skysight-inc/HackerNews huggingface dataset:
The tangled web[1] / browser security handbook[2] are worth reading.

[1] https://www.nostarch.com/tangledweb.htm

[2] https://code.google.com/p/browsersec/wiki/Main
Many years ago I worked as a copy editor. For a while I imagined, as many copy editors did, that my task was to enforce the rules of the University of Chicago's Manual of Style, especially regarding placement of punctuation with respect to quotation marks, "which" v. "that", etc. Eventually, I understood that making such changes was useful, but not really what editing should be about. It is possible to have unreadable or awkward prose with perfect comma placement, semicolon discipline, and no "which"es without a comma before them.

I doubt that I was or am nearly as good an editor as he is a coder. Yet I think that there is a logical progression (not a natural progression, since we don't all make it) from knowing the rules to knowing what the rules are for, to having the confidence to break them when it makes sense.
Just because the forest has more mass does not mean it produces more food. Trees produce tons of mass in an evolutionary war to be taller than all the other trees and get more sunlight. None of it is edible though.

All of them are in a highly competitive war for resources. Plants produced poisons to kill other plants. They try to spread their seeds faster. They try to grow taller and faster and steal sunlight. They grow bigger roots to steal water.

No plant wants to be eaten, and so many produce poisons and thorns other deterrents. Few of them keep all their calories in one place, and require highly specialized digestive systems which humans don't have.

The exception is fruit plants of course, but they only produce the minimal amount of food necessary. The fruit you buy in a store has been extensively bred by humans to be so large - and this domestication has a massive energy cost that makes them uncompetitive in the wild.

Anyway the point is that the wild is not optimized for humans at all. It's an incredibly inefficient way to produce food. The plants are spending most of their resources fighting each other, and insects, and everything else. The winner of this game is whatever plants reproduce the most, not the ones humans want. Permaculture is really cool, but you are never going to get anywhere near as many calories per unit of land.
You forgot the opening curly brace ;)
I wouldn't but that doesn't mean anything. Ruby/Rails is still used by a lot of startups and there are plenty of jobs available using it. There are some quick advantages to getting something done and usable as well.

I have been specializing in node for the last few years, but still do a lot of C/C++ work too, so can't knock any of those.

I'd say node is a safe bet, as JavaScript is here to stay, although I am sure it will have changes and new incarnations in the future. Not that Rails won't be around, but JS allows you a bit more flexibility in the job market IMO.

As for new stuff to learn, there are a ton of things you could learn. Golang and Scala come to mind each solving a different problem. If you are already an experienced developer and just looking to learn the next thing, then pick something that will round out your skill set more, otherwise pick up node in my opinion.

Also, if you don't already have experience and you want to be marketable, I'd also suggest really learning 1-2 data technologies, maybe ElasticSearch, Solr (really lucene period), hadoop, or cassandra etc. To me those are all technologies that have specific uses and can solve real world problems for companies and make candidates more valuable.
The Web App Hacker's Handbook is the gold standard for web security books.

The Tangled Web is a good primer on browser security, which is a deeper topic.

The OWASP Top 10 is worth knowing because it's a widely recognized metric, but OWASP itself is not an especially great resource.
That's one of the reasons I'm on a VPN right now. I'm at a rental place, and the owner is reasonably competent technically (ex-DEC engineer - we have some good chats), but I still don't trust that his router is 100% safe. Come to think of it, I don't trust that mine is. Maybe I should start using a VPN even while I'm at home. Unfortunately, this can introduce a few problems of its own.

(1) You have to trust the VPN provider. Not a big problem in this case, but worth mentioning.

(2) If you have to be on your work VPN as well, you're going to have a bad time. Being only on the work VPN often isn't an option, as a lot of personal use might run into blocks and/or violate the company's policy on use of their resources.

(3) Some sites block VPNs, either intentionally or unintentionally. Just yesterday I noticed that Tumblr is blocking most (but not all) of my VPN's connection points. It's probably just an overzealous anti-DOS system rather than a deliberate block, but the effect is the same.

We really do need a better solution here. Jeff's right that home routers are a huge vulnerability. DNS and BGP hijinks are too effective and well known to leave them unaddressed any longer, and there are other issues that need to be solved as well.
The whole point of the talk went flying over your head.

In fact, he proposed the total inverse of what you say.

He said, code standards like PEP8 are good, and should be followed. But those are only code formatting standards.

The beyond part wasn't about doing things "his way instead of the standard way" but about doing things the Python way (idiomatic Python) instead of ad-hoc or mimicking other languages you're familiar with way.

What he showed are common standard Python approaches to solving issues, taking advantage of what Python offers instead of writing in C or Java etc style.

Really, your comment couldn't be further from the spirit and content of the talk.
The OWASP Development Guide 2.0.1 is from 2005, but it's still relevant: https://www.owasp.org/index.php/Projects/OWASP_Development_G...
Exactly. This is such a stupid, nonissue article. Relying solely on ignorance of what pizza names mean.
"I want to study medicine because of a desire I have to help others, and so the chance of spending a career doing something worthwhile I can’t resist."

Let's get real--this is said over, and over again, and I've never bought it. I won't go into the mind of the typical pre-med student, but being altruistic is not a trait I have seen in U.S. Medical students, and their sense of altruism doesn't improve with age.

It's a short article, and I honestly didn't read it closely, but I'd rather have it titled "How many lives does a doctor improve?"

There are a few questions I ask myself, whenever I meet a new doctor, and it's these; "What is this doctor's estimated kill card(the patients who died under their care), and does this doctor make conditions worse?"

I do take external factors into account when I make this unscientific judgement call; like the doctor's willingness to take on the sickest patients. The socio-economic status of the doctor's patients. The real reason this person became a doctor(it's usually not that hard to figure out on first impressions). I can usually spot the soley financial ones, and run!

(I have met a few altruistic doctors, and will bend over backwards to help them, or make their practice easier. They are appreciated, and respected! They are few and far between these days though? I don't know if the profession changed, or I changed?)
I noticed the same, but then i found the Steve Gibson Security Now podcast https://www.grc.com/securitynow.htm

The episode archive has a whole course on security,with a focus on the web
The trains on South Eastern in from Kent all have vacuum toilets. It's only a few train lines that dump waste on to the tracks.
I solved my heath problems without eating green vegetables. I do eat plant-based, but mostly beans, whole grains, potatoes and fruits.

I don't remember seeing any studies linking green vegetables with longer lifespan, but there are many linking longevity with high plant/high carb diets.
The bit about tradition is true. Some of the worst pizza I've had was in italy, right next door to the best pizza I've ever had. Once made the mistake of telling this to an Italian.
Gear VR by Oculus and Samsung – $200 of MEH
That makes it sound strange. The reality is the finance dept responded to routine requests for wire transfers similar to all the others the handle all day, every day.
DOS did something similar back in the day and a desktop was even built on it. Windows was later the most widely deployed OS with billions of lines of COBOL powering much backend processing. Would you similarly say their architectural superiority is proven by the number of users or platforms?

Those of us who push microkernels do it because they were proven in practice (esp in embedded) for over a decade. Linus's complaints didn't pan out. MINIX 3 achieved in a few years better reliability than Windows or Linux had in nearly their first decade. Driver isolation had a lot to do with that. Anyone worrying about performance should look at the Playbook vs iPad demo they did a while back showcasing QNX microkernel.

Linus was repeatedly warned [1], was smug as heck in replies, his OS is now adopting microkernel-like techniques, and so I call it as he would. More humble than he would, actually. ;)

[1] http://www.cs.vu.nl/~ast/reliable-os/
Here's one starting point for information on the market size for watches:

http://www.statisticbrain.com/wrist-watch-industry-statistic...

================================================================
Number of watches sold annually worldwide	1,200,000,000
Number of smartwatches sold in 2014	6,800,000
Average price of a smartwatch sold in 2014	$189
Number of Swiss Watches sold annually	29,200,000
Number of watches produced by China annually	663,000,000
Number of watches produced by Hong Kong annually	354,000,000
Average cost of a Swiss watch	$739
Average cost of a China watch	$3
Switzerland watch market share in terms of value	54 %
With autocomplete you don't get anything with "one character var names" (leave those for i, j, k etc).

And no reason to pollute the local namespace with both self.contents and contents.

What if you do this somewhere lower for example:

contents = contents[:limit]

did you mean to NOT change self.contents? Because that's what you got. Whereas:

self.contents = self.contents[:limit]

would propagate it.
5 Strategies to Make Your Solution Really Memorable
Yeah, home baked goods shouldn't be a problem with basic hygiene (it's usually the frosting that is problematic though)
The real mistake here is using your account owner API key in your code, when you shouldn't use that key for anything ... In fact you should delete the account owner access key!!! Otherwise you may have used the key for a Power User or Administrator level IAM user in your code instead of a custom user with least privileges.

Always use least privileged IAM keys in code if you must, preferably use EC2 roles instead of access keys, and never give your IAM users permission to run instances ... That way if the key is leaked then evil hacker can't do much with it.
If they ask you how you want it cooked then its fine to ask for it rare. If they dont ask, its not worth trying as its probably not good quality. Lots of places in UK do ask.
...Hack This Site is a free, safe and legal training ground...

It's rather amusing how they claim they're 'legal', then.
It's not really about audience but about context. There is a reason why something is music to a whole generation of kids while their parents think it sounds like noise.
DIY Neuroscience: How to control someone else's arm with your brain
Good Eggs Makes Big Layoffs, Shuts Down Outside of SF
Credit cards used on cvsphoto.com may have been compromised
It's much more profitable to replace high wage labor than low skill labor so it makes sense that this segment of the workforce would be replaced sooner than later. I never considered the angle of the additional political power this group has which may end up stalling that process. Excellent point.
It's amazing that you can con a technology (or any) company out of 46M simply by sending emails sitting on your couch in your pajamas.
There is a good list in an answer on Stack Exchange about this, maybe you can find something there - http://programmers.stackexchange.com/questions/46716/what-te...
Would you fall for this Twitter phishing attack?
How to Start an Awesome YouTube Daily Vlog – Fireball Tip #1
> I interpreted your language as being somewhat combative and that put me on the defensive.

I'm sorry, then, and take full responsibility. Internet culture -- at least in forums such as this -- rewards texts with emotional content more than those devoid of it. As there are many texts breathlessly extolling the virtues of monads, I had to offset that a bit ;)
Depends on the place, most pubs default to well done yes but dedicated burger places that seem to have been popping up all over London in the last few years seem to mostly default to medium rare.
Good grief, Americans and threatening to sue anything that moves.
Considering that there are many more qualified willing and able candidates trying to become doctors and many less trying to become sanitation engineers, it actually may be a larger net benefit since the next medical student in line would likely be very close in ability.
I guess it really depends on your definition.

For example Mahara claims to be an online portfolio creator - but you can also build your CV with it [1].

I just wish someone would come out and say "this is the format your resume/CV should be in" - not just for my own sanity but so that when applying for jobs. A lot of companies now they have their crappy resume reader that attempts to read your resume into normalized text boxes - and usually fail miserably forcing you to retype your resume.

[1] http://manual.mahara.org/en/1.8/content/resume.html
This first one applies generally when you are working in established companies more than early startups. Anyway, stick out difficult projects longer than you think you should. I jumped shipped too early on a couple of projects early on and missed out on some amazing growth/learning opportunities that could have saved me significant learning curves and frustrations later on, plus it could have helped my career even faster. Not suggesting anyone stick out an abusive situation where the team is abusive or the team is being abused by management, but stick out projects that are in trouble to learn from that adversity.

The other recommendation, do not let yourself get stagnant at a company just because they are paying you and the job isn't bad. Keep your eyes on the industry and trends to make sure you are not being used or missing great opportunities. Sorry to say but there are many employers through ignorance or willful deceit that will try to take advantage of you and you need to control your own destiny. I tend to think more is out of ignorance and fear then willful deceit but none the less it happens.
Ask HN: Would you give me a food and shelter if i code for you?
Hello,

I have 5 years visa to the united states, 4 years remaining of this visa, each visit i can stay 6 months, i don't want to break any U.S rules that's why i want to code for your startup for no money, just food and a place to live in transportation would be nice too but i am not going to take money from you and i am not going to ask your for health insurance or be your employee, i don't want to break any rules, i have +8 years of experience in JS, PHP, Ruby mainly as a full stack web developer i also do game development using Unity3D + C#, i'm a Musician since over 15 years at my free time and i can design sounds and soundtracks i work with many DAWs, i'm bilingual i speak fluent Arabic and English beside having many more skills.

The reason i am doing this because i live in a war torn country, some issues happened and i've lost all my savings and i refuse to give up, I'm already 31 years old and i don't want to spend the rest of my life in this place enough is enough, i've been to California in 2014 and i loved it so much, i can't get an H1B visa because i don't have a university degree although i have a high school diploma and a college diploma in business management and e-commerce.

I have no idea what would the outcome of my visit to the states be but i want to try it at least maybe i can find someone who can sponsor my education so i can stay in the U.S or maybe something i haven't thought of would happen.

If you'd like to interview me please send me an e-mail to life.will.get.better.2016@gmail.com, thank you.

Thank you for reading my post.

ps: Please if you can't help me at least try not to be negative in the comments i already have enough negativity going on in my life and i could really really use some motivation, but after all you are free to write whatever you want of course and i appreciate it.
Behemoth Laundry company rising in China
This is easy advice to a single DevOp who completely controls their own AWS account, but often there is a team of devs and ops with elevated access to the same AWS account and not all of them understand AWS IAM access control, so they put admin level keys in their code. This article gives advice for mitigating the risk of access key leakage.
I guess Color is a namedtuple. I'm often tempted to [ab]use binding.

def qualify(color):
hue, saturation, luminosity = color
if hue ... or saturation:
...
...
> Economy wide "malinvestment" is not a thing. It entails that a person living off of others is more productive than a person working. It's nonsense.

At microeconomics malinvestiment happens all the time, and you do want it to fail. Otherwise we'd be still sending typewriter created letters though horsemail.

Now, you are proposing that at the macro-level it does not exist? How is it so? Is malinvestiment one of those things that cancel-out at the macro level? If so, that would be huge, it would be the first real (not nominal) value ever to cancel-out at the macro-level. So, I'll have to ask for your references.
Several years ago I used to bike to a Costco to get my meds at the pharmacy (you didn't need to be a member to use it). I used to get pissed off they'd want to search my backpack on the way out-what were they going to do, revoke my non existent membership? Find a giant pallet of toilet paper I hid in it?
The point of the article isn't to judge the value of the whole medical system, but rather to make a career choice. That means the relevant question is the value of the marginal doctor, not to try and get a representation of what patients see. We should expect that the marginal doctor is much less useful than the average doctor (i.e., the total benefit of the system divided by the number of doctors), and that furthermore ones expected impact of becoming a doctor is worth even less than the marginal doctor because if you don't go into medicine then someone else only slightly less skilled than you will take your place.
Type-checked matrix operations in Rust
The concept that you can "own" property and charge "rent" for it has been an economic drain on the world.

When a cash exchange or transfer is made, it is usually for a product, aka GDP. There is no GDP involved with paying rent. A landlord is someone who can sit on his ass and live off of the GDP the tenant generates in the form of "rent" while offering no GDP back to the economy. The landlord is essentially a parasite, offering nothing beneficial to the economy, he simply can suck the life blood out of you through this strange concept of "owning" the habitat in which you live. Life is a bitch, but it is what it is.
Not if you make security your number one goal from the beginning. But "letting the community rewrite the site" would be very complicated, especially on a niche website such as Project Euler, where a lot of its users are opinionated and would probably take a long time to reach consensus on anything.
How Didi Kuaidi Is Beating Uber in China
Of course, but perhaps the point that most people who try and coerce others into using GH are making, is that the community would be more able and more ready to help them fix vulnerabilities quicker if they had access to the (non-sensitive parts of the) source code.

As such we can only trust that the people running the site are taking due notice and patching it correctly -- which, (I hate to say) given Project Euler's track record in the last year or so...
Aaand it eludes me - I'll keep that in mind for the next time I find a manpage without examples.
> If we allowed a large automaker to go bankrupt, we probably would have lost the supply chain and many supporting industries

And you'd free a loot of resources (people, money, etc) to create something that people really want, instead of forcing them to work on stuff the government has to pay people to buy.

Anyway, what is sending companies out of the US is your government fiscal policies. Start paying the stuff you take from there (instead of buying on loans), and those companies will be back.
if color.saturation > .5:
print("bright!")
elif color.luminosity > .5:
print("light!")

it's an `elif`... it will never print both "bright" and "light"

This kind of mistake really detracts from the point that was argued here about code being "intelligible"
Introducing Organizing – Hack Your Time
In Python, "elif" means "else if". At most one of "bright!" or "light!" will print.

$ python
>>> if True:
... print "First"
... elif True:
... print "Second"
...
First
>>>
a radiologist might examine thousands of patient images a day

Shudder. As a young man, I used to inspect new cars for shipping damage. It was well known in the business that an inspector's effectiveness dropped off dramatically as the day progressed. Missed damage could cost our customer thousands of dollars, and yet even blatantly obvious stuff was missed from time to time. I once missed frame damage on a pickup truck that had been chained down a little too enthusiastically. The 45k truck was a write off.

Our inspections numbered in the "hundreds per day". I can't even begin to imagine the mental haze at the end of thousands.

I don't see Watson getting tired.
I see that appeal of Haskell, and I think the strict focus on typing does catch many possible bugs... but I don't think it catches all the types of bugs that an actual unit test would, so I'm almost afraid that it's leaned on a bit too much.
Skepticism of individual cryptocurrencies is advisable as is skepticism of their critics. A lot of the vitriol and guttersniping is the product of rivalry between them, bitterness over the fall in value for many of them, and an almost religious division of opinion on the merits of sidechains versus separate currencies. At the moment the Wikipedia page for ethereum has no criticism section, as most controversial subjects do.
To add some color to this great suggestion - The Web Application Hacker's Handbook is a better resource for learning to break web applications than for learning to build them properly. It will teach you every about almost every vulnerability that can be classified and how to find it.

The Tangled Web is better for learning the underlying causes of various issues presented in the former book and for learning how to prevent them. It has excellent, practical checklists at the end of every chapter for anyone building an application.
Maybe, if you can allow it and you care enough for security , the best thing is to use a framework designed for security like Scala lift.

That way, everything is built in.
This is why I dislike Pythons standard of using four spaces for indentation. By the time you've declared a class, a method and a for-loop and a conditional you're already 16 characters down and struggling to fit code into the remaining space.
We're a brand new startup from Romania, please check out or work: https://www.youtube.com/watch?v=kSl8EULpRC4 .

Feedback is most welcome! especially negative feedback :)
A lot of claims about this being a scam. As someone who have had same idea as Ethereum and not to scam people, can someone explain to me what makes it a scam.