skysight-inc/HackerNews huggingface dataset:
I remember an interview with Alan Kay where he described what are the conditions to enable the kind of innovations he is known for. Quote:

"The shortest lived group at Xerox PARC was `Office of the Future,` because Xerox executives would not leave them alone. I chose the most innocuous name for my own group, the Learning Research Group. Nobody knew what it meant, so they left us alone to invent-object oriented programming and the GUI."
And no doubt this layering will continue... "Look how I easily render this document decription into react primitives".
It's not only that. People making searches can end up finding those tweets. If the only thing that they see is the wrong statement of trolls, they can think that those statements are true. On internet, repetition is assumed as real so if only the wrong things are repeated, then people will accept them as truth.
Maybe it has changed since I last used GWT, but I remember GWT compiles taking a very long time, steadily increasing with the size of your app. Has this been fixed? I have some not-so-very-fond memories of 2 minute long compile times.
> There's no way a priori to determine whether I want content without looking at it

This is plain false. HN does it, for example.

> At best I can delegate this up to a moderator to look at it for me

It's an algorithm, not a moderator. Moderators are currently employed for two things: a) censorship, b) influencing opinions. Everything else algorithms do just fine.
Consider this - the 50-80s era was known not only for putting men on the Moon, military and space agencies were doing a lot of crazy shit like space shuttle that could start and land autonomously (Buran), or capturing small items dropped from orbit mid-flight over the ocean (Corona program, see [0]), precisely targeting cruise missiles [1], etc. - all without the benefits of microcomputers we know today, without high-level languages, cheap computing devices, etc.

It seems that back then people were more focused on making things actually work instead of making them look sexy and easy to sell.

[0] - https://en.wikipedia.org/wiki/Corona_(satellite)#Recovery

[1] - https://en.wikipedia.org/wiki/Inertial_navigation_system#His...
Trivia Crack Hack Tool 2016 (Android/iOS)
Intel Distribution for Python
I was just stating a fact, regardless of its actual validity.
> Do these batteries provide their own oxidizer somehow

Yes - the metal oxides in one of the electrodes decompose at high temperatures. CO2 will stop it setting other things on fire but the battery will continue to burn like a thermite reaction until it runs out of fuel.
Petsets (http://kubernetes.io/docs/user-guide/petset/#what-is-a-pet-s...) are adressing the problem of storage persistently linked to the container.
> For example, focus on networks that PAY real money for having a social media they can control(companies)

What are some examples of companies or vertical markets that would pay for control that is missing at FB? Publishers seem to be looking for new revenue sources, not control. Are you thinking of advertisers?

There aren't many proprietary content distribution networks. Bloomberg is one example. Note that P2P may conflict with a "control" objective.

Synology NAS has valiantly built a standalone networked home server, complete with NAT hole punching (they run a central broker) and usable "sharing" and "consumption" mobile apps that connect to your home NAS. They earn revenue on hardware sales, similar to iX Systems and FreeNAS. Synology has an OSS pseudo-clone called XPnology, which is apparently compatible with Synology's free mobile apps.

Tanium has a billion-dollar valuation for endpoint management and surveillance, allegedly with P2P techniques: http://www.forbes.com/sites/briansolomon/2015/04/15/meet-tan... & https://kb.tanium.com/Unmanaged_Assets
Taiwan, South Korea, Pakistan, Chile.
The boy with cerebral palsy competing in a marathon
Don’t Miss Out: Match Your Wedding Dress with Our Wedding Cards Catalogue
The Silver Bullet Syndrome:Hadi Hariri (JavaZone 2016)
A Renewed Version of the 100 Most Influential Stackoverflow Programming Books
Team fights are even better. There's better dynamic and tactic to observe.
LinkedIn makes an ambitious move in India, launches placements
Thanks, I think you are the lucky one. Our company got ~100 emp, but IT dept only got 2 backend(includ me), 1 frontend, 1 android, 2 ios.There is no one I can learn from,so,there is no real world practice or example.This is very common in China, just get things done, we got people.
> Wouldn't the attackers just "accidentally" spill coffee on your laptop?

The difference is deniability, you can always see that someone killed your laptop with coffee or smashed it with a hammer, with this you wouldn't know until you can examine the circuits.
HP buys Samsung's $1bn printer business
I usually only do this, if I'm putting a user-submitted URL into file_get_contents: if(substr($_GET['url'], 0, 4) != 'http') { exit; }
That's remote_port
* Do they have a github profile?

* Have a conversation about what is in it.

Don't expect a github profile to be professional class code. Sometimes it is just a playground.

So to me it is just one more data source to learn about a candidate.
You haven't missed anything, they use the same system that's available in Mercedes and other cars. Some people just misread the announcement and we've been living with the misconception that Tesla has self-driving cars ever since.

I don't know why, either, since this would presumably be very easily debunked.
>Wrong way around: only allow http:// and https://

For myself, it's a subtle change in developer thinking - "what should I allow" vs "what should I exclude" - that's paid off massively over the years.
Counter-example that isn't too contrived: if you've got security gates controlled by a PC which are designed to fail open, I can see this being a very useful addition to a physical pen-test.
Psychophysics
i didn't understand that, why do you think that observing something is disingenuous ? what is the difference between 'assigning ulterior motives' and 'observing reality' ?

I would also think that political persecutions are also very disingenuous, I think that it is one of the most wicket things that any government could possibly do.
HN is also a moderated system, there's this guy called dang you may have heard of.
My only advice is to not simply jump into a management role because it is the only career path you see. You can still be technical and progress your career! I definitely encourage you to try and experiment different roles, though, as this brings you versatility and understanding the lifecycle of a project.
> file_get_contents

FYI, if you ever need a quick performance boost, switch to using curl for these calls. The difference is noticeable to the naked eye.
If thats the only validation on calls to file_get_contents, that could very easily be bypassed. Entering something like just "/etc/passwd" for example.
Exactly.

Whitelist only trusted schemes, do not wait to blacklist untrusted.

I wrote the Go HTML sanitizer: https://github.com/microcosm-cc/bluemonday and have a rule for user generated (untrusted) content that basically does whitelist just the things that one can trust: https://github.com/microcosm-cc/bluemonday/blob/master/helpe...

That states that URIs must be:

1. Parseable

2. Relative

3. Or one of: mailto http https

4. And that I will add rel="nofollow" to external links, and additionally I'll add "rel="noopener" if the link has a target="_blank" attribute

Oh, and I do not trust Data URIs either.
I agree that spread of infrastructure isn't free, but it's not a "problem" per se. Parking lots already have POS modules for payments, these companies might collaborate to extend support for electric outlet. And of course I think we're all discussing this in market ready countries, not those with more ad-hoc road infrastructure.
You'd be amazed what people that barely know any programming can do with laravel. It's scary actually.
Next generation tools for data science
This is the confused deputy problem. The most general solution to this class of vulnerabilities, SELinux, has been largely ignored. Does SELinux need more work to "bring it to market", or is it just too complicated and needs to be simplified?
Love this! Some of these algorithms are inherently recursive, have you used/looked into a functional language to create them at all?
Instagram = photo sharing app

Snapchat = chat app

Pinterest = photo sharing app

They are not social networks. They have social elements, but that's not their core design. And none of them are FB killers.

Google+ and Diaspora are examples of social networks, but they couldn't solve the network effect problem.
(Also be weary of imagetragick-type bugs too, where the URL starts innocuously and then contains some shellcode, because you pass the URL to something that'll paste it into system() call)
I've already answered your questions, have you even read the response! Will be short and sweet this time:

> Is that an accurate summation?

No. For an accurate summation... see/read/note/understand/grok/comprendez my last response above.
How Java String intern method works
I tried Python requests and Common Lisp drakma, and neither of them can handle "file://" URL schema. Which HTTP client libraries are actually vulnerable to this?
Uh, no. The utter crap assistants used in these cars are incomparable to Tesla’s Autopilot even now. Polish and ease of use matter. Execution matters.

For a representative example, see how bad Mercedes’ latest and greatest E-Class w/ Drive Pilot is: http://www.autofil.no/936897/hands-off

It’s damning. And that is the one they advertised as being “self-driving”. That’s the best Mercedes has.

This review compares more of them: http://www.caranddriver.com/features/semi-autonomous-cars-co...

The best of non-Teslas have at least twice as many autonomous mode disengagements (i.e. they suck at the lane keeping job). They specifically call out Model S for being the only one that can keep in a lane without wobbling like a drunk driver. None of the “old” car manufactures can even get that right, let alone anything more.

So yes, on paper all these components exist for 3+ years and are nothing new. Exactly like smartphones existed before the iPhone did — remember those?
configuring SELinux is way too complicated for the average user.
Pitnicking but Volvo Car Corporation, which we are talking about here, does not have Jean-Claude Van Damme in their commercials.
JCVD is the star in the other Volvo company commercials: AB Volvo, which is everything but the cars (trucks, buses, Penta motors, etc...).
> That enormous stockpile of goodwill

That was bound to wear off anyway. That being said, we certainly did not help ourselves by invading the wrong country.
That figure seems slightly exaggerated, Wikipedia states he had $9800 saved when he was 20. And that he made $175 a month from his postal route. If he started his paper route at 15 he would have made over $10,000 from just the paper route during those 5 years. And the article lists several more business ventures he was active in.

Few people start working as early as 13-14, but if we extrapolate the $175 a month (which would be almost $2500 in today's dollars), and you had no expenses you could save $150,000 by the time you were 20, today.

Must surprising here is how well paid that paper route was. Average salary was $200 a month in 1944. Today the average salary is $2500 a month, but you can't earn as much from such a simple job today.
Qt is easy with Qt Designer and looks professional.
System Mechanic 16 Crack and Serial Key Free Download
This game is not good.

I will stop playing it in the middle of a match.

I want to apologize for the other players, but I think we shouldn't play a game just because it is a game and it is free and the game has a nice UI. Games are important things and no one should be incentivized to release games to the public if they are not interesting.
Rosetta catches dusty organics
And poorly documented. I learned what little I know about it from online tutorials, not the docs
/etc != http :)
We both experienced inflation, but sure, let's work it out:

£50 when I was 14 was worth £90 in today's money. Buffett's $5k was $68k.

Buffett's age-35 7M was worth 53M in today's money. So I'd need £70k in today's money to match his net worth growth.

That's exactly the same. I'm actually surprised by this, as it suggests both Buffett and I experienced the same level of compound inflation over the 20 years of our lives from age 14, despite being at different times and on different continents.

(This is all tongue-in-cheek, of course).
As someone who thinks of himself as liberal and is sympathetic to leftist ideals, because communists suck.

It's hard to define fascism, what countries were fascist besides Fascist Germany,Italy, Spain? Other then Fascist/Nazi Germany (was Indonesia fascist when the military killed near a million "communists"?) I'm not sure any lived up to the horrors that occurred w/ several communist countries including USSR(Million+ killed in mass repression, tens of millions died in famine partially caused by malice), China (same maybe a few more deaths), Cambodia(2 million/20% dead), North Korea(decades of virtual slavery and repression), etc. Most of the communist countries mostly killed their own citizens and to some extent said it as being for their own good and to some extent believed that.

"Communist" states that may or may not be near "communism" as a pure ideology have a very bad track record.

Although I'm not sure how apparent this was in the 30s.
Taxing people and redistributing the money (as BI or other) is not trade, however, and it is zero sum.
Isn't it stakeholder is the result of good manager ? What's the different ?
How does a 14-year-old get $67k?
HP is buying Samsung’s printer business for $1.05B
To the best of my knowledge this is the holdup. We need an encrypted cloud. One we know only we have the keys to. There will be no data mining beyond users mining themselves, when it comes to privacy, with the line drawn by the user, not the provider.
I think what led to the religious zeal currently is that OO/mutable state programming is a house of cards. On a team, everybody can be a great coder, but just one bug can bring the whole thing down in a non-trivial manner. I'm guessing it was easier simply to say "TDD All The Things!" than try to split hairs and work with the nuance.
SELinux is a real burden for even motivated sysadmins.

However, if you have a single image that you are going to make millions of copies of then the effort vs reward might slant in SELinux's favour, e.g. Android does use SELinux.
This is a special case of a Server-Side Request Forget vulnerability. Validating schemes is part of the answer but not the whole answer because attackers can still forge requests to internal resources you have firewalled off from the internet.

These were recently released to help people deal with these issues since the details can be finicky: http://blog.includesecurity.com/2016/08/safeurl-server-side-...
The most popular HTTP library is libcurl, and it supports file URLs by default.
when I glance over your words I hear the sentence you've written in my mind's ear - even though tongues were never made for speaking - we LITERALLY use an organ that is for chewing and swallowing food, and using it to talk with, which we can only do while our mouth isn't doing what it's actually built for, which is to chew and swallow!

And that's what we choose to imitate to communicate with each other? A hack on top of a hack!!! Why should I write something that makes you hear in your mind's ear my chewing organ fashioning air.

Wouldn't it be a lot better to ACTUALLY communicate with you some kind of direct meaning, rather than trying to jury-rig an entire civilization on top of imitations of flapping meat? Plus, the spelling is linked with the meaning anyway, if I had misspelled "meat" as "meet" just now you would have been confused! So why not take away the part where you're hearing this in your mind's ear, and just communicate!

blah blah blah. In other words, it doesn't matter what "INFRASTRUCTURE IS". A two year old's infrastructure for language is a mouth organ that they also eat with. It's OBVIOUSLY a design wart. This is completely obvious.

It also works. Gmail is fine and fun to use, even though as I type a to: field it predicts the address. Not something a stateless document-centric infrastructure was designed to do.

Oh well. It's called progress and civilization. It doesn't matter if it starts with flapping a chewing organ, and then imitating a poor abstraction of that through writing. who cares!
> Actually the actual output all newlines had been stripped.

Not stripped, but replaced by spaces.
Also, the linked image looks like /etc/passwd, not /etc/hosts.

> Weird.

Not weird. That's how whitespace in HTML works.
if you want to avoid bugs and shit, then gardening is not a wise carrier change.
Thanks. No, I've been using python/cython because I know it well already. I've considered learning a functional language though. So I'd be happy to get suggestions. Eg. I would choose a language that has a decent community as well as some good tools for drawing/pixel manipulation/3d modelling, depending on what's available (honestly I haven't researched it at all yet).
If that is the case, then it sounds like this whole thread has been miscommunication :-)

The very start of this was talking about how fixed width types are not particularly helpful. I was under the impression that you were making the case for fixed width types, but it sounds like we've all been on the same side the whole time.

> Well, no. If we are writing portable math routines for such types, it gives us nice ranges for which the code should behave with correct answers or should throw red flags during unit testing.

Exactly - if you are writing portable maths routines for your int16 type (i.e. a type which is at least 16-bits wide), then you do the analysis as if the type is exactly 16-bits wide. However, it might be that the type is actually 32-bits wide, and that doesn't change things.
Great idea, but: Why do I need to login to answer the questions? Honestly I would want to decide after filling in my budgetary details and getting a result whether I want to share it with you or rather not. Privacy is a big issue when it comes to personal finances, at least for me.
They don't really work at the same scale.

Kimchi is for managing a single host. Ovirt is aimed at managing datacenters, so it handles things like network, clusters, etc.
Ah yes, you're right. Totally mis-read the code.

It'd still leave access to any files in the same (or sub) directory starting with http, which realistically would probably be none but still something to bear in mind.
I'm curious what your favorite games are, visually, @sillysaurus3?

I've been considering an answer to your question for the past couple of days. As cheesy as it sounds, I suppose my favorite isn't necessarily a game, but a video:

https://www.youtube.com/watch?v=ekLEDoitnNg

This was what I grew up with, and what helped inspire me to pursue graphics programming. I used to watch it on loop dozens of times, being amazed at how graphics got better with each game.

That was back in the day when you had to download codecs for DivX, and find these videos on Kazaa... Ah, memories. :)

A couple of mine are Far Cry 2 and [Elite: Dangerous][1] Horizons. I also love the sound in both of these which is to me a seemingly inseparable element to great screen work.

Good choices. Absolutely agreed re: sound. Sound and animation are both vital (but often overlooked) elements of a good story, with all the focus on graphics nowadays.
Python's urllib(2), Perl's LWP
urllib/urllib2's urlopen for example. I would assume it would be a bug for the requests library to allow file:///
I don't think decentralised P2P is really the answer anyway: the answer is separating the content from the convenience.

Facebook killed blogs because when I want to find my friend I just searched for their name, and if I was their friend their content made it to my wall.

Because of Facebook's convenience my friends use it, and because it's a walled garden I am compelled to use it to.

My dream for this kind of thing would be something akin to DNS but for identity (pseudo or not), and an open API for content.

So, Adam knows nothing about computers and creates an account on Facebook, which creates an IdentityDNS entry for him on his behalf.

Belinda is also not that techy, but likes G+'s layout more, and so has an account on there instead. She also has Twitter.

Zer0cool is a massive nerd, and has their own domain and hand-written blog software. They went to some website somewhere and created their IdentityDNS entry, and has hooked up and validated their blog on their domain as their content.

Adam can search for Belinda and Zer0cool in Facebook, which in turn searches IdentityDNS. He can add them to his Facebook wall, and their posts will show up in some fashion (maybe Facebook shows its own posts normally and only shows titles of external blog posts, FB can do what it wants). Belinda can do much the same with G+.

Zer0cool has also added Adam and Belinda, and reads their posts through muttdentity, a mutt clone but for identity stuff.

OR something. I don't know. Effectively something that means that I can choose FB because I like how it displays photos, or because it has the best mobile app, or because it has lots of storage. Or I can run my own blog because I want that control. ETC.

I shouldn't have to use Facebook just because that's all my Dad can work out how to use.
Agree with not going overboard with stats and Jira. However being good with these tools to help measure velocity and improve the quality of estimates reduces the pressure on the team when clients plant the seeds of doubt that you've over estimated.
Just a few days left for Rosetta, you might want to mark the date in your calendar:

On September 29, a rocket burn will essentially cancel out
Rosetta's orbital motion around the comet, initiating a
free fall from an altitude of 20 kilometers. The spacecraft
will impact the comet at a speed of about 90 centimeters
per second at 04:20 PDT / 07:20 EDT / 11:20 UTC / 13:20
CEST, give or take 20 minutes.

http://www.planetary.org/blogs/emily-lakdawalla/2016/0909102...

(The rocket burn is on the 29th, the impact on the 30th, of course.)
https://en.m.wikipedia.org/wiki/Robustness_principle
The dillema is that you need to understand the low-level aspects in order to understand the abstractions.

The problem that haunts me -and a lot of other hackers I presume- is that we have this urge to understand every little detail of the systems we design. Nothing is good enough.

The other problem is that by using arcane and primitive tools we limit ourselves in the ability of producing real work. As with everything in life, we need to make the distinction between tinkering and doing real work.

If all we do is tinker, very little gets done :).

PS: I just read the satire Real Programmers Don't Use Pascal [1], my comment could be highly biased from that.

[1]: http://www.pbm.com/~lindahl/real.programmers.html
Bonus: Here is a little bookmarklet I wrote for styling unstyled html pages for easier reading.

javascript:(function() { document.body.style.maxWidth='700px'; document.body.style.margin='0 auto'; document.body.style.lineHeight='1.5'; document.body.style.fontSize='20px';} )();
I highly recommend to improve your writing skills. You can start from here.

http://www.covingtoninnovations.com/mc/WriteThinkLearn.pdf
I suppose somebody has to make printers. And it's not like HP are good at anything else, so...
"Despite reporting the problem to the author on Friday, and following up the report via Twitter this has not yet been fixed, but after four days I assume I'm not alone in spotting this."

Giving someone a weekend to fix something doesn't exactly sound like responsible disclosure.
I understand if you get excited because you found a flaw but if you find something like this please be more responsible with publishing your findings.