skysight-inc/HackerNews huggingface dataset:
Ask HN: First steps to check the security of PHP web-application?
Your development team made a web-application and asked you to look for the security. What should be your first steps (both back-end and front-end). Which patterns to search first?
Thanks. I approve of your observations and especially like this part:

> AGI more and more looks like it will be about striking the right balance between generation and selection.

I was thinking AGI is essentially reinforcement learning on top of rich, predictive models of the world. But you could see it as the balance between generation and selection.
Wow this is really interesting. I did the satire writing thing and was disgusted when people believed it without question. I didn't want my real name associated with it, and so I would be unable to promote it. Promoting it under a fake name to people who believed it was distasteful to me, and so I just kinda quit after only writing a few articles.
Blockchain’s 10Mth Wallet and ‘Not Looking Back’
Skyrocket Your Google Rankings with High PR Seo Backlinks
Usually they just eventually get sued I assume after picking the wrong target.
He probably just scripted it. There doesn't need to be any default functionality for it, if you know how the database works.
The future of .NET is on Linux, not windows. If the community and Microsoft both do everything they can to make that a reality, it could all pay off. As long as you see visual studio only tutorials, windows only build scripts and windows only deployment stories, it won't happen.
>FBI and some forensic science experts used it internally way back before 4chan was even created.

[citation needed]
Your source says he admitted writing the comments, which is much stronger evidence before a court than the original comment could ever be.
welp I was wrong and I can't edit so.. mea culpa
From what I've seen, voat is already an alt-right haven.
it's stopping the trend before it becomes a norm and even grandma has ad block installed
Neural network identifies criminals by facial features
Having a subgraph TemplateVM will get easier with Qubes 4.0, as Qubes switches over to HVM (I think just HVM with PV drivers, PVH in Xen is not ready yet). grsecurity and PaX do not work with paravirtualization, which is pretty limiting in terms of memory management and such (It also opens up some vulnerabilities, which is why Qubes is switching).
There is no racism on the_donald. In fact, the sub prides itself on it's non-racist attitude.
Edinburgh is one of my favourite cities in the world. Spent a year of University there, and visited it on vacation a couple months ago.

There's a pretty cool tech scene, much of it spinning off the University of Edinburgh (great school for AI). Also, a friend gave me a tour of the Amazon Edinburgh office while I was visiting- it's 11 years old (first non-US office), still growing and seems to be doing some neat stuff.

Real estate is different from America. People live in much smaller spaces and generally don't have yards if you live in a city. You'd have to accept that, or commute into the city. That said, Edinburgh is a beautiful city architecturally (the New Town especially). I also found the food to be pretty fantastic.
> Simplicity in agile projects is achieve through continuous improvement of the code.

This is also called "emergent architecture" and its a big lie. You'll at best reach a fraction of the quality you'd have by thinking about said architecture upfront with twice the development time - it works for CRUD projects simply because such projects are dead-simple to begin with.

How are these practices helping us reason about the simplicity of the codebase? How are the people dependent on your code going to handle all of your frequent refactors? What does continuous deployment even mean outside of the web? How do you refactor something as big as a game engine with 10+ projects built on top of it?

More importantly, how are you going to add proper abstractions to an existing project? No refactoring tool will ever do that, it cant be automated and the more advanced a project becomes the harder they become to introduce in the codebase. I've seen plenty of "best practices" projects that were just huge hairy balls of indirections. Yet everyone on the team felt good about it because none knew any better.

You can't judge practices based on how they work for one particular area of software development. Especially when said area is one of the simplest out there.
This feels like the kind of bug I catch early in implementation using quickcheck x_x Is property based testing used in the development of these kinds of systems?
Couldn't you just have said, "this guy doesn't know what he's talking about", like a normal person?

That was hard to parse.
Oh, that's just what I call them. Pretty sure there's another term because the principle is used all over the place, not just in freelancing.

When the client asks for a quote, just try adding in one extra option from your usual. They want a WordPress site? Do some research on their business and offer, for example, one quote for a WordPress site, along with another quote for standard WordPress plus a custom mobile product library for their sales team to reference when pitching products.

The client then has a choice between two really nice alternatives. You thought through their needs and they'll notice that, too.

I've found that even if the client doesn't go for the extras, they'll usually say, "let's definitely talk about this when we work on our sales budget next month. I want the team to tell me what they want." Then at that time, when they give you some bullet points for desired features and ask questions about what's possible, you reply with e.g. three options, including one that is the base price you quoted originally and covers a reasonable amount of features but is just good, plus another price point that's better because it adds another really nice-to-have feature, and then the "best" price point, where every single one of their bullet points is covered and the thing is just really slick. For example, maybe it lets them edit the product prices and save them to different lists for each sales pitch.

The point here is that you are getting a sense for what is important to the client. If you don't have many clients, the bullet points you got from that sales team are gold because you now know much more about their needs and can pitch more while working on the project.

And finally, watch for scope changes and bill for them. There are guys with yachts that were paid for by scope changes, and in fact their businesses count on those changes in order to keep the client relationship in top shape. A scope change is easy money because the client is pitching you rather than the other way around.
If "manufactured" diamonds carried the exact same impurities everything would still stand. It's just another post facto excuse. No one used that argument for extracted ones before manufactured ones where even a thing.

Diamonds are about status projecting/social proof.

Manufactured ones would continue to be considered sub par because "reasons".
Even if they were suggesting that the legal process in question was flawed, that would also not be equivalent to repudiating the rule of law. You may have an axe to grind on that topic, and I am sure that it's a wonderful rejoinder to a wide variety of political dissent. It is a strawman argument however you slice it. If questioning legal processes amounted to an attack on law, then all lawyers would be anarchists, and Congress would be...a pathology, perhaps. So far, there are few issues before the American public in which anyone is claimed or claiming to be above the rule of law, and it has precisely nothing to do with this case.

The more charitable interpretation of SubiculumCode's words, and the one that does not need to assume facts not in evidence, would be that "This is shit" should be taken to mean, "This is terrible news". Which would either way be a normal human reaction, and a valid opinion, despite your attempts to portray otherwise.
I think another consideration is higher earning jobs typically have more of a gray area around what constitutes work. E.g. It's clear that a cashier isn't working anymore when they clock out. But as a developer, I certainly have times when I come up with an idea at home and start working on it, an idea in the shower, etc.
Airbnb Trips and the Netflixization of Travel
I can't really tell if this is still meme status or troll status, but here's an image explaining some of the...uh...finer points of their argument https://i.sli.mg/Xy1alv.jpg
OpenStack Newton – What’s New
Software really is hard - that's why it looks more like voodoo than respectable engineering discipline. It has too many degrees of freedom;

No, sorry, software does not inherently have more degrees of freedom than e.g. building a bridge has. The reason other engineering fields are perceived as "limiting" is exactly because they have standards: they have models about what works and what not, and liability for failing to adhere to those standards.

I would argue that the lack of standards is exactly what makes software engineering look like voodoo -- but it is because of immaturity of the field, it's not an inherent property. Part of the reason software is so complex is exactly because engineers afford themselves too many degrees of freedom.

And I disagree that establishing standards constitutes a dumbing down of the discipline, in fact the opposite: software engineering isn't, exactly because every nitwit can write their own shoddy software and sell it, mostly without repercussions. That lack of accountability is part of what keeps software immature and dumbs down the profession. As an example, compare Microsoft's API documentation with Intel's x86 Reference Manual: one of the two is concise, complete, and has published errata. The other isn't of professional quality.
Show HN: RediSQL a redis module with SQL capabilities
> I think I speak for a great many of us when I say that I'd like a citation for the idea that even 4chan considered "cheese pizza" a code for child pornography.

I've seen it referred to, jokingly, o 4chan and other forums.

For people who are baffled and/or puzzled, it's based on the acronym - child pornography - cp - cheese pizza.
You're thinking too shallow. :)

It took people harrassing him personally, and at scale, for him to snap. And even then he did not ban anyone, but did what amounts to a prank. And even then he did not hide it, but owned it and apologized.

At every turn of this he showed himself to be a greater man than most of us.
> But that is still their userbase, and getting rid of the userbase drastically decreases their value.

Only if they wait so long to clean house that their user base consists mostly of the folks who give them a horrible reputation.

The most valuable online communities are those that aggressively clean house along the way. Losing a small amount of jerks is more than made up for by the non-jerk users who feel comfortable enough to join and stay.

That's why HN has grown as fast as it has. That's why the advice for normal people interested in Reddit is "unsubscribe from the defaults and find niche subreddits." Because the niche subreddits moderate aggressively.

That's why web forums beat Usenet in the first place.
I don't think you understand how Voat works.
- will the app be storing users details ?

- is the app using any vulnerable packages

- will app be displaying secure content

- look at what information in logs

Just some off top of my head.
It's Pangean yo!
A friend proposed another theory, inappropriate as it may seem. That it's a way to draw attention to Reddit needing to make money, and Steve, being the CEO, has to find a way to do it and take blame for it.

If so, he deserves to be applauded. There are things a founder/CEO has to do you can't say.
> Since being dismissed as CEO of VK in 2014,[7] the Durov brothers have traveled the world in self-imposed exile[8] as citizens of Saint Kitts and Nevis.

It's b/s. Durov regularly visits Saint-Petersburg's office where Telegram is built. Source: VK employees, own eyes, [0] (in Russian).

[0]: http://uip.me/2016/04/dark-side-of-the-telegram/
Nobody forced anything. A bunch of people agreed to use new rules with old data, which is why the new chain is in common use. Democracy in action. The same could happen to literally any cryptocurrency you could think up, unless you can come up with a way of invalidating past state to a point where nobody can use it with a new set of rules - which is impossible unless you can somehow cryptographically encode the rules into the chain to a point where you can't access the data without adhering to the rules. (I think a zkSNARK could help with this if it's something that people actually desire.)
They should help to build decentralized no-border alternative to facebook and be paid for this. Facebook is insane and all its users will sponsor worlds biggest censorship. Next step, facebook will sell censorship rights to anyone.
The problem with lobste.rs is getting an account.
Duplicate, surely?
Ask HN: What happened to Kite?
Aside from securities concerns from a few, Kite seemed like a really promising tool that I'd love to include into my workflow. Their blog and Twitter both seem abandoned. Is something still coming?
I'm surprised nobody said it here - it would be even cooler with webassembly! Imagine writing Lua code instead of JS...

EDIT: though now that I look at it, it's already possible:

https://daurnimator.github.io/lua.vm.js/script_example.html
Migrating Yoyo Wallet to Swift 3
Well, this is mainly intended to enforce contracts NOT disputes for uncontracted services so how would you be in this mode.

It will force less boilerplate contracts.
I'm periodically installing FreeBSD on my ThinkPad T400 to see how it's performing with Chromium. It's the only application I use extensively, and the only one that performs really bad with FreeBSD (and OpenBSD also), which prevents me from switching from Fedora.

Is there any magic I'm missing, aside from the shared memory support?
If someone socially engineers a bank employee to transfer money in a bank's computer, the transaction can be reversed if the bank decides it was fraudulent. You can't reverse blockchain transactions without one of: (1) the other party agrees to return the money or (2) a majority of the people controlling the blockchain agree to fork the blockchain.
I certainly didn't get Zed's article, like maybe I'm not familiar with the superior toolings of other languages, but whenever I've used python2to3 I found it helpful enough to get real work done. For example, two years ago, I fell squarely in beginner segment skill wise, and I filed an issue with a repo owner to request to update to be python 3 compatible (an ORM for RethinkDB - https://github.com/linkyndy/remodel). The obviously talented repo owner initially responded he feared it would be complex and take a long time. I then spent a weekend to learn the library, used 2to3 to get 95% there, fixed the remaining small issues, and updated the repo to be compatible with Python 3, passing all tests. Sometimes these python2 programmers just do not want to change.
Yep, here's an Urban Dictionary entry from 2010: http://www.urbandictionary.com/define.php?term=cheese%20pizz...
I completely agree with you. Evan isn't happy just controlling what packages you can publish that use the native api on package.elm-lang.org, or what you can do in the language since the removal of signals, he wants to control even minute things like whether you use a fucking prime in a function name in your own code. It's ridiculous.
That one's covered in the article, wastes too much energy. I submitted this article yesterday and it went by with no upvotes because people probably thought it suggest we return to typewriters and paper piles, which it doesn't (I could've editorialised the title but guidelines say not to). It basically describes how energy inefficient today's offices are and how we can fix them.
Exactly. I'm on a beefy anti-depressant to treat my depression which also has the added bonus of calming my anxiety - it's the only avenue long term. Short term there's relaxant drugs to overcome the attack-in-progress but nothing available to take as an ongoing management dose.
We're already in that environment, it just doesn't get much coverage because it doesn't fit the mainstream narrative: http://reason.com/blog/2016/11/18/election-hate-crimes-hoaxe...
I guess I would think something like if several major markets have reasonably interoperable - and non-contradictory - security requirements then probably the strongest will be implemented by default.

Not sure if it isn't possible to have reasonably interoperable security encompassing U.S and EU, although recent events sure do make me more pessimistic.
with App thining it usually would be half, because it just downloads the thin binary of the executable and frameworks and also the assets for the screen size ..., but in this case it is almost equal, crazy
universal : 157.91 MB,
iPhone4,1 : 136.13 MB,
iPad2,5 : 136.11 MB,
iPhone8,4 : 137.30 MB
Carbon dating, presumably.
TRS-Pic Is Google Images for the TRS-80
This is not double opt-in, it's double opt-out. I didn't opt-in the first place, you just sent me eMails.
Sadly, that's the nature of journalism.
When someone empties your bank account there's no way to reverse the transaction. Maybe "easier to hack" isn't the best description, but security-wise it means if there's a successful attack by any method, you can't exactly restore your money from a backup.
Absolutely!

Here's my sketch for a system like that;

https://roamingaroundatrandom.wordpress.com/2014/06/01/a-dec...
Issue #20: Turbolinks with Phoenix and How to Binary Data Over Sockets
Even a negative altitude isn't necessarily incorrect,
if the "altitude" is based on a mean ground level.

This has been niggling at me, so I had to check :-)

As Mars lacks water, the idea of a "zero datum" isn't really meaningful, so an arbitrary point has been used.

Between 1971 and 2001, the "zero elevation" point was an atmospheric pressure of 6.105mb [1] (for comparison, Earth's zero datum is 1013.25mb).

Since 2001, the zero datum definition has been based on the mean radius of the planet (an ellipsoid called the Areoid, similar to Earth's Geoid).

The lowest point on Mars is therefore at an altitude of -8200m (the Hellas impact crater). [2]

(edit) Interestingly, the intended landing site - Meridiani Planum - is "below ground" at an altitude of -250m. [3]

[1] https://en.wikipedia.org/wiki/Geography_of_Mars#Zero_elevati...

[2] http://geology.com/articles/highest-point-on-mars.shtml

[3] http://io9.gizmodo.com/this-elevation-map-of-mars-makes-the-...
If you want to see a simple example of this in action, consider the impact that the California Air Resources Board has had on vehicle emissions globally. If you want to sell a car in CA it has to meet CARB standards. This effectively means that if you want to see a car in the US it has to meet CARB standards. As a consequence one of the largest car markets requires a specific minimum level in terms of emissions and almost all cars built for an export market can meet these standards or be easily modified to do so.

One state moved the needle here just by virtue of being the largest component of what was the largest market. There is no reason the same could not be done for internet-connected devices.
As much as I love Edinburgh, and hope the technology sector and economy there (and in Scotland as a whole) thrives, it has to be said that the technology job market is currently very small in comparison to London. Some stats to put this in perspective: There are 328,000 "digital tech jobs" in London[0], the entire population of Edinburgh is 464,990[1], and Edinburgh is the 11th biggest technology cluster in the UK with 21,000 "digital tech jobs"[0].

And if you're thinking of relocating your family from the US, there are 5 American schools in and around London[2], whereas I believe the only one in Scotland is in Aberdeen[3].

[0] http://www.bbc.co.uk/news/technology-37380696

[1] https://en.wikipedia.org/wiki/Edinburgh

[2] https://en.wikipedia.org/wiki/American_School_in_England

[3] https://en.wikipedia.org/wiki/International_School_of_Aberde...
Thanks. And if you are given a big piece of source code. And no static/dynamic tools are allowed, only manual review. What should you look at first (PHP based site, authentication for users, online payment, very dynamic web-site).
Ask HN: How often do you get rejected for “lack of passion”?
So I've been interviewing with some companies lately (London) for software development position. All I managed so far is get rejected from a bunch of places. I'm not a "rockstar dev", but I've got ~5 years under my belt and have never been fired, so I think of myself as average I guess. Most companies either ghost you after the interview or give some bullshit feedback. 2 out of 3 latest ones however stated something along the lines of me "having lack of passion", "enthusiasm" for their product. These companies were not exactly startups either.

Now I worked in a bunch of boring industries such as web agency, insurance company and lately finance. I have no passion whatsoever for either of these and yet I manage to do my job just fine. Is "lack of passion" just a code word for "you don't seem too eager to bust your ass and do unpaid overtime for us"?
Consciousness is a recurrent neural network
One of the problems with consciousness is that you know that you are conscious but you can't know if others are. Consciousness is like seeing a dog in front of you but only you can see it.

Let us begin with an example of seeing a dog: when you see a dog, photons from the dog come to your eyes and converted to neural signal, then, a neural network will recognize that what you're seeing is a dog.

How do you know that you're seeing a dog?

I believe we can explain this in the same way as seeing a dog. But in this case, what you see is not photons but signals from within brain itself. In other words, brain takes its current states (signals) as its input (this is possibly no different from brain takes signals created by your eyes as its input.) And as you may already known, this is similar to recurrent neural network.

In this way, consciousness is a concept learned by brain about the inner processes of brain itself which is similar to: dog is a concept we learned when seeing many dogs!

Stream of consciousness is the result when brain trying to model itself and continuously receiving signals from itself!

We can put this further and ask: is any brain of any kind (dog, cat, whale) conscious?

My idea is that there is a threshold when brain becomes complicated enough to model its own signal!
Show HN: Zamazin.co – Simple text converting tools
Haha! Long live "freedom" of speech!
Introducing- the Insult Blockchain- so in 10.000 Generations your ancestors know you called that guy a maggot
Sounds like Welchia. See, e.g., here: http://www.internetnews.com/ent-news/article.php/3065761/Fri...
Someone came up with a very simplified version, BTW, http://voxday.blogspot.com/2016/11/alt-right-what-it-is.html short enough to quote in full:

1. Alt Right is right-wing. No lefties!

2. Alt Right so edge, not lame. Cucks and cons so lame.

3. Alt Right gonna win. Not gonna lose.

4. Europe good, church good, white people good. History good too.

5. Freedom for everybody!

6. Stay home and don't touch the foreign poop.

7. Equality bad, equality isn't even.

8. Science good. Made-up shit bad.

9. Everybody votes they boys.

10. Small crew can't tell big crowd what to do. Not for long, anyhow.

11. MS-13 and Latin Kings gonna kill Crips and Bloods. And vice-versa. Keep them apart.

12. Alt Right don't give no fucks.

13. Free trade bad. No jobs, no money!

14. White people good.

15. Leave all them Red, Yellow, Brown, and Black people alone.

16. War bad, genocide bad too.

TL;DR: Everyone should be left by they own damn selves