skysight-inc/HackerNews huggingface dataset:
All the data breaches lately have demonstrated the need for some kind of professional engineering license to ensure compliance with best practices. Even if your app is meaningless in and of itself, a data breach can reveal Personally Identifying Information or credentials for other sites and accounts.

There's too much of a "code cowboy" mentality out there right now. As a community we've become very feature-driven and security is usually the last consideration. You need somebody whose name goes on the dotted line and assumes responsibility for the overall integrity of the system, because otherwise it's always Somebody Else's Problem. If you get breached and you weren't following best practices, then your PE takes on the liability, just like a building collapse or something.

This can be accomplished without significant burden to smalltime admins now that we have stuff like AWS and Docker. You should be able to Chef yourself a secure AWS instance and then Docker-Compose yourself a functional application deployment. Most smalltime users probably want some combination of CMS, storefront, or forum, and it should be pretty easy to provide these as prefabs. Some customization will be necessary, but then it will fall on the appdevs to force validation and security on the webdevs. If your defaults let someone inject SQL or something then it falls on the appdev, if the webdev uses an "unsafe" flag and overrides the defaults it rolls downhill onto the webdev. If you don't follow unit/integration testing best-practices, then it falls on you. If you don't pin your versions and a vulnerability opens up in the future - falls on you. Etc.

These standards should apply whenever you are a commercial entity or store Personally Identifying Information. If you are a legit smalltime user and don't want to use professionally licensed software then go ahead and do whatever, but you should be content with storing a username/password and perhaps using a one-time SMS or email validation that doesn't get stored. These then travel in a "viral" fashion like copyleft - if you are building a commercial website you need to do it using a storefront that has a licensed PE, that runs on a runtime that has a licensed PE. Once these are commonly available then most users would probably follow suit anyway.

This idea isn't going to be very popular with startup coders from Silicon Valley, but the reality is that the US is way out there on this stuff and we're seeing an epidemic of data breaches as a result. The EU has much more stringent data privacy laws. These don't have a whole lot of teeth at the moment, but the principles are down on paper and this is what I think you would need to implement them effectively.

To me HTML code is really a microcosm of the problem. People will write whatever old crap for as long as you let them get away with it. You have to make it as easy as possible to do the right thing, but a lot of people will have to be dragged kicking and screaming by turning on XHTML and disallowing standards non-compliance. Professional licensing is how you do that for applications and systems engineering.
The history of consumer proposal definition
> Can Science Explains Everything

[cringe cringe twitch]
What, in vim(1) or in the Windoze registry?
And what? It is bad that they don't usually commit crimes? Or just because they are white? First time offender plea bargains are the best chance to reduce prison population.
Because cities without New York's policies saw the same drop in crime?
I'm confused. The "demo" is just a screenshot? Seems promising but I would like to try it.
I'm not sure what you mean. If a statement entails a contradiction, then it must be false. So if you can show that the statement "every predicate has a corresponding property" entails a contradiction, then it must not be the case that every predicate has a corresponding property.
Yes, he picked a poor and kinda disproved himself there. Even something as weird and crazy as that is under the purview of science. Back long ago I bet people thought lightning was unexplainable but it only proves science will eventually push back any limits people set on it.
Very cool. No nonsense. I'm excited to try it.
Yeah that's what I've been doing.
A JavaScript Visualization Library for HTML and SVG
The Mozilla Public License used by Firefox is compatible with the GPL.

Also, if it's a file format and not just a particular library, shouldn't it be possible to reimplement support for it under different licenses on different browsers?
>The added benefit of the "exercise first" approach is that after exercising, I find that I don't even want the donut.

I'm guessing this approach is something like swapping dopamine triggers. You get a good rush from exercising such that you don't need a dopamine release from eating a donut.

However, I still believe your and RyanMcGreal's anecdotes are the minority. Most obese people do not find exercise to be pleasurable. Getting sweaty is "work". For these people, if they exercise, they'll end up getting hungrier which triggers more eating and the end result is a weight change that nets to zero. In contrast to your scenario, instead of skipping the donut after exercise, they feel that they can "reward" themselves with a donut because they had the discipline to exercise!

For most people, switching out bad food for good food such that they are satisfied without starving is a far easier and more realistic lifestyle adjustment. To be clear, I'm not suggesting people eat "less", but that they eat "differently". Drink a kale smoothie instead of a glass of sugar-laden orange juice, etc.

Telling obese people that exercise will strengthen their heart is more truthful than selling it as a key to weight loss.
Chicago?
What would we prefer, a study that relies on self-reporting but is a study nonetheless, or a bunch of theories based on entirely on anecdotes with a sample size of 1?

I get this study isn't perfect but it seems silly that so many commenters here are disregarding it entirely yet are perfectly happy to listen to completely untested theories from people with no expertise whatsoever in the field.
Maybe the answer is some sort of audit and certifiaction
It is open source. http://code.getadblock.com/releases/

Edit: Found the right fork https://adblockplus.org/source
An ex-sheriff may have broken ethics laws while working for a smartgun company
Large scale social unrest is just what the communists fear the most. To me, that's not worrisome - it's hopeful. Just opining, and I understand that the collateral costs would be worrisome for everyone in the short term.
BE VERY CAREFUL!!! I already used another popular extension, after a few months it was sold and the new owner just started to send EVERY PAGE users visited to his own servers!! This extension was blocked by Google, but it was waaaaaay too late and they was able to collected a lot of data from users like me.
That's the whole point of GPL. To move people away from closed source by having a sperate ecosystem that cannot be contaminated. The problem is that the ecosystem hasn't been that compelling besides a few things such as Linux.
This is lossless, not lossy. The output is the same.
How one bank’s failure triggered the Panic of 1857
I'm not suggesting diet doesn't matter; of course it does. But for me, every attempt to eat less failed. When I decided to focus on exercise instead, a subsequent effect was that the pattern of my approach to food started to change in positive ways.
"Free Lossless Image Format": the quality metric for lossless images is "identical pixel by pixel to the reference format".

(There's obviously a question about how to judge quality for a given partial download of a FLIF file, but for the total file there really isn't any question of quality metrics at all.)
Every time I'm coming into London, I point out the ugliness of Trellick tower. I've never met anyone who ever thought it was anything but ugly. To boot, there's another one quite similar to it in the East End.
If a user find it hard. It's failed. End of story.

Yet Jira is a wildly successful product.
The typographic details behind Typewolf’s favorite sites of September
If you asked a group of 33 physicists, mathematicians and philosophers 16 multiple choice questions about number theory you would probably also not get much consensus. All that would prove is that physicists and philosophers and mathematicians who are not number theorists do not know much about number theory. Or that the questions are vague.
What level of detail is available from this data?
If you want an example of genuinely valuable philosophy, I found "Kinds of Minds" by Daniel Dennett to be a compelling discussion of the origins of consciousness.

It's not "fact" but it does provide interesting ways to think about the issue; ways that could drive experiment or further enquiry. So under a "pragmatic" theory of knowledge I would say that there is information there.

But of course that's a philosophical stance that you should not feel compelled to debate me on ;)
Any nice book offering an overview of evolutionary biology applied to our society that you'd recommend?
Show HN: JAWS Framework Trailer – Re:Invent Edition [video]
Hey there! I thought I was the only one :D
> He assumes that "science is done by people", "people are flawed", ergo "the output of science is flawed".

This has the benefit of being right, at least. Look at the history of science. Look at all the models of planetary movement we've had -- a succession of incorrect models getting closer and closer to the truth. Look at any field of scientific inquiry, and compare the results of what they had 100, 200 years ago with what we understand to be correct today. Look at the speed of light:

https://en.wikipedia.org/wiki/Speed_of_light

In 1675 we thought the speed of light was 220,000 km/s. Jump into 1849 and it was measured at 315,000 km/s. Right now it's at 299792.458 km/s and is likely to stay there because we have now defined the meter in terms of the speed of light.

I mean, people know this. Everyone knows we still teach Newtonian physics in school even though Einstein proved them wrong before many of us on this website were even born. The history of science is a history in incremental improvement. Science IS flawed. There are plenty of things that we believe now because of science that will be disproven in the future -- some of them days or weeks from now, some of them decades away. To admit that science is flawed is not to take away from either the power or the importance of science, it is simply being honest about what we are doing.
One supports the opinion of the commenters, the other doesn't, so "obviously" the one which supports their opinion is good and the other one is just fake science.
Apparently they were compromised via a publicly exposed Werkzeug debugger: http://labs.detectify.com/post/130332638391/how-patreon-got-...
You can make that page private in the settings, which I have.
> WHAT idiot would program a command so that you have to
say -print to print the output to the screen. What IDIOT would make a command like this and not have the output go to the screen by default.

You don't need to say -print. It's always printed by default for me, and the man pages (on both linux and OS X) confirm this.

> If the expression contains no actions other than -prune, -print is performed on all files for which the expression is true. [linux]

> If none of -exec, -ls, -print, -print0, or -ok is specified, the given expression shall be effectively replaced by ( given expression ) -print. [OS X]

Has this only been added in the last 20 years?
It seems to me that there is no clear break between logic and philosophy?

Nor between logic and mathematics.

There is also the idea that part of why philosophy is dismissed is because people tend to take results and say that the result isn't really part of philosophy.

Could this be because their idea of philosophy is that it has no results, so any results they are shown are concluded to be not part of philosophy?
It's interesting that the highest comment isn't really discussing the article but segues from a little aside at the end of it to debunk "Health At Every Size" - a notion that is not mentioned at all in the article!

The bias against obese people that the article refers to is very, very real: It's all of the assumptions people make about obese people, e.g. it's all their fault, they are lazy, they are to blame, and so on.

The information raised in this article is one way amongst many in which obesity is not as simple as that. In this case it rather reminds me of the meme where the older generation judges my generation as lazy because we rent instead of owning houses: as well as individual responsibility, it has gotten harder in real terms to earn enough to own a house.

Likewise, someone eating the same things and exercising the same amount now, compared to 30 years ago, would be fatter. That's extremely interesting, and needs to be factored in to any efforts to fight the obesity crisis.
> You enroll in the program as an Amazon vendor, which means you sell your product to Amazon on wholesale terms and Amazon sells the product to consumers at the retail price. The value of the program to you is reflected in the net wholesale price Amazon pays you for your product.

Seems like a nice symbiosis.
Professor John Pfaff prescribes as the solution:

"What makes it very hard is that the person we really need to target now—whose behavior we need to regulate—is the district attorney, and the district attorney is a very politically independent figure. He’s directly elected, and he’s directly elected at the county level. So there’s no big centralized fix. You can’t necessarily go to Washington and say, ‘Here’s the law that’s going to control what the DAs do,’ because they don’t have to listen to the federal government at all."

However, this is not only anti-democratic but anti to the entire American system of decentralized government.
The number of memory safety problems in memory-safe languages is much, much lower than in non-memory safe ones. Look at the classes of vulnerabilities in, say, Ruby programs and compare them to the number of memory safety-related security vulnerabilities in, for example, Firefox. I have actually analyzed this and memory-safety-related problems in Firefox are the majority of critical security vulnerabilities.
If we are going to put collective political effort into stemming the tide of data leaks and hacks, I would much rather put it into finding and punishing the people who steal the data than the people who are trying to create a productive service and get hacked through less than perfect security.
> The poster didn't write that science explains everything. They wrote that science can explain everything.

But where's the evidence for that supposition? All we really know for sure is that science hasn't explained everything yet.
There's also two different versions of uBlock.
Am I correct in thinking that the people who have a positive view of brutalism are people with a background in architecture?

Because I've never met any non-architect who thought it was nice. It's part of a wider observation on my part about certain aesthetic tastes that only people who are part of specific in-groups declare themselves to enjoy works that 99% of people find unappealing.

Various kinds of modern art, for instance.
> Yeah, good luck with that. With software like Photoshop, not every change is obvious or easily visible.

Well, there's the time-honored technique of "rapidly switch between windows that are zoomed to the same place." But, more rigorously, I mentioned a way to do this; there are tools that can do a diff of raster images--which is what you are making at the end of the day with Photoshop. Sure it can't tell you what blurring parameters someone changed, but you can see that the blur changed, then you can go look at the parameters.

> Or did thousands other things that are not immediately visible

The trickiness of that situation isn't unique to binary formats. It comes up with code too.

> Maybe you can manually merge the two files to some reasonably good approximation of the intended result, but you can't never be sure you didn't miss something important.

That's just as true with code as it is with other formats!

> because those formats were never explicitly designed to support merging.

Neither was text. We just ended up making some tools that were reasonably decent at it.

I've been there, I've done that. I've done the 3-way merge with Photoshop files, and resolved the conflicts with 2 different people working on an InDesign file, and broken down to running `diff` on hexdumps of PDF files. Resolving merges with things that don't have nice tools for it isn't fun.

But it's a /lie/ to claim that a conflict for binary formats is "game over, you're just going to steamroll someone's work, there is no path to merge resolution". It's not a fun path, but it's not game over. Which is all I was really trying to refute.

(aside: It's interesting to me that this chain of comments went from being upvoted last night to downvoted this morning.)
25 simple things that you can do to boost your relationship today
React is tangible and an actual product; FB's flux is a cute name for a very fuzzy concept.
Metrics and Monitoring at Soundwave, a Music Tech Startup
And then there is Opus which took the world in storm.
Threat: Bitcoin services hand their security over Cloudflare
No.

Case in point: mathematics. It's completely misguided to think mathematics is empirical or within the realm of science. Math has empirical applications and is useful for scientific endeavors, but the actual discipline itself is entirely proof-based and rational.
There's plenty of companies selling on build quality (I just bought a secondhand Jura Coffee Machine and love it, same for the Peugeot pepper grinder).

Interestingly more of these companies seem to come from Europe than the U.S. (very few from Asia, but that's not surprising since the manufacturing base traditional used to compete on price)
I've got a bunch of spaghetti that are Turing-complete (they form an analog computing machine). I don't even want to think about the security implications.
My only problem with it is that it blocks Google hangouts and Facebook messenger. I haven't figured out a way to make those work while it's enabled.

Edit: not sure why I'm getting downvoted. Apparently this is an issue, as gorhill mentions, when selecting the leaky IP option. They should make the implications much clearer.
I tried to see what it offered. For instance, those "A very short introduction" series of books. Tried out Philosophy of Science. I see things like "what does 'alive' really mean" as something that is what Philosophy of Biology would deal with. That seems... rather useless? Arguing over definitions and going round in circles without contributing, today, to anything? (Everyone used to be called a philosopher, so in years past I'm sure "philosophy" has done plenty.)

Looked at Philosophy of CompSci on the Stanford Plato site. Read a lot of ... words... that were just fascinated they could work "duality" into computer programs. Cause a program is source right? But it can also be object code. Ooooh. And what about interpreted scripts, what does all this really mean? ... This would appear to have no redeeming quality. Perhaps I'm wrong I've just yet to see how this could be useful or even really intriguing.

Then there's even top scientists like Feynman making mocking comments about philsci. So given even top scientists are unconvinced there's value, I start to think OK maybe I'm not missing out on much.
Backstage at a Music Tech Startup
Here's a challenge for you guys: Super Mario Maker. It hasn't been proven Turing complete yet, but I'd be surprised if it wasn't.

Here's a pointer for you to get started:
http://www.gamefaqs.com/boards/805618-super-mario-maker/7251...

This guy says he has built a single nand gate, but hasn't been able to connect several together.

As a gamer and a computer scientist, I find Turing complete games intriguing. Minecraft's Redstone is probably intentionally Turing complete, but for example the signalling of trains in OpenTTD probably is not.
Sure, in many instances, corruption may have played a role too, but corruption requires work too - something the article implies is beneath the fuerdai.
Firefox is GPLv3 compatible. It's quite likely that it will support this format - although, if it's the only major browser doing so, it will not be adopted by most web publishers.
just tried it out - it caused iterm to crash
I have not had that problem. I access Hangouts through gmail.com.
Factory life far from home leaves China's migrant workers vulnerable
If it gets popular, I'm sure decoders with more permissive licenses will show up.
I think the biggest problem with testing in Rails is the strange ideology about it.

Most of the Rails apps I've code reviewed have lots of tests of business logic that are tightly coupled to ActiveRecord and are (as a result) very slow.

One way to improve upon this might be to move from a test-oriented approach to a contracts approach where domain objects obey contracts.

It seems that this is the actual intuition behind the "declarative" associations in ActiveRecord, yet so many tests simply test what has been declared, as if it can't entirely be believed.... Does this model actually have a working input validation? Does it have working associations? If this is in doubt there are bigger problems.

Also, most apps use relational, hierarchical data (which is actually just a graph), which we declare via AR associations... models contain a mix of logic and data plumbing, and thus persistence layer concerns tremendously complicate testing simple graph oriented intuitions about our data, which could also be stated declaratively and enforced contractually instead of via the typical "callback hell" approach. So we stub callbacks and mock adjacent graph nodes and tell ourselves falsely that our "model" is well tested.

The complexity in testing most apps lies in setting up app state to test edge cases in the algorithms. There have been lots of workarounds to try to skip this or make it faster, but in the end the abstraction is the problem.

I want to be able to create simple data, such as a few hash literals, and test the flow of data through the business logic (algorithms) of my code without having to wait 60 seconds for the app to boot.

Ruby is not all that slow a language. I think a reasonable test suite for a large app should run in under 2-3 seconds. But Rails apps end up testing ActiveRecord, template rendering, and all sorts of other code that is already well tested and should be assumed to work by the test suite, but generally can't be because of the tight coupling mentioned above.

One other example: Templates are essentially functions that output HTML, but since they have ill-defined input requirements, there is not a simple way to throw valid input at them and verify correct output other than simulating the entire server request/response, yet most programmer errors will be in the implementation of the template, not in the boilerplate controller code. Yet millions of hours of CPU time (and programmer time) are burned testing these the hard way.
Side Effects vs. Promises
There's almost no hack needed here, as the article says, they basically opened up remote code execution to anyone. That's shockingly bad.