skysight-inc/HackerNews huggingface dataset:
I hoped for a minute that they shared their complete implementation; anyone aware of a recommendation system that can scale to millions of items, be updated as soon as new items come in (no full graph recalculation) and take multiple inputs (ratings, saved in library, etc)?
>> SourceForge.net is owned and operated by Slashdot Media. Slashdot Media is a DHI Group, Inc. company.
"Earn profits by syncing your trades to the lead investor."

So they always make profits? That's very impressive.
Career Advancement for the Low Price of Your Soul
Rand Paul did not support net neutrality.
Submitter's username :)
Companies are made of people, and the people writing the code certainly do, IME. (In some companies that will have little bearing on the company's decisionmaking, but I view that as an indictment of those companies' processes). It's not something that immediately jumps out, but having written code for a while with higher-kinded types available, it would be horrible to have to expand that out into cases.
To be honest it never did.
Rails was far too full of magic, security holes, shitty architecture that fell apart under even small load to be taken seriously, and yet it was.
The rest of us carried on quietly delivering quality apps, a bit baffled by the rails brogrammers who got their thrills annoying zed shaw with penis pull requests in github.
Then they moved onto the next shiny piece of shit, nodejs, and made that kind of sucky too.
Agreed in part, I differ in how much blame I put on the insurance mechanism.

What I see as the main structural problem is the offer of pretty much blanket protection from the market that the people/govt give to the pharma companies. Many shills continue to argue that this is necessary for pharma to make progress.

The problem is that this entirely quantitative question: how much protection should pharma companies receive that would still not get in the way of real progress?) is given a blanket answer by fiat. No one knows the answer to this quantitative question, and neither is that dollar amount a constant of nature. Any mechanism addressing this problem should have a fast feedback loop.

Rather than subverting the market, one should actively create an efficient one where the people/govt and the pharma companies negotiate the level of protection that they can both agree on. Patents are a mechanism that largely nukes this negotiation in completely favor of the pharma companies.

A parting thought borrowed from Upton Sinclair : if the justification for patent protection are high dev costs, it only ensures that the dev costs will be kept high to enjoy the (dis-proportionate) protection.
In spite of account hijacking, GIMP was still downloaded by almost 15k people this week.
Six days ago they took over Audacity project as well, which was downloaded by more than 150k this week[0].

[0] http://sourceforge.net/projects/audacity/
I agree, with the (silly?) distinction that it's not "hiding" like a secret key, it's just "not showing to the whole world" because they never had a good reason in the first place IMO. Had they not published them, it would address the privacy concerns some of us have, and happen to band-aid over the easily factorable keys too. I guess I'll agree that's not really a legitimate reason to make them "hide" them now... it's mainly my preference for avoiding metadata leakage. I shouldn't have focused so much on factoring.

Just in case anyone is still reading, some rough analogies: Would you publish intermediate state data from a hashing or signing process? Would you publish your users' password hashes (even w/ scrypt and robust character set+length requirements)? Would you re-use Bitcoin addresses that have spent before?[1] Would you add a feature to an SSH server to return users' public keys to anyone on the internet? Would you have GPG auto-publish new keys to keyservers? I see these as not usually fatal, but not smart or necessary things, somewhat similar to this.

[1] One of the justifications for address rotation in Bitcoin is that once the address has spent, its 512-bit ECDSA public key is known, rather than just a RIPEMD160(SHA256()) hash of the public key. Absurd paranoia, lack of understanding crypto, or defense in depth?
Rails still wins on one very important metric: development speed. Thanks to the rich ecosystem of gems and succinct API I can get something up and running on Rails fast. In the early stages of a project that often counts for more than anything else. Even for a pure JSON API backend Rails still beats anything else I've tried.
Children exposed to several languages are better at seeing through others’ eyes
Test Drive Acumatica Cloud ERP and CRM for Free
Yes, because Clojure and Go used soooooo much more than F#, Scala and Lua (among others).

Rails was nice when it came out, other languages/frameworks caught up. NodeJS non-blocking IO was nice when it came out, other languages/frameworks caught up. Now that you have those 'features' in other languages (Play for JVM and ASP MVC on .net to name two), some folks gone back to those platforms while others stayed in Rails/NodeJS. Only the freaking hipsters - look at me I have a blog - developers are switching platforms every 2 years for the next shiny thing.

(and I know there were other languages/frameworks that did similar as Rails/NodeJS but just never caught up)
Why is no one considering investing offshore? Is it really that risky?

I've seen some ridiculous returns on offshore funds. Have a look at some of the Southern African funds (though it does include non-SouthAfrican funds as well):

http://www.morningstar.co.za/
Had also mentioned the negotiating part - but the history shows, that there isnÄt that much interest from the insurance companies to really keep prices low, as they are able to always get more money from their "clients" via our regulators.

So even here, where the system is probably better then in the US, it could be improved massively via regulation, without killing all profits or even the investments on R&D by the companies.

But the political will seems to be missing.
I don't think anyone cares or should care about easy-to-break encryption. Encoding and decoding your messages has a cost, there needs to be a benefit beyond "looking cool".
SSH has SOCKS proxy support built in, no need for squid and such unless you need to do more advanced things. Just start ssh with:

ssh -D 8080 myuser@remote_ssh_server

You can then set up your browser's proxy config to use 127.0.0.1:8080
You'd have to take that up with the hardware manufacturers, I guess. It's not like Microsoft writes said drivers and if AMD chooses to submit a DirectX-only driver for inclusion in the OS then where's MS's fault?
He meant Werner Koch, the guy who is maintaining gnupg
A few months ago, he asked again for donation, this time he got "good media exposure" and got funded.
cf https://news.ycombinator.com/item?id=9011138

Facebook pledged to donate $50,000 a year to Koch’s project.
Godzilla finally gets citizenship in Japan
The Crossrail project is one of the world’s most ambitious engineering feats
And, FWIW, Ruby is still a lot of fun to develop with. Not sure if developer happiness is a good metric for selecting frameworks though.
S/MIME has very little adoption - the kind of people who care about encrypting their email are usually the same kind of people who don't trust the CA system.
How to manage project scope and deliver project successfully
http://www.quackometer.net/

edit to add: Not mine, just a site I used to know about that fit this description.
Compare it to linux git, it's about 10-20x slower on same hardware
Has anyone got an encrypted email from facebook yet? I uploaded my key and ticked the box, but the last notification I got was still in the clear.
I sympathise somewhat with what the author is saying. The iWatch is the only Apple product that doesn't 'move' me.

That's all subjective though, we're going to have to wait for the numbers. http://vr-zone.com/articles/apple-watch-sales-projections-lo... - but as with any, take them with a pinch (bucket?) full of salt.
I have actually lived half a kilometer away from a nuclear reactor. I didn't think twice about it. Itwas a small research reactor at a university campus, of course, but nevertheless, the reason I wouldn't want to live right next to a big energy production reactor is not that I would be afraid it blows up; it's that the plant is a very big building that involves a substantial amount of people, materials and security measures nearby.

That is why it makes sense to build the reactors slightly away from population centers. Not to protect the population, but to avoid annoying it with the presence of a huge energy factory.
TỐC ĐỘ LOAD WEBSITE ẢNH HƯỞNG ĐẾN BÁN HÀNG ONLINE NHƯ THẾ NÀO?
Hackers Scan All Tor Hidden Services to Find Weaknesses in the 'Dark Web'
As this is the second time I see companies complaining on HN about the short deadline, and there seems to be a consensus that transitioning to another payment provider realistically always takes more than 5 days, you might consider having a longer default deadline that makes it possible to transition in time. Just my 2 cents.
Agreed, that is a pretty useless homepage. Their github has more useful info:

https://github.com/ufront/ufront
Cygwin anyone?

Cygwin is just a DLL for API translation with an associated package manager (Though many people think its more heavyweight than that and consequently dont like it).
The install process in the readme is recommended for your local development environment, not prod.

I'll be the first to admit our documentation needs more work. If you have any questions about installation you can email me - gene [at] wealthbot.io
A Spreading Activation Theory of Memory (1983) [pdf]
How to Outsmart the Machines
Stop money laundering so our kids can buy homes
Funny idea - what if all the moves and chat messages in World of Warcraft were recorded, and in the future would be replayed for spectators to watch? It would be an exact representation of peoples lives while they were playing WoW. Somewhat eerie.
What will happen if I run Audacity installer from sourceforge?

I have done that an hour ago. Should I be concerned?
I don't think so. Development speed in the Rails ecosystem is slowed down by the gems tendency to mess things up with very liberal monkey patching.

Continuing to use Rails today is like staying with PHP yesterday, you continue because that's what you know the best and that you have heavily invested in, not because it's the best out there.

EDIT:

* My best alternative for now: Django

* The Rails community is awesome

* Ruby is awesome

It's just that Rails grew too much as a hairy ball now.
I'm thinking "looking into a tiny projector focused on your retina", but I'm having a hard time imagining what what would be like, since I've literally never experienced anything like that. Looking into a normal projector wouldn't be comparable really, as the focus for those is a field much larger than your retina. You'd need something with a lens that would focus it down to dime-size or smaller to get a similar effect, and I doubt you'd want to do this with anything more powerful than a pocket projector. Might be a fun weekend project to hack a new lens system into one and see what it can do if the internals are even hackable enough to make something like that possible (I'm thinking focal lengths and lens types).
Windows 10 implements mDNS and DNS-SD.
> What is that incentive

Those people are and will be paying the pensions of the current voting population.

QED.
Agreed. BTW my old boss said the same after Chernobyl: he used to be worried about nuclear safety, but after Chernobyl, where everything went as much wrong as it can go - you have an unsafe type of reactor, incompetent staff blows it up, the accident is covered and evacuations are delayed, etc - and still the death toll is much smaller than the impact of coal mining, which is the practical alternative picked by e.g. Germany after Fukushima.
10 Helpful Docker Tools for Developers
Oh, nice! I guess I won't have to clean up and finish my proxy script then :)
And what's the best out there ?
If you didn't know sourceforge have back-pedalled 2 days ago and said they'll stop bundling the crapware in the mirrored projects:

http://sourceforge.net/blog/third-party-offers-will-be-prese...

The author, and a lot of the commentators here, don't seem to have seen that announcement.
People reducting Rails to a framework used to "generate HTML" like the author have a quite narrow vision of what Rails is capable of in 2015. It's perfectly possible (and easy) to use it as the backend for an API and there have even been moves towards getting out of the classic HTTP request/response foundation of the framework (ActionCable, ActionController::Live to name a few).
Nope. I did get a 50% pay raise though for the limited contracting work I did with them after the summer was over though, which turned out to be a lot of money for a student.
I'd like to disagree. When Google Now reads my email to track my delivery package number or flight number, it's my data. When it understands that I like sport team X, it's my data. When it knows where I work and live to ask Google servers the weather or how long it would take to go somewhere, still my data used as the request base.

When Google(+) Photos auto-tags my photos, still my data, although I'd admit the IA training requires a big amount of photos.

Looking at https://www.google.com/landing/now/#cards ; it's obvious a lot of those need online information. It's not obvious that the data source for requiring those online informations has to be in the cloud, or combined from multiple people's data.
> over 1000 people died from evacuation-related issues.

As if the fact that a very very large tsunami hit a densely populated area did not have an impact.

Of course, a lot of people were killed by Fukushima - due to the shutdown of other nuclear reactors, which necessitated reducing electricity consumption, i.e. turning off A/C in buildings, effectively killing lots of old and weak people.
When Do You Need Mobile App Test Automation
If your old account is listed here, you getting fuxxored:

http://sourceforge.net/u/sf-editor1/profile/

http://sourceforge.net/u/sf-editor2/profile/

http://sourceforge.net/u/sf-editor3/profile/

Edit: added http://sourceforge.net/u/sf-editor/profile/ which includes MySQL and a few other high profile projects.
http://en.m.wikipedia.org/wiki/SAS_Institute
So what decent release tarball storage services are there today if github's autogenerated release tarballs don't do it for you?
One of current cohort going through the Techstars Barclays Accelerator in London managed to get the Crossrail project as a customer: http://basestone.io/
They do mention that in the 2nd paragraph and repeatedly throughout the article as CF. I found the article to be a nice primer on the topic as it listed common approaches to the problem.
> Apple doesn't directly make money from your data, they just use it to improve their product

Apple improves their products for several reasons, but as a for-profit business the main reason they would use some of their limited capital to "improve their product" would be to make money.

The details about how a business exploits user data is not that interesting. Arguments about this kind of minutia are a distraction and a waste of time. The problem is, as you say, the fact that they collect data at all.

> That means gimped Siri

As Dan Geer said regarding the inevitable software-industry complains about liability legislation

"Yes, please! That was exactly the idea."

Some people may wish to trade their future privacy for whatever clever trinket is being sold. I believe that is usually a bad trade, but they have the right to make that kind of choice. What is not being discussed is how the people that use Siri (and similar live-microphone-with-network-access products, including newer "smart TVs") are making that privacy decision not only for themselves, but they are also imposing their choice on everybody else the microphone can hear.

In his recent (highly recommended) talk[1], Aral Balkan suggested a very interesting model, because there is another product that is well-known to adversely impact the people "near" the user as a secondary effect: tobacco. Siri, Amazon's Echo, and most of Google's services are like software "second-hand smoke". Like smoking, I don't care what you do in your own home. What we need - at a minimum - is new social conventions/etiquette where you ask permission or step outside before enabling any of these recording devices.

[1] https://projectbullrun.org/surveillance/2015/video-2015.html...
> I'm pleasantly surprised by the feedback on this so far.

Why are you surprised? If gun carry is allowed and common then any gun-free zone (expect few well guarded places like court rooms) is completely insane.
I know it's been beaten to death. The cloud has been winning over last decade, we'll just have to wait for the next wave to come and bring back the intelligence next to the user.
This is the sort of behavior you get from a company that's lost, and is now trying to extract every penny they can from whatever shenanigans they can get away with.

If they have no future brand value to be concerned about, then, from a game-theoretic approach, it's actually a pretty rational profit seeking move. (As long as they don't incur any downstream liabilities from outright illegal activity for which they might be fined, or successfully sued - if there is any entity left to sue)

Of course, the game-theoretic response from the entire internet community is to make sure they never, ever, for any reasons whatsoever, ever click on a link that starts with "sourceforge.net"
Or, you know, increase public funding for research...
AIUI Facebook made a point of hiring only programmers in their early stages, even for roles that weren't primarily programming.
We also use personal information to help us create, develop, operate, deliver, and improve our products, services, content and advertising, and for loss prevention and anti-fraud purposes.

We may also use personal information for internal purposes such as auditing, data analysis, and research to improve Apple’s products, services, and customer communications.

https://www.apple.com/legal/privacy/en-ww/

No time limit specified = No time limit
Then why are those hundres of mirror accounts still online? There is simply no excuse for that.
>it could be a software issue

They can still do some tests. It's not like wiping the hard drive helps solve software issues.

>FDE is good for one loss of control; after that you should assume compromise.

If the threat model is a malicious actor, yes. If the threat model is accidental plaintext password leaking, there is a huge difference between the scenarios. I could construct a similar argument against password hashing on servers...
> And if I never have to parse the output of ls -l using cut again, I will be a happy person.

Try stat instead, e.g.

$ stat -c 'NAME: %n; OWNER: %U, SIZE: %s' *

also supports --printf (see man stat).
4000 EUR is very comfortable living.

- ~800 EUR for a nice 1-br condo in a central location
- ~100 EUR el./internet/tv/3g
- ~100 EUR for transport (these motorbike taxis and bts rides are adding up).
- ~150 EUR for co-work membership.

= 1150 EUR fix per month.

Now with the rest you can go eat and drink. 100 EUR = big nightout, 50 EUR dinner and drinks, 20 EUR low-key dinner with drinks, 4-10 EUR just dinner outside.

Add another few 100 EUR for a visa run every once in a while.

Also don't forget that you're likely still paying for some stuff back home, insurances, etc.
Schedule for Meeting C++ 2015 released
I think Django is winning in a lot of points compared to rails now: Small API, simple to use and deploy, nice performances, comparable ecosystem,...
and GOG.com that pushes no-DRM approach (which is way better than cracking groups for everyone)
I was actually just hired as an intern at an SF company and I believe my job will be very similar. Sales engineering-oriented with my tasks being mainly development-focused to automate manual processes they've been dealing with. I haven't started yet, so I don't know the full details yet. Sounds like you were able to really make the most of it. I hope I can do even half of it like that.
ssh tunnels are not very stable if bad connection, I recommend autossh to maintain the tunnel

http://linuxaria.com/howto/permanent-ssh-tunnels-with-autoss...
You probably missed this part at the end:

PPS: Sourceforge now claims they will stop trojaning software without the
developer's permission, but they've broken that exact promise before.
As a power user and developer, I agree with you. On the other hand I would never recommend casual users like my parents to upgrade from 7 to 8.
Agree; just upvoted you. I guess I will be downvoted now. Recursion at its best.
Show HN: A Game, Made with SVG and CSS Animation
They've probably seen it, just given it no credence
My out-of-warranty MBP needed a new battery because the original battery had started to swell up. I called my local Apple Authorized Service Provider (the only one within 250km) what the procedure was if I wanted to purchase a new battery.

They said I would need to drop off the computer with them; they would order a new battery and I could have it back in a week or so. I said I couldn’t do without the computer and I couldn’t let them access the hard drive (not encrypted) as I have proprietary data on it.

They said I could make the full payment and bring it in when the replacement battery arrives, leave it with them and collect it in a few hours. They insisted they could not replace it with me present and the minimum time I would need to leave it was 3 hours. This is easily enough time to clone the hard disk, which I did point out, politely, but they said this was the most they could do for me.

I ended up buying a third-party battery and changing it myself. It took less than 10 minutes. If it doesn’t last long, I’ll just have to buy a new Mac.

So yes, apparently there are no standards in place for data security as far as authorized service centres are concerned.
Simply add their domain to the hosts file to prevent any accidental downloading.
Right choice of words is a common propaganda device. Read Orwell's 1984 for instance, it's enlightening. An other good one: US department of war became US department of "defense".
> If there really does exist a direct linkage between the brain and the immune system

The interaction of the CNS and the immune system has been more recently studied over the past 10 years. This field is known as neuroimmunology. The most recent and obvious clinical application of neuroimmunology are vagal nerve implants, where stimulation of the vagus nerve can help improve vagal tone and reduce inflammation. Meditation is another well known method of improving vagal tone; however, we live in a society of quick fixes.
Are you talking about software engineers who stop doing software engineering to start doing the other things, or about people who are doing both software engineering and the other things?
So, is this some kind of super-JIT (binary translator) that translates and vectorizes x86 code and then passes it on to GPUs and FPGAs?

Automated X86 to GPU native translation is looking more and more feasible, with some caveats. Especially SIMD operations are a natural fit. But the issues... GPUs are sequentially very slow. Single thread execution is over an order of magnitude slower than for CPUs. Latency between host CPU and GPU is usually significant, measured even in milliseconds. Other than memory bandwidth, CPUs are catching up on GPUs anyways. If x86 SIMD keeps getting wider, we might be just a few years away from CPU and GPU processing power parity.

But FPGAs... Does it place and route itself, or use something like OpenCL as a backend? Or does it make "netlists" out of x86 code and somehow make existing FPGA tools to compile them to chip fabric?

Anyways, when it comes to this product and FPGAs, I believe only when I see!