skysight-inc/HackerNews huggingface dataset:
No - I've never worked with Xamarin (although I'll be looking at it in the coming days / weeks for a personal project - it looks quite sweet now). But I've got loads of experience with both .NET and Objective-C / Cocoa.

Most of my experience has been on the .NET platform and primarily on the backend / distributed systems side of things.

However, between 2010 and 2013, I was co-founder and CTO of a tech startup where our main product was a fairly sophisticated native iOS app. Being a bootstrapped startup, I had to do all the tech work myself. So I got a lot of experience with Objective-C / Cocoa that way. On the back of that, I got a contract to develop a native iPad app for the BBC, providing me with some additional experience building an app for an external client.

When I landed on the job market in January last year, I was therefore happy to take either an iOS contract or a .NET one.

I ended up taking a .NET contract. And to be completely honest, large-scale software systems / distributed systems is really where my heart lies. So I'm now pitching myself as a .NET developer only as this is the type of role I'm most keen on.

I'd actually be really happy to take on a role that uses another stack as well. But as a contractor, it's not really realistic to expect a client to pay you to learn a new language / stack :)
Also drove the demise of the great whales. Most of their blubber was used to make margarine.
I migrated my Linode from Xen to KVM yesterday; I had a ticket open and needed to migrate my VM to a different host anyway, so I decided to simply migrate to KVM.

After shutting down my VM and clicking "migrate", the migration actually failed, which was a bit terrifying for a few minutes. I was definitely worried that my disk image went poof and that I'd have to restore from a recent backup. Thankfully, Linode's support was there to kick whatever failed and the migration worked after all.

My VM feels a bit more responsive on interactive session, though I haven't benchmarked anything. (I don't really need to, I only serve a few low-traffic static web sites.)
Meat is always cooked and often charred. Non-meat is not so that way.
I recently did it, took about 10 minutes online I think. I would guess the services make things easier for you by suggesting a default number of shares, and automatically filling in director information etc.

My accountant also would have done it, but I wanted the company in existence quickly so I could get contracts signed.
So, I had a thought, and checked, and indeed, Dietary Fiber is 24-25g from 1998 onwards. Could it be as simple as someone accidentally including Dietary Fiber in Fats & Oils?
Reveal Raises $1.5M in seed funding for Crypto-Powered Social Network
The article makes some fundamental mistakes:

1) It talks about an app that reached #8 in "Top Paid". The more interesting list would be "Top Grossing"

2) It talks about a trivial app that was created with very little effort. While gimmick apps might work on iOS, people prefer to buy actually useful software on the Mac.

The title is still somewhat true: It's unlikely you will become very rich by selling Mac Apps. But you can make a decent living; I currently make around 6000€/month (gross revenue) from two Mac Apps.
KeePass – questionable security
I've been a long-time user of KeePass. I inspected its 2.x .NET source code today and quickly noticed the following issues which I find quite concerning:

The kdbx database is encrypted with AES in CBC/PKCS7 mode without proper authentication. HMAC is nowhere to be found in the code, other than when used for sha1-totp. There are SHA2 hashes that seem to guard the integrity of ciphertext, while these might catch a typical file corruption they will not prevent malicious tampering. Even if the hashes are used prior to encryption, that's still MtE - not EtM.

KeePass likely does not have an online threat model, so attacks like Padding-Oracle might not be applicable, but a lack of AEAD is IMHO highly concerning because it indicates that the author(s) are winging it when it comes to doing crypto right.

Byte array comparisons are done with this function from MemUtil.cs:

public static bool ArraysEqual(byte[] x, byte[] y)
{
// Return false if one of them is null (not comparable)!
if((x == null) || (y == null)) { Debug.Assert(false); return false; }

if(x.Length != y.Length) return false;

for(int i = 0; i < x.Length; ++i)
{
if(x[i] != y[i]) return false;
}

return true;
}

There are many other questionable patterns, code smells, and "I-invented-it" approaches that indicate a non-expert .NET programming skill. They can't even implement a Singleton correctly (see CryptoRandom.cs).

Has anyone ever done a security audit of KeePass 2.x or does everyone just believe that it's "good enough"?

P.S. None of this detracts from the fact that KeePass is a very useful, free utility with a lot of effort put into it. I thank all contributors for making/improving it over the years.
I couldn't agree less. The MacOS app store has made it so much easier for me as a user. Apple might not be perfect, but to compare them to Steam? Just last week I had a problem with a Steam app and getting it resolved was farcical. Not to mention that literally every other time I launch Steam, it fails to see the network (even though all my other network apps are working just fine), and I have to quit and restart it. And when it does restart, just as I'm about to click "Play" on a game, a huge honking ad pops up in front of it. And never once has the ad been of any interest to me. Such a horrible user experience.

At this point I will avoid buying any more games from Steam if possible and just get them from the app store because it's so much easier and just works.

Back when I sold my own software, getting it noticed was nearly impossible. There were about 10 different websites you could submit it to that had lists of new apps (Version Tracker, Download.com, etc.), and eventually they all got more and more spammy until the point where users just stopped using them altogether. Something like an app store would have been a godsend!
uuuh, ok crazy guy.
Thanks. The App is SSL, but the marketing site is hosted separately, so we didn't add the cert. Great advice though. I'll definitely get that added in.
What do you expect them to do? Evidence at the time suggested food X was bad. Should they spend another fifty years running trials to make sure, discover it was indeed killing people, and yes we knew about this fifty years ago sorry we didn't say anything sooner?

It's a tough position and I sympathize with them. I suspect no matter how soon they do or don't pull the trigger, hordes of people will wind up incensed.
I find it really strange the Navy is doing this. Does it actually have an intelligence wing capable of taking advantage of this? And if you thought the NSA was the cyber intelligence wing of the DoD, so did I.
To be fair, abstracting that fact away, the rest of the post is still an interesting thought experiment.
Actually, that's a good point - I hadn't considered the legal ramifications of such a stance. It's interesting that you mention people seeking damages from the creator of the car's software, because that makes the entire situation more complex.

As for the concept of "safer to the community as a whole" - well, the idea is that they're a safer product overall, and this is mostly targeted at the individual (i.e. "if you own a self-driving car, you're less likely to die"). If people have the knowledge that their cars may (in certain situations) elect to kill them in preference of others, then I doubt that self-driving cars will sell particularly well.
You end up in your daughter's bedroom and push dirt around.
Most of these it's my first time using the IDEs, so I'm attempting to give non-biased opinions on them. I could do visual studio community edition, however there's a lot of other IDEs I could do as well.
I just added sublime text 2.
We don't know the details, but I think it's safe to say that if the allegations are true, the Cardinals engaged in a form of cheating. It could be that their cheating had very deep and nefarious implications, but I doubt it. If anything, they may have stolen some secrets that gave the Cards an advantage over the Astros in player acquisition strategy.

What I cannot get over is how absurd is it that the Federal Government has been able to insert itself so deeply into a problem that doesn't warrant FBI involvement in the slightest. Athletic teams have been cheating for centuries. Sometimes that cheating involves ruined careers for both the cheater and the cheated, and sometimes they involve teams losing money. But what they rarely involve is the FBI. And the only times I can think of when they have involved law enforcement have been narcotics or gang related.

To me, this sounds no worse than various other advantages that teams unethically gain for themselves. That our legal system allows for this particular type of cheating to potentially be a federal crime is frightening. Let MLB handle this internally, and play ball.

[edit: holy shit. I get it. The FBI is acting within its legal right (and duty). This is a moral statement about the law that they are tasked with enforcing.]
Almost every salary ceiling is low compared to SV but it's all relative.

It's not particularly difficult to achieve a £100k+ salary in London and you can have a very comfortable lifestyle on a six figure income.
Really interested to see how Bud Selig responds to this. Looks like this is the same guy (Luhnow) who SI did a pretty good thing last year about, reference how the Astros were doing a Ctrl+Alt+Dlt[1].

The cynical side of me says that Selig and MLB will try to maybe milk this for some rating or something, considering the meme going around that baseball is dying.

(full disclosure, Twins fan here, so I'm gonna be cynical about anything that Selig does)

[1] http://www.si.com/longform/astros/

Edit: Guess I missed that Selig retired in January. Damn you, work!
Partially hydrogenated oils do not exist in nature. If anyone finds that assertion confounding it'd be interesting to hear why.

There's some subjectivity as far as "processing" goes. Olive oil is processed mechanically, canola oil is processed chemically, so that's a pretty wide gap that people might fight over. But partial hydrogenation? Seriously?
Here's a list of some of the most thriving languages, measured in the study by their OS support: English, Japanese, French, German, Spanish, Italian, Portuguese (both Brazilian and European), Dutch, Swedish, Norwegian (Bokmål), Danish, Finnish, Russian, Polish, Chinese (both Traditional and Simplified), and Korean.

Taken from http://journals.plos.org/plosone/article?id=10.1371/journal....
Apple to iOS devs: IPv6-only cell service is coming soon, get your apps ready
Hey, he worked on this app for a whole 30 hours. That's like 3/4 of a work week!

In all seriousness, when you figure it out, that's about $15/hr. I think a number of entrepreneurs would give their right arm to make that kind of money right at launch. And when you consider that he's probably going to be selling at least a few more copies of this, the money he'll make off of his time investment will grow.

In any event, I hope he didn't quit his day job to make a photo-blurring utility.
I thought the code review on the build change was a little more enlightening. More honest discussion.

https://codereview.chromium.org/1160243004

(Names removed as don't think they're important to repost. And not intending this as incendiary. At some point someone needs to ask "How much are we impacting usability by stripping features?")

"1 week ago (2015-06-09 02:17:42 UTC) #19

On 2015/06/09 01:34:04, _ wrote:
> On 2015/06/09 01:13:10, _ wrote:
> > Done, but I'm going to voice my opposition to this. When I took over the
> > hotwording code, there were a number of obscure hoops to jump though to get
> this
> > to work locally. They've been eliminated. Having to find these pair of
> #defines
> > and changing them is more obscure to a newcomer than a build flag (that can
> > easily be traced through the code).
>

> What about having a run time flag for enabling hotwording? We would always
> enable hotwording for Google Chrome builds, and check for it in Chromium
builds.
> That way, Chromium users can make the decision to use the feature, rather than
> the Chromium distributor. And it won't require hotwording developers to build
> with GOOGLE_CHROME_BUILD or do any #ifdef hacking.

We shouldn't be exposing feature-enables to end users as runtime switches.

Honestly, I think the right thing to do is for Chromium users to get this by default but have a build switch that can be used to disable it for projects like Debian that feel more strongly about not having any external binary blobs used for anything. I don't think simply disabling this in general for Chromium is correct. It's not true that Chromium by definition should not make use of such blobs, and I think the damage to developers and to more pragmatic users of Chromium-based projects is greater than we should be willing to pay."
> Meat is always cooked

No, its not. Raw preparations of meat are a thing.
Raspberry Pi Official Case
Lots of different channels. Many from Reddit, HN, Quora, Guest blogs, etc.
Exactly. You can spend 30 hours just preparing screenshots in various languages and device sizes, preview video and so on.
Knowing Hung, he'll be too humble to mention his platform directly so I'll do it on his behalf: http://workshape.io

It's a brilliant platform & I've hired a few great people on there.
Pushbullet wouldn't want to have to handle all that data, and you would notice very quickly based on the speed of the transfer (unless you had really good upload).

The only way to know for sure of course is to test it. You could try to send a file between two devices on different LANs and it should fail, or you could try it on an offline LAN.
Thanks! I have created scripts that catch them the instant they drop
With many platforms you can also use a Multi-Domain certificate to use one Certificate with one IP. Let's Encrypt will support Multi-Domain certificates.
Online in about 15 min
> That says nothing about why the systemd folks are entitled to hijacking a kernel flag instead of (more sanely) namespacing their own debug flag

"No, we very much expose /proc/cmdline for a reason. System services are supposed to parse it, because it gives a unified way for people to pass in various flags. [...]
And yes, that does include "quiet" and "debug". Parsing them and doing something sane with them is not a bug, it's a feature."

http://lkml.iu.edu/hypermail/linux/kernel/1404.0/01488.html

> which is the actual bug that was filed (and in turn met with "it's not a bug it's a feature,

And that is the appropriate response to the bug that was filed, with the title "Do not parse "debug" command line parameter".

The bug report makes it immediately clear that this is not really about a technical problem that ought to be solved - no, the dirty user-space programmers should get their stinking paws off of our good kernel command line flags, how dare they!

Kay pointed out in his first comment that there is already a different parameter that turns on debug output only for the kernel; the reporter said he's too lazy to start using it.

And this is not about "entitlement": there is a clear administrative use-case for systemd using the debug parameter: if your system doesn't boot you want a simple and obvious way to turn on debug logging in all of the relevant plumbing code, whether it's in the kernel, in the initrd or during service startup. You shouldn't have to remember five different parameters because then you'll forget one and your outage lasts 10 minutes longer.

If the bug report had been something more like "I've enabled debug and my system failed to boot" without prescribing a particular fix and leaving that at the maintainer's discretion, it wouldn't have been resolved as NOTABUG but fixed quickly.

Of course, a wiser and more socially skilled maintainer than Kay Sievers would have immediately filed a follow-up bug report, or re-titled the bug report instead of lowering himself to the level of the reporter and playing resolve-reopen ping pong. (Fortunately the systemd project also also has some more patient maintainers like Tom and Zbigniew.)
During the early days of Linux's emergence, it was pronounced"Lie-nux", "Lin-ux," and "Lee-nux" by various groups of users. Finally, Lin-ux became the standard pronunciation b/c Torvalds explained that in Finnish his name was pronounced Lin-us, not Lie-nus.

Given that he's spent most of his life in the US, he may have subsequently decided to "americanize" the pronunciation.
There's a particularly interesting bit about changes coming with cellular providers in this article, down at the "What's actually happening" heading. A snippet:

[...] Lakhera referred to the fact that there are pretty much no IPv4 addresses left and that the big cellular carriers really don't want to continue running IPv4 and IPv6 side by side in dual stack configuration—apparently, IPv6-only cellular service is coming. Soon.

The way Apple is addressing that situation is to make sure that all iOS apps support IPv6. However, many servers are still IPv4-only. To reach those, the cellular networks are going to deploy NAT64 translators. NAT64 allows IPv6 applications to access IPv4 servers. Without these translators, IPv6 applications ask the DNS for IPv6 addresses to connect to, but obviously IPv4-only servers don't have IPv6 addresses, so a regular DNS server then returns an empty list of IPv6 addresses, leaving the application all dressed up with nowhere to go. A DNS64 server, on the other hand, creates a "synthetic" IPv6 address that the application can use. The packets sent to those addresses end up at the NAT64 translator, which recovers the IPv4 address of the intended destination using the IPv6 address created by the DNS64 and translates the packet from IPv6 to IPv4. [...]
>I imagine that news.ycombinator.com is a more common Referer than news.google.com in the development community

Really? I'd suspect it to be the other way around. For reference, here are some HN stats: https://news.ycombinator.com/item?id=9219581 .
Ah, thank you, we'll tweak it.
https://www.techempower.com/benchmarks/

Maybe this is more useful?
Objectify Your YML Files
The bourgeoisie
I don't think it's a mistake as my guess is he is comparing with with the iOS app store where this would mean fairly certain success.

I agree with the trivial app comment but I have a unique app which is doing pretty well. However compared to the iOS store it's not potentially self sustaining to be in the top once you get there.
I'm not sure why this fell off the front page so fast. I've been waiting for this article since the last one!
Just keep on asking questions - "Maybe I've missed something - can you run that by me one more time? No, I'm still not getting it, are you sure you're not leaving anything out? Well that doesn't exactly make sense, what about xyz? Whoa, back up, I'm a little slow buddy, you're going way too fast for me. One more time?"

You do have to be pretty loud when doing this, because people will get frustrated with you and be like "Nevermind, everyone else gets it, lets go". At that point you really have to insist. But logical flaws will quickly become obvious.
If you have a hammer everything looks like a ...
The Pardoner's Puzzle
Selig retired in January. Rob Manfred is the commissioner now.
The libraries also weren't updated :) -> see https://github.com/influxdb/influxdb-python/issues/193

The issue behind is that "name" has been renamed to "meassurement" - https://github.com/influxdb/influxdb/issues/2564. They implemented that change on 2015-05-21 in rc31
Boredom is not a problem :-|
Scaling MySQL in the Cloud with Vitess and Kubernetes
> I imagine that news.ycombinator.com is a more common Referer than news.google.com in the development community

I wouldn't be so sure of that; considering my own pattern, even when my reading is being driven by HN, I usually do several google searches for related content, including frequently Google News searches for related news items from other sources, for each page I go to directly from HN. And not all of my reading -- even related to development/startup things -- is driven by HN.
Seems to me that he's in it exclusively for the attention. If he were into politics, he'd probably know when we'd ever beaten Japan[1].

His ideas are so far-fetched they seem more like political satire than serious conversation about the future of America. His solution to illegal immigration? Build a wall[2]! Oh... and Mexico will pay for it, I'm sure they'll be thrilled to hear.

I don't know if it's his vast wealth distorting his cognition or if his eccentricity is what lead to his wealth in the first place but he seems very disconnected from reality.

By the way, he knows how to defeat ISIS, going so far to say his plan is "foolproof" and would defeat them "very very quickly" but he won't tell us what his strategy is [3]. Why? Because he "doesn't want to." He suggests prior announcement of strategies or goals is the reason why the US hasn't beaten ISIS, but anyone paying attention knows the US has been ineffective because of the reluctance to have resources on the ground fighting, coordinating and holding territory. In addition, the sectarian problem in the Middle East is not something Donald Trump is going to fix with his super-secret strategy and anyone who believes it (including him) is delusional.

And then there's the whole birther conspiracy theory back around 2008, where Donald pushed long after it was dead and abandoned by even the most hardcore anti-Obama camps. He made statements calling into question the birthplace of Barack Obama as recently as 2011 on the today show [4].

Starting a political debate isn't my intention but as logical individual it's impossible for me to understand how anybody could take him seriously, even himself.

1. http://twitchy.com/2015/06/16/when-did-we-beat-japan-at-anyt...

2. http://www.mediaite.com/tv/president-trump-would-build-a-wal...

3. http://www.mediaite.com/tv/donald-trump-i-know-how-to-defeat...

4. https://www.youtube.com/watch?v=wbgoizJ_yPc
I feel like I read this story every 6 months.
-> Believing that the Astros’ network had been compromised by a rogue hacker, Major League Baseball notified the F.B.I., and the authorities in Houston opened an investigation. Agents soon found that the Astros’ network had been entered from a computer at a home that some Cardinals officials had lived in. The agents then turned their attention to the team’s front office.

So it looks like the Astros/MLB were unable to determine internally how their network was compromised and then contacted the FBI. This seems perfectly reasonable to me.
Sounds like they have a lack of awareness rather than being overconfident. Can a person be too confident?
Interstate computer fraud and abuse is a federal crime. That the business affected plays some boring game doesn't make it any less of a crime than if they sold sugar water or provided computer services.
It's funny because it isn't just that HTML(5) and better CSS support exist, it's just sloppy in general. Either it wasn't taken seriously at the time, or I don't know what.

On the other hand, it's a working site that gets the job done, no matter how embarrassing behind the scenes.
Ask HN: What are some good books to read as a developer?
I think I am still a junior level web developer, but recently, I had been assigned to a major project at my job. So I am on my way to becoming a senior developer. I want to start reading books on development and good programmer ethic and management skills. Can anyone recommend me any good books?
LiveGL – WebGL diagnostic and debugging tool
Quite cool but I prefer to build a custom lego case, which brings a DIY feeling. :)
https://github.com/domeide/domeide.github.io/tree/master/_po...
Chrome's Flash Player uses PPAPI (Pepper), not NaCl. Pepper Flash is still running Adobe's native code, not NaCl code.
LastPass Compromised, Account Information Accessed
Not sure either. The magic of luck and algorithms I guess.

Are you planning on using the code in something?