skysight-inc/HackerNews huggingface dataset:
What you have just described is not "pushing back against oppression", it's "fighting like a dog when your back is to the wall". Laws aren't changing, SWAT teams and tanks are still proliferating amongst the police, and

It's a pity that your national dialogue around defence from oppression sits around "firearms" rather than "behaving ethically". So what if Waco and Ruby Ridge and Brady Ranch all happened - the US still has the highest number of prisoners per capita (by a factor of five over other western democracies - a rate that really took off around the time of Waco);police are still militarising and buying tanks, throwing in SWAT teams; making bigger and more encompassing three-letter-agencies. The edifice barely even stumbled; business as usual. If anything, the love of firearms and solving problems by force is encouraging the militarisation of police and heavy-handedness with the outcasts of society.
You do know that José Valim is both the developer of Elixir and a Rails core guy, right?
Why do pub TVs have a pint glass in the corner?
AdBlock Plus defeats German publishers in court
Sony Hackers Used Phishing Emails to Breach Company Networks
In a horrendously framgented mobile internet, one of the few blessings we do have is that the vast majority of mobile web browsers are WebKit variants so this kind of makes a lot of sense if, say, you're only targeting iOS and Android default browsers.

I'm curious if it will take jQuery plugins though. Will try later.
The problem is that you normally cannot find a path to the developers through the web of trust, of course, but that's not Maven's fault.

It is Maven's vault. Debian could have taken the same approach, but instead they have decided to vet prospective developers for a few years, and use one signing key for package indexes.

As a result, in Debian:

- It is feasible to actually check packages, because you don't need a large WoT.

- You know that the maintainer of a package was a least vetted for some time before they could put anything in the archive.

With Maven:

- It's infeasible to check the signatures, since nearly no one has a complete enough WoT.

- Anyone can submit a library, no vetting necessary.

- Maven does not check signatures by default.

So, basically the only thing you can do in Maven is hand-pick a small set of libraries. Verify them in some way and stick to specific versions, putting their checksums in your POM. Unfortunately, as the article already touches upon, too many Java libraries pull in half of the internet, so it may not be very practical.
Its quite generous with the board allotment, if it was me i would bump them all down a level and add an enterprise level.

e.g p=1, F=3, S=10, SB=30, E=150
I use this for my creditcard statements, works pretty well.
There are other needs for things like this - I'd tried to build a system to get a dashboard view of multiple issue trackers, because as a consultant, I'm often having to deal with multiple client environments, and switching between multiple issue trackers is a pain. It was harder than I expected, and focusing just on value in Trello is a neat idea.
What happens when a large percentage of the cued alerts result in nothing found via search?
You don't need to go as far as websocket to leave the stateless world: Server-Sent Events and all its cousings (Comet, chunked transfer encoding, even long polling ...) all need to keep a connection open for an unknown amount of time and then send data back to the client. Is Rails discouraged for such use cases ?
Hello, friend. In English, we don't use apostrophes before the final S in plural nouns, or before the final S in verbs. "Dogs" and "sets" are correct. The apostrophe represents either ownership or omitted letters, neither of which are the case here.
iOS and default Android. If you want to ignore Firefox and Opera then that’s your choice I guess.
I know people who move from Ruby/Rails to Golang. No people I know move from Ruby/Rails to Clojure and Elixir
Google’s Search Update Will Remake the Web in Its Own Image
The websocket support in Phoenix is amazing. And it's not a huge jump to at least get an app up and running if you are a Ruby developer. Most of the really hard things from elixir/erlang have been tucked away nice and neat.
Is OpenOffice Dying?
I did it for Newsweek a long time ago, purely as a real easter egg. (http://nymag.com/daily/intelligencer/2010/06/newsweekcom_zom...)

Although I put it in as an actual easter egg, I learned a couple lessons along the way about making it work:

1. Respect the brand. In my case, I wrote all the stories in the voice of Newsweek. I maintained the site styles and even used their tagging system. This works a lot better than just spraypainting glitter unicorns all over your homepage. It's very easy just to put a velociraptor or glitter unicorns on the homepage; the truly good easter eggs work with the content already on the page (see also: Google "do a barrel roll")

2. Disable ads. Gotta respect your advertisers, and they may not want to be associated with farcical zombie content. This also saved me from getting fired.

3. Don't promote or endorse it. In our case, it was on the site for a couple weeks before one of our writers noticed and tweeted it. The egg picked up steam like crazy, probably because of point #1 and due to being good satire. I mean, Newsweek seriously reporting on the zombie apocalypse? Gold Jerry! Of course, such a thing only works if (a. someone feels like they discovered it and (b. it seems like it could get taken down at any moment. We actually saw more traffic once our killjoy PR rep announced it would be taken down soon.

4. Provide multiple hooks. Sure, you can go to the site and punch in the konami code. Not everyone knew that. Tons of people thought you had to enter "up up down down left right left right b a" into our search box. So many that for the 2 days after it went viral, our top 500 search terms were variations on the code. If you go viral, be prepared for the people who have heard about it second or third hand.

5. Be prepared for the traffic. We went from 40k homepage visits to 400k. Lucky for us we had multiple amazon instances and solid caching. Newsweek as a company was used to the occasional traffic slam. If you succeed in going viral, be prepared for a very sudden spike in traffic.

6. Convert! We sucked at this one, obviously because we weren't planning for it. You've got all this traffic at your site, now what? That's up to you...

All in all, I wouldn't expect forcing an easter egg to work. Newsweek succeeded for me because I satirized the brand in a friendly way without hurting anyone or breaking anything. We got lucky and were able to handle the load. Once we had critical momentum our PR rep created an artificial scarcity by announcing it would be taken down.

In the end, it also didn't really work. High bounce rate, not many conversions, and the company had so many problems beyond that...
EP study: “European Union should finance key open source tools”
I've got > 30 boards, but most aren't active any more - I don't think I have more than 10 that are really being used at any one time.
How strongly are Corrello accounts tied to Trello organisations?

e.g. I'm a software developer working for Startup X, but I also have some personal Trello boards to keep track of family activities etc.

If Startup X signs up for Trello, can I create a dashboard that mixes my work and personal boards?
JQuery themselves have two versions, one with less browser support which is apparently smaller/faster. So it's weird to say that it's not-JQuery-like.

Though JQuery still recommends the bigger library for most users (unless you're embedding in a mobile app or stuff like that).
Django has basically the same architecture as Rails, so it's really in the same boat from that point of view.
> LOL at the idea that every Rails programmer will be switching to Clojure or Elixir!

I meant those as examples based on what I see around me. That's exactly my agony, I don't know what is next and, if I did, I would be learning it already. At this point, I just feel it is not Rails.

> Re. EventMachine: As I understood DHH's speech, the idea is that ActionCable abstracts all the messiness around EventMachine, Websockets, Rack and threads

If you are using Event Machine you can't abstract away from it. You need to do all I/O using Event Machine aware mechanisms. You can get rid of callbacks by using fibers but you are still required to use an API specific to Event Machine. For example, you can't use File.read to read a file as that will block your event loop.
The final part of your post is fundamentally flawed. You are saying that if one part of your trust chain is limited to a certain security level, then it makes no sense to make any part stronger. Following this practice would make security a lot worse. One example result of your reasoning is "As long as there are 1024-bit root CA's I don't encrypt anything because I could be MITM anyway".
don't expect all people to have same mindset as you, and don't even try that with your/their priorities.

people live where they live, it can be great/miserable place on the paper, but real daily life can be vastly different
> Unfortunately, we don’t have better options in Ruby for working with websockets.

We do! Celluloid (the actor model) is vastly superior to EventMachine in my opinion. It fits much better to Ruby's OOP style and I suspect would integrate into Rails very cleanly. I am positive that bringing any EventMachine technology into the Rails stack would be a mistake.

I am saying that with a bit of a bias as I have written my own celluloid-websocket[0] gem that comes with a Rack adapter. But I wrote it because I put a project using EventMachine websockets into production and was not happy with it. Now in a new project I can just hook up the celluloid-websockets Rack app and run it using `passenger start` or any of the Rack application servers.

Even though so many people seem to flock to Node.JS for these kinds of servers, the fact that as a language Ruby is superior to Javascript remains, even if Javascript VMs are a hundred times as fast. As long as Node.JS is run on standards compliant VM's things like promises are just lipstick on the callback hell pig. You can write clean and understandable Ruby to solve any problem, including Websocket servers. We as the Ruby community were just late to the asynchronous I/O party. Now Celluloid is production ready, there's really no reason (except for performance of course) for a Ruby developer to write Javascript on the server side.

(sorry for my extreme opinions, if you want a more nuanced deliberation on a point just ask ;))

0] https://rubygems.org/gems/celluloid-websocket
Googlers’ Epic Hack Exploits How Memory Leaks Electricity
I don't know, I got started with Mongo because ... it was so easy to start with, but come deployment time got bitten by a LOT of issues (which essentially negated any advantage in using Mongo).

As a result of this experience I almost exclusively use PostgreSQL, and I've never EVER been burned by taking this approach.

Sometimes I do use another DB but there has to be a seriously good reason for it.
Not marketing, I've seen people being allowed to get on trains while the controllers where whistling for the train's departure.
This is the head of the BASIC listing:

0 REM --ATOM 20
1 REM --VERSION: 7/1/77
3 REM --AUTHOR: RAY BRANDER
4 REM -- TWO HARBORS
5 REM --CDC CYBER 70/73-26 BASIC 3.1

The CDC Cyber 70 was an early 1970s mainframe:

http://en.wikipedia.org/wiki/CDC_Cyber#Cyber_70_and_170_seri...

Note that it was developed in Two Harbors, Minnesota.
And make enterprise like $499 a month, it makes the others look cheap :-)
Good idea. I'll likely up the prices or drop the board allotments. I wanted to launch with something a bit more generous as it seems easier to put prices up. Then I can see how people are using it to get a feel for where the bands should be.

It did seem that most people using 3 or less boards didn't have much need for a dashboard which is why I pegged the free one to that. Something like Corrello was more of a nice to have to them it seemed.
http://vivian.balakrishnan.sg/2015/03/13/Open-Source/ Interesting..
Reasons for lack of demand:

-phase lag: It takes a while for the economy to find uses for increased labour.

-Until the above is fixed: Unbalanced levels of education: The economy requires x amount of elementary graduates per y amount of high school graduates per z amount of university graduates. Mostly unskilled immigrants don't come in these ratios and therefore introduces imbalance, meaning there's a surplus of unskilled workers
We supposed to neuter people?
making a lot of hours. Especially when it comes down to debugging problems created by endusers. Making edits on servers what are in production. Every sysadmin was fooling around in the beginning.
Man, that really make it sound like Atom 20 is based on Oregon, not the other way around.
> The value of debian is not that they package (or repackage) everything into deb files but that they resolve versioning and dependancy conflicts, slip security fixes into old versions of libraries (when newer version break API/ABI), and make it possible to integrate completely disparate software into a system. They also have a great track record at it.

The analog of the aspects of what Debian does that you're talking about here in the HStack world are companies like Cloudera, who, surprise, make their stuff available as debs and PPAs.

Building your own Hadoop from source and complaining that the resulting product is unvetted is sort of like doing a git pull of all the Linux dependencies and building that.
Then of course, if some speck of radioactive material gets lodged in your body the inverse square law works against you.
Containers and VMs are part of the solution to this problem, not a cause. Try managing the same dependencies across N platforms rather than one container!
Sure; but its not actually what WE think that matters. Ask them if they would LIKE to emigrate to America. What do you think? Would they want to stay in their semi-arid dust bowl? Or move to Northeast Iowa and farm with regular rain, fabulous soil and ready markets?
After trying Clojure(and Luminus) several times over the past year I don't think it would be my go to for things that Rails is tackling. On a side note writing Clojure gave me a little anxiety so I'm trying to hold back on it for now.

After working in this stuff for a while I just use the right tool for the right job. Most of the time Rails is that tool and it allows you to just get stuff done. Sometimes Node is the right tool, or Python.

I think the new Turbolinks stuff is pretty interesting(and useful) although it doesn't help me with forms, and that's the thing I'm usually using React or Angular for these days. Angular may get crap but it's actually really good at forms.
Best Mac VPN – How to Setup VPN on Mac
I've often thought about just offering my services as a sys-admin to the multitude of small startups that popup locally. Many, many developers -- almost no sys-admining skills amongst them. Just fire up a server on AWS and away you go.
Twitter makes new rule to stop trolling and abuse
You are confusing the real need to use EM aware mechanisms with a not-real inability to use abstractions over EM itself. Those are two different issues.
"Europe" competing with a small neighborhood on the west coast where the vast majority of the world's tech capital lives?

Sorry I don't see it.

Combined with the gloomy pessimism and fear of failure even in Europe's brightest areas (London and Berlin) and the absolute, spineless pathetic nature of European VC's (no not bitter at all ;) Europe will NEVER compete on any meaningful level with Silicon Valley.

edit: spelling
Maybe using a fetch polyfill is more future looking?

https://github.com/github/fetch
The DOM API remains complete garbage unless you're operating readonly on a single node (then it's merely bad).
> But it isn't all that hard to understand a clean Unix. I have never copied or typed a command that I don't understand.

Well, good for you. I can assure you that it's not the case for almost anyone who approached Linux after the likes of Mandrake were released and/or tried to make it work on anything different from a traditional server.

I'm all for trying to understand what one is doing (and I wholeheartedly agree with TFA's point), but the reality is that very few people in the world really understand all intricacies of one's operating system. This does not excuse poor security practices, but it explains their background.
I'm not sure. I was just echoing the article. We know that Atom 20 was developed on a CDC Cyber mainframe in Two Harbors, Minnesota in 1977. It's an interesting co-incidence, at least. There's certainly more of a story there than is currently common knowledge. We may never know, though.
The Partnership Edge: Make Friends for a Successful Life
British futures trader arrested as primary 2010 “flash crash” suspect
Why would any new material, educational material especially, ever use Python 2?...
Yes, it was very funny and informative. I let out an audible sound when reading some of these one-liners:

> It is possible, however, that the Go team has developed a set of secret signifiers to distinguish these constructions in everyday conversation and not told me about them.

or

> At first I wrote my methods on the values, which seemed like the normal, American thing to do.

Someone posted yesterday about how to pronounce hexadecimal numbers. It's funny because somedoby, somewhere has a lexicon for describing the different overloaded loop types. sidenone: i find overloading cheap or sort of a cheat. I understand it in the content of typed languages, but in something like JavaScript or PHP it fucking sucks.
That's the problem with all these JS libraries and frameworks. They are being written just to be written; only a handful have been vetted in production.
Pieces of it are. It's based on Ledger Web[1] which I run using a normal puma-behind-nginx stack on our home server. On top of that I built a whole budget system and a suite of reports that are specific to our needs.

[1]: https://github.com/peterkeen/ledger-web
You could but others could see those dashboards (although not your data). You'd probably be best off signing up for a personal account as well.

The way it works at the moment is that all dashboards are visible to everyone you invite to your Corrello account. However, they all get their own copy of each dashboard, which uses their Trello credentials to load the data for them. In this way you don't accidentally share data with people who shouldn't see it by creating a dashboard in Corrello. This was a bit more work for me to build and a little more complex to explain perhaps but felt like the correct behaviour.
One resource I always recommend is the FreeBSD handbook, can be found here: https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/
This is a little plugin I wrote to track something I've done manually for years. I blogged about it here: https://blog.statusgator.io/how-often-do-you-deploy/
Can someone tell me what realistic security problems this mode of operation introduces that can't be mitigated/avoided with sensible network and backup configurations?
Instagram Study Q1 2015
Are you really asking why one wouldn't "read PDF and word documents", "parse CSV and json files" or "manipulate images" in bash?
A good, open, microcontroller design with no caches, USB (or something), a TRNG, an onboard voltage/clock regulator, registers/RAM which zeroises on faults/parity/intrusion sensors, a fresh approach to avoiding SPA/DPA attacks, some EEPROM (also with parity & zeroisation traps), and ideally a way for a host to automatically read (/audit) all the software running on it (Harvard arch?) would do the trick. It doesn't have to be fast, but it does have to be safe.

I gave it a try, but it really needs someone with actual ASIC design experience instead, I think! I'd love to see one of the vendors do something like that - as you can see there are plenty of waiting customers, but I'm not holding my breath.

Cryptech are probably the strongest contenders for now?
To use permissions for security, follow the principle of least access. If a user or program doesn't need access to something, don't give it to them. User permissions are the first tier of this, Apparmor and Selinux are the next (and correspondingly complex) next tier.

For example, for a web stack which communicates exclusively over the network stack, run your entire stack as individual non-root user. Nginx can run as the nginx user, django/rails/node as a separate user which has no access to the nginx configs. MySQL/PostgreSQL/Mongo as yet another user, which can't access the previous two.

By default, config files should not be owned by the process reading them, they should be part of the group (if they owned them, they could be re-written by that process).

Logging, you have a few options. Syslog is simple, and re-directable, which can help increase security. Writing to normal log files is perfectly acceptable as well, just be sure to write to a program specific directory and set up a logrotate config.

Also, set up monitoring and notification on everything you possibly can. First, know when something has gone wrong before you're notified by your customers. Then figure out how to know something will go wrong before it actually goes wrong (like running out of disk space - this happens more often than you might imagine).

There are plenty of articles on hardening linux, and sysadmin best practices on the web - I've only outlined a few here. When acting in the sysadmin role, be skeptical, paranoid, and value service uptime above everything. With this attitude, you will be more prone to automate server setup, limit user access, and less inclined to just throwing things out there because they're shiny.

The real fun is when you design and develop a way to safely and securely let your fellow developers just throw code over the fence, because then they can do their job in a way that suits them, without compromising your servers.
The Asshole Factory
Google Inc Lobbying Spend Reaches Record Highs in 1Q
It's a balance between readability meaning 'short, and concise' and readability meaning 'very clear, even if that requires being overly verbose'.

return (data.name !== '' ?: 'New Data')

or Python style:

return (data.name if data.name else 'New Data')

vs:

if (data.name != '') {
return data.name
} else {
return 'New Data'
}

The former being much more concise, so that you can display (and grok, perhaps) a single function in 3 or 4 lines, vs the Go style, which can result in extremely long functions (long because they do a few things, and require error checks before and after each one, and so on, rather than being long for actually doing a lot).

The single line version implies at the beginning that all the line does is return. The longer version requires you to read the whole paragraph to figure out what it does.
I am a trello user but it your service is not much use to me, however I have passed it on to my project manager and my head of IT as I imagine they deal with multiple boards and something like this would be very useful way of tracking them.
How Amazon Swooped in to Own Cloud Services
Show HN: Credstash – A tiny python utility for managing secrets in EC2
He posted somewhere that the free html version is almost complete and will be released in a few days.
There's another lightweight version to do this here: https://github.com/mckamey/konami-js

This includes a minified version resulting in a <1 kb addition to code: https://github.com/FlorianBezagu/Konamiz/blob/master/konamiz...

Also worth considering is konami-js (https://github.com/snaptortoise/konami-js/blob/master/konami...), which treats cases different such as if running from iphone if not wishing to change to the standard code.
What do you expect them to do, download .tar.gz, extra, read every line of code and them make; make install?
Or just make; make install? How is that any different?
Thank you very much. If they've any questions or improvements they'd like to see they can drop me an email: robin @ thedomain linked :)