skysight-inc/HackerNews huggingface dataset:
The TinkerPop3 integration in Stardog4 is impressive. The underlying specified OWL/RDFS schema allows Gremlin to traverser the implicit/reasoned edges. This is the best RDF/PropertyGraph-hybrid system I've seen.

http://docs.stardog.com/#_property_graphs
Hacktoberfest 2015
I rarely take the time to comment on HN or submit content but I'm occasionally really tempted to earn enough karma that I can down-vote arrogant, condescending, asinine posts like this one. Neither side of the political spectrum has anything like a monopoly on "rational people" and "the sheer idiocy of [people who disagree with bitwize]" is not "relevant to hackers as an interesting and difficult problem."
FONTS: Preserving Detroit's visual cultures - http://www.modeldmedia.com/devnews/GratiotAndRiopelle.aspx

https://www.kickstarter.com/projects/bluucat/gratiot-and-rio...
What if the user shares the data directly with a server in the US? People don't care...
While it may be a hit piece, everyone at HN already thought that Carly Fiorina is a bad leader and that her tenure at HP should be hung like a millstone around her neck, not touted as her #1 qualification. Democrats can read this and feel smug about the Republican primary shitshow. Republicans can read this and feel consternation that such a bad candidate has been gaining credibility in the primary.

I don't think this article is political. It's just anti-Fiorina. It's not making fun of people for supporting her. It's ringing an alarm bell for people outside of the tech world that Fiorina's signature achievement was tanking one of America's finest technology companies.
Meh. This is just a silly semantics game. I think it's very wise and empathetic to just accept that sometimes you just get lucky, instead of trying to coop credit for it by saying "well I put the effort to be there to receive that luck in the first place!".
I'd have upvoted it if it weren't couched in politics. Even "How Ben Carson separated conjoined twins" is HN material. "How Ben Carson separated conjoined twins, and therefore he can separate Iran from their nukes" isn't.
Actually I think price does have a significant role in the Maker mindset. I'm sure when they see one of these cool, but really expensive products, like the Hue, a lot of folks will say, "Oh, I could make my own for much, much less." and some will inevitably add "With blackjack and hookers!"

Anyone could benefit from saving money by making their own stuff, if they are interested (i.e., their time is worth it) and they have the knowledge and skills... and the project I suggested wouldn't take more than hardware skills than plugging things in and no more software skills than a few lines of Python.

I can't imagine the maker movement is made up of the idle rich, but of everyday people, some with mortgages and kids (like me), or some who are themselves kids. Given how much one of the main selling points we hear about neat new devices like the Pi is the price, I think your characterization isn't correct.

I'm sure in 10 years, something like the Hue will cost as much as a regular light bulb does today, but for those of us who don't have hundreds to drop on a cool colored lighting system for their homes, there are other options, just like you described, that are much cheaper and often not complicated at all.
GPS is all in MEO rather than LEO. It's a larger volume with less stuff in it so there isn't much chance of getting Keller Syndrome up there.
It's funny - the only two businesses that have made me use the EMV features on my card are the locally owned butcher shop down the street and Wal-Mart.
It sounds like a movie plot, not real life.
SpotHero | Chicago, IL | http://spothero.com
SpotHero is changing parking, and our tools will redefine the transportation industry. With over a million cars parked, fast growth, and solid funding (https://angel.co/spothero), SpotHero offers countless ways to make an impact on the company and your career.

Engineering Roles:
Data Engineer - http://spothero.com/careers/87905
We have a ton of data sources, and a crap ton of data. Want to build our first real data warehouse? Love redshift, cassandra, luigi and airflow? We do too...

Senior Software Engineer in Test - http://spothero.com/careers/91854
QA is a part of every engineer's process here at SpotHero. However, we need someone dedicated to bringing automated test best practices to the team, and someone that can figure out how to test the really hard things. We have a love/hate relationship with Selenium. And if you don't know why, then you're probably not ready for this role. Come help us tame the beast...

Software Engineering Intern - http://spothero.com/careers/88312
Interns are as important as Lead Engineers at SpotHero. They are the future of our team, and the future of our industry. You'll be paired with a Senior Engineer from day 1, and solving real problems that make it to production your first week. Buckle up and hold on tight, you're about to learn a crap ton here!!

Lead Software Engineer, iOS/Android
No, we don't expect you to build both iOS and Android apps by yourself. BUT, you should know how to!! This role is half managing the iOS & Android apps, and half architecting & developing. You'll have both iOS and Android developers (1 for each platform) on your team, and you should be able to jump back and forth, as needed. If you're a first time manager, no worries; we'll coach you on those skills. Just be sure you're a master of both platforms.

Software Engineer, Android - http://spothero.com/careers/88317
SpotHero is a mobile product. If you love building Android apps, you'll love what we've got in store. We have an amazing Android app, that we're looking to do a full ground up redesign on. So there is a lot of bluesky work in the very near future.

To apply, please email your resume to jobs@spothero.com. Include any github account, linkedin profile, and any project that you’re particularly proud of. We love seeing work that others loved working on.
Dumb question, but can't we put some giant blocks of single-piece kevlar-ish material in orbit? I imagine they would have no chance for breaking apart and would just serve as "bullet" catchers for these small pieces of debris.
Ask HN: How hard would it be to build js script that detects ad blocking
Here's my question - Is it possible or realistic for content providers to add javascript to their own site to detect if ads are being blocked, and if so then block the user from seeing the content. Or making it extremely difficult.

Explanation - There have been a lot of stories talking about ad blockers for mobile devices. On one hand nearly all of us hate ads in our content AND it consumes data on our devices.

However I actually work for a traditional publishing media company, one that is seeing declining revenue from print and is increased use of web-based content, which means less money per viewer.

Most content providers have some sort of barrier, even if it is just for registration without paid subscription. Ads are used to make up for revenue lost of giving the content away for free by using advertising.

I realize that this would be easy to circumnavigate on a laptop, probably with just a firefox/chrome plugin. However that is not so easy on a mobile device.

I don't even know if this is a good idea, but I'm sympathetic to someone like Marco Arment. If you produce content in the hopes of making money and you don't want to charge your only realistic option is ads.
When Jonathan Blow started his programming language specifically for making performant games (https://www.youtube.com/playlist?list=PLmV5I2fxaiCKfxMBrNsU1...), he talked about Rust a bit - it seemed like this was the closest language to what he wanted. I wonder if addressing these issues would make it more appealing to coders like him.
In terms of government funded comics, this is my favourite:

http://digitalcomicmuseum.com/index.php?cid=1026

'PS preventative maintenance monthly' is basically about taking care of army machinery/weaponry, perhaps it sounds boring but it's it's beautifully drawn by Will Eisner and contains characters like Joe Dope, Connie Rodd, Half-Mast and a lot of (often very sexist given this was from the 50's to 70's) humor.
I love the new interface but you are right about the search. Somehow I thought they had reworked that terrible address 'browser' into a free form search. :-(
I'm under the impression the p2p insurance schemes are supposed to consist of small pools of peers supposedly closely-associated enough to be willing to evaluate each others' risks, whereas the mutuals tend to pool risk across larger groups and differ from other insurers only in that they share the profits with their policyholders.

I suspect in practice the larger, more diverse pool of risks and knowledge of professional underwriters at conventional insurers (mutual or otherwise) will trump the "I know X, Y and Z are very good at looking after their possessions" knowledge of the P2Ps, but it looks like the P2P schemes tend to back up the p2p scheme with a traditional insurance policy (with a relatively high excess), so actually the p2p scheme is only underwriting a portion of the overall insured risk. Theoretically you'd then get the benefit of the underwriters' ability to assess and cover expensive and idiosyncratic risks and your own better position to assess your peers' behaviour.
And GPS one day may share MEO with power stations. They could use their lasers to target space junk, helping to turn it into less hazardous dust!
SEEKING WORK - remote only

Front-end specialist with 6+ years of experience, currently focused on Node.js and all things JavaScript. Seeking consulting/freelance work. I enjoy writing code in small modules. I love working with ES6, architecting Angular and React apps, and helping out with Backbone and performance. I'm a prolific open-source developer and I've published hundreds of small modules.

Location: Buenos Aires, AR (GMT -3)

Technologies: Node.js, JavaScript, (Angular, React, Open-Source Modules), CSS, all things web

GitHub: https://github.com/bevacqua

Blog: http://ponyfoo.com

Resume: http://careers.stackoverflow.com/bevacqua

JavaScript Application Design (a book I wrote): http://bevacqua.io/bf/book/amazon

You can reach me at consulting@ponyfoo.com
JuvioHomeCare+(JuvioHomeCare)+|+Twitter
SpotHero | Chicago, IL | http://spothero.com
SpotHero is changing parking, and our tools will redefine the transportation industry. With over a million cars parked, fast growth, and solid funding (https://angel.co/spothero), SpotHero offers countless ways to make an impact on the company and your career.

Product Roles
Senior Product Manager, Mobile Apps - http://spothero.com/careers/88310
Have you brought multiple consumer mobile apps to market and rapidly scaled their adoption? Then SpotHero wants you to define and drive the future of our mobile apps, all the while partnering with an amazing team!

Lead UI Designer - http://spothero.com/careers/88270
Ready to spearhead a product design and make it an industry leader? Then SpotHero is looking for you! We're adding a Lead UX designer to the team to take our product to the next level - someone with extensive experience in solving UX challenges in a goal-directed, data-informed design environment.

To apply, please email your resume to jobs@spothero.com. Include any github account, linkedin profile, and any project that you’re particularly proud of. We love seeing work that others loved working on.
It is not standard for /usr/local to be writeable by users.
Eventually we'll have to use some combination of extreme ship armor (meter-thick plating of expired uranium?) and lasers that detect and zap all particles (that aren't human shaped) within 1 km of the spacecraft.
More effort than I a willing to spend ;)

Tax loss harvesting has been significant for me over the last few years as well and that is not something I would want to deal with myself even if I just simulated Wealthfront's trades. It's also made harder once you start using their index tracking individual stock trade functionality -- they do the harvesting on a per stock level for that one.
Let a resource have one hash and potentially many source domains. Define a CSP whitelist consisting of trusted domains. This list is applied to resource loading in the browser, and it is also applied to cached resources in the following way:

cache = {
b0af301e782bf5e2a8ccce919b6ca3b70aa771db:
{domains: ['evil.com','airbnb.com'], content: '...'},
35d778783c4155c20360d269c9dd000fdcd39548:
{domains: ['javajosh.com'], content:'...'}
}

You go to secure.com, but a malicious user has put the b0af301 script in your path. CSP's white list for secure.com is [secure.com, javajosh.com]. The browser dereferences the hash, checks against the associated domains, and rejects if a whitelisted domain isn't in that list. Your browser running secure.com would reject the b0af301 script.

(Something I personally would like would be for for orgs like EFF.org to post known-good hashes, so I can always add the EFF hashes to my site's CSP whitelist, and have a warm-and-fuzzy feeling.)
Show HN: Cosmic JS: API-First Content Platform
Cosmic JS makes it faster and easier to add dynamic content to any website or app. Sign up here to get a beta invite: https://cosmicjs.com/
DriverMax 7.69 Pro Crack Full Version (Serial / Activator / Latest)
Interesting. Thanks for sharing.
That's a clever attack. Possible solution: Have two tables
hash -> file and hash -> "set of domains we have verified has the file". If victim.com uses a CSP, then we look in the second table. We see that so far we only know that evil.com has the file. We therefore request the www.victim.com/evil.js and hash it. If it matches, we add it to the set. If it doesn't we bail.

EDIT: Although I guess the current URL based cache may already dedupe, in which case my solution would be roughly equivalent to just turning off hash-based caching for domains with CSP.
It just costs one single meal to buy the pro version and you support the future free, open source and ad-free development development.
Looks like the links don't work on the description. Here's the clickable link: https://cosmicjs.com/
The Ocean’s Laboratory
Thanks!

The original poster said to also use the size. If you include that, my understanding is that crafting a hash collision is into the realms of impossibility.

Am I wrong?

===========

Turns out I was completely misunderstanding. I now do. Thanks!
Patreon data dump released
This is the key part:

Microorganisms in the worms' guts biodegrade the plastic in the process

The question is whether we can harness these bacteria to break down plastics in landfills.
Like ... Narcos?

I don't know, isn't that based on true story?
Umm, I don't mean to sound crass, but if you have 5 kids, 3 who live with you and 2 who do not, and a spouse who isn't currently working, I am not surprised that you find it difficult to save money. At the same time, it's not hard to understand that people who chose to have fewer children would find it easier to save money and get by without needing a trust fund.
It is a Discourse forum, I'm surprised you could see anything at all without javascript
I'm pretty sure the article has it completely backwards. If a retailer has a chip reading terminal, they aren't responsible for fraud. It incentivizes retailers to update their hardware, or face shouldering the fraud risk for chip enabled cards that they end up swiping.
Any idea why SHA384 is used over SHA256?

Presumably it's not for collision avoidance, and it's not like anyone's going to be hitting the maximum message size of SHA256 with anything stored in CDN..

Edit: So it seems that all of the main variants of the SHA-2 family must be supported[1], and the spec supports multiple hashes being presented at once. It's just that SHA-384 seems to be used in all of the examples I've seen so far.

> Conformant user agents MUST support the SHA-256, SHA-384 and SHA-512 cryptographic hash functions for use as part of a request’s integrity metadata, and MAY support additional hash functions.

> When a hash function is determined to be insecure, user agents SHOULD deprecate and eventually remove support for integrity validation using that hash function. User agents MAY check the validity of responses using a digest based on a deprecated function.

1: http://www.w3.org/TR/SRI/#cryptographic-hash-functions
Having both of those directories in your $PATH would definitely cause problems, you're loading two different collections of installed ports at the same time.
I've actually found more mom-and-pop type places have upgraded than big box stores. The first place I was able to use Google Wallet with my Android phone was a locally owned grocery store. The first EMV transaction I performed outside of Walmart was at my local liquor store on a stand-beside terminal (not directly integrated with the point of sale).

I work in this space, and while both the software and hardware have been ready for some time, retailers are just really slow to change. When you're talking about potentially hundreds to thousands of new card readers at nearly $1k each, followed by many hours of testing new software versions, piloting and rolling it out, etc., it is a significant investment for them to add support for EMV. That said, it's not like this was on short notice. They've had plenty of time (and incentive) to get this done.
Teaching a brain-controlled robotic prosthetic to learn from its mistakes
I have already encountered website blocking content if an adblocker is enabled.

A very quick google search should have shown you : https://github.com/sitexw/FuckAdBlock

However, most of the time, I am reading some news, or blogs, if the content is blocked, I just close the site and move on, I don't even bother whitelisting the site. So I am not sure that apart from making a statement it is efficient. It would somewhat work if you had really good and exclusive content.
It's depressing to see the US still treating EMV cards like a strange exotic novelty while Europe is already upgrading those again and moving to NFC-enabled cards after EMV has worked without any major issues for 20 years.

For small, repeated transactions you just hold the card to the reader and are done in 1-3 seconds. The first transaction on each reader and random transactions every 20-50$ (and all transactions above a $20 limit) will require chip+PIN verification, which seems to cut down fraudulent transactions for now.
Moving forward, can't we tax or ban styrofoam food containers, to encourage vendors to switch to paper and cardboard?

Less nasty crap in our landfills, and less plastics in our food and hot drinks, too.
As a sci-fi author, Stross is known for having a t-shirt that reads "I tell lies for money."

(One of multiple reasons that I'm a fan of his!)
There are other tooth forms that also satisfy the fundamental law of gearing (constant ratio of angular velocity). E.g. cycloid gearing used typically in mechanical clocks. The involute is popular because its easy to manufacture. It can be auto-generated on a gear hobbing machine- probably less important now with CNC machines, but very important in a pre-digital machine era. The involute is also less sensitive to gear center to center spacing.
ZipRecruiter | https://ziprecruiter.com | Santa Monica (LA area) | REMOTE OK for some positions

Our goal is to create the best online services for filling and finding jobs. We bootstrapped for the first four years, growing to 100+ employees. Last August, we raised $63M led by Institutional Venture Partners.

We have a number of open positions:

- Lead/Principal Security Engineer (Santa Monica)
- iOS Software Engineer (Santa Monica)
- Software Engineer (primarily Python) (Santa Monica)
- Software Engineer (primarily Perl) (Santa Monica or remote)
- Software Engineer in Test (python, selenium) (Santa Monica)
- Data Architect/Engineer (Santa Monica)

We're growing rapidly and have a large customer base (primarily small and medium sized businesses). We have interesting problems to solve in the areas of search, yield management, analytics, scalability and new product development. If you'd like to learn more, please visit https://www.ziprecruiter.com/hiring/technology or email us at techjobs@ziprecruiter.com
Yeah, except the ones that happen to be spy satellites under radio silence.
I definitely started recalling the White Sky scenario when reading this post.
> I got the impression that Homebrew wanted to own /usr/local rather than sharing it with other software

This is still accurate. Homebrew creates/manages /usr/local/.git. /usr/local/.gitignore starts with /* which is … not conventional.
The local Walmart setup chip & signature a couple of months ago. Magstripe transactions are denied by default on my card that has the chip.
SaaS pricing doesn't have to be a dark art
Microservices Platform Management with Giant Swarm
5 ways to help agile testers and developers work together
There are a number of scripts out there that detect adblock, for instance:

https://github.com/sitexw/FuckAdBlock

Then it's just a matter of using some basic JS to hide content, show a notice, etc.
If you can inject/alter data over the wire, all protections are usually moot - e.g. you can simply omit the CSP header and inject your code.

Most attackers don't have that capacity, though; XSS is usually done by tricking the page into running your own JS code (for example, by finding a publicly editable text area which doesn't properly escape HTML). Those restrictions wouldn't stop this attack.
How to build accessibility into your apps the easy way
SEEKING WORK - Remote

British full-stack web developer with 9 years Rails experience and 2 years Node.js experience. Currently based in GMT timezone, seeking remote opportunities.

Skills: Ruby/Rails, Node.js, SASS, CoffeeScript, Ember.js, React.js, PostgreSQL

You can see my portfolio at https://webshaped.net

My GitHub profile is https://github.com/williamcoates, also created two API client libs for my last contract:

https://github.com/meXBT/mexbt-ruby

https://github.com/meXBT/mexbt-node

Please contact william - at - webshaped.net for more info!
> Because SV wouldn't exist at all if the investment returns were taxed at a 50%-80% rate

I suggest looking up how long term capital gains work, and what top tax rates for cap gains have been in the past (hint: much higher than today—even under Reagan). No one has ever suggested taxing cap gains "at a 50%-80% rate".
More importantly than 'crushing their innovation brand' (which seems like a small consequence), he headed off a potential competitor who might enter the personal device ring. Well done.
The bit you quoted doesn't contradict what the OP stated, if /usr/local _does not_ exist, not even root can create it.

If it exists, we can use it as before.

Considering how many times I've installed OS X, I can't recall if /usr/local is there by default (excluding 10.11 for the moment). Will have to do another few installs and check.
I am sure there are hot spots or rings of higher density corresponding to earth locations. Still, it's big.
Two big benefits are the static typing and compilation so a I get a lot of benefit from catching errors early, and the second big benefit is static linking.

Other languages give you that ( namely Go ), but I found the correctness checking from rust is _way_ better and I am forced to have much better designs in my programs.

Another Tangential benefit is that I can do lots of great system level things ( High performance data collection, Clustering, Math), and then have a thread pull in a web server and serve out things like statistics and control interfaces.

Also its just nice to program in and the tooling is much nicer then C++
Dumb, maybe, or maybe not, but she's definitely a lying sociopath, no history of successful leadership, doesn't answer questions, and yet thinks she can be President. I saw her on Meet the Press last week and I was genuinely afraid, creeped out even.