skysight-inc/HackerNews huggingface dataset:
> So go ahead and tell Mr. Fielding that his definition of REST is incorrect.

Not "incorrect", but I'd be happy to tell him that his term has been co-opted by the programming masses to means something vaguely related to the original meaning but less precise. I suspect Mr. Fielding already knows that.

> I am well aware that REST no longer means what it originally described, which is why I think it should go by another term that is not burdened by being a marketing buzzword.

I agree there. I think changing how the masses use the term is a lost cause. (Consider the incredibly hard-fought battle to reclaim the original definition of "hacker", which after decades did succeed in establishing it as a secondary definition. That's the most successful case I've ever seen.) So I think ryeguy has it right: call Fielding's definition "HATEOAS" "real REST" or "hypermedia REST" or something.
Flickr is the only part of Yahoo that is worth anything. The question is how much.
In 90 days the team will release their PoC code and you can take a look.
Innate qualifications is an oxymoron. Your thinking on the matter is confused.
Addendum: given a known good repo, an infected repo can be detected by diffing all elements of the repo. A parallel hash scheme with a strong hash function (SHA-3 at this point) could be used, which would easily detect if parties have differing histories by comparing commit hashses using both schemes (both should match!)

We should assume that nation state adversaries may have known this for a while - whether they have acted on it remains to be seen. I suspect it is unlikely for git because it is measurable after the fact (unless you contaminate every instance) I'd be more worried about signing schemes.

(Wrote previous while bathing a toddler)
What to Do After You Incorporate Your Business – Legal Checklist
Also factor in while there is a chance you may be rewarded for a 60 hour week, you are also driving wages overall downwards as two people working 60 hour weeks work the same number of hours as 3 people working 40 hours a week. Thus increasing the total labor pool and decreasing effective demand.

In my opinion you are often doing yourself and your fellow workers a disservice by working that much for free. If you own the company this is a different matter of course.
David Porter, the founder and CEO of 8tracks is a stoic
Can't be that much different from using Windows 10 in tablet mode, or any random Android tablet.
>If they have profits, by definition they are not investing enough.

So nobody deserves a return on risked capital? That's insane.
you can read it online for free here

http://www.george-orwell.org/1984/
By the way, Skype and Lync("Skype for business") are different products with a different codebase. But I find Lync to be the worst of the two.
How a Random GitHub Repo Led to a Shell Access Google Dork
Lonnie Dupre thru hiked the Alaskan trail and brough a giant bag of wild rice cereal combined with pumpkin seeds and dried fruit. Seemed to work well for him...
Hello personal website, goodbye cv
The real assimilation dilemma
Five Perspectives on Scaling Agile
It's easier just to upload malware to a torrent site. Windows crack, let other people or botnet to download it and suckers will get your malware too. If AV complains, say that is an expected behavior.
Yeah, I used to do a lot of financial reporting for a medical group. It eventually got to the point that after the second "those numbers don't look right" that I started asking what they wanted the numbers to show so I didn't waste any more of my time.
The article mentioned a global all-hands meeting in Vegas, on the rooftop of the Palms, with Beyoncé performing. That sounds like a pretty nice perk.
Not, at least as per my experience trying to get Isso working and interacting with the developer for the first time: https://github.com/posativ/isso/issues/305. Spoiler: He helped me get Isso working!
Worth noting that Facebook stopped offering SHA-1 back in November[1]. Cloudflare still offers SHA-1 for paying customers (via a root certificate pulled from trust stores, i.e. which are only supported on outdated devices/browsers). Not sure about Twitter.

[1]: https://www.facebook.com/notes/protect-the-graph/retiring-sh...
A Better Way to Make Buttons in Sketch
No, I claimed that all scientist would have had the experience of not reproducing something. Because if they do it a lot, as part of a regular process then they will eventually find something that doesn't work because the original scientist didn't document a step correctly or misread the results or just got lucky due to random chance.

Just like all developers will eventually find a bug in code they code review. This is different from all code they review having bugs.
Telescreens more or less fit the bill. From Wikipedia:

> Telescreens are fictional devices which operate as both televisions and security cameras. [...] All members of the Inner Party (upper-class) and Outer Party (middle-class) have telescreens in their homes [...] Telescreen cameras do not have night vision technology [but] their microphones are incredibly sensitive, and they are said to pick up a heartbeat.
I'm trying to play with this in git. Added the first file, committed, and then overwrote the file with the second file and committed again. But even when cloning this repository into another directory, I'm still getting different files between commit 1 and 2. What does it take to trick git into thinking the files are the same? I half expected "git status" to say "no changes" after overwriting the first (committed) pdf with the second pdf?
Separate root windows, hmm. Wonder what effect that has one security...
As I understand it the attacker would have to generate both versions of the message. If an attacker could generate a second message with a hash that matches that of an existing message from a third party, that would be a second-preimage attack, not merely a collision attack.

Even MD5 is still considered to be second-preimage resistant: http://crypto.stackexchange.com/q/3441/21238
Context: NYT will use it http://www.nytco.com/the-times-is-partnering-with-jigsaw-to-...
Basically this whole argument comes down to two viewpoints:

1) If you believe in Net Neutrality, then you believe the government will be a good and objective manager of the internet.

2) If you believe nearly everything the government touches it fucks up and cannot be trusted to manage anything, let alone something as open and free as the internet, then you're against Net Neutrality.
I think the idea that flickr is worth anything is still in question.

https://petapixel.com/2016/03/22/flickrd-rise-demise-photo-s...

I find flickr with Creative Commons search incredibly valuable.

> Yahoo finance and Fantasy and Sports are MUCH bigger then Flickr.
Interesting, because a common criticism of Go is that it's "stuck in the 70s". [1] It's "modern" only because of its age, not because of its features.

[1] https://github.com/ksimka/go-is-not-good
Hacking Android phone. How deep the rabbit hole goes
Don't worry, they're just pretending not to get it. It was a great joke.
Protecting privacy and confidentiality in data and communications
I thought the reproducibility crisis was limited to the social sciences and some areas of health/medicine, this is the first article I've seen that claims it is a general problem through all of academia.

The Wiki article on the Reproducibility Crisis cites a Nature survey that makes it seem like the issue is widespread through every industry, including the hard sciences like physics and engineering: https://en.m.wikipedia.org/wiki/Replication_crisis#General
I'm an avid runner. I can say with confidence there's next to no money in running if you're not a unicorn in the elite circuit. I follow the sub-elite scene moderately closely I'd say. The successful ones who are at it full time and have a sponsorship may live in a house or condo not much bigger than a shack. Some live out of their van.
I don't think that applies. There is been ethical questionability in almost every company. If not their business model then some of their actions. "It's just business" is the mantra. I think most people are smart enough to understand even if they are taking a salary from the company.
> I very rarely query in person before a purchase

Yeah me too, for things I buy for myself. But it's absolutely the norm for software purchases of $500k. That's what everyone does, it's extremely common practice for any org purchase of software for over 100 people.

If the author were actually looking to spend $500k, he definitely would have called first and done a bunch of research. Nobody spends that much without talking to someone. The only reason he didn't have that dialogue is because he thought he'd get the whole thing -- apparently a $500k value -- for free.

That's what I mean about the price tag being a signal. It should have signaled a phone call, at the very least.
At the end, the author mentions that this type of software is available for iOS as well. My understanding of iOS is that this kind of thing is virtually impossible, because 1) apps must be distributed through the app store, and will be removed if found to be spyware, and 2) app developers have much less ability to do things in the background, especially using the microphone and camera. Is there anything written about actual examples of this kind of spyware on iOS yet?
I was looking for this. The current title makes it sound like most scientists are incompetent.
There's also a lot of CC licensed stuff that might already be allowing use for such purposes with the authors not expecting any return from it.
This is a very bad idea. Some healthy bacteria cannot be replaced once they're gone. You should only use antibiotics when the pros outweigh the cons, which is if you suffer from an infection.
"Website builder Wix acquires terrible amateur hentai repository DeviantArt for a $36M loss"
We have no ability to terraform anything, let alone a planet, let alone the economics of it ever being feasible. Life isn't a star trek episode. We can't just go and 'terraform now' as you say. We can barely land anything on Mars without a 50% failrate right now. We're talking technology way, way into the future. Hundreds, perhaps thousands, of years.
we don't use the word 'hiking'

Yes we do.
DA is what inspired me to make my first website. They really pioneered strong community collaboration, long before social networking on the web became cool.

I find the valuation a little surprizing, but I guess that is what happens when you value an established business on actuals instead of potential. Good get wix.
Most people doing science don't have and probably never will have tenure.

My guess would be that most small studies are set and conducted by people under immediate evaluation. I don't have any good guess about large ones.
>Parent post is about why using numbers is not necessarily correct because those numbers are based on assumptions that are not valid in Tesla's case.

And my post is about how these things are just said, without any evidence. I thought this is a forum of critical thinkers? And yet we have people saying that "well, it's not really a car company" or "but Elon!" trumps actual data.

>so expecting Tesla to follow the trajectory of existing car manufacturers is quite imperceptive

This isn't about the path to get there. At the end of the day, cars are cars, and Tesla isn't the only one building EVs now. To think that they are going to, somehow, have margins in the multiples of existing companies in both the automobile, solar or battery business requires explanation. "Elon is unpredictable" isn't one.
> a lot of ordinary mathematics that is outside of ZFC

A lot of ordinary math? I think there's one if not two exaggerations in there.

> My opinion is still that ZFC itself is unnatural as a foundation for mathematics, precisely because we have to do so much encoding to get anything useful out of it.

One of the things Friedman likes to emphasize about the foundation of math is that there is very little you actually need to do with it. A good foundation is one that you don't even need to know is there. Most mathematicians don't work in any formalism, so a foundation doesn't need to be useful. It's not as if anyone actually needs to do all those tedious set encodings.

Except that many of those who call for new foundations are really interested in mechanical proof checkers, and those do have to be useful. In order to make these arguments less religious, I think it would be worthwhile to adopt Turing's mathematical philosophy, which called for adopting mathematical foundations on an ad-hoc basis (or even no foundation at all). In other words, choose whatever foundation (if any) for the task at hand. This would make it easier to argue that, say, type theory is a more convenient core for proof checkers.

> This is not a direction that Friedman considers worthwhile, because he thinks that first-order logic and ZFC are inevitable.

That's not how I read him. He thinks that FOL and ZFC are good enough, and as foundations don't matter in practice (a good foundation is one you can ignore; I think that's a quote by him), it would take some achievement to justify seriously considering alternatives. He even says what it would take: easier teaching and/or easier proofs. So far no alternative foundation has been able to improve either one.
That is definitely not a problem with all of the US. In my field (advertising), most of the engineers are in at 10 and out by 5, or working from home.
>And the whole library/build ecosystem works a lot better

Seriously? Maven was one of the things that made me run away screaming from the Java ecosystem.
I wonder if you could model this similarly to populations. As in will the malware ever go extinct? Obviously an attacker probably won't stop seeding, but let's say shim does stop seeding. At this point x% of seeders have the payload. Seeders on average share the file y times. Will x tend to zero below a threshold of 50%?

And if the attacker does not stop seeding, will the infected quota stabilize?
That's not an issue with the torrents. It's an issue with the magnet URI format for referncing torrents.

The "good" torrent would not be susceptible to attack via this receiving the entire torrent file directly (say over HTTPS) is fine.
"That said, attacks only get better"

In the case of MD5 collision research, initially it took a cluster of PS4 months to find one. But a few years later a laptop can find a collision instantaneously. So yeah, expect rapid improvement of SHA1 collision feasibility.
Since when does revenue matter? That's like selling a car dealership that does $100mm a year for $450mm, when the profit is only, say, 5% per car sold.
At this point, since papers like Nature and Cell are so important to scientists, could it be feasible for them to simply require any submitted paper to them would only qualify for publication if the results were independently replicated?

They could even smoothen the process by giving the draft a 'Nature seal of approval' that the authors could use to get other institutions to replicate their work, and add a small 'Replicated by XX' badge to each publication to reward any institution that replicated a study.

Funders of studies might improve the quality of the research they paid for by offering replication rewards. I.e. 5% of all funding goes towards institutions who replicated results from research they funded.

Of course there would still be some wrinkles to iron out, but surely we could come up with a nicely balanced solution?
I made this version for me of the relevant posts, too big for pastebin, hope permissions are ok: https://app.box.com/s/l36rfge3stx6go34or6l64m2eexijd26
Some initial posts are warmup.
More stories of Uber’s out-of-control workplace culture emerge
Also arguably, you probably aren't as productive pro rata working 60 hours as you are 40. So following that to conclusion the 3 people working 40 would be more productive than 2 people working 60.

There are mitigating factors to this i.e. each additional member of your headcount incurs their own cost overhead; also that certain roles and responsibilities can't be serialised so easily.
Why should someone who cheated at a PUBLIC event and very publicly claimed the prize and actively misled other runners and the judging committee not be exposed publicly? Is it not in the public interest to punish these peoples? Or should we never report on such misdeeds for fear of any personal and professional retribution? Isn't that part of being a responsible adult in a civil society? She's a sponsored running/lifestyle blogger, for God's sake! The social contract works for a reason.
>The 21st Century Cures Act—a rare bipartisan bill, pushed by more than 1,400 lobbyists and signed into law in December—lowers evidentiary standards for new uses of drugs and for marketing and approval of some medical devices.

It shows again that we will not have sane healthcare system when there are thousands of lobbyist working to keep it insane.
I am a social scientist studying human behavior, and this is a huge problem in the field. Myself and my statistician friends who analyze the literature have basically concluded that most extremely "novel" and "surprising" findings in the literature aren't even worth trying to replicate (remember, replications cost money to run, so before you start you have to make some judgment about the likelihood of success.) This is especially true of the "sexiest" sub-topics in the field, like social priming and embodied cognition. If you want to learn more about this, the place to look is Andrew Gelman's blog: http://andrewgelman.com/
The reason it happened that way is the community.

The python one valued doc, robustness, readability and stability.

The ruby one loved cleverness, beautiful design and conventions.

Eventually they ended up meeting at the middle, but in the mean time, people got tired of :

- having the last monkey patch breaking their code

- having to try to understand the last crazy dsl somebody came up with

- having an incomplete out of data doc and no tests

- having gem install breaks on you randomly

- having to mess with rvm (still an issue though) which never seems to do quite what you want

Ruby is a good language, but it took too much type to come out of it's teen years, playing bold and teasing. Now it's too late.

JS is getting away with it, despite being way inferior to ruby, because it's the only language on the web platform and we are forced to use it. Ruby didn't have this chance.
Plus it seems to run continuously, which is non-awesome.
Is it? dA is full of artists selling their art and users buying it. It's full of Patreons, donation buttons, etc. See Twitch for what successful monetization of this sort of audience looks like.
How we made our CSV processing 142x faster
That's not the attack on git -- it's the commit ID. You can have two patches that have the same commit. Apply one now, and in the future replace it with the second one, without affecting any other commits IDs afterwards.
What's the key insight here compared to previous systems?. As far as I can tell, still no one can beat simple non-deterministic games that require some planning.

My favorite example is Ms. Pac Man because it seems so old and simplistic. Been tried by a dozen teams and no one can beat a decent human.
I didn't know that Wix was such a big business. Yesterday I was joking with a friend about their stupid name and how they can be successful with that name (it is very close to a colloquial term for "to masturbate" in German). I didn't know that hey are traded on Nasdaq and are an Israeli company.
In the UK, algebra is first introduced using the equality operator, often with pictures of weight scales and weights, which students are asked to balance. Then they are introduced to a concise notation for this, e.g.:

1 + x = 3

Simplification comes later; and it often involves moving terms from one side of the relation to the other, which isn't possible with an assignment operator.

I have no doubt that beginners soon learn any different meaning of "=" over time, but why reuse the operator in the first place? Is it really making it "easier" for the beginner? At least with BASIC the context switch was easier as it was strictly imperative. Python tries to mix in more declarative concepts.

The misuse of the equality operator is only one minor detail, but if people care so little about such details, how can they be trusted to look after the more important ones?
But overuse of social media has left me with the attention span of a gnat!
Yes, I didn't mean for my example to be a universal cost savings for everyone. It's definitely a case-by-case basis. If one is doing a lot of driving around such as real estate agent or soccer mom with 3 active kids, relying on Uber instead of owning a car would be not be cost effective. That aside, many would see cost savings by making the economic switch from car-as-ownership to car-as-a-service and that scenario doesn't depend on VC subsidies.
Polyglot files are trivial to create, that's the easiest part here.
No, I can't think of any AAA games that have intentionally released their code open source (unless it's years and years after the game has been released, like Quake, for example). They usually only add mod support. Probably the closest thing to a AAA game where the source code was fully available was Minecraft, but that's because it was originally written in Java and thus easily reverse-engineered.

2048 and Flappy Bird were to demonstrate the cloning problem that App stores have been dealing with, in part because of how simple those games were to recreate, but also in part because it was made even simpler because the code was easily available.

For an example of something closer to the problem that AAA would face if they made their code open, look to the shitshow that Steam Greenlight faced that Valve had to put a stop to. People were downloading some Unity assets and slapping together total broken crap as fast as they could and selling them as full games. That's the type of thing you could expect if AAA was more open with its code.
Poor is deliberately chosen in an effort to understate things.

I can see why she would try to downplay her actions and hope that everyone else would play along.
Apologies, I'm no longer in the Atlanta area. Maybe a local Meetup group perhaps?
It's still quite impractical, m sure with some quantum computer or a custom ASIC built by those "super nerds" at the NSA its possible but but for you general adversary aka "hackers" (skiddies IMHO) it will be infeasible.

What this means is for all of you [developers], is to start new projects without SHA1 and plan on migrating old ones (if it's totally necessary, normally don't unless you use SHA1 for passwords).

A Great resource for those who still don't know how or what hash to use, is paragonie: https://paragonie.com/blog/2016/02/how-safely-store-password...
There's an option to do so in the Google Photos app [1]. Amazon Photos and Flickr offer a similar feature as well.

Now I'm curious — how are you getting your photos into Google Photos if the files are mainly stored in the iCloud Photo Library?

[1] https://support.google.com/photos/answer/6193313?co=GENIE.Pl...
Well that depends on the terms the uploader agreed to. The license displayed for works is, as I understand it, the license that applies to visitors/viewers not necessarily for deviantArt itself.
One heuristic I use for scientific papers is "Does it have supplementary materials and what are their quality?"

Supplementary materials is where you put raw data and the 'howtos'. It is not just a place to cram in extra figures that wouldn't fit.
> The methods section only contains variables the authors think worth controlling, and in reality you never know, and the authors never know

Maybe the format needs to change. Perhaps journals should require video, audio commentary or automated note taking for publication.