skysight-inc/HackerNews huggingface dataset:
He figured out that spacetime may be non-Euclidean before he was aware that the math had been extensively studied. Then he learned about the preexisting work.

It's true it probably would have been much harder for him to work out the math on his own. But he and/or others eventually would have done it.
Unfortunately, this method seems like it would only work for libraries, or things that can easily be packaged as libraries. It wouldn't work that well for a web application, for example, especially since the typical Django application usually involves multiple services, different settings per machine, etc.
You have no understanding of how work is dispersed within the U.S. intelligence community.

Which is fine, of course, but why are you trying to speak as if you have authoritative knowledge?

You say that NSA is responsible for cybersecurity within an HR agency because their name has "SECURITY" in it, and as far as I can tell this is meant completely seriously. So should NSA also be responsible for the military defense of the nation since their name has "SECURITY" in it? Should they regulate financial markets because their name has "SECURITY" in it?

In case you wish to know, NSA is responsible for (among other things) 'SIGINT' and 'ELINT'. CIA is responsible for 'HUMINT', 'OSINT', and many other fun things.

Both the NSA and CIA are foreign intelligence agencies, mostly due to historical accident. And of course there's an entirely separate DIA, which also exists mostly due to historical accident, but focuses mainly on military intelligence matters.
I think there's a misunderstanding; I'm not saying people profit from the tools. They profit from consulting for companies who have adopted the technology, which is a very, very lucrative field. Just look at the Rails consulting shops.

edit: I just re-read my previous statement and you're absolutely correct in your analysis of what I actually said vs what I meant. I've since changed the post to read "technology" instead of "tool." What I meant to imply was that technologies like React and AngularJS were lucrative, not the supporting tools like gulp, grunt or npm.

> "ugh that seems super hard and likely to result in many hours of unpaid labor, I'll just work around these issues and get back to work".

I agree with you on that score. Unfortunately, unpaid labor on the side is an expectation of startup web development these days. Companies do not want you learning new technologies on the clock. They expect you to do that on your own. They expect you to contribute to and/or run your own open source projects. Just last week, my boss told me straight up that I was expected to make something that the company owns and profits from on my own unpaid free time to further my understanding of one of their core technologies. The "or else" was implied, of course.
I live on a gravel road, and I can tell you one thing for certain. Vehicle maintenance costs are noticeably higher when routinely driving on gravel roads. I have to replace brakes and suspension components much more frequently than friends and family who live on paved roads. Also, if you are not careful about washing your vehicle to routinely get the rock dust off, your vehicle will be prone to early rust issues.
Hmm, shared state in and of itself can certainly cause difficulties (hence the recent focus on immutability and FRP), so I agree with what you are saying. However, if you are going to have shared state, I find the Angular service singleton approach as good a way to handle it as any.
What's the $1,500 IRS tax credit?
Well objectively it's less finger travel and more home row use, so it has its merits. The issue is that qwerty is such a de facto standard that you'll run into many layout issues using dvorak.
Seems this method wouldn't work as well if you have external clients you deploy for. I'd use Docker instead of doing this, just to be in a better position for an internal or external client deployment.
The Ketamine Connection
> NSA might somehow have caught this despite everything I mentioned if they were engaged in better "monitoring operations" on other government networks and international communications relays... is that really what you want?

I can think of a few million people who might have, yeah.
LLVM-based code generator for MSIL and UWP apps targeting Micro Controllers
Are you excluding things like 'continuity' from calculus because sure, you get topologies on discrete spaces and such, but on the other hand: manifolds.
Ryd.io: Exploration of the NYC Taxi data
Yeah, he sounded very out of touch and demonstrated very little understanding of the implications of having a government backdoor.
The Coder Who Encrypted Your Texts
No, they're right. The title mislead me.

The title suggests the EU decided something. Done. And then some European parliament came in and vetoed it. wtf?

Instead, a correct title would seem to be "European parliament strongly rejected proposal to axe 'freedom of panorama' across the EU"...?

The difference being "EU members' plan" vs "plan for the EU".
Gravel roads can be plowed like a regular road.

If given a choice, I think I prefer driving on poorly plowed gravel roads over well plowed paved roads in snow storms. Gravel roads don't seem to ice up as easily, and the gravel and dirt helps with traction.
This wasn't just a single employee that made a single mistake.

The Navy is happy to fire commanding officers for calling out sailors who show up late for physical training because it's embarrassing to the sailor, and yet it seems like we can't get anything close to that kind of accountability elsewhere.

It's not so much that Archuleta 'let this happen' (since I guarantee they would be hacked anyways), but the defensive efforts prior to this happening were even worse than you'd expect for government, and the response efforts since have almost been worse!
>Being found out as the source of an attack is the biggest deterrent.

It doesn't seem like much of a deterrent. Suppose we knew for a fact that the attacker was John Smith in Chicago. How would that deter them?
Knockout on it's own is just data-binding, we ended up using this as the SPA framework around Knockout: http://durandaljs.com/
Please read and follow the HN guidelines:

https://news.ycombinator.com/newsguidelines.html.

That means posting civilly and substantively, or not at all.
Some possibly relevant reading..

http://www.joelonsoftware.com/articles/fog0000000069.html

https://programmers.stackexchange.com/questions/6268/when-is...

https://en.wikipedia.org/wiki/Rewrite_%28programming%29
As a person in that situation, I openly share the vision with anyone who wants to hear it. Then you realize that people don't understand it, and therefore don't care.
+1 rsync is pretty darn good at any scale -- I'm not sure why the simplest solution possible doesn't beat out docker as a suggestion in this thread.

I've been bundling libs and software into a single virtual environment like package that I distribute with rsync for a long time - it solves loads of problems, is easy to bootstrap a new system with, and incremental updates are super fast. Combine that with rsync distribution of your source and a good tool for automating all of it (ansible, salt, chef, puppet, et al) and you have a pretty fool-proof deployment system.

And a rollback is just a git revert and another push away -- no need to keep build artifacts lying around if you believe your build is deterministic.
Don't get me wrong, I'd sign up for it if the alternative is 20+ million records of private data in the hands of an unfriendly state. But then I don't think that NSA is Literally Satan™ either.
I'd like to hear a little more about how this "recent technology" that she linked to helps me deploy web apps to the desktop. The http://nwjs.io/ site certainly doesn't have much info on how it can help for this use case.
Let's make America Rock again
I've been using Front since February and I love it. The desktop app was one of the key reasons I went with it because it is really fast compared to web interfaces of other apps I tried out.
WHAT? You can't take a picture of a public place in France and own (or release) the copyright?
There are probably thousands of laws on the books that would be written differently now that we have software running everything. No sense in writing laws for the world of 20 years ago.
> different settings per machine

/etc/default/mycoolapp.conf

Debian packages have the concept of 'config' files. Files will be automatically overwritten when installing a new version of package FOO, unless they're marked as config files in the .deb manifest. This allows you to have a set of sane defaults, but not to lose customisations when upgrading.
Do you care about changing this enough to put in an effort?
Here is the process I use for smallish services -

1. Create a python package using setup.py
2. Upload the resulting .tar.gz file to a central location
3. Download to prod nodes and run
pip3 install <packagename>.tar.gz

Rolling back is pretty simple - pip3 uninstall the current version and re-install the old version.

Any gotchas with this process?
A Closer Look at the Melbourne Startup Ecosystem
To clarify this a bit:

The problem is that you want to retire a 1024-bit CA root, and replace it with a 4096-bit CA root. To do this effectively, new clients need to stop trusting the old 1024-bit CA root, or there's no point doing the transition.

However, you still want certificates that you issue to be verified by old clients that don't know about the 4096-bit CA root.

To solve this, you issue certificates with two alternate chains of trust - one up to the old 1024-bit root, and one up to the new 4096-bit root - and teach the new clients to check all the alternate chains.

It's this last bit that required the code change in OpenSSL, which contained the logic error that resulted in this vulnerability.
> Building with dh-virtualenv simply creates a debian package that includes a virtualenv, along with any dependencies listed in the requirements.txt file.

So how is this solving the first issue? If PyPI or the Git server is down, this is exactly like the git & pip option.
If you can't choose wisely, pick at random (2014)
Just one click through and you arrive at the README: https://github.com/nwjs/nw.js (the website is clearly, unfortunately, geared towards people in the know).

nwjs (node-webkit formerly) is a Chromium wrapper that lets you deploy web apps as desktop apps, simple as that.
Your stock broker or investment manager should be doing all this for you. Normally you receive end of year tax documents and all you do is copy some numbers from them onto your tax return. It's pretty easy but it could definitely be even more automated.

Maybe some stock brokers or weird investments don't do this?

I would hate having to do all that stuff by hand.
F&F money is the cheapest money you'll find. Unlike most angels, they don't negotiate hard to push down your valuation pre-investment, and they don't try to distract you or run an aspect of your business. Take all you can get.

After that, be realistic about how much money you need until you are cash flow positive (for software I'd double the runway you think you need, and hardware triple or more). Make sure you raise the full amount before you start burning on it, even if your F&F round comes up short. Getting distracted halfway through your valley of death because you're running out of cash will run you out of cash faster.

Although F&F terms are usually awesome, don't forget: no deal is too good to walk away from.
You need those things up to build the package not to install it
Node-webkit was renamed to nw.js[1], if that helps ring any bells. Its a chromeless browser that you can run your node webapp in, that acts like a application. Similar to Fluid SSBs[2] of yester-year

[1] https://groups.google.com/forum/#!topic/nwjs-general/V1Fhvfa...

[2] https://en.wikipedia.org/wiki/Fluid_%28web_browser%29
Why do we think they haven't been stolen? Why do we think that the OPM was the first or the biggest or the most valuable attack, and not just the biggest one that happened to be noticed?

The fact that a BLM officer lost his firearm doesn't instantly mean that all the cruise missiles are next, but yes, the fact that the USG is unable to maintain sensitive records of twenty million cleared personnel does say something about their ability to keep secret information safe.
If I had some idea of what to do, yes I think so. I hope so, at the very least.
I like it too, but I had issues when I had to compile packages and other stuff. In particular, its version of qmake can interfere in unpredictable ways.
Why? Saying it runs on Debian X is much more easy to facilitate by your end users than "requires docker"
"What do you mean? With vulcand you can implement your own middleware similar to kong."

Nginx is not an API management layer, right? It doesn't have the necessary features, but it's extensible so someone could build them. Mashape did, and they released the result as Kong.

Vulcand is in the same position as nginx. It could be a good choice for building an API management layer on, but it doesn't provide one out of the box.
You have to do this every time there's a change in the codebase which is not easy. How do you stick this into a CI without the git & pip issue talked about in the post?
I feel your pain friend. I too work in the health care industry. Can't use almost any of these toys! Wah!
The 3.2 kernel they mention is the standard kernel of Ubuntu 12.04. I have some docker machines of the same vintage, and it's as simple as installing a backported kernel from the official repos.

This being said, I'm using docker for packaging/deployment of a nodejs app on those machines, and I hate it. I'm about to strip it out and go for .debs. Docker brings a lot of baggage with it, and requires major restructuring of some infrastructure parts. As they say in the article, the changes required to bring docker in just to do packaging are way too heavy. And Docker also sucks for rollbacks, to be honest - their tagging system is downright terrible.

My advice is not to use Docker in a production environment unless you can articulate the specific pain points it will solve for you.
Those of you in this and related threads who have been abusing each other and each other's countries are behaving shamefully. There is no place for that on Hacker News. If you can't comment respectfully—which means sincerely taking extra care to be respectful, given how sensitive this topic is—then please don't comment here at all.

Would everyone else please do the community a favor and flag such comments? You can do that (if your account has 30 or more karma) by clicking on a comment's timestamp to go to its page, then clicking 'flag' at the top.

If that proves insufficient, and HN really is incapable of discussing this without devolving into nastiness and slurs, then we're simply going to start killing these stories when they come up, despite the importance and intellectual interest of the topic.
Because it's a crime that you can go to prison for. And all of the damaged parties could sue you.
HIPAA pretty much requires dedicated physical hardware. If my code is running on the same machine as someone else's code then I'm breaking the rules.
me too! (not the oracle version though) :(

It does suck a bit, I've also sent Layer 7 into production which is just as bad as Axway. Typical Vendorware.

The AWS Gateway is pretty enticing. Solves lots of the API Gateway problem space very quickly and super cheap. We could run our production instance for about $2 a month I reckon, vs a 6 figure sum for the vendor tech.
It seems you fail to understand what a strawman argument is.

A strawman argument is when you set up an argument ("Scientists claim volcanic eruptions cannot affect the climate") and then knock it down as evidence disproving a different claim ("Scientists claim volcanic eruptions are not responsible for global warming in the modern era."). It's faulty reasoning at best, and a dishonest rhetorical technique at worst.

Now, I suppose it's possible that you don't understand the nuance of the argument, here, and that you weren't in fact setting up a strawman argument as a rhetorical technique in order to sew doubt about the current scientific consensus regarding human-caused global warming.

But, unfortunately I've seen this type of faulty reasoning too often to assume simple ignorance.
It'll come around as an email client again. I hope. I think I used it from 1995(?) until 2002??? Ah, nostalgia.
I was looking for this too, simply so I could share it with the caption "America so powerful it ended the Roman Empire."
fpm is cool - very cool. that said it wont create proper spec files and friends, thus its harder to maintain the packages properly. also they usually ont get accepted upstream due to that.

that said, for python files and simple packages it works well enough!
Your response was out of left field. What was the point you were trying to make?
Ah I misunderstood the article. I just package my application source in a tar during deployment. I thought that's what most people do.
What the hell are you on about?

The closest thing to the proposed encryption backdoor is the clipper chip proposal of the 90s, and that did have severe vulnerabilities that the authors completely overlooked.

And I'd recommend you watch John Oliver's segment about nuclear launch codes to recalibrate your trust in those officials. We've come scarily close to Armageddon multiple times over the last few decades, which was prevented only by sheer dumb luck. Just because it's the scariest thing known to man doesn't mean the people responsible for it aren't incompetent.
I've had and still have similar issue like you do. I have my own smtp server, which sends some alerts to my google apps account. I've setup my Google Apps account to white -list all email arriving from my mail server, whitelisted source domain, added spf records, etc - but my mail still being blocked. First, Google told me that's because I use IMAP and I should stop using it - only webmail, or exchange on iOS devices - fine, still blocking. Then I was told, that I can't attempt connection to the second MX server if first fails - done, still have problems. Two or three month later, they confirmed issue on their end with firewall blocking DDoS by blocking whole /24 subnet, with no fix in sight.

Remember, I am paid user and I went through rounds of bs with their support.

I feel sorry for those, who have to send email to Google Apps/Gmail as part of their business.

(I've posted this as a comment on original story, but decided to duplicate here, if someone will find this info helpful)
Hmm, I don't make any money from it, so... maybe? It's a good question.
Atom/Electron stuff from github also allows you to package a HTML5 application as a native desktop app : http://electron.atom.io/

kinda like cordova/phonegap for desktop
Interestingly, the #1 hit for Tetris on Google is freetetris.org which is endorsed with the Tetris trademark, yet it does not follow these guidelines. For example the pieces do not start "with their flat side pointed down".
As far as I can tell this is more about orchestrating builds, to actually build your game you'd need to run jenkins on an EC2 instance and connect it to CodePipeline.
The Uber Economy Requires a New Category of Worker
Is math broken in JavaScript?
The leaf cert is signed for evil-bastard.net, but the "bad" cert can be for mail.google.com.
It's all about periodization. You want bright in the day, and dark in the night. Most places are too dim for me in the day, and too bright in the night.

There's also the color temperature of the light, which I definitely notice. I use f.lux/redshift as well as red light bulbs at night, and sleep with blackout curtains. On the flip side, I find it hard to wake up in a pitch black room, so I set two clip lamps aimed at me on a timer instead of an alarm.

What would be really nice is to have light bulbs that adjust both brightness and color temperature to mimic the sun. It would be interesting if mimicking a tropical sun cycle would help with seasonal affective disorder.
I can see your point.

However a problem we really do have is that we have lost our expertise. The COTS mandate lead to less demand for the kinds of engineers who could have prevented this breach.

My friend Murray Sims is a naval civil service coder. He rang me up once to beg me to work for the navy:

"People are dying because of software bugs."

Id love to but I get a little loopy sometimes so have no hope of getting a clearance, instead I write technical articles.

http://www.warplife.com/tips/
And the scary thing is that it's not just road maintenance. It's sewer/water, electricity, and bridges, too. There has been so much exurbian expansion in the past two decades where the initial infrastructure costs were paid by the developer but then handed over to the town/county/state for maintenance. The municipalities count on property taxes to cover the cost, but with A) the real estate crash in many markets, and B) a general recession and a move of many younger earners back to urban areas, that money just isn't there.
What I don't like is WebView distributed as a "native app". It's not native app and it's not something I want to install, don't cheat me. Webpages should stay in browser.

I expect native app to be written with Objective C (OS X/iOS user here), having very low memory usage, fast startup and offline usage. Also I expect as much integration with the system, as possible, native controls (not that buggy emulation without my favorite emacs-like keybindings) and native behavior.

Probably we miss an important piece of technology: installable web-apps. Website opened in the frameless browser window, identifiable as a different application which could be easily pinned to Launchpad. With all advantages that "separate webview" has, but with some important difference: sandboxing. So I can feel safe when I launch this application, because I don't need to trust all my files, passwords and system to another application. I've seen that kind of technology in the iOS: website bookmark could be pinned as a desktop icon, but it's just a bookmark.