jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
In the context of REST it means the same server state (a database table state, a mailbox state, file system state etc)

It doesn’t mean “do the same thing” or “get the same response”, only “end up in the same place”.

You can do a delete x, get an OK response, and the important state is that x is now deleted on the server. Then the next call to delete x does nothing (which is different from the first which deleted x!). So to be idempotent it has to do something different. The response in the second case can be both “ok” (because the thing is deleted) but also e.g “x doesn’t exist”.
Copenhagen? Visit Amsterdam. Crazy amount of bikes for decades now.
iOS only
Imagine an API returning HTML, too. I've built such APIs (not public). I consider it best practice. The HTML representation can be utilized as the frontend. At least, its the interactive documentation to the API. In fact, when I built such APIs, I usually started with the HTML representation.
It actually has been supported since about forever. You could even do that in Windows 3.0, albeit in an .ini file.
> scanners usually do not account for the current v vulnerable configuration. So while they may flag a vulnerability, its often a potential vulnerability.

This is a straight-up artifact from the fact that the scanners (which essentially have to operate in non-destructive mode) rely on banner grabbing and very basic service behaviour pattern matching. Hence for every service they find, they report - quoting your words here - the potential vulnerability.

Which basically is what you want. Trying to intelligently reduce noise would be really cool, but the moment the intelligence suppresses a finding that you WOULD have wanted to know about, you're screwed. It's bad either way, but the worst-case scenarios of the two are asymmetrical.

I personally find point-in-time scans a useless exercise. Findings from individual cans are one thing, the difference over time is what really matters.
Just a quick note because it's often confused: the fact that you tolerate infringement in one place will not affect a judgement in another. That will happen with trademark, but not copyright.
I suppose they measure the missing ice, and deduce the sea level.
Most people dont care enough, even on here I would assume, to be bothered by their data being out there and honestly same for me. Cash is annoying to handle a lot less sanitary than just holding your phone next to the merchants.
I definitely appreciate the effort - and the cheese looks delicious (but sadly does not ship to the US!). However, the Ghost template probably needs some updating to remove the "share on Facebook" button.
Lack of green screen is what made this video so impactful. Having a human dancing on the other side of a barrier might have worked.
How is Matrix less secure? As far as I'm aware, all the Element clients now implement E2EE by default.
Well yes, you have a point there when developing for consoles.
>I pay for the walled garden.

Good for you. If non-Apple people didn't need to communicate with Apple people, there is no issue. But that's not how things work obviously.

Apple is INTENTIONALLY making it difficult for non-Apple people to work with Apple people. My mom is 100% apple, and she literally has problems receiving texts from non-apple phones. She wants me to buy apple products just to make it easier to talk with her!

If you don't see what they are doing you are just plugging your ears and going "lalalala"
> However three years on, crypto still does not have a "killer app" and is 99.99% used for speculation

With all due respect, this is completely wrong - crypto has the same killer app it has for years, and that app is _crime_.

Whether you're buying drugs, paying anonymous extortioners, accepting bribes, money laundering, or tax evasion, cryptocurrency is the go-to choice for electronic funds transfer for your modern criminal.
This sounds incredibly illegal. I can't imagine trading like this is wanted by legislators and even if Tether is currently backed 1:1 there is no way that legislators will allow this to keep happening eventually crashing the entire Tether currency into the ground.
That’s hysterical. Thanks for pointing it out!
Philip Glass's music is great to code to.

I don't care much about musical critiques of his work, he is one of the few artists whose music is consistently great to program with.

I can't recommend it enough.
It’s weird to me that when I was growing up the push was that gender roles were social constructs and should be torn down/ignored.

Now it’s “if you’re a girl and you like to play video games, maybe you were just born in the wrong body.”

Gender can’t be just a social construct and also a reason to transition, at least in my mind.
Between this and the fact that Ahmadinejad never said Israel should be wiped off the map[1], I'm beginning to think MSM reports about Iran can't be trusted.

[1] http://en.wikipedia.org/wiki/Mahmoud_Ahmadinejad_and_Israel#...
Specifically, there's almost nobody out there that can handle payments to non-US citizens. Give me something exactly like Amazon FPS, but that allows sending money to somebody in Peru, and I'll pay you for it.
The issue that you describe where your prior merchant account provider billed you a downgrade rate for 90% of your transactions isn't really because they were "high-risk" (they weren't, you have no downgrades). It's an example of "marking up the downgrades" which is a strategy that unscrupulous merchant account providers use to increase their profit. http://transfs.com/blog/marking-up-downgrades/

What they really mean is that the interchange rate that your transaction qualified for is worse than the rate that they set to be your default or "qualified" rate. http://transfs.com/blog/what-is-interchange-again/

These billing tiers are a problem because there is no standard on what is "qualified" and what is "unqualified", it varies between processors and between customers within the same processor. http://transfs.com/blog/tiered-pricing-for-merchant-accounts...

There is a way to solve those billing tier ambiguities (which never are in the favor of the businessowner) - its called interchange plus pricing. Insist upon it, every processor can do it, for any size business.

Basically interchange is the wholesale rate that visa/mc charge the processor. In an interchange-plus pricing scheme the processor pass those charges on to you and explicitly disclose the markup you are paying above that wholesale rate. It's the best way to ensure no funny business is going on with your rates - http://transfs.com/blog/why-you-should-want-interchange-plus...

Only accept interchange plus or a no-downgrade flat percentage (like Paypal offers) - it will save you money and aggravation.
thx dxbydt. VS itself isnt xplat of course, but who knows where things will end up now that Azure is a big focus. note that VS does provide more & more linux support (eg PTVS does remote debug).

also chances are you wont have to spring for it as VS (community edition) is free :).
I disagree with this interpretation. It remains 0 day until it is patched or has a work around (disabling the service). Further still the date aging starts begins when the bug is disclosed publicly, or broadly if not publicly. Internal disclosure doesn't count. It remains 0day even if you share it with a friend. The measurement of days has to do with its usefulness (to an attacker) and that begins to diminish after wide disclosure. Then again, the term is also completely irrelevant.
If I understand this right, this would have the subsidiary be ONLY distributing to Youtube, and a different one distributing to the other services, which would then fall within the "release it here at the same time you release it anywhere else" clause, right?

Seems like a clever hack, I like it.
My heart also aches at the state of affairs in intellectual property law. It's a terrible system from top to bottom that serves mostly to suppress creativity. It badly needs to be re-engineered, but there are far too many vested interests to make that practical.

I haven't thought back to Forensics in a very, very long time. Geez.

If you think my attitude is hostility, then I submit that you could stand to benefit by reading my comments more carefully.

EDIT: Also, DistroKid doesn't allow me to set my own terms. It doesn't look like what I proposed at all.
Some companies like Blizzard use torrents for downloading updates (though you can disable it in the launcher settings IIRC).

The hurdle is that need to verify that each file isn't modified. Otherwise someone could spread game hacks by modifying the game files and sharing them. E.g. make other players the drop all their items or what else the modified client does..

The simplest solution would be to use a single singed file per torrent. However, that way users need to keep a copy for sharing after extracting the contents. In your example ~3GB occupied on the user's hard-disk space in order to safe you some traffic.

The other thing to consider is esp. for F2P you lose potential customers if the download takes too long (and users abort). So unless you are sure that enough users are sharing I wouldn't recommend it.
> A candidate comes along and asks all kinds of question about tests and documentation and all that boring stuff. You know there are some pretty serious deficiencies, but you don't want to scare away the candidate.

If a candidate is asking about tests and documentation and process etc, it's likely because they have strong opinions on them. Let them know what it's like currently, and maybe what what the plan is, so they can decide if that's going to work for them. Personally, I'd ask about process because I enjoy being a cowboy, and a strict release process is not for me.
Good luck, it's a hot mess. I spent considerable time last year porting boringproxy to run on Android. There are countless hoops to jump through for running server software, including:

* You have to run it as a foreground service so the user knows it's running. Not a problem in theory but annoying to implement.

* DNS name resolution doesn't work by default (with Golang at least) because android doesn't use resolve.conf. I solved this by setting DNS servers manually to 1.1.1.1, 8.8.8.8, etc.

* You have to do weird hacks in order to run native applications such as Golang programs.

* Android has endless optimizations for battery life that are trying to shut down/throttle your program. One example I would see huge performance differences as soon as I turned the screen off.

Overall I consider Android to be a very hostile environment for native applications, and networked apps in particular. iOS is even worse from what I can tell. We need a mobile OS that respects the user's control over their device. I'm fine with sane defaults, but it should be easy to switch them off. I'm hopeful for the Pinephone, but we have a long way to go.
Knowing where your Jewish friend lives is fine. Having a list of every Jewish person in your zipcode (or every X) is like holding a handgrenade.

When the Ashley Madison hack happened a whole mess of blackmail was the result.

I have had someone target me in an attempt of blackmail due to a forum breach (why they thought an anime forum was good blackmail beats me...)

Your browsing habits, which is a step removed from PII, even reveals your sexuality and pregnancy status.

And, we had an attack on Jewish people in the last month. We have not had anyone Democrat/Republican hunting.
The approach has been around for a years (see my comment in that thread, for example), but very few of us use it.

The thing you'll run into with that approach is that no authors of gems and plugins that include AR models declare attributes as accessible, effectively assuming that mass assignment is enabled and resulting in the gem/plugin not saving properly. I've had to fork and submit patches for every hugely popular gem with AR models I've used, so it appears practically no one else follows this approach in production apps.

I strongly suspect that leaving all attributes mass assignable on all models other than generated user models is extremely common in Rails apps and it's very likely that this vulnerability is ubiquitous.
What you've pointed out are problems with large governments in general.

Australia still has a lot of problems and when you have larger states that means the law applies to more people. Even if the majority of people are in favour of a law, they're still forcing the minority to abide by their choices and that's pretty much mob rule. On the flip side, if there's fewer people voting in elections, a minority of voters can force the rest of the people in the state to be represented by some jerkoff politician.
This is a very good, and to me a very surpising move by Visa. Instead of ignoring innovation (like brick&mortar bookstores, cable companies), they embrace it. Something I definitely didn't expect from a corporate mogul like Visa.
Considering I got a call from Capitalone this morning saying my credit card that I had on PSN was being used to buy gas in Connecticut, I think this is probably a fairly legit article.

Certainly possible that it's purely coincidental, but seems unlikely.
I pretty much do the same - mostly since I decided to typeset my resume a while ago, and converting it to anything, particularly MS Word, just feels like a travesty.
As a person living in Seattle (rains a lot!) who is of a darker skin color because of my race, I get told every now and then that I must be very lucky because I'm never going to be Vit D deficient.

I'm surprised that people think having darker skin color means I already have oodles of Vit D, when it's quite the opposite - people with dark skin color synthesize less Vitamin D on exposure to sunlight. I probably need lot more of that big ass star :)
Most people love Google, they offer useful services. I think they'll be one of the bigger 'disappointments' in this whole scene as it fully unravels. The entire system needs to be decentralised, and quickly.
> How about we just use different domains?

> .org is gone, use .com or .net or any of the other hundred of domains.

What about all the broken MX records?
> Another quarter were explicitly experimental (labs, glass, ara, etc.).

How many years was Gmail in "beta"?
The travel part, yes it would be.

But something like an aircraft carrier, made for mass killing of other humans by allowing to project power and deliver weapons closer to the enemy does not get me in awe.
I think that applies for many (most?) of the best things in life. Only the mediocre bits can scale.
So is it typos? Like one letter off?

I can imagine someone mistyping an address, and then reusing the "to" link.
Dangerous, yes.
Toxic, yes.

But racist? Why can't I decide to change my appearance?
Long ago I read a (4chan I think?) post from someone claiming that it was very possible he knew the people who did this hack.

He said he wasn't 100% sure, but that there were strong reasons to believe so.

He explained that he used to hang out with 2 brothers, one of which had some mental issues, perhaps autism or something similar, that acted strange at times, and that seemed to have skills with radios and other tech. He also remembers that a girl which is very briefly shown in the hacked video stream looked like the girlfriend of the other brother.

Also recalled that the voices in the stream sounded familiar and I think he even mentions remembering that they had a sheet of metal similar to the one in the video, and that his theory was that the brother with autism was the one with the mask, while the other one rotated the sheet of corrugated metal, while the girlfriend was recording them.

Anyway, I don't remember the exact details and of course I'm not saying the story is true or anything...

But it did have some interesting air of mistery even if it were false. The poster didn't seem like he was trying to lie to anyone, just that he genuinely thought he kew the people responsible for the hack.

And then the story he was telling suddenly portrayed a very cool and odd piece of tech "history", if it were true.

To me, this always sounded a little bit like real-life cyberpunk stuff and every time I remember about Max Headroom I'm reminded of the hack and the story I read by random chance, on a random forum like 4chan, thinking, what if it was real and I was just reading there a post written by someone that knew the Max Headroom hacker...? I wish very hard for that to be real.

Well... I'm rambling here, but I guess that's the magical internet a lot of us feel drawn too?
Merkel is ISIS? I am Al-Qaeda? And everyone I write with who is a US citizen can be monitored, too?
That is a really interesting question. Given the "control" was also given a writing exercise, I think it opens a lot more questions. If we hold it true that the 15 minute writing assignment makes a difference by itself (questionable, obviously), it would bring up interesting questions about male versus female motivation, where males do better when writing about others' motivations while females do better when writing about their own.
Well, this advice didn't mess me up but pushed me in the opposite direction.

When I was a kid, my parents told me that little girls like me should study in a local college, get good grades, find a comfortable job (preferably an accountant), settle down in the same city (as my parents) and get married by 21 (years).

My college was in a different city as compared to where I grew up. This really helped in teaching me how to live on my own. I took to computers, interned at a couple of companies and got hired by another software company, moved to the United States, and dated and married a fellow computer nerd a little over a month ago (let's just say I'm way over 21 now).

I think I did well.
I think this is the source of most young picky eaters. They just aren't hungry. I know my kids are picky unless there are no snacks in the house, then suddenly they like everything!
"Your whole computing environment ought to follow you around," explains Houston. "Your financial records, your health information, your music playlist . . . anything that’s ‘mine.’

I really hope no one is storing their financial records and health information on Dropbox...
You won't like the exercises in Reactive Programming then. Not only are they a confused mess that is difficult to relate to the source material, the source material itself is confusing and poorly motivated.

PS: SICP is not written either by or for Coursera, or even particularly adapted to it. If you use it as the main supporting material, what is the point of Coursera at all? In contrast, Grossman's notes were written by him and directly support his course.
Only for you, specifically, because you're in the enviable position of being financially independent. Despite this, you must surely be aware that a great many people must continually earn money at something like a "job" in order to survive.
Seen.co - New York City Looking for: Full-Stack / Architects / Data Hackers Come join a growing team tackling a big challenge - summarizing mobile stories by ranking their real-time media and alerting users to what’s noteworthy by building automatic summaries. We're doing it with smart, decent people, and funding from great investors in one of the best cities in the world!

Our team is made up of experts in search, ranking and mobile products. Altogether we are applying 2 patents, 8 papers and 3 Google Research Awards to integrate machine learning with breaking news and social curation.

We're building a core of passionate devs and the next few hires will have an important hand in the direction of the product. The existing team has experience at Yahoo, Endeca and Frog Design and we value folks who are curious, hard working, humble and love a good challenge.

Full list of jobs and descriptions here: https://angel.co/seen/jobs or just email us directly jobs@seen.co
This does have David Chaum as one of the authors so that’s good for privacy, but I doubt any real CBDC implementation will allow for true privacy.
I know you are joking.

But asides from the securities offered by the typing system and borrow checker, Rust (and Go; and maybe others to some extend) have going for them is that the compiled binary is "OOTB".

I'm on ubuntu, and it seems all python tooling is there to start running Gamestonks Terminal. But more often then not, getting a Python, Nodejs or Ruby project running requires a lot of fiddling, insider-information (what is npx, why did pipenv just break my entire desktop, why is this 'rbenv' thing giving these weird 'RVM' errors?).

A rust project: download it, unzip it, run it. A very short Daft Punk song, really.
(1984) tag please
> TL;DR - money is already digital, what central banks really want is centralized accounts that they can helicopter money into

I don't think it's the main motive, the central bank could send money directly on my bank account if they felt like it.

As I said previously :

> Digital currencies allow for full tracking of every transactions and are a privacy nightmare.

> They allow applying negative interest rate on everybody and they would facilitate neverending hyperinflation (no need to print new bills at great expense).

> Hence they can't coexist with cash so say goodbye to cash.

> I don't like where we're going.
You may be overreacting to one news story. The US Air Force designed the F-35 successor and built a prototype much faster and less expensively - in just one year - using advanced digital engineering and manufacturing simulations:

https://news.ycombinator.com/item?id=25797112
I most often use it when reading a news article that has a short clip, to be able to scroll down to read the rest of the article while playing the clip so I can keep an eye on when the interesting part comes.

Also for keeping covid press conferences open while I do other stuff. I could move the tab to a new window and then resize it to only show the video, but this is far less effort.
Diplomat a liar, who wants to bundle Covid costs as Brexit-costs for political reasons, works just as well...
Is it impossible to reach and provide your service to Spotify merchants without going through the Spotify app store? If yes it's hypocritical, if not then the situation is totally different than what is going on with Apple.
I got a wake up call about 4 years ago when my broker tried to convince me to buy into a hedge fund. Buried in the prospectus was an entry load of 8%. Fired him, and have been in index funds since.
I'm inclined to agree. There are some things that the cables have revealed that IMHO are worth leaking (e.g., the US using its diplomats in the UN as effectively spies, conspiring to acquire biometrics for top UN officials, and violating the Vienna Convention by conspiring to spy on diplomatic communiques). The rest of the stuff is mundane, uncontroversial, and honestly, should not have been leaked.

Governments desire and need privacy for a great many reasons, and IMHO unless this privacy is used to abuse governmental power or commit a gross injustice, the government ought to be entitled to it, just as we are entitled to our privacy unless a crime (legal or moral) is suspected.

Don't get me wrong, I think whistleblowing organizations are a fundamental part of a healthy democratic process, but this indiscriminate "the US is not allowed to have secrets" thing is unproductive, nor is it fighting any injustice or abuse of power.
In Rust to_lowercase returns a String, which is an owned struct with heap allocated data, so it is reasonably clear that it allocates. In contrast, trim_start for example returns a reference to a string slice with the same lifetime as the source string, so again it is reasonably obvious from the type signature what's going on.

The mistake here really is trying to do case insensitive string comparison by converting both arguments to the same case, then comparing them with case-sensitivity. It is much better to compare them directly, but case-insensitively.
Pretty much. What do you think "loyalty" cards are actually for?