skysight-inc/HackerNews huggingface dataset:
> One of the biggest problems with OAuth 2.0 is that it delegates all security concerns to TLS but only the client authenticates the server (via it's SSL certificate), the server does not authenticate the client. This means the server has no way of knowing who is actually sending the request.

That's not just plain not true. In the OAuth2 authorization_code grant, a "confidential" client is REQUIRED to send a client_id and client_secret to authenticate itself to the server.

https://tools.ietf.org/html/rfc6749#section-4.1.3

> If the client type is confidential or the client was issued client
credentials (or assigned other authentication requirements), the
client MUST authenticate with the authorization server as described
in Section 3.2.1.

Now, this doesn't work for "public" clients like a pure-javascript webapp, but that's a separate question.

Count me as pretty dubious of letting some unknown group try to re-implement bank authentication without fully understanding the specification they're trying to fix.
But that's not the question. The question is: are e-cigarettes safe enough to be unregulated? Moreover, the vast majority of products don't involve inhaling chemicals so I'm not sure what you're point is bringing that up.
These are two separate things: MITM and open redirect. A MITM attack is not on the the auth code, but on the bearer token.
It's on the whole against tax payer interest to have govenments engage in aggressive tax competition like this. Race to the bottom.
For young children, QBasic and goto may indeed be superior to more structured languages. From a neuro development perspective we know that young children are very concrete and have limited abstraction ability. With Basic and goto, a program is more concrete (you run a line which is more or less 1 command) and linear (no nested structures). With structured programming, it is more abstract, and has an recursive structure (with arbitrary levels of nesting).

Because of this, it might be preferable to introduce a child to the more linear, concrete programming model with goto and let them experience the thrill of programming then as they develop more and their programs increase in complexity, introduce them later to other more abstract methods and languages such as structured programming, oop, and functional.
Can someone just blacklist every post that is nothing but a link to this comic.
No, the Visa you are referring to is the O-1 Visa, it is much more difficult and expensive to obtain, but it is not subject to Visa CAP (I know it well, I'm on O-1). H-1B is for specialty worker, and they are not defined by exceptionality but by the fact that they possess a qualification for a specific job, there's a shortage of US Citizen for that job, and they receive market rate salary.

We could agree that the behavior of consulting companies like Tata or Infosys seems like cheating (basically, send thousands of application hoping that a good percentage succeed). But they are hiring for positions that require a degree people qualified; it is difficult to hire for that kind of position (primarily because you could make more money with the same qualification in different companies); and they are paying market rate salaries (or at least, that's what it is certified!).

I could agree that the current H-1B Visa system is broken, but I'm not sure that fixing it just for the perspective of highly paid Silicon Valley Bro is the best solution for the US as a whole. What I'm saying is: are we sure that this kind of cheap specialty labor is not useful for the US society as a whole? E.g.: are we sure that, if System Integration companies have to pay engineers a much higher salary, they will be able to provide prices low enough for other company to pay it? And if few companies could pay for their services, this wouldn't impact their efficiency on one side and the B2B software market on the other side?

I'm not defending the violators nor supporting the "cheap H1B" practices. Just saying that the world is a little bit more complex than that.
Sad to say, the bar is so low that I agree -- they make the least terrible software of a consumer electronics company.

It's how I've felt for decades as a Mac user: boy they suck, but they suck less than any of the (desktop) alternatives.

(edit: I see you updated your post to clarify -- now this is redundant.)
The article is mostly good, but I have one nitpick.

> An example of an O(2^N) function is the recursive calculation of Fibonacci numbers

No, the naive recursive evaluation of the Fibonacci sequence has complexity O(1.618^N) (or just O(Fib(n)). It is unequal to O(2^N) because the base of the power is different.
PBS had a great show directed at children called 3-2-1 Contact in the 1980s, which I remember featuring Logo.

https://en.wikipedia.org/wiki/3-2-1_Contact
I hope so too. However, it is currently a problem.
The Now of Device Usage: Opportunities for Developers in 2016 and Beyond
There's obviously some kind of bug here, and one that Apple should rightfully be lambasted over, but given that plenty of people, including me, have used Apple Music without anything local getting deleted, it's pretty obviously not intended behavior.
This is largely a philosophical and moral issue as opposed to a practical one. It would be something akin to a conscientious objector drafted for military service or an Amish person required to apply for a horse and buggy operator's license via a government website.
The argument is that there is no legitimate reason for Wright to not allow them to keep copies of the proof, aside from the reason that the hardware/software he provided was a tampered version and the proof would not actually work on any machine not provided by him.
> What's the end game? Where's the pile of money he's after?

He made multiple tax refund claims to the Australian authorities - including one for $54 million as part of a program where 45% of each dollar invested into R&D are refunded. Another was a $3.5 million refund on sales tax.

The funding source in these transactions were Bitcoin. It adds up to over $150 million invested. The tax authorities asked Wright where this money came from, he told them in an interview that he was Satoshi Nakamoto.

I go through some of this in a blog post:

https://www.nikcub.com/posts/craig-wright-is-not-satoshi-nak...

His explanation didn't work, they rejected the claim and penalized him for another and were investigating him further. He fled to London.

Why he continued to press on with the Nakamoto identity nobody knows - but based on character assessments from multiple people I know who have worked with him and know him well he is a person who strives for recognition and has a history of deception (see his LinkedIn profile).

It was 2 years ago that he started showing up at Bitcoin conferences and left strong hints that he was Satoshi - he wanted people to come to this conclusion on their own (and some did). Watch these videos from a conference in Australia:

https://vimeo.com/149035662

https://vimeo.com/149115042

(specifically skip to 9:30 in part 2)

Also see this panel discussion, which is now well-known:

https://www.youtube.com/watch?v=LdvQTwjVmrE
Sounds like a 'magic number' to me. What's it based on?
I feel like the concern there would directly be secondhand nicotine in the vapor, which is particularly neurotoxic to developing brains [1]. Feels like a pretty reasonable concern to me, with a child around?

[1] http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2746456/
Trusting "common sense" over data is irresponsible if not outright delusional.
I'm really excited to see there will be an official style guide that was truly lacking in v1.x

Having worked on various teams (now we follow https://github.com/johnpapa/angular-styleguide), its truly a maintenance nightmare without a verbose Angular style guide for reference.
Using Tor isn't a crime, but the NSA targets people who use or even search about Tor or VPN services for collection through the XKEYSCORE program. So his post is exactly right - using Tor does "put you on a list", but that alone isn't sufficient to be arrested. The NSA documents further state that Tor is relatively difficult to attack and the best they can do is deanonymize a small (and importantly, random) fraction of users some of the time.

http://www.wired.co.uk/news/archive/2014-07/04/nsa-targeting...
Periscope was acquired by Twitter.

"Twitter Confirms Periscope Acquisition, And Here’s How The Livestreaming App Works"

http://techcrunch.com/2015/03/13/how-periscope-works/
I met Bernie Sanders personally and I can wholeheartedly say the man is incredibly charismatic. Sure, I'm a Sanders supporter and knew of him before meeting, but he is a very friendly and approachable fellow who travels with a very light security detail and encourages you to speak your mind with him. I think part of his charm is that he feels like the cool hippie grandpa everyone wish they had. He has a great handshake, too.
It brought stuttering performance when scrolling lists throughout the system on the 5S (mine) and 6 (from a friend). Even the 6S was stuttering on certain portions, but they somehow "mended" that (I say mended because they didn't bother much with 6 and 5S). They switched from OpenGL to Metal in iOS 9 for the first time, so it had to do something with it. There isn't anything UI wise in iOS 9 that would explain the difference in drawing performance.

After the signing window was closed, I was stuck with it. I tried ongoing betas until 9.2, but then just had enough and sold it. I refuse to buy into the Apple greed of selling new hardware with shoddy software updates and so far I've read at the time, this wasn't the first time (iOS 7). The majority of non-power users just think "hey phone is too old I have to upgrade" and buy a new device.

I mentioned fear of updating because this was the second time in one year I was burned with an update on two different platforms.

The grass isn't greener on the other side.
Size has nothing to do with it. Plenty of small sleazy munis too
GTK in FreeBASIC is simple as well - just translate the C function calls into BASIC. FreeBASIC is really C++ without the curly braces so it's really a good covert way to gradually turn userland programmers into system programmers
1. To my mind, the fundamental problem OAuth solves is "letting a user decide" to share data with an app, without making the user responsible for jumping back and forth between the app and her API provider (her bank, in this case). OAuth holds the user's hand through a series of redirects, and the user doesn't have to copy/paste tokens, or remember where she is in the flow, or know what comes next. Does TAuth have a similar capability? The blog post mentions "User Tokens" in passing, but doesn't define or describe them.

2. OAuth 2.0 is published as an RFC from IETF. It may be a bear to read (and yes, it's a framework rather than a protocol!), but the spec is open, easy to find, and carefully edited (https://tools.ietf.org/html/rfc6749). Is TAuth meant as a specification, or a one-off API design? If it's a specification, has there been an attempt to write it down as such?
How about "Net-Net"
"GOTO considered harmful" is about a style of unstructured programming that was prevalent in its era.

GOTOs are certainly not harmful on their own. But they offer a power that leads to unmaintainable and unreasonable [0] code. Like the spaghetti mess that is callback hell today. Languages which offer structured constructs that are really just syntactic sugar over GOTOs are better [1]. Structured use of GOTOs are feasible. But it requires a discipline that is not found in the community at large. If you're responsible for any project involving more than yourself as the developer, you cannot assume that discipline is present.

With regard to assembly, yes, the branching and jumping instructions are the gotos Dijkstra was talking about. No, he wasn't wrong. The thing is, they have to be used in a disciplined manner or the outcome is extremely fragile code. Which was one of his biggest hobby horses. He viewed programming as a branch of mathematics. Where programs could be derived from first principles. GOTOs, as commonly used, necessarily broke that process. They also make it nigh impossible to understand poorly disciplined code. Same thing with magic numbers, weak type systems, and a number of other topics. They aren't bad on their own. They're bad when used in practice because they make undisciplined code trivial to produce.

[0] In the sense that the code cannot be reasoned about.

[1] In a strict sense, they're equivalent. In a less strict sense, they remove or minimize the ability to make unreasonable [0] code.
Interesting article, Zell. I can't say I agree with having lists left-aligned with paragraphs - I think the indentation looks nicer, but that's not exactly the purpose of the article.

I do think one thing this article suffers from Betteridge's law of headlines, and you even admit the "no" in your last paragraph.

There must be a way to adhere to vertical rhythm while still reducing the top margin to be less than baseline, perhaps with an additional buffer above a section? So if you have a series of paragraphs, and then at the top of the section, there's an additional margin buffer to "reset" everything?
They haven't just done this for e-cigarettes, they've done it for cigars as well. My understanding is that any new cigar released in the US will need approval from the FDA at a fairly exhorbitant cost.

This will of course massively favour the big producers who can afford to deal with it and destroy the boutique brands.
Even if they do audio fingerprinting the match is simplistic. I have a large collection of different versions of songs, and Shazam identifies them all as the studio version.
1 in 3 (last year) or 1 in 4 (this year) isn't too horrible when you have a few years to apply before they stop issuing TN(/OPT) extensions. That said, you could get crazy unlucky and not get it each time, in which case, that would really suck. You do have other avenues at that point at some companies, like going the L-1 route, but you'd still have to move.
They are. The people who control the munis don't want to bother building transit.
The older I get, and the more software work I do, the more I come in parity to FSF's platform as a whole.

IoT is a mess right now, purely because of rent-seeking anti-standards, treacherous computing. Do you own your devices? Hardly! Phillips shut down all 3rd party bulbs, and 'graciously' fixed that after a bad 1 day campaign... but retains the ability to do it again.

Google destroyed the Revolv servers for no good reason. It trashed all the devices that relied the purely webAPI implemented hardware.

I can go on... In the end, I just get sick and tired of being pulled in 1000 different directions, with as many 'cloud providers', doing that many different bad implementations of the same thing (but as their serf in their castle).

Open Source is a way out of local computing problems. Open Standards allows me to bring my business elsewhere when I'm alienated. Open Protocols allows me to communicate with other networks and computers. All are essential.
If Microsoft wants SMBs to use Enterprise then make the Enterprise edition more easily available to SMBs, don't try to force them to move to it by making petty little changes to make their life more difficult.

I can go on the Google Apps website right now and buy myself seats with a few clicks and a few minutes. If I want to buy Windows Enterprise licenses it will take weeks, cost an unclear amount (at the onset), and I'll have to talk/negotiate with pointless sales drones.

I worked for a startup, under 20 machines, I tried to buy then Windows 7 Enterprise. Microsoft's partners were super unhelpful, disinterested in a small account, refused to provide clear pricing, and I was getting upsold even before we got the basics squared away ("I'll just add on 20 CALs, a Windows Server license, and let's talk exchange!"). Ultimately we just gave up, and used Windows 7 Home(!) for three years.

People want to give Microsoft money, but Microsoft is intent on making the entire thing as painful as possible and their licensing as obtuse as possible. Office 365 Business gets a lot of shit, but it is a dream come true for startups, you pay one cost, and one user gets their Office license key, email, and some cloud storage taken care of.

Where is the Windows version of Office 365? Why can't I just pay a per user fee and get one Windows Enterprise key, the CAL, and Azure-based AD?

Time is money, and Microsoft likes to waste a lot of time. I'd prefer to spend a few dollars more a year and have a simple streamline process of licensing, than spend weeks being jerked around just to maybe get a few bucks off of a fake price anyway.
The federal law enforcement agency is trying to talk to someone and making it quite clear they don't want that person's lawyer present for the conversation nor even know the topic.

What exactly would it take to cross your threshold for paranoia?
> Yeah, storage that was made precious by apple by not supporting an SD card slot.

This is an article about music in iTunes on a laptop. Apple sells laptops with SD card slots.
Case Study – Analyzing Web Font Performance
It's mentioned in the article, but Microsoft have a nice BASIC environment called SmallBasic[0]. It's got a decent editor with IntelliSense, there's a community with a bunch of programs shared online[1] and it can interface with .NET code so you can extend it with whatever shenanigans your kids might require.

[0] http://smallbasic.com/
[1] http://smallbasic.com/program/?TETRIS
As soon as EVs take off and gas stations start closing up shop, I'm going into petrol station remediation. There's gold in them there hills!
Couldn't agree more with this statement.
PhotoDNA has always been free, though it is limited to "qualifying organizations", which I assume means they want to know who you are and how much traffic you plan to send before they give you access.
Agreed, I also take issue with "Safer than cigarettes"; we know a lot more about cigarettes/tobacco than e-cigarettes. It's true that cigarettes have a large buffet of unsafe chemicals, but it's clear that e-cigarettes have widely varied chemicals from brand to brand with little transparency as to what they are. I feel it's more appropriate to say "Safer than cigarettes, we think". The Popcorn Lung situation comes to mind. Buyer/user beware.
Why use Angular 2 when you can use web components?
So, uh, the city is already highly dependent on one payer, and the solution proposed is to increase the proportion that payer pays?

I guess i never understand why people think the solution to something having too much influence due to money is to become more dependent on their money. I can see no magic way to accomplish this without an increase in influence from that payer, and to think you can seems ... pretty pie-in-the-sky.

The real solution is to diversify where your money comes from, at pretty much any cost.
New York Times to Start Delivering Meal Kits to Your Home
Pretty trivial to get a new IP address these days.
Cannonical: The most powerful Ubuntu phone is here to buy – Meizu Pro 5
I am only concerned about the day than a NSL makes them push an update that backdoors or weakens security under the guise of something else.

would Apple be able to resist it? how would it become known they tried?
I was going to say that... I love it when a Government site makes me download a MS Word or Excel file. So I need to either buy a Microsoft product or trust OSS solutions that often mangle the document (through no fault of their own... reverse engineering a proprietary file format is difficult and displaying it the exact same is even harder).
The University of Chicago Scavenger Hunt
Bootleggers and Baptists... I wonder how all the hysterical anti-tobacco organizations, who see anything with nicotine in it as the second coming of tobacco smoking, feel about that? It should feel awkward.
I had to give in writing to my employer that If I get a promotion which changes my job role more than 50%, my entire process will be reset. So in EB2 the wait time is 7 years. I would have to wait 14 years if a get a promotion or a good raise even. If I change my employer & if I am lucky I can keep my position in the queue. Going by these draconian rules I will never settle at 60 !.I don't believe in luck,but hardwork. US H1B is based on pure luck and not in skills. Canada immigration system is point based and evaluates your skills not your luck. So goodbye US and hello Canada is my course of action.
Right? So long as he's in the area and has access to a helicopter I think everything will be fine.
Furthermore websockets mask the payload so that naive proxies that do deep packet inspection to find HTTP requests don't fall to the poisoned cache trap.

http://security.stackexchange.com/questions/36930/how-does-w...
https://docs.python.org/2/library/turtle.html

Python 2.7.9 (default, Dec 10 2014, 12:24:55) [MSC v.1500 32 bit (Intel)] on win
32
Type "help", "copyright", "credits" or "license" for more information.
>>> import turtle
>>> turtle.forward(100)
Because there is no plausible narrative that can account for the known facts and account for the private proof as anything more than smoke and mirrors.

In particular, the person best placed and best motivated to produce such a narrative -- Wright himself -- offers no explanation.
Never. Land is partly common property.

Real estate is taxed ongoing because the Earth has finite land.

Google "Land Value Tax"
> I make money by selling software. Does that make me a pariah to the FSF? I've never been sure.

FSF encourages people to make money by selling software, but their view is that it is unethical to arrange for a user of software not to enjoy the four freedoms with respect to that software.

https://en.wikipedia.org/wiki/The_Free_Software_Definition#T...

If you've arranged for users of your software not to have those four freedoms, FSF finds what you do objectionable and wants you to stop doing it (I don't think "pariah" would be fair).
Sanders gets more positive media coverage and less negative media coverage than Clinton[1]. From the same source, Sander's current opponent receives the most negative coverage and the least positive coverage.

The reason Sanders is not getting as much positive media coverage as the internet likes is likely because no amount of pro-Sanders media coverage is enough for the internet.

[1] http://www.vox.com/2016/4/15/11410160/hillary-clinton-media-...
The top post [0] leads with a factually incorrect assertion:

>Peer-to-peer lending platforms (P2P platforms) emerged after the financial crisis by catering for pent-up demand for unsecured borrowing from individuals and small businesses.

Prosper was started in 2005 and the article's primary example, Zopa, started in 2004.

[0] https://bankunderground.co.uk/2016/05/03/the-growth-of-peer-...
Just to be clear, this was only with a subscription to Apple Music.

Signing up for Apple Music is what prompts iTunes to replace your local music library.
> it's likely that the "suicidal" tone was deliberately chosen

That's a very serious thing to say in regard to something you know very little about.
It still has to get the data from every row, unless you happened to make an index that correlates the two columns in just the right order.

This is where a more effective question would be more useful.

A question like 'in the last quarter, how many sales did we have for each category and shipping type?' You can then take the results and calculate more useful values like the percentage of express shipments, etc.
That raises serious questions, but is not at all conclusive.
Gavin appears to most likely be a victim here, not a fraud. He made an enormous mistake in not requiring public proof before he posted, which he has since admitted.

It seems to me like the community's reaction to a fraudster was remarkably productive, outside of Gavin / Matonis getting suckered.
There is an option now to not let iTunes organize files. This way, you can still add songs to iTunes' database but iTunes will reference the original media files in their original location.