skysight-inc/HackerNews huggingface dataset:
Although I'm pretty sure when you are talking about validating a credit card, a network connection is a given. Otherwise how do you authorize or deny the purchase?
New Animation Library for Android Developers from Cleveroad Team
Maybe, but DanBC is likewise only highlighting one option.

In my experience, that is by far the less likely. Leaders are called leaders because they lead people who choose to follow. If you're forcing others to follow, you're not a leader, you're an authoritarian. I haven't met many of the latter, but plenty of the former, none of which I would describe as "assertive".
There have been many posts about this:
https://news.ycombinator.com/item?id=4649396
https://news.ycombinator.com/item?id=627977

Seems like its hard to just get traction.
To be honest, a human seeing it for the first time would have a hard time identifying Turkish Getups too :)

Also, identifying good form--that's an app that could help a lot of amateur athletes.
Registration Open for PyCon 2016 in Portland, OR
This is an interesting question: is there a shelf life on "can do" attitudes? I think just in allowing that this fact might be true changes my perspective -- hinting that we might be in a kind of startup-frenzy groupthink even in this discussion.
Of course the HN crowd is not a perfect sample. But why on Earth would you think the NYTimes reporters, who are trying to write a compelling article, are more likely to get an unbiased sampling of Amazon employees than a sampling of the commentators on HN, who have nothing to gain?
If it's not intentionally sexist, it's not sexist at all. Sexism is discrimination because of someone's sex. Any other claim of sexism is irrelevant and a classic statistical error, the Simpson's paradox. It's as silly as saying that doctors are sexist because they prescribe more contraception pills to women than men.

> Often times when you think you know what they are going to say, you are wrong, putting words in their mouth.

Yes, sometimes, but in average the effect is positive (i.e. the communication is more efficient).
As someone with a bit more experience with these technologies, would you please describe what GraphQL actually has to do with graphs? I work with very, very large graphs. I looked at GraphQL to see if it could be of use, but as far as I can understand the graph aspect of GraphQL is marketing multiplied by doublespeak. RDF and Sparql seem to be much more apt systems in this space. So I would appreciate if you opined biased to disillusion my confusion.
F**k Going Green: Throw Away Your Code
There are a whole range of options, if we have enough warning and invest in the technology[1]. My personal favourite is the gravity tractor:

> One more alternative to explosive deflection is to move the asteroid slowly over a time. Tiny constant thrust accumulates to deviate an object sufficiently from its predicted course. Edward T. Lu and Stanley G. Love have proposed using a large heavy unmanned spacecraft hovering over an asteroid to gravitationally pull the latter into a non-threatening orbit.

And the same technology could be used to actively "capture" asteroids for fun and profit

[1] https://en.wikipedia.org/wiki/Asteroid_impact_avoidance
sometimes downvotes aren't about what you believe, but about how clearly you say it, or how you fail to say it clearly enough to avoid critical misunderstandings.
But one thing many don't know is that Prohibition did, in fact, reduce alcohol consumption: As Okrent told me, tax stamps from before and after Prohibition's passage suggest there was, indeed, a decline in drinking — one that was sustained for several years.

What? If there is a large illegal markets for alcohol sales, how can tax stamps be considered an indication of alcohol sales?
A top recruiter on what anyone can see after 30 seconds with your resume
Mixmatic – discover new SoundCloud mixes – no login required
I guess they don't look at themselves very closely. Otherwise, the biggest red flag should have been the fact that the CIA director has AN AOL ACCOUNT.
The song "Black Boy Fly" on Kendrick's Good Kid Maad City talks about how he was jealous of Afflalo.

https://youtu.be/BPAxrGT2emw
It's worth mentioning it on the homepage, it looks very scary without it.
There's certainly ageism in Silicon Valley, but if we magically got rid of it tomorrow it's not like startups would suddenly be flooded by applicants my age and older. Most older people select themselves out of Silicon Valley because most older people have lives outside of work, and they're not going to put up with the inefficient and pointless lets-all-work-twelve-hours-a-day bullshit you so often get from entrepreneurs and coworkers in their mid-twenties.

If we really wanted to achieve age diversity in Silicon Valley, we'd not just have to get rid of ageism, we'd have to change the work culture to something a wee bit more rational - and that's just not going to happen as long as all the major institutions glorify overwork to the point of burnout.
That's true, however it's saner, safer and faster to simply use doubles to sum floats than just use floats and Kahan's summation, and surprisingly some people don't get that.
> The chip just says "yes"?!

Yes.

From https://www.cl.cam.ac.uk/research/security/banking/nopin/oak... page 446 (last page), T: Terminal, M: "Man in the Middle":

T → M 00 20 00 80
08 24 00 00
ff ff ff ff ff Verify PIN “0000”
M → T 90 00 PIN correct
"So am I, as a logical person, supposed to believe that god is shooting various amounts of photons from his/her fingers creating these beautiful periods of morning, day, evening, and night for three days or so for no apparent reason?"

Just because you don't know what the reason is, doesn't mean that there isn't one.

"God hasn't created humans yet. God hasn't created plants yet. It serves no function."

Again, just because you see no function, doesn't mean there isn't one. But there are logical explanations that scholars have suggested which do make sense.

One thing you might take into consideration is that the Bible says that in Heaven there is no sun and moon, but that it is illuminated by God Himself. There is no reason that in the midst of His creating the Earth, the same could not be true. Some scholars have proposed that the reason God set the pattern of the days and nights before creating the sun and moon was because He knew some men would tend to worship the sun and moon themselves, and He wanted to make it clear that it is He who sustains the Earth, not the sun and moon. I don't know if that was the reason, though it seems quite logical to me. I am content to believe God had a good reason, and He doesn't have to tell me what it was.

I think one of the biggest mistakes people make when reading the Bible, is that if something isn't explainable by natural phenomenon, they discount it entirely. But that doesn't make any sense. If you do not believe in the supernatural, then God doesn't make any sense. The whole point is that the creation is something He created, and that all of the "natural" norms we see from day to day are something that He put in place, and that He sometimes suspends for His own purposes (for instance, when Moses parted the Red Sea, or when God made the sun and moon stand still for Joshua). Even in that last example, I can hear people protesting about all the side-effects that would happen if "the sun and moon stood still". But again, the point is that everything is under God's control, and all of the interactions of matter in our universe operate as He has decided they will -- and He's under no obligation to make them always work one way. He can make it work however He wants, and that includes suspending the normal interaction of matter (normal side-effects and all) for however long and for whatever purpose He decides.

BTW, I'm not saying you are necessarily discounting anything because it requires the existence of the supernatural. I merely bring it up because I think it is relevant to the discussion.

(edited for formatting -- I keep forgetting to not indent the first lines of paragraphs :-D )
Do banks in the US transmit the signature to the bank when you sign on an electronic pad? Can the signature be retrieved later on if you query a transaction?
The short answer from the standpoint of someone who has "culture" near the top of their list when considering whether I want to accept an opportunity:

"Are these people sufficiently like me in terms of beliefs, personality, past experiences, goals, etc. such that I'm likely to have minimal conflicts based on these things, and maximize the likelihood of enjoying going to work every day."

Notice not once did I mention age in there. However age could obviously be a factor. The reality is, I'm at a different point in my life than someone fresh out of school.

- I have a wife who gets upset and eats without me if I'm not home for dinner by a certain time, so I don't often go out for dinner with colleagues on Thursdays.

- I have a mortgage, so no, I'm not willing to work for free/peanuts and options that are claimed to be worth millions (oh, and 4 year vesting + 1 year cliff).

- I value my free time because I want to work to live, not live to work. "Work/life balance" vies for the top spot on my consideration list along with "culture" for this reason. I have no interest in killing myself for a fixed income. I will do my job, do it exceptionally well, and put in the hours when necessary, but I want to work with people who know how to shut work off and have a life.

Age is a variable that correlates with a propensity for being in a certain "life stage." That is why it is near impossible to separate from this discussion. When more companies are willing to pay the senior compensation that such experience justifies, and make work/life balance a core part of their company, that will help. But I don't think it will ever disappear because if you want to work with others "like you," you have a more likely chance of finding those people if they are the same age.
In this case the fault lies with the bank. The chip can authenticate the transaction and also optionally cryptographically sign it as verified. The bank should check the last step but most/some don't because a lot of the first wave of terminals that went out didn't have full/proper implementation, therefore they only relied on the chip saying "yeah it looks good", instead of "yeah it looks good, btw here is my signature on this transaction which you can pass to the bank to verify that it really is kosher".

So it is more an issue of the bank accepting partially verified transactions on large dollar amounts.
Really great question. Certainly, there are "too good to be true" offers out there you might want to be concerned about, such as ad networks that pay crazy high CPMs.

I'm biased, but I think developers should be using our service to track the code that they're putting in apps (including their own code) for security, quality, and app review problems. We watch third-party code for them, which is how we found this issue. I think it's unreasonable to expect developers to reverse-engineer every library they include.

I agree users really can't do as much about this. We are considering ways to distribute the list of vulnerable apps/versions to help users find if they have them.
I honestly would love to see something resembling "self-hosted" that used dropbox/onedrive/whatever as a common location for the storage, based on keepass. If it weren't for my desire to not be locked into a browser, I'd honestly just use chrome's synchronized passwords.
It's plain negligence. Unfortunately, in this political climate it's not favorable to punish a high-ranking government official over mishandling their emails, even if said email is used to transmit sensitive information.
Correct. Even easier, they can store a hash of the symbol name and walk the dyld cache until they find a match. No dlsym required.

The runtime isn't as straightforward as SourceDNA makes it seem.
Here's a good write-up of SDA (very vulnerable to the yes-card) and DDA (not vulnerable to the yes-card if authenticated online, but still vulnerable if authenticated offline due to a bad protocol):

https://www.lightbluetouchpaper.org/2009/08/25/defending-aga...
It might well reduce the cost for the occasional driver who wants to leave the city or those few that commute from one outer boro to another, but the people that most opposed the former proposal were those that commuted from Queens or Brooklyn to Manhattan. This proposal looks to lead to the same unhappiness from that group -- indeed any realistic proposal would, since a basic goal is to get them to stop doing that.
Perhaps in some government that is run well, but the US government optimizes for political rewards over suitability for service at this level.
The pro-choice side has let a lot of things slide without notice. Most notably access is the line in the sand not discouraging hoops.

That said, the NRA has also let a lot of things slide. There pro armor piercing bullets, but not anti-tank rounds. Even if the lack of anti-military hardware makes the second amendment almost pointless.
FWIW, I used to feel the same. I voted my conscience, even when that meant voting third party or not-on-the-ballot write-ins.

Then we had Bush v Gore, when I had voted Nader. I got to see (In my opinion) a lot of bad decisions, and a lot of Constitutional violations. I felt responsible. (Was it my vote that made the difference? No. That doesn't make me feel better, because it was the concept that I backed that let this happen).

So now I vote for someone I can accept. I still value anyone that votes their conscience, as as I've argued above voting at all, even a "wasted" vote, is more meaningful than not voting. But I myself feel responsible for too much to do it when the stakes are high.

I'm not addressing not voting when you don't understand/know the issues - that's a separate discussion.
It seems you just have to put in a long career and know all the right people. It also seems that it's the NSA doing all the high-tech work now anyway.
The NYT response said that Olson said it was not true:

"But [Olson] said he was never confronted with allegations of personally fraudulent conduct or falsifying records, nor did he admit to that."
"If there were criminal charges against him, or some formal accusation of wrongdoing, we would certainly consider that. If we had known his status was contested, we would have said so."
- https://medium.com/@NYTimesComm/dean-baquet-responds-to-jay-...
How to Learn from a Novice
> the Go community just thinks it's the greatest and refuses to listen to outside opinions due to a sense of inbred and ungrounded superiority... kinda like what you just did there.

It's not 'inbred superiority' to think that my own experience is a better predictor of what works for me than what someone else thinks. I never said "Go is the greatest". I said that, based on my experience with a wide range of languages, Go is the best for me. OP asked "why might someone decide to use Go", and I answered by explaining why I decided to use Go.

From your comments throughout this thread, it seems that you really dislike Go. That's fine, don't use it. But why try and pick fights with those of us who do use it?
I didn't say they were magically qualified.

I said the school had to meet the standards of the university. If the school is extremely difficult and the top 5% of the class doesn't have the same GPA as someone from another school that is less stringent but still meets the standards of the university, then students from the top 5% GPA of both schools would be able to apply.

And what is wrong about providing incentive for the best students to get into schools that are not performing quite as well but are still certified by the university as being adequate? It is much better for top performing students to spread out and raise the bar.

It is far from a race to the bottom. It's about bringing up the bottom.
"An analysis in the Harvard Business Review found generic, superficial, simplistic thinking in bullet lists widely used in business planning and corporate strategy"

I don't think this is related to bullet lists. The sentence contains the same truce if we took out the words "in bullet lists".
What Makes Malcolm Gladwell Fascinating
Exactly right. What we expect to happen next is runtime generation of an XPC identifier to call the underlying service, replicating the behavior of the private API with none of its code.

We're moving ahead with detecting this too as it's an obvious next step.
Oh, I have plenty of feelings. I have lots of people I care about and lots of things I feel strongly about. I love spending time with my friends, and I deeply care about their well-being; I just can't feel that particular way about people.

What it boils down to is that I have absolutely zero interest in taking part in any kind of romantic relationship. The idea of having an SO, or worse, living with one, is actively repulsive to me.

The technical term is "aromantic", which I've begun to shy away from using because too many people like to make puns on "aromatic" whenever I say it.
You are exactly correct about the role of the API here. A problem arises once you have multiple clients, each with different views, as well as different versions of those views. You can end up with a proliferation of API endpoints, each serving a custom view object for each different type of view, or you make your endpoints generic enough to serve all views, thus serving more data than any one view will ever use. You'll naturally have a tension between endpoint reusability and specific usefulness. The article actually seemed to have some of that tension itself, saying both "If you only want a subset of that graph, make an endpoint around that subset." and also "[Ad hoc endpoints] aren't REST", without giving any guidance as to how to make endpoints around arbitrary subsets of graph data without descending into being ad hoc. I'm not saying that you can't balance these with a good REST API, just that there is a real tension.
Nice!

Just wanted to say I wish more services would have "no login required" as a prominent feature.
Watched this a couple of days ago and found it quite interesting talking about C&P flaws https://www.youtube.com/watch?v=Ks0SOn8hjG8
One of the founders of Convox here. Happy to answer any questions about Convox or deploying to AWS in general.
I share your amazement. That said, apparently the functional security was "how could you put a system physically between the card and the reader?" which seems silly. The chip is capable of signing the response with the secret key of the card, why wouldn't it do that?
I think the poster probably just misunderstood. The site doesn't make it expressly clear that dollar figure is tied to the company and not the bug.
I wonder how much of this discrimination is due to housing inequality. I suspect many young programmers resent paying $3500 a month rent to a landlord who bought their property for 75k 20 years ago. Denying jobs to that generation might be their way of fighting the perceived injustice.
Many do require this, but there are current sandbox limitations that make this harder to change quickly.
A Little Gear That Could Reshape the Jet Engine
Really? Its like the banks saying "really all this fraud stuff isn't really our problem."
I can't really tell what they're trying to say here.

The repression involved in the implementation of alcohol prohibition had an effect of pushing a common and integral part of society into the black market.

The NRA is promoting the right to bear arms, and actually it would seem that the effect they're seeking should be the exact opposite.

Effectively, as prohibition pushed a polite leisure into the black market. The NRA's goal appears to be the exact opposite: that is, to keep a polite leisure out of the black market.

I don't think German understands the irony of this, because I get the impression that they want to compare the moral status of the prohibition movement to the moral status of the NRA.
Advanced and Practical Enum Usage in Swift
Ask HN: What is the best CA to buy a SSL certificate?
I'm looking for a good Certificate Authority to buy a SSL certificate from. I've found many ones, but don't know the best option. I've heard that www.ssl.com is a great one, is it?

I want your advice on this.
Absolutely. The friction here is people have to pull the github, boot it, and load it into a browser just to see if its what they want. This translates to not even cloning the repo.

I'd suggest having a live demo that allows people to inspect and play around with it.
They signed transaction would indeed fix this issue but it was ignored by the bank (to their detriment) for other reasons. The implementation is actually pretty decent.

It doesn't require key management the way you describe it.

Banks use a derived key schemes for EMV transactions. In a way you can think of it as PKI. In any event, the actual verification doesn't happen on the terminal. The terminal is supposed to take the signed transaction and pass it up through the network where it will end up with the originating bank who will say "Yes, we accept it", or "No, we don't accept this charge". This is something that happens today but it is the CC# and the CVV that get passed. If they are revealed/stolen you're screwed.
That is indeed a problem given the awful quality of display ad performance within mobile apps. App traffic is the first thing experienced campaign managers shutoff on the GDN.
Tip from my father, who switched from cash to almost all credit cards at POS: write "Photo ID Req." in permanent marker in the signature area. And, hey, one time when he sent me in to BBQ joint for some takeout with his card the cashier did look, but I was able to show my ID and make a plausible case for being his eldest son ^_^.
Well if you go that way, fundamentally all structured programming techniques are implemented with a goto, that's what jumps are.
My understanding is yes, but they are never looked at unless requested. Planet money did a story on this last year[1], and recently re-ran it. The money quote from the article was when asking the expert if there was any consequence to signing some random picture as your signature was something along the lines of "No, except it may be somewhat awkward if you had to verify it in a trial for some reason."

1: http://www.npr.org/sections/money/2014/09/08/345820789/why-d...
Some part of me hopes it was part of a disinformation campaign in the form of expected-levels-of-incompetence-leads-to-"hacked"-account.

However, the fact its expected levels of incompetence :/
Very Interesting, though I still wonder if intelligence agencies can out perform betting markets (at least on questions with enough interest to be able to generate a liquid price).
> The article doesn't mention Vasigel

Did you read the article? About half of it is specifically dedicated to Vasalgel.
if we insist on everybody getting the same share, no matter what, then the smart one doesnt have incentive to make progress and the lazy one simply stops trying. that'd be disaster (isnt that communism?)

the good gene is like a natural lottery. do you insist your neighbor to share his lottery money with you because he does nothing to get that money? because he's lucky, he may share with you 10%, but never share 50-50