skysight-inc/HackerNews huggingface dataset:
Ask any friend what the secret to making money in air freight is and see if that's true. Even people who ship cargo by air every day have no idea the game being played on the other side of the transaction.
Since I know the founders of the first two: those are hardware companies. A non-trivial difference in everything said here is that when you need to put down an order to build and manufacture X000 units, other people in the supply chain aren't okay with "We'll just pay you per item as you make them on demand". To a degree that's what the "unless you're the next SpaceX" from the post seems to be trying to encode: unless you're in a structurally high-cost business, you better not need tons of capital.
Doing #4 and #14 at the same time is impossible. #28 probably isn't too happy in there with #4 either.
Potential Salesforce Buyers? My Money Is on Microsoft
GoPro’s virtual reality bet a win on Wall Street
On My Watch
Or they just didn't really understand the game and loved the swallowing animation.
NASA’s Messenger probe is giving up on life this afternoon
In my experience/opinion: get over a certain number of lines of code and the type system starts getting in the way rather than getting out of the way. This number is not obvious and is very easy to pass without realizing it until it's too late.
You can verify authenticity through signatures -- no need to encrypt the full body for that. The fact that there's no (widespread) general-purpose solution to sign arbitrary traffic is IMO problematic, people apparently are fine with just paying the cost of encryption.
Minor correction: what I said about a similar purpose is true for Truffle. Graal is a general-purpose, optionally-user-controlled JIT, that can (and probably will) be used to JIT Java bytecode in addition to Truffle AST nodes. So it's basically just Hot Spot's next-gen optimizing JIT compiler.
I remember Jeff Atwood talking about this in a Stackoverflow podcast. With Postgres or other free software, you not only don't have to lay out cash, you also don't have to spend time trying to understand arcane licensing rules. (And worrying that you might have violated one of them.) Whether the time (and time is money) saved balances out the cost of the software when the commercial product offers better functionality will vary with the situation.

For what it's worth, Atwood chose Postgres for his Discourse product. The FAQ says the product is "Uncompromisingly open source." And "There is only one version of Discourse--the awesome version. There's no super secret special paid commercial version with better or more complete features."
Nim Programming Language 0.11.0 released
> I personally use facebook to talk to my friends. Maybe you should try it out to communicate wit yours?

so in your logic, because somebody don't use facebook, he/she does not communicate with his/her friends?

wow
I'm pretty sure the costs were not a running tally, i.e. they need to be added up for a total of over 1140 EUR.
Laminated object manufacturing [1]

Results look amazing [2][3]

Would probably be quite heavy.

[1] https://en.wikipedia.org/wiki/Laminated_object_manufacturing

[2] http://www.gizmag.com/mcor-iris-paper-3d-printer/32903/pictu...

[3] http://www.gizmag.com/mcor-iris-paper-3d-printer/32903/pictu...
> Hello Mr NSA.

> I'm sorry I don't hate freedom like you.

...and you just destroyed your own argument with the ad hominems.
> But not everybody is entitled to privacy in all situations.

Most people are entitled to privacy on the machines that they own. Having to log or monitor internet traffic is the special case, and should not be the default.

> That privacy and safety stand in a big conflict was recently quite dramatically demonstrated when a pilot hid his psychological problems from his employer and intentionally caused a plane to crash.

You claim a background in psychology, you should be able to recognise this as fear mongering.

> The trust there is acquired by giving someone at a specific (private!) institution money and a copy of a passport. This system does not scale, and the number of SSL hosts is exploding.

A technological limitation in the current state of internet crypto is not a reason to abandon the concept. Everyone agrees that the concept of a CA isn't great. Someone will solve the problem eventually.

> SSL is bloody expensive compared to not doing it.

SSL is largely implemented in hardware these days. This is no longer true.

> SSL scales really badly intentionally.

I find it hard to accept that someone sat down and designed a system to not scale intentionally. Especially hard to believe when you look at the scale of SSL deployment today.

> A big cost of encryption however is lawful interception. This is not the place to discuss if governments should have the ability to intercept your internet traffic or not but in many cases they have that right.

A big cost of any societal construct is law enforcement. You can make the same argument about cars, or wigs, or plastic surgery. Most of the world strives to not limit personal freedoms out of fear.

> Unfortunately because it means that if a website hosts partially illegal shared content, then the whole website is down and not just the subsets of it which are legally problematic.

It is up to the website owners to manage this risk, with or without encryption.

> A shocking amount of Windows users run software that MITMs SSL connections to scan for viruses, malware etc. Even Ad providers (Superfish cough) started to destroy SSL traffic because it became so widespread that it was necessary. I'm firmly of the opinion that none of that would have happened if SSL traffic was less common.

MITM is the default with unsecured traffic. Again, TLS isn't perfect, but why give up?

> To give you an example of how ridiculous our love for SSL has become: PyPI. It's the Python package service. As of recently the Python package installer downloads every package via SSL. Why? There is no technical reason for this unless you want to hide from someone that you are downloading a specific Python package which seems pointless.

NO!!!!! Package managers are a huge target! What better way to sneak malicious code into someone work than through package management traffic? TLS mitigates this! This is a situation in which a trusted connection is a must.
If you open a file with a UTF8 BOM, then the BOM will be preserved. New files don't have the UTF8 BOM.
> Am I the only one who worries about everything and anything ending up in the DSM, to then be controlled by medication? Unless what's going in your head actively interferes with your day-to-day existence, why does it matter what you do?

But isn't that the point of DSM, to diagnose those with conditions that really interferes with their day-to-day existence? Medication is only one way to cure/control these disorders.
Lambdas vs. Closures
> I would assume that the MITM proxy running on localhost also checks CAs, so what's the problem? (besides breaking cert pinning)

Superfish did not check CAs.

> OF COURSE not. They would just MITM it without crypto stuff. So… it would just be worse.

I think the author is arguing here that the MITM attack wouldn't bother with encrypted traffic (which is obviously a very weak argument).
True in general, although for tourism, you don't really want any horizontal velocity, because you want to land as close as possible to the take-off point.
>Hello Mr NSA.

Oh wow, way to start a constructive discussion.

>Wrong. AES-NI and the fact that Google uses it should be proof enough. This used to be true, but isn't anymore.

Are you saying the cost of encryption is affordable for everybody because it is for Google?
No clustered index? What about CLUSTER?

http://www.postgresql.org/docs/9.4/static/sql-cluster.html

CLUSTER instructs PostgreSQL to cluster the table specified by table_name based on the index specified by index_name. The index must already have been defined on table_name.

When a table is clustered, it is physically reordered based on the index information. Clustering is a one-time operation: when the table is subsequently updated, the changes are not clustered. That is, no attempt is made to store new or updated rows according to their index order. (If one wishes, one can periodically recluster by issuing the command again. Also, setting the table's FILLFACTOR storage parameter to less than 100% can aid in preserving cluster ordering during updates, since updated rows are kept on the same page if enough space is available there.)

When a table is clustered, PostgreSQL remembers which index it was clustered by. The form CLUSTER table_name reclusters the table using the same index as before. You can also use the CLUSTER or SET WITHOUT CLUSTER forms of ALTER TABLE to set the index to be used for future cluster operations, or to clear any previous setting.
This is the second time this site has appeared on HN, and both times I've mis-read the title as "PostgreSQL vs MySQL", which I think would be a much more interesting comparison. If you're already working in an MS shop, then MS SQL will work best with what you have. If you're working in an open source environment, then you'll be better off taking advantage of what Postgres or MySQL have to offer. Postgres and MySQL are so different in terms of their features that comparing them would make an interesting article.
Awesome, thanks for sharing. I'm a big hard scifi fan, although I tend to stick to the middle half of the last century (there's just so much good stuff!)
Well the woman who wrote the article does sound impaired by this, reporting everyday life as a struggle to wrest herself away from the stories in her head in order to interact with people and tasks in the real world.

So... sounds a bit like a disorder to me. Not that I'm qualified in such matters, but it could be evaluated in a similar way to HPPD - it's only HPPD if it interferes with your life, otherwise it's just a psychedelic hangover.
Unreal Engine 4 Releases with SteamVR Support
Netflix and the Chaos Monkey
It does a lot considering the fact that most resources on a page served over HTTPS also have to be served over HTTPS.
Salesforce Metadata API – Objects, Record Types and Metadata API Tips
I dunno, maybe we oughta make it that way. Wouldn't it be nice if there was a chilling effect around passing laws that may step on someone's rights.
Those links were posted by different people. You might want to check ColinWrights submission history - they submit many interesting articles. They're not shilling or astroturfing for this company and your assumption is a bit rude because it's so easy to check.

About the dupe: This submission has a clean url, the earlier submission has a bunch of cruft which is probably why the dupe filter didn't spot it.

http://www.nytimes.com/2015/05/03/magazine/want-a-steady-inc...

http://www.nytimes.com/2015/05/03/magazine/want-a-steady-inc...
A good demo would be to watch https://www.youtube.com/watch?v=lO7LhVZrNwA. This was a real time demo at Spark Summit last year.

Note: The demo gets pretty interesting at https://youtu.be/lO7LhVZrNwA?t=36m50s. The presenter handles the situation very well afterwards !
I think the hang up here is on Apples scale. That single shipment of 300k phones weighs just 77 tons. But Apple sold 74.4M phones last quarter of which about 30% went to North America.
Java 7 end of life
In this case I think the benefits far outweigh the risks.

Now it _sounds_ like you're being snarky because I'm not directly supporting Arduino.cc, but my point was that the beauty of open source is that somebody else can produce things a lot more efficiently/cheaply than you can and there isn't one controlling entity. I do own an 'official' Arduino Leonardo, but when you can buy more from eBay for $3, it's hard to justify paying 6 times the price, plus shipping, from Sparkfun.

It is certainly cheaper in some cases: the Pro Micros run Mega32U4's which have built-in USB controllers; all you need is a micro-USB cable. I prefer to code for AVR directly for a number of reasons, and Arduino boards make excellent dev platforms once you replace the bootloader with LUFA or something similar. Otherwise a tinyISP is a few dollars from eBay (they're hardly clones, since there are no official suppliers anyway). You get the option of using Atmel Studio although it's Windows-only anyway.

I'm really not a fan of the Arduino IDE either, so if Microsoft wants to bring in Visual Studio support they're more than welcome!
It looks really nice, but it seems a shame to me that the ocean appears featureless.

If I were printing all that blue ink, I'd want ocean trenches to stand out in the same way that the mountain ranges do :)
I agree that we shouldn't prosecute politicians for this kind of thing, but note that Justice Roberts feeling different one morning can mean the difference between punishment and not for ordinary people when the law in question is unsettled. (Morse v. Frederick comes to mind.)
Perhaps the most important point from the article:

"Statistical research largely focuses on mathematical statistics, to the exclusion of the behaviour and processes involved in data analysis"

If there's a major problem in data collection, cleaning, or hypothesis generation, it doesn't matter whether NHST or Bayesian methods are used
Recommending Unanswered Stack Overflow Questions with Lateral
This is what happened to me as well. I fought off the push to buy a tablet despite a lot of friends showing me theirs (and admitting that they were cool).

At the same time, I had a desktop for "heavy lifting" like graphic design and 3d animation, storing a big media library, playing games, etc. I also kept a cheap, portable laptop for the occasional times I needed to travel and wanted some semblance of computing from a hotel room or an event. For all of the other lightweight tasks, I had been using smart phones since the early Treo days so that was fine for email and looking up info.

But then I was planning a longer trip from the US to Southeast Asia for several weeks and it was going to involve a lot of hopping from town to town. Suddenly even my laptop was too much to carry when I already had everything on my back. I caved and bought an iPad 2 for a good deal more than I wanted to spend. They were still hard to find so I could only find the larger capacity models and the only Android tablet worth considering (Xoom) was not as capable and still cost about the same.

That iPad was pretty cool and I used it for a year or two before it just got to be a pain in the ass. Updates were de facto mandatory as you mentioned. Staying on old OS versions meant unsupported apps and constant nagging. But each OS update made the thing perform worse and worse. The hardware cycle was much faster than that of desktop/laptop computers at that point so I couldn't assume the normal 5+ years of usefulness I'd get from a laptop and there's no option to just install a lightweight Linux distro or downgrade. Even after I jailbroke it I couldn't really do much to speed it up. At this point, doing more than opening a single browser tab or lightweight application will make the thing lag and stutter and generall suck.

I think now it gets powered on a few times a year for me to check on updates and see if there's anything worth checking out. Haven't bothered selling it since it's my only iOS device and I figure there may be a point where I want to try some iOS exclusive so I keep it around for that.
Jason Davies has done excellent work on addressing this problem in the browser
https://www.jasondavies.com/maps/raster/
> Wrong. Passive eavesdroppers. Pay attention.

If you're in a position and have the motivation to passively eavesdrop, you probably have the hardware to actively eavesdrop as well.

> Wrong. AES-NI and the fact that Google uses it should be proof enough. This used to be true, but isn't anymore.

Pure garbage. For example, Netflix saw a 50% capacity drop on their servers by enabling TLS [0].

Google do it because their content is more dynamic, so TLS isn't much in the way of extra demand. If you have mostly static content, the overhead of TLS is pretty much all your overhead.

[0] - https://people.freebsd.org/~rrs/asiabsd_2015_tls.pdf
I interpreted the extinguishing part as getting rid of Arduino in general, not whether Microsoft pulls support for their IoT platform.
When developing on a Microsoft stack with Visual Studio, I have always found SQL Server to be the most painless DB system. You can't beat the Visual Studio integration and tools. Also, their SQL Server drivers for .NET do a bunch of transparent optimizations like automatic connection pooling behind the scenes so you don't have to worry about this kind of thing.

OTOH, when not on a Microsoft stack, it has been a constant source of hard to track down problems and bugs. I remember trying to use Microsoft's JDBC driver a few years ago in a Java web app and running into all kinds of nasty and unbelievable bugs in the actual driver they shipped.
Show HN: AccessMap – illustrate obstacles for wheelchair users in Seattle
My interest was more in a discussion of the results. In general, the 'digital humanitarian' outreach seems to be plenty effective.

I think there is a glimpse of the internet living up to some of the potential that has been imagined for it. The local effort is being magnified by the global participation, and that participation is being focused by the local coordination.
If you told me my product was the new Win32, the new Java, and the new Flash, I'd immediately apologize and kill it.

It's like being labeled "a young Justin Bieber".
Unfortunately, nginx doesn't allow you to set custom headers for error responses by default. You need to add something like the ngx_headers_more[1] plugin for that.

[1]: http://wiki.nginx.org/HttpHeadersMoreModule
> I think the author is arguing here that the MITM attack wouldn't bother with encrypted traffic (which is obviously a very weak argument).

That SSL interception on computers is on the rise is something every PC game developer can probably attribute to. Right now you cannot pin any certificates any more because of the widespread penetration of SSL intercepting firewalls and antivirus solutions.
I guess you mean clinical significance.

http://www.bmj.com/content/348/bmj.g2130

This is a secondary issue. For most non-stats people, I wouldn't recommend the confidence interval as a measure of clinical significance. I'd rather look at the actual distribution of the two effects and view quantiles of the predictive interval.

And, yes, in hypthoesis testing, p-values and confidence intervals are generally interchangeable. All they speak of is the overlap of the sample distribution of means, really.
I can't believe how negative the comments are here, criticizing the projection. I don't really like the term "middlebrow dismissal" but it seems to apply.

As an aside, have you looked closely at Greenland on a globe? It looks all wrong - long and skinny like someone messed up the aspect ratio.
Don't make the argument "unless your time is free" unless you have 0-turn around time->money converter. Which, your argument is that "Time isn't free, so neener neener", which falls flat in its face.

I'm not in the upper, or middle economic class. And making our own food is how we save a great deal of money, and also eating much healthier. We probably could eat on $50/wk for both my wife and I. But it would be junk food and bad calories and malnutrition.

Last night, we had shrimp, tilapia, roasted veggies, and a capezzi salad. That would have been ~$40 each out on the town. It cost us $10 for both of us combined. And it was a half hour work for one of us. We can't even work a half hour on no minutes notice.
Freedom for Wrists: ditch your smartwatch
"Interfering with your day to day life" is one of the things used to decide if you want or need treatment. There are limited situations when treatment is forced upon you and hoarding or skin picking probably aren't them.

Don't forget that something with a common English word as a name ("hair plucking") is not as simple as "occasionally plucks some hair", but "compulsively plucks hair, to the point of semi baldness, with distress as a result".
Is it signifiant? I haven't even thought to lookup benchmarks.
The Major Bung Ly story (http://studentpilot.com/interact/forum/showthread.php?20184-...) where he landed a Cessna on a carrier was always impressive to me.
It makes little sense to put it like that, since for MySQL it greatly depends on the storage engine used. I've found InnoDB to be quite robust, but I'm not sure how it compares to what Postgres uses.
Brilliant - great concept and good execution. Awesome job duder.
The Surface probably needs another rev or two. Microsoft is doing a lot with Cortana. How long before I can sit down and write a small document with it, for instance, with the ability to make significant edits? It's also laptop heavy.

Microsoft is approaching the tablet by scaling down a laptop. I like it but it needs more work.
Evaluating a user interface in a few minutes makes sense for things which will be used for a few minutes...and for journalists in need of sensational headlines under deadlines. An operating system is complex and used over a long period of time. Using Windows 8 meant I had to learn something. It took a day or two to become effective. A few months to become more effective than I had been under Windows 7, and a while before I really started to get it.

That effort made learning xmonad a breeze because I accepted the idea that I would have to spend time paying the dumb tax. It turned out to be only a morning.

Emacs on the other hand....
Bay Area Mercurial Meetup
> Thank you for double posting the
> infomercial for your app ...

It's not my app, I have no connection with it, and I didn't post the other submission. I saw a fascinating discussion on Twitter that was prompted by this particular article, so I submitted the article to see what the HN community might add to it.
You need to edit this comment to add additional newlines after the quotes - your responses are otherwise merged with them.
I agree with the point about CDN's. Cloudflare is a single point of failure, that could tamper with connections to a large part of the web.
>I think the author is arguing here that the MITM attack wouldn't bother with encrypted traffic (which is obviously a very weak argument).

I think the author is arguing that SSL requires active eavesdropping, which:

1.) Might break encryption (see Superfish), while the user thinks they're using proper SSL (author argued about the "false sense of security" in a separate section)

2.) Might just break things -- more an argument about software stability than privacy or security.
You've been able to define custom debug visualizers in VC++ for a very long time, although until 2012 it was basically undocumented. I do prefer gdb's choice of python over VS's custom xml-based stuff for defining them, though -- VS's is slightly easier for the trivial cases, but it's usually the complex cases where custom visualizers are more than just a minor convenience.