skysight-inc/HackerNews huggingface dataset:
If I was in a job I hated and had to do it to live, then that is one thing, in which case I would try to spend as little time working as possible. I think most people are in this situation, so it makes sense in that regard.

As a general ethos though, I don't get it. I don't want to be doing something that doesn't fully engage me. I quit my cushy government job last year to go full in on our startup and while the hours are something like 12-15 hour days, it doesn't feel like work most of the time. So in this sense I don't really get the idea of "work-life balance" because the work I am doing is what I want my life to be.

It seems like the idea of having your "life's work" is a luxury or alternatively something that slightly insane people have. In the cases where it works and the vision is big enough you get these outsized figures who do amazing things. Why anyone would choose otherwise - I don't really understand.
$2-300 per quarter from affiliate sales from a vinyl record shop that is linked to from http://soundshelter.net

It's completely automated so any time spent on it is time I want to spend (other than a few user queries).

Should really put up some Adsense but don't want to piss of the loyal users.
Great idea! Although it appears that the Audio widget does not display correctly. Compare:

http://nbviewer.ipython.org/github/stevetjoa/stanford-mir/bl...

https://github.com/stevetjoa/stanford-mir/blob/master/notebo...
I (still) make >1000 on my watermarking windows program at www.watermark-image.com - yes an old skool installer that you dowbload :)

I am using the money to stairstep (as Rob Walling talks about) into the SaaS world with my sleep and happiness improving way to work called TimeBlock (http://timeblock.com)
Facebook published a big new study on the filter bubble. Here’s what it says
There are whole books which answers that question. The one I am aware of is pg's "On Lisp" which explains everything clearly without any "Haskellish or monadic mysticism".

There is also the famous essay "Beating an average" and this very site as a walk of their talk.

There are also SICP and PAIP and Norvig's Lisp Style Guide.

Read the best thinkers.
No, it doesn't. Where in IodineGBA do you see any hand-written asm.js code?

Here's are some quotes from the author of that very library:

"asm.js requires a style of coding only compilers can output. A person writing actual asm.js code by hand would need to be insane as asm.js code required style of coding is horribly disorganized"[1]

"Unfortunately asm.js requires one giant array to put things on. No one in their right mind codes like that by hand."[2]

1: https://github.com/taisel/IodineGBA/issues/16#issuecomment-2...
2: https://github.com/taisel/IodineGBA/issues/16#issuecomment-2...
Thank you for responding, I've sent through some details about my case.
I practice Taoist Tai Chi every week and meditate as much as possible (not enough)

Both gives me a lot of mental energy!
This same oddity (checking a mode flag rather than returning one of two different implementations) shows up in their original code example for "Classes": that mode field and dictionary configuration should not "pass most code reviews" unless the people you are showing it to do not know much about object orientation... the description of the problem they are trying to solve (having different implementations that provide the same interface) should have been handled via polymorphism.

(And as they care about performance, and have tested PyPy, they are hopefully using it, and so the class-based solution is just as fast as the closure-based one, and is going to allow for better decoupling of filter modalities; though, as someone who does a lot of functional programming, the closure-based approach does resonate with me.)
Thanks! You made me very glad I came to the comments section.
Holy shit ... is your space bar broken?
Off-topic: I'm kinda new here, what does GP stand for ?
And third link on HN with little to no interest since yesterday.
Deadly Ebola virus lurked and grew in eye of 'cured' physician, doctors discover
Oh wow small world. That's awesome.

Email me at gordon[at]watchandcode[dot]com. Would love to get your feedback on what I can improve and what other things you'd like to learn!

BTW This is the fourth time today someone has asked if I'm doing a React course. I am thinking about it :)
> First, track decisions as quantitatively as possible

First, doesn't every single programmer based ATS do this currently? Second, as soon as this quantitative information becomes symmetrical (it always does, Google "google interview prep"), how do you prevent coders from gaming ("hacking") the system?
If this is always possible without cheating, then I have definitely misunderstood something about Haskell.

Could you point me towards an explanation how the hiding of stateful expressions works in Haskell in general?

Let me clarify my question (a bit). Are you saying one of the following is true?

(1) You are saying for any program M that uses state (i.e. M's type mentions the state monad in an essential way) but in a pure way, i.e. M's stateful behaviour is not visible from the outside, there is a context C[.] (not involving tricks like UnsafeIO) such that C[M] has the same behaviour as M (as seen from the outside), and C[M] has (essentially) the same type as M, except that the state monad is gone?

(2) There is a 'nice' translation function f on programs such that for any
program M that uses state in a pure way (same as (1)), f(M) has the same behaviour as M (as
seen from the outside), and f(M) has (essentially) the same type as
M, except that the state monad is gone?
..let me just get back on my chair. Just unbelievable. Happy that it worked out for you two.
Apple's flagship OS has been on version 10 since 2001.

Now Windows is going to be on version 10 for a long time.

They should have just called it Windows X, or winx for short :p
...but then why use bitly?
How the Other Half Lives (1890)
...but seriously - your hand is awesome.
That anything happened in the 800's and 1300's is new/s to me.
The title background's (src) image is readable. Don't recognize very many names.
Wow. Never heard of it, but this must be the most amazing software idea I've seen in a while. It's gonna be a playful day :P
You could always, you know, change the code (which is simple) so that an "infinite" expiry date is no longer valid. Line 215.

https://github.com/gorilla/securecookie/blob/master/secureco...

As for "impossible to revoke" well if you have control over your server you can do whatever you like so this falls into the very not-at-all-impossible category. As a baseline as long as there is no personal information in the "secure cookie" there really is no issue at all.
I should mention that this is a side project that became a main project. It currently makes several thousand a month on a consistent basis.
>>Can a typical money transmitter just pretend to handle Bitcoin as well and magically exempt itself from the state money transmission framework?

It has restrictions and depending on how the Trust was constructed, it may not be applicable in other states for certain transmission activities.

>>Do other states consider this kind of trust company to be a bank or a money transmitter?

They evaluate what the Trust was built for,and what the company wants to do in their state, and evaluate whether there is a delta or overlap.

>>What does FinCEN think?

no diff, still have BSA/AML obligations and commitments.
Not to belittle their effort, but if you add the HDMI shield to the main board, you end up with a 24$ computer. That is pretty close to the RasPi 2.
UK Election results: Conservatives on course for majority
Do elaborate ... And what is old/new stripe.js ?
My 2₹ - http://karma-engineering.com/lab/wiki/Bootstraping
Compiling Zabbix from source on first gen Raspberry Pi
Building a Highly Available, Durable In-Memory Cache
In my crazy-ass opinion, if you need upserts, there are problems with your application logic and problems with your database.

Get off my lawn, etc.
But see, being used to hyphens in variable names, I must tell you I can't figure out which one I find easier to read. On one hand, the presence of hyphens and subtraction is a tad confusing, but on the other, I find "balance-sheet" to be generally nicer to read than "balanceSheet", so it feels like a tie to me. Then, on the other hand, you have things like "xs.for-each(x -> x + 1)" vs "xs.forEach(x -> x + 1)", where I really like the hyphen.

Anyhow, I feel that this is the kind of feature you just stop noticing after a while. I think we often tend to assume that what we are used to is more readable than what we aren't used to, but the brain will adapt to nearly anything. Doesn't mean we ought to go crazy with changes, but hey, I like hyphens.
I like using vipe from moreutils ( https://joeyh.name/code/moreutils/ )

find . |vipe | xargs ...
>And if MySQL wasn't robust then YouTube, Facebook, Twitter, Alibaba, LinkedIn etc wouldn't be using it for core parts of their infrastructure. It's definitely robust.

Either that or they have staff and infrastructure in place to deal with the lack of robustness. Yes, you need to be prepared to deal with corruption anyways, but the more robust your solution, the more time is left to deal with other things.

Over the years I have seen multiple instances of MySQL table corruption, index corruption and mysqldump exiting with a zero exit code after aborting mid-dump due to table corruption.

Of course I was prepared for this and I always had backups ready, but it was still time-consuming and annoying.

With Postgres I've yet to see any kind of data corruption even though my postgres usage is much heavier than my MySQL usage.

But this is why I said "anecdotal evidence": For me personally, Postgres has proven to be way more robust than MySQL. Is this my inability to properly administer MySQL? Is it me being unlucky with hardware (though Postgres is fine on the same hardware)? Is it me just being unlucky? I really don't know.
Not sure if this is a recommended approach, but I did something similar recently.

I create a guid on the client, and send this with the request. If I get a connection error or no response, I re-query with my client side id to see if the transaction succeeded.

I'm sure there are downsides to this, however for now it's simple and seems to be working well.
"but let's not kid oursevles: there's nothing intelligent here."

There are good indications now that brains work repeating a simple probabilistic algorithm in a multilevel fashion. Intelligence is not a magic property, but a kind of "searching and sorting".

" It is much easier to impress upon the lay person an idea involving "intelligent machines" than it is to explain what we actually do."

In my opinion, the opposite is actually true. No serious researcher want to be associated with those freaks that are waiting for the end of the world. They have a reputation that they need for making a living.
Even faster, I set my prefix to just Caps-Lock. See https://github.com/mifix/dotfiles/blob/master/tmux.conf#L5
http://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/

"Virtually every feature in PHP is broken somehow. The language, the framework, the ecosystem, are all just bad. And I can’t even point out any single damning thing, because the damage is so systemic. Every time I try to compile a list of PHP gripes, I get stuck in this depth-first search discovering more and more appalling trivia."
Support education app in Indiegogo
I would just be happy if they offered the same as iOS and WP, access to OS APIs to all languages.

However I bet the Android team only added the NDK forced by upper management, given how little care they give to it.
Is there a CVE for this? This seems like it probably has security implications.
Show HNs can't be fundraisers. You need to have something that people can play with now.

https://news.ycombinator.com/showhn.html
Sorry, I'm a bit old school in that I prefer text over videos, and desktop apps over mobile. Text on desktop can more easily be edited and perfected before being sent out.
I like the idea of a community feedback platform though -- would definitely use it if it were multiplatform.
It's behind a tall fence. You'd probably be in a bigger trouble for trespassing.
There are several layers, for starters, each with its own protected session keys. At each layer, and after derivation (this paper was specifically about recovery of the MAC key so I'll not mention anything else) there are two symmetric keys, one for encryption (AES256, in a number of modes) and HMAC (HMAC-SHA256). Session keys are comparatively short lived, with a life span normally measured in weeks.

The OSGP analysis has attacks on key generation, known-plaintext in padding, and an attack on the OMA digest itself. These don't apply to our protocols because (a) we use a much stronger and standard key generation sequence and (b) HMAC-SHA256 isn't vulnerable to padding attacks (directly) or the reversibility attack.

All that said, I will never claim that we have a perfect implementation, but our devices are field upgradable, they do get upgraded, and we have quite a bit of attention on attacking our devices already. Our customers have been pen testing us for years.
> they are changing Stripe.js to now serve up the data in an iFrame so you can keep using their product more or less like before but without heightened requirements

I imagine they're changing things to be like Google Wallet, where you use a pop-out window to type your credit card number into (just the first time, it's save on their side after). That way you know you're giving your CC just to google.com by looking at the URL of the new window.

Stripe's current JS-based version has better UX, but it's a little scary if the merchant whose site you're entering your card into has no legal security requirements. On the other hand, it's a purely theoretical problem afaik - I haven't heard of any breaches resulting from merchants which use JS third party payment solutions having their websites hacked to serve up bad JS.
Very interested to see your blog post. I was under the impression that if the data is collected in an iframe with a same-origin policy, that malicious JS in the containing page wouldn't have access to form elements (or anything) inside the iframe.

Of course if you have malicious JS in your DOM, there's nothing stopping it from rendering it's own legit-looking credit card form that simply passes data off to an external URL.
Show HN: My first app after learning to code Swift with Thinkful
For me, I think the most important reason for working with lisp and its variants is that it allows you to (and you should) code from the middle.

When I first started programming, and for a long while, I'd think top down. What do I got? Then, how can I iterate through that to do the operations I want and then build up what I need?

With lisp, the ability to reuse code in closures is so easy, you can afford to think a different way. What are the most basic, clean and simple, operations I need to do? (not necessarily in order I need to do them) This includes conversion, summing results, iterating through a structure, etc.

After writing functions for those, you can quite easily plug them all together without much thought.

You end up with code that is non-redundant, clear, reusable, easy to debug, and flexible.
At the simple side of things you can write your own implementation and use known test vectors to verify that your implementation is acting the same as other implementations. That should cover interoperability.

Some of the issues in cryptography implementation are subtle things that can affect it like timing concerns, if you have a time optimization it can be exploited to leak information on the data or the key. This is one thing that a less experienced developer may fall into.

There are other side channel attacks as well that one needs to be cautious about. Optimizations for power usage may also leak information.

Part of writing crypto is to optimize for security on the expense of time and power.
I'm developing a way to do that but I am not near any potential survelliance flights to test my ideas. Sounds like you're in an ideal location though! Let me know if you'd like to work together to build a robust solution for localization of DRTbox/Stringrays.

Private Message me on reddit if you'd like to discuss this further in private. My username is adsbadvanced.

Or post a way to contact you. I'll check back in a few days.
42% of people using dating app Tinder already have a partner, claims report
It would be moral and fair for them to use their practically-unlimited budget and power on slurping up public data — licence plate readers, regular cameras on planes (without the power to see into private domiciles), public twitter feeds, public facebook feeds — and fight crime based on that.

There is no moral and fair reason for the government to secretly break their own laws, eavesdrop on private and privileged communications of their own citizens, and peer into areas previously designated as off-limits without a warrant. So mass surveillance itself isn't a huge problem, but the current implementation and the way it was put into place is.
Wow, yeah, he certainly made it sound like CC got him there in a more significant way.
I've seen HR departments that write at least 2 five star reviews a week on Glassdoor. Glassdoor still hasn't noticed.
A fantastic investigation. These are always fun to read but also scary as in how bugs at so many stacks combined together to generate a problem. So you might end up being the only one to be affected by something and if you don't have the technical expertise to figure it out then you are in a big trouble.
In long and complicated mathematical expressions I find myself selectively using whitespace to identify logically matching pieces of code, similar to LaTeX' \left( and \right). If I couldn't write (x-y) that wouldn't be possible in the same way.
I met mine on Tinder, 7 months ago. We moved in together last month. Before that I'd done the "normal" chatting up someone in a bar (that's how I met my ex-wife), or meeting through acquaintances.

Online dating can work really well, if you approach it the right way. I still have loads of friends among girls I met through one dating site or another as well, so it can help you find girl friends as well as a girlfriend.
Quickly Create a Professional Joomla Template
You mean the checksum bit right. Letting a corrupted packet pass through? Funny that it was a corrupted length value that caused the problem which I seem to recall one of the big attack vector when its intentional.
There are alternatives to Zookeeper. Here's our work on using a NewSQL DB (NDB) to do leader election. Instead of using ZaB as a replication protocol, it uses transactions with low TransactionInactive timeouts (5 seconds), placing a ~5 second upper bound on leader election time. The upper bound increases dynamically if the number of nodes is >100.
http://www.jimdowling.info/sites/default/files/leader_electi...
One of the thing Cheney says in his talk about gb is that nobody likes the .lock files[1], I see that dart is using .lock files, bundlers also uses .lock files as does rust.

But other languages seems to get away without it.. clojure with lenigen seems to do it nicely.

So what are the problems with it?

http://go-talks.appspot.com/github.com/davecheney/presentati...
I wrote a follow up in my blog (too long to post here) optimising a little more https://wrongsideofmemphis.wordpress.com/2015/05/08/optimise...
She would have been found immediately. Because a tweet is very short.
Wow, you live out in 29 Palms? I grew up in Yucca Valley.

You can live pretty cheaply out there but you also have to deal with all dumb crap out there. It wasn't very pleasant growing up in the schools there.
Hi, work for one of the partners. From what I can tell, your account manager should be able to get you this info, including 99 percentile, if you are interested. This is for round trip from our point of view of course.

Spot checking, you've done better than you think :)

Exciting to see python implementation doing this!
Along the lines of people who think mass surveillance is a good thing:

“The conscious and intelligent manipulation of the organized habits and opinions of the masses is an important element in democratic society. Those who manipulate this unseen mechanism of society constitute an invisible government which is the true ruling power of our country. ...We are governed, our minds are molded, our tastes formed, our ideas suggested, largely by men we have never heard of. This is a logical result of the way in which our democratic society is organized. Vast numbers of human beings must cooperate in this manner if they are to live together as a smoothly functioning society. ...In almost every act of our daily lives, whether in the sphere of politics or business, in our social conduct or our ethical thinking, we are dominated by the relatively small number of persons...who understand the mental processes and social patterns of the masses. It is they who pull the wires which control the public mind.”
― Edward L. Bernays, Propaganda
Indeed, it is. Servers are expensive; everything built for a datacenter is expensive. It's very easy to make a passive chassis for far less than conventional datacenter gear prices.

A lot of cost estimates have been thrown around (here and elsewhere). The highest that I've seen is $4000 per unit. That is simply absurd. The initial run of prototypes was far less per unit, and this was a small batch made to iron out the kinks. Economies of scale and design tweaks will drive this down even further.

The chassis design is actually quite elegant from a manufacturing standpoint. That's something that I hope will be made evident by follow-up posts that delve into more technical detail.
A sufficiently modern language (like, saaaaay, D2) could also give you a type like "closure you don't intend to escape" (let's call this a "scoped closure", or if you will, "scope string delegate()"), and eschew allocation entirely without requiring optimization.
Because for a simple web presence companies here like that they only have to pay $10 a year for hosting their lightly themed wordpress install.
With the old Stripe.js, you serve up the form but the Stripe javascript takes over the form and posts directly to Stripe, so your servers never see the data.

The new Stripe.js will render an iFrame, (Edit:) through which Stripe will send the data, which again posts to directly to stripe.

They basically behave the same way and will look the same way, the only difference is that the iFrame is in it's own Javascript "domain" so that if your site is infected with malicious javascript it can't take over the POST to stripe as easily (although that is debatable).

The former requires really high security requirements now and the latter requires almost none.
wow thanks for sharing, that is awesome!
Syncing data from a third-party API?
You have to pentest only 1) if the web server touches sensitive data and 2) if the sensitive web server being deployed is configured differently from all the other sensitive web servers in that same sensitive environment.

If you're just adding web96 and its configured exactly like web01 through web95, then it doesn't need pen testing.
Unconscious Bias = Bad Startup Branding
I bet you now know a lot about parsing and the relational schemas and managing models now. You'll hit a problem again where this turns out to be valuable knowledge. Even a failed experiment if the problem is interesting enough is fruitful for improving your thinking about hard problems. Once you get past being disappointed over the experience, you'll probably find that a second attenpt at cracking the problem gets you further.