skysight-inc/HackerNews huggingface dataset:
Thanks for the share. =)

I'll queue this to read later, but just reading the executive statement, it seems to jive with a lot of the discussion here.

The issue isn't that code review /shouldn't/ be taking place, or even that there aren't directives stating that it should be done. It's that it isn't being done, and that's a problem.
The wildlife situation in Chernobyl is complex.

Here are some BBC reports. The BBC sometimes mangles science reporting. I'd be interested to read more modern articles.

http://news.bbc.co.uk/1/hi/6946210.stm

> Recent studies said rare species had thrived despite raised radiation levels as a result of no human activity.

> But scientists who assessed the 1986 disaster's impact on birds said the ecological effects were "considerably greater than previously assumed".

http://www.bbc.co.uk/nature/14250489

> "But what we're finding is that there is a significant impact on both the population and the biodiversity - the number of species - in the zone. And it's directly proportional to the level of contamination."

> But this is one side of a polarised scientific debate.

http://news.bbc.co.uk/earth/hi/earth_news/newsid_9387000/938...

> Birds living around the site of the Chernobyl nuclear accident have 5% smaller brains, an effect directly linked to lingering background radiation.

http://news.bbc.co.uk/1/hi/sci/tech/7949314.stm

> According to researchers working in the exclusion zone surrounding Chernobyl, there is a "strong signal of decline [of insects] associated with the contamination".

> The team found that bumblebees, butterflies, grasshoppers, dragonflies and spiders were affected.
A Strategy for Teaching Programming – Logic First
> Jepsen cannot prove that your software is safe, only prove that it isn't.

This doesn't just apply to Jepsen but to all software tests. You only ever test a finite set of scenarios, so you can't really ever guarantee your software is 'safe'/bug-free - only that it does not fail in common/expected scenarios.
I do the same thing with ledger: it takes only a few lines of script to convert the csv export to ledger's file format, then a few minutes matching up transactions that did't match.

Since ledger's input format is so flexible, it's pretty straightforward.
14th author: http://research.google.com/archive/spanner.html
While I agree that the fear for genetic modification is often unfounded, I don't think it's silly to apply more scrutiny to specific and specialized modifications such as with GM than with general, haphazard approaches such as used before. It is a case of "be careful what you wish for"; things have unintended consequences and they might be greater in the case of making a targeted modification without considering its context.
Mixpanel is looking for a lead iOS engineer
Which AngularJS of two?

PS: looks nice!
So much truth spoken in the linked text. Thanks.

It has to be said. Damn the containers and windowization of Linux.
"That awful moment when you're drawing a Powerpuff Girl in the toilets and your phone decides it should restart Test Match Special. Loud."
Sony breach 'definitely wasn't an inside job' says FireEye's Kevin Mandia
I'd be interested to hear if you have an example of a company that did read the source code of apps. used?

Also which law do you think they would be breaking by not reading the source code of products used?
AngularStrap has one which works rather well - https://mgcrea.github.io/angular-strap/#/datepickers
>> Security is a real issue in docker and it is being worked on, but I don't think "give them a chance" is a justifiable response.

For a public facing system I would agree that means it's not ready for production use yet...
Call for Participation: Chaos Communication Camp 2015
Hilton stores your whole credit card number in your HHonors account
But he calls his sysadmins a "Cyber Security Agency".
Looks like typical government overreach to me.
Every once in a while someone figures out that we could entirely solve the dependency problem by packaging all the dependencies with the application. Everyone gets excited. After a while everyone gets unexcited when the problems associated with this approach become obvious.

Docker is merely a more extreme example of the "package everything with the application" idea...
This is one of those things that pretty much is guaranteed to be replaced with VR simulations in 10-15 years. I have to believe that the challenges associated with doing "true to life" simulations of waves, wind, and impact of tugboat, will benefit greatly from a half dozen (remaining?) iterations of Moore's law.

Though - I'm also wondering, is there an opportunity for automation here as well?
Manual data entry is the only thing that has kept me on track for eight years. I tried the automated stuff but I never connected with my money so I never took it seriously which led to letting it get completely out of control.

Tracking every penny by hand is drudge work at first but at this point is habitualized. I have a visceral understanding of my cash flow which let's me do things like quit my job with confidence instead of panic.
Sad really.

docker and any user in the group docker, or lets say, any user capable of sending commands to the docker daemon running as root - is root on that system.

docker -v /:/f -w /f yourimage /bin/bash -c "echo root:and:so:on > /f/etc/shadow"
Yeah, its great that there are libraries like this that try to do better than the status quo.

But, with every new library there's always the question about support.
And so since there is no involvement perceptible on its Github page (no PRs, no issues and 3months without a commit), I wouldn't want to use this in production.
TL;DR - a proper & updated rephrasing of the right & clause would be "The existence of a standing army notwithstanding, the right of the people to own and carry weapons shall not be infringed."

The typical response equates "the people" with "well regulated militia" by observing that "well regulated" meant equipped & trained, which all able-bodied males were expected to be (per the Militia Act of 1792, each was to buy standardized weapons & gear and participate in local training).

The typical dissenting response equates "well regulated militia" to "standing army", explaining the right as "of course active soldiers have a natural right to carry exactly and only what weapons their commanding officers order them to", which hardly constitutes a "right" requiring enumeration.

An alternate response I'm growing fond of enhances the "the preamble was explanatory but ultimately meaningless" argument others gave here. The Founding Fathers had a strong dislike for standing armies, but grudgingly realized that one would be required because an armed populace was inadequate to the task of advanced national security. Citizens being an uncooperative & cranky & poor bunch, there would be a need for a well-equipped, highly-trained, severely-disciplined military body ... a standing army, necessary to protect the states individually and the country as a whole; the citizenry should be able to do the job themselves, but we can't be sure without formal troops. Should a standing army be created, they'd be faced with arguments (like we're seeing right now) that there would be no need for an armed population because a standing army was ready to protect the country...and then the government could proceed to disarm the people at large, leaving a situation that the Founding Fathers had just fought a prolonged war to eliminate. Ergo, the right as enumerated is best understood as "The existence of a standing army notwithstanding, the right of the people to own and carry weapons shall not be infringed."
Or you could just look at, say, http://microjs.com/#ajax to find a nicer microlibrary to do exactly what you need.
It's a shame that in 2015 we still need to implement datepickers from scratch. Kudo's on your effort :)
Existential crisis at Railsconf
SmallTalk was designed to BE the computer. Skinning for a native look the way Qt does may be the way to go. Targeting code for native applications should really be a separate thing and should involve additional toolkits.

The commercial Smalltalks do this but they are very pricey.
Assuming you:

- trust your compiler and linker

- trust your tar extractor / package manager / whatever

- trust your editor

- trust your http library (or whatever you used to download/distribute the code)
Oh my PBX! Run multiple, hot-swappable Asterisk local instances with Docker
Syncthing v0.11.0 Release Notes
Rails is faster for a rail trip duration of up to 4 hours (no security, no lines, no checkin, plus you arrive right in the city centre). Which, depending on the route, comes to somewhere between 200 and 450 miles of distance.

As for me personally, I prefer to go by train even if it takes a little longer. Flying means most of the time spent is lost in queues and transit, whereas a train trip means a single long stretch of uninterrupted time, which is much more relaxing and/or productive.

In terms of price, it's usually pretty much the same. If you book ahead and get a good deal, a flight might actually be cheaper. On the other hand, if you need to travel a popular route on short notice, a flight will be outrageously expensive, whereas a train ticket costs the same even if booked 5 minutes before departure.
> A container is a container, as long as docker itself has not bug, the container can only harm the containers content.

So given that there are no bugs and as long as the Linux kernel is free from local privilege escalation exploits. That seems long odds to trust in.
Funny, last week I read that being underweight INCREASED the risk of developing Alzheimers if you are middle aged or old [1].

So often these studies should just be ignored, or taken with a huge pinch of salt (apparently that is now ok [2] these days too).

[1] http://www.alzheimers.org.uk/site/scripts/news_article.php?n...

[2] http://www.economist.com/blogs/economist-explains/2014/04/ec...
I was hoping to find out what OS he was running -- or is this even a relevant thing to ask?
>> - trust your http library (or whatever you used to download/distribute the code)

This can be overcome with signing.

We're all well aware of how deep this rabbit-hole goes, however that doesn't mean that it's a good idea to throw all trust away.
On Polymaths: The making of a genius
6 Steps to make money online
If more people went through that process, the frameworks we have might be fewer and of better quality.
Alas, the Supreme Court and legislature at large have concluded that there should be "reasonable restrictions" whereby individuals can & should, for clear reasons ruled by a court, be prohibited from possessing weapons. While I generally agree with you, this is a reality we'll be hard-pressed to correct. Ergo, and in the interests of restoring the right to most people, we may have to settle for the disarming of people who, individually, due to particular conditions, as reviewed and declared by a court, and listed in public records (which may these days be checked "instantly"), declared individually unfit to be armed as they are a demonstrable threat to themselves and/or the community at large.

Pushing for "they are people [too]" will require a very different approach than where this subthread is going.
"Small jars that do one thing well. "

Oh, the "unix" philosophy.
This rant is about containers, prebuilt VMs, and the incredible mess they cause because their concept lacks notions of "trust" and "upgrades".

Prebuild VMs? Sure, I wouldn't touch them except for evaluating a project, and for commercial software you may not have a choice.

But docker containers at least usually provide a dockerfile that describes exactly how a binary image is built. You just clone the source repo, audit the few lines of build commands and then build your own private registry. It's nearly no more trust than following the instructions of README or INSTALL. Just because fools are pulling down pre-build images and running in their datacentre, doesn't mean that's what way you should do it. And the problem with 'old-school' sysadmins is they are often far too quick to reject new practices, citing tired excuses based on misunderstandings of the technologies.

Ever tried to security update a container?

Yeah I have. It's easy if you have already built your 'stack' to scale horizontally (which means you have at least 2 or more of everything in a HA or LB config). You rebuild against a fully patched base-OS container, spin-up, send some test load to it & validate, then bring into service. Repeat for rest of nodes at that tier.

If you are trying to be an old-school sysadmin that expects to console or SSH in and run 'yum upgrade' or 'apt-get upgrade' your containers then you are doing containers wrong...
Dumping a CSV out of ledger is trivial (I do it every day). Surely the new bookkeeper could work with a spreadsheet.
My problem with nuclear disasters or really any kind of bigger scale environmental damage is, that you have no control over other people's actions and failures. You therefore can not argue, that the technology is fine as long as we all use it securely, because you simply can not ensure that for countries you have no control over.

And it is not only the small countries. We trust developed nations with nuclear technology, when we really should not [0]. Fukushima happened, many smaller scale incidents in the US happened [1] and in Germany the nuclear waste is a constant issue [2].

Unfortunately when using a shared resource like "world security", the free rider problem occurs, so everybody keeps using it. When you enlarge the time period in which we use nuclear power/weapons long enough the probability, that we mess things up on an even larger scale than Chernobyl or Fukushima ultimately approaches 1.

While I hate, that people forget that nuclear power does run on fuel and we have to handle the waste for generations to come, I am very thankful, that they also forget to think of peak uranium [3], which in my mind as a layman might solve the problem.

[0]: https://www.youtube.com/watch?v=1Y1ya-yF35g

[1]: http://en.wikipedia.org/wiki/Nuclear_reactor_accidents_in_th...

[2]: http://www.dw.de/what-to-do-with-nuclear-waste/a-16755844

[3]: http://en.wikipedia.org/wiki/Peak_uranium#Peak_uranium_for_i...
Also, a great video explaining the working of a differential:

https://youtu.be/K4JhruinbWc?t=110
I love a good rant as much as the next guy, but unfortunately, rants are rarely actionable.

> Maven, ivy and sbt are the go-to tools for having your system download unsigned binary data from the internet and run it on your computer.

The root of the problem is that out of the total number of libraries available in language X, only a small subset is packaged in Debian/RHEL. This may be more egregious with large, Java enterprisy software, but you could easily end up with the same problem in Ruby or Python.

You cannot reasonably expect developers to package and maintain all their dependencies properly. The least worse solution would be to:

- still use maven to manage dependencies

- create a Debian/RHEL package incorporating the dependencies (effectively vendoring them in the package)

Unfortunately, it is not that simple, because you need to make sure that your vendored-in-the-package dependencies are somewhere where they will not conflict with another package with the same idea and the same dependencies (or better, the same idea and a different version of the same dependencies). Which means you need to keep them out of /usr/share/java and make sure the classpath points at the right location.

However, it seems that developer tend to avoid this kind of rigmarole and instead go for the "install dependencies as a local user" for certain classes of application (eg, webapps) because packaging is not fun.
San Francisco Opposes TPP Fast Track in New Resolution
How do you argue "the earth isn't the center of the universe", when the current day technocracy, says that's not true?

Merit, is absolutely important. But freedom, is equally and more so.

Generally, people have a tendency to be biased towards themselves, and their kin.
I agree that security should have been in place before they went 1.0. However, if you look at the work on the version of the registry (docker/distribution on github), they are taking things more seriously and trying to get the basics right.

I find your last point a bit strange. We all know the Docker development experience is a lot better than raw lxc. I'm saying you can (and probably should) be more careful about provenance than the Docker Hub is. Note that there are alternatives to the Hub with better provenance stories e.g: https://access.redhat.com/search/#/container-images (from https://securityblog.redhat.com/2014/12/18/before-you-initia...) This might make things a bit more awkward than it was before, but it's still not the same as raw LXC.

I feel your anger and I think it's understandable, but that doesn't mean things won't get better.
Piq – online pixel art drawing app
wsedfrg
Intel's Diane Bryant got where she is by learning to 'swear like a sailor'
> There's no wisdom or security to be gained from the act of running "make", much less "make install".

You were not doing sysadmin right. DESTDIR and checkinstall are two vital tools that are learned from the mistakes of make/make install.
A New Closed-Source FIle Format Threatens the Open-Source Mapping Community
I doubt it. I visited an operational naval submarine simulator recently. It was basically the electronic guts of the actual submarine, hooked up to sensor simulators and wired into a replica of the bridge (or whatever they call it on a sub). If they wanted to replicate a ship, they could. there must be a reason they prefer to simulate it in the real world on a smaller scale.
I used the angularstrap one, it's pretty good!
Coursebirdie Is Hiring a Head of Communications in New Delhi, India
The Battery-Powered, 3D-Printed Rocket Engine Designed for Weekly Trips to Space
Well, that's why English is the common language here.
Coursebirdie Is Hiring Software Engineers in New Delhi, India
At my work, even in production we still have to use Joda Time to support proper datetime stamps. Momentjs is pretty much the same for JS at this point. I think my datepicker works pretty well, I just added a demo if you visit the github page at http://mobinni.github.io/material-date-picker/ you can test it.
Maybe you can send a copy of your BRMS to your competitors while you are it.
The Sharing Economy Isn’t About Trust, It’s About Desperation (2014)
You could do a follow up, and see what does stanford do differently to teaching, that creates billion dollar startup founders.
AT&T Adds to the Pile of Lawsuits Against the FCC's Net Neutrality Rules
It comes down to trusting two key things. Trusting your initial distribution download (which contains the package signing keys), and trusting the toolchain (in a Reflections on Trusting Trust way).

But the deeper you go, the harder it is for malicious code to reside there. In theory it's possible, but in practice I'd like someone to show me some code somebody could have written into the toolchain a decade ago, without hindsight, which could still exist today.

Whichever way, it's clearly far tougher for a malicious actor to compromise a system by injecting something into a distribution ecosystem than it is to inject a signed-by-unknown-reputation binary-only package into the Maven ecosystem.
I have thought about it, but I just haven't had the time to implement it, I'll put it on the features list.
TSA Agents Outwitted by Cory Doctorow's Unlocked, 'TSA-Safe' Suitcase
then you are doing containers wrong...

The old-school sysadmins I know scoff at Docker's idea of 'containers'. Linux containers were already a thing, and don't need an entire copy of an OS ported around with them. To them, containers are a way of enveloping a process to limit it, not a way of distributing packaged software. They may or may not be doing 'docker' right, but they certainly know what 'linux containers' are.
Right now it works on 1.2.28 and up. Thanks! Much appreciated.
All In The Mind (BBC R4 programme about mental health) had an episode about screen time, especially for teenagers.

One of the researchers being interviewed pointed outthat violence by teenagers has been dropping since aboutthe mid 1990s, while games have been getting more violent and graphic. He said that in his research the way you make people violent is to make a game frustratig, not graphic or violent.

http://www.bbc.co.uk/programmes/b05r3wgr
those blue marble 2012 textures are still awesome.

webgl thing, okay for a mist shrouded sphere. technically worth approximately nothing though... :)
Not directly, and neither does the film, but the entire 'Zone' trope was popularised in Roadside Picnic almost 15 years before the Chernobyl disaster.
Dates are far more complex to manage than most people think. Even though a datepicker is something basic needed on most websites, it seems it needs a lot of effort to create a good one which works everywhere.
Mobilegeddon Is Here, but Is Your Mobile Site Fast Enough?
is this actually any better than the existing compiler warnings?

sometimes a function is meant to be unused so it can be exported too...
Technically you are right, but I find that as a developer when management decides on a certain path of technology you have to work around it's flaws and try to make something that has the look and feel of something made with quality, even if the code will turn out ugly 99% of the time
Grasp News Quickly My Algorithm Summarizes News for NyTimes,HuffPost,TC,TNW
"This"? This story does not at all involve someone who applied for a job and tried to change it from within. It is about a guy who was external to the group, hassled them with FoI requests enough to make news and be noticed up higher, and then they offered him a job.
15 Sorting Algorithms in 6 Minutes [Visualisation]
Indeed, I did my best to keep the dependencies minimal in this one. Although it's angular reliant it only has one dependency to momentJS
> Using it is usually as simple as "configure;make;make install".

"Usually" indeed. Because if it breaks, you do need to know the implementation details to figure out what's wrong.
As the person whose gender was in question, I appreciate the doubt. I don't think you had any reason to believe that I was male, and male should not be the default gender.
Hi,
I have created a news summarization algorithm which generates insightful summary. I've put that on top of a news aggregation site, so you can read summary for all articles from renown sources at one place.
I call it the newsbrewer http://newsbrewer.com, Its a MVP.
Feedbacks and suggestions are welcomed.
Thanks
It's actually shame that we're already in 2015 and html date inputs are not standardized. http://caniuse.com/#feat=input-datetime
I think Meteor is great, except for that one thing. I won't be touching it again until there if full support for one of the SQL technologies.
"in anger" means used in a real-life situation, not just playing around.
http://mobinni.github.io/material-date-picker/example added!