skysight-inc/HackerNews huggingface dataset:
I didn't mean caloric density.
Steal this Corporation
Hello,
I've been a software hacker for a minute. I have no associates in the Skull and Bones or elite members of society, so I am choosing the path of the GAGPL and starting a new series called: Steal this Corporation (inspired by Abby Hoffman's Steal this Book). I'm working on something that would be equivalently useful as Wordpress is, but for HTML5 protocol updates. It's based on old MOO/BBS principles.
Facebook made the rounds last year for a job posting that stated the goal was "for the Linux kernel network stack to rival or exceed that of FreeBSD": http://www.phoronix.com/scan.php?page=news_item&px=MTc1NjY
Ritchie's ghost tells you to get off his digital lawn

https://en.m.wikipedia.org/wiki/Dennis_Ritchie
http://mario.cristo.life/
I mean more calories simply as in two pieces of deep fried chicken being more palatable than one.
Is he gonna run out of charge between any two stations?
Philbarr is correct. The pattern they are using is fundamentally supposed to provide a thread-safe Singleton, and it fails to do that. Is that a security problem in this specific context? No.

But it's a "No" because the authors are lucky in this case - not because they are competent.

Now, that's just one instance of poor skill. There are many more. Are you sure none of them have security implications?
Yeah, whenever people use a term with a very slightly different take on the subtleties of its technical meaning from me, I dismiss whatever else they have to say.
And clearly they were aware it could cause problems and tried to avoid them.
Thanks, it's awesome!
Yes, but easily-replaceable components are still going to be replaced more often than difficult-to-replace ones.
I am not sure - years ago trans-fat were banned in Europe and now our chips are so greasy that I can't stand to eat them.
Or include destination chargers that are open to the public:

http://www.teslamotors.com/findus#/bounds/49.38,-66.94,25.82...,
The Automattic guys did some testing a few years ago with better results on SolarFlare. I wonder where their testing ultimately ended up. https://wpneteng.wordpress.com/2013/12/21/10g-nic-testing/
Just a general info: KeePassX can read and write the KeePass2 file format, but you have to checkout the git repo manually. It works for me since at least one year.

The problem is the current maintainer, it seems that he has no interest in releasing a new version :(
And "your" and "objection" are erroneous, there. (-: Hint: ce7b9f50c3fadbad22feeb28e4429ad9bee02bcc
How It Feels to Become a Citizen of the World
Short of a bug or other pathological issue, if you resort to messing with locale just to avoid a performance problem, you're likely to hide other issues that will cause problems whenever another user attempts to do the same thing and it breaks.

Again, not worth it -- if only for performance sake, generally speaking.
Discs needs to be snail mailed, so the amount of content potentially available to each subscriber at any given moment is tiny, compared to the content available online at any given moment.

So there are very different dynamics going on there when comparing those services.
> If there are multiple equally appropriate icons

In this case, the icons are specified that they are equally appropriate but they really aren't.
If the attacker already has control of the email address, they can reset the account without going to such lengths--just visit the site and request a password reset.
"Why is there such a strong focus on trying to get Linux network performance when (I think) everyone agrees BSD is better at networking?"

Setting aside the fact that a typical fanboi comment is at the top of HN post, are you seriously contending that since one OS does a thing there's no need for other OS's to do the same thing?
> Validation has nothing to do with the security of the certificate.

It has to do with the security and accountability of the end-to-end process in which the certificate is used, which is a security concern even if you define "security of the certificate" so narrowly that it isn't relevant to the security of the certificate as such. (Though what you have a trusted third-party vouching for in the certificate -- which is the key distinction in EV -- is, I would think, by any reasonable standard, a factor in the security provided by the certificate.)
>Transfats are one of the few things that the above does not apply to. They are actively bad for you and there are no known redeeming qualities.

Yeah eggs, salt, fat in general - all of these used to be considered dangerous too. Why should I believe that trans-fats are dangerous?
Potential Denial of Service Vulnerability in Rack
A Brief History of Yarn in Video Games
Ask HN: The best language for writing RESTful APIs?
I've used flask, rails, and padrino (sinatra).

Flask was my favorite but is hard to keep organized without much of a toolkit or recommended dev patterns baked in. I recognize that blueprints really help, but a consistent cross-project organization would be nice.

The transition to padrino was welcomed due to a lot of basic structure that is consistent in all projects, but unsustainable due to a functionally dead community (#sinatra has 25 people at max and nobody talking, #padrino has maybe 8).

Rails is far too much bloat to just be serving JSON (benchmarks show that sinatra is 4-8x faster...) and implies TOO strict a structure to development (also, being a python person...I don't appreciate magic).

What do you recommend?
With Omni apps I have a habit (N=2) of the following:

- download desktop trial

- buy iOS app

- begin to like the combination

- buy desktop app
It's an interesting post.

If you really want to squeeze out all the performance of your network card, what you should use is something like DPDK.

http://dpdk.org/
Ask HN: Can a contract provide the same legal protection that an LLC provides?
I'm an in-house developer but occasionally do contract work about once a year (<40-50hrs total). Because of the amount of contract work is so small I usually just go the 1099 route instead of setting up an LLC, I'm curious if I can draft a contract that when signed will provide me the same protections as having an LLC?
Read the rest of the email you linked, where Linus clarifies that systemd's use of the 'debug' parameter seemed to assume that systemd was the only user of it, thus going against the whole point of a readable /proc/cmdline. Thus, feedback loops were caused and pain was created and flamewars were started.

Again, if you shove your hand into a fire, don't blame the hand (or, for that matter, the fire) for your own arrogance and stupidity. Common bloody sense.
It gave us a lot of problems.

We basically had to white label the apps we want document support for and we have to have the user to install document support manually too.

But we did make it so that people who know a little applescript can add their own apps and in general add all sorts of scripts to their apps. You can see how here http://www.ghostnoteapp.com/blog/how-to-manually-add-new-doc...
I think we're on two different wavelengths here. When I say that the FBI shouldn't be involved, I'm not saying that a subordinate should disobey orders to enforce the law. I'm not saying that they are not legally within their right to do so. This is morality. And morality is deeper than blindly obeying legal statutes.

I'm saying that the act of transforming an everyday action into a federal crime just because unauthorized computer access was involved is a horrible, dangerous system for us to have.
Oh, ok. So Rebol2 isn't compilable on a 64-bit machine? Too bad.
Because the main login is HTTPS-secure (I would hope - for a bank), but the change-password feature is not.
Exactly. Which is why google ranking is more important than Mac apps store ranking.
BloomThat Grows Beyond Flower Delivery to Gifts with $5.5M
>A service like www.companiesmadesimple.com (aff.) will make the incorporation process easy. It usually takes up to three business hours.

Yeah, better do it yourself. I'm from Germany and I set up a LTD directly with Companies House myself. It's really (I mean really really) straight forward and they even accept PayPal to pay the 15 GBP fee. It took me ~20 minutes and the company was incorporated the next day.

Those formation companies usually just are an unnecessary middleman.
What companies are missing from this map?
In the same regard I think in the next 20 years there will not be human driven trucks, buses and anything over a certain weight, because the cost of life to not do that will be over whelming.

This is because one thing. They all can stop quickly and will have their own lane on all Interstates.
Optimizing an Important Atom Primitive
In Revolution OS (made around 2000), he explained that he pronounces it differently depending on what language he's speaking. He gave examples in English, Swedish, and Finnish.
China and Russia Almost Definitely Have the Snowden Docs
What about Unix, CP/M, DOS..? None of those are kernels yet they were said to be operating systems and before GNU was announced.

My question is has Linus ever considered Linux to be the operating system rather than just the name of the kernel?
Considering the Navy (Naval Research Laboratory) built TOR...
I've always wondered why the bombs often portrayed in movies weren't designed according to those same principles. It seems that it is indeed possible to make it completely tamper proof.
It's called the socratic method: https://en.wikipedia.org/wiki/Socratic_method
http://www.passwordstore.org/
Confidentiality isn't your only concern. You should also be worried about integrity and availability. From "On The Security of Password Manager Database Formats":

Unfortunately, [KDBX4] introduces new vulnerabilities.
Similarly to KDB, the main problem of this format is
the lack of authentication of *hdr*. As such, is it
susceptible to modifications... This modification is
not detectable by the password manager... if a user
alters, and then saves, a corrupted database, all
passwords previously affected by the attack are lost
forever.

This attack highlights a remarkable design flaw. Even
an accidental bit-flip in the *pskey* field, e.g., due
to a transmission error, cannot be detected, and leads
to complete corruption of the database. Such
corruption is unlikely to be immediately detected by
users, who may subsequently add new entries. Over time,
the database will be composed of both correct and
corrupted entries, making it difficult to reconstruct
the damaged records from a backup.

Which reminds me - I need to migrate back to Password Safe as soon as possible.
I think he's suggesting that you happen to actually know the right password, and will attempt to enter it after the failed keepass attempt? But then, if you know the right password, you could also visually inspect the keepass data to know it was wrong.
If by "has existed" you mean to say that there were people who attacked computers in the 90s, yes, that's technically correct. However - I think the parent post was trying to say rather than 100s of millions being spent worldwide on this, 100s of billions are now being spent.
This works for facts and general knowledge. However I would say that for really difficult questions there is no option to Google. In my experience these come up in business. There are no right or wrong answers just heuristics and past experience.
If what you're interested in doing is analog/digital synth stuff, the AoE has the information you need. It leaves some gaps and presents it in a way that I am not fond of, but that's just me and I'm far from your typical learner. That said, be prepared for a long, dark rabbit hole ;-)

Depending on the level of "off the shelf" you're looking to deal with, a MIDI controller can be as simple as a USB controlled MIDI chip hooked up to some switches, or as complicated as a manually implemented digital synthesizer that talks to a USB bridge (don't try to implement a USB controller as your first, or tenth project).

Regarding kit/components, the key is trying to strike a balance between knowing what you want before you buy anything, and not waiting too long to start experimenting with real components. You can save yourself a lot of time by simulating the basic circuits in your project using a software like LTSpice[0] or TINATI[1]. They're both free and easy to use. However, simulations are never good enough, and often you don't have a model to simulate some important piece of your circuit, so the picture isn't complete. A good approach is to sketch out the circuits you want, do a quick sim or two to see if the basics like your power supply or oscillator or digital logic are going to basically do what you think, then order all the components you need from digikey. Shipping under $200 costs $8 from digikey, so it pays not to make too many orders. The bonus is that they are extremely timely with their orders (in US and Canada anyhow). Sometimes unbelievably so.

A note when ordering things from Digikey: First, make sure all the parts a in stock (check "in stock" in the search params). Back ordered parts take a long time, and for almost any part you can imagine there is a comparable replacement in stock. Second, when you want low volume stuff you'll be wanting the "cut tape", "bulk", "tube", or "tray" packaging options. "Tape and reel" or "Digi-reel" are for big rolls of one component and this the minimum order is 1000+ units. Almost everything is available in one of the low-volume options.

Regarding kits, take a look at sparkfun[2] for a wide range of boards, kits, etc. They have some good stuff and are targetted at hobbyists. A lot of their products come with not only a datasheet, but also a simplified "hookup diagram" that tells you how to wire everything up for a typical application. You can get some kits of basic components like resistors and caps, but they tend to get pricey and I always found that I would use one or two of the components up and never touch the rest, i.e. use all of the 10k resistors and the 1uF caps and nothing else. If there's a kit specifically for the project you want go for it though.

[0] http://www.linear.com/designtools/software/#LTspice

[1] http://www.ti.com/tool/tina-ti

[2] https://www.sparkfun.com/categories/157
Dirigibles are not particularly sturdy. I'd be worried to travel great distances on one, specially in regions where bad weather is common.
You are right that there are different problems. But designing high-frequency amplifiers, mixers, and such can now even be done by computers using optimization techniques such as genetic algorithms. The design space is quite limited, compared to software.

> If hardware was truly easier than software, then we'd probably be building our web and mobile apps in that.

I think this is more a matter of cost and flexibility.
I know it's a late reply, but I wanted to thank you for the links. They are... eye-opening, to say the least.
I agree that such a flag would be useful, too, in which case the systemd folks could very well have consulted with the kernel folks in advance to work out a deprecation path for the kernel-only behavior and an introduction path for a generic behavior that activates the respective kernel-specific and systemd-specific flags.

The problem is that such collaboration didn't happen, and the systemd folks assumed that they were the center of the universe and decided "well fuck the kernel, we're going to use the 'debug' flag for ourselves, everything else be damned", thus causing breakage and flamewars. Had they taken the 10 seconds to write up an email on LKML or somesuch saying "hey, we think the 'debug' flag should apply to everything, not just the kernel; y'all game?", the vast majority of the fallout would have never existed.
The current test types in our benchmarks (I work at TechEmpower) aim to establish a high-water mark for web frameworks and platforms. If you review the implementation requirements, included is a brief rationale for each test type:

https://www.techempower.com/benchmarks/#section=code

For example, the "plaintext" test focuses on raw request routing and HTTP parsing throughput and is intended to allow ultra-high performance servers to shine. Meanwhile, the "fortunes" test is intended to exercise a more diverse spectrum of framework functionality including database connectivity, the ORM, dynamic-sized collections, in-memory sorting, server-side templates, and XSS countermeasures.

Future tests in our project will likely exercise still more framework and platform capabilities, and with more computationally-demanding requirements. I believe this will go further to demonstrate the appeal of high-performance platforms and frameworks. Presently, it is easy to point out that few applications require the capacity to serve 10,000 or 100,000 requests per second. I routinely suggest that a real-world application is likely to perform at 1% to 10% of the high-water mark we show. Where it gets interesting, then, is determining if 10% of 50,000 rps or 10% of 500 rps is workable for you.

Despite conventional wisdom that suggests that a web service is constrained by external systems such as databases and peer services—and not dismissing that as untrue, but rather exaggerated—we believe that real-world web applications are often constrained by the platform or framework. In fact, it is my opinion that selecting a high-performance framework and platform (that suits your development efficiency requirements!) is precisely how you avoid premature optimization. By making a reasonable decision early on, you defer scale pain that is all too common with low-performance platforms until later in your project's life-cycle. Do you want to bring out the big architecture guns and increased system complexity at 10,000 users or at 100,000 or 1,000,000 users? Indeed, nothing is a drop-in replacement for something you know and love. There will be some learning curve if you're moving from one framework to another, and even greater learning is needed if switching platforms or language. But these inflection points in programming are needed sometimes, and you may find it's good to position them at the start of a project rather than midstream.
> Linus Torvalds is the creator and sole arbiter of the Linux operating system

Well, yeah, but the first rule of journalism is to know your audience and I'd bet if you asked the readers of Bloomberg to name a few operating systems they'd say "Windows, OSX, Android, Lin..Lin...Linux." How many would list things like Darwin or kFreeBSD?
Pollask Social Network
Pollask is a fun and interesting Q&A social network where users can explore their personal interest through communities by asking questions and conducting polls. Users can share links answer with stickers, take picture and ask questions. Download POLLASK today, available in iOS store.
Or something like KeePass or similar, it can be nice to know people's information in case they leave (I'm not advocating insecure practices), though an excel sheet or post it seems as likely.
I'm not sure how you could call it a consensus algorithm without putting updates through the state machine, since that's essentially all Raft does.

"The problem is the heartbeat; you can't have every node talking to every other node every few seconds"

So nodes are just to assume that other nodes are alive/reachable/functioning? How would you propose detecting node health without some form of heartbeat?

"... but you do writes directly to the nodes without getting a consensus first. You run the risk of losing acknowledged writes..."

This is the equivalent of the default MongoDB write strategy. You probably don't want it. In the majority of use cases you really, really want writes to be committed to the replicated state machine on a quorum of nodes before they are acknowledged back to the client.
I took it to mean they should use the Linq `x.SequenceEqual(y)` instead (assuming .NET 3.5+) (and x isn't null...).
The lead-in wasn't talking about UDP. And the article is specifically showing you how to use the multiple-packets-per call APIs (sendmmsg et al) and hitting 350 kpps with simeple single-threaded code and UDP. Then 1.4 Mpps with tuning and parallelism.

And even if you were using the slow API, even with ping:

[7 year old desktop]$ sudo ping -q -f -c 100000 localhost
PING localhost.localdomain (127.0.0.1) 56(84) bytes of data.
--- localhost.localdomain ping statistics ---
100000 packets transmitted, 100000 received, 0% packet loss, time 954ms
rtt min/avg/max/mdev = 0.004/0.004/0.195/0.002 ms, ipg/ewma 0.009/0.005 ms

Google around for some iperf or netperf results that people are generally getting with Linux.
Looks like it would be a lot cheaper than an underground metro though. But perhaps a standard monorail would be better for short distances.
Not that the U.S. Is necessarily better than any other place, but avoiding it out of fear is certainly not necessary.
I have to chime in and offer up Honeybadger (https://www.honeybadger.io) as a hosted option for monitoring, since I'm a co-founder. :)

Our goal is to make dealing with errors so awesome that you'll want to get more of them. :)
node.js / LoopBack - super fast prototyping, flexible, open js/json
>Last year, some of the information was posted anonymously online, according to an article on Deadspin. Among the details that were exposed were trade discussions that the Astros had with other teams... Believing that the Astros’ network had been compromised by a rogue hacker, Major League Baseball notified the F.B.I., and the authorities in Houston opened an investigation. Agents soon found that the Astros’ network had been entered from a computer at a home that some Cardinals officials had lived in.

And the only way they were caught was because they likely leaked some of the information they found to Deadspin. I remember at the time of the original Astro's leak, it was very interesting what specifically was leaked. It was not anything that could damage the Astros from either a legal, financial, or competitive standpoint. It only served as an embarrassment to the front office, almost as if the specific information leaked was meant as petty revenge while trying to walk a line by abiding by a certain competitive and moral code.
Oh, that's ingenious.

I was putting off developing an app for the store because of the whole sandbox app whitelist issue. I should have done more homework.

Thank you!
> Nothing here, just some measures for you.

That is the right conclusion, and I applaud the author. I just wonder why people would even take anything at all from this?
Let's not forget the fact that the game is a sequel to a rather revolutionary game for it's time that cost $50M to develop in 2001. It has a lot to do with what you do with those 15 minutes, not just the time slot itself.
Well had they deleted the password and someone still accessed the network without authorization and the FBI investigated the situation (much like they are now) then the Cardinals could have been charged with obstruction of justice under the SOX act Section 802.

http://www.soxlaw.com/s802.htm