skysight-inc/HackerNews huggingface dataset:
I saw a VAX still in the rack a few years ago at an army base might be a good place to look..
Some modern tools to mitigate XSS/make XSS virtually impossible:

- Content-Security-Policy https://developer.mozilla.org/en-US/docs/Web/Security/CSP/In...

- The sandbox attribute on iframes: https://developer.mozilla.org/en/docs/Web/HTML/Element/ifram...

XSS is one of the hardest things to keep under control at scale.
I get a grande drip coffee every morning just for the star. Looks like I now have to go 32 times to earn the reward.

Guess it was too good to last; I'm going to stop using the reward system and just drink coffee from the office.
This seems like a strange critique because hackathons are so opt-in. Yes there are often problems but no one I know goes expecting to win any prizes. Who cares about the prize? If you're going to try to win something, don't go. There are people who earn their income gaming hackathons with big prizes, and you won't compete with them.
The PDP-11 was the first thing that came to mind. I'm sure there a still a few of those out there.
> an efficient algorithm that basically does what a Karnaugh map can do

i was under the impression that BDD's are the current state of the art for minimization of boolean-functions. no ?
> So in order to be safe from lawsuits, publishers would have to go back to directly contracting with advertisers for every ad.

Or they would be forced to seek agreements with ad networks to cover such faults. Insurance, in some form.
That sounds amazing! I went to Austin once for a tech conference and the vibe was really amazing.

I could really use something like this, though I feel like 20$ of your food is a lot better than 20$ of our food (I'm in Montreal).
I'll add it
Netbooks aren't designed for reading, and they aren't really good for anything (which is why that market is dead). Tablets are almost perfect, though I think we would prefer e-ink solutions if they were at the level of resolution and color as print, without the huge cost of that new Sony one.

> My guess is the non-technical people involved with ordering them think iPads are sexy and cool.

Must be stupid people tricked by shiny things? I don't think so. How many of us have gotten rid of all our books because we can just use our tablets now? Many! And no, we aren't reading books on our netbooks, and our laptops never tempted us to do that.
> the gold rush has come to an end for Internet startups

I can see the arguments for that but on the other hand the internet unicorns are popping up like never before. Maybe they are overhyped but Slack etc are doing ok. I'm not sure things are dramatically different in 2016 compared to 2013 when they launched for example.
What do I need to do on my Android phone to make sure I can't be tracked in this way?
> Practice, experience and good heuristics help, though. And if they don't, then you redesign the formal system until they do.

I'm not sure anyone really understands the cognitive processes behind doing math. But maybe?

> The desired invariants (see below) and complexity bounds for your code will tell you what data structures might be more convenient than others.

I rarely write code where I even need to think about complexity bounds! I'd be surprised if that was a dominating concern for even a significant fraction of programmers (systems HPC programmers, for sure, but...UI programmers?).

> Only if I can't see what the invariants are, then I might use some examples to generate plausible candidates, but the job isn't done until I have found and confirmed the invariants themselves. In other words, I don't conflate “works for these few examples” with “works in general”.

We don't. But you need to start somewhere. Don't underestimate the value of a few good examples in the problem solving process.
How about a hackathon sponsored by an open source project? Where everyone spends the allotted time contributing some improvement to that project. Seems like fun, something I would participate in, and the sponsor potentially gets a lot of benefit for cheap/free.
If the specs are written in a language that can be understood by a computer, the computer can be used to prove assertions about the spec (will it function correctly? does it contain any internal inconsistencies?).

More information on formal methods can be found here:

https://en.wikipedia.org/wiki/Formal_methods

The formal specification language referenced in the article, TLA+, is described here:

https://en.wikipedia.org/wiki/TLA%2B

Here are some interesting comments from an earlier submission of this article:

https://news.ycombinator.com/item?id=8096185
Sorry about that. Design isn't my wheelhouse but I updated it to what google tells me is a colorblind friendly palette. I would definitely appreciate it if you could take a look and let me know how it is.
"I can't help but notice that the power supply description is incorrect on RS-online's site."

I'm guilty of not reading the spec sheet, thx @Daneel_ interesting about the apple supply. Might try it.
If Bob says he has a message for you from Alice, and the message he delivers is exactly in line with Bob's incentives, are you skeptical of Bob? Even if you knew in advance Alice was sending you a message via Bob, does the fact that the message and Bob's incentives are in alignment not cause you any skepticism?

I addressed Koko specifically because her case was brought up and is especially famous. I believe that a press release about the death of a celebrity who visited the gorilla once, 13 years before[1] is either a) cynical, exploitative fund-raising or b) misguided interpretation, relying on the interpreter's own emotions to decide those of the animal being interpreted. These declarations are made by the caretaker who has a long, intimate relationship with the animal.

My skepticism is aimed not at the idea that non-human animals are intelligent, empathetic, or emotional, but rather that single human interpreters, working for decades with a single animal subject, are reliable scientific indicators of any possible conclusion. A decent Slate article here[2] goes beyond Koko. I am arguing that the evidence most commonly presented is weak, not the hypothesis.

I found this article about parrots and PTSD[3] fascinating as some of the examples are almost certainly Clever Hans effect and others are in fact best explained via a close pair-bonding humans recognize as love.

1: http://www.koko.org/koko-tribute-robin-williams

2: http://www.slate.com/articles/health_and_science/science/201...

3: http://www.nytimes.com/2016/01/31/magazine/what-does-a-parro...
In addition to all the provided stimulants, hackers are
encouraged to work through the night. Sure there may be
reminders that you should sleep when tired, but why a 24-
hour event instead of a 12-hour one then?

Shut off the power and wifi from 10 PM to 6 AM.
At my previous company, we had a hackathon where the theme was, more or less, bringing the company more together through technology. ~12 of us made 3 separate teams, came up with ideas, and worked like 12 hours on a Saturday hoping to be declared the winner.

When all was said and done, the judges—all non technical—took about 30 minutes to decide that it was a 3-way tie. If you're going to make something a competition, just pick a winner.
All the above + stack you chose, and the curve balls along the way. Yeah, big topic no question...
> A power saw is dangerous; but I'm not going back thanks.

And now we have power saws that immediately stop when they encounter flesh. Obviously, disciplined users never had to worry about that system, otherwise we would have had a bunch of people missing fingers... like my wood shop teacher in high school. :/

> And nothing to say about the performance cost of these infallible tools? They are not free.

People have brought this up a few times, but I've never gotten an explanation that makes sense. My understanding is that Rust does most of its protections in the compile stage, so while not free, they are a small up-front cost at the compile stage, plus an indeterminate cost at the development stage in possible more complex reasoning about the code, which then pays off over the lifetime of the application. While not free, that's definitely a trade-off that seems to make sense to me.

Or are you talking about some other cost? Can you explain where I'm not understanding your point?
Yes, I am very confused.
The worst thing I feel about hackathon is that it instills a bad culture of software development into young programmers. People spend a weekend writing crappy code and wiring APIs together, expecting to get money and fame. In the real world, we don't need more crude and fragile apps which leverage most of its work to frameworks. We need more solid, performant, well-designed apps. Sadly, none of these points are priorities at hackathons. We also need more programmers with empathy, perseverance, dedication, and ability to work on large projects without burning themselves out physically and mentally. Hackathon doesn't seem to cultivate these traits either. I hope instead of going to hackathons, more people can try building semester-long, meaningful projects and take time to maintain them, or try contributing to open source software.
for a moment I thought that this would allow in C++ to create a 'python dictionary' like data structure for a run-time provided array of JSON objects (as an example), whose schema was known at compile time.

However tuples, do not appear to enable that.
I know age discrimination must happen (even in software), because people report it, but I'm about 50 and maybe I'm fortunate but I and many old ex-microsoft friends haven't had trouble getting jobs here. I get pinged multiple times a week to interview. If you are a dev in Seattle, can really code, and can pass those famous 1 hour design & code interviews in c++ or java, there are endless jobs in Seattle (hint: always try a hash table :-)).

I get that you can't just move to seattle or some big city with tech or wherever for a job, you might have a family, a life (it's fairly expensive here), but if you can't find a job as a dev, you are probably living in the wrong place.

You have to practice before interviewing. If you don't know c++ or java or js, practice on your own until you proficient. Just get out there and try. I feel so sad when i read one of the endless stories about someone who got laid off by a stupid evil company (like the recent disney people) and training your replacement, that would be unbearable. I have been fortunate to find companies that honestly did have thousands of job openings, and did hire tons of us citizens but also we hired thousands of people outside of the us of a too.
Software Architecture Patterns
Ships are allowed to sail near the range. One of them sailed into it. I was guessing that it was Jeff Bezos' yacht, but probably not.
How do they make money? I couldn't find this information on their site.

edit: I'm asking because on their hiring page they say they are not venture backed. I'm just wondering how they are funded.
I made a hack that allows you to use Signal-Desktop on your own server using usernames:

https://github.com/mfassler/pySignald

(it's not integrated into the Signal network, though... it's just a little hack is all...)
OpenBSD hackathons have been held at least once per year for ~17 years [1].

[1] http://www.openbsd.org/hackathons.html
This seems remarkably sensible, now I find myself itching to research the history of embalming
> You can't get rich making a site like reddit today.

Why not? Reddit is old...
I'm with you. Where I work Hackathons happen because someone in management has heard it's a cool thing to do. Practically nothing that happens in those ever is shipped and nothing is learnt from the experience. It's just a way of wasting people's time and appearing to be cool.

When I was younger I used to work through the night with friends on stuff we wanted to do. It was fun and social. There was no commercial motivation or value. We just had a lot of time on our hands being geeks with no social life and we enjoyed building things. In a corporate setting this is maybe similar to Google's 20% time which as far as I hear isn't really working any more either. The closest thing to this in my day job world is people taking some time to just do whatever they want to do without giving a damn what management thinks. If you can do a little of that in your workplace then you're basically getting the "true" hackathon effect ...
One point: by far most websites are on a pay by impression rather than pay by click. More predictable revenue.
A corporation is implementing the taxation model described by George. Note that "corporation" is any incorporated body, and need not be a for-profit enterprise. In many parts of the US, towns are corporations ("incorporated") already. I'm not familiar with the governance of Fairhope's corporation, but incorporation need not require unaccountability.

As for central management of core elements of an economic system, look up the role of the Texas Railroad Commission (hint: it didn't regulate railroads) and prepare to have your mind blown.
This is a classic, the folks at Sandia are really interesting to talk to about computer architecture, one of the few places where solid research continues.

The interesting thing for me when I got to Google was understanding how the entire Map / Reduce paradigm worked. It really manages to greatly increase the amount of compute you can apply to a problem with a fairly painful restructuring. An interesting debate broke out about HPC (High Performance Computing) vs MPC (Massively Parallel Computing) and whether or not the architecture was irrelevant to the problem. Put specifically could a problem be expressed as an HPC problem, and then tranformed in some way to be expressed as an MPC problem. There is a pretty nice PhD in computer science in there somewhere, combining Amdahl's law with the theory of computation.

Generally most folks started in the "some things can't be done by map reduce" camp but over time more and more things have been shown to be doable that way, especially if you let the intermediate results float around inconsistently. I've always felt that combinators[1] had a role to play here. Sort of like the Z transform in signal theory, if you can decompose the problem into a set of combinator operations, is seems like you should be able to convert it from and HPC algorithm to a MPC algorithm. Just a conjecture as far as I can tell though.

[1] https://en.wikipedia.org/wiki/Combinatory_logic#Combinatory_...
This looks perfect for what we need, and the price is certainly right.
I've got to say that I'm interested in it, having just learnt of it.
I think for Hackathons to be a positive experience it depends one two things.

First it has to have an end goal where, even if you don't come in first place, you still leave with something that will be useful. From an incredible learning experience to something that could make you money.

Second it shouldn't cost you anything directly except for time. Working extra hours for your own company? That's costing you more than time because it's becoming a requirement ("Look at Johnny over there, he's gone to all our hackathons and now look at him in a more senior position. Do you not want to move ahead?").

For instance I just finished participating in Launch's Hackathon this weekend. Other than the costs I paid for my travel I paid nothing but time (they provided all food, drinks and not all of it was unhealthy) and in the end, even though I didn't win a prize, I left with the start of a really cool product (if I do say so myself) where, realistically, I think I'm about a week from delivering a decent, beta experience. I even created a Twitter account just so I could post my fun experience as I went: @heysimex

TL;DR: hackathons that cost money, that don't provide you with SOMETHING useful even if you don't win or that are run by your own company are rarely good experiences (unless you win). Hackathons that cost you nothing but time and you have something at the end of the thing? Awesome. I love it!
jacobparker: Indeed. I added related headers to my web server conf after the fact (https://github.com/WillieStevenson/conf-files/blob/master/ng...). I should of have mentioned it in my post.
Good luck with the link still being usable in a month or a year. There's a reason we use domain names for sharing. Not only because they are friendly to read and remember, but also because IPs are typically far more transient than domain names.

The IPs behind my projects have changed dozens of times over the years (new server, changing hosting provider, adding a load balancer, etc.). A simple DNS change allows the same domain name to follow the project.

I'm actually surprised HN permits links to IP addresses. While links posted here are not guaranteed to point to the same content in the future anyway, it is more likely that an IP address will change before the project is taken down entirely. Search engine posterity and all.
A Unix-like system that's not Linux, mind, since ulimit -m hasn't worked there in a long time.
A much better way to mitigate XSS/HTML injections is not using string functions to generate HTML.

CSP prevents an attacker from executing scripts, but the attacker can still corrupt your HTML.
"The future is having older wise folk write out proposals to ambitious projects, and have young people fill in the necessary parts."

That's generally the past and present as well. With some notable exceptions I think that's how the world has pretty much worked through most of human history.
Indeed, it sounded as if the bugzilla page somehow had a hand in bringing down the palm site.

Poor Yuhong Bao, probably not what he'd hoped for when he opened this bug. No good deed goes unpunished. :/
Right. I actually considered that when writing the post, then didn't end up mentioning it. I suppose that's possible, although I find it unlikely that large ad networks would indemnify small publishers in that way. Perhaps if they felt they had no alternative though.
So it's doctest [0] from python?

Is the testing framework at amazon open sourced? I really like doctest and wish there were more implementations of this for other languages.

If not, than that is unfortunate. If I can't see the implementation of something, then I don't really consider it "tangible," so that makes a lot of this "academic-enriched" information unusable for me.

[0] https://docs.python.org/2/library/doctest.html
I think Lua + LuaJIT hits all the right bases.
Can you give examples? Dependency Injection seems to be the trend going forward as far as good practices go (Play Framework for instance is migrating to pure Dependency Injection for routers/controllers).
You're not the first to ask. Here's some answers: https://www.reddit.com/r/privacy/comments/3s1fng/how_does_op...
For sure there's still software written for the IBM 360/370 mainframe series in production, just running either natively or in emulation on a newer zSeries 'frame. "Mainframe" doesn't necessarily mean "old".

I used to run a couple hobbyist/enthusiast sites and mailing lists for people who collected and restored old DEC equipment (and I still run an all-systems-welcome "rescue" list). Shortly after 9/11, I got a phone call from someone working in the Pentagon who was looking for parts to repair a VAX that had been damaged...
Here is how you can make money with stock photography
Women only make up 18% of comp sci majors. If you want more women in computers encourage them to study comp sci. If they don't they may not be qualified for the jobs.

It is all a matter of having an interest in learning. I have African-American friends who I offered to teach them programming so they could get a job. But they refused and had no interest. It really is that a person has to have an interest in learning something in order to be qualified for a job. The diversity problem could be not enough women and minorities with an interest in learning comp sci and programming and other things.

Asians have an interest in learning comp sci, which is why there are more qualified applicants from Asia and get more jobs.

At one time programming was done by mostly women. http://www.smithsonianmag.com/smart-news/computer-programmin...

But that changed and women weren't hired as much as men and women gave it up and then lost interest in learning.
I see hackathon as a scam

or how to teach early to young new passionate developers that the "norm" is to work long hours for next to no pay, pizza? yeah good enough.

It also vehiculate the idea that code is a just commodity, that anyone can piss some code over few days and build full working apps supposed to impress people.

Well, understand those poor company, they are not sure you can be a good slave, so they need to test you over a week-end: does he/she complain for not being paid? not sleeping? being forced to use this API vs another?

howdy boy, "slap on the back", here your prize, by the way everything you have produced this week-end is owned by whoever organized the hackathon and they can do whatever they want with it while still not paying you, now go away you need to sleep and you stink.

I saw companies organizing hackathon for their own employee, not something open to other developers or involving a public API, no sir, a company week-end event.

They did those hackathon to allow their own employee to work on "what they like" or "what they did not have time to work on during working hours", but still have to be related to the company business, in exchange of beers and pizzas .. oh and if you don't show up we'll know you are a lazy bastard not inline with the company direction.

So yeah maybe not all hackathon are like that, but most of them has this feel of scam where at the end you want to scream "fuck you pay me".
"There are a lot of teams who bring their existing projects to the party"

I wonder if this can be approached with rules, such as:

* Provide datasets, interesting hardware, or other things that the participants do not have in advance. Release them only at the start of the hackathon. In the judging criteria, have heavy weighting for how well the teams make use of the provided resources.

* Forbid, on honor code, to bring your startup (or any other project you have started before) to the hackathon.

* Prohibit, on honor code, use of any code written prior to the hackathon unless said code has been under an open source license for 3 months, advertised and available for the public to download, AND your team does not represent the majority of the contributions to said code.

* Define one or more problems to solve, within the scope of the hackathon. Don't release the problems until the start of the hackathon. Require all teams to work on a solution to any of the stated problems.
Thanks. I didn't realize how much the new system sucks til I looked at the math. Before I was spending $30-40 bucks to earn a free drink. Now I have to spend $63 in the least, not accounting for truncating the cents off each purchase + tax, so more like $70-80 for the same perk.
Yep. El Pozolero was famous (infamous?) for this. [0]

[0] http://www.borderlandbeat.com/2013/04/el-pozolero-legacy-of-...
Gosh, I have to get up to speed on the various types of sweeping generalizations.
#Budget2016 – Exclusive live coverage on #UnionBudget2016 has been started
I'm in Vietnam and it's booming but more in real estate and manufacturing rather than internet. The Uber of Vietnam will be ... Uber.
From the description, doctest seems more like a kind of unit test: it makes sure that the test cases embedded in the doc string return the correct values when run. But you can't prove that the a function works correctly just by running a few test cases (or even a lot of test cases) - doctest has no representation of the function, so it can't reason about how the function is supposed to work (let alone the system as a whole). For example, it can't tell if the arguments passed to this function by another function will always conform to what this function expects to receive.