skysight-inc/HackerNews huggingface dataset:
There was an interesting talk at PyCon 2013 about programming using only your voice: https://www.youtube.com/watch?v=8SkdfdXWYaI Might be worth looking into for your case.

It's worth mentioning that the guy did this for himself due to severe RSI in the hands, but there was another talk on using a stenographic keyboard to program and I remember this guy stood up and said he wished he'd known about it earlier as it's another approach for people who suffer from RSI since there's less typing.
IE did but we're talking in the context of the web as a whole. An IE-only language in 2015 would be DOA.
Also may be related article, "Unicorns vs. Horses
Why I want to be In-N-Out Burger, not McDonalds":
https://medium.com/@awilkinson/unicorns-vs-horses-f81d8dd61f...
If you can get a peer-to-peer connection, it's irrelevant whether you're behind a NAT or not. That's what ICE is for: to get a peer-to-peer connection even if you're behind a NAT. Having publicly routable IPv6 addresses may increase the likelihood of getting a peer-to-peer connection, but it's not a prerequisite.
Gravity Payments in Seattle Is Raising Minimum Salaries to $70K
It's not the same thing, although it's a similar idea. The difference is the concept you linked to only attempts to capture and re-use the engines, not the entire first stage. And, it's a current proposal, not one from the 1960s.
Hey, my coworkers and I built https://OpenTokRTC.com to test OpenTok (also a webrtc API) video streams. We've tested it with 15 people a year ago and it worked great. I would imagine that they have improved even more at this point in terms of scalability and quality. You can also test the android/ios companion apps, they all interoperate pretty nicely. As an added bonus, they also support real time video recording and playback, which is really nice.
> (This also seems like a fun time to note that Witopia, a VPN provider lists its office address in a building occupied by multiple CIA subdivisions.)

This seems the appropriate time to interject that this may not be particularly meaningful. I once worked in a building that contained offices of the IRS CI and Secret Service. The IRS were actually on my floor - seeing an armed accountant in the bathroom is a bit of a surprise.

It doesn't always mean a lot. In my case, it meant we were in a building conveniently close to highways and the local airport.
The article states quite clearly (in the fourth paragraph) that the amount of data in question is 25TB. It later mentions that the data was spread across 32 servers and that lawyers compared it to the amount of data in 100 laptops - which would fix the lawyers' estimate for the average amount of data in a laptop at around 250GB. I haven't bought a laptop recently, but that sounds like an entirely reasonable guesstimate to me. The comparison seems like an appropriate way of conveying the order of magnitude of the amount of data that needs to be searched to a non-technical audience.

This thread adds nothing interesting to the conversation. Please just stop.
While it's wonderful they did this, as a short rant:

I hate when companies just feel the urge to add a random sentence or two to an existing license, particularly in cases like these:

"3. Neither the name of the copyright holder(s) nor the names of any contributors may be used to endorse or promote products derived from this software without specific prior written permission. No license is granted to the trademarks of
the copyright holders even if such marks are included in this software."

The first sentence is BSD, they added the second sentence.
The problem with this is a few-fold.

Either this clause is needed for the entire world (since BSD is used for trademark'd software all the time), or it's not needed at all.

It turns out, in fact, arguments over trademark inclusion due to OSS licensing has been made before, and nobody has ever won on this before[1]
So other than some lawyer just "not being satisfied unless they added stuff to the license", all this does is make a gratuitously different license that

A. can't be merged with other licenses (since it requires you reproduce this condition text, and this condition text is not the same anymore as the other ones)

B. Isn't actually the BSD license, and was deliberately changed, so ends up worse in court since now the other side can reasonably argue that the same precedent should't apply.

C. Makes analyzing compatibility with other licenses more difficult and annoying.

[1] Since they are very clearly licenses about the software work, not trademarks, and you can't stop someone from saying "this uses apple's researchkit" regardless of what trademarks you have or what you write in this license, anyway.
The defense here has their work cut out for them:

* Employees of the Multi-State Lottery Commission are not allowed to play the lotto at all.

* This guy runs infosec for the Multi-State Lottery Commission.

* He is on camera buying what turns out to be a $14MM winning ticket.

* The prize for that ticket was claimed by a Belize-registered company the day before the ticket was to expire.

* The defendant was more or less caught modifying the camera settings for the safe room for the lotto-generating computer systems specifically for the day he was in that safe room.

The rest of the stuff about "rootkits" and "USB drives" and other theories of the crime seem like a red herring. The winning ticket is a smoking gun. Even if, in violation of the rules of his job, he'd played the lotto every day of his life, it would still be so statistically overwhelmingly likely that the ticket was bogus that no reasonable person could acquit. But I'm guessing it's going to turn out that this is one of the only times since he got the job that he played lotto.
Awesome news. I have used Rethink for a few internal projects and while I don't think it has that one "killer feature" that other DB's don't it is such a painless experience in development and deployment that makes just worlds better then trying to set up and scale some of the other solutions.

BZ rethinkdb team.
I think it's your username.
SEO purpose, semantic way to define important content
PrivateInternetAccess becomes Linux Mint’s main sponsor
I'm excited to see that Square is advancing the art of secret management. This appears to be a very practical design and an improvement over most practices that I've seen in startups in SF.

That said, I hope that they continue to iterate on some fundamental design ideas:

(a) Attacks that can read arbitrary files from disk are far more common and simpler to execute than attacks that can read process memory. Leaving the unencrypted files available in a filesystem for a process to read leaves it open to this kind of attack, whereas using in-memory envelope decryption reduces the chance of this happening because there aren't remnants on the filesystem to deal with. Granted, this is difficult to do when depending on lots of open source software that expect secrets to be read from a file and is easier when you are building microservice daemons from scratch.

(b) It appears that the ability to acquire a secret is not revocable. Why is this useful? Often, you want a server to start, acquire secrets, and then drop the ability to acquire those secrets again. This reduces the risk of later attacks which get access to the system. Think of this as a similar pattern to how daemons will drop root privs after listening on a privileged port, or how nginx will drop privs after reading an SSL key.

(c) Keywhiz' uses a new service for managing the secrets. This presumably requires a server and other "big" components that exist alongside existing developer tools, and has a deployment burden for the host. Using envelope encryption would allow the secrets themselves to be stored in an encrypted form in the version control system, alongside the code they service. This gives you an audit log of changes to secrets that is integrated with the rest of your tools, rather than building a new system to do so.

Anybody interested in this space should definitely check out Amazon Key Management Service. I hope to see some open source implementations of AWS KMS in the near future!
How does Bernard "know" the birthday when the set has been reduced to three possible dates (before Albert's final statement)?
I generally use storyboard for few initial view controllers. After that, I either use separate nibs or code it. Storyboard can become messy and hard to navigate around if you put lot of views in it. Even though, you can zoom in and out, still it's messy.
Also, it really depends on what you are trying to do. There will be scenarios where using nib or storyboard won't just cut it.
That was the Facebook AV Marketplace, which to my knowledge does not exist anymore. Here's the old post about it from 2012:
https://www.facebook.com/notes/facebook-security/the-faceboo...
FWIW the scrolling effect is all jittery (and pretty much unusable) in Safari.
1) Experts in all fields are always wrong sometimes. The nonexperts are wrong more frequently on average and people are less interested in proving them wrong.

2) Saying that implementing your own cryptography usually implies a production environment. I think it's generally assumed that nobody cares what people do with their own time/personal projects.

3) Trite sounds bites don't work in science either, and expert -/-> celebrity.
> Some people also don't understand that arrays of large data have to be wrapped in objects or explicitly passed by reference in many situations to avoid duplicating them in memory.

IIRC arrays are always passed by reference and only duplicated if you modify the data inside the called function (if not passed with '&' of course) ?
I wonder if I can use this along with a raspberry Pi & Arduino to offer automated customized services to my patients.

E.g. build a system with RFID cards that uses sensors to automatically measure blood pressure, etc[1] and keep history.

ps. Too many interesting possibilities out there and too little time to pursue them!

[1] http://www.cooking-hacks.com/documentation/tutorials/ehealth...
C# was fully designed and developed by Microsoft.

> It was developed by Microsoft within its .NET initiative and later approved as a standard by Ecma (ECMA-334) and ISO (ISO/IEC 23270:2006).

http://en.wikipedia.org/wiki/C_Sharp_%28programming_language...
There is no shortage of technical talent. This is a tale used by tech companies to increase the H1B CAP and get access to more "supply" to keep tech wages under control.
I think the article points out the opposite, that you are being spied upon by Facebook itself and undisclosed third-parties and being told about it on facebooks' ToS.
I wonder if there is a way to make a more transparent RNG system that can be verified to be fair by the public. Maybe something involving clever crypto like zero-knowledge-proofs?
SaaS customer success made smart. No rocket science
I dunno--even as a developer (JVM, some Ruby) I honestly don't use that much RAM anymore now that I don't work for a company that thinks it is a grand idea to load eight gigs of crap into memory just to start the application server. I think we're moving towards much more composable systems that have much less need for fat memory specs.

Even when working on my game in Windows I only have 4GB allocated to the VM (VS2015, C#).
If they select your product! ProductHunt is still very closed community according to me. And, I think they seem very biased towards their selected members
But do you want your new employee to choke as soon as they see a new problem? To me, being able to solve the problem doesn't reveal anything; however, how they handle the problem can. I think its about context and what information you're trying to glean.
That's a bold assertion. I don't see any reason why Go would be easier to pick up than Java. Scala, sure, maybe then as it's a much more complex and powerful language.

But a few years ago I effectively had to start re-learning Java from scratch (I knew the language but the whole ecosystem had moved on from when I first learned it), and it certainly didn't take months to get productive.
What puzzles me is that most of the articles I've written for this site are working quite well in terms of CTR, and I never did A/B testing for them. Right now I have two images on my home page linking to my lessons, one is a beach and the other is a crowded live concert (they're relevant to the lessons). 20% of the 1% who clicked on the beach image have spent some time learning the song, whereas my crowded venue image has about 0% CTR. Perhaps I could find a better image for the 2nd lesson, sure, but if 6 people are interested in the 1st lesson when it's free, how many will want to buy it? I feel I'm losing my time. PS: Would you want to help me by doing some consulting for me? I really need somebody to see if I'm doing something stupid.
The idea of having to trust a central authority for verification is the root cause of the vast majority of the brokenness; it means that proper TLS-based security for the web is not only financially prohibitive for even individuals in developed nations, let alone developing (with very few exceptions in the CA space providing cheap or free certificates), but is also a single-point-of-failure in terms of security.

Nowadays, we have this magical thing called a "blockchain" that can be used for everything from currencies (Bitcoin) to domain names (Namecoin); with some further refinement, using a blockchain as a certificate authority would fix both problems right away.
I'm not familiar with the term bug collision, and I don't quite grok it from context. Is this another way of saying independent discovery?
"Temporarily embarrassed millionaries"
It probably doesn't have a tangible effect on your life. But it would and does have an effect on: celebrities, political figures, people of non-Christian faiths, people who pissed off someone in the wrong department.

The less security that is provided to everyone, the easier it is to access content of the truly vulnerable people.
You looked at a position saying it wasn't important, gmail or bank level important, to secure webcomics. You then argued that position was completely okay with having webcomic visits altered. That's a strawman.
I concur on these videos, everybody who teaches the subject should watch him.
You get a lot of "aha! it's that simple?" moments watching him.
Query your own timezone database using lat/lng with Rails, PostgreSQL and PostGIS
See the NIST Randomness Beacon.
They compare it to Slim 3, which isn't completed yet, sitting in a development branch...

Slim 3 will also be PSR-7 compliant, I don't see anything about that anywhere in these Lumen docs.
SpaceX CRS-6 Launch[1:10PM PDT] Stage Recovery Attempt
That is not true, Bernard does not know the birthday is in July. He knows it can't be in May or June, and he knows that the day of the month is the 16th. The only remaining option is July 16.
I wrote something similar in Go about one year ago for my IRC bot.

I never thought it'd be useful for anyone, but well, I guess it can :P
Yes, but mostly no.

I showed it to a few friends and a few of them had zero interest. Some tried for 30 seconds, then asked for the answer. Another wanted a hint. One said "I don't get it". One gave the answer right away and it was wrong. And some didn't get it after a decent step-by-step explanation, or even weren't interested in the explanation.

That says a lot, I think, about a certain mentality of a person towards particular types of problems, challenges and learning opportunities.

But I say mostly no, because there are hundreds of questions like these. Once you do 2-3 (and if you're in certain circles, you most likely have), the 4th or 5th become very easy, if they are even different (and not just a copy/paste) of ones you've already done.

In short, I think the question can be meaningful sometimes, give false positives a LOT of times, and probably give some false negatives, too. (e.g. nervous people who can't think outside the box in an interview boilerroom which is an a-typical work environment in my experience).

So yeah, I wouldn't personally ever use this in an interview.
ORTC and WebRTC are separate groups in the W3C. You can think of the ORTC "Community Group" doing more exploratory work on a future version of the API while the WebRTC "Working Group" is finishing the 1.0 version. The work the ORTC Community Group is doing may or may not be adopted by the WebRTC working group as a future version someday, or maybe it will adopt some parts but not all.

The currently drafted ORTC API still allows all of the power to the Javascript apps to interoperate with "legacy stuff", but it also allows the JS to bypass most of it.

(I'm a member of both the WebRTC Working Group and the ORTC Community Group)
A couple of hundred users(smaller number of accounts since each account may have more than 1 user)
AOL Unveils One, Its Big Bet on Programmatic Ads
Yep. This technology is too cheap/readily available to "do it wrong."

Let the Kafka project handle the nuances of durable, performant queueing - that's not your business model.
An honest review of Creative South
Commenting on the popularity of languages:

In TIOBE index of programming language popularity (based on web searches), Ruby is ranked 18th, down from 11th in April 2014. It fluctuates, but the trend is downward - 14th in November 2014, 13th in November 2013 and 11th in January 2013. Javascript is still rising.

http://www.tiobe.com/index.php/content/paperinfo/tpci/index....

It is supported by overall job trends (vs those for ycombinator-backed startups and github popularity)

http://www.ryan-williams.net/hacker-news-hiring-trends/2015/...

http://www.indeed.com/jobtrends?q=Ruby%2C+Rails%2C+javascrip...
I've done some projects with Silex and it's not bad but I've found myself losing quit a bit of time because you can never really use most components exactly like in the Symfony standard distribution but the docs mostly show you that way.

Also you have to be careful with dependencies version or you're quickly in Composer hell (because Symfony moves forward so fast).

Always wanted to compare it with Slim but didn't take the time.
I would be in favor of more of an alert-based implementation. i.e. if you go to a page that is HTTP, your address bar turns red with an "insecure" icon. A setting in about:config is ok, just a minor pain in the ass because I'll have to Google it any time I need to use it.
That also is why the GRE discontinued the old analytical puzzle section, which used to be 1/3 of the exam (along with math and verbal). The scores were bimodal: Those of us who'd done a lot of logic puzzles in school got perfect scores, and those who hadn't did much worse. It turned out not to be a good indicator of anything meaningful.
Read this thread.

CC is a bijective function on (blocksize of KC) bits.

CC knows nothing at all about KC.

Implementation can be done in another computer without security problem while you get obscurity.

Read this thread.
Does Start Up weekend specifies that the start up has to do with tech? Unless you're saying that 103 people were the "idea person" I don't see what's wrong with that
Seems like a variation on the king's wise men puzzle.
Using Python to Code by Voice [PyCon 2013]
Looks legit. My apologies. I was unsure of how they would even go about determining that, but after reading their methodology and limitations, it seems that is a somewhat representative number.
I've tried; http://www.crypto101.io.
> People start with the assumption that what you are saying is wrong (this is a good thing). But then many don't have the competence to judge what you are saying (no problem. we all are ignorant in many subjects). And then, they react as if you were really wrong (this is a huge problem).

I've been dealing with crypto on a near-daily basis for the last 15 years. I'm well within the top percentile of understanding of the subject, from a theoretical and practical standpoint, having worked to break cryptographic protocols for most of my life. I wouldn't trust myself to design a crypto protocol for grocery lists, let alone anything important.

This isn't false modesty or elitism or ignorance. It's recognizing that even if every smart person I know looks at it and says it's fine, it probably isn't. Crypto isn't hard to get right -- that's actually not the argument that anyone will make -- but it's impossible to know if you did get it right or not.

You do not have the knowledge required to build safe cryptographic protocols. Neither does anyone else on this site.
But that right there is exactly the problem I have with people like this. Being offended is a choice. People choose to be offended. One might hear something they perceive as offensive and they're given a choice: Did this person actively choose to offend me, or am I taking this the wrong way? In one choice, you assume that most people are generally good, have good intentions, and aren't out to get you. In the other choice, you position yourself as someone under attack, or someone at the lesser end of a power dynamic.
Would you find it strenuous to tell your friends about if such a thing existed?

I've always had a thesis that I'm not sure is true, perhaps i'm not social enough, although I have my facebook friends and many contacts in my phone I really only talk to 3-8 people. If such a thing existed I don't even know if it would be too much work to switch since I would only tell that small amount of people.

But perhaps i'm too antisocial, I wonder what other people think about that.
There is no WebRTC 1.1 yet. 1.0 isn't even done yet. Once 1.0 is done, then work on 1.1 will start. ORTC maybe be adopted in whole or in parts as 1.1, but the future isn't written yet.
Bernard knows that the birthday must be in July and August, the date he was given was the 16th so it must be July 16th.
The myth about women in science
That's a pretty scary thought.
Or that's what they want you to believe. Take your pick.
I think what tptacek is hinting at is that a nation state could forge roots with their own certificates, creating a separate chain of trust. Given that your internet enabled device does not likely have an DNSSEC validating resolver (with uncompromising trust anchors for the roots) operating on it it's still possible for your device to receive forged responses.
I made this journey recently. For css pick a framework(something small like pure/skeleton) and study the source code and read about each attribute you don't know about on MDN.
How is this different from Laravel Forge? https://forge.laravel.com/
> a better man

You mean person.
At least the first four in the OS X 10.10 tree are apple original software, not just source dumps of other people's OSS products. Ok, that's terrible statistics since the files are alphabetized and Apple comes early. But take a look through there at the copyright owners and you'll see lots of original software released as open source.
Admittedly, the "restart server process after N connections" method of dealing with memory leaks is not specific to just PHP.

It's also present in Apache, and thus mod_rails and mod_wsgi, by default[1], is an option in Gunicorn[2], and a gem is also available to provide the same in Unicorn.[3]

1 http://httpd.apache.org/docs/2.2/mod/mpm_common.html#maxrequ...

2 http://gunicorn-docs.readthedocs.org/en/latest/settings.html...

3 https://github.com/kzk/unicorn-worker-killer
Excuse my ignorance, but why aren't there options for salting / seeding / external RNG alternatives to crypto algorithms?