skysight-inc/HackerNews huggingface dataset:
1. Be that as it may, no one is idiot enough to create their life's work on a proprietary platform.
2. Which is why commercial unixes are being supplanted by FOSS. And it far easier to do than, eg porting anything from Windows to anything else.
3. WinAPI is a verbose, poorly designed turd, so that doesn't really help your argument any.
I don't care whether or not it's classified as an airline, but if I want to catch a flight with a private pilot and compensate him, fully understanding the risks and rewards of general aviation vs commercial aviation, where's the problem exactly?
Couldn't this technically continue to run "under the radar"? (pun intended)

If this is already legal as they mentioned, but not as a "platform", you could just work on better facilitating the communication and let payments and logistics happen offline (or in private like email)
Building your own BB-8
There isn't one.
You've got one heck of a good attitude and I really enjoyed reading your website. Best of luck in all of your projects!! :)
Lincoln's Great Depression (2005)
Did we watch different films? The end of the movie was about realizing that emotional experiences are complex and that it's ok to be sad about things and that you shouldn't run from negative emotions.

Every person had an anger too.

Not sure how you got the notion that the film makers thought anger is bad.
> Have you worked as a consultant at one of the larger firms, like Optiv, Bishop Fox or NCC Group?

No I haven't.

> What professional experience do you have?

Over 14 years of web programming experience. Plus a few years of open source security research.

> Have you found serious vulnerabilities and published them?

I've found and disclosed security vulnerabilities in basically every popular PHP project (at the very least, every popular framework and CMS). On top of that, several Android and Java app vulnerabilities.

Some of them were sev:lo (timing side-channels in application-layer crypto), but a few were sev:hi (trivial remote code execution).

> Any bug bounties?

Yes, but I've stopped doing them. They aren't worth the time investment.
Java is quite a bit more verbose than some other languages, but I think the culture is a significant factor; C# is similar. I've noticed the tendency to overabstract and overgeneralise, apply design patterns for the sake of using them, etc. is particularly strong. It's inexplicably hard to trace out the train of thought that makes things like this appear:

https://news.ycombinator.com/item?id=4549544

I've written small Java apps --- one class only, i.e. one source file --- which needn't be any more complex, yet coworkers have said there's something uncomfortable about my code; but for some reason can't explain exactly why. I'd get comments like "wouldn't it be better if you made this (only used once and very trivial) line of code a separate function?" "could you use more classes?" (for a <100LoC script-ish thing that had almost no duplicated code nor much in the way of loops.) It's almost as if they can't get their heads around how simple something can be, so it somehow feels very wrong to them.

Then there's the extremist "premature optimisation is evil" attitude, which I think is completely misguided because more code and complexity is bad not only in terms of computer time but also programmer time --- it takes more time for programmers to design, write, read, and debug more complex code.
Obama Says the Feds Vet Social Media Before Issuing Visas
> i.e. that infinity really exists in the universe.

I don't see why this has to follow.
I'm reading here that a big problem with many REST APIs is that they don't go all the way with the concept. They fall short of the total, so miss out on the overall benefit.

But if there are any here who are strong advocates, I truly want to know, how do we authenticate in a REST compliment way in practice? Must we, as was pushed early on, only use HTTP basic auth, and resend credentials with each request? Or do we treat the session itself as resource, and somehow refernce it in requests for all other resources? Or are session cookies somehow exempt from the rule that interactions must be stateless?
Thanks for the tip, I'm actually doing some work in the Node.js + Electron sphere right now, but that's under NDA.
Disney got started by recycling fairy tales with happy endings instead of sad endings the original books had.

Marvel, Star Wars, etc got recycled as well. Marvel got an all brand new universe after destroying Earth-616 and the Ultimate universe to make Secret Wars, and then after Secret Wars they changed things up in the comic books. Star Wars they basically rewrote Episode 4 A New Hope as Episode 7 The Force Awakens by changing the character names and roles. All of this is focused on the young that didn't watch or read the original materials. Disney is youth focused, so us older people in our childhood we had things different in Marvel and Star Wars, and under Disney they have been recycled and changed for a global market now instead of just the USA, etc.

There was a time when the Disney Channel was stealing ideas from Nickelodeon for shows with teens/tweens. But now owning Marvel and Star Wars they can make shows based on those characters on their own channel without having to steal ideas from others.
BitBucket is freemium. You can have a personal account with an unlimited number of private or public repos for free. As soon as you start needing to share privileges with other users you need to pay up. JIRA and Confluence are definitely NOT freemium.
7 things to figure out about your startup idea before quitting your day job
This is super bad form, that sucks.
I'd like to hear how this was discovered and who's name ended up on git blame line next to that password.

I have done a malicious source code injection as part of a network security exercise at the university. That was before git or other sane source control and I basically inserted a semi-obfuscated piece of code in the source repository, which gave our team an advantage in the game (the game was to crack and find a weakness in a protocol, but the whole machine was a target/battlefield). The clever part was first rooting the server via suid vulnerability.

I won the contest, but while doing it I thought, yeah, this shit will never work in the real world. And then this story made me remember that. That's pretty crazy.
Uber-Style Flight-Sharing Service Shot Down by U.S. Court
Saving you a click, the title of the video is "Illuminati Hypersexualization of Children Exposed! Disney Pedophilia and Satanic Rolemodels".
The Value of Low Touch Sales
People who are interested in this topic - what REST is and is not, what it's meant to be, and so on would do well to read Fielding's thesis in full [1]. There is quite a lot of misunderstanding of the topic.

REST as a concept was created as a way of characterizing a successful architectural style seen in web applications, a common set of constraints and advantages realized from those constraints. REST is attempting to characterize the architecture of the web, so I think it would be accurate to say "the web itself is RESTful":

> The first three chapters of this dissertation define a framework for understanding software architecture via architectural styles, revealing how styles can be used to guide the architectural design of network-based application software. Common architectural styles are surveyed and classified according to the architectural properties they induce when applied to an architecture for network-based hypermedia. This classification is used to identify a set of architectural constraints that could be used to improve the architecture of the early World Wide Web.

> Architecting the Web requires an understanding of its requirements, as we shall discuss in Chapter 4. The Web is intended to be an Internet-scale distributed hypermedia system, which means considerably more than just geographical dispersion. The Internet is about interconnecting information networks across organizational boundaries. Suppliers of information services must be able to cope with the demands of anarchic scalability and the independent deployment of software components. Distributed hypermedia provides a uniform means of accessing services through the embedding of action controls within the presentation of information retrieved from remote sites. An architecture for the Web must therefore be designed with the context of communicating large-grain data objects across high-latency networks and multiple trust boundaries.

> Chapter 5 introduces and elaborates the Representational State Transfer (REST) architectural style for distributed hypermedia systems. REST provides a set of architectural constraints that, when applied as a whole, emphasizes scalability of component interactions, generality of interfaces, independent deployment of components, and intermediary components to reduce interaction latency, enforce security, and encapsulate legacy systems. [...]

> Over the past six years, the REST architectural style has been used to guide the design and development of the architecture for the modern Web, as presented in Chapter 6. This work was done in conjunction with my authoring of the Internet standards for the Hypertext Transfer Protocol (HTTP) and Uniform Resource Identifiers (URI), the two specifications that define the generic interface used by all component interactions on the Web.

(To be clear, I'm not intending to comment on whether REST is good or bad, nor its suitability to a purpose like API design. I just mean to comment on what it factually is and is intended to be, since from my perspective it frequently seems to be misunderstood.)

[1] https://www.ics.uci.edu/~fielding/pubs/dissertation/introduc...
> So based on that [3], open source then.

nortel networks. no bugs in the last few years.
Easy to fix for a lot of comp sci papers. Require that to be accepted into a conference the papers must have a working, open source implementation that confirms the results, preferably in the form of a Docker container(s) or a VM image(s). Publish papers with reproducible results alongside.
Private pilots by regulation cannot be compensated. Only commercial pilots can be; and even in that case the buyer must separately acquire the pilot for hire, and plane for hire. If the buyer goes to a single source for pilot and plane for hire, that is an air carrier, i.e. commercial aviation.
if science is wrong then science moves is not that the goal of science?
I know that there's mixed feelings here for fancy scrolling intro pages, but the one for Beagle was extremely well done.
Not me. Donations are a much worse business model to me than ads. With ads, I offer free information they want, and free information about unrelated products and services they may or may not want. Either way they get something free, and I get money without owing anyone anything.

With donations, I'm offering free information, that they're really supposed to pay for, but instead of just asking for the money as an exchange, I rely on the goodness of their heart, or guilting them into feeling bad and owing me. Then they pay, but the information was already free, so they're not actually paying for it, instead they're paying for the smugness of being one of the few that actually paid what they owed, and I become the charity case in their eyes, and they are disappointed if they're not rewarded for their good deed. They expect me to do something, give them some feedback, either by personally thanking them, or posting on the website how great they are for donating. Either way, I owe them, they owe me, and it's all in this fuzzy emotional space that's outside the actual exchange of information and costs of hardware and networking.

I hate donations. I tried them once, and where I would've made $100 per day, I'd be lucky if I got $1 per day, maybe even $1 per week it was that low. Because I don't want to have a "family". I don't want charity. I refunded donations and put ads back up.

Ads are what people want. Nobody wants to pay directly, and nobody wants to be guilted and in debt. The people who donate are doing it for other purposes than paying for nothing. They want something out of it, and I don't want to give them it.

Go ahead and block ads. So what. They aren't for everyone. Then you get free information, donated to you by the people who like ads and support those who pay to advertise, and the businesses who take the risk in paying to have their name part of your site.

People love ads, even those who block them.
The author addresses that. It would be really nice if you would finish reading the first page before the snarky comments.
Is it fair to assume that the model of voluntary contribution/donation doesn't stick with the major publishers because they could potentially make less money by adopting such model? Is there any major content publisher which adopts voluntary-donation-as-income model? I can see that a lot of casual reader like me will forget (or some intentionally ignore) to "tip/donate" whenever we read, say, the New York Times (by "casual", I mean someone like me who reads one NYT article a day at most). For cases like mine, what about encouraging (via a pop-up at the corner?) the site visitors to donate if they visit your site to read a certain number of articles in a day or a week? Will that work?

I feel like there has to be a happy medium where publishers get paid some reasonable amount for their content, and readers also get to enjoy the content for a reasonable price. I think this model can coexist with the current model if the reader/content consumer doesn't mind the ads.
Finn here: you'll have to excuse my French, but bull-fucking-shit.

Finland has plenty of colonial baggage, having been a colony of both Sweden and Russia (who brutally displaced the native Lapps/Sami), and modern Finland was built on immigration. In addition to the obvious Swedes and Russians, which are still sizable minorities today, an astonishing number of magnates from the era of industrialization were immigrants. Finlayson? Scottish. Fazer? Swiss. Sinebrykoff? Russian.

Yes, immigration to independent/post-war Finland was near-zero and everybody got a good 50 years to mingle together before the European Union came along and opened the doors again. But pretending that Finland's economic success is down to "homogeneous culture" and "shared ethnicity" is absurd.
JIRA and Confluence are fantastic at doing their core competency but there are a lot of fringe features that just seem bolted on because some big time customer or PHB decided to bolt on things. I found the time keeping to be one of these things, as well as smart commits- but I think the smart commits problem is just a matter of iterating the feature and making it 'smarter'. I think it will eventually be enormously useful.

My experience has been that if you have competent implementors and administrators of JIRA and Confluence together, and use them primarily to run projects they are very nice and they interplay very well from requirements and documentation in Confluence to tasks and WIP tracking I'm JIRA. But if you implement a crazy JIRA workflow of your own that isn't completely smooth or organize your projects and documentation in a way that JIRA/Confluence don't really get- you're going to have a jumble of buttons and hoops to jump through and your users will hate it.
I saw The Force Awakens at Alamo Drafthouse and they had little montages of some of the marketing and merchandising that went on throughout the original trilogy. Toys, breakfast cereals, even a C3-PO and RS-D2 anti-smoking commercial.

Space Balls even made fun of it!

Anyone who thinks Star Wars wasn't super-monetized on Day One isn't old enough to remember it.
My main gripe is that of symbolic brainwashing; allowing millions of children to view media from a global corporation that asserts that the inner world of your mind acts in a specific way using constant mini-deities, asserting that "abstract thought" is risky, and enforcing psychological cliches is dangerous.
But isn't it a stretch to call the World-Wide Web an "API"? At least in the sense that most people use the term API?
Browser-Based Amiga 500 Emulator for Chrome
The Entrepreneurial Journey Is More Darkness Than Light
I personally found the jsoo documentation almost unusable (same with Ocsigen). OCaml still has a pretty serious shortage of up-to-date, descriptive documentation, especially outside the Jane Street Core bubble.

I'm really excited to see this project because it's the first jsoo program I've seen with a logical structure and a considerable amount of logic implemented in OCaml that ties into JS.
Applications can depend on old versions of libraries. Keeping compatibility forever isn't a goal of libraries like it is for operating systems.
It's depressing to me that the useful idea of a "sharing economy" has been redefined to mean "Uber and things similar to Uber."
I have had the Onyx Boox M96 for half a year now and has been in general very happy with it. The UI takes a little getting used to but it is very stable and has never crashed on me, with the caveat that I don't use the browser (OS is an older version of Android). Just take care to not lose the stylus.
There's a nice extension to this idea - maybe someone can reply with the right credit as I've forgotten where I read this:

When the five things are done, you are done. Leisure or family time.

Even if you had a little juice left today, you keep some in the tank for the other parts of your life. This really helps with steady productivity and headspace for the long term.
Describing feelings with love,faith and generosity
Whats the point in putting a complex image up if I can't zoom in to read it.
There are two types of science that are fundamentally very different to each other; observation science and experimental science. The base thinking of the two types of science are very different and even the people drawn to each type are quite different.

Physics is interesting in that both types of science are successful, where in say molecular biology or geology only one type dominates.
Thank you! Alas, I did not. I am fully behind the open source/free software movement(s), but right now I am at a point in my life where I can't manage and support an open source project as my availability is super spotty. Also, you don't want to see the css... it makes gotos look good.
The best way is usually to not tie game state to frame ticks. See Bethesda's Creation Engine https://www.youtube.com/watch?v=Yuyp-S7FPNI for why that's a bad idea.
> Science and journalism seem to be uniquely incompatible: Where journalism favors neat story arcs, science progresses jerkily, with false starts and misdirections in a long, uneven path to the truth—or at least to scientific consensus. The types of stories that reporters choose to pursue can also be a problem, says Peter Aldhous, a teacher of investigative reporting at UC Santa Cruz’s Science Communication Program, lecturer at Berkeley’s Graduate School of Journalism, and science reporter for BuzzFeed.

Seeing that someone from Buzz Feed has this kind of sober non-delusional perspective on journalism restores my faith in the idea that the internet might not have ruined reporting.

I used to avoid Buzz Feed like a disease, a cess pool of listicles and ADD style click bait but it seems they have a real goal of producing quality content.

Respect.
Apart from the monopolization, is it at all new? ex: Lego. Lego is not produced by artisan plasticsmiths down the street, they're a big company.
There was some magic to the 80s childhood movies -- Star Wars, ET, Last Starfighter, Goonies -- that I don't think can be bottled. Whatever stories hold that place for our kids, I don't think they will be the same movies that did it for us. There's just something about seeing Star Wars in the context of that time, and it's not the same as seeing it now.
Actually, they are all valid ways when using the ReST philosophy. The idea is that with every request from the client the latest state is sent along with it (if needed). This way the state of the request can be reconstructed on the server without depending on centralized storage or a single server. The server may update the state and return it for the client to store again (some parts encrypted if needed). No need for the server to keep the state (this way it can remain stateless).

HTTP basic auth does this automatically.

Creating a resource for a session is optional but may be useful if the state to sent back and forth is too big. But this will require centralized storage.

The state may be stored inside a cookie where parts of it can be encrypted. It is also possible to specify that parts can only be updated by the server.

You may also use Local Storage and send the data across using an XMLHttpRequest or even use a HTML form (which may have limited support for the HTTP verbs).

Read my other comment for more information.
Most internet content is garbage designed to maximize ad revenue. If it went away nothing of value is lost.

Magazines also are affordable because of ads. Most magazines are pure trash I would never read.
I'm not sure that Inside Out was meant to be an accurate depiction of our emotions any more than Finding Nemo is meant as an accurate portrayal of marine ecosystems, or Ratatouille of French cuisine. While our emotions certainly are complex and misunderstood, I don't think that children watching the movie will really grow up believing they have all these little people in their heads. It's a fun concept that takes some existing cultural trope and runs with it to tell a story. Everything is more complex that the limited linguistic labels that we slice the world into. But if we couldn't reduce that complexity into modular, independent pieces then how would we ever communicate?
people use ebay bucks or ebay gift cards (often 90 for 100 or 85 for 100 value)

verizon itself is having some ridiculous promotions lately (requires 2yr/contract, but you can get something like $700 in tradeins - note: the tradein can be a $50 garbage-android)
There is research backing this up: http://www.bmj.com/content/349/bmj.g7015

They conclude that "Exaggeration in news is strongly associated with exaggeration in press releases. Improving the accuracy of academic press releases could represent a key opportunity for reducing misleading health related news."
I tend to be in the same boat, but I feel there's an important caveat: the person providing the criticism needs to be reachable if the criticism itself lacks substance. A complaint just for the sake of venting does no good.

Take, for example, a recent review on my iPad app:

As a creative professional I can tell you that this is junk. Today I had an important meeting and this app acted up to the point the client laughed hard for how bad it was. Stay away!

There is nothing specific in there that I can use to improve the experience. Not one user in thousands of daily active users on this version has reported anything I could possibly assume might be what the reviewer is talking about. Further, because it's on the iOS App Store, it's impossible for me to reach the person.
>Imagine that Achilles notes the position ... and so on

If in logic you assume/imagine something, and reach a contradiction, then your reaction should be to reject that assumption.

In this case we reach the conclusion that Achilles cannot note all the positions.
Yes, I understand. I just have a dim view of any sort of tracking at this point, even if it's a voluntary "nice" kind -- and in general I don't think it encourages a healthy privacy mentality.
If the name of a single character now counts as a spoiler, I don't think I want to live on this planet anymore.
Scandinavia believes in 30 years to prepare for work 30 years of work and 30 years of retirement. Many Scandinavians spend gap years between each degree, and actually get placement in better schools for waiting to go to school. Although some get their degrees quickly most don't feel a rush as decent money can be made working minimum wage jobs. (Currently in Norway)
Part of it was that other magic out there wasn't of the same quality. Now there are video games, phones, internet, it is not that movies are not as cool, but there is more stuff competing with it.