skysight-inc/HackerNews huggingface dataset:
> That means that you can't pass a GraphQL query directly to an underlying DB provider without verifying what is being requested. You'd end up writing about the same amount of code that you'd have written with a standard REST-style (or other) interface.

One benefit of committing to PostgreSQL as a backend: It already supplies a rich set of features for fine-grained security, and with views it's easily possible to add the filtering features.

This can reduce the need for much of the app middleware that does this traditionally. This is the thinking behind PostgREST, for example.
I imagine I'll get downvoted for participating in the language flame wars but....

From the guidelines:

Please don't bait other users by inviting them to downvote you or announce that you expect to get downvoted.

https://news.ycombinator.com/newsguidelines.html

If you think you might get down voted, take extra care to ensure you're expressing your thoughts clearly and civilly. There are those who will down-vote regardless, but you can "decrease the attack surface" by writing the best comment you can.
Synthetic USD/CNY/JPY bonds: https://www.youtube.com/watch?v=XehDfHTa8Sg

This stuff is brilliant.
ES6 and ES7 fixes everything here except strict typing, by the way.
Yeah, but I only ever ran it on Intel (mostly a Pentium 166mhz--luxury, I know!), and that's the best way to compare its performance to other consumer operating systems at the time anyway. Never had the pleasure to use a BeBox.
That's fair and those are embarrassing tales in Silicon Valley. One difference is they were/are bets on a technology that wasn't in the market yet.

We buy and sell thousands o homes, hopefully at the appropriate price for the market's current level of risk. Hard, deeply appreciated by customers, but not much handwaving on how it will go to market.
cables are rated for different power and that is signalled by specific resistor values. I'm assuming in this case Apple just cheaped out, to save a few cents, and didn't make them all rated for 3A. Therefore you'd only get slow charging as a side-effect.
Is there any way to implement access control logic outside of row security policies in Postgres? Or have any sort of logic in between requests based on what type of request is coming in?

The automagical nature of this software seems great but any relatively complex application would require not only CRUD manipulation but also side effects to go along with it as well.

With express I suppose you could have a middleware fire off before hand to parse the incoming query, figure out what it is, and take any extra action as necessary such as denying a request or making some side effect of the query happen. This would be a by default open policy however for those queries which you have a postgres scheme for but lack the express javascript to parse the incoming request.
Away is only half the story. If you get another job NBD. The cycle continues. And up until now, you're right.

AI is not just tools. AI replaces brains as well. This breaks the cycle. You know what they saw about past results and future returns? Apply that heavy and frequently.
you're missing the point so hard it's crazy. drugs that are lethal in the single microgram range can not be safely handled outside of an actual laboratory with rigiorous safety standards and techniques.

It doesn't matter what form it reaches the end user in when every step of the production process has the potential for invisible lethal mistakes due to the slightest lapse of attention or proceedure- and that assumes the original dosage proceedure was designed correctly.
Thanks again. Your suggestions led me to scan the QC174.45 shelves at a nearby university library. I settled on Maggiore's A Modern Introduction to Quantum Field Theory, which seems to be almost all Math.
Several of your recent comments to HN have been uncivil. Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
Maybe read/click count is hackable (bots?) and there is plenty of motivation to taint the system (new products would love to make it to the top of HN). Humans up/down voting seems fairer, no?
I love this! I love the static when tuning as well as how quickly it starts playing from each station. The only suggestion I have it to put political boundaries so it is easier to see where you're at.
Personal attacks aren't allowed on HN, regardless of how bad someone else's comment was, and will get your account banned on HN, so please don't do that.
Love this! Works great and simple design.
The sellers are required to disclose any issues like this, ex. if the police were forced to be called to their neighbors, etc. Other neighbors in the area would know about "terrible neighbors" so if this came out, they could sue the sellers and more importantly the selling real estate broker.
Knots on Mars (2012)
Do you mean like panhandling? Or being homeless? Yeah, those pay well.
Also the cost of moving twice. First into a short term rental so you can get the money for your next down payment from your current home, then moving into your new home.
AWS Re:Invent 2016: Another Day in the Life of a Netflix Engineer (DEV209)
Is this what used to be HyperTerminal?

I thought this was about Hyper, the Rust crate for HTTP functions.[1] That's at 0.9.14 and has major outstanding bug reports. If that had reached 1.0.0, that would be significant.

[1] https://crates.io/crates/hyper
I apologize. I was unaware of that rule. I won't do it again.
Sorry. That comment is one among many I wish I could take back on HN.
The gmail DKIM signatures are not a reliable verification that the contents of an email have not been modified. The algorithm and key length of the signatures used by gmail (sufficient for anti-spam) are cracked with an honestly trivial amount of hardware according to RSA in 2003 [1]. Since the premise here is that a state-backed adversary is involved, we can reasonably expect that the keys are compromised.

[1] https://www.emc.com/emc-plus/rsa-labs/historical/twirl-and-r...
Development is very active, will release a public beta in a couple of months.
So I watched that and heard that you used BenchmarkJS which I believe intentionally prevents optimization from occurring, otherwise many tests would just end up being optimized away. Have you considered how function inlining might affect your results versus benchmarks like you ran in the video? Have you profiled them side by side under actual usage?

"Anonymous" function calls (function expressions, either immediate or not) are generally only more expensive because they're re-created all the time. Sometimes this is necessary to create a closure, often it's not. If you were to profile `var foo = function() {}`, performance should match the function declaration variant identically, so it's not the method of declaration that affects performance.
Software projects at least don't scale linearly, doubling your 3 man team doesn't double output. It's not a stretch to say that having 10x money and manpower won't scale your engineering project that far, and may even hurt it as you add managerial layers and politics.
GraphQL works really well for some edge cases, and those edge cases will be more evident if you're FaceBook. For smaller projects, the benefits of integrating GraphQL libraries on the client and the server v/s special handling for a limited set of APIs is not obvious.

By special handling, I meant:

https://example.com/friends?fields=name,pic,posts&posts_len=10

The vast majority of APIs will not require this kind of result-shaping. And for those that do, passing comma separated fields (using a protocol teams already understand) is worth trying before adopting something more drastic. Of course, YMMV.
I actually agree with you, and fighting the urge to get a dig in can be tough. You can also see from the other responses to that comment how it derails conversation. I'll try to be better in the future.
Uber is not a small 10 person startup. It affects everyone of us. Would you be so forgiving if this would have been a Russian or a Chinese firm doing this ?
Their AC APs are pretty power intensive, last time I tried them they were drawing well over 20 watts each, which would have required we replace our switches due to the power requirements.
Hi, we typically run PG behind a Rails API for authentication but presumably the OP was referring to the Google Firebase JSON based security models [0] which, it seems, are related to "native" authentication methods. Not sure how this would be supported by PG though.

[0] https://firebase.google.com/docs/database/security/
> Federighi likes to mock his thick, blown-out coiffure, referring to himself sometimes as "Hair Force One."

http://money.cnn.com/2014/06/03/technology/apple-craig-feder...
Yes, Amazon is getting private labels to compete with clothing stores that have their own private label like JCPenny, Marcy's, Sears, etc.

Walmart has been trying to force the government to charge Amazon sales a tax, and as a result, Amazon is looking for ways to build a warehouse store near Walmarts and Sam's Clubs to compete with them.

I've known people to go to a Walmart and look at an item, and then scan it into the Amazon app to see the price on Amazon, if it is cheaper on Amazon, they order it online. Customers do this with Best Buy and other stores, just scan in the product and find it on Amazon and compare prices. Now they are after the fashion designers with their own private label that is cheaper than some of the others.
Thank you for your compliment :-) If you like it, please help me in spreading word about it!

By the way, I had started writing a novel 2yrs ago, but I am not finding time to complete it!

I didn't understand what you meant by "It'ts a timely contribution for my work".

The book is far from complete though, and the 5'th chapter was written in two hours :-D. I have observed that (when I take a vacation of a week to program), I am more effective when I have 2hr programming sessions.

I'll contact you when the book is done :-)
The best way to invest is to join and exercise your stock options :)

We're working hard to earn the right to operate as a public company.
No need to apologize. Just wanted to bring it to your attention as you'll likely get down voted just for mentioning downvoting.
Stryd, Boulder, CO, Techstars Boulder 2015 | Intern | web Developer

http://www.stryd.com

Stryd is a multidisciplinary team that is enthusiastic about the future of wearable technology for athletes. Out of this passion, we've developed the world’s first wearable power meter for runners that provides insight into their running technique and performance.

We are looking for web developers who are knowledgable with mordern development. We use plain javascript/HTML/CSS for the main page and Polymer/D3JS for the other critical parts.

We also want you to be an endurance runner, or a triathlete, or at least to have the passion about running. This is very important.

Good sense of design is bonus.

You will be leading the data analysis development for Stryd, and helping on the other part of the web development.

Being able to relocate to Boulder for the internship is required. BTW, if you like running, Boulder is pretty much your dream place. You get tons of opportunities to run and train with LOTS of elite athletes who are Stryd ambassadors here.

If interested, please send an email to kun@stryd.com
It's kinda a twist on razors v razor blades. There's profit in power. And as much as VCs and such rave about disruption, there are just some fights they're afraid to pick.
How to Change Wi-Fi Channel for Your Router
Naming and formatting it differently is an easy way to get away from the REST dogma, though.
Does anyone know how to tell if a wifi device uses beam-forming versus omnidirectional microwave emissions? I imagine that beam-forming devices expose people to less microwave radiation (2.4 and 5 GHz).

Somewhat alarmist but an interesting perspective:

https://m.youtube.com/watch?v=F0NEaPTu9oI
How did they pick the stations? There are only two in Japan, one of which is playing "I've been Working on the Railroad" in Japanese.
Is it legal to refuse to delete a users account?
For what purposes are you allowed or prohibited to access user location data? Which external firm is auditing the access to user location data? Where are the public reports of these audits?
https://news.ycombinator.com/item?id=13164392 According to `jdross, purchases are funded with a small amount of equity and the rest with "debt-like instruments" so the taxpayer is still potentially on the hook. But, yes, homeowners don't seem to be at risk.
I have no idea what you're talking about, I'm just telling the truth. I don't access customer information, and I don't know anyone who audits the logs so I can't comment on those. I also don't know what other processes are in place, I'm sure there are others, but I've just never had to deal with it so I don't know. But I trust that Uber takes the security of their customers information very very seriously.

The image of Uber being a brogrammers haven just isn't true anymore. There are thousands of engineers working that care very much about the company and our customers, including drivers and riders.
Create Custom Subtotal Labels and Style Object and Access Hyperlink from a GridWeb
I feel like I'm missing a lot here. Why would anyone go through all that trouble just to create an asset that follows the price of USD? Why not just use USD?
I think that most would say that about any kind of offer. In practice, most people want to sell their homes quickly and are nervous about turning away fair offers because they might not see a better one. You might as well be saying that you overvalue your home and never plan to sell, which is unlikely. :)

I don't know if OpenDoor is "the answer," but it bothers me that homeowners are often punished by having to work locally, where their skills are unlikely to remain ideal for the area over many years, or work remotely, which not every career allows and not every personality is suited. Being able to sell a home so quickly is even better than having a month-to-month lease. Presumably OpenDoor's higher fees are something employers could start to pay for as part of relocation (and large employers might negotiate volume rates.)
I picked up Red Notice from the "library" at a resort in Chile last September for the flight home. What an awesome story. I learned a ton reading it and the book reads like fiction even though it is factual. Highly recommended.
Disclaimer: I work for Uber. However, my opinions are mine. I am also not defending nor attacking in any way Uber gathering location data.

With that out of the way - you know your cell phone carrier already has this data right? They have way better data than Uber ever will about all your habits, including establishing relationships based on who you call, which sites you visit, who you are signed up on a plan with, etc etc. A much more weakly guarded pot of gold, I would say.
I seriously don't understand why the updated Uber app asks to access my location all the time -- as opposed to only when I'm using the app. Not only is it not required but it's a huge drain on the phone's battery, potentially decreasing the battery's life.

Now I'm from a third-world country and can't afford to buy a $1000 phone every year, so I have to be careful with the life of my phone.

The turnaround this, I found, is to disallow location to the Uber app when not using the app and allowing access only when I use the app. This, however, is a pain and the Uber app behaves weird if I do so (the previous trip does not end after hours of it actually ending).

Very poor UX from Uber, potentially dangerous, definitely unethical. This is definitely a trend -- startups start with being caring of its customers, but once they grow big, they become callous and even malicious when it comes to users (I don't ask of them to give every customer personal support, but not mis-using customers is the least I can expect).
That's key. To say "people will do the work that requires more intelligence" is easy to say. This issue is that IQ tipping point is nudging up. What good is an IQ of 100 in a world made for 110 and up?

This friction starts when the 100s "push back." You don't have to be a genius to raise hell, do you?
That seems like a broad stroke. Libertarianism is just a collection of different ideals, the same way socialism and capitalism are, around a few central values.

The primary tenants are the importance of civil liberties and autonomy (as opposed to authoritarianism).

Beyond that, you could be a libertarian and promote laissez faire capitalism, or you could be a libertarian and promote socialism. Saying you broadly disagree with libertarianism just confuses me: you don't agree with civil liberties and you want authoritarian government? (it's a rhetorical question)
The intensity 16GB RAM limit complaints really surprised me. I don't remember such complaints about the 2015 model lacking a 32GB option. We've been stuck at 16GB on the MacBook Pro for years now.

Did something happen in the last year that made everyone demand 32GB?
Sure, but that's a much slower cycle than running your unit tests locally.
In negative market conditions, you can't stop gravity. Not with VC funding, engineers or technology. Your business is a double edge sword - the only way you grow is by purchasing more debt. You're ignoring reality with a delusional belief in consumer demand.
Uber Clone, Taxi Booking Software, Uber Clone App
Just a note since I've had a few emails and I can't edit it at the moment we're only looking at Australian developers for this position.
Didn't even bother to look at the maps, did you? Some of those bases are inside territorial waters allotted to the the Philippines by UN rules, within spitting distance of the main Phillippine islands, and also within easy striking range of Malaysia and Brunei.

Here's a diagram for those who are interested: http://www.abc.net.au/cm/lb/5464158/data/south-china-sea-map.... Note how close the China claim line extends to various other nations.
Mercedes-Benz Poised to Topple BMW as World’s Luxury-Car King
I'll repeat what I have said on previous threads: if you have a low RF noise environment, ubiquiti is ideal. Anything else, you need to buy a real system with three radios per node and a smart controller that adjusts channel/power on the fly.
There isn't much debate on this anymore in biology - practically every important evolutionary biologist accepts that speciation is driven by natural selection. Of course other factors matter too, like goegraphic separation, and so forth; they can provide an opportunity for natural selection to drive changes between groups, that when they grow large enough become a difference in species. But it is natural selection that creates those differences.

There is a small minority that think otherwise.
I'm just wondering what problems Kimono, Apifier, and 80Legs are trying to solve.
Backpressure is more common than water across engineering disciplines and it isn't an integrated part of every distributed system out there? Isn't that a bit of an oversight?
Unfortunately, "We were told the reason to track...is for fraud", does not make me very confident what you believe to be true is really true. And makes me even less confident considering your assertion that "nothing nefarious is going on. If there was, we the engineers would be against it completely." If your knowledge of what ultimately happens with the data relies merely on what you are told, how can it be possible for you to know nothing nefarious is going on?

I was more hoping you'd try to answer the part that addressed the "While Using" option being removed. I'm guessing that one might also be too difficult to answer honestly in a public forum?
Uber employee here too. Would never ever check any data of anyone not related to debugging crashes, race conditions, unexpected app behavior etc etc, its just not worth losing my job. Despite the bad press it is actually a pretty freaking great place to work. Also wanna +1 the warnings about data access and only looking at PII for legitimate purposes are all over the place.
> The links and comments on Reddit and HN are prime mediums to infiltrate and carry this out.

I don't know about Reddit but we see comparatively little on HN that appears suspicious once we look at the data (e.g. which users have voted on a post). Anyone who suspects astroturfing on HN is welcome to email us so we can look into the matter—which we always do—but not to accuse other users directly, because both the odds and the cost of an unfair accusation are much higher than people realize when they do that.

I listened to that talk you linked to. At the end the speaker mentions four "hallmarks of astroturfing": (1) use of inflammatory language; (2) use of charged language to "debunk myths"; (3) attacking an issue by controversializing the people around it rather than addressing the facts; (4) reserving all public skepticism for those exposing wrongdoing rather than wrongdoers. It seems to me HN is in pretty good shape here: the first three violate the site guidelines, and the fourth seems rather rare and is not received well by the community.

Maybe there are astroturfers getting away with it on HN. If they exist, though, they're being clever about it, so we'd be interested in anything the community can figure out. Just please don't accuse each other directly without real evidence.
The plodders he wants are not well paid either. The people who tend to rise to the top of silicon valley companies tend to be like he describes, and tend to work many many hours.
At my college, CS 101 was an intro to the C language and it was required for all engineering students, not just comp sci majors. I tutored a lot of guys on my dorm floor so they could pass it, but most of them couldn't wrap their heads around any of it. Not even FizzBuzz. And these aren't stupid people, either. Most of them went on to do well in aeronautical and civil engineering disciplines.

Programming requires a certain amount of abstract thought that not everybody is capable of. As far as I can tell, there's a direct trade-off between spatial reasoning and abstract reasoning.
So, it's okay to get customer's location data 24/7 because someone else does it is your best argument and reasoning?
Yes. Unless they said otherwise in their TOS.
This is all great to write down as to what it could eventually become.. I think it has to be chunked to more manageable units, first. I mean, whether you have the individual skills required or not, it'll start by requesting a page and inevitably forgetting to show the respect Unicode deserves.

That's what I'm doing to learn.

- See how a page is structured (does it use schema.org's stuff?). Its fields, URL pattern, sitemap, resource urls, selectors, etc.

- Fetch a page.
- Parse it and extract data.
- Save data.
- Rinse, repeat.

I'm also learning about D3 and many cool things.

Check out http://atlas.media.mit.edu/en/profile/country/usa/

As to your target audience, I think you'll probably serve the Many-Faced God. In a gold rush, people who sell shovels make a good living. You probably want to make something that helps with decision making or triggers buying according to price (from your description).