skysight-inc/HackerNews huggingface dataset:
Do you mean the differences to the way I was setting up servers before CoreOS? Well, this is subjective, of course, but I feel that it's easier & faster to isolate everything now. I still have to add iptables rules (I also use AWS ports restrictions) and add SSH keys, but that's all I have to do. Auto updates with scheduled reboots and safe rollback work out of the box, I have only few vector attacks in terms of services exposed to the public network. When I have everything in 1 data center, "internal" tools (etcd, fleet, confd, locksmithd) are open only in private network and just ports 22, 80 & 443 have to be exposed. Containers are also "linked" in private network, I can easily securely connect services/applications in containers running on different machines without much overhead.

Often the easiest attack vector is/are security vulnerabilities in applications exposed to the public network. Containers are great here, because when application is compromised, just 1 particular container is dead (and probably other containers running that app). I can just run docker kill app && docker rm app and the rest of my containers are (probably) ok. The problem is that attacker can gain access to data in etcd, since it's not encrypted by default and has no per-user permission (but you can use HTTPS in etcd cluster, which is good), however as of now you can use something like crypt: https://github.com/xordataexchange/crypt to use gpg in etcd (with natural API).

Docker gives you root for everything in the container, which may not be the best option. Also, only lately Docker have the option to verify downloaded images. rkt already has this feature, and it's just 0.5.5. (see also: https://github.com/coreos/etcd/blob/master/Documentation/sec...). Docker is great, don't get me wrong, I think it's a very good software and I'm glad I can use it. CoreOS team has just a better vision and priorities, IMO.

I'm considering a blog post about CoreOS/Docker/rkt and similar tools, not sure if there's interest?
So I remembered correctly, Nim does not reach UB in non-release code (or rather, code without --boundCheck:on), it throws an exception. I still think this is a reasonable solution. We catch these errors during development iteration or enable it for safety-critical portions of release code (or the entire project).. and we can opt-out of these checks if we need the performance and safety isn't as important (games, simulations, etc).

I remember Rust does not bounds-check it's iterators, so you don't need to really disable bounds-checks (indeed, you cannot) while Nim, currently, does this more niavely and looses some performance for it. That's a nice thing Rust does, but not something Nim can't eventually catch up too. See this comparison for futher reference: http://arthurtw.github.io/2015/01/12/quick-comparison-nim-vs...
A mapping between musical notes and colors
A double hamburger with the little wafer thin burgers isn't lunch. That's more like a bite sized snack.

It was a double quarter pounder and was over $5 alone. The medium shake was another 2.50+ and with tax it was well over $8.00.

The point is... it was too much money for the quality of the food. There are better alternatives.
I think someone can be very passionate about coding and still only do it 9-5. Being passionate about your job, loving what you are doing, taking pride in it, and committing to building an excellent product doesn't mean you can't ever do anything else.
Not all food subsidies keep food prices down. For example, several crops have dedicated programs where the government keeps a significant portion of the annual crop off the open market as a means of keeping the price high (see the recent SCOTUS case about raisins). Then there's things like ethanol mandates which act as a subsidy to farmers but increase both the cost of food and the cost of gasoline. An even bigger problem are import tariffs and other forms of protectionism that again subsidize farmers but increase prices.

Food stamps are a far far better way of subsidizing food for the poor than through a rube goldberg system of supposedly helping the poor by giving millions to huge agribusinesses. So much so that I consider those types of arguments a bit of a red herring. Along with the "food security" argument -- there's no impeding worldwide embargo of the united states and if there were calories would be the least of our problems.
This is exactly it, recruiting and retention.

As far as retention goes, especially for early employees: technically, you're going to be dealing with all of the bullshit the founders built into the system, and probably handling growing the team and installing processes. If you don't have some actual real stake in the value that you're creating, you are going to get jaded as the inevitable annoyances of being a startup take their toll.

Part of the reason that it's particularly annoying is that it is trivial to see the value you are adding to the company. You've added some kind of project planning and management. You've added CI/CD practices. You've added a testing culture. You've imposed interfaces and documentation to onboard new developers and isolate implementation changes from the rest of the system.

So, unlike a founder or a later hire, you see exactly how much better things are going to be from that dark age. And so, you're going to be pissed off when you only get like 0.5% in pre-dilutive shares.

At least we should be thinking about something like an engineering commission or profit share or something for early engineers.

EDIT: This is also especially important because you want your senior engineers to be encouraging a culture of "work smarter, not harder", and they'll naturally be disadvantaged if judged in terms of the bright-eyed youths that'll work all weekend correcting the mistakes of that week, and be praised for their effectiveness.
No. Your battery degrades each time there's a cycle of charge->use. If you're lucky, you can do that a few thousand times before you lose much of your battery's capacity. If you leave it plugged in, you aren't losing cycles, so you should do that.
Great story. It's hard to not stereotype and have those initial knee-jerk first impressions, but it's perhaps more important to be open to changing our impressions and not have them cloud our interactions with people.

I also think this is a generally good story about how people are/ can be genuinely good rather than the negative light most media tend to share.

Thanks for the post!
If only there were some science dedicated to the study of allocation of scarce resources, the practitioners of which may be able to offer some advice...
Also trying to cover your tracks by trying to clear it from history. This one was a big issue for me. It showed he knew he did something wrong and was trying to hide it.
Having an entire app to do this would be a huge pain in the ass. Having an iOS widget thingie would be nice, at least for play/pause/up/down/left/right, would be handy for when I don't want to reach for the remote, but switching away from Two Dots just to choose an input is a hassle if the app takes more than a second or two to load.
There was some conversation on this release announcement a few days ago: https://news.ycombinator.com/item?id=9467990
I think the source of your confusion is based on a false assumption that speed has anything to do with programming skill or quality of output.

I've never met a really good programmer who cared much about how quickly she finished a project. Only about doing it right.

On the other hand, I've met a lot of bad programmers who were really concerned with writing code quickly, or bragged about how fast they could code, who's output was terrible.

Now it may be that a skilled programmer comes to an answer more quickly than an unskilled one. But it's also true that a sloppy programmer comes to an answer more quickly than a careful one.
I think they are mistaking 'cause' for 'correlation'
A fiction version of these robots was described in Mr. Penumbra's 24-Hour Bookstore (http://en.wikipedia.org/wiki/Mr._Penumbra%27s_24-Hour_Bookst...), I suggest you check it out if you haven't already done so, nice, entertaining read.
Joseph Lechleider, Inventor of Early DSL Internet Tech, Has Died
It's great that you encourage your team to communicate with the outside world, but that communication would be more effective in this case if it had been edited (and I mean edited - thanks for keeping the marketing department out of it). It looks like all your blogs combined have only a few posts per month, so this shouldn't be a particularly onerous task.

Keep up the good work.
I wonder if Mozilla is in communication with Matchstick.tv developers? http://www.matchstick.tv/ https://www.kickstarter.com/projects/matchstick/matchstick-t...

Matchstick developers have gathered quite a lot of support for their croudfunding campaign, by promising an open software and hardware TV streaming stick due this February, and for a low price ($16+). Then, come February, they pissed off the vast majority of their supporters by suddenly announcing the 6-month delay in favor of things like hardware upgrade and DRM support, which none of their backers actually asked for. If it turns out that they were not in communication with Mozilla and their vision for Firefox OS TV's is incoherent with Mozilla's, then this project will truly end up a poor application of users' money and trust, bordering on a scam. Actually, a lot of supporters have lost faith in crowdfunding, and, presumably, Firefox OS, as it is; demanding their money back - not that Kickstarter supports it, after the project's been funded.
Don't worry, some of us still love you guys.

Signed,

Developer who wants to develop rather than being a part-time, under-trained, unsupported sysadmin and who finds too many stories about modern devops environments funny for all the wrong reasons
Welcoming Timeful to Google
Manifold.js – Create mobile apps from websites
Code is worthless, so yeah ... no harm done. Apple genius is in convincing people to buy their stuff.
AFAIK only macbooks have been designed to bypass battery ( once the charge is 100% ) and directly run on connected power. For other notebooks its best to unplug charger at 100% and connect charger at around 10% to get a longer lifetime of the battery.
Don't know why this is being downvoted. This is a very valid point. Stealing code seems to be like pornography, i.e, you know it when you see it. Except there are lots of grey areas. What if instead of downloading the code on his last day of work, he had downloaded it a few months earlier? What if he hadn't erased his shell history? It seems that what constitutes stealing versus valid copying depends on his intent - which is a pretty weird definition of stealing when you think about it. Whether or not I stole your wallet doesn't depend on my thought process at the time.

Edit: can't seem to reply to response below, so I'll just add here, if code theft requires intent to "permanently deprive" someone of their property then you need a pretty strange definition of "permanently deprive" as well.
Apprenticeship =/ child labor.
That seems like not nearly enough money for an underground fiber network.
Metatron has the historical knowledge, but isn't a HEMA practitioner yet. Tim has some great videos, but hasn't been so prolific of late.
Isn't the main point of private schools to pay for the selection bias?
That's a bit surprising, given that Google's percieved backing often is enough to make or break projects in this space.
Farmers starve, up the price, now I'm paying $12 for an Orange. Nice solution.
If you think data Science is just stats, you should probably read this book.
Piedpiper API
Its not a con, he knows he can save $trivial_amount domestically. He can probably hit 5% and have ownership of this thing, which is great, but he's not hitting ICE price levels. He's still hitting luxury car price levels. Tesla is a luxury car maker, why is that so hard for people to understand? He competes against Mercedes, Jaguar, etc and wants to sell better to buyers in that class, hence the gigafactory.

He cannot compete with Honda, Chevy, etc. ICE makes far too much sense.
Hm it sounds like because you were unable to learn the flute/drums despite not being very motivated, you don't think everyone can do it. I think this is a fair observation, but I also do wonder if you tried a different approach whether you would be able to learn. I hope that didn't offend you, you certainly sound very hard working, and I wonder if I might be able to help if you were still interested in trying to learn an instrument.

It seems like you felt overwhelmed by all the various parts of making music. But since you are just starting and having trouble, I wonder if it would make more sense to try to isolate the different things until they become easy enough that you can do them together.

Please forgive me if you already tried this, as you didn't mention whether you had a teacher and what music you were trying to play.

For example, if you had trouble with beats, you could try practicing the beats just by tapping your hand or singing or something else. I was ridiculously bad with rhythms (and still am?) so I have a lot of personal experience with this one.

Then, if you have trouble reading the notes, you can just write them down in a way that's easier for you to read. There's no shame in just writing down the note names! Alternatively, you could just try to memorize a single measure and practice that one measure. Again, I found myself doing this all the time, especially because on the piano you have two hands to read notes for. Of course, what might make even more sense is if you just picked easier music to play.

I think for fingering, the same advice kind of applies.. you can pick easier music, or just memorize small sections.

In a way I feel like you could use this same advice for programming as well. If you pick a super huge project and only gauge your progress for that whole project, you might get overwhelmed and feel like it's taking too long, which stresses you out. Alternatively, if you break the project down into manageable chunks, you feel good about your progress!

At least this seems to have worked for me! I don't know if this will help you at all and I apologize for being so stubborn but I really don't believe you are unable to learn an instrument unless you have some learning disability.
Agree. And I find the idea of the poor immigrant who doesn't speak english and didn't know it was bad to steal intellectual property very amusing. I have not followed the case but I think I remember that Goldman caught him because he was trying to temper with the logs on his machine to cover his tracks!
And sadly that will continue to be the case until data protection regulators have real teeth, at which point due diligence before any acquisition should obviously include a thorough audit of these areas. A potential acquisition target that hasn't looked after its data properly and is a large regulatory action waiting to happen should then, rightly, be unlikely to exit successfully until they get their house in order.
Please cite a source for "Montessori...outcomes are effectively the same as public schools".

Here's a study that found the opposite: http://www.scientificamerican.com/article/students-prosper-w...
Well, by invasion I consider attack against a specific country. Either one of does not fit this definition.
And that's why you let the computer do it for you.
It really doesn't matter who is saying it, whether majority or minority within a jurisdiction, obviously she's majority in her jurisdiction, still does not matter. Doesn't matter if jew or gentile thinks a particular ethnicity is physically ugly or ugly in manners, etc. Just don't act prejudicial in other spheres, especially commerce. When it comes to the heart though, anything goes. You can like or dislike any one or any group for any reason and you should not be castigated for it.
Anyone who has dealt with Django should believe his claim to being mediocre. ;)

Actually I think this is a good article which makes some good points, but I think it misses another harmful myth; that people are one thing all the time.

It substitutes the idea that people are either good or bad programmers with good, bad or mediocre.

But in reality, one person is not always good or bad or mediocre all the time. Someone might write brilliant code today on this project the are passionate about, but write shitty code next quarter on a project that doesn't have their interest. Or while they are distracted because something came up outside of work. Or because they are writing in a new, unfamiliar language and they don't realize the code is bad. Or any number of other reasons.

Human beings are fluid things. Over time someone may develop an average quality of output, but that's only going to be something that comes about over time. And ultimately, I think it's somewhat meaningless. Since the average is not what you care about in any given case, and may or may not be applicable to whatever new thing comes down the line.

Plus, as the article points out; how do you really define good or bad? Number of errors that get caught by unit testing on first submission or number of errors which don't get caught until the code is already in production?
What I find fascinating is the ability of software developers to work against their own interest.

> The US Bureau of Labor Statistics estimates that by 2020 there will be a 1.5 million programming job gap, which means there will be that many jobs unfilled. That's in five years. The EU has published similar numbers, 1.2 million in 2018—three years. That means we need to be doing something to get more people into our industry.

There you have it. That's how many of us are thinking, while at the same time we suffer from ageism, wage-fixing, working overtime and being seriously underpaid in general for the value that we provide to our employers. How can we be so stupid as to care about programming jobs being filled? Is it any wonder that we end up being abused?
This is worth backing, because Krita have run a few rounds of crowdfunded development and have always delivered handsomely.
If you want disturbing, try the "Hardcore History" podcast where he explores the personal implications of what we know about being on the losing side of the Battle of Canae. Very disturbing, and even backed up by archaeological data.
CSRF protection bypass due to Google analytics and weird server cookie parsing
They intend to replace IP's stateless data plane with a stateful data plane that they argue is more efficient:

> In Named Data Networking (NDN), packets carry data names instead of source and destination addresses. This paradigm shift leads to a new network forwarding plane: data consumers send Interest packets to request desired data, routers forward Interest packets and maintain the state of all pending Interests, which is then used to guide Data packets back to the consumers. Maintaining the pending Interest state, together with the two-way Interest and Data exchange, enables NDN routers’ forwarding process to measure performance of different paths, quickly detect failures and retry alternative paths. In this paper we describe an initial design of NDN’s forwarding plane and evaluate its data delivery performance under adverse conditions. Our results show that this stateful forwarding plane can successfully circumvent prefix hijackers, avoid failed links, and utilize multiple paths to mitigate congestion. We also compare NDN’s performance with that of IP-based solutions to highlight the advantages of a stateful forwarding plane.

http://named-data.net/wp-content/uploads/comcom-stateful-for...

This challenges the notion that IP's statelessness is one of its core strengths.
I don't know whether that story is true, but if so, it would be done by putting the money into a 'charitable' entity that returns the money in a less- or non-taxable way. This is not really something that could be done in the United States outside of fraudulent activity.
> So I remembered correctly, Nim does not reach UB in non-release code (or rather, code without --boundCheck:on), it throws an exception.

That's not really correct. It's undefined behavior either way; you're just getting lucky because the compiler doesn't happen to take advantage of the undefined behavior to perform optimizations at -O0.
Type coercion is fine so long as you recognize it as the syntactic sugar that it is. JS and PHP support easy type coercion because HTTP is string-only and it would be a pain in the ass to explicitly cast every value you get over the wire. You just have to be sure that, when you use it, you do so intentionally and not out of laziness.
> It seems that what constitutes stealing versus valid copying depends on his intent - which is a pretty weird definition of stealing when you think about it. Whether or not I stole your wallet doesn't depend on my thought process at the time.

Actually, it usually does: "Theft is often defined as the unauthorized taking of property from another with the intent to permanently deprive them of it." [0] (emphasis added)

[0] http://criminal.findlaw.com/criminal-charges/theft-overview....
The double jeopardy aspect of this case is what troubles me. He was cleared by a federal court of the crime, but they found an obscure statute under which to charge him at another level of law for what was essentially the same action. The only reason this was successful is because Goldman Sachs is, well, Goldman Sachs and the amount of power they wield is frightening (even to a federal judge).

But that's beside the point: this article is presented not as an honest retelling of the facts, but as a window into how engineers might perceive this case, and the impacts that perception has on banks' abilities to recruit the best talent. And from that perspective, it's spot on: it drags into the open a lot of poor practices that banks have and how they're a poor fit for the hacker culture present at the top level of engineering talent. Even if that doesn't represent reality, it reinforces that perception: young engineers graduating from college and looking for a job have a certain negative connotation with banks as a result.
My guess is that it's part of the campaign to make developers love Microsoft by reminding them that Microsoft was once a startup too and like Apple, it has it's own folk heroes. I guess they overlooked the fact that people on HN apparently don't like this guy.
There's actually a sophisticated semi-underground network of Chinese food workers and laborers, it's a fascinating read: http://www.newyorker.com/magazine/2014/10/13/cooka%C2%80%C2%...
It reminds me of this Windows review, from the point of view of a Linux-first user:

https://www.reddit.com/r/linux/comments/miduh/tomt_an_articl...
Twitter boss confirms plans to expand curated 'experiences' to all users
John Chambers Steps Down as Cisco's CEO
You should unplug it before it reaches 100% unless you know you'll need the full charge.

Letting the battery sit at 100% wears it out more than sitting at 40-80%.
'googol'.com ?
Learning Ansible with Vagrant
Well, theft means to take something with the intention of permanently depriving its owner of it, which is why there are different crimes for TWOCing (taking without owners consent) in UK and probably similar in US, so it's not that unusual to consider the intent of the perpetrator.

Mens rea or something.
The only time that I have seen equity increase worker output is for relevant companies inside a valuation/exit bubble. There, equity produced remarkable alignment even among folks who hated one another.

The other thing that I'd add is that the fact that startup employees now make near-large-company cash packages suggests that the job market has radically devalued equity.
Yes. When comparing electric cars to gasoline cars, just assume the electricity is free.

The real money for the electric car is the depreciation of the battery pack. A penny or two per mile is a rounding error compared to that.
Not 10%! That's terrible for a Lithium battery. Charge it when it gets to 40%.
Extinct Startups Tees