skysight-inc/HackerNews huggingface dataset:
OAuth2 does indeed send a secret bearer as an "Authorization: Bearer" header, but OAuth1 does not.

The FitBit stuff I recall seeing other day was OAuth1. It would look like oauth_token=XXX and oauth_consumer_key=YYY, along with oauth_signature=ZZZ. If that's what you're seeing, it's not a bearer token and that data isn't secret. Those values are essentially record locators.

OAuth1 has an undisclosed "consumer secret" (embedded in the app) and "token secret" (acquired at login) that are used to sign the request. So these requests don't leak any usable tokens. If you also see oauth_nonce and oauth_timestamp values, then the signature is also protected from a replay attack.

The response body of the request that originally acquired the token/secret would leak these secrets.

I'm sure there are bearer tokens out there for other services, but if fitbit is using OAuth1, you'd have to snag that original token acquisition to call the api as that user.

Edit - I hope this doesn't come off as argumentative. I just want to point out the good design choices made by the guys that weren't actually compromised by this. OAuth2 is really easy to implement, but it kinda feels like a step backwards security-wise.
The pure market share could have been a motivating factor for parent post. I assume that things behave differently when you're the #1 at something.

However, this seems arbitrary enough to not have that effect.
> no web browser, no Virtual Console nor movie services like Netflix at launch.

I'm not a console gamer, but why would you want those things in a game console? My TV does all that already. What my TV can't do is play new Nintendo games.

If anything, I find it annoying when I buy a new device and the developers have clearly spent more than half their budget trying to (poorly) replicate functionality that's already built into every other device on my TV cabinet.

Do one thing. Do it well.
The Long and Winding History of Encryption
Vox should bother to learn the difference between evasion and avoidance if they're going to write on taxes.
For any Americans paying attention, please keep in mind that that's 8C, not 8F.
I want to openly thank Binary H. for his service… he helped me from infidelity
and lies of my cheating husband. he was able to hack his cell phone so i
listen to every call he makes or receives, hacked his whatapps, email and
Facebook, without him finding out,it really helped my lawyer during my
divorce i have been scammed so many times but Binary H. is the best hacker
i have met,he helped me regain my freedom…i know there are lots of people
out there looking for proof and evidences about one thing or the other.
Be open and confide in him so he can be at the best of his service to you.

Do contact him via email Binaryhacker016@gmail.com ….
Tell him carreina referred you for swift response....
Should economists be more concerned about AI?
NoRedInk | Front-end, Backend, Infrastructure Engineer | San Francisco, CA | REMOTE Pacific Time (PST) to Central European Time (CET)

We’re an ed-tech company on a mission to help all students become strong writers! Our team may be small, but NoRedInk is used by 1 in 3 school districts in the US, and students have answered over 2 billion questions on our platform.

We’re a group of friendly people who listen to and learn from each other. We discuss past mistakes openly so we can adapt our processes to the challenges that come with progress. Puns flow freely across our San Francisco office as well as on Slack, and we have remote engineers spanning six different time zones.

Our engineering team [1] prides itself on code quality and innovation. We use the cutting-edge Elm programming language for all our new front-end code, and have been migrating legacy React code to Elm as well. We started with Ruby on Rails on our backend, and have lately been working to introduce Elixir to our stack. You can read about our experiences with these technologies on our team blog! [2]

In addition to spending work hours open-sourcing useful libraries we develop [3], we also invest financially in open source. We hired the creator of Elm, Evan Czaplicki, to develop Elm full time. [4] Evan discusses his plans for the language with the team every week, periodically pairs with other engineers on Elm, and cracks up members of the sales team with his lunchtime jokes.

We use Amazon AWS for our infrastructure and automate all of our deployments using OpsWorks and Chef. We write a lot of tests, and use Jenkins for continuous integration. Our process for new features begins with our product team and in-house visual designer, continues with a GitHub pull request from a feature branch into master, and ends with our in-house QA specialist trying to break it before it reaches production.

We’re hiring both engineers who have been around the block many times, as well as those who started their careers just a couple years ago. We’re looking for engineers who want to work on a mission that makes a difference and who are the type of collaborators that value kindness and open-mindedness, over convincing the group they’re right.

You can learn more about what to expect through blog posts about our interview process [5] and on-boarding experience [6].

If you’re interested, please apply through our jobs page! https://www.noredink.com/jobs

[1] https://www.noredink.com/about/team

[2] http://tech.noredink.com/

[3] https://github.com/NoRedInk/

[4] http://tech.noredink.com/post/136615783598/welcome-evan

[5] http://tech.noredink.com/post/145260396603/our-engineering-h...

[6] http://tech.noredink.com/post/143787279069/on-boarding-as-a-...
> Specifically, the NRA is an industry-funded group that has lots of it

That's just not true at all:

https://www.quora.com/Where-does-funding-for-the-National-Ri...

(edit: bah, in the time verifying my sources, three other people posted the same info :) )
> every time you convince someone that manned space doesn't make sense you convince them there's no reason to go into space at all

That's just well-sounding nonsense. People can appreciate science and exploration even if it does not involve video of humans in outer space. Video or photos of celestial objects are enough reason for the laic public and there are many physical measurements that should be done to advance our knowledge. All this can be done very well and cheaper without humans onboard.
Depends on what you consider catastrophic. 5-8C means you lose both the Greenland and Antarctic ice caps, so you get 60m (200 ft) sea-level rise, so you totally lose all the coastal cities, and the current round of civilization is almost certainly done for. But homo sapiens will probably survive, and so civilization will probably eventually be rebuilt. It won't be the end of life on earth under any circumstances.

Actually, the biggest danger is that political instability brought on by climate change will lead to nuclear war. That would be much worse than losing civilization to climate change because it would happen much faster, essentially instantaneously. That is not at all unlikely even under much more modest warming scenarios.
I don't think they had coastal cities or farming back then.
You're also forgetting Facebook stories which is a stories feature for the main Facebook app that inserts the stories in a spot right above the newsfeed.

FB have effectively copied the stories feature across all of their media properties (FB/WhatsApp/Instagram). I'd imagine they'll eventually add the ability to cross-post selectively.
I just started playing with it earlier today. I'm a long-time Visual Studio user and VSCode is good. I'll have to give it more time, but so far, I can see myself using it for stuff outside the office (work is .Net, so I'll be sticking with VS).
Yeah that's true, I'm totally assuming 'competently implemented TLS' when I say it would protect the connection.
Amazon S3 Outage Highlights the Need for a More Decentralized Internet
Ideally I would restrict all functions to their natural domain using refinement types. This ways 1/0 simply doesn't type check and you don't have to bother assigning it some nonsensical value. However I can see something like this becoming much more a hassle than a benefit when things get complicated enough.
My 4 1/2 old used to love it, but I think she has started to outgrow it.
Not exactly. Google orders and displays advertisements based on expected value (to Google). Then the winner of the slot pays the lowest market-winning price.

Overly simplistic example: eBay bids $1 max and Amazon bids $2 max. People searching for eBay have a 10% probability of clicking on an eBay ad and a 2% probability of clicking on an Amazon ad.

Expected value to google:
Ebay - $1 * 10% = $0.10 EV max
Amazon - $2 * 2% = $0.04 EV max

Ebay is displayed even with a lower bid because the expected value of the display is higher. The bid is never adjusted -- eBay is specific about its bid or its maximum bid and the market of expected value decides who is shown. Amazon could just as easily bid $5.01 and show up. And when the ad is clicked, if Amazon is the only bidder at $2, then Ebay would pay $.50 for that click because that is the lowest bid that wins the position using the EV.

To apply this to the Snapchat Conversation -- One might expect if Snapchat operated this way, then its probably fair to assume that EveryTown would have had a much higher relevancy score than NRA, so should have been able to win the campaign for much lower $$. But in paid placement like this, everyone is paying for placement not for performance. It is not an EV market. Hence the dilemma.
This appears to be "legacy SQL" in BigQuery, which did not have query optimization - entirely rule-based query planning. The query is a little inefficient indeed.

BigQuery has since released ANSI 2011 "standard SQL", which would does have an optimizer and would push predicates down).

(work on GCP and worked on BQ until recently)
since the GameCube, in part because I didn't care for odd controls

Gee, I remember thinking the Gamecube had pretty odd controls when it came out. The C-stick seemed like an odd compromise between the N64's C buttons and the PS 2 controller's dual analog sticks.
It's too bad, as Americans we are forced to think like this. We obviously have some serious problems in this great country.

That said, check your blood pressure periodically.

I too think like you do, but try to eat well, and exercise. I do need to make a doctors appointment, but it's all out of pocket, and it's a crap shoot on price.

I once was given a $800 bill for a blood. I told them I have insurance. My bill went down to $10 copay.

Out of curiosity, I called my insurance company.

They told me the bill they got was for $100. I told them the bill was for $800?

"That's what they charge the guy with no insurance. Through collective bargaining we only pay $100, and you pay 10 bucks."

Crazy? (I now have a headache. I usually stay away from any posts that are health related.)
How Math Can Tell You When to Move on in Life
Oh, definitely, what's it like?
I guess the same argument could be made in regards to not providing accessibility accommodations to buildings: that there should be "no rules", and if a building is built without accessibility accommodations at least access to such building "is free to a large segment of the world's population. Just let them do it!"

It's pretty clear that such arguments lost with the passage of the ADA.
Can you quickly compare Atom and VSC for golang development? I've been using Atom with go-plus, and I'm quite happy with the setup. I'm wondering if there's anything I'm missing.
The industry group for gun manufacturers is the National Shooting Sports Foundation. The NRA is a membership organization with over five million members. Portraying the NRA as an industry group just because corporations donate to it is misleading. Would you consider the EFF to be an industry group because PayPal donates to them?
You aren't alone - I'm a native English speaker, and when I was traveling in Germany I noticed that the Germans were far more liberal with their cursing in English than (as far as I could tell) they were when speaking German.
6 is GOTO 1.

The mouse wheel of denial.
You can't invoke civil disobedience when a commerce is happening, because civil disobedience is a symbolic act, meant to draw attention. As soon as somebody is making money doing it, it's just breaking the law.
You're right, I have updated the spec to make each item a list. Since the URIs can be anything (including files), this is pretty much equivalent to your proposal.
I am Amna from Gigster HQ. On behalf of the entire Gigster team, I apologize that we did not meet your expectations. We aim to delight every client, I am personally looking into this case to determine what happened here. While we can’t entirely replace the time or vision we had at the start of the project, we’d like the opportunity to make this right for you. If you would like us to help you feel free to send me an email to me at success@gigster.com with your gig name. I will be able to update you on a refund request within a few business days.

At Gigster we evaluate refund requests on a case by case basis.

Thanks in advance,
Amna Mulla
Right, but I was referring to the comment regarding the S3 bucket replication.
A lot of people do. But some of us find it frustrating when, later down the line, we want to switch the service provider (of whatever the service is), only to find out the massive amount of lock-in around their services/software making it a massive pain - and as a result, we have to contend with the relatively more minor pain that prompted the desire to switch in the first place.

E.g. in retrospect, I wish I never bought into the Google ecosystem as much as I did, convenient though as it was. There are parts of it that I dislike or outright hate now, but the inconvenience of switching away is greater (yes, I've tried), so now I mostly just grumble quietly.
A friend of mine in college had an ancient VW bug that had no fuel gauge, by design.

When it ran out of gas, you had to switch a foot pedal to the emergency tank, then you had maybe 10km to get to a Petrol Station before you were stranded.
How to change careers and become a data scientist – one quant's experience
We seem to have converged on a consensus that people will more quickly gravitate towards AR than VR. I don't understand how that came to pass. All of the AR experiences that I have seen -- including the examples in the article -- are potentially interesting, but far less compelling than what we have seen so far in VR.

Yes, the promise of true AR is great. But so far I have seen no example of an AR application that does a wonderful job semantically understanding the world around you and correspondingly attaching things into your view. Every experience I've seen for the Hololens so far does a great job with tracking, but there is no true interaction with the physical world -- the applications are simply aware of some general constraints on what the surfaces of the room look like.

In VR, on the other hand, a demo like Zuckerberg's I think convincingly showed just how powerful a VR experience can be and how seamlessly elements from the real world can be integrated into it.

I honestly am curious as to why people are so readily seeing much greater potential in AR. Perhaps in the VERY long term, but for a good long while I can only see VR applications dominating the market.
The Beginner's Guide to Faster Websites: Learn Website Optimization
Yes, for every number, one can come up with a floating point format that can represent it exactly (proof that stretches the meaning of 'float format' a bit: given x, the one-bit float format with bit value 1 meaning 'x', and bit value 0 meaning 'not x' is a representation that represents x exactly), but the cardinality of the set of arbitrarily length bit sequences is smaller than that of the reals in [0,1], so there isn't a single floating point representation that can represent all of the numbers in [0,1]

So, a choice has to be made. IEEE 754 made some choices, balancing utility with ease of implementation. Writing numbers as s × c × 2^q for integer c and q makes addition, multiplication and comparisons fairly easy. Fixing the bit lengths of n and e makes it even easier because you don't need hardware to find the parts, at the price of that zig-zag pattern of accuracy. I wasn't around when this was discussed, but I expect that played an important role in choosing this format.

For example, here is a conceptually simpler format that, if it was considered, I think would have been ruled out because it is hard to implement:

Pick a number f close to but not equal to 1 and a bit size, and have a signed integer s represent sign × f^abs(s). That doesn't have the zig-zag problem, and multiplication would be very simple (binary add the dot patterns), but addition would be difficult, almost certainly requiring large lookup tables.

That format also cannot represent zero, but that's easily corrected by picking a special bit pattern for it.
Or people could accept that 'politically correct' language is not the province of one side of these battles.
So you 1) did not address the fact that you completely made up the talking point that Musk resigned from the advisory board, presumably hoping that nobody here would check, and 2) apparently assume that I agree with every single Trump cabinet pick because I refuse to get on board with declaring the whole thing an unmitigated disaster. To address your specific example, of course Carson is not qualified for HUD, although he would have arguably been qualified for HHS. But I imagine you would not have been thrilled with him being appointed for any position at all, because one of the world's foremost neurosurgeons is some kind of barely-literate nincompoop, right?

I normally don't respond to trolls, especially ones that invent alternative facts from whole cloth, but I'll make an exception for you. Feel special?

EDIT: after checking out the rest of your contributions to this site, it seems your standard approach is to state your opinions as proven facts, from your hilarious "Balloon Theory" of how blenders remove fiber from food, to your dumbfoundingly ahistorical slander that the Second Amendment was written specifically to appease slaveholding Southerners.

Please try to adjust your approach. You'll find a much more receptive audience here if you admit that some things are just your personal perspective.
Nah, it's best to keep the ranting low-key and not tied to me personally. If you see my comment karma, I say enough dumb stuff already ;)
Affordable College Advising from Qualified Students
Amazon Web Services | Senior SDE / SysDE | Seattle (ONSITE) | VISA, aws.amazon.com, AS16509

The Internet is the world’s most complex network, with over 57,402 unique networks connected together, it contains hundreds of millions of edges and nodes. It is THE most pervasive, important, and complicated communications network in the world -- somewhere out there things are about to go south.

One of the core backbone routers of a major Tier-1 Internet provider is having a bad day. It started with a transient, yet persistent, problem which was only detectable by a slight increase in dropped packets that went mostly unnoticed. An hour later the router suffered a catastrophic failure dumping 500Gbps of traffic onto an already congested alternate path causing ripples across the Internet, disrupting websites and other Internet based services on the U.S Eastern seaboard.

Social media is ablaze as frustrated people rant about their favorite website, video, or gaming service being down, or so slow that it’s unusable. While the Internet burns, our customers are humming away oblivious to the disaster.

If you have an insatiable curiosity, love the process of discovery, and you’re reading this with a grin... we should talk.

Come join us and...

* Do what nobody else in the world is doing... literally.

* Gain knowledge and expertise on the inner workings of the Internet, working with top-tier Network Engineers

* Define and Develop Amazon’s Internet Monitoring architecture

* Play in the piles of data to discover patterns that push our understanding and knowledge of Internet performance and availability anomalies

* Build massive real-time systems which inform and drive complex changes across the Internet

* Gain practical experience building software using Amazon Web Services

We have positions for entry-level, and mid level SDE/SysDE as well.

Want more info? Email me: nahtnow at amazon dot com.
> A judgement call has to be made factoring in what's best for company overall and if we're lucky maybe integrity is mentioned by someone along the way.

I'm pro-gun, and have given money to the NRA, and I'd be upset if snapchat wouldn't sell ad-space to the Brady Campaign during an NRA-sponsored event like if the 1000-person shoot had been captured using Snapchat.

I think it's a basic moral standing that whenever someone is saying something I want it allowed for the oposition to say the exact opposite.

I also think that the only people who'd be afraid of a pro-NRA ad in or during an anti-gun ad would be those who cannot defend their moral possition.

Personally, I'm happy when I get the opprotunity to see the anti-gun arguments on HN and that we can discuss ideas about these subjects. It broadens my understanding of what others think and vise versa.

There isn't a problem with saying "I sell X, and all I care about is the money I get from doing that" and then turning around and selling Xs to the highest bidder.
Wait, but what about the request used to obtain the URL of endpoint to which you're posting? Isn't that one then not idempotent (since it would create new URLs every time)?

Generally speaking, what is the flow like? Suppose I allocated myself an endpoint, but then never posted anything to it - what does the endpoint actually contain then, if queried? Do unused ones get "garbage collected" somehow eventually?
Maybe they want to make sure Binary data is filtered out first? Not exactly sure how rigid the evaluation order is in SQL or BigQuery.
Interview with Big Yah..by, Evon Latrail
Well yeah, but they were at least more of a "startup" a few years ago when I wanted to work there. My main point was: look how they turned out despite the hype or industry experts predictions.
There is no mystery here. The "spy country" link is more of a coincidence; after all, the Internet was a DARPA project, and Northern Virginia is where a lot of defense and government stuff is.

When DARPA Internet was turned over to the public, one of the largest interconnect points was at 8100 Boone Blvd (Tysons Corner), known as MAE East [1]. Once upon a time I had access to it, as did countless other people running small ISPs around the area and renting rack space in that building. But the building (it's actually three buildings, and the MAE gigabit switch [2] was in the basement across the street) was not really suitable for any kind of a data center, though above.net did manage to convert the whole level of a parking garage into one, albeit with very low ceilings.

Pretty soon everyone figured out that by Dulles airport rent is way cheaper, you can build from scratch, there is plenty of electricity and water and connectivity is cheap, and AOL was out that way too.

That's pretty much the story. Amazon barely existed then. There used to be a nice bookstore nearby called "Computer Literacy Bookshop", which eventually went all online and later got acquired by Amazon or B&N, can't remember...

[1] https://en.wikipedia.org/wiki/MAE-East
[2] http://www.fairfaxunderground.com/forum/file.php?2,file=9012...