skysight-inc/HackerNews huggingface dataset:
Obviously, this applies to all networked applications—not just games.

It's embarrassing how often I see web apps which use something like Firebase with absolutely no validation or access control. Often the developers behind them don't even realize they have a problem. Their excuse is that "most users wouldn't have any reason to hack it, so why does it matter?"

Developers need to realize their clients are inherently in the hands of hackers. Any security needs to be done on the server if it is going to succeed at all.
The bonds are great for investors because most of the the terms in there are designed to screw over the customer. These bonds are securitizations of SolarCity leased solar panel rooftop systems. The salesmane I met with in NY told me that was the only way I could get SolarCity panels installed at my home is if I signed the solar lease agreement (which would then be securitized into these bonds).

The lease says that if you default on the lease, by missing a single payment, SolarCity has the right to take back the panels, but you are still liable for the remainder of the lease payments even though you no longer have the panels.
Console port gone horribly wrong? I mean, how else do you violate the most simple of game rules - never trust the client?
https://en.wikipedia.org/wiki/David_Axe
Yes, you've correctly identified what the article is about, and I've never disagreed or said "this article is about Theranos as an investment". I still think it's interesting to think about the article in the context of due diligence in startup investing.
But compared to the other failures modes, still extremely unlikely. It's not really worth trying to prevent an error that happens to the whole fleet once every 400 years when you could work on fixing other problems that cause plane crashes much more frequently.
It doesn't matter. The purpose of the company is Mars colonization, not profit generation. That's why it's still private rather than public.

Long term there will probably be a significant monetary RoI from various projects and technological advancements along the way, as well as being able to sell people (and governments) tickets to space and to Mars. But the company is set up so that even if that doesn't work out getting to Mars will still happen.
Business Licenses for SF Uber and Lyft Drivers Cost Hundreds More Than Expected
Are you suggesting renting doesn't exist?
>"SpaceX also has a reputation for severely overworking its employees in addition to the below-market pay."

This seems to be a trend with Musk-run companies. Do they really attract people that are that dedicated to the mission? Or do they get a lot of people padding their resume, then jumping ship to somewhere that compensates more fairly with work/life balance?
"Never trust the client" is good advice for every kind of application. Clients are filthy liars.

Clients have bugs. Old clients don't upgrade. Packets arrive out of order. ACKs never make it to clients, causing clients to repeat what the client believes to be a failed operation. All of this is before even considering an attacker actively trying to subvert you.

The server should always be the source of truth. It should always enforce all the consistency rules. Database schemas can be a critical tool here as well.

Don't blindly slap whatever the client sends into a no-SQL database, then vomit it back out for queries.
Maybe she's telling the truth and the bike had a disappearing twin?
Most EA products were really good. Sim city back in the day rocked! Madden was amazing!

I guess the danger is if we see Falcon 2020 that is the same as Falcon 2019 with new voiceovers...
Yes... any folder as long as it's in the hierarchy of the Dropbox folder?
> We’re really excited to launch Samsung ARTIK Cloud, Samsung’s commercial IoT platform to deliver interoperability between devices and applications. Samsung ARTIK Cloud is an open data exchange platform that provides easy-to-use, open APIs and tools to securely collect, store, and act on any data from any connected device or cloud service.

I try not to be too cynical but this just sounds like balkanization. Since it's an "open data exchange platform," is the protocol really open? Can I implement my own ARTIK backend?
SBA loans are not that onerous -- go to a credit union (https://www.sffirecu.org/business/loans/small-business-admin...) instead of a big bank and you can get it done.

A Chase (or whatever) business card at 13% is still better than this since you can pay it back early.
Who will trust a company like samsung with updating IoT devices?

I think it will ed up like their fridges: https://ifixit.org/blog/7657/this-dumb-smart-fridge-shows-wh...
Japanese Priests Collected Almost Seven Centuries of Climate Data
A little kapton tape tints it to a less irritating and warmer tone.
Your Office TVs Suck
Completely untrue.
You could send the score on a regular basis, and check to make sure it isn't increasing at an impossible rate?
https://en.wikipedia.org/wiki/Energy_subsidies#United_States
Don't underestimate the power of a large boulder dropped into the earth's gravity well.
You find a mentor even before knowing what the project does? Weird.
a new api endpoint for this would be great. any word on that yet?
I couldn't find it, but I did find a reddit thread with over video examples:

https://www.reddit.com/r/thedivision/comments/4gblza/hackers...
append /S

Sorry, I forgot that I was talking to oompaloompas
Car ownership is extremely broad across all income groups in the United States, see http://www.newgeography.com/content/002666-how-lower-income-.... The overwhelming majority of income taxes are paid by high earners, with the the top 10% paying close to 70% of all income taxes. If roads are subsidized by income taxes in addition to gas taxes, they are being paid for in an extremely progressive way. Effectively, roads are provided for free to over half the population.

Or maybe I misunderstood and you are trying to make a different point?
Oh, it has proper Virtual DOM now? I'll have to check it out. We've been using React for a Web app that needs to render and completely re-render (new columns etc.) lots of data - no hot updates - Vue was frustratingly slow (5-10 seconds), to the point where we initially had to use an isolated vdom solution (Snabbdom) that became messy fast. React is amazing, so not sure if we'll end up going back to Vue for anything data-driven (tabular).
Washing powder for men: Do we need it?
Look into the tooling around F#, you can use most/all of it using the command line and simple text editors. Much of it can be applied to C# too. FAKE is a good place to start:

http://fsharp.github.io/FAKE/

Forge is also worth checking out:

https://github.com/fsprojects/Forge/blob/master/README.md

One more suggestion, if you'd like an easy (but simple) all-in-one solution for F#, check out Ionide:

http://ionide.io/
This title makes me think he was going a casino and gambling with the companies' money. Then he is using those winnings to create more companies.
oh good point. That makes it more interesting.
Wouldn't that require SpaceX being able to make profit exploring Mars? Somehow I don't see it happening in 100 years.

And by the time it does, I'm sure there will be competitors.
Does Science Advance One Funeral at a Time [pdf]
All sorts of new development in Boulder is restricted. Not sure the specifics, but it's kept prices quite high. Tiny 50 year old shacks go for a million dollars.
Thiel, Romney invested $100 M in a company that wants to be Apple of smart homes
How Erlang does scheduling (2013)
I don't doubt that you (or whoever) had additional information and made a sound decision.

Point being simply that someone reading your original comment (or such comments generally) doesn't have the full context and might not realize it. I'm not making a point about your situation, but about how the internet is often misused by people seeking to make their own decisions. A subject that fascinates me.
Two possible answers come to mind: the first is that in order to be licensed nurses, like doctors and lawyers, have to pass an intensive test known as "boards." The second is that licensing, certification, and recertification are functions of state government, not voluntary industry guidelines.
The GP's point is that there are signficant Oil subsidies. But the data in that link indicates that the overwhelming majority of subsidies are going directly to renewables and energy efficiency.

What is the salient data point from that link that you would like to highlight?
In Cold Fusion 2.0, Who's Scamming Whom?
I doubt that the developer's didn't know not to trust the client - they likely made a business decision.

I (used to a lot more) play Elite: Dangerous. A space sim that has multi-player. They made the decision to use (mostly) p2p/client networking to save money - they wouldn't need nearly as many servers. This has caused other issues in addition to cheating - a low limit on the number of players in the same "instance" of the universe for example.

But it was a business decision - imo the wrong one, but what do I matter?
I would think the fact that they don't have an official bug bounty program makes it unlikely they have an unofficial one.

Why is that? It seems to me that there are a lot of ways to run bug bounties, although I haven't thought through the details of Apple keeping theirs official / unofficial, it seems one could have arguments for having none, both, or either, depending on who you are and what kinds of bugs you are trying to get people to tell you about.
> Because we believe system administrator appreciation day should be everyday, we started building a client based on nodejs.

I'm pretty sure most sysadmins won't be a fan of installing node (or any runtime) for this.
Microsoft is a great company to work at ... if you're an MBA.
Interesting question - at what price will it be cheaper just to hire some country to bomb the #$%^ out of some other.
Interesting... I've heard "It's not the lack of jobs that's the problem, it's the lack of demand. We're out of demand." before, but didn't think I'd ever hear "we have too many jobs"...
A decade ago "outlook for mobile" was essentially BB or non-existent.

Reminds me of when I bought an old receipt printer with a serial port to print out the days weather, my calendar items from a text file, and any "must do" items. Haven't had it around since ~2011 and I really miss it.
The irony is that the console versions are the least-impacted, as the client-side hacks are only loadable on the PC version.
>In a group of countries with the same exchange it should be forbidden to have different tax rates and some other specials for companies.

You mean like the states that share the USD, aka. the United States of America? Or like Scotland and England lately?

The Out Campaign would be the first to complain about a one size fits all tax policy for the whole of the Eurozone.
You're right. I was mostly commenting on the common idiomatic ways ppl differentiate streams vs queues. Indeed, it can be used in both scenarios.
>TPG has warrants to buy 20 percent or more of Chobani’s shares, depending on targets set in the original deal it struck. But that percentage would now be calculated from the 90 percent of the remaining shares, after the 10 percent given to the employees, essentially diluting TPG’s potential stake.

How did that happen? How would the 10 percent given to the employees not be included in the 20% of the TPG contract?
Why base A-10s on a ship (not that you could, anyway) when you could have more capable multi-role fighters on the ship?
> the living person could continue to lobby his case via extraordinary means (pardon, etc) or wait until there's some meta-analysis of evidence or other event that frees him.

That's theoretically true, but how often does it happen? My impression is that more people are exonerated on death row than when serving life sentences.
My point is that they are not entirely different; both are academic, simple, basic applications of the kind of graph theory freshmen learn. Described in terms of a heap, Djikstra is barely more complicated than BFS.
The union minimum wage exemption is just a union tool to apply leverage companies into unionizing. If you don't unionize, we'll force you to pay higher wages to non-union employees.
There's no unbounded recursion in GraphQL: response depth equals query depth.
Yeah, ceiling fans are great, but I have limited ability to install them in my rental. If I owned my place that probably would've been my first step.
This is actually impossible without hardware encryption. Apple should have no problem with this since they have control over their hardware, but they don't do anything to prevent fake scores from showing up in their leaderboards. Xbox is a great example of being able to trust the client. The console tells the server that it has unlocked an achievement by using a signed request which was signed by the secure chip. The same chip verifies that the games you are playing are legitimate, etc. It's a very important piece of hardware and it would likely be the Xbox's demise if that secure chip suddenly became insecure.

Running the game on the server is the only option as far as I know for securing the integrity of the data. You could add a private key to your app, but then you're shipping the private key to the client.
Not only is it frustrating, but even in principle such regulations are definitely overstepping the bounds of government; no government should regulate how a business should operate. The market will decide that.

I'm trying to put myself in your shoes to understand where such a statement originates. All I come up with is shoes worn by person who is young, privileged, or both. A bit patronizing, I know, but it's all I can come up with. Because I remember a time when we knew that lead in gas was harmful, but "the market" decided that it would cut into profits so it was left as-is for decades. "The market" decided that children working in coal mines was a capital idea. I'd go on, but you get my point. Need I even bring up the tragedy of the commons?

As the son of a contractor, I'm sure that you're aware that regulation also serves as a barrier to entry. "The market" decided that onerous regulations also serve to keep out competitors. That ol' invisible hand can work for you and against you.
Please point out a specific military intervention that was intended to protect the property rights of American oil companies. I am not sure I've ever seen one, quite the opposite. The United States has, in every instance, left oil companies to defend themselves when their facilities and technology are nationalized by foreign nations.
I'd be surprised if that held up in court.
Smaller font and thumbnail ?

This "Material" design nonsense feels like someone installed two magnifying glasses on my eyes and told me to navigate previous UI. It's right on par the huge icons and full screen apps starting with Windows 8.
I used to volunteer for NILMDTS, an organization that does this across the US (and world?) for people who's babies were stillborn or are going to die soon after birth. We would do professional portraits with the parents and baby for free. I couldn't do it very long - it took a huge emotional toll, even knowing you were helping those people.

https://www.nowilaymedowntosleep.org/
Commodore 64, way ahead of its time.
The advantage for the F-35 is it's a multi-role aircraft. There's likely one to be around capable of performing a CSAR without waiting for an CSAR specific plane to be on station. With it's stealth capabilities, advanced sensors and ability to drop bombs and launch missiles it's seems to be the logical replacement for the aging a-10.
Maybe I'm just too much of a Varley fan, but I was really hoping for "Red Thunder."
Not a single mention of the human element, which I will theorize is the main reason.

Psychologically, looking at a formal specification is pretty intimidating. How many people do you know who enjoy sitting down with a cup of coffee/tea and their favorite time-worn leather-bound copy of RFC7231?

Most developers I know love getting something to work. They love the feeling of having mastered something to the point that just reading "GET /widgets" is enough for them to go off to curl and implement the rest ad-hoc as they're visually inspecting the JSON and occasionally referring back to the docs.

Creating formal specs is probably the most efficient way to go in a purely computational sense, but reading specs is hard work and it's not especially inviting or rewarding, especially to a class of workers that would much rather jump in, get their hands dirty, and figure it out themselves. It's why developers love frameworks/APIs that just feel simple and familiar. The low cognitive overhead, and low barrier to entry gets you into a wonderfully endorphin-driven flow that's hard to replicate.

Formal specifications are great. But they won't likely get read by people. And people, not machines, are going to drive your profit as a business offering a shiny API.

So should you focus on your formal spec first, or human-readable API documentation? Probably the latter. And good luck convincing the business owners that a spec is a high priority now that you technically have everything covered.
> So, the enemy jams comms or shoots down satellites, and a F-35 squadron deployed to a base on the other side of the world can't do maintenance?

This makes it sound as if ALIS does maintenance. ALIS does not do the maintenance. Human beings still do the maintenance.
What's interesting to me is that these folks, from Lance to moto-users, think there's a reasonable chance they won't get caught cheating at one of the most observed, recorded, scrutinized events in the world. They're playing a delicate game of signaling and information theory.

Either they're right and the ones who were actually caught were only the tip of the iceberg, or they're making what should be a blatantly obvious miscalculation of the odds of getting caught. Not sure which yet.
This is the best one:

http://soviethistory.msu.edu/wp-content/uploads/2015/10/picn...
http://www.dailycamera.com/guest-opinions/ci_28237442/sally-...

"A couple of weeks ago, I went to the East Boulder workshop and couldn't wait to discuss my ideas about slowing down job growth in Boulder and other ideas for the housing issues."
I'm sad the K812s moved to a proprietary connector. I have a stash of mini-xlr's
You make the assumption that most people have the free time, know-how and physical strength to do this.

Most people don't, so rely on hiring contractors (expensive), and waiting on prices to go up with their earning power to be able to put down a larger down payment and upgrade that way.

Although I never quite got how that works because if the market goes up and you sell, well, prices are higher than when you originally bought, so minus taxes, odds are you might not come out ahead unless you've bought in at the right time or went through several cycles.
You could send events to the server (connected these gems, hit this target), and let the server calculate the score. Of course, that's subject to abuse as well. Short of hosting the game remotely, I'm not sure there is a solution.
Farm subsidies are justified based on a perception of unfair competition. That farmers would make a loss without help.

You can actually make exactly the same argument about renewable energy. We invested in clean energy because it is a superior, but more expensive product. Fossil fuels are able to compete unfairly by selling a dirty product for less. Without subsidies solar would be forced to track the price of fossil fuels. As oil gets cheaper, solar becomes less profitable.
those are the best suggestions yet, they should put that to a vote
German city puts traffic lights on pavements for smartphone users
I really don't know what to say to this. What kinds of applications do you work on? If what you do is primarily CRUD front-end stuff, then sure, I suppose you can get by without really understanding how to write general-purpose code. But pretty much anything past simple CRUD is going to start implicating simple data structures pretty quickly.

I can cite examples from the front-end I'm working on right now, but that wouldn't sound like a fair example (it's an AVR debugger). But all sophisticated applications are complicated in their own ways, and most of them require developers who can actually, you know, program.

Even if all you're doing is CRUD, how much computer science is embedded in even a straightforward framework like React? "Lots", is I think the answer.
IIRC in Puzzle & Dragons (one of the highest grossing F2P mobile games ever) the matches are purely client side, with a simple "I won" or "I lost" sent to the server after the match. I don't think it has leaderboards as a focus, which I bet is not an isolated decision. In general, the design of online games of any kind need to take into account all the potential issues & hacks and not be designed in a vacuum.

There's no universal answer to your question, but analysing behaviour of players and flagging various kinds of suspicious activity for more detailed inspection is likely the most common way. Designing the way to respond to such incidents is also non trivial, i.e. banning the player vs deleting the score, doing it quietly vs doing a large batch and prominently talking about it with the community, etc.
But you can build a community where the houses aren't all identical to each other. With cul-de-sacs and winding roads and trees lining the street, and little boxes every couple of feet for FTTN or FTTP internet, and wide sidewalks where kids feel comfortable walking to school.
> the total lifetime cost of the program is now estimated at 1.3 trillion dollars

But the would-be US presidential candidate suggesting free higher education is the fiscally irrespomsible fantasist, apparently.
Kraken: 3x faster decompression than zlib
they might want to add a redirect from the root domain to www. I typed in `https://passbolt.com` and get a certificate error.
CV of Failures [pdf]
We describe it providing download iCloud unlock bypass Tool
You can write programs checked by the Scala compiler than run on the Tessel 2. I see no way how this is any less "running Scala" than when I run a jar generated by scalac on an EC2 instance.
You can send the replay of client actions taken, including the random seed to be sure the board and subsequent random results are accurate. A bejeweled game probably represents a few KB of data in this format. Here's the seed, a list of which two gems were switched, and when special abilities were activated. Done.

Chess has a standard notation, and there's even tools to detect when human players are cheating by having chess engines play their moves by replaying parts of the game to those engines and checking for too many move similarities.
It allows them some leverage over their constituents. For instance, in Michigan, a big union state, there is no state law mandating lunch or other breaks. That way, unions can say to employees, "Without a union, your employer can deny you a lunch or bathroom break."

From a naive perspective, it has historically been ironically anti-union politicians who have backed worker protections, precisely because it takes ammunition away from unions. Why do you need a union if all the benefits are already written into law? Less union shops mean less union voters.

But, to argue for the unions, not only do they negotiate wages, but also benefits. Maybe you aren't getting the minimum wage, but you might be getting better health care, a retirement account, overtime, paid vacation, sick time, flex time, etc. Whereas a non-union employer can say "We're paying a $15 minimum wage so we can't afford health insurance, vacation, etc." With a minimum wage, all you're guaranteed is that wage (other state laws aside).