skysight-inc/HackerNews huggingface dataset:
I have recently deployed Content Security Policy (CSP) on a website. When I first looked at violation reports, my jaw dropped. The amount of malware (rouge extensions, toolbars, viruses, ...) that is blocked is staggering.

If you really want to help your (clueless) users, never ever serve a login, registration or credit card form without CSP. It really helps - at least until the malware catches on (I already see "Kaspersky Labs" is injecting its domain into the CSP itself).
There's a book that was published about 13 years ago by the man leading the program to rebuild the difference engine for London's Science Museum called, "The Difference Engine: Charles Babbage and the Quest to Build the First Computer" [1].

I can't really recommend it, since half (or more) of it is about Doron Swade navigating the politics of a London Museum in order to get the thing built. But there is an interesting history of Babbage.

[1] http://www.amazon.com/The-Difference-Engine-Charles-Computer...
Interesting given the recent article on h/n on microwave towers in the UK for high frequency trading.
Hiker Sentenced After Mountain Bike Trail Sabotage Captured on Camera
The worst offender I interact with frequently is Hulu.com. This is a high-profile site with millions of users. It's one of those tell-tale signs as a consumer where I really can't say I trust them with my data. I really wonder, once they have a high-profile "hack" (I assume this will happen), if the state can charge them with criminal negligence?
Soldier Surprise Homecoming Videos 2016
Maybe the problem is asymmetrical information. If I interview at Apple and do fantastic, and I have interviews lined up at Google and Facebook, wouldn't it be a better use of the other interviewers' time to look up my results and focus on things that matter, like culture fit?

I think the problem is that while most of us have college degrees which at least give us a foot in the door, there is very little differentiation to an employer from a graduate of Waterloo or Carnegie Mellon. You might assume they're good but you don't know. They aren't vested by the companies you trust to have quality screening processeses.

The problem might be getting companies to willingly disclose their information. Then again, I went to a co-op school so by the time I graduated I already had nearly a year of work experience, and very little trouble with each additional notch on my belt. Maybe there is a way to solve this that isn't necessarily a product or service.
Show HN: Compile and Host Your LaTeX CV Using GitHub and TravisCI
YOU ARE DEAD, an experimental 1D roguelike
Refactoring CSS Without Losing Your Client or Your Mind
Proving Zika Causes Microcephaly
That advice seems to apply to wage slaves (hourly rate) but not entrepreneurs or salespersons (not hourly).

Many other financial books recommend developing income streams outside of selling your labor at an hourly or yearly rate, which would seem to be missing from your book.
A benchmark to see how much perfs you loose by virtualizing Postgres would have been nice.
I'm not usually one to post these, but I can't help it in this care:

https://xkcd.com/1168/
7 Counter-Intuitive Insights on How to Get Things Done
So, it's something like TicGit? https://github.com/jeffWelling/ticgit/
Supplemental Retirement Income with a Home Business
Yes I'm well aware at the ease in which someone could build a client that would provide such a feature had it not been included. Moxie takes great care not to provide mere illusions of security (or in this case obscurity) such as self-destructing messages or other features of that ilk. I appreciate it, and it's a big part of why I use and recommend projects affiliated with Open Whisper. Still don't believe it was the right decision to blast users with a notification from every Signal user in your contacts. Let Telegram or Whatsapp or some other crap play that game.
Probably so but no one makes chairs that go high, except drafting chairs which are extremely uncomfortable and even more so unergonomic for computer use.
Agreed, but I think there's more to it. The tech industry has a lot of turnover in general. I would imagine that turnover is only aggravated when you throw in short term contracts and a high demand for cleared individuals.
Question for someone who has this app. Can this convert a photo to anime-like or cartoon-like rendering a-la A Scanner Darkly?
This doesn't make any sense to me. If attacker can intercept connections I'd rather he get the hash than the plaintext password. At least then actual password is still not compromised, which is good, given how many people share passwords accross services. If he can tamper with connections, there's nothing that can be done anyway.

It would be very nice if there was a feature in web browser that allowed user to opt in to something like this:

When there's a password input on a website:
1] automatically take website's domain concatenate it to plaintext password
2] generate a secure hash from 1]
3] Derive some reasonably portable text password (20-30 characters) from 2]
4] Make it so that original web page never has access to user's plaintext password
5] Submit result of 3]

Downsides:

1] Stupid websites enforcing password rules other than length (can be worked around mostly transparently).
2] Extra stupid websites limiting password length. (requires user interaction and configurable exceptions for such websites)
3] Can't login with browsers that don't implement this.

This would be very nice for people who share passwords between services. Also would make web service data leaks less valuable to attackers. User would not depend on service password handling quality and/or operator's morality.

I use different passwords for each and every service. But many people can't be bothered or don't get the risks of password sharing, so it would be at least some help to them.
Not when it's only issued by a monopoly.
Morality aside, it's not a book that would teach you how to found a new Google, rather how to exploit social structures in place assuming most people would keep their way of thinking/doing. Exaggerating, it's like when you identify how an ideal member of a religion would behave (because of archetype and social conformity pressure put on them), and then exploit what they aren't allowed to do. Imagine though if every single member of your nation followed RDPD strategy - when everybody is doing that, nobody wins.
MS Office (specifically Excel) is not a shitty product. There's a reason why it has a larger monopoly with finance types Wall Street than Google does with search. Power users can quickly build powerful financial models with it.
> Mission “data load” software is also causing concern. This software is loaded on a mission-by-mission basis, working in conjunction with the permanent systems, to operate sensors and respond to conditions for a particular battleground (Aviation Week gives identifying hostile radars as an example).

"Damn, they have radars here. We'll have to go back and do a software reload, sorry guys."

I've never been in the military aviation community. But I'd assume that ID'ing radars is so basic that you'd want to carry it around with you all the time. You know, just in case.

It does everything. Eventually. Not all at once. And maybe not even when you need it.
When I was a kid I remember the Rich Dad, Poor Dad guy doing tv specials or perhaps they were paid tv segments to sell his book where he would preach the lessons of his book. I remember him being a very talented motivational speaker but when I got done watching as a kid I remember thinking it was all more or less BS because while his over arching message isn't wrong; for someone who is working class or inexperienced it is a HUGE leap and the general tone of his delivery is much more miracle cure than practical steps. For that reason I've always sort of lumped this guy in with televangelists.
The fact is that there aren't actually more parens than most languages. Take a look at any JavaScript code base and you'll see far more parens there.

One benefit of Lisp syntax is that it provides you visual information about relationships in the code, since it's structured as tree. The nesting tells you how functions relate to each other at a glance. It makes the code easily scannable, once you're used to reading it.

Another big advantage is that you can use a structural editor with Lisp. You don't actually manage parens by hand, the editor does it for you. You can see it in action here. https://cursive-ide.com/userguide/paredit.html

The syntax is actually one of the easiest ones to learn, because there is very little of it and it's very consistent. Just because it's not familiar, doesn't mean it's hard to learn.

I use Clojure at work and I regularly train co-op students. I haven't had a student who took longer than a couple of weeks to become productive with the language, or didn't love using it. However, most had a negative reaction to the syntax initially.
Seems you can download via bittorrent as well? [1]

BTW, if you download a file of 1.1 GB from boum.org then the size of the download already pretty much gives away that you are downloading tails.. So https does not give you anonymous downloads, it gives you an increased certainty of origin. But as you should verify the signature instead (which is served over https)[2] I think it is fine to download via http.

[1] https://tails.boum.org/install/mac/dvd/index.en.html?overrid...

[2] https://tails.boum.org/download/index.en.html#index2h1
I was thinking of doing something similar. I also believe that word of mouth can be very powerful. Referral bonuses are something else I am thinking of implementing, it is always nice to give back to people for their help.

Thank you very much for sharing your experience, I really appreciate it!
And delete that other test, it always passes it just slows down testing.
Open subthreads in a new window by right clicking on their timestamp.

As for the political, I submit everything is political. Often, it can be ignored. For this topic, it can't. Discussing it does not mean much, unless we also discuss the politics. It is the politics that will gate what is possible.

People take politics way too personally too. Not always, but enough that the contact sport nature of it can be a problem. I tend to try to understand others as a way to help marginalize this impact. We do find common ground or can improve on advocacy this way.

Take each major thread and process it. Filter politics by reading lightly. There is some good thought in that discussion. Worth it.

Use a number of browser tabs to get multiple views into the dialog. This can help you reference things without so many navigation hassles.

And doing this is a skill too. Developing that is worth it.
Google faces possible EU investigation into its UK sweetheart tax deal
s/OpenTable/Microsoft Word/g;
s/Microsoft Word/Microsoft Windows/g;
The best approach to cancer therapy is to focus on the commonalities shared by all cancer. At the moment that means lengthening of telomeres. Every cancer does it. If you can suppress telomerase and ALT (alternative lengthening of telomeres), or if you can reliably identify the biochemistry of cells abusing telomerase and ALT, then you can kill any cancer.

E.g. a universal cancer vaccine based on this approach: http://www.ncbi.nlm.nih.gov/pmc/articles/PMC4471666/

E.g. disable part of the mechanism by which telomerase lengthens telomeres: http://www.eurekalert.org/pub_releases/2015-05/cndi-csa05111...

People such as the SENS folk have been advocating this approach for more than a decade, but the research community is slow in adopting it. The vast majority of cancer research continues to be a matter of doing very expensive things that only work for one tiny subtype of cancer. If we're doing expensive things, then they should be efficient expensive things.
Using more than one launch is very much not an 'Apollo-style' operation. One of the major features of the Apollo program is that is used a single launch, which distinguished it from all the other competing proposals at the time.
I prefer chess to Tetris. I like a clear goal, something achievable in a short time span. I like something where I have to think. I don't like shooter games (or Tetris): I mean, what's the point? Has chess improved my thinking skills in other areas such as mathematics. I don't think so. So, as I type this, I am trying to work out why I like chess. Some reasons: I have some friends who also like to play, so it provides an impetus for us to get together. I have got better as I got older. I have given it away a number of times, principally because of work commitments or because other entertainments such as bridge (the card game) has captured my interest. But as I mentioned, I have got better as I got older. This is a source of satisfaction. My sporting abilities have very obviously got worse (or become nonexistent), so it encourages me to find I am getting better at some things. I am sixty now and could easily beat both my 16 year old self and my 30 year old self. Just writing that perks me up.
At this point, we have to ask, exactly what is require to get a legal decision that goes against these folks. Given that this case was settled after the financial crisis, and so sentiment would not be on the bankers' side, it is even more surprising.
Isn't he basically preaching a rentier economy? That sort of thing is not sustainable at scale - at best you can have something like 10% of people getting rent (leeching off of) the people doing the actual work. Speaking ethically, this is one of the sleaziest ways you can make money - you're making your own basic income, except it's 5 times bigger than the income of the people who actually do the work. You're depriving honest workers of the fruits of their labour.

People like him are what's wrong with society today and nothing short of a bloody revolution will set us back on the right path.
I'm curious, did you give your new hardware time to settle? The reason for this is serious - at certain points in the release of OSX over the last few generations of hardware, they've turned on a lot of stuff that will burn the system up on first boot .. for potentially up to a few days .. while the indexes get built.

It sounds like you would have allowed a burn-in period, but it has to be said: Rendezvous, et al., and a lot of other things in the OSX consumer package, need to be turned off - if you want a Pro config, out of the box-like ..

(PS; I followed the same path as you, albeit a more SGI/Mips/Linux-oriented, and you can have my rMBP when you pry it from my cold, dead hands. Or, when its battery dies, or something like that.. Can you imagine if SGI had made a laptop?)
Where is anti-pattern?
One comment on higer taxes + UBI. This curve is interesting to think about, slowly ramping or fixed percentage? I prefer simpler when it comes to large scale concepts, but maybe it needs to ramp up and affect all income equally (long term capital gains as well).
A startup founder recently asked me to do a 45 minute problem solving Facebook/Google style interview over the phone. If I wanted to do a Facebook/Google interview I would go interview at Facebook or Google.
Reading Rich Dad, Poor Dad represented a paradigm shift for me.

Having been brought up in a middle class, academic family and moving successfully down an academic track, it opened my eyes to ideas that I couldn't even have comprehended existed before.

I don't know if the majority of what Robert Kiyosaki sells is bluff and bluster, but I do know that the foundational message of the book (as told in the quotes on this blog post) were absolutely revalational to me.
Plus in "managing real estate" you are living off the backs of others in a flawed system. These real-estate "investors" are simply the foot-soldiers of banks who are creaming off real wealth creation.

You only have to think about it for a moment to realise this. What if everyone did it? We'd all starve. What if everyone worked hard to gain a skill and then used it to create wealth? We'd have a great life.

I understand what's happening with land exploitation but I won't join in because it's disgusting. It's not "just business" as these sorts would say.
There is actually an admin console (http://kinto.github.io/kinto-admin/) and webhooks are currently in the pipe (https://github.com/Kinto/kinto-webpush)
well, scan a bit further, the 'replica' is the only one ever made! :) "... a design never built by Babbage that only existed in his plans and sketches"
Someone else with IB experience will be here to add details, but those 20 and 30 year-olds were not running the deal. They would have had someone more senior overseeing them. I'm guessing it was a couple analysts and an associate or VP. Those are very junior people.

Now as the article said, the deal was quite small for GS, so it's likely the amount of time spent on the deal by the senior person was small.
Firebase – Back end alternative to that of Parse
Bootstrap starter KIT – responsive themes, Bootstrap 4 themes coming soon
The biggest take away is find a partner appropriate for the deal size you are doing. A smaller IB for which 5m fee would actually matter would have being a smarter bet.
I don't understand what you mean when you say that you are "a good member of the community" and I also am skeptical that it was ever possible to be that in that neighborhood.

I was a good member of the community in the sense that I paid rent on time, I helped my elderly neighbors get their groceries up the steps and into the house.

But I don't want to hang out with anyone. I am not a particularly sociable person. I'm an extreme introvert. I play the violin and write code.

I'm not going to hang out with the local people in the neighborhood and smoke weed with them because I'm on probation for a DUI, and any interaction with drugs or alcohol could land me in state prison in Texas for 18 months.

What exactly is it that you mean when you say be a "good member of the community"?
I'm currently using Lua on the same platform. 'tis a true joy!
Bootstrap drag-and-drop builder BLOCKS v.3
You should have put it like this... "Careful, In Soviet Amerika, interweb censors you"
Ask HN: Which mobile platform should I develop for first?
I currently have a subscription/membership site that is mildly profitable... nothing to write home about, but to be fair it has not been heavily marketed yet as we have been working out the kinks and getting a feel the best ways to support it while we are still small.

The next logical step for the site is to create an app that allows people to purchase a subscription so they can immediately start using our service.

Backend of the site is ready to go to use for an app... all functionality is implemented on Java EE and exposed as Thrift services.

Since I know Java, I glanced at RoboVM but I balked at the price. Currently my plan is to learn the Android platform and develop for that, and then develop a separate iOS app later using Apple's native tools. I'm not sure if this is the right approach, or if there are reasons why I should start with iOS and do Android later.

My questions:

1) Is it faster to get up and running with iOS or Android, or neither? I assume that for me personally Android will be faster because I already know Java.

2) Is one of these platforms better for getting actual sales... that is, in your experience do Android users make more in app purchases that iOS users, or vice versa?

3) What are the costs associated with getting an app published on each of these platforms? I assume that I would have to buy a Mac to develop for iOS (what is the cheapest machine I can use to do that?)

4) Is it wise to maintain two codebases, or should I spend more time looking for a way to develop a single codebase for both platforms (similar to what RoboVM seems to offer)?

5) Is there a compelling reason why I wouldn't want to release apps for the different platforms at the same time? In other words, should I develop apps for both iOS and Android before I release either one?

Thanks in advance.
Aaron “tenderlove” Patterson on The Setup
FWIW, 1Password will do this: https://15254b2dcaab7f5478ab-24461f391e20b7336331d5789078af5... (not my image)

1Password will also refuse to autofill passwords when it can't verify the application's signature (for example, if Chrome hasn't been updated in a while).
The aim of MicroPython port for ESP8266 is exactly to make it very easy to use, even for beginners/people coming from "desktop". (Other people will answer that ESP8266 already has easy enough tools to use, and I won't argue with that either.)
Yep, he is. The guy is a leech. Another is mr money moustache with his 3 homes telling us to save by eating oats or whatever. These guys make me sick. I half agree that we need a revolution, these people can never be persuaded of their ills they are just horrible people.
Great idea doesn't cut it -- this is freaking incredible.
A .docx file is a zip containing a one or more .xml files that describe the document. I once had the idea of of giving meaningful names to images in one...after all, it's xml and xml is just text and supposed to be human readable. It isn't. Word documents are rather complex, that's where the "one or more .xml files" comes in. It's why Microsoft built its own open standard back in the aughts when Sun was arguing that OpenDoc was good enough, i.e. Microsoft would have had to remove functionality from Office to implement it.

Which is to give some background on why .docx -> .md -> .docx might not do what users want it to do, if what users want at the end is what they put in at the beginning or something close to it. Markdown simply does not contain as much information as .docx. Even "only" going to .html will probably be a mess: last time I dealt with an html file generated from Word, it was full of local markup <span>'s, but it might have become better since it's been a while.

Anyway, if I were trying to version track .docx files, I'd probably do something like unzip -> commit -> zip and forget about trying to read diffs in the repository.

Good luck.
I love C# and find the syntax of golang... primitive.

However, the green-thread/channel combination is powerful. It is not just that it is performant (it is) but that it is x10 the code and mental overhead to use compared to something like the TPL (task parallel library for you non .Net-ers).

So I'd caution against comparing C#.Net to golang. C# Async/Await is fine for event processing but it doesn't match golang channels. And channels are really the defining feature of golang.
This article makes a good point. Any switch to a new product has to exceed the cost / benefit ratio of the old one, and familiarity of staff in high turnover industries certainly factors in to that CBR. So, you don't need to make a product that's just "better" to compete in these industries, it needs to be _spectacularly_ better in order to convince business owners to invest the time in educating existing and new hires. An important point.
Really? I thought giving to charity was a fairly common and widespread practice around the world.

If you're looking for ideas on where your money could make a difference, think about open source projects you use regularly, local food banks, EFF, Amnesty International, or check out the Awesome Foundation!

And if you need help rationalizing it to yourself, consider that you could make a concrete, tear-inducing (positive) difference in somebody's life for the cost of a dinner at a decent restaurant or an Xbox game.
Learning from mistakes in China, Amazon is wooing India
175+ Free WordPress Themes 2016