skysight-inc/HackerNews huggingface dataset:
This doesn't make any sense logically. We don't need to pay people to prevent them from committing felonies. The suggestion that we do is actually pretty offensive to people who find vulnerabilities. Most of us --- in fact, the overwhelming majority of us --- are not torn at all about whether we should sell flaws to the black market.

(This is of course orthogonal to the fact that the black market does not want these vulnerabilities.)
I don't see how this would have prevented this problem. The issue was not that regular expressions were "too hard" for the lastpass team, but that URLs are hard to parse correctly. To put it another way, if you don't know how to parse a URL correctly, you'll probably write an incorrect parser no matter what parsing tool you use. That's why you generally shouldn't write parsers for URLs.
New York seems in the range I thought it would. Bonuses and stock aren't factored in, as someone mentioned. I imagine they might not over that type of thing, though.
DX13. Now what?

And aren't UWP apps a walled garden (apps need to be signed unless you enable developer mode, which has all kinds of side effects, requires a Microsoft account and can be revoked?)?
Closing Electronic Music’s Gender Gap, One Synth Class at a Time
Not quite. You can block ads, but you can't block broken APIs. ;)
Listen to the whole message. It's about the crazy people who end up changing the world. Hence proven and famous.

(Meanwhile, from a storytelling perspective, it would be needlessly distracting to have to simultaneously educate people about some quiet unsung heroes. Your implied alternative version would be unworkable.)
How much would you trust that person? Enough to potentially risk your business on them?
well I would think school buses and even metro transit buses would make better options. School buses because they travel fixed routes, have specific points they will sit awhile (schools/depots/etc) and the fuel price fluctuations clobber systems.
You've been downvoted, but the underlying theme of your comment is that most of the time OSX on a MBP for example, just works. Is is perfect? No. But, no Windows laptop I ever used prior to my MBP operated with fewer issues. Linux on a laptop was a joke. Maybe both have improved substantially, but instead of waiting I moved on to get work done.
100 years from now, our cities will be much quieter.
Marsbot Is Dreaming of You
The first track on the album was made entirely in csound.

https://twitter.com/bt/status/330843540076769281
And if other people have control over the resulting containers in that circumstance a wildcard wouldn't be suitable either, unless it is only used for HTTPS (and the local LAN/VLAN can be trusted) in which case you can put a proxy in front of the containers to handle it to avoid each container needing a copy of the private key.

I can see why limits are in place though, it protects them from abuse by badly written integration code and actions that are less accidental. Perhaps they'll lift the the limits a bit as the service grows and stabilises. Or introduce a cheap-but-not-free service for people requiring something beyond the standard submission rate limits.
> Why the reluctance to add ALL SOURCE REQUIRED TO BUILD YOUR APP to your source repository. I don't get it.

That would make the Git history incredibly messy to work with and makes the repository much larger in size, making work slower. This kind of "monorepos" are known to be a pain in the ass with Git.

However, Git submodules is pretty much adding all the required source code (or at least pointers to) in your repo, and pinning them to a specific version.

The network connectivity issue is solved by having local mirrors.
Once you connect your box to the Internet, installing malware affects everyone.
>Because these are different tools.

In my opinion, that's not a valid answer. httpd and apache2 are exactly the same software package, running on the same OS at the same version, performing the same function. The only reason yum, apt, pacman, etc exist independently of each other is because the maintainers of each package manager are too stubborn and prideful to see the value in combining their efforts. It's obvious that apt is no better than yum. If it was, Red Hat would switch to it, and vice versa.

To reiterate something I said in another reply, these are things that seem perfectly natural to a Linux admin but are unacceptable to anyone else. I've seen 10+ year experienced Linux admins log into a new box and run apt-get install and see the response "command not found". Whoops, forgot it was a CentOS box.

I love bash and the Unix core utilities, but I dislike the way Linux is developed. I know Linux because I use it every day for my job, but that doesn't mean I have to like it and all of its idiosyncrasies.
Seems far-fetched but I can see Microsoft slowly deprecating Win32. It would be similar to when Apple deprecated Carbon, only slower: they'll stop adding new features, they'll tell developers to avoid it for any new development, etc.

They'd have to be really, really careful going down that path, though. Microsoft's biggest advantage in the OS landscape, aside from preinstallation deals, has long been the broad range of established software that is exclusive to Windows. It's tough to migrate your business to Apple laptops or Linux servers or tablets in the mobile workforce if several key applications that 1,000 of your staff have been using every working day for a decade don't run on those other platforms. It's a closed loop for software developers as well, because as long as your customers are almost all on Windows, there's little benefit to developing for other platforms concurrently.

With so many business applications now offering web-based access, that exclusivity has already been eroded, and that process shows no sign of slowing down. If Microsoft were to nerf the long-established Windows APIs that "heavyweight" software like graphics and CAD packages rely on, that would force the redevelopment issue for those software developers, and I'm not sure Microsoft would like the long term results. They might wind up with exclusive control of the main delivery channel on Windows, but that only matters if the developers and users are still on Windows at all. With gaming in particular, we've seen in the past that one or two smash hits can be all it takes to establish a new platform, whether it's one of the consoles or mobile or just puzzle games via Facebook. With the resources available to Steam, that has to be a scary prospect for Microsoft.
How would you convince people to stop eating apples?

One step in the right direction would be to stop (literally!) fighting to make apples as inexpensive as possible. We could allow the market for apples reflect the true costs of their discovery, harvesting, processing, and transport, with no subsidies.

The price would likely be significantly higher, and many people would curtail their apple consumption of their own accord.
Seeking medical attention may be worthwhile, at least it may gauge severity better. You should be able to do rehabilitation and strengthening exercises on your own. You can easily purchase Thera-Bands (or any brand's resistive bands) and other equipment, follow videos online, and integrate the regimen into your daily life.

The medical attention / physical therapy can be a great start for learning about the situation and learning exercises (especially if insurance can assist in payment).
> Google just makes sure that most Androids have the Play Store

I smell monopoly. They have powers to affect most of a market. Whether Google is abusing that power (thus, illegal), I'm not sure.
Ok that article is a bad example.

Here is a better example (ignore the cheesy setup, the actual analysis is very insightful into Trump's media manipulation tactics):

https://www.youtube.com/watch?v=55NxKENplG4

If you look at his blog posts written during the primary, he was saying quite early that Trump would win also.
Also, wipe clean the existing server after the Postmortem. Even if fairly sure that the server can be cleaned it's never safe to re-use a box which was compromised.
I worked on a project that had Angular + RequireJS too. I don't think having RequireJS added anything at all. It was just additional overhead - every module we added caused at least 3 files to change. We eventually ripped it out and just dealt with Angular's own module system.
What makes PokémonGo so Addictive?
Well to be fair, one has found them. In parallel to doing damage control as mention before i would certainly contact the party and friendly invite them to share more information in exchange for a token of good faith (discount or a gadget). If you feel good about it, offer a job with reward to fix it.

If unsure about how much a reward should be, keep in mind how expensive it could get without.. often a costly chain-reaction of disasters.
You seem to be arguing that if there were an asteroid that's going to collide with the earth, we would all ignore it.
There's not much insightful advice to be given, chances are this guy could've easily traversed to every box on their network and set up a plethora of backdoors.

Without a "security expert" there really is nothing they can do.
Ask your employees which one is trolling you? Maybe you will get a giggle and find out it was a prank.
Sounds like the flaw is having business analysts do the requirements analysis instead of systems engineers. It also assumes you are creating a standalone application and not a piece of a larger system.
Foursquare's bot is the revenge of Clippy
This "we've gotten this far!" argument applies to global warming as well, doesn't it?

I don't believe the proposition that global warming is not a problem because human ingenuity will fix it.

Our land and oceans are already straining under our population load.
I picture him glowing with a strong sense of superiority while sitting in his bedroom in his parents' house writing this.
tldr; this article is arguing for skeuomorphism.

Actually I'm not sure this isn't a satire. It made me rotflmao. But also, it's good to see that there are people out there (perhaps many, perhaps most!?) that see the world of good design in complete opposite.
How to Get into a Rhythm at Work If You Can’t Stick to a Schedule
On the boundaries of GPL enforcement
"Open Source" developer does not get the point of free software.

News at 11.

P.S.: AGPL isn't the GPL.
You are already trusting that person enough to risk your business on them, if that server is still up and running after finding the security hole.
I think this could be a big deal depending on future politics. I would not be surprised if Manhattan in 10 years or so only allows etrucks over the bridge (with certain exemptions of course).

If that happens there could be some interesting but boring (oxymoron intended) business opportunities like transfer stations at the borders of urban areas (switch engines).

This could also dramatically improve the safety of trucks as there are still an enormous amount of trucks that are not automatic and do not have antilock breaks (or whatever the analogous tech is these days).

By mandating electric engines the safety improvements could be had at the same time.

I like the name: eTruck.
This is where it'd make sense for the battery to be removable. A truck company could keep a bunch of charged batteries at their warehouse and swap batteries out every time a truck comes back for a new delivery.
Yeah, but why are red/yellow/green "universal" colors for driving? I don't think it's because of some innate human love for those particular meanings of the colors. In fact, I'd bet that in a society without cars the red octagon would not be so "universally" understood to mean "stop."
Location, location, location; I live in .nl and with about €55k, I'm at the upper end of the job market here (14 years experience).
I have bought/used a lot of high end ($2000+) windows notebooks: acer, asus, MSI. The trackpads all suck. Seriously, it is insane - macs had a working mouse in 1984!
Chat about front-end on ponyfoo.slack.com
I don't really understand why the title was changed to this from my original or the title of the post, since it is less informative and more inflammatory...
I would worry less about this, and more about where did he find the root password and ip. Change other passwords too, like email.
It's not just about that server though, who knows if the other servers were compromised?
It certainly would seem like it's your fault if someone overhears a sensitive message, if you know it's a sensitive message. But what if you don't know it's sensitive? What if you thought your last message was something you wanted to share? Or, what if your doctor transposes your number, and calls and leaves the message on someone else's phone? Even if you've opted in to have information exposed on your voicemail, you'd still have a case for a HIPAA violation, in that case.

You're right, of course, that it's your information, and if you want to have it treated less sensitively, that's your decision. But your doctor will likely want no part in that, and will probably prefer wholeheartedly that you do what you want with that information once it is in your possession.

What would be interesting is establishing a secure communication channel for medical information like this. For instance, some sort of encrypted email, where HIPAA violations were not so much of a concern, because you could reasonably assume that no one could easily accidentally send the information to the wrong client, and that the client had sole access to the information. Such things come with their own concerns, though.

There is probably a better way of doing things, but I don't think it's all that hard to remember a code word. Especially since you can leave a callback number, preventing the client from needing to know who the code word was from.
thanks for the followup :) and especially for the clarification about private keys (and MAC, HMAC) for the signature.
If manufacturers were smart, they would make them easily moveable by forklift.
Erm, as a developer if I use a package manager that requires me to mirror the original repo then I don't think I'm going to use it at all. I love the idea of git submodules for handling dependencies, but the assumption here is that all packages use git. This is a minor, but definitely a fallacy when it comes to using some of the packages from Google, mainly legacy.

Edit: IMO it's a deal breaker
My company has transparent salaries since the beginning 14 years ago.

Funnily, in the words of one of the co-founders, it's more a mere accident than a clear will from the beginning : "we did not really plan it that way, but back then, it was easier to let the document listing the salaries open for everyone than restricting its access to a few persons" and they decided to keep it that way ever since :)
We always ask a new recruit which salary he/she wants publicly (by that I mean in front of a not insignificant part of the company, we are 50) and show them salaries of other people in case it does not really fit.

We are also experimenting with allowing people to choose their salary after 3 years in the company (there's a process and some caveats of course).

And we did not really see any downside so far
What account did they log into?
You can dd the bin file to a USB stick (bin file is 5Gb so 8Gb stick needed) and just run a 'live' session without installing. Watch out for the installer screens when you boot from the stick!!

I used the product for the same reason: to see what ChromeOS was like.
Nice step. As they say, there's a couple of big advantages to electric for trucks: low noise and emissions are advantages for everyone around them, and the high torque of electric motors at low speed is convenient for the driver.
Are you a native english speaker? I don't think saying "sorry pal" is a bannable offense here.
It looks like a converted-to-html info manual. I've never found the next/previous parts quite intuitive (because they go down the hierarchy and then back up), though up at least makes sense.
You're being intentionally obtuse. They chose specific people to aid the subtext of the narrative. To provide a visual shorthand to help clarify what they're saying. Oh sure, you could include Adolf Hitler in the list of people crazy enough to think they could change the world, but that's not relevant to their statement of purpose.

(Sigh, Godwin.)
At that point, yes, it's too late. The issue here is that their developer console is also the chat and that users can receive external messages from anyone in that "console". If you want to have the chat be the console, you really need to make sure everything is safe.
ProSEOexpress.com
Do you mean small vans like this one [1]?

That's a significant electric delivery vehicle fleet, though from almost 10 years ago -- I don't know what happened since.

[1] http://www.j-sainsbury.co.uk/responsibility/case-studies/arc...
I use F-Droid on Android. Cydia also exists for iOS. FWIW.
> Can we devise a more meaningful icon? Can we break with convention and just choose a different icon that's recognizable but more aesthetically pleasing or consistent with our style guides, even if it's still meaningless?

I guess I don't see the point; you'll just confuse people who already know what the old icon means. Our letters aren't particularly brilliantly chosen (arguably other systems are more logical or easier to learn), and yet who wants to replace them?
Because there are far, far too many counterexamples for the hypothesis to be true in any useful sense.
> and suggesting otherwise is a grave insult to hundreds of researchers who would never dream of attempting (and, of course, inevitably failing) to "sell bugs to the black market".

No, suggesting otherwise is saying that a bounty program with high enough rewards can reach both legitimate security researchers and sketchy folks. This is in no way a slight on the first group.
Show HN: Happiness visualization of all countries in near real time
These salaries seem SUPER low.
Engineering manager with 15 years experience < 150k?
Try 200+k here in NYC.
Sigh, trading vs. investing... Also if you make a statement like that I am sure you are unfamiliar with his thesis and methodology.
True, you don't really want that stuff to fall into the wrong hands. NASA seem to like RTG's though and used them for New Horizons and a few others. Apparently they share since it's used in Cassini as well.
As the saying goes: you first.
MM yes it give me £120k for a London role - where do I sign up :-)
Profit sharing is like someone renting out a house and giving you a percent of the rent. If they sell the house, or if no one rents, the gravy train stops.

Equity is like someone giving you a percent ownership in a house. It won't put money in your pocket now, but you'll get paid when the house sells, assuming it ever sells, and for more than any mortgages against it.
GitHub notification spam as a result of forking UnrealEngine
I am not sure if it is getting complicated in terms of libraries and frameworks. We had prototype vs jquery wars, or gwt, dojo or yui discussions.

I bet the problem is Github! I mean, we are the victim of their success in solving one of our bottlenecks: collaboration. Now it is not only easier to start a project but equally easier to get followers, adapters, and contributors.
Something I've been trying to figure out lately that I'm hitting dead ends with: I just want to deploy a few containers to a single server.

I don't want a swarm or high availability, I just have some rails containers in dev that I want to run on a medium sized droplet. But there's nothing really out there on how to do this in a straightforward way.

I'm at the point where it seems like I can use ssh kit and docker compose to sort of do this, but it won't be zero downtime deploy and I have to script it up. It looks like there's a docker machine option, but I'm currently using docker for Mac so I'm not even sure where to begin for that path.

Docker is super powerful, but we don't all have 500 host deployments. I just need something quick that I can toss on a $20 vps easily.
Yes, but the increase for 0 years vs 20 years is very low, as is the difference between 1 and 5 on the skill levels.

They appear to have a decent entry pay but not scale very well as you go up from there. As an example: it shows for an SRE with 10 years experience and a 5 for skill, a salary of $145,400.
I know, right? I can't believe that my message are getting downvoted so much.

Yes, the user has to be tricked into writing a piece of code into the console. The problem here is that this piece of code shouldn't have been able to be executed at all. Who in their right mind would allow incoming messages to be parsed? They should have caught that bug in development!
UK Security services spied on 20 celebrities in questionable operations
Apple v. Samsung was over chromed rounded corners on phones; a series of cases in multiple countries, and this war between the two still isn't over.

So yeah, they've convinced multiple courts in multiple jurisdictions in multiple countries that yes, consumers are, paraphrased from their words, "pretty stupid and get confused easily."
Now let's bring that salary estimate back down from outer space. $200,000 per year TAKE HOME, is not realistic, except for the very top percent of developers. And I'm talking the very top.
It appears Visual Studio Code might become the future mainline VS, but that's an Electron app.
Dalio's "by and large" indicates that he feels it's generally true, not universally true. I.e. a statistical trend, not a hard and fast rule. How do your uncited counterexamples show that a statistical trend is not true in any useful sense?

Moreover, why isn't it reasonable to treat it as a hypothesis that is true in many specific contexts? Should we also discuss the personal awfulness of people who believe in normal distributions as a useful principle since not all data is normally distributed? "Racists and child molesters sometimes use normal distributions to model the world!"
Oh that's cool, I'd never heard of it. I'm surprised there doesn't see much momentum in the area, although maybe there is a good practical reason for it.
The point seemed to be that killing existing Win32 APIs would hurt Microsoft more than it helps the UWP, but for gaming the only thing that needs to happen is a new graphics or peripheral API that's UWP only and is substantial enough for developers to drop Win32 support.
I don't dislike your suggestion in the least, but it's a bit disingenuous to suggest that a routine like StrongLifts requires an app, spreadsheet or trainer.

You just do 5 sets of 5 reps for a couple of exercises... that's really all there is to it.
It's less of a problem in dense urban areas, where distances are short and there are many opportunities for regenerative braking.
> anti-science sediment

Your argument rocks, but something seems to be eroding it...
Facebook's really big plans for virtual reality
> Once they identify videos that might contain encrypted data, they can then begin to work on decrypting that data. The amount of video data on the internet is massive and it is growing at an exponential rate (the zeta-bytes of data they would have to sift through, I cant even imagine the headache).

um. they already do that. They scan all the uploaded videos for copyrighted audio, fingerprinting and comparing the uploaded audio of a bajillion videos against 1/2 a bajillion songs.
Upthere raises $77M to put a new spin on personal cloud storage
Shenzhen: The Maker Movement (Part 2) (feat bunnie huang)
Hell even the windows explorer shell still uses Win32 even in windows 10. Win32 ain't going anywhere anytime soon. And with windows 10 they just expanded the amount of Win32 APIs that available for UWP apps. Now people are using them even in the UWP apps and now microsoft would somehow remove it?

Also they just made side loading UWP apps easier by defaulting to the option to allow it (previously you had to go to control panel to enable it). Also stuff like this https://github.com/aL3891/AppxInstaller exist which make .msi installer for an .appx package.