skysight-inc/HackerNews huggingface dataset:
This reads like a laundry list of exactly what not to do when you find out your child is addicted to opiates. Everything they do, from being overly controlling to kicking her out and pressing charges against her, is a self-righteous act and harms her greatly. At one point, I thought I was reading a scene cut from Trainspotting for being too mundane. The naivety about the legal and health systems is also appalling. These are people who claim the ability to function in the world, yet they don't know the most basic things about the world they claim the ability to function in. I think towards the end, the mother actually starts to get a glimpse of the reality of what is going on with her daughter and is more compassionate by letting her live in their house again. I hope their daughter recovers and other parents heed this story as to what not to do to their sick children.
I don't really understand your point. "Green" is a label we apply to things which fall into a certain category: namely those which under ordinary circumstances emit or reflect light of a certain wavelength. The observer-dependent things here are:

- the definition of the category (which varies depending on what "ordinary circumstances" are for the observer: people draw the boundaries of light-wavelengths differently), and

- making the judgement "this object is in/is absent from the Green category" for any given object (since our information is imperfect, and [for instance] we may only ever see an object while it is bathed in blue light).

My post was mainly intended to say "there's no paradox involved if you experience green objects differently to me: the word 'green' corresponds to a quale which isn't an inherent property of things in the universe, but an artefact of our experience". Additionally, in this comment, I point out that 'green' can indicate different qualia to different people anyway.
So any particular reason to want C# in jvm?
My dear child, 't was in jest. A peculiar one, granted.
> I really doubt that multi-thousand-dollar dental events are as common as once every five years.

I chipped a tooth on an olive pit.

$700 of dental work later, another $300 to get my nightguard remade (my bite changed a bit).

Another couple hundred to get that work fixed (the original filling had some issues), and a single olive pit cost me over 1k.

Dental bills add up fast.
From Life Sentence in San Quentin to a Job in Tech
How Uber Got Here
Use multiple big* SSD volumes in RAID 0 on big* instances.

* IOPS and bandwidth are proportional to the size of volumes

* instance types have a hard cap on network and IO, proportional to the size of the instance.

Otherwise, you can try local SSD instances but there are only a few and they are incredibly expensive.
Hey Everyone - Patrick Campbell here, CEO/Founder of Price Intelligently. We've been in the pricing trenches for the better part of five years now working on the pricing for anyone from Atlassian and Autodesk to Lyft and Blue Bottle Coffee.

Pricing is ultimately a process, similar to product or marketing development. We've written extensively on it at priceintelligently.com, but here's a bunch of topics you should look through that will ultimately give you a solid foundation. The biggest thing to keep in mind is that there aren't any tips or tricks that are going to help you win - you need to quantify your buyer personas and price based on them accordingly. If you ever have any questions, always up for getting on the phone - patrick[at]priceintelligently[dot]com.

Value based pricing 101 - overview of how you should be thinking of your pricing (not based on costs or competitors): http://www.priceintelligently.com/blog/bid/162160/Value-Base...

Pricing Process: Here's a 130 page ebook we wrote on how to collect the data you'll need, how to structure things, and a bunch of other pieces. This isn't the final cut of the ebook, but given the conversation I thought I'd share early (no lead form): https://cdn2.hubspot.net/hubfs/120299/Price-Intelligently-Sa...

Here's also a webinar recording that walks through the above process if you prefer to watch: https://pi.wistia.com/medias/79lpgnqd2f

Survey design is absolutely crucial. We've sent around 20M using our pricing software at this point, but here are some lessons we wrote through at the 5M mark: http://blog.profitwell.com/lessons-from-sending-5m-saas-cust...
I totally agree that the best way to fight drug addictions is to make them completely legal and increase their availability.

The sooner we end war on drugs, the sooner the supply will go down, and that will mean less addicts.
I do; it's my default SO page.
I've learned from both in various undergrad and grad courses and I have to say I like Artin better. Dummit & Foote is a little too dry. I recommend Artin and Dummit & Foote as a supplement.
For anyone else who doesn't easily process abbreviations from Indian English, "LPA" stands for lakhs per annum. A lakh is 100,000 and the implied currency is INR = Indian rupee.

As such, 35 lpa = 3.5 million INR/year ~ $52,600/year at present forex exchange rates (PPP value is another story).
(btw, I didn't downvote you; your question is quite legitimate. I upvoted you to restore balance to nature ;))

> This example will only affect that particular user viewing the page, though. And once they hit refresh, that'll be gone.

No, that wouldn't be an effective XSS. You highlighted an effective XSS in your follow-on statements.. basically, it needs to be saved on the server and then displayed to another user. At that point, you can attack them and steal whatever you like.

An effective XSS would be a form that doesn't validate input looking for XSS attacks specifically (on the server side, or on the client side before re-display, such as via my safify.js library). For example, if HN let me paste that in and didn't translate < to &lt; before display, my <script>alert(1);</script> would be actually executed as soon as it was displayed on screen (more correctly, attached to the DOM). This is a really important point ... it's the core of understanding what XSS really is.

> Then past that, when it gets rendered for other users, the view/templating would need to display the snippet as a script instead of just text, right?

No, unfortunately -- the view would just have to display it even as plain text. I'm guessing here that you're saying the entire page is displayed as an html template via jinja or something, rather than being pulled in with AJAX. AJAX is almost certainly going to be XSS'able unless you take steps. If you're using an HTML templater, it might sanitize/encode the HTML for you, but only if it knows that it's supposed to do that and that it's not part of your normal HTML. (In other words, most templaters would probably just stick the <script> tag right in the middle of all of the other HTML, and the browser will just try to parse and interpret anything that looks like HTML and ignore all the rest as noise.)

To continue with your thoughts..

1) attacker leaves comment in field

2) comment can be validated on server prior to sql injection, or not. that doesn't matter unless it's looking specifically for XSS vectors.

3) when comment is provided back to the client, it's displayed on screen using regular jquery calls. there's nothing wrong with using those jquery calls (any more than directly manipulating the DOM or using standard javascript); you just have to know what you're doing and sanitize the text. (i.e., this isn't referring to a specific vuln in jquery or javascript at all.)

4) most importantly, the view/templating does NOT need to "display" snippet as script. this is the key point. As soon as it's attached to the DOM, it becomes HTML.

You can try it out right here. Open up devtools (press f12) and paste this into the console tab:

var comment = "<script>alert(1)</script>";
$("body").append(comment);
I'm not casting doubt on the potential costs, merely their frequency.
Ha, lucky you. Before I started pre-filtering with SA, I got about 3000 spam emails per month. I can cut out about 2/3 of those with SA without losing any of the false positives, so now I only have to wade through 1000 or so to find the one or two falses. :/
>If free will depends on an inability to predict future behavior, then it would follow from that free will somehow depends on our being unique: on it being impossible to copy us.

That's similar to the conclusion I came to, too.

That free will is basically the series of singular inevitable outputs of a computation (the "me-the-person-in-the-universe" computation) that are not compressible/reducible (they have to be run to come to the output).

And it's free not because it "freely" selects among several choices, but rather because it's uniquely personal -- as a person, one can ever only do/will the thing they end up doing/willing (tautologically: one's history is he/her -- our will defines us), but what that is can only be found out after the tact.

>There were some famous experiments in the 1980's, where someone would attach electrodes to someone's brain and would tell them that they could either press button 1 or 2. Something like 200ms before the person was conscious of making the decision of which button to press, certainly before they physically moved their finger, you could see the neurons spiking for that particular finger. So you can actually predict which button the person is going to press a fraction of a second before they're aware of having made a choice. This is the kind of thing that forces us to admit that some of our choices are less free than they feel to us---or at least, that whatever is determining these choices acts earlier in time than it seems to subjective awareness.

Similar to my comment above, I find the ideas drawn from those experiments (that there's no free will) wrong.

The fact that a choice/action can be known (from neural activity etc) before the choice becomes conscious to the subject, doesn't necessarily mean that the subject doesn't have free will. It can just mean that the subject has a whole beneath-the-surface thing beyond the conscious layer. It's not like the person's neurons belong to somebody else -- or that we only "live" by thinking.
Given that most people don't take a $5,000 deductible, your notion of what insurance is for seems to be at odds with both insurance buyers and insurance sellers.
If you have access to more than one identical system they can be compared. Or there could be a public list of known good hashes as you suggest.

In any case having a tool to even perform the check is great.
HelpSpot for HelpDesk https://helpspot.com/
Discourse for public discussion https://www.discourse.org/

Both can be self-hosted or SaaS which provides some nice flexibility.
What is Water 2.0
My dad (Tom Johnson) founded Celestron. His key idea was a way to create the corrector plate at the front of a Schmidt-Cassegrain telescope. The corrector plate compensates for spherical aberration (the difference between a parabolic main mirror and a spherical main mirror). This is a very complicated curve, and the traditional way to make it was to have an optician make it by hand. This was an arduous and time-consuming process. Tom's idea was to spend that time manually creating a block that has the OPPOSITE shape from the one desired, and carve narrow grooves in it. Then, take a normal optical-quality sheet of glass, and use a vacuum to deflect that glass down onto the block. Grind the exposed surface flat, which is a quick and easy thing to do accurately. Release the vacuum, and out pops a piece of glass that is a high-quality corrector lens. As a kid, I can remember many weekends when my dad was out in the garage grinding lenses and refining the idea. Eventually Celestron became successful enough to allow him to quit his day job!
I'm pretty sure they are the same person. Lookup Al Franken.
> What if the next iOS and Android require my location be constantly shared with third parties? I would lose privacy or have to go without a smartphone which is freakishly hard in today's modern world.

Or run Replicant or similar, which would assuredly continue to offer the option of preserving your privacy. (It's somewhat less convenient, and limits your selection of devices, but it's an option.)
37 percent of publishers don't comply with FTC rules for native ads
To my knowledge, Geek Squad had a shaky reputation to start with, I can't imagine this is going to help.
If you're repairing someone else's computer and come across child porn, aren't you obligated to report it? (if only to cover your own ass, as technically you are now in possession of cp).
If you can get enough solid survey responses, conjoint is ideal, but won't give you a lot in terms of a price elasticity curve. That's not necessarily a problem, but I'd recommend a combination of MaxDiff (baby conjoint) and Van Westendorp. Used in tandem you'll get some solid footing on packaging preferences, value props for positioning, and ultimately price elasticity.
Your analysis exams didn't require bookwork? For someone who has done four years of maths at Cambridge, this idea is dumbfounding: about a third of each exam was bookwork. (Except, in my year, Category Theory, in which there was no bookwork at all. Of course I don't hold a grudge about how much time I spent learning the proofs of the monadicity- and adjoint-functor theorems.)
What can ARM do about this?
Service based but somewhat related. I've recently decided in my consulting efforts; if the customer doesn't try to negotiate the price I'm way too cheap. Supported anecdotally by two interactions with the same customer - a colleague of mine from another company went in at a price for some work that I considered way too low. The response from the customer was "when can you start?" I recently quoted what I considered to be a perfectly reasonable rate for some work and that was the start of the negotiation. We had a good exchange of analogies to support our differing positions!
Just curious, could clothing help you create something like a paradise? For example, a hoodie held by sleeves?
4 days into university, the first time I logged in to the email account, I had several messages waiting for me, all intended for the same person, the best of which was:

"Hi X. The £80 million for the new biomedical building is approved, please make the transfer ASAP."

It turned out I had the same unusual name as the most senior financial officer.
I'd be interested to see if any web-based control panels are vulnerable in a similar way. All of the client_*_temp_path directives are valid in http,server, and location contexts so you have a lot of flexibility there.
It's awesome how the CRM, support, billing, campaigns, and accounting software all works together. The price is great, because you're getting full featured apps for only $60/seat.

However, the way you connect the services is kinda janky, and I find myself wishing for more modern features sometimes. There's also competing products within the same ecosystem (social, email campaigns, and now recurring billing).

The support is great and it's been great to start. I can see us growing out of it but it's doing the job for now.
> What, specifically, is your eyesight problem?

I'm missing an optic nerve. Sunlight isn't going to fix that. :)
Just ran into this yesterday when I discovered that an emoji character wouldn't fit into Rust's `char` type. I just changed the type to `&'static str` but I still wish there was a single `grapheme` type or something like that.
Now-a-days with the social networks, everything seems to be about excitement for some people, but the scientific method survived almost two centuries very well without it, thank you very much.

If you want that kind of excitement, try other area, in here, the only excitement comes from finding an answer to a problem based on science, not in some sci-fi novel.

P.S.: The simple explanation in this case is of course some physical process we can't understand. Not an alien civilization making planet sized machines to power their spaceships. This ain't star wars.
Pretty cool. I feel like it needs more than 2 pictures about the find, though.
Yes, if you come across anything illegal while repairing somebody's computer you are obligated to report it. However, you're not allowed to go looking for illegal stuff while repairing a computer.

And if the FBI is advertising cash rewards for "accidentally finding" illegal content, that sounds a lot like an illegal search.
The real value of bulk collection is in the political elite targeting their future opponents through exploitation of their flaws after digging through the treasure trove of data obtained in the dragnet. THIS is the real danger to society. Not, "we have nothing to hide so we don't care."
You mean if you believe in scientism.

Occam's razor is more a heuristic at the level of epistemology than actual science (the latter involves the experimental method, not logical posits like Occam's Razor). And of course it's statistical, not absolute.

Heck, even in everyday life we find cases where Occam's Razor is plainly wrong. Sometimes the explanation for an event is the more bizarre one rather than the simpler one.

“The aim of science is to seek the simplest explanation of complex facts. We are apt to fall into the error of thinking that the facts are simple because simplicity is the goal of our quest. The guiding motto in the life of every natural philosopher should be “Seek simplicity and distrust it.” – Alfred North Whitehead

http://scienceblogs.com/developingintelligence/2007/05/14/wh...
FossaGuard V0.3 Send S/MIME Messages Between Gmail and iOS Mail
Yup, thanks, collectd seems to be exactly what I was looking for.
The Cloud’s Software: A Look Inside Backblaze
In some roguelikes, it could mean that there's a hidden door there, but I guess not here?
Trump campaign advisor Roger Stone DM'd with DNC hackers on Twitter last year
The war on drugs is reducing the amount of labor available. If we follow the principles of supply and demand-- if Business Owners wants to pay employees less, then they want _more_ people to be available to work, and they also want those people to have lower cost of living. Having people in prison and having people pay for their family member's drug addiction reduces labor supply and increase cost of living.

I think you have a conspiracy narrative, and you are trying to fit evidence to support it.
Imagery scientist gets year in prison for taking classified documents home
Yet the price has only dropped around 80 dollars compared to yesterday. Not too bad. For a few minutes it dropped by around 250 dollars but it picked up quickly somehow.
Yet another site breaking my back button. No, I DON'T want to have another fucking back button entry every time I zoom in, zoom out or slide the map.
Enterprise-class backups in the open source arena
There's way too much here to get into on an unrelated comment thread (it's a little unfair to the OP). Kinda wish HN had DM functionality right now...

My recommendation would be to write a blog post about the virtues of Objectivism, then submit it to HN. If people like it enough and it gets front-paged, I promise I'll be there in the comments and we can argue all you like ;)
I think another part of the problem is that we still don't know how to run large centralised organisations in a way that doesn't lead to continuous bureaucratic expansion.
It could be a question of soul distribution, though; if you can only have one ghost in each machine, and there's the potential for a spacefaring civilization to expand to many, many planets in the future, then it's possible that the 50 or so billion people who have lived since humanity's birth represent only a sliver of a fraction of the total number of souls needed to staff a well-stocked universe. So we could potentially be heavily weighted towards most people being on their first go-around if we have the potential to make it that far and souls or selves or whatever are actually scarce enough to be re-used.
> the bottle necks they would put up to raise the wages to MD level.

Dentists can easily make more money than the majority of physicians. Not to mention they don't have a residency, my few dentist friends came out of dental school at 26 making 150k+.
From one of Jon Bentley's Programming Pearls books, the "Bumper sticker computer science" chapter:

[Thompson's Rule for First-Time Telescope Makers] It is faster to make a four-inch mirror and then a six-inch mirror than to make a six-inch mirror.

Bill McKeenan
Wang Institute

This is offered as wisdom for software development..
Ask HN: Which front end stack would you recommend for 'platform' stability?
If you where going to pick a stable frontend setup for a project that will run for years what would you pick today?

In the next few months I'm starting a new project and I'm primarily a backend developer who does 'full stack' by the simple reason that I'm the only developer.

At present I use a heavily customised variant of Bootstrap (24 col grid, custom 'components' that kind of thing, lots ripped out) with KnockoutJS/Babel (ES2015 stuff) and Browserify, TypeScript is on my radar.

I like KnockoutJS a great deal and for the things it handles it handles them well but it's showing it's age (it's quite slow on mobile if you aren't careful) and it's user momentum has dropped off (that said I've found it to be ridiculously compatible with things and I've never actually had a serious issue with it, something I can't say about a lot of things in JS land).

VueJS seems like it's spiritual successor and has some neat features and off course Bootstrap 4 is on the horizon.

I'm aware this is a potential holy war question but as always with this stuff I'm worried I'm missing something awesome and obvious to someone in that domain, I only found out about Knockout years ago because of an off-hand comment by a front end dev I was talking to on IRC and it has saved me vast amounts of time over the years.
Without checking the interweb, isn't Stuart Smalley == Al Franken?
Google prefers them because they give Google more power.

They also:

- break the web

- hijack content

- reduce the value for the publisher

- make it impossible for the publisher to monetize their content

- are a step back from an open web

Pretty soon you'll be 'certified information provider' to Google rather than web publisher.

Why stop at mobile?
There is a reason that safeguards like attorney-client, priest-penitent, and spousal privilege exist. For most of civilization, these are the people with whom we entrust our deepest secrets. Society doesn't work if these relationships aren't respected.

Today, our deepest secrets are usually stored somewhere on a hard drive. When we turn them over to the "priests" of PC repair, there is no real protection beyond the terms of a one-sided, clickwrap contract. I've never used a repair service for this reason - I'll either fix the problem myself or throw the device away. It sucks, but articles like this suggest it's not a bad idea...
Call me crazy but stick with c++.

It has a ton of warts and complexity but it also has the features you need. If you program in C++ you can have simple solutions 95% of the time and when the intrinsic complexity is higher the language has the tools to save the day. Many other languages will solve the simple parts slightly cleaner but the complexity explodes on the difficult bits.

However if you are looking for fun I really like Rust, it has a nice c++ feel without having to worry so much. Personally I still think it is a bit too new for "enterprise coding" but it is maturing nicely and learning it will really teach you a lot.
>Addicts should have to visit daily for their doses, and should get some support from doctors and pharmacists if they want to withdraw.

This is a good sentiment, but I think it would be a disaster in practice. You already have pharmacists moralizing and deciding whether or not to sell birth control (still legal at least in multiple US states last I checked). I don't think it's going to go well to give them power of addicts as well. You need to be sending them to people like social workers, who are made the choice to help with recovery.