skysight-inc/HackerNews huggingface dataset:
Don't give them any ideas! We've seen how the last 50 yrs worked out! /s
>How, exactly?

By giving members of the community a place to point to which explains why exactly they are excluding someone and a set of reasons why they will exclude others in the future.

>Easily - a CoC leaves a lot of grey areas, which provide plenty of room for griefing and harassment which isn't technically against the CoC.

Like what? Saying it could happen then when asked for examples replying with "it could happen" isn't exactly convincing for it being possible.

>Are most of the people in this thread of comments complaining about not being able to harass or abuse other people?

Well I see a few complaining that they don't feel comfortable in a space where one exists so for those people it probably is though I doubt they'd use those words to explain their actions. I see others complaining about their existence but not really providing any arguments against them other than "they aren't needed" or "they don't work".

I mean your whole argument here is that it should just happen as the CoC outlines. But history isn't on your side as open source in general has been historically full of harassment both sexual and non-sexual and various levels of abuse. To the point that it's actually celebrated from some of the bigger names in the space.
Is this like Siri?
What you read likely has to do with multi-individual/family focused dwellings. Toronto is currently overbuilt for single bed rooms, but under-built for units suitable for families.

Anyways, as far as what to do - Patience. Most people in Toronto who have good/great credit have mortgages w/~2.4% interest rate and 5 or less year term. What that means is that a ~1% increase in rates would increase their annual interest expense by ~50%. Considering that the average house price is $1MM in the GTA, let's say the average downpayment is 20% (it's actually lower from what I've read...), and you're looking at a situation where if rates go up just 1%, the average new home owner is going to need to come up with an additional $8K / year after tax, so ~$11-16K before tax, in order to not default on their mortgage. With wages being as stagnant as they are in Canada, and the average Canadian being more in debt than they have ever been in the history of the country(1), you can imagine that there will at least be a couple of people who will no longer be able to afford the houses they are in and need to sell it off.

1)http://www.theglobeandmail.com/report-on-business/economy/ca...
You are completely right. If YC moved to a city with a lower cost of living ... now that would be making a bold statement. How about it Sam?
The reaction isn't new this was happening to turkey for years now, post coup it just accelerated and now it's in swoops instead of a trickle.

Erdogan replaced a lot of the officers, judges and key figures in the educational and judicial system over the years, cracked down on the press which lead to closure of many independent news sources and really been acting like a dictator including attempts at altering the constitution Of the country completely.
Mercedes-Benz Future Bus
Your last sentence has an implied assumption that 'third world countries' have no independent agency, that their success or failure is derived primarily from 'the West'.

Isn't it possible that the more direct cause of success or failure are the circumstances and choices made by the people within these countries?
A lot of them are recently sorted out by the governments, by exchanging land.
Braid Cleanup (part 4)
I absolutely agree with you. It was an interesting experience because before you get in the room with these investors, investors that you've seen giving speeches and writing articles, you assume they are somehow these visionary people. Of course they'll ask all the right questions and understand things better than you do.

But after the experience it was quite the realization that most of them had no idea what they were talking about (at least about our space). And if your vision of the world is different than theirs, there isn't that much you can do. Frankly we naively tried to appease them (for example we actually build a "Cherry"-like version of Thumbtack in a weekend to appease the NEA guy), but it doesn't work and they all reject you for so many different random reasons you couldn't even appease them all if you wanted to. You just really need to do your thing and hope you are right.

They won't ignore traction though. Get enough traction and any VC will come around. To the point of the article, I think we were bad at pitching. We didn't have much traction when we raised the Series A but we had the obvious kernels of it. But we talked way too much about what we had done (which we thought was impressive), but VCs really want to hear much more about what you are going to do. And even when we did talk about the vision, it wasn't (and still isn't) anywhere near as sexy as Uber.

Now while Thumbtack was a success for the founders, early investors, and early employees, it still has a tiny tiny fraction of the overall services market. While it is clear that companies that went out of business were "wrong", I'm not sure at what point Thumbtack's approach becomes "right".
But someone isn't. That's the point. These bugs don't go for $10k on the black market.
Show HN: 1-Click GitHub Repo Link Chrome Extension
I am feeling the same with my career right now. Whats your email?
Hackathon mclean, va
> We're talking about REST best practices here, not "let's do RPC instead".

I don't think so. Avernar above seems to argue against REST as an architectural style (RPC being the default as everybody uses it). I thought you were trying to defend REST with your example, and I wanted to point out a weakness in that example.

> There's no reason for the webcam to hard-code URIs, and that's a violation of the architectural constraints.

The webcam has to hardcode some URIs (entry points). Consider that it could be using other services: perhaps a social network to post updates on. Then it must hardcode another entry point URI. But at that point -- and since every resource is supposedly independent and only explicit relations matter -- why can't the webcam treat the "problem report service" and the "update frame service" as two entirely separate services to hardcode? Which constraint of REST does this violate?

In your example, insisting that the webcam go through the entry point doesn't even buy the server a lot of flexibility. You reduce the client's knowledge from 2 URLs to 1 URL -- a URL that you may still want to change etc.

An extra HTTP roundtrip every time can well be an unpleasant overhead. HTTP client caches are sparsely supported and notoriously complex (RFC 7234 is 41 pages long). Rolling your own cache is, well, rolling your own.

And then there is the human problem. I was blown away by a discussion [1] where people reported using cryptography to prevent in-house clients from hardcoding URLs. I was also saddened when I read the JSON API spec [2] -- a great example of REST, I think -- only to discover that most existing implementations [3] disregard the linking aspect and hardcode the URL structure that the spec uses for examples. But this is not a complaint against your webcam example so much as it is a general hurdle with REST.

[1] http://blog.ploeh.dk/2013/05/01/rest-lesson-learned-avoid-ha...
[2] http://jsonapi.org/
[3] http://jsonapi.org/implementations/

> None of this relates to whether or not you need futuristic AI or human intervention. I think from the example, it's pretty clear you need neither for a REST API.

Absolutely.
CHALLENGE

Your task for this challenge will require you to develop an app that helps to safeguard the American people, our homeland, and our values from all threats. The following are some of the specific interests of the Department of Homeland Security:
* Ensure Resilience to Disasters
* Prevent Terrorism and Enhance Security
* Safeguard and Secure Cyberspace
* Secure and Manage Our Borders
95% of people are incentivized enough to not sell to hackers by the incentive of not becoming a criminal.
Actually, you're right. God, what was I thinking. The only potential problem is that implementations that DO implement callcc across ffi will wind up with code that won't run on implementations that DON'T. That would be bad, but not the end of the world. The real problem is that it's unlikely such a thing would be standardized.
Pretty sure that version of Vulkan will be running on top of Apple's Metal.
Hyperloop One Files $250M Countersuit
Judge banned from using WhatsApp by her husband asks lock app in Brazil
No one can. The government chooses not to track it, and it's difficult to do without major resources.

I know that in Toronto there's a lot of casual evidence of empty condos. Multiple buildings are springing up without any need for sewer system upgrades. The lights never seem to be on in most of the units. Keep in mind it gets dark before 5 in the winter. New condo developments don't seem to have grocery stores or supporting businesses.

But again, there's evidence but no one can get any real numbers.

Also owners have an incentive to lie to the government. Getting Canadian citizenship requires spending most of your time in the country for multiple years, but that's hard to track if you come and go on different passports.
Regulations, at least well intentioned regulations, exist to reduce risk to society.

However, risk tolerance is rather subjective. It would be nice to allow people to pay more for less risk and have things cheaper if they are comfortable with more risk. Forcing everyone to the same lowest common denominator forces people who can tolerate the extra risk to pay for more than they need.

Let people have more of a choice. Maybe it can be rated to a certain level of safety with regards to different aspects (wind, fire, flood, accessibility, etc).

When I was poor, I built my own place in a friend's warehouse for $3,600 (mostly lumber and drywall from Home Depot) and about 2 months of my own labor with 1 other person helping. It was a small 2 story structure with 4 rooms. It had electrical, Internet, and plumbing. It obviously wasn't to code but it was completely functional and comfortable to live in. I read up on the different codes and why they existed and chose to follow the ones that make sense from a structural engineering / human safety standpoint, while ignoring other ones that I thought wouldn't have any significant impact on me (handicap accessibility, etc). I also wasn't concerned with how it looked. Exposed drywall. Used melamine sheets as giant whiteboards for the interior walls because they were more functional to me than traditional walls.

If I had to live according to the regulations, permits, etc, I would have been homeless. But since I was willing to skirt the law and tolerate more risk I was able to get by for dramatically cheaper.

I also had to spend time learning how to do framing and construction but that's not really a big deal if you know how to read and can use the Internet.

Then there are those regulations that only exist to satisfy the wants of some politician or their cronies. But that's a completely different issue.
It's a fun read and I always flick through it every time it gets posted, but I feel like it's swimming in anecdotes so I take it with a grain of salt.
Not necessarily - If you have a body of water on the top and the bottom, and two different countries on each side, then there's no spot you can be in 3 countries at once. See: America
I'd love to learn about how these sorts of vulnerabilities tend to get moneitized in black market settings.

Is there much reading available for that kind of thing?
I agree with tracker1 about a top-level object with data+error keys. Always useful to have an "open" / "extensible" object at the top, so you can add extra stuff as needed. Pagination is a classic example, but another one is debug data, such as profiler timings.

I'm not opposed to having meaningful status codes, but I am opposed to 1) overdoing it and 2) omitting success/failure from the body. The only useful status code distinctions are the ones that browsers respect: success vs failure, redirects, etc. Differentiating 200 OK vs 201 Created, for example, causes nothing but headaches. What would I do differently given that distinct information? What if I do a POST to create an get a 200 when I normally expect a 201? Is that suddenly now a failure?

For API use cases, I only use 200 (success), 400 ("you screwed up"), and 500 ("we screwed up"). For HTML responses, I also use whatever 3xx the SEO people suggest these days.
I also have been questioning why at this point you would ever build on ethereum because if its not truly decentralized then whats the point?

If a contract can be updated then its not decentralized so now you are trusting some dev or some group of people. If a contract can't be updated then it will have bugs and you can't trust it....and so on...
My first tango with Blender
By definition those leaving SF are those who didn't "make it". The whole point of being a center that you have the most power over something that people need, controlling access to markets. It's already very apparent for successful startups from outside SV that has to sell through app stores etc.
Now you can get your own verified Twitter profile
I believe the precedent the GP was referring to, to which the parent was replying—and to whom I replied—is a billionaire using the legal system and a case to which he's not a party to seek revenge by bankrolling that case. I see no one disputing the legitimacy of suing Gawker or defending Gawker's disgusting and illegal behavior.
So far it doesn't seem to be deterring them too much either...
Governments also buy zero days.
> Right but it will remove the jerks from the community.

As if the maintainers/leaders can't remove someone from the community if they wish to, without the need of codes.

P.S. By the way, the Rust Code of Conduct [1] states:

> Remarks that moderators find inappropriate, whether listed in the code of conduct or not, are also not allowed.

[1]: https://www.rust-lang.org/en-US/conduct.html
I agree that reading reviews and watching videos are a poor substitute for demos, but what games do you play for 2 hours and not realize that they're not worth the asking price?

Sure, you might realize after 10 hours that it's not as great as you had hoped - but that's still (usually) quite a lot cheaper entertainment (per hour) than buying a CD or going to the movies?

[ed: to clarify, if you had a great time playing a game for 10 hours - even if you then find that it has less replay value, or too little content compared to what you would like - hopefully you've then had fun for 10 hours playing it...]
The TCO sounds like an ugly hack to me, but I'll take it. How would this interact with the magical AST merging? I would assume that languages with different calling conventions can't just merge like that.
The approval process is done manually. I don't know how they plan or will manage to approve random people, which is why I think they won't. It might sound great in theory, but people might be disappointed when they realize how selective the process is.
I'm really disappointed in how the DAO heist was handled. The promise of cryptocurrencies was that they are harder to manipulate than fiat currency. If the fork succeeds (or even if it fails), I think the very notion of rolling back transactions is a step backwards.

The next time there is something like the DAO, people can invest without fear since rollbacks are the modus operandi. Isn't this why people are upset with the financial system? When people invest in stuff, they need to be responsible for the results. As someone who didn't buy a house in the crazy mid-2000s, I am paying the price for everyone else's stupidity in the form of crazy low interest rates (which have fueled record home prices). But who is standing up for me? No one. I thought cryptocurrencies were leading to a better world (or at least one where the system couldn't be rigged as easily). I guess not in this instance :(
Unilever acquires Dollar Shave Club, terms not disclosed
Mattermark Daily – Tuesday, July 19th, 2016
They can but it is a lot easier to remove someone from the community when you can point to actual rules of the community they've broken besides just "we don't like you".

I honestly can't see peoples objections to CoC. If as you say it doesn't actually change anything why do you object?
Yeah; $10 says there's a preference coming "Only show notifications from verified accounts" or "Only allow verified accounts to follow" etc etc.
The overwhelming majority of email is in cleartext, and the overwhelming majority of email users vulnerable to phishing and impersonation, precisely because email is an open federated standard. We wouldn't be having this conversation about email, because the prosecutor would have read it already.

The laughably tiny adoption of GPG, and even TLS between SMTP servers for that matter, should make it abundantly clear that voluntary extensions aren't good enough. A federated system which respects peers' "freedom" to not react adequately to a changing threat profile is somewhere between irresponsible and actively malicious to its end-users.

I, for one, celebrate the death of open standards like email in favor of mechanisms that can actually be improved (i.e. by forcing people to upgrade on pain of being locked out of the network) in response to new developments in security.
A big reason for using HTTP error codes and methods is transparency—you can easily see what's happening from looking at the server log.
I mis-labeled the pitch deck as being from 2011. It's actually from 2008. Described in this BI story as being a copy kept by an MBA student from that period when investors were snubbing them. http://www.businessinsider.com/airbnbs-first-pitch-deck-2015...
Hopefully the GP who asked sees this. Seems a sensible enough explanation of the "how" asked for.
At the moment I don't use Bing for two reasons:

1) it's Microsoft

2) it's not better than Google

I'd gladly use it more if they would fix #2. Google has gotten horribly bad about not searching for what I ask it for. It's been castrated. It insists on returning what it thinks I want, not what I asked for. I know that for 99% of the people that's the right thing to do, but I really hate that Google has given the shaft to power users.
>Your market-rate salary is the salary the market is willing to pay for your labor.

Yes, I understand this. I mean that people are bidding lower than they should - they get fewer goods and services than they could have gotten in cheaper locations with their Bay Area salaries.

This artificially low bid can be understood as people paying to live in the Bay Area (and therefore take a salary that buys fewer goods and services than elsewhere).

In so doing they are granting a subsidy to their employers who would otherwise pay higher wages to location-indifferent laborers.

Why they are motivated to pay to live in the Bay Area is a mystery to me.
Ledger easily handles accounts receivable/payable, though it doesn't actually generate the invoices for you. Personally, I use org-mode for time tracking and invoice generation (invoices aren't even PDFs ATM, though I have had clients that insisted on them), then I add a corresponding transaction in a ledger file when I send the invoice or receive a payment.
You don't solve it without some amount of "take money from the rich and give to the poor".

It's just that the chosen amount being "everything" is a ridiculous idea. People seem unable to think about politics without turning into extremists.
> Sublime looks nice, but not so far ahead of vim that I want to take the time to learn it and pay for a license. I suppose that it's worth a trial, but I haven't gotten around to it.

I use vim these days, but to be fair to Sublime, the license isn't really required. Every so often (maybe every 10 times you close a file?) it asks if you'd like to buy a license, but there's no functional restrictions on an unlicensed copy and no consequence for perpetually ignoring the pop-up.

I wouldn't worry about getting around to it too soon. Sublime is great, and it has a plugin to support normal/insert modes and most vim bindings, but I've found that anything I can do in Sublime I can do in vim, and I can't run Sublime on remote hosts. It's an editor, it's always going to be subjective preference.
RPython is very similar to Graal+Truffle, except that RPython is based on tracing and Graal+Truffle is based on partial evaluation.

There's a nice paper comparing the two approaches and their relative merits:

http://stefan-marr.de/papers/oopsla-marr-ducasse-meta-tracin...
“Mirenesse Cosmetics” Secret Weapon 24hr Mascara Super Long (Black)
Yeah, it kind of sucks. If I had to pay $1.5M for just an apartment I would go elsewhere. But unfortunately, all the decent jobs are in the bay area. I tried looking for remote work but couldn't find anything decent that seemed like a good job that paid decent. As soon as I gave up and decided to widen my search to a job that required me to be in the office every day I had a huge abundance of companies I could work at.
This is beautiful! I need integrate this into our pre-production environments like yesterday! I have long wanted something like this; some of our internal APIs abuse HTTP response codes and one of our mobile app sends an invalid User-Agent string. Pointing folks at the relevant standards passages and trying to explain what they're doing wrong, and why it affects other real-world applications seems to get acknowledgement, but often no change because by the time we've caught it, it is out in the wild.

The report format is beautiful too — I love that hovering highlights the relevant portions of the request, and thank you for the explain link; I loathe linters that offer no rationale.

Also, I love that the example taught me something too; I did not know some of these.

Also, very interesting that one of your examples is the Pragma header. I did not know that it was defined for requests only (and your explain link explains its rationale clearly enough that I now agree with it). I just implemented an OAuth client, and that standard requires it on responses:

> The authorization server MUST include the HTTP "Cache-Control" response header field [RFC2616] with a value of "no-store" in any response containing tokens, credentials, or other sensitive information, as well as the "Pragma" response header field [RFC2616] with a value of "no-cache".

The very RFC it cites even notes that this is unspecified!
Sure they can. Insomuch as they already don't operate "in" Brazil, but traffic to and from WhatsApp international servers does originate and terminate in Brazil.

Unless WhatsApp traffic is explicitly denied at the ISP level (this order) their packets can float all over Brazil without say-so. That's the Internet, baby.
The SF Bay area is exceptionally small in many ways.
The title is correct. It would be woefully incorrect to say "turkish government". Emails from the party email server have been leaked. If it had been government email servers, then government would be correct.
I wonder if this means they will stop using the removal of verification as way of punishing controversial users.[0]

[0] https://twitter.com/nero
There's also the issue that people who already own homes won't vote for anything that would make living in the bay area cheaper because then their homes would be under water financially.
When someone engages in dehumanizing language towards a group of people and their baseless characterization is satirized for being reductive, you're saying that the problem is the irony, not the bigotry?

Obviously it's your treehouse and you have the right to set whatever rules you want, but this interpretation of civility seems tilted towards creating an echo-chamber that nurtures increasingly authoritarian views among an increasingly homogenous community.

Or is there no way to couch that opinion in such a way that it won't be considered uncivil?
When a crow dies, the other crows investigate the cause of death (2015)
Lack of meritocracy at Facebook