skysight-inc/HackerNews huggingface dataset:
That's not entirely accurate. You do get updates, they're just on the patch branch. See http://www.openbsd.org/errata57.html.

Running -stable is fairly simple. If you don't want to rebuild on your DigitalOcean VPS, cut a new release after an update locally, and then apply it on your VPS. See http://www.openbsd.org/faq/faq5.html#Release. This should be fairly simple to automate (and you could even write a script that only packages up changed files if you were so inclined).
Could a planet maintain an atmosphere for any length of time under such variable attraction?
Nobody said anything even remotely rude, let alone "rude at best". Nobody said you don't find coding fulfilling, and nobody said you should do something they find fulfilling. Nobody said coding isn't creative, either.

I think if all one does is code then the vast possibilities life offers is being ignored.
It's possible that when nobody is working in the room, the lights aid in maintaining a sterile environment.

At specific wavelengths (~245-265 nm), (UV) light inactivates quite a few living things. As light is quantized, the purpleish color you see is due to e- stepping down.
I was reluctant to use Web Components in any personal project and shoo'ed my coworkers away from using it on commercial projects because the uptake by browser vendors seemed so lackadaisical. I'm thankful to Mozilla for explaining the reasons why -- it's complicated! noone agrees!

I am loathe to polyfill modern browsers adding completely needless overhead trying to chase some panacea. At least Chrome and Firefox need to agree on (and be in the process of implementing) a feature for me to consider using it and polyfilling it.

The Web Components thing seemed overengineered and too much work for component developers to get wide adoption outside of widget toolkits. All that behind-the-scenes offsetTop confusion tells me that the way Google envisioned makes it a bad fit for the DOM/CSS/JavaScript hodgepodge cruft-pile that has built up over the years. The fact that there are so many open proposals out there for the various features should be a signal to architects to run the other way on Web Components.

So, into this vendor mess strides React, (and to a much lesser extent Angular and Ember due to ocean-boiling), which gives us a fancy component model atop standard DOM and JS. And at just the right time -- web apps are far too big this decade to be coded monolithically. I mean, everyone knows that, but what could you do about it before a decent UI component framework appeared?

Being able to compose your app in terms of nested components is the way build large, high-quality, well-tested web apps because it lets us reason about parts of the UI rather than the whole. And the DOM performance with React ain't too bad neither. And being able to render the same React component statically on the server and dynamically on the client solves a lot more problems too.
How can I promote my app without depending on Google Play?
Operating System of New Horizons Spacecraft
> ? Can React also connect with backend APIs to fetch JSON and present them on the front-end?

Technically? No.

React doesn't include the direct code to main API calls. You're still going to need to make the 'API calls' 'yourself', whether with jQuery or raw XMLHttpRequest or whatever. React comes into play when you have the data and you're ready do actually do something with it.
I hate calling this stuff out, but this is stupid. React and Angular are two totally different things. React isn't even a framework. It's like all that awful "nodejs vs. Rails" stuff from 1-2 years ago.
> For one (small) thing you get into the absurd case were the court will have to commit the same crime to verify a crime was committed.

That doesn't seem like a strong argument, because it applies to a lot of other things as well, like illegal drugs. (And if the court relies on witnesses to establish that drugs were possessed, they could technically do the same by cp.)
That means, only releases that have no other known high severity bugs...
C'mon srj's suggestion isn't that bad.

I'd be tempted to put it into REITs. The main thing you want to avoid is having your investment move in the opposite direction to house prices. If the REIT goes down then it's likely that the house you were going to buy has also gone down in price.
Interesting part is that the bug was introduced in the latest versions and has been fixed by the person who inserted it :-)

Bug added: https://github.com/openssl/openssl/commit/da084a5ec6cebd67ae...

Bug removed: https://github.com/openssl/openssl/commit/2aacec8f4a5ba1b365...

Although that's just the committer: https://twitter.com/agl__/status/619129579580469248
GMail may not use public blacklists, but they definitely have IP-based reputations that feed into other blacklists.

Just a few years ago, I personally experienced this sending email between two GMail accounts, and then I noticed that my (workplace!!) IP address ended up on a public blacklist within an hour. Fortunately I noticed fast enough to get it removed before any mail delivery was affected.
At least here in the US, Old Gregg is pretty well known outside of The Mighty Boosh. It went around independently as a viral video a few years ago and wasn't directly associated with The Mighty Boosh.
Fun read, though it seems that either React is almost always the better choice over Angular 1.*, or this author just prefers React over Angular.

I'm thinking the latter is the more likely of the two, but consider my interest piqued. I am a full time Angular developer, but for some time now I have felt obligated to try out React.

Side question: does anyone have any real experience with integrating Firebase with React a la ReactFire? I am currently working on an early-stage app using AngularFire, but it's still early enough to change if given a compelling reason to do so.
Well on Ubuntu I see nothing yet... http://www.ubuntu.com/usn/trusty/ I do not know if this is good or bad :(
How a team of young people helped rebuild healthcare.gov
Node.js APIs: Roll your own or use LoopBack?
Unless you are using client side certificates, this one is not your problem.

But everybody must upgrade their browsers ASAP.
If you think you need something like this, I highly recommend that you take a few steps back and rethink how you are doing things.

One of the nicest things about designing a React app is that React makes it so easy to divide your app up into tiny little components that compose and reuse well, and are really easy to understand. Where an angular app might have 5 different controllers and accompanying templates, a similar React app might have 50 different components.

One of the reasons that it's so easy to split off a new React component is because JSX is inline. Putting that into a separate file increases the impedance and maintenance burden substantially.

In other words your

var createItem = function(itemText) {
return <li>{itemText}</li>;
};
return <ul>{this.props.items.map(createItem)}</ul>;

Is much more likely to be:

return <MyList items={items} />;

who wins now?
Ignoring the bias of this article, this comparison makes no sense. AngularJS is a giant framework with all sorts of tools and stuff. ReactJS is a view/two way binding library.

If you are going to compare something, why not do it correctly, and compare it against like a Flux or something.
Just to point out that Dan Abramov's talk is about Redux, his implementation of Flux (not Reflux)

https://github.com/gaearon/redux
https://adblockplus.org/acceptable-ads

No applicant will be favored or treated differently,
and no one can buy their way onto the whitelist.
Everyone has tocomply with the criteria and everyone
has to go through the same process before the ads
qualify as "acceptable."

https://adblockplus.org/en/acceptable-ads-agreements

Do companies pay you for being added to the list?

Whitelisting is free for all small- and medium
websites and blogs. However, managing this list
requires significant effort on our side and this
task cannot be completely taken over by volunteers
as it happens with common filter lists. That's why
we are being paid by some larger properties that
serve non-intrusive advertisements that want to
participate in the Acceptable Ads initiative.
Ooh, it did not say that anywhere. That's great, can't wait to give it a try.

Do I get notified when my device has successfully forwarded something through a passer-by? That would motivate running it a lot and might be a nice viral effect.
You're still relying on the central limit theorem (i.e. a reasonable amount of data) : using t instead of z just corrects for the fact that you only have sample variances instead of population variances.
However, I suppose it's not unreasonable to assume that the ratings are likely to have a bell shaped distribution (which could be checked), so the normal/t approximation is probably going to be OK.
(There's a minor typo in your website: SMPT should be SMTP)
The point is that most semiconductor predictions come true, whereas biomed predictions are much less reliable. Unfortunately, that is a reflection on the latter's practitioners as they are aware of their poor odds yet still publish.
The title says
> React.js Introduction for People Who Know Just Enough JQuery to Get By

Unless you're working at a really big shop, designer these days is almost synonymous with UI/UX engineer or front-end engineer. Considering the target audience is JQuery users, React is not too far of a jump and doesn't have to be restricted to "complex" websites.
Waow that sucks, they don't even update the URL with anchor links!
Consumer Attitudes on Housing May Signal Healthier Purchase Market Ahead
VirtualBox 5.0 officially released
I use Feedbin.

The web view is attractive but not decorated, and it has folders and keyboard shortcuts.

It also can be used as a backend for Press, a newsreader for Android.
Looking at Home Loans – Mortgage 101
No you moved the goalpost from half-justifying, to "tough shit, sometimes you just gotta deal with it". Which I agree with insofar that some things are just "the way they are", but it's a completely different argument.
I'm going to be a little blunt and say this.

You're a full time Angular developer, you obviously know more about Angular then you do React. So why would you switch to using React? At the end of the day both can do the job just as well.
am a hacker looking for those who got old bank account in usa and canada td bank to load no upfront fee charge iload it we share it 5050 email me hamzaben.d@hackermail.com leave your phone number
Google allowed the advertiser to easily discriminate

This is definitely the case:

With demographic targeting in AdWords, you can
reach customers who are likely to be within the
demographic groups that you choose. Demographic
groups that you can choose from include:

* age
* gender
* parental status

For example, if your business caters to a
specific set of customers within a particular
age range, gender, or parental status, you may
want to target your ads to this audience because
they’re more likely to be interested in your
products or services.

https://support.google.com/adwords/answer/2580383?hl=en
Slack update 2.10 lays foundations for “top secret” feature
You can also install a firewall (AFWall+) to block apps from sending any data. This and ad-blocking is why I root. The disregard to privacy is crazy nowadays.
http://people.canonical.com/~ubuntu-security/cve/2015/CVE-20...
This is not too different from a harmonic drive. In fact it's basically a single-planet epicyclic drive inside a harmonic drive. Kind of nice but I don't know if it counts as a new type of gearbox.

https://en.wikipedia.org/wiki/Harmonic_drive
This is a very bad article. I'm not sure I really have more to say about it. Shocked to see this at the top of HN.
Is that right? My reading of it is that this affects all cases where you verify the certificate
Well, Firefox and Chrome use NSS, IE uses SChannel. Not sure about Safari or mobile browsers, but I believe the majority of desktop browsers will be safe.
Or just having some really reckless competitors. Uber-vs-Lyft style reckless.
It´s for old version. For example actual debian not affected. https://security-tracker.debian.org/tracker/CVE-2015-1793
am a hacker looking for those who got old bank account in usa and canada td bank to load no upfront fee charge iload it we share it 5050 email me hamzaben.d@hackermail.com leave your phone number am a hacker looking for those who got old bank account in usa and canada td bank to load no upfront fee charge iload it we share it 5050 email me hamzaben.d@hackermail.com leave your phone number am a hacker looking for those who got old bank account in usa and canada td bank to load no upfront fee charge iload it we share it 5050 email me hamzaben.d@hackermail.com leave your phone number
Seems to be OK for anyone using non beta versions of Ubuntu as well:

http://people.canonical.com/~ubuntu-security/cve/2015/CVE-20...
One benefit of React that I haven't seen discussed: Learning it made me feel like I was improving as a programmer. The best way to improve React applications is to learn more about the concepts behind function reactive programming, which is a skill that transfers far beyond the world of frontend development.
> In the end we're living in democracies and have to take the opinion of the people into consideration. When a huge majority doesn't want GMO, then we shouldn't use them.

Tell people to ban insuline and other GMO, people don't want GMO because of FUD
Some Java developers not all. It's a very big ecosystem after all.

You typically don't see the same patterns used in Dropwizard, Play and Vert.x style applications.

And the rationale behind was not out of peer pressure but just reflective of an era in software development where you were taught to abstract everything to make it easier to implement changes in the future. But that time has somewhat passed and even libraries like Spring moved to annotations over XML bindings.
am a hacker looking for those who got old bank account in usa and canada td bank to load no upfront fee charge iload it we share it 5050 email me hamzaben.d@hackermail.com leave your phone number am a hacker looking for those who got old bank account in usa and canada td bank to load no upfront fee charge iload it we share it 5050 email me hamzaben.d@hackermail.com leave your phone number
s/old/recent/
It would stop some tracking, but the people doing the tracking have many clever (and some not so clever as sometimes the simplest things just work!) ways to fingerprint you beyond cookie values. See things like https://en.wikipedia.org/wiki/Evercookie for an example of how much trouble you really need to go to in order to try avoid being tracked.

I keep toying with the idea of writing an add-on that doesn't just destroy tracking cookies (well, any non-white-listed cookies) but instead shares them around randomly - so next time you visit a site you might have the cookie from last time I did, or someone the other side of the world... That would also not affect anyone using mixed techniques like Evercookie (the discrepancy between what each state store has recorded could be seen and used to throw out the data instead if letting it pollute the tracking pool). Of course care would need to be taken here: if you share cookies from sites that take authentication you could open up session hijacking vulnerabilities. Only storing/sharing cookies from HTTP sites might help (no site requiring authentication should be running through un-Sed HTTP) but wouldn't be a perfect solution.
So, updating server side OpenSSL will not close this vulnerability (for servers offering https-protected websites)? Is that correct?

If I understand the advisory correctly then this means that somebody could set up a webserver with a specially-crafted certificate and pretend to be somebody else, assuming that the client is running a vulnerable version of OpenSSL.

Is that right? I wish they would write these advisories in a slightly more helpful fashion.
Yes and most web servers do not use client certificates and do not have any need to validate certificates.
They've switched from coloring the background to adding a yellow "Ad" marker on each ad: https://www.google.com/search?q=credit+cards
it doesn't go into specifically exploiting your machine but the infamous Jones Forth is ~1000 lines of assembly and ~a billion lines of comment explaining the assembly and this gets you into a functioning Forth, then it starts writing everything else in forth, including IF, WHILE, DO UNTIL... which shows how you can use the parsing words to write new language features.

https://rwmj.wordpress.com/2010/08/07/jonesforth-git-reposit...
There is no best. There is just a best for you/your style.
I agree, I've seen lots of fun things like this on the internet. But good ideas are hard to come by. I did something like this a few years back, for favicons:

http://tech.arantius.com/favicon-survey
> We dont see any need to actually risk anything with crops that have been modified when we have perfectly great crops already.

What risk? Can you provide ant source for that risk.

And, by the way, apart that we don't have perfectly great crops, those crops are already totally modified.
tl;dr - if you're adding two numbers in your algorithm (like finding the midpoint in a binary search), make sure their sum can be represented in the resultant type.

Basically: "watch out for overflows"
I don't know. Cynic in me thinks that this may be in fact work of professionals, who don't have time to care about irrelevant things such as quality, that do not affect the bottomline.
Greeks Spend in Droves, Afraid of Losing Savings to a Bailout
"I can tune my instruments so that no other instrument that is not similarly tuned can tap my messages," Marconi boasted to London's St James Gazette in February 1903.

Yet another reminder that it's no challenge to create a cryptosystem that the inventor themselves cannot break.
I have looked at react.js a couple times after reading more and more buzz about how fantastic it is. However I'm instantly turned off of switching to it when I read that HTML (which isn't HTML and is actually something called JSX) goes in your js files.

With angular I can keep all my HTML in my HTML files. Is this normal or am I completely missing something?
How revolutionary does it end up being if you have to farm out a lot of hte stuff you'll do to other JavaScript libraries which presumably do not have a native component?
AngularJS already has third-party libraries for polymer/webcomponents, and from what I've heard, they're integrating it more solidly in Angular 2.0

React is pretty new, once it gets bigger it'll also follow along too.
Crop patents are older than GMO, a lot of crops and seeds are patented. Do we have to ban them?
No, it cannot. As you can see in this video from the site where he explains the mechanism:

https://www.youtube.com/embed/vbU1afvCRwc?version=3&rel=1&fs...

When he tries to move the red ring against the green ring (at 2:39), the thing doesn't budge. The gearbox concatenates two such transmissions, therefore, it cannot be operated backwards.
>If you mean that he doesn't think "quantum" can solve NP-completeness, well, of course he doesn't... he understands the mathematical proof that it doesn't, so that's hardly surprising.

There's no proof BQP ≠ NP (as well as no proof it does).

Scott thinks it doesn't, but doesn't have a proof (if he did, he'd also have a proof of P≠NP (and showing something implies a resolution of P versus NP is a great proxy for "it's not easy and hasn't been solved yet")).
I too find that unusual. I feel it's hard to maintain the HTML when it's int he JS.
Yep, that the bug was recently introduced was implied from the notice they put out.

For interest, the line that was fixed from the first commit is:

https://github.com/openssl/openssl/commit/da084a5ec6cebd67ae...
Tech Meets Denim: Jeans Made of Tencel Fiber for Ridiculous Comfort
Angular vs Ember perhaps would be more appropriate.
Many athletes I know practice every day, or nearly so; they may not do high intensity workouts every day, but not all practice is high intensity workouts.

And the physical reasons for resting between high intensity workouts don't apply to intellectual activities, and AFAIK don't have a clearly established direct analog that does, either.
I guess the idea is that maybe they'd like to do things that they can't currently do? I'd even argue learning React is more compelling for someone who's never used any of the competing products that for someone who has.
> Even Vanguard can be overwhelming for some people who have to make choices on allocation[1].

What's wrong with their Target Retirement 20?? funds if you don't want to choose your own allocation?
Hibernating bears could hold the key to long-distance space travel
> Similarly, I can buy a DVD and watch it forever, instead of shelling out for Netflix each month and hoping that they don't drop that title.

I agree and I have piles of DVDs to show for it. Here's my problem. One DVD is a fine example, but what about 10, 100, 1000? At some point, it's worth it to use Netflix for storage.

I also have stacks of VHS tapes, and audio cassettes and LPs. The life of my playback hardware is finite. I can refresh the hardware or somehow try to copy my old media to new media. I'll have to think what I might have done different if something like Netflix had existed when I started buying audio and video to own and accumulate.
No Linux support. Oh well.
7 traits of a successful business- with 7 great examples from real life
When I was younger and reading on the web, (the days of 28k modems) I didn't skim as much as a do now. I would put this to my inexperience of reading then (thinking that everything needed to be read). And that now there is a lot of crap on the internet. Its hard to sort out the good stuff that deserves attention. So i skim a lot.

But paper books are king. I tend to move slower through the text and have a more enjoyable time of it.
> The problem with Java(lang) is the culture.

Maybe 8 years ago. Other than Oracle itself the language, the libraries and the culture has changed rather substantially over the last few years.

> Instead of writing programs in a pragmatic way, Java devs feel the need to forcefully over architecture code bases, because there are afraid that a colleague looking at their code will not find it JEEish enough.

Much of the over-design in older Java has to do with ancient methodologies of writing massive specs and having review committees. It has nothing to do with not being JEEish or whatever abuse of keywords you want to make.

> Obviously Go doesn't have the same culture...

Actually I'm starting to see many many Java programmers use golang because many Java programmers are system-like programmers (middleware or whatever its called these days). I guess their behaviors will magical change right?

> So it's easier to hack something quickly with a bunch of functions and variables, like in most dynamic languages.

Well that is true but writing classes in Java is not exactly hard. If it helps you can think of the classes as modules or just files you put your code in. You don't have to write OOP in Java and some would argue most of Java is not OOP.
Ah yes, true. Let's call it a bias/variance tradeoff ;-)
A bit out of the topic,

But I think generally if your site is not using top 3 popular CMS-es like WP, Drupal and Joomla - this will make 99.9% of attackers to move on and scan for easier targets elsewhere.
Yes, i think you miss something important here. It's a tradeoff. You should make your choice based on pros and cons, it's more objective than subjective when you hate something and you don't use it. It's harmful and useless thought:)
I suspect this got onto the front page of HN based purely on mistaken identity.
Helping entrepreneurs connect with each other
So you're saying 5-star systems are just like a binary?