skysight-inc/HackerNews huggingface dataset:
> So we have to make endpoints around every possible subset?

Pretty much. GraphQL is conceptually the same as just letting your clients send an SQL query to your API. Relay seems a short step away from having a graph database engine running client side, a storage engine on the server and a remoting layer to glue them together.
The Latest on Chinese-Affiliated Intrusions into Commercial Companies
I have to agree with this article. There is a tendency in tech to reinvent what we don't understand properly, and from experience of using third-party APIs (and from my own ignorance too) - HTTP is the thing we seem to know the least about (well actually one could argue TCP/IP is ...)

I read this article from top to bottom and I didn't feel the comments were extreme or purist. It did leave me thinking we need to spend more time learning and sharing knowledge of HTTP /REST than dismissing it.

Of course, the headline is clickbait - and that is the only real criticism I had.
> For a data driven company, it shows they either failed to collect related data and/or that data shows the article was accurate despite the poor choice of sources.

They do an annual survey of SDEs, and they do release that data internally (aggregated/anonymously). SO they do have data. The problem is if they release data taht says "Oh well X% of our engineers are happy with the company" Then when happens when someone says why not (X+Y)?

It's data without comparisons to give better context.
Defamation is by definition making a false statement that damages someone's reputation. You're claiming too much, since without any evidence, we can't tell whether the statements are true or false.

If the statements Amazon made are false, then they are clearly defamatory, since they accuse the employee of criminal action. Do you really believe that Amazon's expensive lawyers didn't vet this post before it went out?
Building Better Homes for a Better World
And they won't have a hard time retaining and hiring quality employees if all employees know that if you ever speak about your time at Amazon, some SVP for XXX might start selectively leaking portions of your personnel records?

>But I think if you're fired for fraud

Sure, but this is only a claim that Amazon/Carney have made. They have presented zero evidence for the claim.

Also, Amazon/Carney released information about other employees that they have not claimed committed fraud (nor have they claimed any wrongdoing by those individuals).
Most accurate, perhaps, but also quite likely the least relevant statement. You're not looking to move in with them, after all.

If you'd like a really simplistic example of why that form of culture just doesn't matter, have a look at Adam Savage and Jamie Hineman(sic). They have never even had dinner together, yet they make for a very effective team at work.
If I'm thinking about the same event, I disagree. The CEO didn't come across as evil at all, in my eyes.

And I'm not comfortable with a meme that if you're attacked, you shouldn't defend yourself, because defending yourself will make you look bad. That just makes you easier to attack.
If the [data returned following a] query is a subset [of data points already returned] why do you need to get it again; if you actually need to re-retrieve it then it being cached is no use unless you dumped it from local cache mistakenly - that shouldn't be an often enough occurrence to need to cache the data. Or did I miss something?
Countdown to Rails 5 Release Date
Fabrication of the Fourth Mirror of the Giant Magellan Telescope
Cybersecurity Firm Says Chinese Hackers Keep Attacking U.S. Companies
>How long do younger people stay at a job, on average? I'd imagine it's 5 years or less.

Yet if you admit that, it counts as a mark against you while being hired. It is one place where those hiring are outright ignoring reality, and instead prefer that everyone pretends we are making life long arrangements. Anything that breaks the playing pretend game counts against you; be it honestly stating you think there is a better chance than not that you'll have moved on in 5 years or being of enough age that the interviewer thinks you will retire within 5 years.
The question is why don't these APIs require authorization in the first place? Obfuscation is a terrible security practice.
Get out of your funk and back to creative genius with these 8 tips
I may be missing something, but since the error accumulation variable "c" is also of finite width, isn't this the same as simply computing your sums in double precision and then truncating? A pessimal input can still cause cancellation in both sum and c and leave you with an arbitrarily large error.
I really liked the framework. Powerful out of the box, and not that hard to modify/add what I needed.
Hadka was also very helpful on answering mails with questions about the framework.
I agree with you that NYTimes piece is largely anecdotal but I will give my reasons for not believing a SVP of Amazon PR.

1. Personal attach on a former employee as the head of public relation for a multi-billion corporation from a personal blog seems cowardly. Did he give Olson a chance to respond? Is there extenuating circumstances? How did Amazon carry out the investigation? Who knew what when? He accused NYTimes lapses in journalistic standard; he isn't even pretending there is any standard.

2. His attack on reporters is unconvincing. His rhetorical questions sound conniving. The reporters might not have asked those exact questions but they must have examined the named sources' credibility and employment history. Amazon might have refused to give details about Olson's termination, ironically on employee's privacy concern, and then itself divulges specifics, though I am sure after being cleared by their legal department. Noticed that Carney went into hyperboles here rather than stating any facts. A few sentences describing Amazon's interaction with reporters would go a long way here. But no, nothing.

3. His refutation of other three named sources amounts to verbal parsing. Some parts of the review are good so no parts can be called bad. Written review is good so no verbal review can be abusive. No direct requirement so everything is employee's fault and they deserve everything they get. It is almost offensive to read this part. If this is the best Amazon can come up with, it must be bad.

4. Cheery picking Amazon's interaction with NYTimes' reporter. Select publication of correspondence and one-sided characterization of interaction is sly. Make public all correspondence, with proper permission, so we can get a full picture.

Fundementall Carney is a former reporter and whitehouse spokesman who is now attacking former employees in behalf of a giant corporation with enormous resources on personal blog. He is committing every bad act he accuses NYTimes of and a lot more. It is debatable whether NYTimes followed the ideal journalistic standards but it is clear Carney follows none here.
Why is this upvoted so much? It's a complete strawman.

Facebook's own intro at https://facebook.github.io/react/blog/2015/05/01/graphql-int... states:

"There is actually much debate about what exactly REST is and is not. We wish to avoid such debates. We are interested in the typical attributes of systems that self-identify as REST, rather than systems which are formally REST."

"We believe there are a number of weakness in typical REST systems"

The author of this article is talking about REST in general, while Facebook specifically is talking about typical implementations of it.
It works, you clicked.
First chapter of Kernighan and Donovan's new Go book [pdf]
Are Facebook actually passing their own problems as everyone's? They're making technologies which suit their needs better, and other people can use them too, but they're not forcing them on anyone.
It's only defamation if it's not true.
SymPy – Python library for symbolic mathematics
I rewrote a python webservice in go once and found go need A MORE boilerplate code because of json structures need to be strictly defined for better or worst.

In python, it is at lease 10x less code for json parsing. json.dumps(), json.loads() is basically what I needed. The exception handle fill in all the undefined easily.

Also, go used a lot more memory because the GC is not under my control. In python, I can tell the GC to collect and one can see the memory shrink immediately. In go, that was not the case for me. A program that build GB of search index database in go end up using 4x the amount of memory as compare to python. Golang at that time (2+ years ago) lack the gc debugging infrastructure for me to resolve the problem.
No, SAB is the worst thing ever. I have attended a few street preaching sessions near universities. Many times students would shout the most bizarre doctrines at us trying to trick us, or show how "stupid" we are. And as most "skeptics" are, they were always extremely prideful and it was very hard to get them to divulge where they got there strange ideas from, but when they would, it was always from SAB.

The people behind SAB simply went through the bible and picked out things to make fun of, completely devoid of any context, background, or doctrine.

If you are a skeptic, "bible apologetics" is what you should be googling. Not SAB, you will not learn anything from that.
If you loved this post, I highly recommend this book! http://i.imgur.com/n4ogzt4.png
One of the few times they learn from the past (VM/370) with good results. Moving along that spectrum, they'll security-related projects that did this while enforcing a security policy on the processes or guests. KeyKOS nanokernel architecture is one. VAX Security Kernel is another more like what people do today. Start with most robust design, then optimize from there.
Ask HN: What are some great beginner resources about AI?
Would love to see some great resources that present a layout of the different areas of AI.
Sounds like the author spent a lot of time learning REST and is now mad at the risk of learning something else and throwing REST through the window :p
I agree. But what percentage of the media would you consider "left wing"? Or "right wing"?
A Data Science Landscape, One Year After
This seems to be the story that never ends... But everytime Amazon tries to respond it seems to dig itself deeper in its own bullshit (I'm a very loyal Amazon customer, and while I wouldn't work at Amazon in a million years, I'm very sorry to see all this).

Some comments:

> Chris Brucia, who recalls how he was berated in his performance review before being promoted, also was given a written review. Had the Times asked about this, we would have shared what it said.

Amazon is willing to "share" with the press the contents of performance reviews of its employees? That's bad (worse than what was in the article).

> Dina Vaccari, the former employee who is quoted saying she didn’t sleep for four days straight to illustrate just how hard Amazon forces people to work, posted her own response to the article. Here’s what she said: "Allow me to be clear: The hours I put in at Amazon were my choice."

That's ridiculous and meaningless; if you choose to not sleep for 4 days in order to carry out your job, isn't it obvious the expectations were set too high, and work/life balance is regarded as irrelevant, as a company policy (or lack thereof)?

> When there are two sides of a story, a reader deserves to know them both.

Well, ok (in general; sometimes there's no "other side"; creationism is not "another side" to the story of evolution, for example). But in this case, the "other side" should be Amazon employees doing normal hours and performing spectacularly, not the voice of management -- as rendered by someone who used to be the Mother of All Spin Doctors!

> The next time you see a sensationalistic quote in the Times (...) you might wonder whether there’s a crucial piece of context or backstory missing — like admission of fraud

That's a cheap, defensive shot; what it really says is you're hurt; and that you'd probably be less hurt if there was not a lot of truth to the original article.
not yet.

This is about routing, and pfSense is more of a NAT/packet filter platform.
Noted, but it's not difficult to add IPv6
I think because the tone of the article itself is so horrible. I honestly couldn't read it.
Amazon announces investment in Invoxia and its Triby
I've spent many months over the past few years trying to really understand REST in order to design a good API and it never quite sat right - there was always something that seemed like a hack.

I'm not going to pick through the OP post, except this line:

"a REST endpoint can return whatever you want"

Yep. I know this and have done that: an endpoint to return complex data. And it never felt right - either I make a bunch of special endpoints losing all of the nice consistency of REST, or I have endpoints that return too much or too little. Or I have a highly parameterized endpoint that essentially lets me pass it a query (cough like GraphQL!)

At the start of the year, I was thinking about how I would like to write my applications client and what I (conceptually, I never got to implement it) came up with was rather similar in concept to Relay/GraphQL in that UI components declaratively state what data they are interested in and the system keeps it in sync by querying the server similar to how Relay/GraphQL do.

I personally find that model much nicer than REST.

But... as a consumer of third-party API's, I do love REST and worry about what a shift might do. However, from a SPA application development point of view, I love the concepts behind Relay and GraphQL more than REST.

But hey - I guess I just don't understand REST well enough (actually, I really don't - I'd be the first to admit it!), despite spending a long conscious effort in trying to. Which is the problem: this mythical "proper" REST seems too difficult to understand and use, so everyone kinda just makes up their own flawed flavour and calls it REST.
Read the whole article. The author addresses that exact quote.
The point of the article is that Real REST does work well for these use cases (which is debatable, but that's what it says).
>If someone "slanders" a business it can't reply with evidence?

What evidence did the business present here? All that has been made are claims. I have not seen any internal investigation or performance report.

>Seems like they were making a statement of if you talk [we?] will fully disclose our information to refute what you said.

They don't seem to be making that statement.

The information Amazon has was not fully disclosed, but selectively sampled and leaked. If Amazon was serious about full disclosure, they would release all the records they are using as evidence.
Lessons about Disconnecting
I think you have to be careful not to be too cavalier with the word "cache" there. While REST is sort of vaguely concerned with the ability to cache in the general sense, in real life we have to be specific about what is doing the caching. This is the sort of dynamic query you'd normally tell intervening proxies not to cache anyhow, so now we can reduce our concerns to the client and the server specifically. On the client, if it asked for a big chunk of the graph and now need to operate on a smaller on, I'd suggest that if the client does not want to incur another round trip, it would be incumbent on the client not to ask another question. (This is further backed up by a consistency concern; if I ask again, I may get a different answer because it has actually changed in the meantime. You may be better off with your code not even looking at the changes.) On the server, caching technologies can easily be arranged (if the server cares) to cache more granularly than is necessarily reflected in the answers. (In fact most of my "cloud" caches I'm currently responsible for do that all the time.)

I actually don't deny there's a use case here necessarily, but it may not be all that large, even to Facebook.
> They do an annual survey of SDEs, and they do release that data internally (aggregated/anonymously). SO they do have data. The problem is if they release data taht says "Oh well X% of our engineers are happy with the company" Then when happens when someone says why not (X+Y)?

If they can show a clear majority are happy with their jobs, that is the strongest argument they have. It also shows the articles claiming otherwise are in error.

There is always going to be someone who complains but data is more valuable than "well, all these people are malcontents or misquoted".
FOR THIS EXACT REASON, I CHOOSE THE DIANETICS TRANSLATION OVER ANY OTHER.
We could assume that, yes, everybody, Facebook included, just doesn't know REST (and implicitly assume that REST is an inherent good in the process). Or one could go "you know, Facebook has a lot of insanely smart people and their engineers are on record as having had problems with REST around stuff like complex object graphs and cycles, so maybe their solution is worth looking at."

If you have to say "oh, this thing is universally great, you all just don't understand it," I will bet hard against you at the first opportunity and I'll usually win in the process.
This is cool. Any reason you chose not to cache reads locally (detect md5/mtime changes for a new read or something similar)?
Agreed, but also nobody wants to be known for "the whole system fell apart while I was in charge".
Physical durability is an undervalued trait. Lots of very gifted people flame out from accumulated injuries in all sports.
>If only 20% of programmers have a portfolio that they aren't bound by a contract not to reveal, does that mean programmers should be 80% unemployment?

No. There is no should or should not, there is and is not. And the 'is' of the matter is that a candidate with a portfolio will be ranked higher than a comparable candidate without. That is only one factor, and other factors can still override that factor. And sometimes, you may be applying for a job where no programmer with a portfolio has applied.

I see no problem even if every employer wanted to use this standard, as long as the employer realized it was only one factor of many and not some gold standard.
One concern I have is that they'll just move this one step further down the road. For example, I believe that you can get the address of a function like dlopen() by manually loading the bundle and looking up the function name (via something like CFBundleGetFunctionPointerForName()), constructing the name "dlopen()" through some obfuscated method as they do with Objective-C symbols. Then it becomes harder to detect that they're even using dlopen(). Any plans on how to detect that? It seems like an arms race that can't easily be won.
As much as I agree about your argument, that's going to be a problem no matter how you do it. You will always run into an impedance mismatch. The problem is, which area should drive the solutions of another area? You'll never get a "good" answer.
I'm thinking about the case where you have a cache between you and the server, shared by multiple users.

I imagine this is useful at facebook, for example for loading parts of public peoples pages, etc.

You are right, that if the data is only used by you, you can just have an advanced cache in the client, sorting it out for you.
SCOMP, A1 secure system of 19??-1985, invented them far as I know. It's one of those old concepts that was ignored repeatedly and re-discovered. Thing is, they left off most of the other good feature and assurance activities Orange Book taught. They're in the process of slowly re-discovering those with "timing-related, side channels" being one. Early Orange Book candidates knocked out "covert timing channels" with mandated, covert, channel analysis back in the 1980's-90's, including for virtualization.

I'm just waiting for the rest to be re-discovered by mainstream so we can get on with it and build a secure platform with significant developer support.

SCOMP Final Report (see p17 of PDF or p9 of document on I/O)
http://www.dtic.mil/cgi-bin/GetTRDoc?Location=U2&doc=GetTRDo...
Using the Pareto Principle to Boost Productivity
>Those wheelchairs go fast after some modding. //

Wheelchairs usually occupy the same space as pedestrians - this was a big failing with the Segway, they're not allowed on pavements (aka sidewalks) - in the UK at least - as they're powerful and relatively heavy vehicles. Presumably at least a part of the design is to protect the wheelchair users surroundings and people nearby.
The single most important question you should ask about your new business idea
How to Create a MySQL Database on Azure
ahh, sorry, misread that.
Jafar Husain does an excellent job of explaining some of the problems netflix has had with REST APIs and why you might want to take a different approach in his introduction to Falcor video. Falcor is tackling some of the same problems as graphql / relay but making trade offs at different points.

https://netflix.github.io/falcor/starter/why-falcor.html

A REST API may be the best decision for a lot of projects but GraphQL and Falcor are solving interesting problems that come up more and more in single page apps of increasing complexity.
Should Tech's Diversity Efforts Extend to Older Workers?
Apple iOS IPSec does not support above DH 1024bit
> Sure, but this is only a claim that Amazon/Carney have made. They have presented zero evidence for the claim.

Well, they've made a bigger problem for themselves if they're publicly libeling someone in addition to releasing private information.
Of course, git was developed by an old guy that used CVS, so....
From my understanding there are hidden programs that are done by the alumni. I have in-law distant family member that had is entire MIT tuition paid by a mysterious alumni he never met nor talked to and it was not a loan or aid package. I have also heard others from Harvard getting similar results.
A tale of two selectors in HTML and CSS
Actually, they mention using content type negotiation for versioning, content types as a type system, HTTP caching for speed and reducing the number of requests, and lots more solutions.

The article actually makes some well reasoned points, and I think poses a very good challenge to what Facebook are doing.
Show HN: OfficeHours – A Card Deck for Startups
I've been working on my first physical product recently and wanted to get some feedback at this early stage.

It's a card deck of questions that you can use as a way of practicing for an elevator pitch, accelerator interview or even as an ice breaker at a meetup.

I created it based on my experiences in an accelerator program a few years ago. I found the most valuable part of Office Hours was the back and forth discussion with a mentor, having to vocalise my ideas and fielding all kinds of questions.

Really this deck is meant to be a pocket version of that interaction.

Going forward custom decks are also a possibility too. They could be good promotional tool for trainers, businesses and event organisers.

Would love to hear any other suggestions or improvements for the site or the deck.

Thanks.
Clickable > http://officehourscards.com/
We live in a society that still, to some degree, teaches us to respect and defer to our elders. That can add complications to a superior/report situation that many do not want to handle or which makes them uncomfortable. But while they will feel uneasy about the hire, they may not realize this is the cause of it, and they could likely chalk it up to a general 'bad gut feeling' or such, not realizing their reasoning is discriminatory.
>> "...I thought the iPad was silly."

In fairness, the Ipad is silly. The general population is slowly figuring that out. [0]

[0] http://fortune.com/2015/07/16/apple-ipad-watch-analysts/
Rackspace is also affected: https://community.rackspace.com/general/f/53/t/6120
Xiaomi Mi TV Bar