skysight-inc/HackerNews huggingface dataset:
Security Advisory for Adobe Flash Player  Release Date: June 14, 2016
You have to be careful that you are not leaking sensitive info though, as the JWT payload is meant to be visible on the client as well.
That's pretty smart. Effectively versioning your issued tokens. Way easier than maintaining a blacklist.
A combination of things:

I do have a big collection of music going back decades. (ripped from CDs mostly although also acquired from, um, other sources when that first became possible)

I also buy some--more typically individual songs than complete albums--although, to be honest, I'm not especially aggressive or adventurous in terms of finding new music.

So, yeah, I've subscribed to streaming music services. (Rhapsody way back when and Apple Music more recently) and ultimately decided that they weren't subscriptions I was getting my money's worth from especially given that I have access to some things for no additional money. (And I probably have a bias toward owning anything I really like.)
There are many deterministic BFT protocols. PBFT is probably the most well-known. [1]

The SCP paper points to several BFT protocols with message complexity of O(N polylog(N)), e.g. [2]

[1] Miguel Castro and Barbara Liskov. Practical byzantine fault tolerance. In Proceedings of the Third Symposium on Operating Systems Design and Implementation, pages 173–186. USENIX Association, 1999.

[2] Valerie King, Steven Lonargan, Jared Saia, and Amitabh Trehan. Load balanced scalable byzantine agreement through quorum building, with full information. In MarcosK. Aguilera, Haifeng Yu, Nitin H. Vaidya, Vikram Srinivasan, and RomitRoy Choudhury, editors, Distributed Computing and Networking, volume 6522 of Lecture Notes in Computer Science, pages 203–214. Springer Berlin Heidelberg, 2011.
Same thought but adding that if it's causing you stress/impacting your life - factor that in.
If the user reauthenticates and you unset the reauth flag, wouldn't their previous sessions (e.g. tokens held by an attacker) suddenly become valid again? How would you prevent such an attack?
The AS Macroassembler by Alfred Arnold (1992) still compiles on the unpopular OS I'm using, with a quick edit to sysdefs.h.
This is a problem we (accessible.ai) have been working on in the past few months.
We're still tuning and improving but with a multi-modal approach of signal processing, speech recognition and text analysis we were able to come up with a pretty good MVP to solve this issue.
You can take a look at our small demo here: http://accessible.ai/nav
> what I can do to help.

This excellent piece was on the front page of HN in last 12 months.

'What can a technologist do about climate change'

https://news.ycombinator.com/item?id=10622615
I'm not trolling. You think people are immune to stigma just because they work in tech?

Tools are rarely chosen purely on their merits. Look no further than the Black&Decker vs DeWalt thing back in the early aughts. Literally the same tool but with a yellow, "construction-y" motif? Much better reputation for being durable.

People didn't buy Black & Decker because they didn't want to be looked down upon for using pleb-tier tools.
Their contrived "hack" is left there so the internet will spread their paid content. They even experiment wth it.

http://digiday.com/publishers/wall-street-journal-paywall-go...
Read all three studies. Rand and Oregon show more health care doesn't improve health. Sweden shows more money doesn't.

What, exactly, are you disputing here?
Indeed. I use gmail, gmaps, and gdocs because they're good tools. If not for my still-free Google Apps account, I'd pay for just gmail and docs even if there are free alternatives.
I'm not saying lawyers shouldn't be paid. I'm saying that the idea of going to law school solely to make money is not optimal for the public good.
Do members of both professions find clients with equal ease and reliability? A plumber or an electrician bills at a rate closer to double that, but i think it's partly because work is less steady.
Something to do this in Lego Digital Designer would get considerable interest.
But the USA also has twice the carbon emission per capita of China and India's is almost ten times lower than that of the USA. Comparing carbon emissions but ignoring the differences in population is a bit misleading at the very least. You can really only start complaining about other countries when they pollute more than yourself.
"A Redis cache with revoked token IDs". Default-allow revocation. What's not to love about JWT?
Operating systems and drivers will allow rotation of most monitors and it mainly comes down to a matter of mounting hardware if autorotation isn't a big deal. Monoprice has a stand for about $20.

http://www.monoprice.com/product?c_id=108&cp_id=10828&cs_id=...
Are you sure? The only information I can find that agrees with you is about debit cards, where PIN means it uses a different payment network. Credit PIN uses the same network as credit signature, so it seems unlikely the fees would be different.
We can argue another day. The purpose of my post was to offer congratulations and offer help, not debate the effect of automation on the criminal justice system. (Gotta love HN)
> Are you saying that when the army makes an offensive operation with the goal of eliminating some enemies combatants, it's because they think killing is awesome?

I'm not sure how you could come to that assessment but I wouldn't come to that conclusion at all (even my previous comments echo the opposite). Regardless I wouldn't consider myself part of the military at all (especially since I've left the public contracting space 2 years ago and the army wasn't my last contract anyway).
The US has 50 versions, not 1
The cost of the ingredients will still be pretty low compared to the overall price you pay. A bacon and egg sandwich is about as cheap as it gets to make. It's the time to prepare and serve the food (i.e., staff time) and the time you spend there (i.e., customers per hour → rent) that are the bigger factors.
While I am sure the load is high, everytime you look up a .com you are not connecting to Verisign Server.

DNS does not work that way, Major DNS companies like RackSpace and AWS's Route 53 I suspect have higher load DNS than the Root Registries, and they offer the service for free...
This was answered in the comments of the link sent previously, but basically: it's gone to a public blockchain address, of which everyone knows the public key but only its owner knows the private one. Also, the blockchain is pseudonymous, so nobody knows who the owner of the address is.

Therefore, everyone knows where the ether are, but only its owner can touch it. He can use them as if they were legitimately obtained (they are, depending on perspective) and go to an exchange to buy dollars (or euros or whatever), or exchange them with other addresses for goods and services.

Anyone will be able to audit these movements of money (at least the ones that stay inside the ether blockchain), although there exist some cryptocurrency laundering schemes.
I'd not take the article that literally. The author probably remembers most of what occurred. The setting and the story about the dinner party act as a vehicle for commentary on the mindset of the winners in tech and how it'll impact our future as they use their influence.
TLDR: Imagine yourself starting, not finishing.
I'm not sure it's always possible to tell into which group your venture falls.

Once it might have been safe to assume that Uber was only going to destroy the taxi industry and transfer those jobs to uninsured/underpaid freelancers. Instead, it's resulted in fewer people driving, and taxi jobs seem to be minimally affected (so far...).

Ultimately, entrepreneurship is widely recognized as the most effective net job creation engine, so it's probably safe to say that one is creating jobs when one starts a small business in the absence of a good argument to the contrary.
> you can't see what are the last songs you added

Not sure when you learned that, but it's not been true for the past few years I've been using Google Music. Go to Music Library => Auto-Playlists => Last Added
But who's the responsible party? If the developers did their due diligence and everything that could be expected of them, who other than the thief could be sued?

And under what circumstances can you even declare that person to actually be a thief in the sense of the law? Everybody's assumed to have studied the thing they're paying for - whose perception of what the system allows and is meant to do goes, legally?

That of the person with the best understanding of the code (would mean the thief can't be legally wrong), or of the majority (would mean that highly technical niche contracts could be completely derailed legally by "noobs" flooding the market), or case-by-case?

Setting the standard as "what the code appears to do when reviewed by average developers" would be very legally unpredictable. It would also illegalize a lot of useful and beneficial benign "hacks".
Never heard about the tradition of the "Money Talk" and never got one either. Feel like it is much more worthwhile to teach kids critical and independent thinking rather than trying to teach them principles ("invest in index funds") that might (or might not) be all that useful a couple of years down the road.
Top Creative Audio Books for Marketers
Code is law! Ohh, ummm, err, uhhh, except when we say it's not.
I think what is different about the DAO is that it's a corporation that is foreign and unregistered in every jurisdiction. Is that not significant? That seems more like a private syndicate with a shared bank account and some programatic contract controls. In what country would you bring a court case against its members or the "hacker"? Curious how this works on the legal side. Normally a corporation is registered in one or many countries, but how can it be registered in none?
Naive Bayes Classifiers in Rust
Easy solution: just hide all of the paper in some other universe :) On a serious note, well said.
I still don't understand why they backtracked on their plan to become the 'social layer' of the internet. They'd get data on so many more things.

For example, I was working on integrating Facebook in a large media site, and Facebook would've had access to: what users viewed, how long they viewed things, game play usage (high scores and whatnot) and a lot of other information.
Interest in dealing with the consequences of global warming is interest towards your fate. Regardless of where you live, you will be affected. The temperature in your backyard is irrelevant.
I've been to Kangding and Tagong before, how far is it from those places?
The extreme examples remind me so much of the Shivan ships in the Freespace series.

I don't think the script replaces a professional designer, but this is awesome for brainstorming ship ideas.
You wouldn't use a boolean flag. I suggest setting a validity timestamp for the user, and reject any token that was issued-at any earlier time.

(This isn't a perfect scheme since a compromised issuer could have been induced to send post-dated tokens. If your need for global logout was to invalidate tokens issued by a compromised issuer, you'll need to blacklist keys as well)
> 'truth-adjacent'

I'll have to remember that one.

There is something about politicians and journalists in particular that makes them especially prone to such semi-deliberate lies.

My hunch is that being overly socialized, hyper-socialized, causes people to do this. Suppose you have to interact with a large number of people, at least some of which could affect your future deleteriously. You can't plausibly remember the specific details for each person to know what will or won't cause offense, especially when you must also gauge people telling their friends about something you said. As a rule people remember a negative feeling e.g. an irritating remark much more so than a positive one e.g. caused by a compliment.

The heuristic here is to gauge the general atmosphere in a room or discussion and then play to the crowd. The act of this averaging results in satisficing* which could also be described by this truth adjacent quality. I wouldn't even be sure it's intentional. They probably don't even realize that in most domains outside of social interaction this is maladaptive. There's an expression to the effect of "reversed stupidity is not intelligence". If you reverse autism you don't get normality, you get people barely able to cognite outside of the social realm.

* https://en.wikipedia.org/wiki/Satisficing
Small note: this place is in Sichuan Province, not the Tibet Autonomous Region. A Chinese tourist visa should be sufficient to visit.
the capitalist class has always been an intellectual one. The labor class is dying; I don't think this indicates a higher premium on intelligence. If anything, this indicates a lower value than before as people take intelligence for granted.
Oh interesting, thanks for the correction!
Yeah the publicity requirement is tough. In my case it's been a couple of projects I've started (one before was a finalist in TechCrunch Disrupt) and my current startup that have gotten press, but never me as an individual. Fortunately I was able to get founders from about 4 companies (both in the US and international) to write letters vouching for me, as well as a couple investors which helped. I'm considering whether or not it's worth it to try to get an EB-1 now, since it is stricter than O-1 and I would need to do some speaking engagements and get press naming me personally.
"Words," not "text." Illiterate people have words but can't read text. And some people "think in pictures" or "feelings" but that kind of thinking isn't the same as thinking in words.
This place is in Sichuan Province.
Effectively now you are using database as your session storage?
Business wants a reliable and predictable legal system. They don't care that the judge has a pulse. If the machine looses it and starts making terrible decisions, people would just start using a different arbitration group. You could probably even update old (well written) contracts to accommodate that.
N Queens on an FPGA (2014) [pdf]
Direct PDF link:

https://arxiv.org/pdf/1606.04984v1.pdf
A lot of what you said is just not true. Israel takes a lot of West Bank water. And while the illegal jewish settlements might not be a sovereign claim by Israel. Israel isn't doing anything to stop them.
You're very eloquent and also learned. But for every programmer who knows what an ANSI Lisp "boa constructor" is, there are 100 who know what a C++ constructor is. And it's an 11-letter word that means something completely different in a completely different language.

But maybe it's worth it to stop the middlebrow dismissals! Our grandparents went to the moon. We complain when we have to learn a slightly new idea, and faint like Victorians contemplating legs if it has a new name.

"Argument" is another good one. Hoon is a single-argument language that favors tuples, not currying. So an add function, (add a b), is actually (add [a b]), or in Lisp (add (cons a b)).

In Hoon, you can call a and b "arguments" all day long. It's an informal word. But [a b] is "the sample." You can see the chaos that would result if we called it "the argument" or "the parameter"...
Apple won't aid GOP convention over Trump
>is there some kind of common law that would indicate what sort of contract would be deemed unfair?

The controlling law for a specific contract would come from stare decisis or the precedent as set by case law.

Your gut it on point, because although employers get away with a lot, it is one of the areas courts are likely to find contracts to be unconscionable as a natural result of the unlevel playing field between the two parties.

>Employment non-compete contracts tend to have this property.

Definitely, and it leads to very specific case law. For example, case law might be specific to a profession (say a doctor) and geography (any restriction on competition outside of 20 miles is unenforceable). Keep in mind case law is jurisdiction specific, so say a 20 mile radius non-compete against a doctor in a major city might be enforceable, but in another jurisdiction say a small town where there are only two licensed doctors, the court may very well find it would be unconscionable to enforce the non-compete because it would limit the communities access to healthcare.

>What about assymptotic licensing like those of software/service EULA (e.g., where they have a clause that says they can terminate your service for whatever reason they desire).

It is difficult to try to answer legal questions in a vacuum without a specific set of facts, but as a general rule you can certainly have a contractual right to terminate the contract. Another general rule would be the courts are more likely to provide damages than any equitable relief, meaning, say my EULA didn't include the a termination provision, then I stop providing you access to my software and you sue me. If the court agrees with you, the court's ruling is far more likely to have me pay you the monetary damages you suffered before they are to order me to continue providing you the software under the contract (though there is always exceptions and some cases the court will make a party actually perform the contract).
There's an excellent book [1] that explores the neurological aspects of language. TLDR: language evolved to be efficient for our existing brain structures—our brains did not evolve to be good at language.

1: https://www.amazon.com/Reading-Brain-New-Science-Read/dp/014...
Star Trek Continues E01 “Pilgrim of Eternity”
Yes, it'd be better if JWTs were full-fledged certificates, where ultimate authority could be confined to some offline key, who delegates authority for strictly delimited period to online keys. Or ultimate authority could belong to k out of a collection of n keys: one would need to suborn k keys to suborn the authority as a whole.

RFCs 2692 & 2693 specify a really great, lightweight, way to do that. They resulting certificates needn't be a whole lot heavier than a JWT, and are much lighter-weight than and X.509 certificate. The RFCs also specify an intelligent, domain-neutral algorithm for performing calculations on tags (what JWT refers to as 'claims') and keys.

It's a pretty awesome solution, and there are a lot of good ideas in there. A streamlined version could, I think, end up being competitive with JWTs.
Some professions (lawyer, doctor, law enforcement, clergy) should have as a fundamental motive the desire to help people rather than profit, since they have by their very nature the power to help or harm others.
Show your integrity, get off DARPAnet.
Yes. And the fact that people are trying to steal them.
But what if they market only to those who do?
E.g., http://www.fhwa.dot.gov/environment/climate_change/adaptatio...

Of course we aren't 100% sure. Some of the dire predictions may not come true. Some may be worse.

But we have some idea what will happen to various parts of the world when the temperature hits +2.0C, +3.0C, and so on, and it ain't pretty.
Play Bigger – A  for Startup Founders
> I mentioned Lexifi, ... which is based on OCaml and is not imperative.

Oh, sorry.

> we appear to be less commercially influenced

I don't think this has anything to do with commercial influence -- just academic tradition and maybe even philosophical influences: I think you'll get different answers to the question, "does an algorithm or a computation exist outside its description in a language, and if so, in what way?" This may be tied to actual philosophies, Derrida in France vs. Kripke in the US[1] (to prove the connection, a "Kripke structure" is a very common mathematical structure denoting an "abstract" computation, which is used commonly in non-language-based verification). I've been told that the study of program semantics tries to reconcile the two.

As to Haskell vs. Python, first, MIT used to teach Scheme; they have explained their reasons for switching to Python. Second, this difference is more indicative of the competition between "theory A" and "theory B". Theory A studies algorithms and complexity (and Haskell is not the best first pedagogical choice for that), while theory B studies logic and semantics (and language). Theory B is relatively small, but it does have a stronger presence in Europe. Although, even within theory B there seem to be those who prefer linguistic approaches (semantics) and those who prefer conceptual approaches (Kripke structures, abstract machines).

[1]: Not that Britain is too fond of French philosophy, but the Brits had Robin Milner, who is as close to a CS deconstructionist as you could find.
<3 Druid and the Imply tools. It's a great fit for k8s :)
If you had a nice exit you might be able to use that as EB-1 evidence. That would be a much better route than EB-5. Talk to an immigration attorney about it.
I've been working on rolling my own authentication layer in Node/Express lately. Your comment is the first time I understood how refresh tokens work.
And I just listed the rates of the three largest countries in Europe, covering ~42% of the EU population.

In Germany, VAT on restaurants is 19% for sit-down places, and 7% on food to go.

US national average sales tax was 8.454% in Q2/2015: http://www.accountingweb.com/tax/sales-tax/us-average-combin... - I'm assuming normal sales tax applies to restaurant food?

In that case it's something like 40% of EU average. Just like gas prices ;)
But you're not storing the session there, just the key/token so you can change it. The session payload is still completely in the JSON body maintained by the client and sent with each request.
Yes, I agree with that. This was pretty clearly a bad idea from the start. But, to say so was being a "hater" and so forth.
Users flagged it, perhaps because they thought it was more sensational controversy than intellectually interesting.
Self organized groups are just like fire to wood. They are deeply aware of this. Anything like that would be removed with top priority. On the other hand, Chinese nowadays have poor performance while working as non-top-down groups. We lost that DNA through the Ed system and social norms. It's really sad.
> There's standard ways to include the JWT in the request body, like form encoding, but that doesn't work for GET requests, so in practice everyone uses the Authorization header.

You can include a JWT as an access_token URL parameter, which works in a GET:

https://foo.invalid/bar?access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ
In Danish: https://www.version2.dk/artikel/advokat-saadan-lirker-du-dom...

It was passed in 2005, and in 2010 it was in effect for all domains, new and old. The article suggest there's a bigger burden of proof that a domain was registered for resale than what I suggested.
IDE and autocompletion could be the direct cause, but in the end if the function had been properly named it wouldn't have happened (root cause).
This … this is awesome. Thanks for sharing!
It was probably not worth it in the end, but I'm glad Saddam Hussein and Chemical Ali faced trial for genocide against the Kurdish people of Anfal. For me, genocide is a crime that justifies international response.
And yet people are more concerned about ancient statues blown up by muslim extremists. This seems like it shall be a greater tragedy by at least an order of magnitude.