skysight-inc/HackerNews huggingface dataset:
This is definitely a developing trend... seems to be catching on that most server applications are more or less single programs that just use the OS as an emulation layer so that applications don't need to come with their own low level drivers. Quite overkill if you're just trying to run java, node, ruby, whatever

We're probably not too far off from java-as-the-os, node-as-the-os, etc. Substituting a hypervisor for Linux or whatever other OS you're using as the emulation layer seems to the be the architecture of choice for this type of work right now... I guess because you'd just have to implement a handful of drivers... in addition to other OS bits like scheduling and memory of course, but I suspect those things are fairly straightforward for many applications especially if you can assume that there are no other "processes" running... essentially those just become implementation details of the application that can be swapped in and out like any other library/framework

The term I've seen for this sort of architecture is a "unikernel"

This OSv project looks nice, definitely something to keep on the radar
It's still relevant today, unfortunately, in some industries where upgrading is prohibitively expensive.

E.g., you'd need to buy a new POS system, or paid millions to have custom-made medical software recertified (or re-written) to work on a newer browser, etc..

It's much rarer -- most places have bitten the bullet by now -- but I still see it (and IE7 is certainly still around).
httpie is awesome, but in some environment all you have is curl.
Same process, but instead of using your brain you use google.
Searching for Two Fucking Great Developers
> How illegal is it to set up a Wi-Fi network with an SSL certificate? Are you responsible for the fact that iOS has a bug in the certificate handling?

If you're crashing/DOSing a remote internet-server by exploiting your knowledge of a bug in the server-software, you may technically just be "sending data", but in court it's the intent which makes it hacking, vs just accidentally crashing something.

I would expect this to be treated similarly, but ofcourse legal IT is a jungle of randomness in itself, so I won't make any guaranteed predictions :)
A stolen key is a server-being-hacked problem, not a CA problem. If the server is hacked, game over.

There are browser extensions that detect bogus certificates; there's a good risk of catching them.
Melanie Mitchell – Visual Situation Recognition
Yups. They day I read their massive open source release announcements I knew that MS is from now on not the same company it was.

Mahatma Gandhi supposedly said: "First they ignore you, then they laugh at you, then they fight you, then you win." Which I think is very applicable to MS attitude to open source.

Now they have a new attitude: If you can't beat'm, join'm.
what is so hard about remembering how to use curl?

I was hoping for some JS library that would generate the commands with proper escaping etc.
My family was always a bit mystified with my preoccupation with comic books when I was younger. I always gravitated toward the Marvel characters back then. It's incredibly gratifying to see how popular the movies, based on my childhood heroes (Iron Man, the Avengers), have become. Of course the X Men and Spiderman franchises have done well, it's good to see the other parts do well. I do not have much hope for the Fantastic Four reboot, however.
In the case where the driver (for instance the official libmysql) doesn't expose its network interface (e.g. its sockets can't be used with an external event loop). In that case, it would block on IO operation, and there is no other choice but to push it to another thread.

That said, using a driver in another thread leads to various complexities that can be avoided when running in the same application (javascript/v8) thread/event loop.
Atom improved startup time and panes now resizable
There are a few options for playing with a 16-bit 6502 like the Apple IIGS or the SNES.
It seems like a random collection of tutorials.

Why not simply put the information on the web as blogs, and let users find you based on a google search?
Beijing offers universal suffrage bill after months of protests in Hong Kong
Slightly OT... I just read your no-fee NYC blog post, so funny and true! NYC co-op rentals are the worst. Hope you found something decent.
I think initial impressions of Rust may make it seem a lot more complicated than it is. That's not saying it's simple, but it doesn't have the same kind of dark corners and 'surprising' interactions that has C++ (often due to backward compatibility requirements); most features in Rust are pretty orthogonal and minimal.

Having the compiler on your back about lifetimes/borrowing is definitely unfamiliar, but, fwiw, a programmer usually has to be keeping track of that in C/C++ anyway (if it's complex when the computer checks it, it's complex when a human checks it).
(I work at Capitaine Train who published this data)

It is true. This database has not the pretension to have all the stations in Europe. It has all the stations where we can sell tickets to.
As we connect to more carriers, the database will expand. But it is a long process.
I was waiting for that story to end with “… and then I turned 12 and outgrew this”.

What ever happened to promoting OSS by making it better? Forcing people to play juvenile games seems like a great way to turn everyone off on Linux permanently.
The Three Small Changes That Created 81% More Active Users
I don't know how many people actually behave in this manner. Most of the people I know who don't have a lot of money floating around seem to have some incredible expense aside from pure status symbols; children, drug habits, gambling addictions; or are in low-income jobs.
At least I found a kind of starting point (although I am not sure what the criteria for a debian stable package are to be put in that list): https://packages.debian.org/stable/
THE SUBTLE ART OF Not GIVING a FUCK
Thank you Mr. McKenzie for taking out some of your time to reply to my post, it is much appreciated, as are all your helpful posts on your blog.

I should have provided a bit more context, I'm from India and I was specifically looking to earn in dollars. $8000/year is akin to coasting here, I don't think I'd meet any local clients who'd pay anything near $500 for a gig. Would it be possible for me to get American clients just through email? What do you think about passive income, say, from selling WordPress themes on themeforest, or something similar?

I mentioned TopCoder because I wanted to get better with algorithms/ds, considering the present reality of code-on-whiteboard sort of interviews for a stable job in the major software companies.

Hopefully my Rails skill is sufficient :-)

(Sorry for any grammatical mistakes, English is not my primary language.)
I think this type of attack will be useless if you use DNSCrypt + VPN (encrypted OpenVPN/SSH traffic) not to mention TOR. Also, there is a new type of VPN @ https://www.goldenfrog.com/vyprvpn/chameleon
While the Snowden leaks were being released, I made a habit of doing a few very general searches to get a sampling of how the events were being reported. I really wish I had taken it a step further and saved regular tables of those observations, because I suspect it could have been made into a very interesting paper.

Most of the time the lazy reprints of an AP/Reuters story.would dominate, as expected. Once and a while - usually after a really import release such as COTRAVELER[1] - the story would happen... and then suddenly everybody is talking about Prism and explaining how it is "just metadata". Any momentum the new story had ended was redirected into topics that were already known. There would be small-time media doing proper reporting, of course, but it was clear who the "big media" worked for.

The media following the orders of those that sign their paychecks isn't really news, but it was very interesting to watch it happen in realtime.

[1] I still believe that COTRAVELER is one of the most important thing we have learned from Snowden, as it builds relationship maps and it doesn't rely on the target performing some specific action such as an HTTP requests that QUANTUM can race. Bonus: it only relies on "metadata".
I'm not working at CapitaineTrain - but user @tristramg who replied below apparently does. You should get both in touch!
Yeah, instability is definitely a good reason for people to not use Rust, although that's quickly being resolved, both in theory, with the stable 1.0 release in just over 3 weeks, and in practice, with the recent 1.0-beta release.
Team Productivity with GTD, Holacracy and Asana
Good question. And my answer comes with the caveat that I'm not a computer scientist, and could in fact have been wrong. I've made one or two bad bets. I also bet that programming wouldn't be much of a career.

With that said, it seemed in C that you were closer to the hardware implementation of what pointers do (for instance you could do arithmetic on pointers), making it easier to reference an int with something that was supposed to be a float, or something like that, and to generally make those kinds of memory violation and array bounds errors. Nothing like that was in the original conception of Pascal, because Pascal was supposed to be hardware independent.

I felt like letting your data structures be your program was a natural aspect of Pascal, but something you had to discipline yourself to do in C. Also, the parameter passing syntax for Pascal seemed more readable than all of those *'s and &'s. It could all have boiled down to me understanding Pascal syntax better than C syntax.

This was all based on the C of the early 80s. When I mentioned some of these things to a real C programmer later on, he said: There are compiler warnings for those things nowadays. My favorite language du jour is Python, but I use C when messing around with microcontrollers, so I've finally gotten used to it.
Except out and ref parameters are exactly zero fun to use. Wheras returning two values is a lot of fun, esp. with pattern matching.
I'd be glad if you drop me a message so that we could establish a contact. xing.to/va or valikov-at-gmx.net (Disclaimer: working for the Deutsche Bahn.)
See https://news.ycombinator.com/item?id=9426153 - apparently trying to get in touch with CapitaineTrain. Hope this helps.
I doubt the accuracy of that table. It's been a number of years since I regularly took CityRail but I remember the price of trains in Sydney to go up pretty drastically the further into the suburbs you got. Like, $5/ride and such. Though maybe that was for fares all the way out to Wollongong.

I've always found the flat fee nature of the NY subway to be wonderfully egalitarian, since the high fees tend to be a regressive tax on those who can't afford to live close to the city.
>There are considerably more providers than actual carriers in Germany

The same is true in the US, they are called MVNO's
http://en.wikipedia.org/wiki/List_of_United_States_mobile_vi...

>What you say about subsidized phones is patently false

You are most likely talking about carriers allowing people to finance their phones in europe. Where you can pay an additional 20 euros a month to get the new iphone or whatever.

This is not at all what i'm talking about.

In the US, when you open a cell phone contract, you get a new phone at a discounted price. You sign a contract and you get to choose from the carriers selection of phones, older phones being completely free, newest phones costing 200 dollars.
The rest of the cost of the phone is hidden inside of the cost of the plan itself. There is no line item for how much you are paying for the phone each month, it is simply part of the pricing of the service itself. When your phone has been completely paid off, you will never know because your plans price will not change.

In europe, you finance phones, when they are paid off you stop paying for the phone and you then own the phone. your bill goes down. This is not at all the same behavior as the subsidized phone system in the US.

>German providers offer unlimited low-speed data with a varying amount of high-speed data

This is what im talking about, this does not exist in the US. There is no variation of speeds, you either have data or you dont.

There is some subversion by carriers using 'throttling' where they slow certain lines down to a crawl when the carrier decides they've used too much data for the month, but that is by no means a part of how plans are priced.

>So, yeah, your information seems to be a bit out of date

admittedly so, i haven't been in europe for more than a week since 2013 - and have never spent much time in germany
This is a whole lot of FUD coming from this company. Obviously it's a marketing ploy for attention. They should have waited to go public after Apple made a fix. By pre announcing the existence of the flaw they've helped miscreants point their fuzzers at a target, potentially putting users at risk.
Thanks, moved the comment there. :)
I think the argument isn't that Python code out performs C code, it's that code written by mediocre Python programmers often outperforms code written by mediocre C programmers. C code is fast enough the mediocre programmers get used to letting the language bail them out. Python programmers know that their language is slow and that they have to work around it.

I've encountered this several times in my own career. A co-worker who writes in C will be implementing a process in parallel with my Python implementation. A week later, my O(N) Python code is outperforming my colleagues O(N^3) C code, since I chose a more complex algorithm which is trickier to get right. The C programmer then re-implements my method in C, which would completely trounce my own code, except I've spent that time leaning on BLAS and LAPACK, speeding up my operations again. The C programmer then starts using fast libraries instead of her own code, again beating my old source, only to find that I've now pushed a good chunk of the processing onto the GPU.

Eventually, I will run out of tricks. The final draft of the C code will trounce the final draft of my Python code. However, during most of the creation process, my Python usually out performs their C. Also, a truly talented C programmer would write my colleague's final draft as her first draft, negating every advantage that I had in the process. However, that's not a situation that I'm likely to run into, because places hiring truly talented programmers aren't likely to be hiring me.
Yes, it does. You just choose the SSID and tap 'forget this network'. You can also disable the 'automatically connect' functionality.

I 'forgot' the attwifi SSID long ago, and I have never had my phone try to auto-connect to one, even though they are everywhere.

The article ignores this because it weakens the headline.
It is actually only 4, there fifth, magic cube by Xiaomi is probably only a rumor or a study by the CEO of Xiaomi
I thought that's basically what libuv does: it uses AIO on platforms that support it, falling back to thread pool on platforms that don't.

Edit: apparently I was wrong.
Please do try to reproduce it - the company that is responsible for this "discovery" also happens to be selling a product that is supposed to prevent this attack, and the tone of their PR has got my BS-detectors ringing.

An example of the sort of thing that gives me doubts. They refer to another supposed demonstrated attack called "Wifigate", which no-one has been talking about, except for themselves. And when you read the details, they claim that iPhones come preloaded with a bunch of WiFi SSIDS that the phone will automatically connect to. mostly telecommunications companies. Up until recently I used to work for one of those listed companies, and I have owned iPhones continuously since the iPhone 3G. I can tell you categorically that iPhones do not automatically connect to SFR wifi hotspots like this company claims. This fact destroys an important part of their claim for this current "attack", that you can be affected even if you've never connected to a Wifi hotspot.

So that's one guaranteed example of exaggeration right there, which seeing as it's the only piece of information in the article that I'm capable of verifying myself, makes me very distrustful of the entire article.
I agree about critical thinking, but how do you test it?

I've seen signs of poor logic crop up just when going into detail about past experience; but otherwise it can be hard to see -- particularly when the candidate has been working on projects where someone else was providing technical leadership.

I do ask candidates to go through a thought exercise -- basically a software dev related puzzle requiring no special knowledge (except a bit of basic crypto). Something like "here are the 5 constraints; walk through how these 3 scenarios would work" -- no code involved, but requiring the ability to convert constraints and goals into step-by-step instructions.

This has been pretty useful (there's a surprisingly huge range in the types of responses I get) but wouldn't reveal much about how good someone's choices would be deciding how to implement new features from scratch, for example.
The Basics of Conversion Rate Optimization in Three Simple Steps
Cool, been looking for one. thanks!
I've also considered working from internet cafes, but if a coworking space is cheaper, it would make sense to go to one.
EU leaders to declare: 'We cannot take more migrants'
> Epicurus taught that living a simple life with friends, food, exercise and art would make you truly happy

He must have never heard of eating disorders and competition between artists.

Epictetus taught something that is similar to some kinds of buddhism. He was a Greek Stoic philosopher who was born a slave. Suffering is an inevitable part of life, and the best one can do is choose to be free from it in their mind. You either give the suffering power over you, or you separate yourself from it.

People can suffer over anything, but it is callous to assume that they can flip it off easily through the strength of mind, and it is naive to assume everyone has the same root causes of suffering. It is also naive to assume the process of alleviating suffering is the same for everyone in a general sense.

You can't get to your philosophy through the words of others. That is the most I have learned through every philosopher - that they did not choose to think to relieve the pain of others, but to first relieve it for themselves. How can you expect to teach something if you don't know that it works? And that is the problem I have with philosophy. You have to keep believing in it to make it work. This leads to study about the nature and existence of truth.
Aren't you in effect arguing against the law of supply and demand? Stipulating that you can reliably predict the future cash flows of a company and holding them constant, the number of shares available to buy or on offer should determine the price. Ergo, the impact on the market of a giant block of shares should be large.
Thank you for your advice. Do you think this would work if I contacted small American firms through Email? I'm from India, and $500 is a lot of money here, I doubt I'd find many companies willing to spend that much.
I don't follow. I know many salarypeople who have 1.5h+ commutes, because as you say central Tokyo is expensive. But if you're self-employed or doing a startup, why would you travel that far to a co-working space instead of just working from home?
The upcoming Warcraft[0] movie has potential to do just that.

[0] - http://www.imdb.com/title/tt0803096/
If Moore's Law is over, the Gates' Law (http://catb.org/jargon/html/G/Gatess-Law.html) is sure to follow... unikernels seem like one solution to cut out a lot of cruft and get more out of the same hardware (probably more securely as well)

My favorite development in this area that I've seen so far is Rump Kernels ... most others seem to be use focusing on "cloud" and hypervisors etc... but rump kernels can be used on real hardware so you can be true unikernels.

I wouldn't be surprised if in the future even desktops, tablets, etc are basically just of a bunch of unikernels running on top of virtualization hardware
It's very timecube.
Some ideas for a general strategy:
* Check TLS/SSL https://www.ssllabs.com/ssltest/
* Use Https, HSTS
* Have a security response page if someone found a problem
* What to do if your application was compromised, be prepared for the worst
* Check and update your software regularly
* Review changes in your software regularly if it impacts your overall security strategy
* Keep a security checklist in your codebase
* Do your own code audits, just read it again after a few days and ask the right questions
* Remove all credentials from your codebase
* Read about the "new" security headers here: https://github.com/twitter/secureheaders
* Know what kind of/how many requests your API/web app gets, maybe throttle or block some
I beg to differ but slightly : humanity will probably still exist in 100 years but probably less numerous and less technological than now.

At one point natural resources depletion and the effect of climate change will reduce human population to a fraction of what it is now. The remaining ones will have to make do with less technology and more manual work.

I'd encourage every HN reader to read the Archdruid Report, eye opening.
I actually ran into an issue recently with CPU intensive tasks blocking my web server. It turns out that "querystring" (used to parse request bodies in web applications) is an asynchronous, blocking request. You'd never notice much slowness, until your request bodies are massive (think 50 nested JSON objects and some base64 image data for good measure) and you have multiple per second. Now, every request is blocked until the previous one is processed. I'm still trying to figure out a solution, after looking into worker threads, etc.
Hi enigami, this sounds very interesting. My email is vinaybhat001_at_gmail_dot_com.
> They don't tend to work out as liquidity is much lower on them and bid/ask spreads are wider.

If you're a big institutional investor though, and you know that buying a bunch of shares will move the market for sure, well, it might be worth suffering a wider spread. As long as that spread looks small relative to how much you think you'll move the market, it's not a bad deal. And if you already have a subscription to the pool you might as well try it before you get the algorithms involved to buy on the open market.
Adding national identifiers could be useful. "SMG" is St Margarets in London, "SMT" is St Margarets in Hertfordshire, and commuters using either probably know the code — it's exposed on official websites.

Here are the national three-letter codes for stations in Great Britain, available in CSV format: http://www.nationalrail.co.uk/stations_destinations/48541.as...
LinkedIn to introduce fact checking system to verify achievements in your bio
You are so cool and brave.
Please.

It makes perfect sense that the Chinese scientists are working with viable human embryos. The Chinese aren't infected with "Christian ethics". And doing that work gets them a leg up against the rest of the countries that can't or won't.

The part about "we only use discards" is absolute bullshit.
Nice idea, but this tool doesn't escape URLs properly. The biggest problem are "&" characters, but also "?" characters make trouble in some shells (e.g. zsh).
Sitepoint has a pretty active forum, as does CSSTricks. There see a few subreddits that can be decent at times, I think /r/frontend and /r/javascript from memory.

The other thing to look into is local meetups that you can go to, while it won't be a forum, you may find a community that can help you grow as you learn.
Yeah, I am in the same boat. I just initiated a chargeback through my credit card. Sucks.
Yes, I can heartily recommend Crashlytics/Fabric.io. I used it for my just-released music game app (http://www.reddit.com/r/FlamingNotes) on iOS and Android. Slick integration.