skysight-inc/HackerNews huggingface dataset:
Well clearly they're brilliant at creating free platforms for advertising. They just seem to be poor at doing anything that requires explicit payment.
http://casperjs.org
Mir Mine
I'm somewhat distantly familiar with a British opera company. The usual rule is to do one or two mainstream bums-on-seats shows which are more or less guaranteed to be successful, and then fill in with less standard repertoire around the edges.

So sell out shows do happen, at more or less standard prices that are surprisingly affordable, and much less than big name pop artists charge for their tickets. But the sell out shows are more or less at capacity. There certainly aren't thousands of people willing to pay five times as much for a seat.

And in fact there is absolutely no way that income from ticket sales would be enough to keep the company running.

The rest of the money comes from sponsors and from Arts Council funding. Getting money from both is a highly skilled full-time job.

This company happens to be very good at fundraising, which is why they still exist. (Actually they're very good at everything, not least the artistic side.)

Would on-demand pricing work? Absolutely not. The audience is older and fairly faithful, and they tend to feel they have a personal relationship of sorts with the company.

Variable on-demand ticket pricing would completely destroy that relationship, and I would be hugely surprised if it didn't also make sponsors feel like less like contributing.
A Mob for All Seasons
I disagree. The linked google page ( https://sites.google.com/site/bughunteruniversity/nonvuln/op... ) makes the argument about the mouse hover tooltip, as if that is the only risk of an open redirect.

This is much worse, this is a redirect after login. You just logged into google, you entered your 2FA code, and then the next site you arrive at you damn well expect to be google.

Additionally, the OP is correct in that there is a whitelist bypass happening here. Why bother to whitelist *.google.com/ if you can bypass it with a redirect.
Agreed. The list of companies is good data and if you're in the security space, the kinds of capability CIA is trying to foster is interesting too.
Suing Facebook for knowing something people told them ought to be interesting. Please tell HN all about it if you ever pull the trigger.
The Fastest FizzBuzz in the West
All the effort put into Babili could have gone into that branch though, either through feature implementation or polishing so it's production ready.

It's a wrong assumption to make that free software can only be developed centrally by a project owner.
I totally agree. I don't even see how the impact is even more than the open-redirects which already exist. You could do this exact same exploit against tons of providers (Facebook, Twitter, etc) via the standard OAuth flow and the 'redirect_url' parameter.
THROW UP PRANK ON MY BOYFRIEND
That's just how science is. It doesn't need to be driven by a business or human "need".
“We hope that our decision to withdraw the Zika submission voluntarily is further evidence of our commitment to engage positively with the agency,” said Dave Wurtz, Theranos’s vice president of regulatory, quality and clinical affairs.
It's not an "easy fix", there could be (and probably are) thousands of different endpoints that can be redirected to after login, whitelisting all of those just doesn't make sense.
You've been using HN primarily for political and ideological purposes. Please stop doing that. It's not a legitimate use of this site; it poisons the spirit of collegial curiosity that we hope for here. If you want to do political battle, please do so in other places.
Wrt the judge/legal process - I wonder what will happen when it turns out that the footage can't be removed. I could see the fact that it can't really be removed being used against KimDotCom by showing something like "the irreparable" harm he did by allowing users to basically upload pirated content that would never truly disappear. So maybe the judge is clever and giving KimDotCom just enough rope to hang himself with?
That's what I'm saying. Games-on-blockchain are a completely non-starter.
It was a great interview. The story about how Airbnb started is interesting. I'd have laughed at renting air beds during conferences, too. I'd see potential in it but not billions. The pivot and cereal gimmicks were excellent examples of her advice that determination is most important. Also, remember that most politicians or Fortune 100 CEO's didn't get there by being the smartest. They also got there with a combo of understanding people, focus and determination. Ruthlessly so in many cases.

So, the goal was increasing innovation across the board rather than making money. Hmm. I've previously brought up that I'm anti-VC innovation because many just get acquired by big companies that shelve it, esp if patents are involved. I also know they're interested in exporting or improving Y Combinator. I think it would be interesting if they modified the model so the software had to be GPL, the business had anti-lockin tooling like data importers, and/or patent suit immunity for non-profits or free software doing compatible offerings. These kept true even after an IPO or acquisition by legal means. A combo of techniques like these would allow continuous stream of competition while preserving most of worth of company due to its brand and first-mover advantage.

What you all think about that or another modification of YC model to discourage monopolistic practices, lock-in or shelving post-acquisition?
SHIT I HATE ABOUT WORKING FOR FAST FOOD RESTAURANTS – Mariah Dominic
I have a comment: kill yourself.
New Series: Getting Stuck While Doing Test-Driven Development
It isn't a guarantee of that when you tie it to an hourly rate. Anyone who isn't delivering enough value after the rate hike is going to have their hours cut and is going to have a harder time finding a second job, which is something a lot of minimum wage workers have to do thanks to overtime pay requirements. I'm not saying this as some upper middle class libertarian either, I was still working these jobs just a couple years ago. A 40 hour or less work week for me would have kept me in that position nearly indefinitely. Yet raising the minimum wage much higher than it is now would price the people who are most in need of employment out of the labor market. I know you're probably likely to cite recent wage hikes in certain cities as evidence that this isn't the case, but those are areas where a dollar has a much lower purchasing power than it does in most of the country. A national minimum wage of $12 an hour would have made a huge number of the people I'd worked with at a minimum wage job a liability rather than an asset.
Google is not "taking on Uber." An important point is that Google is not making money off the payments for the ride, which presumably all go to the driver.

For the driver that means defraying the cost of a commute in return for going a few minutes out of his way. True ride-sharing, not a gypsy-cabs-plus-reputation network. It's more akin to a transport-specific Splitwise than to Uber.

What Google gets out of this is a real-world model of on demand automated transport patterns, pricing, demand, etc.
The WHO are also the people who eradicated smallpox.
I've never heard of a university having mandatory PE. Sounds ridiculous to me. University students are adults, they can decide for themselves if they want to exercise.
Of course they aren't.
These two things are not incompatible. Yes, antibiotics are awesome. Yes, we messed up because these days you can convince your doctor to give you antibiotics for viral infections (they will tell you it's useless though) and take as little as you want of it, and create more resistance problems.
Not to mention since when the fuck is Carnegie Mellon and Pittsburgh in the Midwest?
So both parties are physically/emotionally attracted to each other lets say but they're both submissive, or one has HL and the other LL (/r/deadbedrooms if you want more), or one's into monogomy and the other is polyamorous.

Just a few examples that confirm it's not a 'myth'.
Seriously. This is like complaining that someone called the fire department, and your house didn't burn down, so it was clearly all for nothing.
Eh. He and you have different lifestyles. I also can't fathom there lifestyles of the shepherds back home that go without human contact for months at a time, but they have a lifestyle.

Just because you don't want to switch your lifestyle, or we trade convenience for exposure, doesn't mean that stalman's lifestyle is wrong.

It's just different choice, and we are comparing apples to oranges here.
Not quite any city. Edinburgh taxi service is legendary - typically under 5 minutes wait time. Lord knows how.
This is only the first part. It shows an example of a naive application of 3 rules of TDD. Next article in the series will reveal what is wrong with the result and final article of the series will reveal additional discipline that prevents one from getting stuck in the first place.
This is a good point. Having been in both positions, a startup that has taken on lots of funding, and going the DIY route, the DIY route has been much more effective.

The business model would need to support it though. The business model taking on lots of cash needed a community to be effective and would have been extremely difficult to achieve without those resources. Being able to self fund and find paying customers early is not always an option.
An upregulated immune system is often the cause of autoimmune disorders, and is an inflammatory state (with health impacts as well). "Boosting our defense" is not a zero-risk strategy.
Constructive feedback and shares are warmly welcome :)
> very friendly people

I would have to strongly disagree that Arizona has "very friendly people". I find it to be the most openly hostile state in the nation, and they seem to pride themselves in that.

Arizona is pleasant in other ways but friendliness is not one of them.
To get that exploit you'd need to send a faulty URL and get the user to follow it. You could just as easily do that with a faulty URL and no Google login.

The only risk is if the redirect can access your login session/credentials. If it can't, no exploit.
The cosmic distance ladder
I loathed PE in school. If my university would have required it I probably would have gone elsewhere.
Gonorrhea is not a gut pathogen. Nor for that matter is MRSA.
Big Data and Mobility: How Enterprise Resource Planning Is Being Reinvented
> automatically execute an arbitrary file download

Your phrasing could easily be misread. A downloaded program would not automatically run.
America’s Other Drug Problem: Copious Prescriptions for Hospitalized Elderly
The southeast is really nice, I would agree.
Every commercial password manager is a security risk. Each company's product uses official applications (whether on desktop, mobile, or browser) provided by them. The applications are in theory coded to keep cleartext credentials sandboxed and unavailable to the company. That simple fact is a) not a guarantee - applications are binary installs so you have no idea what the application is really doing; and b) even the most secure application is a single accidental or intentional software update away from leaking/stealing the entire unencrypted contents.

I don't know if LastPass is the same, but 1Password has a browser "application" (regular old web page hosted on their servers) that keeps your credentials in the browser's local storage. While they technically don't store your credentials on their servers, that web app is a ticking time bomb for a cross-origin attack, someone managing to slip in one line of javascript in a commit, or any of your browser extensions/addons being compromised.

If you're reading this and are a software developer, think back to all the horrid code and glaring security holes you've seen at most companies you've worked for. Then consider that the type of developers and managers who are rushing deadlines at these password manager companies are no different. These products are not being designed or developed by top security professionals, but rather by everyday developers - most of whom likely know very little about encryption and security outside of what their language of choice's libraries make easy to use. Even if a password manager were to be written exclusively by the single best security professional on the planet and audited by the next top 100, again there is no guarantee for there to never be an accidental or intentional update or hack.

Consider what you are storing in a password manager. Full access to banking, including your life savings? Logins to your government's sites with sensitive data? For most of us, having a single moderately or critical account hacked would cause havoc. Imagine what happens if someone ever gets ahold of the entire contents of your password manager. It's identity theft taken to the maximum possible extreme. Two-step authentication (a la Google Authenticator) is an additional layer for many accounts, unless of course you're using something like a combination of LastPass's password manager and their separate 2-step auth app, in which case that one company exposes you to a single point of total security failure.

The idea of a commercial password manager being run by an everyday software development shop scares the crap out of me. I won't touch them with a 10-foot pole.
I tried another ES6 to ES5 compiler - buble. But it's too buggy to use right now. I'll revisit it in a year.

https://gitlab.com/Rich-Harris/buble
CEO needs to go to Jail. I hope you and Penny make sure that happens.
That sounds tedious, not necessarily difficult. I wonder if there is a technical challenge that goes beyond the tedious work of going through possible redirects and whitelisting them
That was Terminator 1 though.
If you're a marathon runner, flat is not a bug, it's a feature. (Which is why running marathons in Chicago is kinda awesome.) And for me, fwiw, the miles of running path along the lakeshore are inspiring.
Garry Johnson will be doing a reddit_AMA on Sept 6 at 9pm ET
I thought this was going to be about slicing a rectangle out the center of the cake and pushing the two new halves together[0].

[0]: https://youtu.be/wBU9N35ZHIw?t=131
Is it true that you don't actually need "Roundup ready" weedkiller? Could you use plain old glyph instead?
> then the next site you arrive at you damn well expect to be google.

Actually, if it is an untrusted URL, I'm not sure why I'd expect that.
Waze Carpool is fantastic... for the 0.26% of the US that lives in the Bay area.
And in modern browsers/OS not even after you click on them, until you clear a "yes, I know this is risky" dialog.
The simple fix would be for google to show their own page after successfully logging in. On this page they would tell the user they are about to be forwarded to another page external to google.
Part of the problem is with the codes that are required for homework.

A class that I'm taking right now has a code for $110 and a code and textbook for $135. So the textbook isn't really worth very much secondhand. The code is the only required part of the class and is essential for the homework.

After the basic GenEds and weed-out classes are over there doesn't seem to be that much use of online grading. Possibly due to the amount of students that are left over at that point. Then you have more leeway on buying a used or earlier edition.

In my Chemistry class there were 600 students and we had to purchase a code for the online homework. I've been told that there is no other way to grade that much homework.

Non-STEM (like English Literature) classes seem to have less of a problem with purchasing codes for homework. The English Literature classes I've had in the past just require you to read a certain book and write a paper on it. But there wasn't any problem getting an older book or a used book.

Also if you need to do problems out of the book you need to have the right book to do the right problems. The professor will tell you what chapter and what questions but not what the text of the questions. Though you could copy the questions from someone else's book.
Fair voting is almost exactly analogous (I think it is even the same math).

I had a fantastic math teacher in high school who showed how it is fairly difficult to make any voting scheme fair.
Washington State specifically doesn't allow tipped employees to be paid a lower hourly wage!
For people that watch it will be two thoughts. First will be the amazing number of things the prosecution will say that can't be proved, but they throw them out there to see what will stick. Second is how very boring court trials really are.
Replace execute with 'initiate'?
Detroit – History of a Single Block, 2008 – 2016
But the entity who decides to use the book is pretty much the same as the entity who budgets the money for the book. In a university, the students pay while the professors/departments choose.
110k to 120k for a senior dev is considered going through the roof?!
Yes, I have. I spent time living there.

I like not having to own a car.
Aha, many thanks. I read the story and missed the link....
In BC, at least, liquor servers have a lower minimum wage than the norm, as they're "expected" to make up the difference with tips.
Agreed. Open redirect aside, this is simply social engineering; someone convinces the victim to navigate to a crafted URL hoping for some eventual exfiltration of credentials. This kind of issue is a good demonstration that it's not (just) the payload of the URL that's important -- in this case the deception may be more difficult to spot -- but also who's asking to go there and why.
Yeah. I realize the shell company thing, but I also seem to remember them talking about brands being differentiated from Google, but every announcement continues to be the Google brand.
Edit: maybe there is some confusion. I'm talking about minifying the tooling, not end user code.
Evolution of Computers
The Pitchforks Are Coming for Us Plutocrats (2014)
Trying to think over my 5.5 year degree in Comp Sci and Politics...

I think my AI and Algorithms classes may have used some preprepared slides for Russell and Norvig / CLRS. My Theory of Computation lecturer set assignments based on questions from the Cindarella book (which initially bit a few people like myself who had imported "international editions" from India where they swap the questions around subtly). Some of our first year maths courses (though I don't think they included the ones that I took) use MyMathLab.

Those are the only times I can remember seeing those extra textbook resources being used during my >5 years at the Australian National University. In the courses that I tutored/TAed, we barely touched the textbooks at all, let alone even thinking of these extra resources.
I realize CMU is in Pittsburgh, but that's still pretty far East as far as the US goes.

Buffalo and Rochester are also closer to Cleveland than the coast, so I'm not sure that's a great metric.

Anyway, always interesting how terms differ among people
Fitness is a critical element of mental and physical well-being

I disagree. It may contribute, but it's not critical. I haven't intentionally exercised in decades and my well-being is fine.
Any citation on that?
74-year-old Lola Cal... had a long history of health problems, including high blood pressure and respiratory disease. She was in the hospital with pneumonia and had difficulty breathing. Her medical records showed she was on 36 medications.

This would seem easily solvable by software, but electronic medical record systems are too often islands -- without bridges connecting them. So each new specialist she sees doesn't know about all of her prescriptions.
> at you damn well expect to be google.

That's not really true though. Google serves as an identity provider providing login into 3rd party websites. Plus there's also OAuth prompts when 3rd party services want to use your Google data.
You forgot to include SF itself which adds another 22950 jobs.
After the first or second semester I learned to buy (or... cough... acquire) the book when needed.

It's amazing how many books are listed but never get used... and it's amazing how easy it is to get most books if you know where to look. It is hit or miss (some books are impossible to find), but its amazing how much money I've probably saved.
That's an interesting note I'd never heard before. Never spent more than a few days in either, but I guess I would say it's more Detroit than Philly.
Jessica Livingston sounds very authentic. Even listening to her inspires me to work more.
That's a US-centric weird custom. Not the case in many other countries. I some places (Japan, some South Pacific Islands) tipping is often considered downright rude.

Also try getting Scottish people to tip with game theory and see how that turns out..
I much prefer this system too!
I don't understand the actual science well enough myself to explain, but my understanding is that there are lots of limits to do with optics, the behaviour of light over such distances, the wavelike nature of light, etc.

See https://en.wikipedia.org/wiki/Diffraction-limited_system for example.
Sure, there are plenty of more subtle ways to infringe copyright -- and I bet the automated tools fail to catch almost all of them.
> My faith is evidence based - but it can't be 100% proven beyond the shadow of a doubt. Since it can't be proven

Actually evidence is proof. You're just writing a bunch of words. All your mysterious and humble, "can't know everything...", "learn for yourself" patronizing garbage that doesn't make sense. blah blah blah.

How exactly do you decide which particular ridiculous idea to believe, when you don't need any proof?

> in end, all the pain and suffering in the world will have brought about a glorious end that will be worth it.

That's also codswallop.

See, I've worked in health, and to me that sounds like exactly what someone who has been in the privileged position to never have witnessed or experienced real suffering would write as a flippant, shallow and superficial expression to discount how much needless suffering there actually is in the world.

When you see young children struck down with horrible diseases that cause constant pain and ruin the lives of their families, for no reason but an unlucky genetic abnormality, I can't consolidate that with your idea of "a glorious end", and it's also impossible for me to not attribute blame to a supposedly omnipotent being that would allow such needless suffering when they presumably have the ability to prevent it.

So take your godly rubbish and go and parrot it to the rest of the congregation in your echo chamber of useless rhetoric, and give up on trying to convert reasonable people.
I didn't think “I cut, you choose” is that fair.

Since often it's difficult to cut fairly, so the other person gets to pick a bigger piece always.
Wow. I started my career in Identity Management and this is brilliant. Thank you for sharing.
Add me to that list. We had to carry them all due to a locker ban after kids kept bringing guns to school. Backpack was as long as about half my height. Enormous strain on shoulders plus 8 books slamming into by spine for years. Weight broke backpack's straps repeatedly. Many of us have back pain and inability to get comfortable easily for rest of our lives.

So, yeah, it's nice if textbook makers or those acquiring something in school remember the physical impact of books getting as thick as possible. Cheap, locked-down e-Readers might make a decent startup idea for improving poor's conditions. Along the lines of OLPC.
MIT has 4 mandatory quarters of PE, plus a swimming test (or a swim class).
Would you have been as mad with 1703? How many were in the most recent batch? I have no idea, but 1500 seems close enough to me for a non-specific number.