skysight-inc/HackerNews huggingface dataset:
> Sociologists have talked about the “privatisation” of faith in the west, a shift from unified religions towards people concocting their own versions of spirituality in the same way they assemble their wardrobes. It has been lamented as an antisocial byproduct of too much individualism.

I never really got why this is supposed to be a bad thing, except for powerful people that set the dogmas of religions.
Well, tech firms and tech creators want money....so?

unless the incentives for technology creators change this problem is going to remain as old as time.

And we are doing a pretty terrible job of setting incentives which are not monetarily oriented.
I completely agree. The advantages of sites like these is that just 3 lines of code is enough to tweak it to my preferences. I doubt it would be so simple for sites with mountains of existing CSS.

It's also worth noting that Firefox's "reader" mode works perfectly with this site.
There is no Facebook killer because of the lack of interest of EU industralists for the Internet. They dont care because they dont see it as an infrastructure. They think it's a gadget. De minimis non curat praetor.
I think you may be misunderstanding my point. If you have to invoke a brand new JS framework with limited uptake and many competitors, and "one of a million" CSS frameworks, in order to declare this problem solved, you are perpetuating the problem.

I don't want to knock these tools too hard, because I can readily believe that (eg) Flow, or Typescript, or whatever we'll all be using next week, is much better than using vanilla JS/CSS. But the fact that we need to know all of Flow, and all of JS, and all of bootstrap, and all of CSS, and we're still not even off the client yet, is exactly why the web is a mess.
How you feel right now it's completely normal and expected because you are young and you want to learn and gain knowledge. I have changed 4 companies because I was searching for the job where everyone is writing clean code and where best practices, code review, and learning are on the high level. You can forget about that because managers don't care how your code looks like, or if you are using best practices to achieve your goal. Now what I'm doing, I'm trying to get as much as possible time on estimates, that's how you can have time to write clean code, and to learn something. If you are estimating the task, add also the time you need to review what you did and do not be scared of refactoring, if you see that something is written in a wrong way, rewrite it, don't blame around :).

Also, work and learn at home. That's your time and you can learn and do whatever you want.

Keep in mind that there is no job where everything is perfect, so collect all negative things you have at the current position and try to change them. If that's not working then leave :)

What managers love is the example and real POC. So if you think that something is wrong or old, create a POC, make a demo. That way you can get some time and resources to do something new and interesting. Don't think someone will give you such project just like that :)
I think this comment could have been a lot better / less embarrassing had you chosen to read the article. A couple in their early sixties who live somewhere in New Jersey in a house that they didn't even own outright is not wealthy. A month after he died, she had trouble paying the mortgage on the house. That isn't very privileged.

She had a job as an administrator at a college which she took to support her children after her marriage didn't work out and she found herself without many job skills. He had a job that he'd like to retire from at the age of 62 but an inadequate retirement fund. You almost literally could not invent a more "everyman" couple in their early sixties.
No USB host stack opens itself up just because the transmission circuits have been destroyed.

This isn't the case of a gate that fails open. This is the case of a gate that gets hit by a rocket launcher, which blows the gate open and destroys the datacenter behind it.
Indeed. You only left out the proliferation of frameworks du jour, which promised to deliver us from this pain, yet somehow seemed to only amplify it with additional layers of pain.
Not really. It's more like saying "Mt Everest is 8,848 meters high, or 2,483.6 ft taller than Mt Annapurna".

Edit: Oops, I just saw the previous response. That's what happens when you open 8 tabs and read as you can.
Please add "US" in the title.

The world has more than one legal system.
That leads to the MEAN stack (Mongo, Express, Angular, Node) and I am not so sure whether that's where the rosy future is.
No it's probably not anything new but when you muck about with commercial airplanes things get expensive and take a lot of time (regulatory issues). It's one thing to modify something with your car, for example, but when you change something about a commercial airliner it's not so simple.
I think your use of "minimum" is wrong here. If you're using React running on Node and Webpack as your task-runner you just need Javascript and that's it.

Node allows you to run isomorphic JavaScript that runs on both your server side and client side (to ensure you don't end up with the Angular-style skeleton pages coming from the server), You can pick a nice ORM (like sequelize) to abstract away SQL, and Webpack allows modules to specify their styles in JavaScript to allow compossible CSS for each given page.

Yes this is still using a couple of frameworks, but I personally prefer the approach of a lightweight standard library to the everything-and-the-kitchen-sink approach that other languages have.
Thanks for a lesson on how the web works, but I'm already quite familiar with it. Your long answer proves my point about its needless complexity and layer upon layer of historical cruft. Can the complexity be buried under various frameworks and toolkits? Sure, to some extent. But not entirely. Browser inconsistencies always manage to sneak through forcing the developer to learn the entire stack.
> the Iranian government is dominated by religious extremists who sincerely believe it is their religious duty to spread their theocratic revolution across the world.

The same is true of the USA. Whether you agree with them or not is highly dependent on whether you stand to be a beneficiary of the spoils of their wars, or not.

And, btw, the CIA has exported far, far more terror than the IRG ever has.
Also be very wary of ../ or possibly ..\ in URIs.

Say you have http://example.org/download?file=release/software-1.0.zip so that you can log download statistics.

If you just fetch GET["download"] and return it, you're gonna have a bad time if they try http://example.org/download?file=../../../../../etc/hosts (browsers strip it out automatically, but it's easy enough to type such a request into a telnet session.)

And don't just assume your safeguard works. Act like a hacker and try it out on yourself to make sure it works. Add an assert(validate("../") == false); at startup on your server, so it won't even run otherwise. Forbid the use of fopen() and instead go through your own file::open() function that calls validate() internally, then #define fopen ERROR_DONT_USE after (or whatever equivalent for the language you use.)

It is a hostile world, you can never be too safe by adding multiple (even seemingly redundant) layers of protection.
Answer to first question: Every single one.

The answer to your second question is manyfold. First, it makes a false presupposition, web development is not faster and easier. Second, most devs probably chose the browser as a platform because Apple was so tremendously successful at creating artificial "application barriers" -- making it uneconomical, problematic or even impossible to create well-behaving cross-platform applications. Building application barriers used to be Microsoft's primary concern (they invented the term for internal correspondence), they fought hard against Sun's original vision of Java, but has become Apple's main trump card for while, after Apple decided to give up making great and innovative hardware. Third, mobile apps became sexy but the fragmentation is too high (even just Android is way too fragmented).

So many devs and companies bite the bullet and decided to make a web page for desktop and mobile phones/tablets as a least common denominator.

If you disagree, show me one non-trivial web application with the performance and a user interface that matches or outscores a corresponding native application, and we can discuss why it's better than the rest and an exception. So far, I haven't seen a single example but there should be one or two.
Combination of the two: Also folks aren't "good" or "bad" but rather able to add value in different circumstances. Some may be able to add more value in a more structured development environment where a mentor helps guide their every step. Others may strive in a green field situation where they can really build the "whole thing" themselves. Both of these modes have their costs in the near and long-term with the latter potentially harder to scale to other developers after the fact, but at the time appearing impressive. The former means continuity in the organization but some individuals will grow less in this model. And of course there are a million other models. Everyone thrives differently.
My canon inkjet has an option to use just the black (and i think just colour) cartridge.
Ah...you say it's like thermite...could one of these melt its way completely through the plane fuselage?
The generic HP PCL6 driver doesn't work?
That was my first thought too - a very human journey covered with very bold statements at each point. Unless I misread something, you forgot the step where consulting (weekly granularity rather than daily or hourly) was absolute king. I remember reading that and thinking "Wait, what about the SAAS thing?"

I guess the takeaway is that no option is without its disadvantages.
The page is very beautiful in its versatility. No fancy JS hacks to keep pages style: you can use Firefox' reader view for instance. I keep my browser windows around 1000x1000 pixels because the vast majority of sites would otherwise style me overlength lines of text.

And it's fine, as long they scale properly and allow narrow browser views. The only criminals are the ones that force wide paragraphs... sometimes to a point I have to vertically scroll a paragraph.
If a user copied the URL from the address bar, it will be correctly percent-encoded already.

You can put the same percent-encoded URL in the href attribute of a hyperlink. A properly encoded URL will not contain any character that requires escaping in an HTML context.

When a user clicks on that link, the browser will navigate to the percent-encoded URL but display the snowman icon in the address bar. If the user copies it, it will transparently turn back into the percent-encoded URL. All modern browsers do this.
Alas, people are responsible for their governments. You can't have all the rights of citizenships without any of the responsibility. I would say (having lived in both regions) that 'most people in Europe' wish that Americans would take a lot more responsibility for the crimes of their state than they currently do ..
FTFY: https://github.com/fractalide/fractalide
I'm an EE, and had a course specifically on Laplace and Fourier analysis.
I agree with the approach. However, specific examples of different badnesses are useful for testing the final product.
The Growing Rivalry Between Google and IBM
From https://en.wikipedia.org/wiki/Rosetta_(spacecraft)#Design_an...

Rosetta was built in a clean room according to COSPAR
rules, but "sterilisation [was] generally not crucial since
comets are usually regarded as objects where you can find
prebiotic molecules, that is, molecules that are precursors
of life, but not living microorganisms", according to
Gerhard Schwehm, Rosetta's project scientist.

See also the Committee on Space Research (COSPAR) Target Categories:

https://en.wikipedia.org/wiki/Planetary_protection#Target_ca...
I think we've reached the stage where second order effects influence the discussion.

So its not just a product which has to be killer, it has to be able to defeat facebooks increasing mass of capital.

For that matter - lots of Facebook competitors HAVE been created. They've just been bought out by facebook or someone else.

I suspect that eventually people will just die out of facebook, and at some point it will gain the moninker of gravebook. Once facebook stops being cool, it will stop gaining younger users and the network effect will end.

Of course, people at FB have obviously considered this problem and have a plan for it. Perhaps they will live forever.

Maybe we'll discover some first order effects of the network effect which limit its growth or even reverse its growth.

Other than these 2 outcomes though, I don't think we have several degrees of freedom.
I'd say it's pretty well established that SF means San Francisco, which is most definitely in the US.
guarantee that the input is valid with a parser generator

OK, that works really well... until you learn how much non-RFC-specified behavior is built in to web browsers. Simply building a parser to the RFC will leave you wide open to all sorts of nastiness!

The is_safe_url() internal function in Django is a bit of a historical dive into things we've learned about how browsers interpret (or, arguably, misinterpret) various types of oddball URLs:

https://github.com/django/django/blob/master/django/utils/ht...
In October, Susan’s mortgage payment came due. Though her husband had earned a good salary at Morgan Stanley, he wasn’t paid like an investment banker, and, after alimony and child support, they weren’t wealthy. Their town house was attractive but hardly ostentatious; the mortgage and maintenance payments combined would barely rent a studio apartment in a Manhattan high-rise. Susan had to draw on a home-equity line of credit they’d opened to help pay for Rick’s memorial at the raptor preserve.... Susan felt that she was all but reduced to begging for money. She appealed to the United Way of Morristown, which did come to her assistance. And the National Red Cross eventually sent a check.

Lazy assumptions are lazy.
They're the same thing, and require the same level of attention to use safely. The only difference is that Tesla didn't enforce that level of attention because they're more willing to feed their drivers to the undersides of trucks at 70 mph and then blame the driver for not paying attention than Mercedes or Volvo are, and the press and HN are more willing to let them get away with it.
I still count three frameworks :)

(React, Node, sequelize, I'm not counting webpack but I probably would if it's anything like as much of a pain as Grunt or Gulp or... And as you say, this is the lightweight version.)
Volvo's autopilot uses cloud architecture for traffic analysis(based on other Volvos around you).
Volvo has predictive, ML-Enabled Analytics which should(I don't work for Volvo) work similar to Tesla's Fleet Learning.
Right, best to check the whole URL. Something like "http/../../../etc/passwd" might get through otherwise.
Fire drill knocks ING bank's data centre offline
Inherent complexity is often ignorable, but bugs can and will sit anywhere. So, yea the fact an apple is vastly more complex than an engine is not always relevant, but when it is relevant you have real issues.
Hasn't pretty much every copier sold in the past 20 years essentially been an MFP anyway? And isn't it fairly obvious that once you're bringing in a scanner and a printer anyway, you might as well expose them on the network as separate devices? (I use the scan-to-email function of the office "copier" fairly frequently myself, I print a bit too, but I practically never copy anything directly)
SELinux is more the stopgap measure when everything else failed already, or at least it should be and prevent the most harmful things like reading random stuff from /etc. It is not something I'd say of "I got SELinux, now I don't need to validate user input".

In the concrete example from the article, the process needs to access to /etc/hosts to do name resolutions, yet it should not send this information out to who knows who. How do you model that as a SELinux config? You cannot really. Unless you introduce dedicated (class of uncoupled, distinct, identifiable class of) processes acting as agents for resolving hosts with the help of /etc/hosts and whitelist them in SELinux... Which adds a whole lot of complexity. And you still have to make sure your new fancy agents cannot be tricked into giving up sensitive information.

So at the end of the day, you should do defense in depth which of course should include user input validation and probably SELinux as well.
A good abstraction hides complexity without adding major tradeoffs. Presumably an abstraction makes it easier for a developer to reason about what is going on.

It's true that abstractions can lead to a lot of trouble when they are failing to work correctly. But when they are good they add a lot of good value. When did you last have to debug a system call, because you couldn't open a file? There are really good, old abstractions that no one thinks about anymore, since they're just really good.

A framework in web development is of course another matter, where complexity can sometimes be staggering. I believe that the lifecycle of React components is really nice. Instead of initialising X things you can think about how a single component will change over time.

There are endless examples of good and bad abstractions, I guess. But at the end of the day, we have to choose abstractions when we need them to reason about what we're doing, despite adding more points of failures.

After all, if an abstraction just enables us to think faster and more clearly about a problem, AND allows us to write less code, that means that less bugs will be in the final product, assuming that the density of bugs is constant. ;)
Wait, the team have no experience in either framework? What's the reason for choosing these two?
..except for the older ones that would occasionally freak out if they saw multicast packets.
Keep calm and open a playground
One of the worst bugs with twitter webpage is this. When scrolling down to check overnight tweets on the timeline, and when you have scrolled hundreds of them and you click a regular tweet or a quoted tweet to check responses etc (thankfully quoted tweet opens as a popup lately; it used to open a different page earlier causing pissed_level++) and dismiss the popup, the feed is scrolled back up to the top, and to add to the misery, the tweets in the waiting will be expanded too. You would have to be a regular user of twitter in order to make sense of this and/or empathize.
Also, you can't just find and replace ../

Consider: ....// which becomes ../
You say that like Yelp doesn't already self-censor to suit it's business needs.
OP tested his hack on an online Markdown converter, so it probably has more to do with Markdown's treatment of whitespace than HTML's.

As it happens, Markdown ignores most non-consecutive newlines.
Sea levels have risen about 130m from 20,000 years ago

All that water came from, of course, ice that melted.

The New York City Parks Dept says that NYC was under as much as 1000 feet of ice[1] during the most recent ice age. Yeah, ice as high as the top of the old World Trade Center twin towers! Upstate New York (the Adirondacks) was under 5000 feet of ice.

Something to keep in mind as we fret about a 15-foot storm surge.

[1] https://www.nycgovparks.org/about/history/geology
Quick FYI. It's difficult to filter URIs with regex because they are context free grammars and belong to a larger language than regular expressions.

Recursive descent parsers are the way to go like uri objects in most languages.

Ex. URL url = URL.fromString(inputString); url.getScheme;
>This is usually about a mix of scalability, responsiveness, and partition resilience; with the level of importance of those being dependent on the application.

I have never seen anyone make those arguments. I've seen people vaguely reference them in a hand wavey "I don't understand this but google facebook I am right" way. But that's as close as it gets. It is usually about following trends.
Mobile GPUs – power, performance, area
> Comparing yourself to others and especially to the best performer ever in your skill/expertise is unhealthy. Don’t compare yourself to others.

And yet here I am anyway, nearing almost 30, still in graduate school, wondering if I'll ever know what it's like to have a reasonable amount in savings, let alone a "net worth" :)
Delphi 7 designer was a great improvement over delphi4 (we still use it at work) and yet delphi 2007 fixed some soap bugs and xe7+ is pretty decent as a cross platform ui development IDE.
Today, an Bitcoin node can download and validate 368M transactions a day
Who needs a secure retirement when there's a 0.002% chance that the startup you're working at won't fail, Google will buy it, and you'll end up a millionaire?
Yes that's why the people will perhaps run their neural networks themselves. Because nobody will do that for them for free.
Or wire your USB plug up to a 120/240v power plug?
Wikipedia currently has a similarly annoying UX. If you click on an image, then copy/paste the link to someone else to open, it first loads the article you clicked on the image from, then a modal of the image.
People here may know that some bitcoin-scaling issues are being addressed by the Bitcoin community. It is certainly very interesting to realize that todays hardware and internet can already scale quite massively above any need imagined today.
I've passed on opportunities to move to other places because there's a level of insulation in the corporation I work for, where we're able to experiment and fail with projects that, were I or my team to do in a lean startup environment, would very possibly mean the end of our venture.

There are some really, really cool things happening at a lot of startups, and some of the shining stars are making waves at the moment (e.g. High-quality all-electric cars for the common family, affordable full-home automation, autonomous for-hire fleets at the tap of a screen).

But I also think there's a reason a lot of the real innovation and advancements in information technology have come out of the research laboratories at big corporations, and that's because they have the liquidity to absorb experimentation that goes nowhere without the risk of bankruptcy, and it's certainly an attractive place to go invent some awesome stuff.
Did using Picasa just get my IP banned at Google?﻿
Our screens are still not good enough to avoid eye strain and still do not provide the tactile arrangement paper does. I have been typing as long as I have been reading, and I will still go to hard copy if I have to edit a manuscript of any length.

We still need printers.
I doubt anyone would expect to find organically grown veggies on a comet. Not sure what you're trying to say. Isn't it pretty clear that they're referring to molecules containing carbon?
It's a converter taking HTML as input, converting it to Markdown.
Considering how easy it is to fake commits with Git, Mercurial, and maybe others I wouldn't trust must of the information provided in a GitHub profile. You might get a vague idea of the contributions to other projects and the preferences of the coder for coding standards, language, tooling, and silly things like that but don't expect anything serious, as other user commented: some of the best candidates work full time on their company's private repositories. I would also add the fact that some companies have clause in their contracts stating that all code written by the employee during his free time (aka. side projects) is to be owned by the company, I had this clause in my contracts and that is why my GitHub account only hosts experimental projects, nothing serious that I would want an employer to consider in order to offer a position in their company.
Not to nitpick but it's not really a vulnerability.

It's including the correct protocols for URIs.
9 Quick JavaScript Tips to Improve Your Code Pt1