skysight-inc/HackerNews huggingface dataset:
Elizabeth Resor (MIT) on Mapping and Open Data for Road Safety
Simple incoming OP parser for Nats in C#
I can't believe in this day and age that anyone is arguing H1Bs aren't a means to get access to cheap labor. If you've ever worked with any sort of international company, you'll get connected to their "IT Team" which usually has some tech sound name like cognizant etc. They are super heavily accented, very eager to please, often poorly skilled and are paid far less than any native born person.

If you deny this exists, you don't work in the tech sector. What is this then, if not companies trying to maximize profits by exploiting foreign born workers? It's just mind blowing we keep going over this again and again when the reality is clear as day. The only logical conclusion of importing large amounts of lower skilled workers with poor language skills is that they are cheaper.
Do keep in mind that large companies have a very strong incentive to push stories of entirely legitimate lawsuits as 'frivolous'. The McDonalds coffee case is a classic example.
How exactly does one do this in iOS? There is a reason that Apple only allows Safari to power WebViews. How exactly would you extract the user's password from the DOM of the WebView on a non-jailbroken device using ANY APPLE APIs if the page was legitimately loaded from https://yourdomain.com ??
If all big companies in a city go down, the city will suffer anyway – investing in the large companies in your city can’t make things worse.

The German government has done it for several decades, with great success – you should take a look at their model.
War of the Worlds – Hijacking the Linux Kernel from QSEE
When I was 10 and known Basic only from book I was wondering what would happen with that code:

10 echo "hello"
20 goto 10

After trying that I was quite disappointed that computers are that stupid...
Wtf is with the max of 10mL? That's asinine. God forbid anyone get a bulk discount..?
Misperceiving BS as Profound Is Associated with Favorable Views of Conservatism
no. hangouts and email works fine. I'm not mad at slack for building something, but it's just a slightly different wheel.
> And Johnson was unable to prosecute the advantage of that momentum inherited from Kennedy.

Objectively, he passed the Civil Rights Act and, after the election vs Goldwater, passed the Voting Rights Act, Medicare, Medicaid, reformed Social Security, etc. Not sure how much more prosecution you could ask for.

And, perhaps you meant "inherited from Kennedy's murder", because in truth there was no legislative momentum under Kennedy. Kennedy may have introduced the Civil Rights legislation but Johnson passed it.
"group by 1,2" is for lazy people who never have to support an application in production. It tells the database to group by the columns in the order that they come back in the result and is supported by most engines.
Oh, an ad-hominem and a straw man, and of course total avoidance of the core point. What a surprise.
Go to school, kid: http://www.investopedia.com/terms/p/property_rights.asp
probably because I've been playing an mmo, but i like the use of the word 'tank' here
That's more of a list of things to have in the house.

For instance, 3 gallons of water isn't something you put in a go bag.
> E.g.: are we sure that, if System Integration companies have to pay engineers a much higher salary, they will be able to provide prices low enough for other company to pay it?

If you can't sustain your business without illegal (or in this case legal, but certainly exploiting loopholes which shouldn't exist) hiring/salary practices then why should your business be allowed to exist. This type of thing only hurts workers.
> and the concern for that growing group

Human beings are wired to do drugs, all throughout history we have sought ways to get high. On the face of it, nicotine itself isn't any worse than caffeine (aside from the vasoconstriction) - both are highly addictive, but alone without any other substances aiding in the addiction it is relatively easy to quit.

It really amuses me that as a society we are finally starting to end the war on drugs (slowly, but surely) yet because of the public opinion on cigarettes ANY alternative delivery system for nicotine is stigmatized. I don't smell after I've been around people that vape, and many people I've been around that quit smoking through e-cigs are substantially healthier than before - I think that alone is enough reason to incentivize these products.

You aren't going to stop people from seeking pleasure, trying to "save the children" is almost universally nothing more than FUD to try to pass a political agenda. Are people going to pick up vaping without ever smoking a cigarette in the first place? Sure. But there was nothing stopping them from picking the worse alternative either, and I would much rather they don't. For all the talk the FDA makes about this being in the interest of protecting public health, I think it's going to do a lot more damage than good.

Lastly, this is only going to hurt small businesses who have started a multi-billion dollar industry. Modern vaping hardware evolved from hand-made devices built from flashlights, a frightening time in the history of the community where ohms law was something anyone who wanted a satisfying experience was familiar with. Modern devices have substantially better safety features, and all of that is going to go away to satisfy the public perception. I hope the FDA is proud of themselves, they have condemned tens of thousands of people to death.
You're right and thanks for the correction. One point I'd add is that C generally encourages not using casts because casts themselves can be error-prone. So it's debatable whether it adds any real type-safety.
It's interesting that when it comes to FOIA, the government will deliver documents in the most inconvenient way possible, but when soliciting input from the public, they only accept documents in whatever way is convenient for them.
For me:

Windows 10 is to Win 7 what Win ME was to XP.
Windows is written in C++ mostly.

As for X11 and Gtk, well, I argue with THEM.
At Qbix we developed a much more secure way than oAuth to instantly personalize a person's session -- and even connect the user to all their friends -- while maintaining privacy of the user and preventing tracking across domains by everyone except those they choose to tell "I am X on Y network" ... it also restores the social graph automatically on every network and tells you when your friends joined one of your networks.
If the only purpose is create a myst of nicotine, aren't there other chemicals what could do that without creating free radicals, at least theoretically, and it's just a matter of searching for them ?
He could still have access to his PGP private key, which would be a strong data point. It could be possible that someone stole this key though, so this alone wouldn't completely prove his identity.

If he had the foresight to know he might want to prove his identity at some point in the future, he could have embedded the hash of a message into an early block (using the public keys of coinbase transactions). The message could say something like "Satoshi Nakamoto is <real name>. <salt>". In order to prove his identity, he'd just have to reveal the contents of the message (he'd have the make the salt something he could memorize so that it wouldn't be at risk of being destroyed by a fire). Ideally he'd encode this message hash in multiple early blocks (using a different salt in each message, so that the hash is different each time).

I think anything like the "knowledge of the content of private emails" is flawed. Satoshi's email account was hacked, so most of his "private" emails are no longer private (supposedly he didn't use PGP for most of his private correspondence).
On my grossly overpowered workstation, I can only crank the number of workers in the Mandelbrot demo to 20 [1]. Attempting to go beyond 20, the console reports:

RangeError: out-of-range index for atomic access

That said, 20 workers is about 11x faster than the single-threaded version.

[1] https://axis-of-eval.org/blog/mandel3.html?numWorkers=20
Hahaha, "we only sell to Bing users!" Now that's a strategy tax!
"I think the 'competitive vape' scene use nicotine-free substances"

This is probably a ridiculous question, but you don't mean that there are vaping competitions, do you?
No, big Silicon valley tech companies win.
You are absolutely correct. One bitcoin is 100,000,000 satoshis. Transactions are denominated in integer values of satoshis, so it's not possible to subdivide a satoshi.

One satoshi is currently worth about $0.0000045, though, so there's still plenty of room left for inflation.
The real issue with Apple Inc, and taxes, is about sales tax revenue. When Apple was close to bankruptcy, in the 1990's, the City of Cupertino agreed to refund Apple 50% of the sales tax revenue to which the city was entitled. This is sales tax revenue from online and phone sales on purchases shipped to addresses in California.

This arrangement continued unchanged even as Apple emerged from the dark days of John Sculley and Gil Ameilo, and became one of the most profitable companies in the world. In 2013, Apple agreed to change this agreement so that Cupertino would give Apple only 35% of the sales tax revenue to which Cupertino is entitled, rather than 50%

On the surface, this is crazy. Apple does very little for Cupertino in the way of community benefits, AND they expect Cupertino to refund sales tax revenue to them! However the alternative would be far worse for Cupertino. Apple could move online and phone sales out of California completely and then Cupertino would get no sales tax revenue at all.

What Apple is doing is not illegal. Companies pressure cities for tax concessions all the time. It may be unethical, but that is not Apple's concern.

That said, Mayor Barry Chang is widely considered a nut case. He attacks residents at City Council Meetings, creates fictional stories about those that disagree with him, is illegally running for a state assembly seat in a district where he is ineligible to run, and has gone on the radio and made disparaging comments about Mexicans. He is in the process of being recalled by residents. If I were Apple security, I'd escort him off campus too!
MVP the Key to Mobile App Success
An anti-cookbook approach to A/B testing
They are cryptographically generated.
For background on that case: http://www.theatlantic.com/entertainment/archive/2011/07/hot...
>If all the vendors would apply the same transition mechanism, that would make it a lot more easier for carries to deploy IPv6.

The nice thing about NAT64/DNS64 is that there is no support for anything beyond IPv6 required on the client - it's entirely handled by the network, and is completely transparent / invisible to the endpoints.
sah2ed, you are the real MVP!
Few languages have intrinsic GUI components.
They're not really screwing anyone over. They had already come here legally, graduated from American universities, and gotten jobs appropriately. At this point, they have their jobs and there's no 'screwing anyone over' - if anyone has been disadvantaged, it was them for not winning the H1-B lottery.
Not only that, but if you don't need "Shared" array buffers (meaning more than one thread using it at once) you can use "Transferrable" [1] ArrayBuffers.

It's just a zero-copy transfer to a worker (or from a worker) but it makes sure the "sender" doesn't have access to the memory any more.

It's incredibly easy to use, avoids all the common issues and pitfalls with shared memory, and being zero-copy it's stupidly fast.

Obviously it's not a replacement for true shared memory, but i've used it in the past to do some image processing in the browser (broke the image into chunks, and transferred each chunk to a worker to process, then return and stitch them all back together).

[1]https://developer.mozilla.org/en-US/docs/Web/API/Transferabl...
A good default is to write to STDERR if the severity level is above some threshold, otherwise do nothing.

That way the console can tell you about configuration errors, and by default the library will log nothing. If the library author considers it important to log somewhere, the library author is responsible for putting both an understandable warning up, and writing documentation.
How exactly do you prevent a user agent WebView in an app from spoofing iOS Safari?
If it wasn't government run, and they would have still 'enrolled' anyway, no.
There are plenty of people with old accounts who would not have voted for pinboard -- or, for that matter, even been aware that there was a poll happening -- if he had not actively solicited votes on twitter.
I've been reading around to try to get a clearer picture of what is going on under the hood in Microsoft land. Essentially, I'm curious what it would take to build an OS like Inferno, but that provides the CLR as a VM for CIL instead of Limbo.

1. Am I correct in thinking that this is sort of what NetBSD has done?

2. Does this mean that through Roslyn + RyuJIT, NetBSD gets to run programs written in C#, F#, and other visual-* languages?

3. How close to support for things like WPF/UWP does this get NetBSD?
How to deliver a hackathon pitch – a tale of self-deprecating fear
Even on a platform that wasn't based on C, the C standard is flexible enough to match pretty much any native ABI. That's a small (and under-used) upside to all of that undefined behavior.
im getting my toddler started with this RL code. http://www.primotoys.com/cubetto
Bullying probable conmen is a reasonable way to try and discourage future conmen. Come 'round our town selling snake oil, and you get run out on a rail. It's disproportionate; that's the point. It's a sort of social control.
That's fascinating. That first Quora answer goes into it really well.
That's awesome! You might also want to rethink what your market is. Is your users going to be engineers who build web app for their company, engineers who build their side projects, some developer-designers or maybe some technical product managers/product engineers? You can still catch all of them eventually, but in the beginning focusing on one or two groups might help quickly get more users and also help on morale.
There was a class action lawsuit filed just a few months after an upgrade was released:

http://mashable.com/2015/12/31/iphone-4s-ios-9-lawsuit/#l.Zf...

Edit: I'm not sure if this has been fixed with the later iOS 9 versions.
My DH comment was a bit aside the point I probably should have made. (Also, apologies for my sarcasm re: bash pipes -- that was unnecessary and probably unproductive).

> Public key cryptography can be used with JWT tokens but they don't solve the problem of how the client will generate key pairs, demonstrate proof of possession of the private key, and enrol the public key with the API.

JWT is not in any way attempting to solve the problem of client identity and authentication. Rather, the question of federated user identity and how to validate that the identity assertion came from a trusted source (where the PKI and assertion signing comes in).

Furthermore it is signed with, among other assertions, the audience assertion so that you can cryptographically verify that a token was given with the authorization of a user by a trusted service (your JWT provider, via whatever authN methods it allows) and to a given client. This should give a substantial enough audit trail to enable reasonable proof that an end-user authorized a client (which itself had to authenticate to the provider) to perform an API transaction if it can be proven that the signature was validated and that the token issuer was clear about exactly what the user was giving the client authorization to do.

OAuth2, OIDC, and all modern standards I'm aware of also require client validation of some form. From the OAuth2 spec:

Confidential clients are typically issued (or establish) a set of
client credentials used for authenticating with the authorization
server (e.g., password, public/private key pair).

This implementation is unspecified in OAuth2 but could (and in your case probably should) certainly include digitally signing each API request (much like twitter and amazon require) with a private key and validating the signature against the client's registered public keys as well as the constraints (especially audience, scope, and expiration) given via the token.

If your goal is to provide a non-repudiable audit trail of user identity and authorization and client identity and agency (authorized by the user to perform X) then OIDC, JWT, and client AuthN via request signing with registered keys should be more than sufficient to avoid liability in the case of rogue clients or shady users. As always, the audit trail is the most important piece, along with sound crypto and standard practices that have been audited by appropriate experts, so that your audit evidence cannot be reasonably called into question.
This is almost certainly not apple acting alone. There will have been lengthy contract negotiations (and probably a lot of pressure from the major labels). The auto-overwriting metadata issue is probably apple alone though, they've long been very exacting about the metadata of music in itunes. They already throw their weight around in the supply chain by demanding that metadata is correct or they won't accept music, which they can do because they control so much of the market. I'm not surprised they're expanding that to user's devices (presumably for matching purposes for igenius). The industry sucks, so many middlemen with so much power :(
They graduated first from other schools, then got these jobs. When the students lost the H1-B lottery, they then enrolled in the UNNJ. There's probably questions for HR to ask ('you lost the H1-B lottery, how are you still here?') but it's not related to applying to these schools with a fake university on the transcript (again, one that had multiple accreditations).
As far as explanations are concerned, I've always heard that you should create a company and claim to do freelance work between getting fired and finding a new job. Any other tips?
How about:

CASE WHEN MIN(express_delivered) = 0 THEN 0 ELSE 1 END AS always_been_express_delivered
Well-done product. Love this a lot.
NAT64/DNS64 is completely invisible to the endpoint - there is zero differentiation between how a client talks to a native IPv6 resource and an IPv4 resource. All of the translation is handled by the network/DNS, so if your app works with your device configured with only a v6 IP address while supported by a NAT64/DNS64 network, you're good to go.
Cybersleuth's hacking of Florida elections websites draws criminal charges
Windows 10 Now on 300M Active Devices – Free Upgrade Offer to End Soon
Most apple platform apps are written in mostly objc or Swift and not C++, I wouldn’t say it is one of the most widely used languages on these platforms by any means. The Cocoa SDK exposes an objc interface so many system framework calls have to use swift or objc.

Secondly, compilers are a very different programming task to developing GUI apps; the Swift team choosing to use it has nothing to do with Apple’s assessment of how you should write an application—Apple are the people who have been leading objc development (they own the objc IP) in the last 10 years and use it in all first party apps and many system frameworks.
Here's a certificate signed by Berkeley Labs, when Tulip Trading's CO1N supercomputer was ranked 15th.

http://imgur.com/h8jSn8Z

Can anybody provide some insight into how the Top 500 list is compiled and what checks, if any, take place?
I disagree with your first point. The fundamental problem OAuth solves is secure authentication. OAuth 2.0 provides this at a bear minimum as it can be broken in any way SSL/TLS can be broken.

The argument the author is making is that this level of security is not sufficient for a bank. I think I agree with this statement.

For general use, OAuth 2 provides a sufficient level of security since the platforms that use it are usually only as secure as TLS, too.
You should put something out saying what you've blocked, I'm sure many other people want to do the same thing.

I don't know when I'll be able to get off of windows, but I do know that my next computer won't run it on the bare metal. I plan on getting a CPU with good virtualization (non 'k') and only ever running windows inside a VM. Things had already gone too far about 5 revelations ago.
But note that on the page you cite it says that overall tobacco use in middle school has not changed since 2011. So kids are substituting a more dangerous product (cigarettes) for a less dangerous product (vaping).
What bothers me about OAuth is the way you're on one website and are then asked with a pop-up to enter your Gmail or Facebook etc. password as a normal part of the flow. Users aren't savvy enough to check the URL or understand what's going on here so getting them used to this flow is asking for phishing by the look of it. Something that forced two factor authentication would be good.
Top 50 Oracle SQL Blogs for 2016
I always found SLF4J's reasoning quite simple and logical and not at all an example of "those situations which show that software is difficult, and that often there are only compromises".

I think the core problem in this case is that the author is not clear if they are writing a library or a (command line) application.

The following workflow has always worked well for me:

1) Do you expect users of your project to use it by putting it in their classpath and calling its methods from their code? Then it's a library. You have no idea what else will be on the classpath and which context your library will be loaded in. (In fact, the user might not even be aware they are using your library thanks to transitive dependencies)

Libraries should never (if they can avoid it in any way) modify application-wide settings. So: Don't include any logger implementation at all, especially not the nop logger. (Please. Seriously. I've had to deal with misbehaving libraries in that regard and finding out why your logger settings are suddenly overwritten is a serious PITA.)

2) Do you expect your project to be used as a command line/standalone utility via java -jar ... or java -cp ...? Then you're writing an application. Do include a logger implementation and all necessary configuration. You can do it safely here as no one else should be using your project as a dependency.

3) Your project is a mix of 1) and 2) : Find out which parts of your project are library and which are application and split into sub-projects accordingly.

There are a few special cases I see, but not many:

4) You're writing unit tests for a library project: Do include a logger implementation, but make sure it's only visible to the test system. E.g., in Maven, you would add the logger implementation as a test-scoped dependency and put all configuration in src/test/resources.

5) You're writing a plugin/servlet/etc: Read up on your host system and find out if they provide logging or if it's your responsibillity. Proceed accordingly.

6) You're not using SLF4J but one of your dependencies does and so you get that message: Think about using SLF4J in your own project. Really. It's becoming almost a standard and usually you can keep using your old logging framework below it - but it will make things much easier later on. But if you don't want to, for some reason...
6a) If you're writing a library: Don't do anything at all. Do not include any logger implementation. See 1). The user of your library will be in a much better position to deal with the problem than you are.
6b) If you're writing an application: Include the slf4j-xxx implementation that corresponds to your logging framework: The log events from your dependency will be routed to the logging framework you're using and you can continue like you did before. If you're very certain you don't want any logging from any library using SLF4J, use the nop logger - however that is a very unusual case and a very inflexible solution.
Thank you Tzhong <3. Appreciate the kind words.