skysight-inc/HackerNews huggingface dataset:
The article was talking about the Bitcode design in LLVM, not the plugin situation. Yes, gcc considered making plugins hard a feature, but as for a design that separates the frontend and backend in order to make each more modular, then gcc in fact does have such a thing, gimple,

https://gcc.gnu.org/onlinedocs/gccint/GIMPLE.html

I'm far from an expert, but from what I've seen and heard, gimple is pretty good for what it does. In other words, the author of the article is wrong to say that LLVM learned from a painful lesson in this area.
DO THE ATHLETES OUTRUN THE NERDS; How to COMPETE AS a START-UP
Linux supports more scheduling/QoS algorithms. Most of the recent (~10 years?) academic papers on packet queuing algorithms implement their algo in Linux.
Well, that's a pretty big compliment, thanks so much...

As for the features, it tells me we're on the right way to add a lot of those things soon - except for queueing that is. Instantwatcher is one of the handful of apps that was deemed useful enough by Netflix to not be cut off from their API back then, so they still have an ability we won't ever have (and don't want to, as we're focused to have a good experience across all VOD providers).

Was great getting some input on that, thanks for taking the time.
https://developer.github.com/v3/git/tags/

Use API + oauth access?
Here's some general books I think will make anyone a better programmer if you spend the time to internalize the subject matter. Don't really know any about management etc.

1. SCIP (Structure and Interpretation of Computer Programs)

2. Introduction to Algorithms (Cormen, Leiserson, Rivest, Stein)

3. The Art of Computer Programming (Vol 1-3).

4. Programming Pearls
> Is the idea that public markets provide better price discovery than private sales do?

I think that public companies can reveal true market value quicker than private investments.

For example, VCs invest in company xyz at a valuation of $100m, they don't actually know if that valuation is "real" until the company sells. Until then, it's made up numbers. That gap between investment and sell date might be 5-10 years and until then then there's no market proving of that valuation. We've seen it time and time again that private companies can exist with no revenue or at least no profit for years or until their private fund runs dry, but can still claim a "valuation" in huge numbers, even while the market provable "value" of the company is $0.

Public stock markets tend to suss out valuation much quicker, a company might be "valued" on the market with a market cap of $100m, but miss a couple quarters or some big sales and stock holders will dump and run and the market cap can drop quickly over even a matter of days or weeks. Public investors eventually start to want the fundamentals of their companies to be good even if they start as fantasies. Reportable revenue, eventual profit (or continued revenue growth that's quickly convertible to profit in the even of market saturation)...eventually these things all have to exist, and I'd wager that an analysis of stock market prices on a company over the long run has a strong correlation to these fundamentals. I can't go and buy 1 share of Tesla at $500 and suddenly claim the company is "valued" at $60b.

But you can do that with private companies because of the information asymmetry available to private companies. There's all kinds of wonderful ways to game "valuation", but that's fundamentally different than market "value".

There's an idea that publicly traded, but unprofitable, fast-growth companies, like Tesla, with big inflated stock prices are the same as overvalued privately funded companies, but there's some fundamental differences in those valuations. If Tesla's revenue growth curve turned downwards next quarter or two, their stock price would plummet and their valuation/marketcap would arithmetic its way downward as a consequence. But a private company's "valuation" would stay the same until the next funding round/corporate sales activity, a lag time that could be years away. Thus a private valuation is more likely to be divorced from any business fundamentals than a public one, and that's simply because private company valuations are more closely tied to investor activity not business activity.
> For example, for C and C++, sizeof is a constant expression, so you can't easily just do something like "defer evaluation to runtime". Plus ifdefs, struct layout, etc.

What prevents things like sizeof(T) or alignof(T) from being representable in the LLVM IR in a form that says, "defer to final translation" (to the target architecture)? Does substitution of platform-dependent types, for example, i64 for size_t on x86_64, happen prior to generating the LLVM IR? It would seem useful for me for LLVM IR to retain some platform-dependent types like size_t or intptr_t (deferring until final translation from bitcode to machine code), but maybe that would inhibit certain optimizations.
Maybe try removing all plugins and retry. It's possible that one of them is responsible for this slowdown. This was the case for me couple of months ago.
> The mind boggles. I've got to the point where I think subsidies for nuclear power are entirely justifiable.

You mean wind, solar, geothermal, (existing) hydro, and utility scale battery storage.
If you want to see this happen, your best bet is to help out with Fernvale, it's pretty close to what you've described (the phone/microcontroller part anyway, could add an additional CPU for desktop use). Here's a blog post about it:
http://www.bunniestudios.com/blog/?p=4297

Fernly is the work-in-progress OS for Fernvale: https://github.com/xobs/fernly
Oops. Forgot to enable submissions. Try a refresh.
You know you can have multiple VMs installed, with different JAVA_HOMEs, right?

This is a solved problem.
Sure, it would be cool to have a hardware-hackable phone, but I don't see it replacing most of the niches the RPi does well:

* Leave one in the basement or the garage logging data from some sensor

* Give one to a kid to hack on

* Play around with using it as a server, as a media player, as a mini-workstation

Yes, most phones are more powerful than a Raspberry Pi, but no one is using a RPi because it's the most powerful thing out there. It's cheap, hackable, and separate from our other devices, but can be networked with them.
The Snabb switch paralkelisation experiments are getting to 35 million packets per second doing real work (encap decap) in Linux userspace[1]

[1] https://groups.google.com/forum/m/#!topic/snabb-devel/_vKQgC...
But there's already a huge external market for cases of all sorts, I wonder why the Foundation needs to throw in yet another option...
Yet that water will be turned into salt water, making it pretty much useless.
Incredible Journey from Buenos Aires to Patagonia
This article does what any good article regarding an area of law should do...leaves the reader walking away with more questions than answers, and this is probably doubly applicable to trademark and IP law. In fact, anytime you consult with an IP lawyer and their answer is anything more/less than maybe that should raise a red flag.

In short:

1. A registered TM is prima facia evidence of an enforceable TM and ownership;

2. The legal standard for violation of the TM is likelihood of confusion by the consumer (i.e. people are buying Fony intending to buy Sony). The article mentions certain issues such as category/class of goods, but notes even that is not determinative of actual infringement. Also, mentions the concept of dilution of TM (the infringer is hawking a substandard product), but this is not a requirement of the analysis, the infringing product could be superior and still infringe the TM rights.

3. At the end of the day the legal standard of infringement is very subjective, and while not directly mentioned, it is not only possible but occurs regularly where different Courts will arrive at different conclusions as to whether there is TM infringement. The one thing I disagree with is the claim this is an unsettled area of law, certainly it is more subjective than I like in my legal standard, but it is not unsettled.
FDA gives manufacturers 3 years to remove artificial trans fats from food
Aging and Longevity: Science for Spring Chickens
This Range Rover Prototype Can Be Driven with a Smartphone App
Hey, just bought Dash (iOS) a couple of weeks ago. Haven't used it too much yet but looks great.

Since you're here: have you considered adding Kickstart file syntax? RHEL's pages tend to be pretty bad (the CentOS ones are better I know).
European views on "hate speech" and in particular inciting racial hatred against minority groups are very much informed by the Holocaust having happened.

One person saying hateful things can be ignored. A whole mob cannot.
An article in The Guardian explains the rationale for the FDA decision:

http://www.theguardian.com/us-news/2015/jun/16/fda-to-elimin...
Don't forget that NIR cameras (often used for iris recognition) can still see through those glasses. But i agree, stuff similar to the challenges in the AR face dataset [1] will usually stump most employed systems.

[1] http://www2.ece.ohio-state.edu/~aleix/ARdatabase.html
There's plenty of room for nuclear, as well.
I've bought from the below, there are other resellers around the same price (Namecheap being one). IIRC, they routinely have 20+% codes which get you to $4/y.

[1] https://cheapsslsecurity.com/comodo/positivessl.html
I lived there for 3 years as a child. I'm white, blue eyed and had blonde hair back then.

There was virtually no crime to speak of (and everyone understood the consequences). As a youth, frankly, I considered Singapore a near utopia to grow up in. Excellent English-based private schools (my parents taught there), a vast melting pot of cultures and foods, a major asian hub for endless travel opportunities, most everyone spoke english, etc.

If I were a young-20-something without kids, I might find it a bit uptight, repressed and boring after a while. But as a kid, and now a dad, the pros far outweigh the cons for a place to raise a young family and explore.
Your consulting company employs you :)
Ask HN: Are cybersecurity professionals the new privateers?
The recent thread on HN about the U.S. Navy advertising for zero days, along with stories about Kremlin-funded trolls and government-adjacent hacking groups, has me thinking more and more about the role of non-state actors in the world of international cybercrime and espionage.

Although it's all semantic, it seems like in the scramble for technical talent, governments aren't just contracting with third-party companies anymore, they're actually beginning to approach individuals, or (as in the Navy's case) openly solicit for offensive software or exploits from whoever's capable of providing them.

It also seems like there's a growing willingness in countries like Russia that openly defy international law to informally sanction state-sponsored cybercrime ("We don't care who you target, as long as they're foreign"). Then there's the shell game of plausible deniability that countries like China get from using non-state outfits that they can then distance themselves from.

I guess that's the "privateer" part that interests me so much and distinguishes these phenomena from just basic HR. Countries seem to be openly embracing the possibility for talented amateurs to unilaterally prey upon the enemies of the state.

What do you think HN? For citizens of the world, do you see evidence of your country supporting this model of cybersecurity / operations? Is this a growing dynamic, or just the result of a critical infosec talent shortage?
Actually, all of those have something strongly resembling a kernel, and DOS in particular makes a nice distinction between the basic services (BIOS) and whatever userland you choose to install on top of it. I think you're making my point - "Operating System" used to mean the "kernel" before RMS wanted to ride on Linux's coat tails and Microsoft wanted to bundle their browser anti-competitively - both of which are distasteful.
That doesn't contradict my point that ustwo might not need to make ten times more money than they spent developing the game to run the company (and to be considered succesful).
Thanks andrenotgiant!

We're keeping a close eye on the SEO implications of this approach. Even with Google's snapshotting the page post-Javascript execution, I think there's still value in offering pre-rendering, e.g. to reduce latency.
Thank you for your response.

I don't disagree that there is collusion - I disagree that it is as effective as we give it credit for. Namely, that there is a systematic 'them' which is against 'us'. That the NSA can tap communication is to me an example of very small collusion. It's the level alluded to here that confuses me:

>... a new boogieman to justify the level of surveillance... the point is that it's never about what they say it's about. It's about control. Inverted totalitarianism.

Is there really this kind of 'collusion' going on? Is there a backroom where people say this with a straight face? I'm completely prepared to hear this is the case but I'm trying to find a reasonable explanation. It seems to me these people go home to their wives and kids at the end of the day just like the rest of us.

To build this a little further. I toy with the idea that we ourselves are creating these mythical boogymen and THAT is what hurts our ability to change anything. I don't know :\
Personal data is a monetary currency we don’t understand
Your example is in violation of the FCC. Mine violates nothing.

Well, yeah, that was kinda the idea. My point is that it doesn't matter what is technically possible if consumer protection rules were to come into place. The regulatory environment would curtail the largest (ab)uses of the technology as entities that would use the technology wouldn't want to take the risk.

edit: So, under hypothetical regulation on facial recognition, a watchdog agency isn't going to know/care about your driveway camera, but your business based on using that 1GP array to sell person tracking and demographic data would raise some eyebrows.

Was your point about the ease of implementation an expression that you'd do it anyway if the regulations came into place? Put your business on the line because you personally know how to implement it?
As Senate rejects cyber bill, privacy trumps security concerns
Thanks, it was this expression I was missing.
I asked this question 5 years ago on SO: http://stackoverflow.com/questions/2868432/github-readonly-a.... Glad it got addressed.
The ECHR is no EU institution, and it didn't take any violation of EU law into account because that isn't its purpose.

Whether that Estonian law (and the implementation) is in accordance with EU law (some argue it isn't) would be a matter for the ECJ.
Diceware – secure passphrase generator
3D scan a face with an iOS app
No doubt, I'm in the Cleveland area so I am seeing them here in July. First time in a while.
No. Netmap is available for Linux too and there are other options like dpdk available on both. But that's not the FreeBSD network stack that's an Ethernet stack. The kernel IP stack apparently scales better in FreeBSD but I have not seen recent hard data. Netflix do stream all their content from FreeBSD though.
Basically, when an object goes out of scope, it isn't de-allocated instantly.

Immutable strings aren't standard; they're an implementation choice.
7 SaaS, built to help sysadmin
The life of SysAdmins and IT teams are frustrating and complicated enough. You need a plenty of practical tools for managing and retrieving information, networking, monitoring and the dozens of other tasks and responsibilities filling your plate on a day-to-day basis.

We have tested hundreds of SysAdmin tools and desktop support tools and then selected these 7, based on their ease of use, security, portability, and compatibility with servers and operating systems. Whether you need to diagnose and solve a problem or analyze a directory or a handle, the following list of free tools for SysAdmins and desktop support professionals should help reduce your administrator stress.
Yes, it is true that validation does add accountability and security. However, suggesting that DV certificates are less suitable than EV certificates for handling a certain kind of data is nothing more than misinformation.

The cipher being used and the SSL configuration dictate MUCH more about the security of a site than its level of validation. EV certificates do not guarantee the site isnt using a insecure cipher. EV certificates do not guarantee that the private key was not sent via plain text in an email while a network admin was installing it. So from an encryption standpoint, there is no advantage.

From a authentication standpoint, an EV MAY provide more security but remember: An EV primarily validates the name and location of the relying party. It does not check to see if they are operating ethically or if you are getting ripped off.

I dont think EV is bad, but clamping down on what type of certificates can be used gets tricky. There are very few uses where EV (or OV) certificates should be required.
FYI, active development has continued here: http://millejoh.github.io/emacs-ipython-notebook/
http://github.com/millejoh/emacs-ipython-notebook/
This was across state lines so it is automatically the FBI's jurisdiction
I'd be surprised if they did and don't forget that it's serialized/deserialized from something which will be hanging around in the GC in the form of a memory backed stream or something too.
My favorite is 'I've got this oscilloscope and wanted to test it, so why not do this in style and connect it to my DeLorean.'
Microsoft Drops a New Windows 10 Mobile Build, Finalizing Cortana and the UI
From my point of view, an authenticator (e.g. HMAC) is only necessary in case of a protocol-based transmission.
-> And no, I don't mean to put the file (that is completly read first) on the dropbox.
An authentication between the main memory and the CPU is obviously not required.
What? With that attitude do you not believe in regulating anything? No laws are perfect but that's not a valid argument against having them.

There's a big difference in a company legally operating a facial tracking system and a company illegally operating one.

In the case of the illegal one they have to hide it, it's much harder to profit from and thus would be less widespread. In the case of the legal one they can freely advertise their services and easily setup their system anywhere that local governments don't create hurdles.
Some of the big projects are nothing to do with the name though.

If you look at Fedora the new sourceforge hijack page links to Fedora, but the original sourceforge page was just some random software.

Mirror hijack: http://sourceforge.net/projects/fedora.mirror/

Original: http://sourceforge.net/projects/fedora/
Definitely, but web apps usually consist of specific views, so there are specific things you can optimize. Like any codebase, there will be hotspots you can make faster.
its amazing how many people store passwords in excel like this. i find them all the time in affiliations that I work with
The NSA is not every adversary.
I highly recommend everyone check out other videos on Ben Krasnow's youtube channel [0]. I've been following him for about a year now, really awesome stuff!

[0] https://www.youtube.com/user/bkraz333
Please contact me about this: https://kapeli.com/contact
Needing a token to operate a distributed ledger is a red herring
The few times I tried to run GUI programs through su I always got plenty of warning about DBus and stuff. But I don't do that very often, so that's all I know.
That's what we call an object-oriented design – a tale of two classes
That's what we call software engineering and object-oriented design - a tale of two classes from the same project cooked by Microsoft:

class ProjectNode 6076 lines (5116 sloc) 274.992 kB

https://github.com/Microsoft/nodejstools/blob/master/Common/Product/SharedProject/ProjectNode.cs

class ProjectTypeDefinition 30 lines (27 sloc) 1.388 kB

https://github.com/Microsoft/nodejstools/blob/master/Common/Product/SharedProject/ProjectTypeDefinition.cs

Two extremes in the same project, sitting side-by-side in the same folder on a disk.
Can't imagine a valid reason for such abominations to exist. Anyway, we have the R# nowadays to simplify the refactoring.
It's a nice idea but I'm not sure it would make much difference either way (although I do give money to charity anyway.)
Perhaps religious service attendance via podcast, and a long memorized search string that finds the latest download?
This article is not saying to run your editor inside of a docker container. If you view the link, it is a list of plugins to enable syntax highlighting for Dockerfiles within your favorite editor. I'm going to assume you didn't even click the link before responding to this post.
No power button?
Just to be clear this is not directed at you tptacek. However, I am genuinely confused at HN, whenever it comes to security/privacy most yell "Open Source Only" and yet a good chuck of them use 1Password, which I believe is closed source. It really doesn't make any sense. Why trust one over all the others? Obviously given that open source does not equate to security and closed source does not equate to vulnerabilities. It make it even more disconcerting when you see a security or privacy related "Show HN:" being immediately dismissed for choosing closed source.
Apache Spark, AWS and productivity
We could add Lorenz Meier (PX4 autopilot for drones) and Terry Davis (TempleOS).
Nuclear power plants take 10+ years to commission (Watts Bar in TN took nearly 36 years to complete), $1 billion USD to start (frequently approaching $2-4 billion), and have no permanent waste storage. Newer reactor designs that can burn up waste products instead of a once-through system haven't been tested in over 60 years (since first tested at Oak Ridge during the Manhattan Project in the late 50s; Thorium in a breeder blanket configuration).

There simply is no time to further entertain the notion that nuclear is a solution. It currently makes up only ~4% of US generating capacity, and it continues to be phased out, as its not cost competitive with wind (unsubsidized) and natural gas.
> Rails is far too much bloat to just be serving JSON (benchmarks show that sinatra is 4-8x faster...)

Does it matter 1 bit? If you can't demonstrate that it does, you might as well choose the framework with the best mascot and Django's mascot is pretty damn awesome.
I like open source but certainly do not believe that it is always the best choice when it comes to security.
I was a master of my Commodore 64 way more than I am of my iPhone
I thought VSC (Visual Studio Code) and Atom were based on the same codebase? I'm sure there are differences in functionality, but if open source is a prerequisite for you I'd suggest helping Atom grow rather than waiting on a licence change for VSC.
St. Louis Cardinals Allegedly Hacked into Houston Astros’ Network
INTERNETARCHIVE.BAK – Archiveteam
Parse.com take part in Golang
Parse: How We Moved Our API from Ruby to Go and Saved Our Sanity
I worked (and studied) in Singapore for a while. As an engineer for a tech company, you get paid very little compared to cost of living.

In my graduating class, most EE+CS folks I know who are still in Singapore became bankers, government employees or consultants. Most engineering talent left because the salaries were barely enough to pay rent.

Edit: spelling
From the article I found this link, which I found even more interesting as it could be done right now in CA to generate power and reduce evaporation from reservoirs:

http://qz.com/426718/japan-is-building-huge-solar-power-plan...