skysight-inc/HackerNews huggingface dataset:
It was a scene from the book and she was pregnant at the time.

If it makes the actors comfortable so we get a better story, then do whatever you need to do. Everything in film is fake in some way, James Cameron has a great line in the documentary "Side by Side" at the 1:13:45 - "I'm betting you've been on a couple movie sets, when was it ever real? There was kind of a wall there and nothing over there; there was 30 people standing around with a guy with a boom mike, another guy up on a ladder with his a## crack hanging out. There's fake rain. Your street, night, exterior, New York was a day, interior, Burbank. What was ever real?"

By the way, Side by Side is an amazing documentary on the evolution and conflict between film and digital cameras.
Its basically like most newspaper articles, if you know the subject you will find fault with the writing. It does seem quite a bit more egregious when they write science or technology, but I get the feeling quite a few farmers, plumbers, electricians, etc. have the same issues.
"If it's a scam, why do they have [trappings of an organisation]?" - every dupe of an MLM, Ponzi or pump'n'dump ever, trying to reassure themselves. There's a reason scammers put up fronts.
When will you go mobile ? I would like an app for my Android tablet.
Apple Watch: 4 weeks and 5 pounds
The Web Application Hacker's Handbook does get quite some bad reviews though on Amazon. The book seems to rely on the commercial offerings of the author, like the Blurp software and online material for which he charges by the hour.
The whole point of Project Euler is you're not supposed to give hints.
At my company any email request like that is verified by a phone call. (Don't know if that would have helped here).
The obvious superiority of microkernels is seen in the invisible ubiquity of QNX and L4 throughout the industry. There's probably more L4 deployments than Linux, in hardware like baseband processors.

The most common OS then is probably not Linux, but TRON. It's real-time, but I'm not sure if it's a u-kernel. Nonetheless, RTOS in general is well served by u-kernels.
RORVI, our beginings are humble and currently we do not have the resources for that, but you can access it from your Android table from the browser, we tried and made the web-application mobile friendly
10 Books that will teach you to build a 6-Figure Business
As it turns out, one of the referenced sites exist:

http://zone.vision

http://zone.vision/#/news.ycombinator.com
Typical example of Next Feature Fallacy (including their pivot): http://andrewchen.co/the-next-feature-fallacy-the-fallacy-th...
I don't think radiologists can examine and report on thousands of images. Have you seen a radiology report? It's a detailed 1-2 page writeup of findings. I am sure they have software that may autocomplete some stuff, or they dictate the findings to someone else. Still, the math doesn't check out.
Probably Boeing. They have a vested interested in keeping their planes in operation with a good safety record. When you only produce a few hundred of something at the most it isn't that difficult to keep track of them all.
The Art of Software Security Assessment is a gold standard in infosec that goes well beyond simply web applications, but it does cover those, as well.

Definitely read that to get a holistic image.
Maybe not a great example: dentistry. While it is surely not "simple", I don't think it is nearly as complex as something like medicine, and it is fundamentally important basic need in everyone's life. But is also extremely expensive, and is often not covered by universal health even in countries where medicine is.

So, from time to time you'll hear, typically in ethnic communities in western countries, of non-certified people practicing dentistry off the books. I have no way of knowing what skill level they tend to operate at, but I'd be surprised if it wasn't somewhat equivalent to where mainstream dentistry was at say 20 years ago - so certainly not the best, but far better than nothing. But when it leaks out this is happening, they are shut down immediately.

As a comparison, auto mechanics is also quite complicated, but if you literally can't afford to have it dealer serviced, at least you have less-better but affordable alternatives. Not so with dentistry, because they have a powerful industry lobby that sees that any competition is formally illegal, and any freelancers have the full force of the law brought down to stop their practice. The argument for this I imagine would be "public safety", yet auto mechanics also has a public safety aspect, a much larger one I would argue, yet I can buy tools and work on my own car in my garage without breaking any laws.

And so it will go as technology progresses, industries and professions with government connections will often be untouchable.

The older I get, the more I see a similar pattern recurring everywhere (but in different forms), such as the "Why is rent so high and pay so low" article on the front page of HN today: https://news.ycombinator.com/item?id=10024681
Nobody buys toothbrushes on the basis that the toothbrush market will go to the moon. This is, however, the standard selling point for cryptocurrencies. As is claiming the selling point is something other than a claim it will go to the moon.
Nothing, really (if it works for you!). It's just extremely far removed from the usual way pizza is consumed in Italy. I'm usually annoyed by the many culinary debates we like to have (e.g. when should you put cheese on your pasta), but this one I can relate to :-)
Venezuela Tries to Silence Critics
At your own risks.

http://attrition.org/errata/charlatan/steve_gibson/
we see this all the time in our industry. CI/CD has replaced a lot of the functions of "Release Engineering", but not all of them, and these folks have moved up the the value chain to solve other issues.
Impact of adding internationalization to a modern browser-based business application
In particular, what has been observed to be the range (in %) of impact that i18n has on effort and time-to-delivery, when it is added well (about mid-way) into the cycle?
The Mozilla We Want
If you want to understand everything, you first have to understand one thing. To start using a framework, learn the Table of Contents to its documentation. As you go about accomplishing objectives, pick features that look interesting and read the documentation for them.

If you do that while cobbling the project together with code snippets from StackOverflow, you'll end up understanding them when you optimize their implementation for your use case.
I've always managed to get what I need when I goto Fry's, but I did find the whole salesman thing odd. For a $20 cable or electronic product its nuts. There is nothing wrong with having a guy on the floor who can help customers make the right purchase, but trying to make a living off commission on $10 products is just a crazy idea.
-Introduction of decimal numbering system
-Primes from 2 though 89
-The biggest mersenne prime known back then
Ever tried. Ever failed. No matter. Try Again. Fail again. Fail better.

Samuel Beckett
... but normally only achieve them through government backing of the larger players. It's called cronyism and it's not free market capitalism.
That may not work out. If radiologists block its use, then the next logical customer is malpractice lawyers. Use it to sift potential clients for ones where early indications were missed. After a few of these suits succeed then the hospital industry will have to institute automated analysis as a defensive measure.
It's usually a finance dept person who gets an email like this and yes it's a possibility. A CEO/boss sounds like they're in charge and it's sometimes very difficult to question orders.

I heard a story that at one place the only reason they didn't scammed is because the accountant walked over to the CEO to double-check the instructions of the wire transfer. It's easy to imagine what would have happened if the wire transfer instructions were correct!
My brother is a lawyer, working in some large corporate contracts mill. Their division just got sold to a huge conglomerate and the labor outsourced overseas. This is happening and it is nothing to cheer. The squeeze will slowly move up the food chain until only the billionaires remain.
Yes! I haven't read any of his books all the way through, and I do find a lot of the podcast stuff pretentious. But this book changed my life, some of my friends lives and some of my family members. I think its a great start to learning to eat healthy and the easiest way to lose weight for sure. Let me know if you tinker with the diet, I would be interested in your results.
RegLeg – the future of crutches
That is semantically different. It always calls abort(). In this case abort() raises an exception that returns a HTTP 400. I'm not going to abort if everything seems fine. :P

If you wanted to do this pattern, it would look more like this:

message = None

if not_shipment_qty:
message = "Shipment is not fine"
elif shipment_qty < 0:
message = "No quantity"

if message:
abort(400, message=message)

(Note: In this case the keyword argument form of message is required, because all keyword args get packaged up into a JSON body of the response.)
1. Walter Lewin's For the Love of Physics: From the End of the Rainbow to the Edge Of Time - A Journey Through the Wonders of Physics

2. Subroto Bagchi’s MBA At 16: A Teenager’s Guide To Business

3. Jugaad Innovation: A frugal and flexible approach to innovation for the 21st century by Navi Radjou, Jaideep Prabhu, and Simone Ahuja
I think as a bare minimum, you should choose a web application that has a well documented guide covering security and make sure you read it and understand it. Django and rails both have well organized documentation around this topic. Most of the attacks are relevant to any web app, but how you deal with it is framework specific:

https://docs.djangoproject.com/en/1.8/topics/security/

http://guides.rubyonrails.org/security.html
This is why Estonia's e-residency program focus on authentication and digital signing. It should be harder to steal a crypto key no?
Marijuana residue found in 400 year old pipes belonging to William Shakespeare
I would love it if the person who downvoted this anonymously would chime in as to why. Because this is exactly what a landlord is.
Reclaiming History by Vincent Bugliosi.
> We're working hard on this and focus more and more of our development capacity to this.

No, no, no. :) It's not a development thing, it's a design thing. The good part is that your users are well-defined - developers; you could do a great job there, but don't allocate your developers to it. Hire or contract someone experienced in UX.

P.S. With a good UX work, you might end up not only bettering GitLab's layout but also discovering new, differentiating and truly useful (user-wise) features.
> If it makes the actors comfortable so we get a better story

People have different priorities.
T'was a joke; Non-Pythonic vs Pythonic (NP v P)
I'm typing this on a Pixel running Ubuntu 14.04. Nearly everything works perfectly, and the hardware, as you probably know, is superb. If you're going to be staring at a screen all day you should consider getting the best one you can afford. As far as I know the best screens are in the Pixel and the "retina" screens from Apple. The Pixel, however, at least the original model that I got (used), has a pretty bad image persistence problem.

I tried Crouton and found it too awkward, so deleted ChromeOS and installed Ubuntu from an SD card set up in the normal way. Things will not work right out of the box. You need to make a recovery SD card in case you accidentally drain your battery:

http://dev.chromium.org/chromium-os/developer-information-fo...

Do not skip this step, as it is possible for a crash can put you in the same state - it happened to me.

Your machine will probably reboot when you try to suspend/resume. The fix varies depending on the kernel/Pixel model; I fixed this by adding

tpm_tis.force=1 tpm_tis.interrupts=0

to /boot/grub/grub.cfg (and remembering to run update-grub).

You need to add an .xmodmaprc file to your home directory to get the hardware volume, etc. keys to work. After rebooting, sometimes this doesn't "take" unless you log out of the desktop and back in a couple of times. I can suspend by running "pm-suspend" and wake up by opening the lid, but suspending by simply closing the lid doesn't work. I'm used to that, as it was the same deal with my Ubuntu Thinkpads. You can probably fix that if you care enough. While you're setting up your keymappings you can also change the "search" key to cntrl, etc.

I plan to put up a more detailed guide on my website eventually (it has an Atom feed).

The Pixel is a pleasure to use all day (but gives me only five hours of battery). Don't be put off by the small SD drive, you can use the convenient SD slot to supplement that.
Completely agree with this. If Gitlab is not willing to have a clear policy regarding takedowns I will never be a customer. I paid for Github service for years and pulled my stuff once they decided to get political.

I really wanted to like Gitlab but a "case-by-case" policy basically means "whatever we feel like," and that is not an acceptable standard for something as important as my work.
The NYTimes Has One Million Digital Subscribers
As a frequent traveler to Iran (for family reasons) I am happy to see a growing startup scene in Iran.
But there are some things for the average Silicon Valley entrepreneur to be aware of.

1.) Moving to the Iranian market is not your typical "Shopify opens the doors for UK after X weeks of preparation" type of activity. Making it in Iran as a foreigner will take you months and years of preparation.

2.) Don't make the big foundations angry. They control most of the big corporations and led the economy during sanctions. Those corporations kept Iran self-sufficient. While the cars have the standard of the 80/90s, it never happened to me to drive in a car NOT produced or assembled in Iran. They won't like to give up producing their stuff just because you want to revolutionize the market.

3.) Basic things you excpect are missing. Postal service is very unreliable. Currently, transferring money to the outside world is not possible (at least in Iran, the banking system may be considered top notch)

4.) Create the best possible customer service with real people to talk to or let it be. Iranians LOVE and expect PERFECT service.

5.) Do not bet all you money or your career on Iran right now. Political situation is unstable (not in Iran itself, but with the outside world). Your money is very easy to be lost if the Iranian governments decides once again that atomic powers are more important than a good economic situation. Invest money you can afford to lose.

One positive thing: do not get fooled by "oh, they already have that". In many cases, things are copied (like the online used car markets) but they do not get the business model (connecting all dealers to it for a fee).

And one last thing:
While the government is anti-western, the population is not. Iranians in general love the West, the USA. They are the REAL friends (I personally consider the arabian world false friends). They do not want to copy our individualistic lifestyle for sure, but they value our services, products and political freedom a lot.

So with good preparation, go for it.
Can someone explain why worker productivity increases would ever enrich the worker? This sounds like a Golden Age fallacy. What forces in a capitalist system lead to paying workers more? Workers are not entitled to the value they create, they are just compensated for their labor. It would have to be competition from other employers who are paying more (because they too are making more money for what they are paying workers, but have strategically decided to apply it to raising salaries). However, if you have an oversupply of workers and a shortage of jobs, this dynamic does not really exist.
Webapp security is important, but server security is in my opinion the most difficult thing to get right, ie how to configure a server properly in the era of apps pushed directly on VPS , IAAS , containers and co . Any resources about the matter appreciated.
It's very nice. I think it needs a summary at the side or something, so we know where we are.
Ok re: IQ. Re: means, I still can't parse what you wrote the first time and I'm a native speaker. <noun> will be <verb> with <noun> <noun>?
Would highly recommend this book by Joe Sutter the engineering leader for the 747 program: http://www.amazon.com/747-Creating-Worlds-Adventures-Aviatio...
Just let the line run long. These are only guidelines. There is inherent wiggle room. I break lines that feel too long and casually ignore the 80 column margin. Inserting unnatural breaks is just as bad as excessive line length.
> Shell window from any directory: Adds a Windows Explorer shell window so that you can right-click on any directory and open a command (cmd.exe) window from that directory.

That's one of the reasons why I keep virtualbox around on my Windows box. I don't want any integration with the shell, I want applications to be self-contained and not spam on Windows as much as possible.
Show HN: My first attempt at building a SAAS app. Thoughts?
OWASP is a massively disorganized, vendor-driven, volunteer (read: soapbox-as-a-service) organization littered with half-completed, abandoned projects. That said, there are a small few that are "ok".

I like using ASVS as a checklist when doing a webapp pentest:

https://www.owasp.org/index.php/Category:OWASP_Application_S...

The OWASP testing guide is an incredibly verbose walkthrough for finding most types of web vulns:

https://www.owasp.org/index.php/Category:OWASP_Testing_Proje...

Some of the cheat sheets are ok, but many are littered with incorrect and incomplete info, so take them with a grain of salt:

https://www.owasp.org/index.php/Cheat_Sheets

All that said, I think that most (all?) professional web security testers use Burp Suite and have a copy of The Web Application Hacker's Handbook (2nd) on their desk. The book's authors wrote an on-demand assault course to help learn the concepts in the book and it is pretty decent. About $200 and you'll get most of the way through it. A few people I've known that went through it gave it good reviews.

http://mdsec.net/

I think the second book most web security testers have on their desk is The Tangled Web by Michal Zalewski (of afl-fuzz and ratproxy fame). If you have a chance, reading the ratproxy source can be an informative way to learn how a web scanner is built and about the vulns it can find:

http://www.amazon.com/The-Tangled-Web-Securing-Applications/...

https://code.google.com/p/ratproxy/

Finally, the last and probably best way to learn web security is to play in a CTF. These are time-compressed challenges that last 24-72 hours where teams of competitors hack purposefully vulnerable applications to score points. Here's a calendar of upcoming competitions and a little guide I wrote about them:

https://ctftime.org/calendar/

https://trailofbits.github.io/ctf/

EDIT: Ah, I realize I wrote this from the perspective of learning to break web applications and included few development resources. While some of that knowledge is generic (password storage, for instance), much of that knowledge is framework-specific. For example, see the Rails security guide and brakeman:

http://guides.rubyonrails.org/security.html

http://brakemanscanner.org/
it's not just the millenials that hate haggling. this is awesome.
For those not looking to click through to the site:

====

We have been made aware that customer credit card information collected by the independent vendor who manages and hosts CVSPhoto.com may have been compromised. As a precaution, as our investigation is underway, we are temporarily shutting down access to online and related mobile photo services. We apologize for the inconvenience and are working diligently to resume service as soon as possible. Your images are saved and you will have access to them once service to CVSPhoto.com is restored. Our in-store photo centers are not affected and remain in service. Film and disposable camera orders are being processed and your CVS/pharmacy will contact you when they are received.

Customers who provided credit card information for transactions on CVSPhoto.com are advised to check their credit card statements for any fraudulent or suspicious activity and to call their bank or financial institution to report anything of concern.

Customer registrations related to online photo processing and CVSPhoto.com are completely separate from CVS.com, optical.cvs.com, cvs.com/MinuteClinic on line bill pay and our pharmacies. Financial transactions on CVS.com, optical.cvs.com, cvs.com/MinuteClinic and in-store are not affected.

Nothing is more central to us than protecting the privacy and security of our customer information, including financial information. We are working closely with the vendor and our financial partners and will share updates as we know more.

For more information, call 1-800-SHOP-CVS.

====
Also if you're using django, give django.nV ( https://github.com/nVisium/django.nV ) a try:

"a purposefully vulnerable Django application. comes with a series of writeups for the vulnerabilities we've added to the code. Each tutorial comes with a description of the vuln, a hint to where to find it, and then the exact bug and how it could be remedied."

"You can access these tutorials within the app at http://localhost:8000/taskManager/tutorials/, or by clicking on the 'Tutorials' link in the top-right of the web interface."
Total econ noob here, could somebody please explain how zero interest rates cause increasing housing prices?
A Simple Goal Management Tool (iOS)
Rhetoric aside, I'm not sure the broadband situation in Finland is actually any different: http://i.i.cbsi.com/cnwk.1d/i/tim2/2014/01/11/OECD-fixed-bro....

The U.S. has a larger percentage of people on fiber, and Finland has a much larger proportion of people on fixed wireless. The U.S. has way more people on cable, while Finland has way more people on DSL.

94% of the U.S. has access to at least 4 mbps broadband. 59% has access to at least 100 mbps, versus 50% for Finland. According to Akamai, average connection speeds are about the same for the two countries: https://www.akamai.com/us/en/multimedia/documents/report/aka....
> but I don't think it catches all the types of bugs that an actual unit test would

You are correct. Likewise types can catch some bugs that unit tests cannot.
SANS is a good resource for training material about security. They have a number of courses for "defenders" and "builders" including web security (e.g., DEV522: Defending Web Applications Security Essentials: https://www.sans.org/ondemand/course/defending-web-applicati... ). It's not free though :-)

Check out the AppSec conference videos (https://www.owasp.org/index.php/Category:OWASP_Video). You can find useful talks for "defenders" and "builders" there. For example, one of the first videos on their Vimeo channel (https://vimeo.com/appsecusa) is a talk by Douglas Crockford about securing JavaScript.

One of the biggest problems with the security information out there is that it's mostly geared towards "breakers" (and to a lesser degree "defenders"), but to change the state of security we need more (quality) information for "builders", so they can build more secure apps...

By the way, if you are a web app builder and you care about security learn and use CSP (Content Security Policy). CSP is one of the most effective ways to deal with the XSS attacks. Here's a place to get started: https://developer.mozilla.org/en-US/docs/Web/Security/CSP/In...
The Disappearance of the World’s Greatest Free Diver
Essentially contested concept
> Interesting you find aliasing in variables 'dirty'.

I don't find aliasing by itself to be dirty. It is just in this example, it would not be adding semantic meaning (as in the "named boolean expressions" example) and it would be used in only a single place (immediately on the next line) so I find it to be the least justified use of aliasing.