skysight-inc/HackerNews huggingface dataset:
All three of Musk's most recent ventures (SolarCity, Tesla, and SpaceX), depend either on direct or indirect government subsidies. It's not just that Musk is a workaholic, or possibly innovative, but his ability to "work" the system that sets him apart. US tax payers are paying a significant portion of the bills for his ventures. Since I agree with his goals, it doesn't personally bother me very much but it still is something worth thinking about.
I feel like there's something about a mousetrap and a mouse here.
If you haven't seen this before - some companies like USAA and Paypal use Symantec's OTP product[1].

Turns out they are just re-selling the TOTP algorithm.

Honestly, their solution wouldn't be bad if only there was a way to transfer the token to another device. Their Android product does have reviews where it has changed the token on an upgrade (whops).

Now where ever someone uses Symantec VIP I just generate the TOTP key using the author's program and import it into my favorite OTP generator program.

[1] - https://idprotect.vip.symantec.com/desktop/download.v
Horseshit. You're welcome to hire that way, but I can tell you right now, you're missing a whole class of excellent devs that put 100% of their time into the stuff they're working on at the office. I have side projects I occasionally work on, for myself, but they're not on a public github, and they're almost always when things at the office have slowed down a bit. The rest of the time, I enjoy what I do so much, that I spend it on the work tasks, trying new PoC's, refactoring, etc. Now tell me exactly why you'd not hire someone like me?
AWS Elastic Beanstalk Supports Time-Based Scaling
I'm not exactly sure why you're so opposed to the idea, but okay. You've won. I will never ever say SQL relates to sets. Thanks!
If gamblers are any indication, what happens when you hit $10M is you start to think about what $100M would be like...
Senate Reverses Course and Advances TPP Fast Track Bill
the weakest link here was the physical drug shipments..that will never be secure..ever

Well, it can be if you develop your own underground distribution networks, but then you aren't a darknet message board, you're the mafia.
Well in that case they'd presumably have a log and they would see no suspicious payload.
Even if you got the PQMs, you'd still need the dollars to get the status. So it's not that helpful, is it?
The only projects that nobody ridicules are the ones that nobody uses.
Might the GNUstep AppKit work for you?
If you read the paper, not only Pycket supports continuations, but it optimizes continuations better than Racket. To quote:

"Since first-class continuations are difficult to implement in a mostly-C environment, two benchmarks which focus on this feature (ctak and fibc) perform very poorly on Racket and Bigloo, both of which implement continuations by copying the C stack."

Racket actually isn't optimized for continuations-heavy codes, simply because such codes are rare in practice. Neither is Pycket, but design of Pycket is such that continuations optimize as well as normal calls without any special effort. The result is that for ctak and fibc, Pycket is more than 100 times(!) faster than Racket.
Yeah and who would ever want to use United for international anyways?
He's having a Series A.
Exactly, or outdoor pools.
And yet still so many API developers don't get this, or don't know about it, or don't think it's important. Generic API errors are also pretty bad; a ton I've used will just throw a 400 (or 500) with no information on why.

Relevant: http://blogs.mulesoft.org/api-best-practices-response-handli...
It's about risks and exposure. If it was reasonable for people to have randomly generated, unique, memorable, passwords for every account (also change them periodically and after database "leaks"), then we wouldn't have a need for password managers.

Odds are, people compromise on many or all of those things (even smart or meticulous ones). What you sacrifice with a password manager is a single point of failure. Although, that's a bit dire, generally (and arduously) you could reset those passwords one-by-one if you lost your master password and/or database.

What I like though is that the exposure of your master password is controlled by you and limited between your keyboard and the application (and the various few things in between; the OS, perhaps RAM, etc). This is usually a lot more narrow than the path your passwords usually take (your browser, http, their server). Because it's a single password (and I'm not limited to a site's stupid max character or other constraints), I can make it as obnoxiously long as I'd like--and I don't have to try 3 or 4 obnoxiously long passwords because I can't remember if I typed the wrong one or if I typoed the right one until I get locked out of that website.

Like I alluded to earlier, I also like knowing how long ago I changed my password, what it used to be (in case my db is updated and I didn't quite change my password like I thought I did), unsecure or duplicate passwords (as I migrate them over), or if there has been a database compromise on their end and I though update my password. I'm kind of surprised nobody has released features to automatically change passwords on specific sites.
It's not crazy, though. I was just looking at SFO-TXL round-trips in business. 115k miles… instead of $8k. Values the miles at around 7c/mile.

I made a calculator to answer the question: should I pay cash or spend miles. I set the "good value" threshold at 2c/mile:
https://kballenegger.github.io/miles-or-cash/
I read it through a reader that uses Readability, so it was plain text. I didn't know anything was missing until I read your comment.

That said, the text was a little flowery and aimless. In retrospect it feels like not was written to support the animations and not the other way around. If and when the format becomes more mainstream then it probably won't hold up as well in the future. Kind of like early 3D films.
One of my dad's favorite quotes was "Locks keep honest people out".

Even if you get a secure lock, are you also going to reinforce the door frame? If someone wants in they will get in. It just costs more if you want to make it harder to perform certain type of attacks against your home defense.
MainTool is making a strap that makes any regular watch “smart”
I'm not really sure there is much of a difference between the two beyond routing (which the framework handles just like in all the other popular imperative scripting languages), in fact if anything I'd say PHP is more aligned with the "web app" paradigm since the canonical run-times are all intended to be paired up with an HTTP server, as opposed to most others which were designed as general purpose scripting languages. I don't think it makes much of a difference though.
Tried the first two: they are pretty poor music player as it is in my opinion. The rest seems to be much more that a Spotify client.
giro,
I agree, but what are the alternatives? I'm coding my own, personally.
Secure connection: fatal error (40) from server.

ECDHE or gtfo :(
Well for one thing it actually works on something other then iOS. Big plus in my book there.
> He didn't follow any pattern for what code was in which directory, and he reused class names so grep didn't work. Now where is that source file again?

http://www.php-fig.org/psr/psr-4/
Knowing about WordPress and the typical use case, what do you use instead?
Fabulous article, elegant design. Nice touch with the NYT logo and a little hiring message console.log'ed:

"NYTimes.com: All the code that's fit to printf()"
"neoliberal market fundamentalism... profligate consumption... mega-mergers.... trade agreements.... health of the environment"

Exactly the type of talk that encourages "it's a commie conspiracy!" lines of thinking (when we likely are making real problems).

My recommendation? Stick to science. Leave "social justice" out of the equation. Ms. Klein should put a sock in it. And not just on this issue.
Cydia Download for iOS 8.3, iOS 8.4 Devices
This is why I've prematurely moved to the next trend, the stop-start-jog-walk-stand-sprint-walk-jog office desk treadmill cycle. The cycle is meant to simulate our caveman activity cycle, with a lot of walking, jogging, some waiting, and the occasional sprint from predators and towards pray. Sometimes I spill my coffee on myself when the treadmill suddenly ramps up from a walk or a stand-still to a sprint, but research shows[1] that things like spilling coffee on yourself induces a slight stress response. Which is great, since I need some authentic stress variables in order to simulate some of the stressors of my hunter-gatherer heritage.

[1] TBA; this trend is too underground right now. The research will follow soon.
> This is a net improvement and therefore entirely justified.

The first does not imply the second. "Our bank is secure because we change out the locks every few days. To facilitate this, all of the locks have their screws on the outside - it was too much work to have someone around to open the doors for the locksmiths all the time."

Interested in hearing how many recent vulnerabilities in WordPress were prevented by not allowing arbitrary writes, whitelisting URLs, and blocking a whole mess of WordPress set headers?

All of them which have occurred in the last year. We've kept up-to-date with our updates, but every security vulnerability which has triggered a major or minor update was prevented not by WordPress updates, but by sensible system security.
The Classic Mac OS API (the "toolbox") had a compacting manual memory management scheme. Instead of raw pointers like what malloc might return, you worked with double-pointers called Handles (different from Win32 Handles), which indirected through a global Handle table. System calls may compact or rearrange the blocks of memory referenced by Handles. If you wanted to dereference the Handle across a system call, you had to HLock it to keep it from being moved, similar to object pinning in C#.

In modern OSes, virtual memory plays an analogous role. We still have a double indirection, but it goes through the TLB and page table.
POST is used to create resources that don't already have identifiers. So, if you're repeatedly submitting that form, your request is creating distinct resources on the other end. If the resource already exists -- if it has an identifier -- you'd use (an unsafe, but idempotent) PUT to replace it.
Thanks a lot georgerobinson! We are really really happy that we are able to make your HN experience an awesome one - I can assure you that the PRO version definitely has more to come :)

We will look into the font changing, it will be on our list.

Thanks again!
The problem is that WordPress is designed as one big airtight hatchway. Any attack that gets through the first hatch has no further obstacles to persistence.

Compare that to any application with a fully-reproducible build step. If it gets compromised, you can discard the container and replace it with a freshly-built one.
Purity is also not the same as immutability. Clojure has immutable data and impure functions, and it also offers good, safe concurrency features. Purity helps with other things as the parent comment mentioned, but it's not necessarily tied to immutability. But I maintain that purity is necessary in the presence of laziness, because it's terribly confusing to reason about side effects when you're building up thunks everywhere.
US Tax payers will be paying for something, considering that the majority of the US economy is private, and the government has to get stuffs done somehow. So if you agree with the goals of a private entity that the government is spending the money on, it's about as good as it could be.
I'd say the tricky part is modeling state transitions in REST. Rebooting is a transition between states as is logout.

Instead of defaulting to RPC, I like to try a few things:

1. Find some abstract resource that represents. POST to reboots to create a new reboot. In order to faithfully bring the resource into parity with the new state you've requested, the system reboots a machine. A GET to reboots should give you a list of previous reboots. Updating a reboot record might occasionally be necessary as well if an error occurred.

2. Model the state transition as simply another state. "Rebooting," for example, might be a state you can transfer that represents on -> off -> on.

I'll admit they don't roll off the brain as easily as calling the "reboot" procedure, but I also typically find that it brings a good amount of positives as well. For example, the ability to create reboots brings with it the ability to get a record of those reboots pretty trivially (if you're storing requests).
see Fred Brown's "Answer" at http://www.roma1.infn.it/~anzel/answer.html
Nope, he didn't follow that, he had a bunch of exceptions coded in his autoload function.

He also had a bunch of functions where a function in one class nothing but call another function in another class. He also had way too many classes.
Most people would be fine with a static site generator like Jekyll and a third-party commenting system like Facebook or Disqus. As a bonus, it costs pennies to host such a thing on S3.
Unfortunately, I can't download it for my android phone, only a few are supported. But it's great that MS is releasing on platforms other than windows. Even though right now, the Windows phone market is tiny, the more they open up their products, the more awareness they will gain for their platform.
TaiG jailbreak iOS 8.4 IS AVAILABLE?
I like your point about software for ML, vs software for decision making. I reckon there is a lot of existing software for decision making, but it is focused around particular domains/industries. A few months ago there was some news about a new startup offering experimental design as a service -- that's another related, seemingly under-explored idea.

Branch & bound solvers (aka combinatorial optimisation) as a service doesn't sound crazy to me, but perhaps one would need to think very carefully about the market.

What kind of customers would this service have?

If you are aiming to win customers by offering a cheaper service than alternatives, then I suppose the individual customers would need to be only the ones where it made more sense to rent this infrastructure instead of invest in their own. I.e., they would need some usage, but not usage heavy enough to justify investment in their own infrastructure, which would be cheaper for them in the long run.

Might have to think about data-security issues too, if commercially sensitive data is being uploaded to the solver back-ends.

Context:

I have worked somewhere that internally runs a service vaguely similar to what you describe. E.g. licensed commercial solver, sitting on a server with a decent amount of memory and compute, used as a back-end by various services to solve sufficiently valuable business problems for clients.

If one built a service like this, another idea is to keep it to yourself, and partner with some operations research consultants, then go directly after the business problems.
Weird for a service that wants to be universal and independent...
Updating plugins often breaks things. For instance, I updated our AD plugin for a company blog a few days ago and no one could log in. I had to do some research and eventually the plugin was rolled back from backup.

Can't wait to see what auto update breaks.

Not a fan of Wordpress. It's a lot more work than it's worth.
Honest question: for the rest of us who can't write our own blogging platforms but are able to roll out our own hosting for a blog, which one would you recommend?
Sounds more like the old adage about how when you're holding a hammer-
Amtrak Says Shortfalls and Rules Delayed Its Safety System
Considering that a good many "music player" are basically written atop browser rendering engines... they're equivalent in some ways. Plus, they have the added overhead of checking tens of thousands of files for changes (if they do so on each start as some do).
There was this discussion on HN about the work of a guy who built an e-ook reader for his nearly bling uncle.

https://news.ycombinator.com/item?id=8177117
Love to learn what biblio scholars think of the digital age. It strikes me that though we have mastered highly persistent and physically robust methods of data storage, the machine languages we actually consume and transact in shift so rapidly. . . digital data strikes me as actually far, far more delicate and ephemeral than ink on paper.
With this logic, you are simply making argument that those making any pre-required invention is more important than any later invention.

Try making light bulb without glass blowing knowledge.
Try making light bulb without electricity.
Try making light bulb without food and water.

Of course, you can't make something useful before is is invented. But that doesn't mean the invention must be hold at higher important.
Crazy Way to Paint Patterns on 3-D Objects Is Like a Cartoon Come to Life
I started studying to fly when I was 16. Judge preemptively revoked my driver's license, so I figured I'd fly just to show him how petty he was. Up til then, it had just been JetFighter II for me.

This article nails it in the opening. I don't remember a whole lot about my first flights (well other than almost hitting a tree - JF2 was mostly carrier landings so I had bad habits). But the feeling of pushing the throttle, watching the marks turn to steaks, and the feeling of holy-shit-I'm-flying -- it's amazing. I recommend getting a first lesson (should be cheap-ish) just to feel that. In nearly 20 years, it's one of the top physical experiences I recall with exhilaration.
Compared to those stuck in poverty, computing can recover with relative ease from that kind of setback. Computing has boatloads of money and loads of momentum to overcome obstacles; people in poverty only have despair and oppression.
> Most people

We in technology are not "most people".
I'm not necessarily here to defend WordPress, but, I agree, a compiled static site does make sense for the HN user's blog, but you're not typical. What about the neighborhood barbershop that needs a website and likes to self-publish blog articles a couple times a week? What's the best solution for them?
>WordPress's code is badly designed and written in a language that I no longer believe serves the best interests of the Internet in general.

It's 2015. This is not your grandparents PHP.

Besides PHP serves the largest website on Earth (Facebook) and a good 20% or more of the rest (via Wordpres, Drupal et al).
How does it handle

<tag id="1"> data </tag>

?
Exactly, you could have every window and door barricaded up with steel and someone could still come along, take some tiles off the roof and get in easily that way.
What plugin are you using to "hide" Wordpress?
I'm visually impaired and tried everything mentioned in this thread. VoiceOver on iPad or Marcos is the most user friendly comprehensive and stable solution
>Hosting a website is not a fun weekend project you get from Target/Walmart as a DIY kit.

Why? It's not like most websites are mission critical.

Heck, even if a major business website went down for a couple of days, it wouldn't be that much damage anyway compared to other things that can and regularly do happen to the supply chain or market...

>making it 'easy' and 'safe' to just throw up a website anywhere is an excellent way to get hacked

Yeah, and so? Getting hacked is the end of the world?
Angie: An AngularJS Inspired Node.js MVC
Found a bug in the app that allowed me to get the pro version without paying. Email is in my profile if you want to chat. Would prefer to not make it public info :)
People always beat up on software that has security vulnerabilities.

The thing is, the auto update feature is not an affirmative defense for the criticism. There are probably plenty of legitimate defenses out there - developing secure software is quite obviously something that is hard to get right.

But offering auto-updating is only a defense against arguments claiming that updating WordPress is a pain in the ass, not people claiming that the codebase has lots of security flaws.

You also can't use other software being garbage as a defense for why some other piece of software isn't garbage.

You have to evaluate the actual merits of WordPress in regards to the code quality, chance of being exploited, etc. It updating automatically when exploits are made public is not the same thing as not being vulnerable to frequent exploitation, nor are other frameworks failing in some other way exoneration for any failings WordPress might have.

To be clear: I don't care about WordPress, and do not have a stance on whether or not it's great or awful. All I know for sure is that it is certainly quite popular.

But this article is built upon a shaky premise and lots of logical fallacies. If you want to write about how awesome it is that WordPress auto-updates, then write about it. Just don't try to use that as a defense for criticism about other aspects of the codebase.
The Net Awards 2015 – Voting Started
Bindgen has a compiler plugin too: https://github.com/crabtw/rust-bindgen#macro-usage

Also, FYI, https://github.com/rust-lang/rust/issues/10530 covers taking a Rust lib and generating a C header file.
Thanks, I have looked into that before making my own solution, we prefer self-hosted solution.
The most unassailable answer is that the procedures were worked out before GPS equipped airplanes were in the fleet, and even today, GPS is not required equipment for flight in the flight levels (and many older jets are not equipped, especially older freighters).

Other reasons are: the transponders that ATC (and other aircraft) interrogate report pressure altitude (uncorrected, meaning using 29.92 inHg as the standard).

A sensitive altimeter can be had for a few hundred dollars and requires no electrical power (unless lighted) and basically no service throughout its life.

To your last point, anywhere it matters (below the flight levels), pilots are using a local altimeter setting on the altimeters, often from the ATIS (automated terminal["airport"] information system) or from ATC. Of course, for takeoff, it doesn't matter. You're generally climbing at max available power or are doing a reduced power takeoff in aircraft so certified and on runways without obstacles to worry about.

On approach, you're typically following a precision approach path provided by a radio signal (ILS includes lateral and vertical guidance beams) or that is GPS-based (where you have similar navigation performance levels provided by WAAS augmentation). There are non-precision approaches where the altimeter setting is more critical, but I can't recall the last time I had to fly one of those for other than training purposes.
The bugs are coming from everywhere.

In my view, the worst ones are the ones coming from core. They've come from old code (i.e. the comments XSS due to overly large comments) or from including other libraries (i.e. genericons vulnerability).

I think this sort of stuff is bound to happen since WordPress is slowly becoming the kitchen sink trying to keep up with all demands of the users.

The good part is:

* They are increasing their unit tests coverage.

* With auto-updates, the huge amount of sites that use WordPress are not left in the dark. So I consider it a feature even if it comes at a price. When the software is being used at the scale that WordPress is, it is a needed feature.
Algorithms Are Eating the World
In 1962, a college student answers an ad: “Mortuary Assistant required”
xmms, audacious, etc.

When I went from win -> nix so many years, all I wanted was a music player with the interface that of winamp2. xmms gave that and I was happy.

But then I discovered mpd+ncmpcpp. Really great if you have large music collections, have been using it since.
The nice thing about warm-blooded animals targeting a narrow body temperature range is that our genetic and protein structures can be much simpler.

A cold blooded animal has to have a wide selection of proteins to do the same job at different temperatures. A warm blooded animal needs just one.