skysight-inc/HackerNews huggingface dataset:
Agreed. It also alerts you with "X is on Signal, say hey!" notifications when someone in your contacts signs up. I've brought this up before on HN and the Signal issue tracker [0] but there's been little to no attention paid to it. They also seem to conflate simply using an encrypted messenger with alerting everyone else that you're using an encrypted messenger. It's the difference between an email client that lets you send a GPG encrypted message and a client that immediately notifies you of every contact with a GPG public key, regardless of whether you've been in contact with them. I understand it can be done, I just don't think it should be implemented in the official client everyone uses. It's pretty shitty because apart from this issue, it's the best in it's class of secure mobile messenger. Unfortunately it has friends (and perhaps myself) eager for new entrants for which this isn't an issue.

I use Ricochet (uses Tor hidden services) on Desktop, which doesn't require a phone number or registration, and is metadata-safe, but the limited feature set leaves a bit to be desired.

[0]: https://github.com/WhisperSystems/Signal-Android/issues/5009
Very few modern "REST" APIs have even a remote resemblance to the REST architecture described by Fielding, it's mostly just RPC over HTML with data in an specialized subset of JSON or XML that is specified per endpoint out-of-band rather than indicated by media type.

I really wish people would stop calling it REST, since that Rob's the meaning from the term.
The surface itself is the Klein bottle, so I would expect its boundary to be some 1-dimensional object, in the same way the boundary of a disk is the circle surrounding it.
Dependent types are great, but I fear not for the average programmer on the street, at least not on the current languages that make use of it.
You're missing the point of the post, which is personal responsibility.

People on Bill Parcels team cared, and their fans, but all Bill Parcels can do is go out and coach and take responsibility.

All the CEO of zenefits can do is lead, take responsibility, and try to make the best decisions for the company.
Yeah, exactly. It's like what Steve Jobs used to tell newly minted VPs: once you reach a certain rank in the company, reasons don't matter anymore, and only results do.

http://www.businessinsider.com/steve-jobs-on-the-difference-...
"Or you could have ad networks that only circulate carefully vetted/curated ads."

No, you make it simpler than that

you simply forbid ads to be interactive or to contain any code

eg. you do only static ads like text, image, video

no code, no way to hide nasty stuff
How does that compare to overall percentage of women (and minorities for that matter) in the industry? Maybe it's not a problem with big, evil corporations that they don't want to hire woman, but there's simply 10 male asian candidates for 1 black female and the rest is statistics? I'm doing master of science right now and 10% of students are female. How can that later translate to 50/50 hired workers with master degree? Should we hire people from the street because diversity? Serious question, I don't understand what's up with diversity issue.
The title is a perfect review of the post.
You can express your disagreement with staying past office hours without being condescending. Though, the post only indicated no participants were allowed to work past a time, not that everyone must work until that time.
One of the projects I'm working on aims to make it easier to integrate CSP headers into web applicatons.

https://github.com/paragonie/csp-builder

I'm working this week to integrate it into another project we're developing. (It's MIT licensed, so have fun with it.)
Virtual Reality in Education: Is the HTC Vive Showing the Way?
I think you should pitch this idea to the Cartels.
No matter what all the other commenters are saying here maven and gradle are awful. Cargo is much more pleasant to use.
The whitelist was introduced here:
https://hg.mozilla.org/releases/mozilla-aurora/rev/1e9694bbf...
https://bugzilla.mozilla.org/show_bug.cgi?id=1128227

It's described as "TLS Intolerance fallback whitelist". It seems to allow RC4 and SSL3
Desktop client ties in with google chrome. The last place I would consider anything private on my computer.

Mobile app ties in with my cell phone. ... again meta data I would rather no one know, or be forced to associated with whatever I communicated on whisper..kinda defeats the purpose.

Major and inexplicable issues I would love to see discussed.
I think there is a better way to put the message than "nobody cares." You might have many loved ones who care.

The better truth is "reality doesn't care." When deciding how to act, the reason you got to where you are is irrelevant. Reality doesn't care about fairness or justification. It just is. You can only move on from where you are, so focus on that.
> do remember, the people who made all the money in the gold rush weren't the miners

I was curious so I googled. Wikipedia: There were 300,000 gold-seekers and "On average, half the gold-seekers made a modest profit, after taking all expenses into account."

So probably better odds than the people doing startups. One person who made a lot of money was Levi Strauss who stated selling denim to the miners.
http://mindingourway.com/how-we-will-be-measured/ seems relevant
> These things can be reduced to nuisance level by discipline.

Apparently 40 years are not enough to acquire that level of discipline.
Hackathons are cool, but not those company funded ones.
Hi CiPHPerCoder. Can I PM you?
If I understand this correctly you can also see the real world because the image is overlayed. This would be too distracting for me. The opposite, a pair of glasses that totally blacked out the rest of the world, would be ideal for me. Put on some sound-cancelling headphones and I'm in programming heaven.

Related: Some editor users set up their background color as partially transparent and see other browser windows, etc., behind the text they are editing. This would drive me crazy, not to mention that my eyes are bad enough to begin with.
This is such a hit piece of a article.

If India wants to install solar cells they can, if they want to compete globally for solar cell production they can. Contrary to the false claims in the article nothing is stopping them.

On top of that requiring a percentage to be produced locally is just asking for trouble in a country with as much corruption is India.

> Said Cossar-Gilbert: “Trade policies are preventing a sustainable future.”

Oh please. It's not solar power at any cost, that will just cause more problems than it solves.
Tagatab – Control your Chrome tabs
That Ben cares only about his money and not an iota about the market or other conditions /s
about time. the lack of any graphics in standard libraries going back to the crusty old days of qbasic etc. has always been a frustration.

/me hopes for image loading/saving unlike this post suggests, since most libraries are utter garbage for this
"and again Flash is the scapegoat"

Truth hurts? Adobe Flash and Microsoft Silverlight are common exploit paths because they have new critical exploits every few days. Here's the CVE list for Flash -- notice how many critical exploits there are? It averages to about 1 every 3 days.
https://www.cvedetails.com/vulnerability-list/vendor_id-53/p...

In contrast, JavaScript itself has been pretty stable for years. I think the last vulnerability related to JavaScript ES5 impacted old Firefox browsers.
http://www.cvedetails.com/cve/CVE-2015-4516/
https://www.cvedetails.com/vulnerability-list/vendor_id-452/... (Two JavaScript exploits for Firefox in 2015, both low risk.)

And HTML5? Extremely stable. There may be specific plugins or specific browsers that are vulnerable, but the underlying HTML5 specifications are very safe and have been safe for years.
https://www.cvedetails.com/google-search-results.php?q=html5...

If you know otherwise, then please cite the specific CVEs. Otherwise, you're just spreading false information. You wrote, "Browsers and HTML5/JS also have a hell lot of CVE that can be exploited". I say: Prove it. Cite your sources.

Edit: Adding links to Firefox exploit CVEs.
The German Wife of ISIS Leader Al-Baghdadi Has Escaped
It obviously does exist, or we wouldn't have stolen the word for it from the Germans!
You can use http://hashids.org/. It obfuscated the real ids with reversible (but secret and un-guessable) transformation so on the server I deal with numeric ids (like 5) but the browser sees something like vgRg. I wrote up a bit more about this: https://quicknotes.io/n/vgRg-how-to-prevent-competitors-from...
How would NYers react if the San Francisco Chronicle referred to Bronx or Queens as Manhattan? SF is not in Silicon Valley.

/rant
https://www.youtube.com/watch?v=Tvp97SMZc6M
You can simply use the database integer identity column and convert it into a series of alpha numeric characters. With a little effort, you can generate randomized, unique values. I've written a library that does exactly that, https://github.com/mikecao/hashkit.
Related aphorisms/folk concepts include: no use crying over spilled milk; the serenity prayer; you're only as good as the last thing you did, and no one gives a shit about the last thing you did. It's not a crazy unique or new thought, but it's a good one to be reminded of from time to time.

Fundamentally you have an objective (win games, get more clients, raise money, whatever) and the things you can control to get that objective.

Once something moves out of the set of things you can control[0], no one cares about that thing even if they care about you reaching your objective. If a meeting with a client goes way south and they'll never talk to us again, that client is no longer in the set of things we control. It might suck, but the path to our goal of more revenue no longer includes them, so focus on getting the next client right.

I think you can apply this on an individual level. Sometimes it can be easy to get slowed down or even paralyzed by loss, regret, anxiety, etc. Our brains are wired such that it's easy to mistake wallowing in those feelings as doing something but it's really not. Energy is better spent on deciding what to do going forward instead of torturing yourself re-litigating the past.

[0] Really meaning controlling its impact on you. The fact that you can't control the weather does not mean that no one cares that you decided to send a boat out in a storm it's not suited to handle. No one cares that it's stormy, they care that you make the right decision not to send out a boat.
Another thing to keep in mind is that hashcat can generally test guesses faster then you can feed them over the various connections, i.e. memory -> memory copy for pipe memory -> pcie -> card for loading to the GPU. Also, in cracking rigs, you often have multiple cards over pcie x1 connections, further lowering bandwidth for those cards. One thing I'd highly recommend is trying it with a rules. This allows the GPU to expand your word guesses out on the GPU itself, turning a single guess into thousands of guesses or more. This bypasses memory bandwidth issues, as it's done on the GPU itself, and also means that a lot of rather trivial checks can happen automatically (try it with a 1 at the end, try it with a 2 at the end, and so forth).
>> Salesmanship is rewarded. The rewards are given strictly based on the presentation

This is not a bad thing. I've won hackathons partly–but not strictly–because we had a team that could present well in front of judges and an audience.

Public speaking, sales, and presenting to others is an important skill in business and entrepreneurship. The author would be wise to convey this to his students. A hacker who can build a product of value AND sell it well is a force to be reckoned with.

Sorry, but I love hackathons as long as they're run somewhat well. If I don't like the food, I'll go eat somewhere else. I'm too old these days to work through the night so I usually get a hotel room and get a good sleep. But college students are already used to studying through the night, so I don't see what the big deal is.

Beyond the intersection of making <-> presenting (see above), I also love that hackathons force you to work within constraints–most notably time.

Its a great way to network–especially if there are corporate sponsors. I've met some great friends at hackathons and I've received job offers from companies I've met. I've even been offered investment in a project.

Yeah, people cheat. Yeah, some hackathons are poorly run. The pros still outweigh the cons for me though.
On Twitter? Yes, my DMs are open. Feel free to email me too:

security@ my company's domain name

I'm pretty sure HN doesn't have PMs.
An unfortunate domain name choice...
This was discussed at https://news.ycombinator.com/item?id=11183970 in one of the best threads we've ever seen on HN. I won't spoil it—just go see for yourself.

The current post, technically a dupe, gets a pass because this man was amazing. How amazing? Here is the afterword to the NYT story:

Mr. Clark, during the 1950s, led the design of two other significant experimental computers, the TX-0 and the TX-2. The TX-0 was the world’s first transistorized computer. The TX-2 was used by Ivan Sutherland, then an M.I.T. graduate student, in creating Sketchpad, a software design program that was a fundamental advance in the graphical display and control of digital information.

The first transistorized computer and the one used to make Sketchpad? Oh yeah just a couple side projects.
EM Drive
The link you provided to the write up is not a valid link.
31 Videos from React.js Conf 2016
Or a third way, everybody hides content behind paywall, hail the new web 3.0. Maybe not a bad thing, subscription could bring the old qualified journalism back the in the print era.

If you don't think anti ad blocker is a problem, where is this article coming from? Hmmm, afraid that more websites would follow the trend so less content to read? The attitude that this is only websites and advertisers' problem is not as constructive as the author might presume.
Carrion. Just toss me out into the desert.
Maybe I'm reading your comment wrong (if so, sorry!), but that sounds like a race condition to me.
Zenefits to Lay Off 17% of Work Force
In the past i've seen a 32/64bit block cipher used (e.g. Skip32) with a hardcoded key, as an int->int reversable obfuscating transform.
Sharp Accepts $6B Bid from Foxconn
As someone who has composed aleatoric music and had many discussions with people who have devoted their lives to generative music, I have to say it's debatable whether what you described can strictly be called a "melody" unless you take the broadest dictionary definition ('a pleasing sequence of notes'), though I do think you can call it "melodic" as in 'melody-ish'. In other words, I think there's an essential difference between melody as conceived prior to the advent of generative music, which implies a decision by the composer that 'this is the melody', and a 'random melody' where that decision is made in a different manner, i.e. "whatever this process produces is 'the melody'". In the case of a randomly generated score, it gets a bit confusing because it's not clear if the composer used a generative process to determine 'the melody' or if it can meaningfully be called 'random'. Ultimately we just don't have words for such things. Perhaps conveniently, generative music still plays a very minor role in music culture outside of i.e. some of Brian Eno's recent work and the enduring influence of John Cage.
http://www.cracked.com/blog/6-harsh-truths-that-will-make-yo...

#6: The World Only Cares About What It Can Get from You
Your proposed approach will stop direct risks to browsers, but does nothing for ads that link to web pages that are hostile. E.g., you click on an ad because you are interested in the product and get directed to a phishing site or a site offering counterfeit goods or a site that has malware and infects your browser.

It's not just the graphic used by the ad, it's also the ad's destination.
The idea is fine, however you're going to have to start it from some point of influence, along with a marketing strategy to get widespread agreement, or it will just be one more thing that no one has heard about and wining such an 'oscar' would be meaningless.
That's pretty neat. My favorite of the older ones was the NSA machine that used mercury for memory. Report said overflow errors were more serious than on most systsms. ;)
A base 30 time stamp will give you about the right number of characters, case-insensitive, and without the possibly-ambiguous 0, 1, O, I, L (lower-case ambiguous) and Q (possibly upper-case ambiguous) using 23456789ABCDEFGHJKMNPRSTUVWXYZ as valid characters. Adding back the 0 and 1 (that is, anybody listening to a user on a support call, or any code, would automatically interpret I or L as 1 and O or Q as 0) gives you base 32 and a shorter ID code. If milliseconds are going to be too collision-prone (that is, you can't recuperate the time you'll occasionally have to advance), a short entity code (user or server name abbreviation, f'rinstance) prepended with a dash should make it memorable and user-friendly.
I'm guessing they also have an option to leave the WTO? Why don't they do that?
I have mostly been to them through word of mouth, heard through friends, colleagues, related meetup groups, Reddit, etc.
> A C++ implementor could use a strategy similar to what is used in Java and C#, and re-instantiate every template on demand at runtime.

Are you sure? Expanding templates can affect the parsing of subsequent code, as this example illustrates: http://yosefk.com/c++fqa/web-vs-c++.html#misfeature-3 You pretty much have to expand them at compile time.

(This sort of complexity illustrates why I prefer generics to templates, incidentally.)
I'm digging Front [0] right now. The shared inboxes are great to manage the tons of emails my founders and I get each day, as is the ability to comment on emails without having a huge reply chain in the email history. It also has some nice integrations and is fairly priced.

[0]: https://frontapp.com/for-customer-support
Google Archives – Quotes Giant – Quotes, Sayings – 2016
Markets Live: PSU recapitalisation plan fails to cheer D-Street
1. You made a throwaway account just to say this?

2. You obviously missed the lesson of this story, which I won't repeat b/c other commentors here have done a great job explaining it. There is actually a valuable lesson to be learned that you can apply to your life to achieve better results. As an entrepreneur, when I came across this story a year ago in the book version, it was a huge insight and relief. I used to wallow in self pity about all the crap I had to suffer through, but after I read it, I stopped worrying about those silly things and just focused instead on executing. It's a night and day mental shift and it has not only massively reduced my stress level, but also resulted in better performance.
Tinder Auto-swipe Bash script
So I wasnt the only one that deployed those, eh? Haha. Used them for obfuscation against Intel attacks. Nobody was the wiser. :)
A trade zone is what the people voted to join, tho'. We didn't sign up for a federal superstate and if that is what the EU was planning all along, they did a bait and switch.
as long as you do proper signing of code, reproducible builds, then your security concerns go away. https://defuse.ca/triangle-of-secure-code-delivery.htm
If you're assigning untrusted text to a property called `innerHTML`, you shouldn't be surprised to learn that you're vulnerable to XSS.

APIs like jQuery are worse because you end up treating strings as HTML without even realizing it. Example from the article:

$("#tail-here").prepend(newlines);

There's no hint on that line that the `newlines` variable is interpreted as HTML instead of text.
I spent about $1,100 if you include accessories on a Rancilio Silvia Espresso Machine and the doserless Rancilio Rocky grinder. Once you get to the know the machine, you can pull consistently great shots and even do latte art.

I have had this setup for about 5 years now. I drink more coffee than ever, spend much less for it and it's at the point where I would much rather drink my coffee than go out to a cafe.

But yeah, I would love a La Marzocco. When and if my faithful Silvia kicks the bucket I am going to definitely head that route.

You should try it! There is something just so satisfying about making yourself an awesome cappuccino and it's great for guests.
This is a good post, but first a word of caution.

Many people, when faced with "unwanted information disclosure" via ID enumeration, will look to encryption to solve this problem. Please don't; it's the wrong tool for the job.

https://paragonie.com/blog/2015/09/comprehensive-guide-url-p...

Use a random lookup instead of encryption. (You'll notice that https://paragonie.com/b/oMFJhGJ0aSgCaZq0 takes you to the same URL.)

Use application logic (and access controls) instead of random lookups, where it makes sense to do so.

If you absolutely must use encryption (i.e. you don't have a place to store state), make sure you use an AEAD mode.

https://gist.github.com/tqbf/be58d2d39690c3b366ad
ECL 16.1.2 release
That looks interesting and then I found Vorpal from the readme. I am discovering great stuff faster and faster at an exponential rate. I'm finding a new cool thing almost every day at this point.

I always wince when people bitch here about the because-it's-cool stuff. I think the plethora (yes I know what that word means {movie ref}} of new cool stuff is awesome. Most users here are too young to remember how rarely new languages and systems appeared in the monthly Byte magazine.
The TLA+ tool that they're using is actually open source. You can read about it here (and there's a link to the source on CodePlex):

http://research.microsoft.com/en-us/um/people/lamport/tla/tl...
What I meant is:

(0) Expand the templates at compile-time, in order to type-check the code.

(1) Don't generate target language code for each specific instantiation, though.

(2) Re-expand the templates (or some representation of them) at runtime.

It's a very silly implementation strategy, of course. But I don't see why it's fundamentally impossible to do this - it's just undesirable.

And, yes, I agree about generics being better.
It actually turns out that cargo culting the language of social justice works about as well as the sovereign citizen idiots that cargo cult legal jargon -- both of these phenomena exist in a broad, clear social context and it's laughably obvious when someone who doesn't know what they're talking about, like you, attempts an "incantation" with the idea that it's magic words because they don't or can't understand what's actually happening.
Reminds me that i ran into a blog after the referenced comic was publish, that mused about how the trouble of easily sending files between PC online was a conspiracy between the ISPs and the *AAs.
I'm going to make a push to get my gold status renewed for one more year before the new program goes into effect, but after that I'm not going to worry about it much. I'm one of the people they're not looking for anyway, since I get either a morning blonde roast or a midday Americano when I do go in there.

I also haven't actually been in very much since I got a Zojirushi mug for Christmas - these days I make a pot in the morning, fill up an older mug (for immediate drinking) and the Zojirushi mug for 2-4 hours later (when it'll still be quite hot), and I'm done with it for the day.
D programs can make direct (=zero overhead) calls to C functions (like we do in C++). Which basically means you have access to any C library.

The D standard library is very dense (it makes C++14 standard library look ridiculously incomplete), so most things are available out of the box (threads, processes, filesystem, network, random, algorithms) ... in a portable way.
Ask HN: Is it unethical to interview, just to improve my interviewing skills?
Input Appreciated – starting project to quantify properties of “irony” examples
firewalls?