skysight-inc/HackerNews huggingface dataset:
Oracle's first customer was CIA. In-Q-Tel also has MemSQL, Tenable Network Security, Cloudera, VeraCode, and BBN before acquisition. Also, they give HN readers continued entertainment in form of Palantir and D-Wave.
> In the Bay Area $135k salary isn't even enough to rent a one bedroom apartment at current rates.

You mean "in San Francisco" — I live in the East Bay and split a one-bedroom with my boyfriend for $1400 per month.
Insert Table in Word Document and Update Table Borders inside Cloud Apps
This new release of Aspose.Words for Cloud 1.27.0 contains two new useful features, 27 bug fixes and one enhancement. Aspose.Words core library has also been updated to version 16.7.0. It has added a new feature to insert table in a word document along with another feature to update table borders. It fixed some important issues such as Mixed Numbers, English and non-English content is incorectly encoded, HTML MergeField output is inappropriate, Split results are saved to incorrect folder and many more. Aspose.Words for Cloud’s platform independent document manipulation API is a true REST API that can be used with any language: .NET, Java, PHP, Ruby, Rails, Python, jQuery and many more.
How to rip 2D DVD to 3D video
good point. make your tech so that you can guarantee that you will never have access to customers data. If there is a replication failure.. so you kill the machine and respawn it kind of a thing.

where would you backup if not s3 ? your own ? that would be a BIG oops...
Ugh. Ag-gag is perfectly analogous. I don't understand it one iota.

When you make reporting an illegal activity illegal, you have made that activity legal.
>That seems a little hubristic... Not everyone uses Babel, and working with the Uglify devs to get it ES2015+ compliant (through whatever means, including adding a different AST parser) would make the entire community better, not just Babel. Since not all browsers support ES2015, I have to use babel, but if I didn't need to use Babel, I wouldn't. But now I'm kind of forced to for uglification now until ES2015 support comes to Uglify.

Again, this project started at Facebook and we were scratching our own itch (and the React/Babel community's itch). So our target audience is already people using Babel.

You're committing the fallacy of thinking about this as an opportunity cost. But the upside for us in modernizing uglify while Babel exists is so little to make it worth it.

>but that's a flimsy argument for creating a whole new parser. If you had to create a brand new parser to handle this, it seems like a Babel issue, not a parser issue.

I'm going to go ahead and assume that you never worked on a parser before. Pluggable parsers is a really hard problem. And none of the existing parsers have support for it. At facebook we supported an esprima fork for years because they wouldn't accept our JSX/Flow patches. If I'm wrong then put your code where your mouth is and benefit the community by creating the first ever generalized pluggable parser.
I'll put it out there.

"No programming test these days is valid without full access to Google."

This is the opposite to conventional wisdom which says that programming tests must be done in an isolated environment without access to the web "please deposit your mobile phone at the testing room door".

No programming is done in isolation so the only way to effectively and realistically test someone is to see what results they get in a real world environment, which means full web access.

Don't get me wrong - I am very much against the idea that "I don't need to understand fundamentals cause I can Google everything" - only the misguided think that. What I do think is that recruiting needs to be about measuring real world results - that means full access to Google and StackOverflow.

THE most critical skill that is almost NEVER meaured - and in fact is generally avoided measuring - is the programmers skills in Googling to solve unfamiliar problems. The best programmers ride Google and StackOverflow like racehorse jockeys ride the ponies.
Perhaps it's just safer to use a password manager for everything.
But how did they have the money to even invest in startups?
The delay between landing and relaunch has less to do with refurb on this particular booster, than with the series of tests that they're doing on other returned boosters to convince both the customers and their insurance companies that they generally come back in re-flyable condition, which have been happening on and off for months. Among other things, a different booster has been put through at least three full-length test-fires at their proving ground in Texas.

It isn't clear how much refurb will be required generally, beyond replacing some of the surface thermal protection that came back visibly dinged up. (Well, at this point, SpaceX knows what it took to refurbish one, but I'm not aware of any public statements about it yet.) But they're certainly acting like the propulsion systems don't need much -- the very first returned booster (the one now on permanent display outside the SpaceX factory) was re-fired on the launch pad within weeks of return, without having ever left the Cape, just to prove that they could.
I feel like most users can perform a basic search and add or can exchange contact information elsewhere. When the ratio of weird/unsettling/awkward suggestions to helpful suggestions is high then the feature is not working as intended.
> Serious vulnerabilities include remote code execution...

I just meant "serious" in the general sense of the word, like the way that a bullet would in the stomach is serious, even though one in the head is more serious.

> Google's core functionality is redirecting users to third party websites

I'm pretty sure that Google's core functionality is ads, which don't require the user to actually be actually visiting pages Google.

Pertaining using Google for social auth, the user is actually expecting to go back to the site they just came from, whereas when they login to update their credit card they're logging in to stay on Google, which means that a page that looks exactly like Google...

How long this functionality remains on the site will be a better indicator. My guess is not long, esp after the publicity.
I did not say they were. Bone marrow is also an important part of the immune system. That does not mean it only comes into play for bone infections.
This ought to be a boon for vanpool's where demand in terms of source and destination can be matched to drivers and 6+ passenger vehicles. Researching the necessary correlations would be fascinating work.
> Arbitrage is never shady.

That's very much an opinion, not a fact.
> Enormous strain on shoulders plus 8 books slamming into by spine for years. Weight broke backpack's straps repeatedly. Many of us have back pain and inability to get comfortable easily for rest of our lives.

Seriously, get a wheeled backpack. No need to make things worse for yourself.
I had to use it for a class about a year ago, and it was pretty miserable. It seemed like a big random tiled mess, and I really struggled to find a way to look at what I actually wanted to. It was a usability maze. Some kind of sick joke, I guess.
I see your point, but I think individual schools don't make the choice. This stuff is usually done at the school board level, or maybe even State level.

It's a giant racket too, perhaps even worse than the university-level racket: http://www.textbookleague.org/103feyn.htm
See this stackoverflow question [1] by someone having the same problem to see what's going on. Someone else wrote [2] an okay-looking script that implements this custom XOAUTH2 scheme in emacs; if you trust you can use that, or use it to write your own.

[1] https://emacs.stackexchange.com/questions/19382/

[2] https://github.com/ggervasio/gnus-gmail-oauth
It's funny -- I was the exact opposite. I got the original Pebble Kickstarter Edition, and couldn't really find much of a use for it. Having notifications on my wrist was OK, but not mindblowing.

The addition of the timeline made _so much_ sense for me. I've barely taken the watch off since (except to upgrade to a Time Steel). It's extremely handy being able to just tap a button on my wrist in order to figure out if I need to be somewhere else. In fact, the biggest frustration has been that I need to press a button; I'd love it if a watch-face permanently showed me my next appointment.

As it turns out, this new update does just that, so, awesome.

Different strokes for different folks I guess :). I'm sorry that UX change hasn't been as good for you as it has been for me.
Yeah, in C you could have a problem if there's a large object, but in that language you already have undefined behavior. Nim is not C, and bounds checking on arrays prevents that. (I am only skimming the docs, so tell me if that is incorrect.)
> First of all, open redirection is not a serious vulnerability.

I 100% disagree.

There was a time when people didn't think XSS was a serious vulnerability too.

Most web developers in general are way too casual about a lot of attack vectors, and this is just one more example of that.
Even if they saved money on this one particular booster the costs of the technology and all the landing attempts/ successful landings will probably mean it takes some time to come out ahead overall.
> In my Chemistry class there were 600 students and we had to purchase a code for the online homework. I've been told that there is no other way to grade that much homework.

It's not like grading homework is an important class function. I imagine they still grade your tests.

I've had plenty of classes where homework was graded on a strict "turned it in / didn't turn it in" basis. And more classes where the system was "we don't care".
West of Topeka in the Kansa Prarie is very nice.

FWIW I'm in KC tech sector. If I want to get back to nature I just drive 1/2 hour south to the land that I own, and I make more than those figures touted above. You guys can keep your California.
I don't see any mention of clemency on that page. Perhaps there was a mod-edit to point to a "better" source, which doesn't actually cover the clemency?
That's not how it works at all. The amount of antibiotics in slaughtered livestock is miniscule. In fact, the FDA requires a "clean out" phase for livestock treated with certain drugs to ensure the levels in the final meat are low enough.
Reminds me of viagogo a bit, a ticket 'second hand' reselling website. Through some undercover investigations (https://www.youtube.com/watch?v=WWlnL8drSdw) it turned out that they are only partly a second hand site but have a stack of credit cards and buy out most of the ticket stock available to resell it with crazy margins.

It went so far that ticketing companies even gave them ticket stock for re-selling with a high margin to get a higher cut of the ticket sale. This especially happens for very popular concerts where the demand is high and people are willing to pay.
>Well, it works well for me. 16 years married, and I have never cheated.

Well then it's settled. I hope to read your manuscript in Lancet next month. STD epidemics are cured thanks to milesf boundless fidelity!
I was part of a government group that regularly accepted airfare, lodging, and meals. There was demand for us, but we didn't have the funding to travel on our own.

One time this created a funny situation where a pro sports team flew us out on their private jet. While we were in the air, they were about to hand out hats with their logo on them, and the head of our group had to stop that until he could consult the lawyers about that gift. It felt like an overreaction in the particular situation, to say the least.
I have noticed that a redirect to any site on sites.google.com also works seamlessly on mobile. The amp pages are not working for me and I get an error page, but as someone mentioned they probably don't work on mobile and only on desktop.
The downside of this, sadly, is that he appears to have mental health issues. Unless he has some outside support, which may be difficult with his dad being dead and having been incarcerated since something like 1994, he would be rather likely to end up on the street, alone :(

Here's hoping there are people on the outside to help him out.
The author using FizzBuzz as a comical-but-recognizable launching point for demonstrating introducing the basics of programming language implementation and RPLY, and the HN comments being nothing but people yelling about FizzBuzz, is a pretty amazing summary of the state Hacker News comments. It also makes me think next time I have a technical article, I should prepend some controversial statement to it just to generate buzz :V

In all seriousness: this is a really cool article, thanks for sharing! I'm not very familiar with RPython or RPLY and it was really cool to see a "real-world" example of it. I actually just read through something similar in JavaScript (https://github.com/thejameskyle/the-super-tiny-compiler). I really should give language implementation a shot one of these days (closest I've come is writing a JSON lexer & parser); always like to read about it!
From the New Oxford dictionary, "A person who informs on a person or organization engaged in an illicit activity."

So yes, he is in fact the textbook definition of a whistleblower.
Wayne Rooney akan terus sebagai kapten
Tribune Tower Sold for $240M to CIM Group
This one is more active: http://discuss.bootstrapped.fm/
The Google login wraps the whole flow in a trojan horse, though. Users are taught to trust the single sign ons from FB/Google, and they're also taught to check the URL. Both of those would be false senses of security in this case. In isolation, this isn't necessarily a security vulnerability. But that it breaks down when users do what they're supposed to do? That's bad.
Yes, I'm on mobile. That must be it.
The Bay Area is about 2.24% of US population, not 0.26%.
Squad Leader was complicated but it also was incredibly innovative. There wasn't another board game that showed how tanks, artillery, infantry, machine guns and leaders really worked on the battlefield in that era.

SL could show you how a well led and well equipped company of German soldiers could hold a village against a less well equipped and well led battalion of Russians, as often happened. Games before this just abstracted out historical differences in the performance of armies. For example, in Third Reich a Germany Infantry division has a higher attack value than a Russian one. Squad Leader explained the historical differences.
Is your opinion of exaggeration one that comes from being a farmer? Because I know a few farmers, and the fear is real.
>single foreign policy be a bad idea in any way?

Because you might disagree with it? How can you be so narrow-minded to not even fathom people having different fundamental beliefs? Why don't Israel and Palestine just merge into one country called Unicornia? Why don't all people just separate religious beliefs from government, or conversely, why don't we all just switch to the correct(tm) religion?

One country may not want to support terrorists while another wants to support them because they are 'freedom fighters', how do you propose they operate under the same foreign policy?
It's not a serious vulnerability, at least in the commonly understood sense of the word in security. It is phishing and spoofing, as Google accurately describes in their response.

Maybe it's functionality for Google to change to prevent social engineering for susceptible users, but it's not something that deserves a bug bounty.
I think the purest source is this: https://www.justice.gov/opa/pr/president-obama-grants-commut... but that lists a lot more clemencies
Okay, you can disagree, but the word "serious" only works comparatively.

If every vulnerability is "serious", then none of them are, and the word loses its meaning and people stop responding to it.

If not every vulnerability is "serious" but open redirection is, what do you call something like command injection or SQL injection? "Double-plus serious"?

I understand that developers need to take security seriously, but that effort is undermined by being hyperbolic about vulnerability severity. No one is trying to say open redirection isn't a vulnerability, it's just not all that...well, serious. Fix it, but it's not a hair on fire problem.
are you sure you are looking at the right version? mine uses most of the space.

There's a setting :-

Stream
Restrict stream to single-column layout on all screen sizes

do you have this on?
Cameron, Witch of the Art World (2014)
oh yeah! and g+ notifications do a super crappy job of putting you in a position to efficiently jump to the youtube thread and respond. a stupid tuny window, no good indication what to click on to get there, clicking on things takes you places you don't want to go. makes me want to break things.
Alternately the greedy ones have concluded your opinion of them is worth less than the extra cake :).
It seems that Amazon, for example, has already seen the huge problem that causes, and has been working to reduce that problem. At the other end of the spectrum, you'd be assigning the FTC to be like the small subset of redditors who feel compelled to reply "Hail Corporate!" any time you mention a product you like.
Well, I'm sure that the Monsanto executive had signed a confidentiality agreement. But that's obviously trumped by SEC's whistleblower program.
GP's point extends well south of San Francisco. I've lived in the Peninsula/South Bay for a few years and it's pretty much the same down here as it is in SF. Unfortunately for me a commute from the East Bay is out of the question, but I certainly wouldn't mind having that rent!
Some (maybe all?) bacteria are capable of horizontal gene transfer (https://en.wikipedia.org/wiki/Horizontal_gene_transfer#Proka...)

For example if someone were infected with both antibiotic-resistant gut bacteria (acquired from eating contaminated meat) and gonorrhea, it's possible the latter could acquire antibiotic resistance genes from the former.
> it's not a 'dark pattern', it's just a feature that you don't like

It's a similar sort of dark pattern to the practice of putting the important details of a contract hidden in a massive block of text rendered in a tiny font.

Yes, they are technically being upfront about what is going on, in the same way that two pages of 8pt legal boilerplate informs the signer of the details of a written contract.

If it weren't a dark pattern it would be very easy to turn off the undesirable bits, and users would rarely be surprised by the consequences of the default settings.

Let's not forget that contrary to our poor performance on abstract logic puzzles, humans of all levels of intellect are superbly good at reasoning about potentially embarrassing social situations. Hence FB must work hard to de-emphasize the way FB actually works to make people consent to many of the default permissions. That is in my opinion the definition of a dark pattern.

It is the gray area enabled by these practices that makes FB's content interesting... because accidentally over-shared content is interesting to us about a small percentage of the people we are friends with. It's nearly a law of human nature that we are fascinated by obscure details of a small percentage of people for all sorts of reasons (sexual interest, jealousy/aspiration, schadenfreude, stalking, etc.) and we all have some small group of people who are interested in our obscure likes/posts for the same reasons. Rarely do we overtly interact with such people (in either direction) because it is socially awkward, but FB generates revenue/engagement off of the lurking that we all do and the blindness people have that they too are the target of such lurking by others (which is why the dark pattern works)... it's what makes FB scratch a particular voyeuristic itch for people and why it's been so successful. LinkedIn works the same way but for things like job changes, promotions, etc.
This is only related in that it's another person incarcerated over LSD, but I've always found this individual and his story pretty fascinating:

https://en.wikipedia.org/wiki/William_Leonard_Pickard

http://www.freeleonardpickard.org/Skinner-Timeline.html

The second link discusses Gordon Todd Skinner, who was the informant that facilitated the arrest of Pickard. I don't know how much of that information is accurate, but it's an engrossing read and it paints a horrible picture of what a government informant can get away with.
I'm in OP. Shhh... Don't let them know median household income in Leawood, KS is higher than Palo Alto, CA. Those SV people can stay in their rat race.

http://www.city-data.com/city/Palo-Alto-California.html

http://www.city-data.com/city/Leawood-Kansas.html
Lived in OH as well for a long time. As they say, OH -- a good place to be from.
Not exactly relevant but it's somewhat interesting that so many people apparently deserved life sentences but not even a mention of any of them on google.
I had very little to do with it (last semester I taught during the staff meetings so I was a bit out of the loop). From what the course director said it was really based on the cost. I teach at a SLAC with a lot of first generation students who rely on student loads. One of the profs apparently mentioned it and then they went whole hog on it because we didn't like the current book all that much.

Basically, they took a book that existed and added at least 2 chapters and then customized the rest. I don't know to what degree they customized it but I do know that wherever possible they added links and references to campus resources to make the book more relevant.
I would call any easily corrected behavior of your site that could lead a normal innocent user to being compromised is a serious vulnerability.

Your statement implies there's an unlimited number of these but there aren't. SQL injection is worse than open direction, but storing your passwords and CC data in plaintext and leaving your root account SSH-able on port 22 with no password is worse than SQL injection. Just because there's something worse than X doesn't mean X is not bad.

The important thing here is open redirection is a stupid, optional behavior and there's no good reason for it. It shouldn't be there. Allowing it is just as stupid as allowing XSS. It's just lazy and sloppy and frankly inexcusable for a company like Google, which should be held to a much higher standard than a mom and pop web store that sells cat figurines.
The sexism is really out of line.
Not only to GET press, but also to PRESS the company for $.

This is a huge problem I see with bugbounties. People running the bug bounties, who are not appsec security literate, are basically bullied in to thinking that something is a security risk when it is not quite often.

I deal with people trying to do this 10-15 times per week. I can totally see how people get pushed in to paying thousands for essentially worthless bugs.
Ok, to clarify:

Antibiotic resistance is generally spread via plasmid-mediated resistance. Overuse of antibiotics in any capacity, regardless of ingestion into humans, causes some bacteria to evolve resistance. Bacteria are promiscuous with their DNA, and resistance by one organism on one context (e.g. livestock) can easily get transmitted to a completely different organism in a completely context (e.g. humans).

Having said all of that, there are many potential antibiotics out there that haven't been fully researched (almost all currently prescribed antibiotics are beta lactam variants, which is only one small class), and this "cannot be treated" stuff is mostly just bad journalism.
Does oral sex transmit Gonorrhea?

Are there any sex acts that are immune to it?

Is there anything safe (sex-wise) that one can do to prevent it?