad rap

Yes, that is pretty much the definition of "devoid of substance". "In the trenches" is a subjective description that doesn't mean anything. You presume they know what they're talking about, but maybe they actually don't, but we'll never know either way because all you've done is recount nebulous secondhand generalizations. You're not even asking me to take your word for it, you're asking me to take your word for their word. Can't you see why that's a little dubious?
do they want to be like Sonatype for node.js ?

http://www.sonatype.com/
I have opened a room. https://niltalk.com/r/8CKyw I am not going to tell the password though. Let's see how long it lasts!
Startup Weekends are not hackathons though.

Edit: Reading through these comments, it surprises me to see that so many people think of Startup Weekend first when they see hackathon. Startup Weekend takes on the format of a traditional hackathon, and shares many elements, but it's not a hackathon. Another commenter hit the nail on the head when they called it a business-a-thon. It just so happens that the culture surrounding it tends to use a lot of tech.

But please, don't equate Startup Weekends with hackathons. They aren't. And that's fine. They are what they are. Confusing them with hackathons however will lead to disappointment.