skysight-inc/HackerNews huggingface dataset:
If anyone is interested in making a language in JS I can recommend the "Nearley" parser/lexer:

http://nearley.js.org

Very easy parser/lexer to use, accepts a larger class of grammars than yacc/lex and is reasonably fast.

I use it for the language in my project: http://emunotes.com and Nearley is fast enough to parse stuff as the user is entering text.

It may be tempting to see if you can get away with not using a parser generator (as the author does here) but I found it is not worth the trouble it generates down the road.
ask to send a message, then wait for it to prompt for who, and after that wait for a prompt for what you want it to say.

I use that function while on my motorcycle through my helmet a bunch, and breaking it up like that allows me to confirm/deny each step because often the wind noise makes it impossible to hear what i said.
>>You can't translation energy.<<

This is a good point...a good translation depends heavily on preserving the writer's "voice", which is unique to each writer...

Masterful translations are among the most underrated examples of human linguistic skill that I'm aware of...
what do you mean? normally passwords are not stored in logfiles ...
I agree that self-help books may have dubious value, but not because they try to force people into a "prescribed culture".

What the OP needs is someone who cares about him, a mentor, to give him a much-needed reality check when challenging interactions occur at work. There's no replacement for someone who can perceive things which you can't to tell you what is _actually_ going on in any particular situation. The problem with a book is that it can't, usually, force someone to see things in a different way.

In other words, a book can't tell you "No, stop, your interpretation is all wrong!" A human-being can. I recommend that the OP seek out a trusted colleague who can mentor him through this.

That said, there IS a book I recommend. "Fearless Change: Patterns for Introducing New Ideas" by Linda Rising. It is all about effective strategies for introducing new ideas into organizations which are naturally resistant to change. The OP indicated there's a problem with the org accepting his ideas. I see this a lot-- really smart technical people who see solutions but can't get them implemented because of organizational obstacles. Some mindsets will act like a bull in a bull-fight and just keep charging head-first only to get increasingly frustrated. The book gives some ways to approach organizational blocks by taking a longer view and enlisting the critical cooperation of others (and no, that does not mean merely making a logical argument).
"It's hard to strike up a conversation with someone who's bored and also you."

I like that, it's a really interesting way of phrasing it (and it eerily makes us sound a bit like the Borg).
I know. I was adding information.
is this really a thing?
Yeah, just how I feel, see http://github.com/impress/impress.js and https://github.com/impress/impress.js/issues/435. Luckily the activity doesn't match a number of stars, although still, it is on the top 30 on Github.
I used to love using the "remind me to" command. It was a fast and convenient way to set alarms. Recently, when I attempted to use it on iOS, I was hit with an alert that "reminders have been moved to the Calendar app," where it is far less convenient to set up a reminder.

Instead of just setting the alarm with my voice and then confirming it, I have to use a click wheel to set the time, and it takes like three more steps.

This is part of a larger trend I've noticed where large tech companies use their market share to bully their users into adopting their other applications. It baffles me how any one approves these ideas. Isn't it pretty short sighted to cripple your own product, to break features that users love to promote another unloved product? Isn't that arrogant? I hope this trend passes, but my guess is that it effectively drives adoption, so to hell with everything else, right?
Taking a camera into a classified facility seems like a bad idea. It can't be that hard to find IR opaque, but visually clear paint. Especially if you're a nation state.
So far it felt as i would choose my job. It was always easy and straight forward. I also have several friends that see it similar. I honestly have no idea what is broken, so i wouldn't be a help fixing it. If you dont like the hustle of doing this yourself, there are several agencies that do exactly that for you (usually even better). Europe too btw, Switzerland tho
Or study the British, they're the world masters at Cadbury-chocolate-covered offensive discussion.

PS: This might read as way too broad a statement or as an attack on British people, rest assured that it's not. I genuinely find the British art of social decorum absolutely fascinating and I think it can have tremendous value. Speaking as a Frenchman, I too often witness the cost of being too hot-blooded and blunt in the social rapport.
I knew there was a reason I always prefer POSTing data as opposed to GET query params.

It still gives attackers the knowledge that if they can get access to the logfiles, they can see passwords. Then the problem becomes getting access to the logfiles!

Any leak of relevant information about security is of potential value.
Its not peer reviewed so wont be found by researchers searching in pubmed or whatever. Thats the main point of publishing...so reviews will find the negative data.
Staring at your phone is definitely a modern reflex. I tried putting it out of reach when I'm doing something else (thanks to this: http://www.raptitude.com/2016/03/4-absurdly-easy-things/) and noticed myself trying to reach for it anyway. Scary.
>> Maybe you should ask your manager for specific examples

Yes. A good rule of thumb for managers is to discuss behaviour not attitude. A good manager will discuss specific incidents, the employee's understanding and any problems arising. They should not have thrown out an interpretation/judgement and leave an employee guessing like this.
Similarly, an astronomer friend of mine trains Buddhist monks in physical astronomy.

These are almost certainly good things.
While I can agree with that, currently I do most of my work on a 17" laptop. I don't need to multitask to benefit from this - being able to keep working on a laptop but having a workspace big enough to bring up a site I'm working on at full size, while having plenty of space to be able to also see developer tools, my editor and reference material at the same time without having to e.g. switch workspaces or cram any of them into less than ideal size spaces would be great.
I agree, there's too much noise out there anyway. With most articles you don't lose much by only quickly scanning it.
I can't tell if this is supposed to be a parody piece or is genuine. Some of the article makes no sense, or is pretty inaccurate. For example, FireWire usage was very low by the time it was killed. There would definitely have been a set of users angry at that, but they would've been a tiny fraction of the overall user base.
Nice, maybe we can finally enjoy concerts in peace again. ;)
When faced with criticism from an organization that doesn't know how to internalize criticism directed against itself, put on the most earnest expression you can muster and ask firmly but politely for concrete examples of "toxic behavior" that you've supposedly committed. Performance reviews, especially at large organizations, are not set up to help you improve. They're either a political device or a component of stack ranking that can be used as part of "documenting" a dismissal. Especially suspect are broad accusations that can mean practically anything but sound serious on the surface.

Definitely get more information before you go accepting blame for something that might well be a smoke screen.
How Does Timesheet Software Affect Productivity?
Meld has an osx app now too. It's solid.
I'm not sure what the overeaction is. It is a statement of strong disbelief. My reaction was the same.
ST*Up... and relax :)
Building an adder in Fallout 4
Latency is not an indicator for geographic anything. If this is just a fun hobby project, by all means go for it but don't expect it to be very truthful ever.
Do you actually have a problem that any of those are causing?

I mean the site comes in at around 500kb transferred. That's not small, but it's also not obscenely large. A single large-ish image can easily blow that out of the water.

Yeah, it could afford to lose some weight in the javascript (although looking at it now, i'm not sure they can. much of the size of the javascript is string literals for all of the options for each phrase), but for a one-off website that doesn't have any ads or source of income, i think it's great. The author clearly wanted to make something cool, and doesn't want to spend a significant amount of time or effort optimizing it perfectly since he probably won't make a dime from it.
Good for you! Working on a weakness is great. I expect I would not find you toxic. The truly toxic individuals really needing help are in total denial. The rest of us know we are not perfect and have to work at it.
I always liked this article on toxic employees (in part because I recognise myself in the description).

http://randsinrepose.com/archives/a-toxic-paradox/

However the end advice might not be very comforting.
Agreed. Our attention is one of our most valuable resources. It makes sense to try and optimise how we use it.
It is misinformed in that it misstates the law in most US jurisdictions, including the one in which it is published.
> It took me a long time to figure out that you don't get paid to do work, you get paid to do work AND get on with people.

In many places work is defined as "what the boss wants, even if that's really stupid".

Life is easier if you can accept doing dumb stuff is part of the job, or if you just leave and get another job.
My friends certainly saw an OUT person. Despite my efforts, no-one debated any issues, no-one tried to convert me.

This is a bit "iamveryclever" but my belief is that they were unable to debate me because I was aware and confident of the issues of the economy, the social space and business world - rightly or wrongly - I feel confident and can speak at length on such subjects.

No-one put forward any real arguments except "but Boris is a bufoon" and "no to xenophobes and racists".

I wanted someone to debate with, I got very little.

Now the voting is over there are suddenly an endless stream of economists and social scientists posting exchange rates and share indexes and bad news.
RC2 released 6 days ago http://weblog.rubyonrails.org/releases/
Https is often terminated at a relatively early point, eg the load balancer, so that the request can be properly routed. (Eg if you use AWS, it's generally terminated at ELB). That means the request path may be logged by the load-balancer and whatever routers/proxies they're using, as well as in the request logs of the web server itself.

It's completely unnecessary to have everyone's passwords be viewable by however many people have access to one or more of those logs (for a org the size of ebay, maybe 10-100 people?).

Sure, it's not as terrible as if it was sent over http, but 'not being as the worst it could possibly be' isn't a very high bar.
That dire helium shortage? Vastly inflated
Huh. I was going by the disclaimer at the bottom of the page: "Twitter Dashboard beta is now open to all US-based businesses."
The Compassion Course Online
There is also the possibility of timing attacks on either type of request. By the length you can tell when the HTTPS request is most likely POST /PWDStrength, and from the times that the request is initiated, you can guess at some characteristics of the password (maybe they stopped typing for a second to verify requirements after typing 7 characters; maybe they stopped after 8 because they have to move to the numpad on their keyboard).

edit: the best sopution for this is probably to wait a specified amount between requests, rather than doing it with each character.
If you're on https ebay, sending GETs to https ebay then the GET parameters are not sent in plain text. The owasp article you link to mentions that GETs can be sent in clear when you have a mixed http/https scenario. I think your screenshots are a little misleading, as not all of the headers and information you show are sent in the clear when using TLS. The response of ebay seems OK, this isn't a big issue at all.

EDIT: Sorry for the misunderstanding: as mentioned elsewhere, the problem is not so much the user-agent end, but the hops between where the decryption happens and where the information is used. Why expose the information more than needed there? So I guess ebay's response is a bit lacking. They could make things more secure with relatively little effort.
Hi SixSigma,

I wish I had seen more OUT people. We all need to take stock and look at how solid facts on the economy and society are shared properly. Hopefully we can move on from this.
Scale – API for Human Labor
I like this question. I'm going to be somewhat prescriptive here, and make some assumptions about what management means by "toxic".

Is the first time you're getting this feedback is at the performance review? If so, then one thing you could do going forward is ask your manager to give more timely feedback. It's perfectly reasonable to tell them that you want to improve (clearly you do, since you're posting here!) and to give you feedback right when they observe "toxic behavior" rather than waiting for the annual review.

Things that I have observed that I myself would call toxic:

1. Snark. All the time. In your case, snark about the slow-moving bureaucracy. The question to ask is, when engaging in a conversation, what do you really expect the outcome to be? If you're complaining about the slow-moving IT department, is there really a purpose rather than venting?

2. Truth be told, when I work with people who are snarky/negative/critical all the time (which, again, is my assumption of what management means by "toxic"), it really does bring the rest of the team down. People spend time gossiping and being more negative themselves. It breeds a team who continually complains, rather than people who identify problems and actively try to come up with solutions to make things better. Be honest - which camp do you see yourself in?

3. Is there a better venue to bring up issues than with co-workers? Bringing up complaints in a 1-1 with a manager will reflect better on you than venting to co-workers.

Everybody knows that the team is less productive because of bureaucracy, so complaining doesn't help. Consider asking "why is this central IT body here in the first place?" and seeing if you can help come up with solutions which fit.

And, at the end of the day, the business has made a decision that they are "okay" with development moving - and people being blocked - with their current policies. In a sense, that is perfectly valid decision for them to make, and if they want to pay you to wait around for them then that is the company's burden.
Incapsula mitigates a 470Gbps DDoS attack
Continuous Discussions (#c9d9) Podcast: Episode 44 – Continuous Improvement
I'm not gulf war specialist, but most recent analysis predicts pretty consistently that if you pit decent to great pilots in F35 vs F35 with similar missiles, you get mutual kill every time. Same goes for any single plane that has BVR radar and missiles and off boresight close range missiles. Most 4th gen planes have these capabilities.

I didn't agree with this at first, but they claim that modern missiles are able to differentiate between heat signature of plane body and engine nozzle. Also modern missiles are capable of 50G turns. That G-loading tells nothing about turning circle, but it does tell surprisingly nicely how quickly you can deviate from straight line. Fighter plane loses every time from every angle at every speed.

The only problem of air-to-air missile dominance is that they burn through all of their fuel relatively quickly. Once that happens, maneuverability goes down really quick. So the "no escape zone" is crucial and it varies from missile to missile.

If you want to stay alive, you need to out-range or surprise the enemy. Either stealth, superior radar or longer range missiles.

It looks like fighters have become very expensive and very mobile SAM sites. It beats me why countries without aircraft carriers would ever pick F35. You can get ~50 trucks with Pirate IRST and METEOR missiles with the same price. More area covered at any given time while survivability goes up like hell I don't know what.
It's not so much the HTTPS but the logs, the server logs are not necessary designed to store all the users passwords.
hm, I am quite loud and direct. I'll ask a colleague to give me a nudge when I'm being too much.

Others have mentioned a book, I'll make sure I read it and I hope it helps people's impressions of me. I just want to do the best I can and I love my work- I just get very frustrated by people who don't want to do their jobs.

It's like driving a Ferrari in LA traffic.

Thanks for the feedback. :)
That's a progressive stance that few organizations have the balls to implement.

In one case, a contractural compliance thing required that we have AV be present. We complied, but disabled the filter driver and let it scan nothing. ;)
We have great investors who have made the company stronger and allowed us to hire a bigger team faster. But they are more like angels, only gave a relatively small amount, and share our vision and especially our (long, indefinite) timeline for an exit. Very different from traditional VC.
Parameters sent via GET can get cached by proxies and they appear in log-files.

Not to argue in favor of sending sensitive data via GET, but I think it is worth pointing out that third-party proxies cannot see the URL or other parts of the HTTP headers or body when the connection is using HTTPS.
That's a purely self-inflicted wound. Someone in IT/ISO has more power than sense.
> there are some reasons behind our current solutions but I wouldn’t be able to give you more details on it.

I'd be curious to know if anyone here can come up with a good enough reason for sending out the user's email & their password(-prefix) at every keystroke?
Day late typo: population declined from 8 to 7 million obviously.
To be fair, there was a consistent universal message saying it would be bad for business.
Ahhh, understood. There's someone between what you see as "ebay.com", where the GET is decrypted, and the actual ebay machine that will use the password information. I was thinking of it at the user-agent level. The GETs never leave your machine in plain text. I did not consider that the other end where you send the information could be "flakey". Bloody hell, it's a miracle anything works at all.
i can count 16 wp-cli
While I agree that the fear of your scenarios is reasonable, the way the patent is described doesn't seem to really support that use scenario - they'd have to have an infared emitter pointing towards the camera presumably with enough juice behind it to be detectable by the camera from a variety of distances, and I don't think that you can power a mobile emitter like that easily right now. Maybe attached to squad cars, but it still appears directional from my understanding.

And all things being equal, it seems more likely that the police would take a much more practical approach of "take recording device" if they wanted to suppress information reliably.

I'm not saying no scrutiny should be given to apple on this, but it is a bit important also to keep discussions rational and free of emotional outbursts, if only to keep focus on the subject at hand.

Stuff like "nail in coffin" is just kind of overly dramatic for very real fears and concerns.

http://appft.uspto.gov/netacgi/nph-Parser?Sect1=PTO1&Sect2=H...
Or missile. There is terrific range advantage if you only fly half of the round trip.
you got a point, i will do a short edit here.
Timing? Perhaps they are timing the typing speed in some way.
Came here to say this.

It is feasible to reconstruct passwords from timing information alone. This has been done against e.g.

SSH http://people.eecs.berkeley.edu/~daw/papers/ssh-use01.pdf and

TLS https://www.schneier.com/blog/archives/2010/03/side-channel_...
In Brexit Trading, Machine Beats Man
This is good feedback, thank you.

Others have mentioned a book I will read it, and I will ask a colleague to keep an eye on me for negative behaviour.

Timely feedback is also important. But yes, I am quite critical and I make snarky jokes to lighten the mood- often it is at the expense of the central IT body. They're not located in my region so it's very "us vs them" and we get downtrodden a lot and I try to lighten the mood. I should probably do this another way.
My guess is that they're doing bot detection or something similar using thing like the additional timing information and detection of typing errors.
How to Win Friends & Influence People

This is a classic book that you can finish in one night. If you don't like reading there's an audiobook version as well. It's also recommended by pg and yc

http://www.audible.com/pd/Business/How-to-Win-Friends-Influe...

https://www.amazon.com/How-Win-Friends-Influence-People/dp/0...
My sister worked for a call center for student loans. Not only were cell phones not permitted, but no coats, purses, lunches, and so on were disallowed. Paper use during calls was frowned on, and they had to be thrown away in special trash cans. Any cell phone could be used for notation purposes (fake telephone numbers to record sensitive information), so I doubt this sort of thing would change at all.

Schools can combat this. For example, I recently took a couple of tests for Norwegian language (I'm an immigrant, and the test is required after manditory language class). Solution? Purses, coats, etc piled at the front of the room. Visual checks by staff during the test. Computers were checked for use of non-test websites.

The friend with a baby on the way could easily have an on-site phone for such a thing.

Sure, folks are sneaky, and there are going to be a few that do such things for nefarious reasons. Most will follow rules if there is understandable reason (though many think the rules are silly because they are fairly honest most times). Unfortunately, most don't have such reasons. I can see this implemented a retail distribution center, for example, simply because having a phone on their body is against rules and not part of the job. Retail locations would consider it if it wouldn't negatively affect their customers.
Replace "everyone should know" with "someone may be curious to know", and the title will start to make sense.