skysight-inc/HackerNews huggingface dataset:
Did you also notice that the way the Guardian wrote that paragraph makes it sound like Apple turned away the mayor, when in fact he was not the mayor at the time he went to Apple unannounced.

I cannot read that any other way except to intentionally mislead people for a greater impact on the story. I really hate this kind of journalism.

"The last time the mayor of Cupertino walked into Apple"

Yes, he is the current mayor since Dec 2015, but he was not when he "walked in to Apple."

From the article:

"“They said ‘you cannot come in, you’re not invited’. After that I left and have not gone back,” said an exasperated Chang, who’s been mayor since December 2015 and had approached the computing firm when he was serving on the city council three years ago."

He was on city council, he was not the mayor, when he went to Apple unannounced and was turned away. And I'm glad Apple turned him away -- why does he think he can show up anywhere unannounced just because of his title, be that mayor or city council member?

This is on top of this entire bullshit article, which as others have pointed out, says nothing about actual local/state taxes that Apple is not paying (because i'm sure they're probably in compliance). This article really comes down to "Mayor says life isn't fair, wants reparations."
A lot of banks do use proper hardware tokens (TOTP and similar) for all transactions though.

I am under the impression that we are now in a phase where security needs to be stepped up, but in the mean time tokens send via SMS are considered 'good enough'. There are lots of initiatives for the next step, each providing proper two-factor authentication, but a lot of services are waiting it out because the hardware tokens or smartcards you need for each user cost money, and if you adopt one of the current solutions such as TOTP tokens, users would need such a device for each service they use (again, for banks this is already accepted; at least in the Netherlands).

Ideally, a standard such as FIDO U2F gains ground, so users can safely and conveniently reuse a single hardware token for any service supporting that standard. Who knows, perhaps having your 'internet key' on you can become as commonly accepted as having your house keys on you.

Also, relying on SMS means all these services have a single unique number to identify you with across services. I dislike the privacy implications this entails, and prefer to keep (some of) my on-line identities neatly quarantined the rest. FIDO U2F addresses this problem; even if you use the same hardware key for every service you use, they cannot be linked.
2016 Open Source Jobs Report
Fast geodesic approximations with Cheap Ruler
Or to take it from another angle, Reddit couldn't be as large.

Which is sort of at the heart of what Matt was talking about with scaling community -- it's not that large is bad or that profit is bad, per se, but if your goal is to have a sense community ethos and some degree of coherence to the spirit of what being a site member means, you have to say no to some of the things that make big userbases and ever-upwards biz growth doable.

MetaFilter's major revenue growth up through 2012 was despite a lack of, not because of, any attempt to chase down big userbase growth. It was a ride on the AdSense wagon during a very big period of growth on that end, while the site maintained a reasonable slow increase of users. Likewise the AdSense crash (and the double whammy we got for the punitive misclassification) wasn't the result of shutting down or reversing user-growth measure. The site strategy of maintaining a community that doesn't grow or change too fast was consistent throughout that long stretch of years, and it's something that means we didn't explode by orders of magnitude but also that, even after a rough period, we also haven't collapsed under the weight of too much growth-chasing overleveraging our resources and debts and so on.

Reddit is a big, complicated topic about which I have lots of thoughts but no real interest in digging in on here or now. But there are some very complicated differences in the implications of what community, userbase, and moderation mean as words and ideas for a site like MetaFilter and a site like Reddit that make casual straight-across comparisons using those words essentially useless. The difference between volunteer and paid moderation is a very good, very big example of that.
“LEDE” OpenWrt fork promises greater openness
> Microsoft has retroactively removed the ability of companies to turn off access to the Windows Store in its Windows 10 Pro version.

Yes but by "upsell" you mean "extort by way of feature removal after the product was purchased".
Not 100% how it works in canada, but in Germany, you start off on the employer's program, then a combination of state and employer programs, then after some point (I think 18 months of non-work?) you get switched off the employer's program and onto the state's pension system, which carries some set of other consequences. I do believe pay decreases as well but not sure how much.
There are many effects that happen like this on your phone currently, and when subtle, greatly improve usability.

Take your phone and flip it upside down, and don't allow the device to flip orientation using a lock in software (iOS has the control panel orientation lock switch).

You can start to see subtle differences in ease of tapping buttons, targets, etc. The software here is adjusting for how a user actually touches the screen in comparison to where they think they're touching, etc.

Here's we're seeing extreme examples, which probably wouldn't work well in practice. But slight integrations could do wonders.
Correction: there is evidence that Hillary is a big fan of hot sauce. No word yet on whether and how often it is in her bag. http://time.com/4297996/hillary-clinton-hot-sauce/
Interestingly, it's gone the other way in mathematics. It used to be that lots of journals required authors to sign some sort of statement saying that they wouldn't post PDFs on their web pages. (I remember one professor who had a page essentially saying "Here's the PDFs. Sue me, Elsevier!" Unfortunately, I don't remember who it was) Eventually, I think in response to the massive, overwhelming popularity of the arXiv, which I think most mathematicians would choose over journals if forced to choose, the big publishers decided, slowly, piecemeal, and behind the times as always [0], to go with the times and stop fighting something that was going to happen anyway.

[0] With an exception for the AMS, which has always (as long as I have cared, and checked, anyway) had publication policies that are as author- and reader-friendly as one can probably expect in the real world.
I agree such meta data should be captured, but if the papers are converted to IPFS, it'll be easier to copy, ship, and then re-serve the data at end points.

Think of it as a [sneaker|dark]net CDN enabled by content addressable storage.
> How much simpler could it be really?

The howto could be a whole lot simpler it seems, see this example, helpfully provided by neckro23 https://news.ycombinator.com/item?id=11637866
I like many things about Rust, but Cargo alone is what initially got me started with it. I was in the process of setting up a fresh C++ project with vendored dependencies, and it was just an absolute nightmare. In contrast, it took me about 5 minutes to get a Rust project set up with comparable dependency complexity.
This is what a credit card is for. If you're going to buy on credit, do it on independent credit.

There's too much conflict of interest to trust cell companies to finance your phone.
Nice! Very succinct and clear. I wrote an intro myself, as someone who'd recently learned the concept. Wordier, but might be helpful if you think like I do. http://nathanmlong.com/2015/03/understanding-big-o-notation/
I find it quite a stretch to lump vaping in with food. The FDA regulates food and drugs. And yes, drug makers do have to pay a strong price to get certified. It incombs to the the drug maker to run toxicology tests, not the FDA. The latter just enforces the conformity of those tests to its standards.
Agreed. I'd have to say pejorative puns are on-par with scare quotes for signaling lack of substance.
The web components polyfills have support down to IE 10: https://github.com/webcomponents/webcomponentsjs
ELBs support websockets fine with TCP/Secure TCP listeners.

What they -don't- support at that layer is sticky sessions, ip hashing, or similar; when a connection drops, you could reconnect to -any- instance behind the ELB. You have to engineer for that.

They also don't support Socket.IO if you have more than one instance behind the ELB (as, presumably, you do). This is because Socket.IO doesn't just open a websocket connection, and on failure fall back to something else; instead, it makes a REST call to the backend to see what connections it supports, then makes the websocket call. Both of these calls have to hit the same Socket.IO instance, because they're tied together with a session identifier. If they hit separate ones, then Socket.IO rejects the websocket, because that instance has never seen that session identifier before. But this is particular to Socket.IO's implementation, and not websockets themselves.
If the infrastructure is up to the task and it would actually be doable (say release fault pressure with a magnitude 5 earthquake every 3 years via some sort of method) it might not be such a bad idea. Way easier to build for a planned magnitude 5.x quake every few years vs a 7 or 8 at unknown time intervals.

Heck it could even be fun. Make it a holiday, tell people the time its going to happen and let them ride it out. Personally, I'd be at a bar. :)
Tens of thousands of foreign students come to US every year for education, majority of them are among the top of talent pool. They have to be top performers in their country to be able to get university admission and visa to come to US.

After they graduate, if they want to stay and work in US; their only option is H-1B. Even they are subjected to the stupid lottery system.
Ah, right, missed this one. Sorry.
As someone who lives near the fault in Redwood City and has an older single story wood frame ranch,Mehta are my best options for protecting my asset and life?

Is earthquake insurance worth it?

What about retrofitting for earthquakes? I've read some pretty scary stuff that even retrofits done with permits don't have much consistency between them and no guarantees. Not even sure how to find a reputable retrofit contractor because I'm not sure how to judge the quality of their work since we haven't had a big one recently.

What should my priorities be for solving for all of this?
If we assume that childhood obesity is a reasonable proxy for health, then Chicago is healthier than my state: 25% vs 31%. [1] [2] (I use state because nobody is publishing statistics on the local level.)

> Try that with one of those dorky e-cig pens.

They just pass them around if someone doesn't have one.

[1] http://www.cityofchicago.org/content/dam/city/depts/cdph/CDP...

[2] http://msdh.ms.gov/msdhsite/_static/resources/3593.pdf
Author here:

> For one, bearer token [1] is only one type of "Access Token" described by the OAuth2 spec [2]. In fact, the OAuth2 spec is very vague on quite a few implementation details (such as how to obtain user info, how to validate an Access Token), which the author seems to just assume are part of the spec, as he does with bearer token. Other parts, like the client/user distinction, and the recommendation for separate validation of clients, the author ignores completely, generating his own (ironically mostly OAuth2-compliant [3]) spec.

Last time I checked other access token types were still drafts and bearer tokens were the only stable kind.

> Again, not true. Diffie-Hellman provides a great way to come to a shared secret that you can be cryptographically sure (the adversary's advantage is negligible) is shared between you and a single verifiable keyholder.

I as a bank cannot attribute liability for an erroneous transaction to a developer if with both share the secret with which a signature is computed. If I as a bank am compromised and want to cover my arse by moving the blame to a poor external developer I can do that with a shared secret by forging signatures after the fact. This is precisely why I don't want shared secrets.

Even if your point is valid re DH, why push that up to the application level and reinvent the wheel when you can get the same benefits, less intrusively by using a battle tested protocol circa 20 years old?

> sigh. If only there was a way to write one orthogonal program that can speak HTTP, and in a single cli command send that program's output to another program that can understand the output. Maybe we could call it a pipe. And use this symbol: |. If only.

This is shit developer experience. Why bother with a Rube Goldberg sequence of piped commands when you can just curl?

Finally, despite everything you say no OAuth 2.0 based protocol can guarantee privacy. People like that privacy when it comes to their finances I find.

Sorry for any typos, I'm on the move. Thanks for your comments :)
It depends if that SDK has an API key barrier or not. I mean if I'm providing 3rd party access, I want to see how each individual app is performing and what it is doing.

But yes, aside from that potential difference, I understand what you're saying.
One of the team leads at Pivotal gave a talk at our offices about a year back and described their development methodology to us (at least at their Toronto offices).

He told us that they were 100% "pair programming" matching which wound up (in his opinion) making all developers as a whole better through a sort of cross-pollination of skills.

I thought it was interesting and (relatively speaking) quite unique.

I've found some of my greatest periods of growth were via not necessarily "pair programming" but "nearby programming" which is to say our screens were virtually side by side, and we were both working on slightly different parts of the exact same product.

I've always been intrigued by the prospect of going all the way to full PAIR programming - which is to say collaboratively solving the same problem on the same project with the same computer.

I'm not 100% convinced I wouldn't feel limited, but it's definitely interesting to me
I got my 4th grade class to play gorilla, which interestingly came with the Windows NT machines at my school. That and that reskinned Full Tilt! Pinball table Space Cadet. Quite a contrast.

I personally liked modifying nibbles, for instance adjusting the timing loop so it'd be playable on a modern computer. On some occasions I made a special key which would put the snake on auto-pilot (just towards the goal, no graph search or anything), or which would temporarily turn off collision detection. Somehow both of these were possible without really understanding how the whole program worked.
He's clearly used to being labeled a con-artist for many years.
The Daisy ad was a Rorshach blot. Peopel read into it what they wanted to. The policies were certainly much more mainstream than they are now
A pirated book likely came from a purchased original.
I sympathize with the libertarian "I should be able to decide what I put in my body" but the fact is that right now anyone using e-cigs has no idea what's in that juice they fill their devices with. Studies have found some pretty nasty stuff in there (besides the nicotine) including diacetyl. If you want to encounter corporate overlords, try suing them after the fact for destroying your lungs. They will argue you knew it's dangerous and you decided to put it in your body.
Author is spot on. My son and daughter have about 2 and 4 years to go before I probably intro them to programming. When I do, it's going to be a C64 all the way. And a real one. With a real old school monitor and a luxury a didn't have for about a year or two: a floppy drive.

I've get a lot of the start with JS comments. But that would be the last thing I do. As a child learning, you need to remove the complexities and distractions of a modern system. Windows, browsers, edit js in one app, run it in another, use a mouse, open the js debug console, etc. Just wayyy to much stuff for a young mind to try to focus on.

Don't get me wrong, they probably _can_ learn js, but after decades of programming in all kinds of different languages, just because js is the latest fashion, doesn't mean I'd every try to teach it to a kid. No way.

BASIC, on the other hand, was created _for beginners_. I learned A LOT over the years when I was using BASIC. I also had magazines (COMPUTE! & Gazette) and books that helped immensely. I was just thinking yesterday actually, that it was awesome having the C64 Programmers Ref Guide that had the machine schematics and port pin outs in it!! You'll never get that for a Mac or iPhone nowadays (and these sorts of things usually only show up on 'hacker' sites). This was a book put you closer to the hardware so you could more easily understand what PEEK and POKE really did. :D

I'm _really_ looking forward to the instruction days. The C64 was so popular for a reason: it was powerful & simple. This is how I want to introduce my kids to programming. They'll figure out Ruby, JS, C and things (maybe 8-bit assembly too!) later.

I loved my C64 (still do) and I hope that will rub off on them. Can't wait.
Pencil Math
"both supporting actual Javascript (even JSX isn't necessary)."

Oh, come on now. If JSX isn't necessary, then neither is TypeScript. Have you tried writing React components without JSX? Angular2 in ES5 is saner.

I get that neither is ideal, but let's be real here.
They really don't.
This is a much more detailed and thorough article than most of its type. Among other things, it discusses some of the science behind how we tend to disengage while following a GPS. (Which rings true to me. I find if I'm following directions--whether from a human or a computer--it's hard to simultaneously be fully engaged in making decisions myself.

That said, the majority (though not all) of the real horror stories tend to be in the American West. The real issue there is that, contra the full life experience of many visitors, a lot of roads are seasonal, very rough, or just plain undriveable without high clearance 4WD and the ability to operate it.

This is really a maps issue rather than a GPS issue. And there have been tragedies based on people following very secondary roads on paper maps as well. The issue is that there's not really an easy classification. After all, there are well graded dirt roads that can be easily travelled by passenger cars that steadily degrade to "I can't believe someone could drive this in a car" levels.
I think the government should force a moratorium on new building construction for universities and colleges that receive any public funding at all.
On Windows Server 2012, if there are pending updates as soon as you RDP in it will start a 15 minute countdown with no option to cancel (at least no obvious one I could find). That's ridiculous.
My framework is built in Clojure. The interpreter is always there. Think of it like a statistics library with R.

The idea of a "main application" is itself not a clear one. There are a set of functions you can use. Whether you choose to launch directly over the library or import it is a matter of convenience.
Not to derail too much but this is the reason people are so overdiagnosed these days. All the criteria are vague, even psychiatrists overdiagnose all the time.

Even the guy who chaired the DSM-IV thinks so: http://www.amazon.com/Saving-Normal-Out-Control-Medicalizati...

Modern psychiatry is 50% science 50% tarot cards if you ask me.
Even $73,000 is high end if you include all outsourcing firms. Here's some writeup I did which compared silicon valley tech firms v/s outsourcing firms: http://ashwinikhare.in/tech-firms-guest-visa/
He is after the hundreds of millions of dollars of bitcoins that the real Satoshi Nakamoto controlled.

When Craig Wright first came to public attention last December, there was a stash of "leaked" documents relating him to Dave Kleiman. Many items associated to the leak were shown to be backdated. One leaked item claimed to describe a 1.1 million BTC loan from Wright to Kleiman.

Wright apparantly believes that Kleiman, who died in 2013, had a large stash of bitcoins and he wants to establish a claim on these. If he could be accepted as Satoshi Nakamoto, it would lend credibility to his claims on the supposed fortune.
tl;dr: it forces client to have a certificate so that the server can verify.

This is kind of a pet peeve. Anyone who ignores or wants to disable server certificate verification has to understand the risk.
Students at Fake University Say They Were Collateral Damage in Sting Operation
http://www.ncbi.nlm.nih.gov/pubmed

Now, there is a delay (1 year?) between when it's published in a journal and when it's freely released, which I can understand bothers people, but it does eventually make it's way out to the public domain.
> you start to wish for some way of organizing the code

Yes, this is a critical and valuable step in learning. You can't easily learn the solution until you've encountered the problem.
This is why the OAuth Identity Providers that take security most seriously do not allow WebView login (or at least provide an SDK where you don't need it).
2-factor authentication does not protect against that.

The victim does not know they are being MITMd and enters the 2FA code.
You are teaching him awk? Are you trying to create a supervillain?
As the article points out, ths centralization is a byproduct of Judge Ward, of necessity, having "built a better mousetrap" in terms of court rules for processing cases. As is customary in federal courts, when Judge Ward first became a judge, his initial case load was built by the court's other judges transferring the cases they didn't especially want to deal with; this included most of their patent cases. So Judge Ward found himself inundated with patent cases, and needed to figure out a way to keep up. Looking around for ideas, he adapted court rules that had been developed in the Northern District of California, which encompasses San Francisco and Silicon Valley. Those court rules, plus the low numbers of federal-crime cases in that rural division (by law, criminal cases get priority), meant that Judge Ward got his patent cases to trial quickly. This attracted plaintiffs wanting just such speedy "service."
It's ugly advice. Wish there was a better alternative. Ideas on a post-card please.
Gee microsoft ... if only admins knew that there existed firewalls.
The 'before deductions' part makes that 35% rate meaningless. A 10% tax on 10 billion is > than a 35% tax on 2 billion.

Corporate share of federal tax revenue has dropped by two-thirds in 60 years — from 32% in 1952 to 10% in 2013.

General Electric, Boeing, Verizon and 23 other profitable Fortune 500 firms paid no federal income taxes from 2008 to 2012.

Our average effective tax rate is 27.1% compared with 27.7% for the other 30 OECD countries, according to CRS.

http://staging.americansfortaxfairness.org/tax-fairness-brie...

http://www.fas.org/sgp/crs/misc/R41743.pdf