skysight-inc/HackerNews huggingface dataset:
Apologies, the line:

> The next big issue is that there are people who do not have a right to privacy. In many countries this includes children, prisoners, stock-traders, flight-controllers, first responders and so on.

and a comment in this thread

> And I fundamentally disagree with the premise that there are people who do not deserve privacy. I can not think of a single person I would wish complete exposure of their lives upon. (https://news.ycombinator.com/item?id=9454402)

caused me to misinterpret that. Do not have a right != Do not deserve. I am very sorry that I implied something that is not true. I am editing my original post to clarify this.
Future Programming Workshop 2015: Call for Submissions
If you won't trust a 30 year old with life advice, would you trust one with your career as an investor or boss?

Wisdom can come from many sources.
Great job, but I noticed that the server gets just a B rating (ssllabs) due to:

- rc4 acceptance
- Session resumption (caching) No (IDs empty)
- no OCSP stapling
- Next Protocol Negotiation (NPN) Yes, but not signalling a http/1.1 fallback

I found no settings to change the TLS configuration. Is there any way to change it?
I have to comment to specifically highlight this comment above. You can easily understand monadic I/O when you understand chousuke's comment; until you understand that comment you will have trouble understanding how Haskell does I/O.

So to say it again in slightly different words: when you are writing Haskell, your job is to generate `main :: IO ()` (if you have never read Haskell type annotations, that's short for "a thing named main which is a program which produces nothing important." To do so, you have a lot of building blocks, like `getLine :: IO String` (a thing named getLine which is a program which produces a String), `putStrLn :: String -> IO ()` (a function named putStrLn which takes a String as input and produces a program which produces nothing important).

You also have functions which combine these together, like `(>>=) :: IO x -> (x -> IO y) -> IO y` (an operator named >>= which takes, on the left, a program which produces an x, and, on the right, a function which turns an x into a program which produces a y -- the operator then giving you a program which produces a y.)

So one example is:

main :: IO ()
main = getLine >>= hello where
hello :: String -> IO ()
hello name = putStrLn ("Hello, " ++ name ++ "!")

This is a program which prompts the user for a line (like, say, `Chris`), wraps it in some text, and prints that text out.

The Haskell compiler just writes `main` to disk as the executable. The compiler does not "run" any of these programs; that happens when you run the executable which Haskell makes for you.

It is called by this scary word "monad" because that describes two things you can do with programs, one of which is this fundamental `>>=` operator.
>It's useful to have a "locked" version of the key for secure archival.

Why? Sounds like it just adds another point of compromise (but probably minor compared to having it loaded in memory on a web-facing computer). Maybe if you're pinning the exact certificate, but that doesn't seem like a good idea anyways (ideally, every server would have a unique private key stored in secured hardware, right?).

And 4096 bit, does that help at all? If a CA is 2048 then doesn't that max out the trust chain?
I can absolutely see this at an investment bank, or at a job where physical presence is mandatory (such as a security guard, a teacher, or a bank teller). In a creative job like software, it's absurd. Especially when so many places say, "Come when you want".
Per the HN guidelines, please link to the original story, not an aggregator like Slashdot.

http://www.click2houston.com/news/professor-at-texas-am-galv...
What I found is that I'm the same person, but having children changed my perspective. I'm more conscious of how I spend my time so I hopefully waste less and still have time for both my family and myself.
Hmm I always default to not "do what you love" but "love what you do" in that most work has some interesting component, and what's really important to develop is the ability to isolate that aspect and motivate yourself with it. That's something I think everyone can use, regardless of their position in life
It's a little more than that. The internet reduces peoples need to go somewhere, buy stuff, and take it home even outside of cities. This is killing the suburban shopping mall, but it also significantly reduces peoples need to move around with a pile of stuff. Because public transport is mostly focused on moving people and not their stuff this makes public transport more useful to more people. Even if they don’t give up both their cars living in a one car household is far easier nowadays.

PS: It's not just about doing less shopping trips; if you only get 1 bag of stuff it's easy to carry around. If you’re getting a massive load of junk you really want to drop it off in your car.
Poor RAM Management Dogs Samsung Galaxy S6, S6 Edge
Can you post info about the cert you're getting? On Chrome, this is done by clicking the lock icon by the https, selecting the "Connection" tab, then clicking the "Certificate Information" link. As was pointed out elsewhere, be aware that this may expose information about your network.
Because you want authorization and authentication by application. So a web server / proxy needs the public TLS cert but maybe an application server doesn't. Meanwhile the app server needs DB credentials but the web server doesn't.

In your scenario, if something happens to a front facing web server, nothing prevents the attacker to just enumerate all secrets and retrieve them, whether the server should have had access or not.

Defense in depth is a thing.
How Nepal's earthquake was mapped in 48 hours
I believe that the title captures everything. Similar with having kids too, btw. Anything worth doing does require a lot of work. Long days, and you forget the time periods.
Perhaps that just proves that the best life advice doesn't really change much? While reading Sam's list I didn't find much that I haven't heard before.

What is new and valuable to me is the combination of advice. While each individual piece of advice might not be new or unique it is still interesting to see what Sam chose to include.

If nothing else it serves as a reminder from a person you may want to learn from. That can be valuable as well particularly because people seem to make the mistake of forgetting important things in life "by default"[1]

[1]http://www.paulgraham.com/todo.html
Central London was never car friendly :-)
Twitter Q1 sales miss views, firm lowers FY outlook; Shares plummet
Not unsolicited; it was a package he ordered and the police intercepted.
JavaFX 8 Tutorial
Relatively recently I wrote a purpose-built web server that supports HTTPS and links with libssl. The experience was both good and "interesting". The good is that it's actually pretty easy to use libssl, even though the API is pretty terrible. Other than the configuration you already see in products like apache2/nginx/etc. there aren't many knobs and levers to worry about. You simply hand a socket over to libssl and does the heavy lifting. Then you use the libssl functions to read/write data and you can even use select() and friends to check if the socket is ready.

The "interesting" part comes from the fact that a socket may read when you want it to write and vice versa: the underlying protocol is more complex than just pushing bytes. This means that the socket needs to be able to read and write when you want to do one of those operations. There is also fragmentation of your data. You say "send this 8 KB buffer", yet it gets sent in pieces (cipher blocks?), which can lead to some interesting issues (my server was for video streaming, and sending an incomplete frame resulted in artifacts). I solved some of this by enabling SSL_MODE_ENABLE_PARTIAL_WRITE (don't block until everything is sent, just tell me what succeeded).

What I'm trying to say is that not enabling SSL because its code is a mess is an example of "the enemy of good is perfect". While Varnish refuses to add SSL support, nginx has it. That's why I use nginx and not Varnish.
Yes, it does. Google intentionally adds exceptions from error reporting in the case a root CA was added to the OS.
If anything the selection and frequency of acts seems to have dropped off since the service launched in LA. I was extremely excited at first, but there just weren't enough shows in my musical range. I think if I were more into EDM/dance/electro/trance the service might make a hell of a lot of sense - there seem to be a preponderance of those acts.

One thing I would change about their service - they let you listen to a clip of the band's music on the page that announces the show. If they let you preview the music a day before the tickets were opened up I'd be more inclined to actually log on at 11AM and snap up the good shows. Lamentably, the few times there were indie bands I liked the sound of they were already full.
I'm one of the 'didn't pay for newspapers before' and right now spend a couple of euro's a month on Blendle.

Articles cost between € 0,10, and € 0,50. If you buy so much articles from one paper / magazine that it is cheaper to get the whole edition, you get the whole edition.
Refund work perfect. You don't like the article -> click -> money back. No questions asked.
Wikipedia says this:

>in 2000, Glass criticized open-source software, predicting that it will not reach far, and "will be limited to one or a few cults emerging from a niche culture." Glass's basis for this bold prediction was that open-source software "goes against the grain of everything I know about the software field"

Not to judge off something that small, but if "everything he knew" told him open source was not going to reach far, then perhaps his other facts are off.
I wouldn't be so quick to blaim run off without evidence that this is the main cause. Diving in the ocean in northern Europe you experience the same thing: you have a choice between 4 degrees C and clear water or 15 degrees C and murky green. Runoff isn't a significant cause of plankton blooming in the North Atlantic. Temperature is.
https://github.com/go-lang-plugin-org/go-lang-idea-plugin
There's always an idiot or twenty five thousand that completely fail to see the point in their rush to find something to be pissed off about.

It's really the loss of none but their own, and it's just too bad that they consistently fail to see it.
Monsanto specifically makes genetically modified seeds (seeds they sell and have patented) to withstand Roundup (an herbicide they sell). That is the antithesis of being tangentially involved.
Not yet, but that's coming. Wanted to start simple and add more controls as needed. I'm cautious about changing any of the TLS stuff, especially with Let's Encrypt coming up soon.
Have you read the studies linking aspartame to changes in gut biome? For instance this one:

http://www.ncbi.nlm.nih.gov/m/pubmed/25313461/

You may be right about aspartame. I'm not an expert. Perhaps that study was also disproven.

But my larger point is that it's really, really hard to prove a negative to an acceptable standard. Particularly across all categories we care about, not just cancer and heart disease.

Have the biome effects been disproven too?
Not necessarily - HPKP is standardized, here now, and supported by Firefox and Chrome.

http://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
Related to #2 and #3: don't fall into the trap of believing that it's supposed to take a long time to do something important. Work expands to fill the time alotted. If you get it in your head that the Great Work you're trying to do will take you some number of years, it will, or it will take even longer, if you finish at all.

Commit to yourself now that you won't let work expand to fill the time alotted. Don't accept that from yourself, and don't accept that from others. (Within reason; everything can't get done overnight, but a "multi-year research project" often doesn't really need many person-years worth of effort, it just turns out that way because people let it.)
I recall it was a microprogrammed processor - a set of chips including a rom 'executed' the instruction set. More of an emulator than a processor. So maybe nowhere in that design for a cache?
> It's also wrong as proven by history. Many writers have produced some of their best works at the same age. One example is Kirkegaard who wrote "Fear and Trembling"[1] at age 30.

The field of mathematics are rife with young contributors. Two of my favourite examples are Evariste Galois (invented galois theory, died at 20 in a duel), and one Isaac Newton. The latter is wonderfully told by Niel DeGrasse Tyson: https://youtu.be/danYFxGnFxQ (you may recognize a meme created from the end of that video).
I don't know about deserve, but if you want to talk about incentives for behavior, you really can't go wrong with something that provides both "increased sales volume and lifetime" and "an ongoing share of the grosses".

If you want game developers to promote a helpful environment for mod developers, grab some money and pay them something out of it. Definitely!
It really annoys me that in this day and age there is no system that exists that allows ME to be in control of MY medical data which I can give access to on a per-physician basis (think FB/Google permissions). Apple Health is a step in the right direction (though even as a fanboy I hate that it's Apple-only) and I love how I can share that data back out on a per-app basis.

I personally love the graphs/stats that I can pull from this data all being in one place and I'd love to have the same for ALL my medical records so that when I got to a new doctor I can easily give them all my records.
Google Fonts refuses to switch to HTTPS by default
Automate your marketing into a lead-generating machine (Free until May 10)
I don't think you can call that fixed if the solution is proprietary.
I've been working on this for a while between bouts of procrastination. Any comments, suggestions and questions would be very welcome!
Show HN: Ship Data Science, track, improve, and fix models in production
Google+ doesn't need to exist to beat Facebook; Facebook simply needs to fall out of favor, which appears to be happening:

http://www.forbes.com/sites/parmyolson/2015/01/27/facebook-a...

http://www.pewinternet.org/2015/01/09/social-media-update-20...

http://www.theguardian.com/technology/2013/nov/10/teenagers-...
I believe what you are describing can be built using the primitives I described. Vault, or another secrets manager, would only release secrets to severs on specific subnets. The front-end would be on your front-end subnet, the application server would be on the backend subnet, and the application server would not be authorized to access the private TLS key because it's on the wrong subnet for that particular secret.
Yep. A client must declare that it supports HTTP/2, otherwise the server will fall back to HTTP/1.1. Also, any plaintext HTTP connection will not be HTTP/2 (major implementations of HTTP/2 don't support plaintext).
Varnish has a few bonus features (like caching the gzipped version of responses), which could still make it a useful addition.

We've settled on Nginx for a few of our use cases (to good reception), but there are other use cases we're still evaluating.
I'd be worried if I owned the house in the last photo. It appears the land is eroding and the house is REALLY close to the edge.
Founder here, figured I'd throw it up to get a straw poll reaction of smart folks.
Still, it requires nitrogen to get an algae bloom, right? Has to come from somewhere.
Interesting project, it follows the OTP standards, that is a good sign. :) Not sure about a real world use case. I am aware of an implementation of pmap, wondering how is this project in relation to that.

pmap:
https://github.com/tafsiri/7languages/blob/master/erlang/pma...
If you are worried about spending money when expanding to 26 hosts, you aren't their market anyway. If you're worried about spending a few grand on monitoring for around ~100 hosts or more, then you have a very strange business model.
I have opinions on life on Mars ?
Make it look like a prototype? I've taken to plastering big warning on non-production systems. Otherwise someone looks at a fragile dev environment, doesn't see it breaking outright, then goes and sells live customers into it and uses the prototype/demo system to setup real accounts. No amount of verbal or email warnings will change this. Hurray, now the one-off demo system is a production environment! As a bonus, you get to write data migration programs to move these customers to the entirely-unrelated final product!

But instead, if there are big red Xs and so on in the UI, then it becomes clear "oh this is a prototype/demo/".
5 Inside Bar Trading Strategies and Videos
Find a Computer Job in Seattle:

http://www.warplife.com/jobs/computer/united-states/washingt...

146 companies so far.
I immediately made the connection, too. Itanium pushed a lot of complexity up into the compiler. The performance gains were supposed to come from the Itanium's wide-issue instructions, where one would issue multiple instructions at once. But that requires the compiler to do the necessary analysis to know which instructions can be executed at the same time. Typical out-of-order processors figure this out at runtime. My understanding is that in practice, the Itanium compiler was not able to do this well enough to justify the architectural decisions.

That, though, is still far less radical than the design presented in this article.
There are those in the world working on fixing that. Personally I'm hopeful that they will be successful eventually; the question is just how soon.
30 or not, there is plenty of wisdom in his years. He's done a lot in his short time, more than many will do in twice as long.

Plus 20 (and 30 somethings) would rather here from a determined successful peer, than someone far older.
Google Exec Dies in Avalanche After Nepal Earthquake
I admire your empathy and that you evidently examined the situation versus reacted. Props to you.
Are Ketchapp really "the 2048 guys"?

My memory of the situation was that 2048 was a Web game, which took off among a large group of people that Threes didn't reach (people without iPhones, people who weren't going to pay for a small puzzle game, and people who just wanted to play a quick game on the Web).

And because it was open source and had an incredibly untrademarkable name, a bunch of app developers made mobile clones of it. I assume that Ketchapp was one of them and that the creator of 2048 was entirely uninvolved. Correct me if I'm wrong. It seems to me that the title should be "Some guys who cloned 2048 also cloned another game".

I'm dismayed that someone making a fun, free Web game and expecting nothing in return can turn into a symbol of evil cloning in the mobile game industry. Are we returning to the mindset where open source is seen as maliciously undercutting commercial software?
I am curious why configuration compatibility is a selling point, for you in particular. Is there some popular inventory management tool out there that has been cranking out Nagios configuration files?
> Ask for what you want.

That advice will land you in jail.
Q1. Quality is a collection of attributes.
Various people define those attributes differently, but a commonly accepted collection is portability, reliability, efficiency, human engineering, testability,
understandability, and modifiability.

Q2. Quality is not the same as satisfying users, meeting requirements, or meeting cost and schedule targets. However, all these things have an interesting relationship: User satisfaction = quality product + meets requirements + delivered when needed + appropriate cost.

As someone who specializes in quality, I'd say either he was wrong, or the practical definition has shifted.

What he calls "user satisfaction" is what I would equate with "product quality," at least in terms of what we mean when we aim for a particular quality bar before releasing. The various factors he lists as comprising quality are aspects of satisfaction that may or may not apply to a given audience of users, but the absence of one or more does not necessarily indicate low quality unless it's relevant to the user.

Compare Twitter when it started with Twitter now, for example. When it started, it was a relatively unreliable product, but still high quality for its set of users--at the very least, it was high enough quality that spending time and money to raise it may not have been a good idea. It was successful as it stood. Now the set of users and their expectations have shifted, both because the field's bar has raised in general and because it has enterprise use, so reliability is a much bigger deal. It's still high quality, but for different reasons.

Some of those things (portability, testability, modifiability) are simply conflating code quality with product quality, unless what you're developing is a code component. Even efficiency is meaningless to quality unless inefficiency causes the -customer- to bear more load. Maybe he meant to conflate those things, but I don't think they belong together. They're rather orthogonal: vim is a high product-quality app with (supposedly, haven't read it) pretty awful code quality. Conversely, I've seen plenty of pretty codebases that produced crappy apps.

And meeting requirements, delivering at an appropriate time (which is another form of meeting a requirement) and at an appropriate cost (yet another form of meeting a requirement), these are all absolutely important aspects of quality. The scale of quality a free-as-beer product is measured on will always be different than one a paid product will be measured on.

Basically, he's taking a very absolute approach to quality, rather than considering context. There's really no such thing as a "high quality product" in the absolute. It's all relative to the intended audience and use.

I will agree, though, that quality goes way beyond sheer absence of objective software defects. It's a shame that most of the industry tries to define it that way.
Little Traverse Bay is surrounded by some surprisingly expensive vacation homes and a high-end town center, so perhaps it's not so surprising that the bay is kept very clean.
This school in Norway abandoned teaching subjects 40 years ago
Why and How to Use Docker for Development
Seems like Sam has all 3 of your points "intelligence, experience and perspective" - or does experience only get quantified in years?
This was my thought as well.

Not because he is 30, Audie Murphy [1] was 19 when he won the Medal of Honor, was an accomplished actor and had two kids by 30, but because his experience is very narrow and not particularly deep.

Sam is a smart guy, no doubt, but I think he thinks he is smarter than he actually is.

[1] http://en.wikipedia.org/wiki/Audie_Murphy
The use of Lies to Children in scientific and mathematical writing tends to send me scurrying to Wikipedia to look up what's really going on, yeah.
Any sensible code is going to have to do that stuff whether the machine's endianness matches IP's or not, though. It happens on BE boxes too. It's either that or write completely different code for different CPUs.
Not yet. But I would love to know your thoughts about how you'd like header stripping to work, as well as more information about the others; feel free to open an issue so I don't forget. :)