skysight-inc/HackerNews huggingface dataset:
Yes, it is, and I'll tell you why:

Freedom and freedom for a society, in a modern information age, relies on the individuals that make up that society having control of that information. Any instance where they cede that control en masse is a structural threat to that freedom. The reasons are mostly irrelevant, because we can argue that people know what they are doing, or that they were manipulated into that position, but it doesn't matter, the fact is that they are giving up their informational control to a third party who then owns it.

People need to start taking control of their information, and hackers like us need to stop perpetuating the mantra that privacy is dead and it's too late. I could very easily imagine infrastructures setup to protect peoples control of their own information, but it tend to not be the most business friendly, or government friendly.

Since when did hackers become so beholden to business interests? Lopht/codc warned everyone, but nobody listened, and then all the old schoolers got older and started chasing money, I mean mudge was working at darpa (it seems he is trying to do good things, but from inside the system). It's time to find that counter-business, pro-freedom resistence strain of hacking again and make it bigger.

Also, there is a reason in-q-tel, the cia's venture capitol arm, invested in facebook and google at the first stages...

Decentralized gplv3 software is the place to start. I'm not hopeles though, I think people vastly underestimate the weakness of systems like reddit, facebook, etc. The long arc of the universe tends towards justice, and they will collapse under their own dystopias.

Freedom is the real sustainable ecosystem. Individual freedom. Under individual freedom, the intellectual freedom to come up with novel solutions and apply them in novel ways is exponentially more likely than under some 1984 surveillance security engine. Freedom is therefore the strongest weapon in the fight against evil and in the fight for survival.
I wonder if Bell Telephone is a more apt parallel for FB than Microsoft is. I agree FB is not a monopoly today, so I'm not saying this is the case right now, but if they continue to dominate social networks (both through themselves & their subsidiaries), I could see a day coming when they have an effective monopoly on "online social messaging".

Of course, Bell also had a vertical monopoly in that they owned the physical wires in addition to being the service provider, and I think that was part of what brought them down in the end. Unless FB starts buying ISPs they won't be in the same position.
Just what we need.... another build tool!
Facebook Wants to Give Your Computer 'Common Sense'
I probably got down-voted because I conflated cookie with session token cookies. You can of course have a cookie that does not require a database lookup to validate.

But JWT takes care of having the expiry signed in the value (in a cookie the expiry is more of a suggestion that a modified client could ignore). Combine that with low expiry JWT tokens and high expiry refresh tokens (subject to more validation) I think it is a clear winner.
> This is based on what?

Based on the entire reason JWT is even a thing? Developers love to believe every app they build is going to run at the scale of Facebook to the power of Google times Twitter, and thus needs to run on 10,000 Docker instances spread across 15 data centres around the globe (and soon, one on the moon!).

Relying on server-side sessions is "terrible" because you have to talk to the backend, and you need to keep the data synchronised in a manner that all 10,000 Docker instances can read/write to it instantly. So instead, a new concept was devised, whereby you use these stateless tokens that don't rely on the same server after issuing.

Of course, it's impossible to invalidate them individually, and they're either insecure (available to JS) or stored in a cookie, and thus sent with every request, which means, due to their larger size than regular session cookies, more data on each request.

So.. that. That is what it's based on.

Edit: added missed word "same".
Not for shaming purposes, but to see if there are any patterns, will you release a list of the docker images reviewed, and which have vulnerabilities?

Do those without vulnerabilities use a CI/CD process which results in the container being auto-updated whenever there are new releases?
22/7 = 3.14285714285714285714 ;)
That is NOT what they do for all other engineering fields. PEs are required for civil engineering, but not for many other types such as electronics and much of mechanical engineering.
I would say there's something magical about the way that Julia is structured that makes it more than just a scientific language. I wrote a DSL for Julia for writing clean combinatorial verilog (haven't tackled sequential yet) in 3 days, using lispish macros. It took another 1 day to hook it up to 'verilator' which transpiles the verilog to C and lets you crosscheck it by loading it back up in Julia.

https://github.com/interplanetary-robot/Verilog.jl

This is very important if you're planning to build hardware to do specific math - because Julia is incredibly good at mathematical modeling, and you can very rapidly set up comprehensive tests for your hardware designs with confidence.

The closest alternative is chisel, which is written in scala. Although it's more professionally maintained and more fully-featured, it's hard to call the verilog chisel emits "human-readable", and it's harder to set up comprehensive tests - berkeley hardfloat, which is a very impressive project in chisel, had several critical bugs in its implementation (that I found, using julia).
This letter appears to be a drawn out detailed set of insults to his older brother. Maybe cultured isn't the best translation. Is this what we in the US would have called "classy" back then?
>If you're smart enough, you'll get to a point sooner or later where you are no longer working class. You won't be getting paid a low hourly wage, nor will you be living paycheck to paycheck.

1) I just reject this, plenty of smart people are trapped by lifes circumstances.

2) If you grew up working class, you will probably always feel a tinge of that no matter how far out of poverty you grow. Class may grow out of differences in wealth but it's tendrils reach into all sorts of other areas including politics.

3) There are tons and tons of upper class conservatives.

> Among college-educated whites, only 39 percent of men and 51 percent of women voted for Clinton.

https://newrepublic.com/article/138754/blame-trumps-victory-...
I'm not "appealing" to it, I'm making the point that nature isn't particularly aligned with Libertarian ideals.

I wouldn't consider family or tribal preferences to be particularly cogent with the philosophy of Libertarianism, for instance.
The biggest benefit should be a powerful and expressive language, the biggest downside would be incompatibility with lots of existing (java-oriented) Scala code.
It is good to investigate well and hire the right hacker when you need one for your social media, accounts, database hacks, you can direct all hack related issues to 9193076946 Or darkwebsolutions on hackermail dot com
Imagine if MySpace won the war
Relevant Twitter conversation https://twitter.com/deadprogrammer/status/806150295290052608
Bone music: the Soviet bootleg records pressed on x-rays (2015)
If you wish to avoid all FB apps (FB/Messenger) and still want to use messaging, use https://mbasic.facebook.com - it works, it's fast, it's HTML only, but yes, no push notifications and no browser lock-in as mentioned within the article.
> If we're trying to build a just society, there needs to be strong protection in favor of inclusion

Yes, you're right -- however, what if the person in question was an anti-vaxxer? Shouldn't an organization have the right to fire anti-vaxxers?

How do we protect LGBT people without offering the same protections to anti-vaxxers is a difficult question. (Or, to put it another way, how do we prevent anti-vaxxers from using the just protections offered to LGBT people, to further their agenda?)

I don't know.

An even more difficult question is, if we can't resolve the previous question, should we err on the side of protecting everyone ("legitimate" minorities AND dangerous crazies) or noone?

I'm not sure of the answer to that one either.
So your question is applies to Python, Scala, Ruby or any other non-domain specific language, not just Julia.
This drives me nuts. To expand on your point, there are a number of separate, debatable design decisions that seem to get conflated all the time:

* Transport: how the session ID or token is shipped between clients and servers (authorization header, cookie headers, or payload).

* Storage: how the session ID or token is stored on clients (cookies, localStorage, sessionStorage, or in memory).

* Statefulness: whether to use a stateless token (with or without a revocation list) or a stateful, server-side session.

* Encryption and/or signing

* Structure/standardization

Examples:

* JWT generates structured, stateless tokens that are signed—and optionally encrypted (JWE)—with the implementor's choice of algorithm. The tokens can be transported and stored by any mechanisms.

* Rack::Session::Cookie (in Ruby) generates unstructured, stateless tokens that are signed—not encrypted—with HMAC. The tokens are transported and stored as cookies.

* Rack::Session::Pool (also in Ruby) maintains an in-memory store of unstructured, stateful sessions. Unsigned and unencrypted session IDs are transported and stored as cookies.

The point being that you can really mix and match. You can even send a session ID in a header and store it as a non-HttpOnly-cookie on the client. Anything goes!
Because in R NA is built into a language.

So it understand the concept of missing value and works with logical operation. Also it have factor concept into the language too.

General Language may not have the tool to deal with missing value and having a library doesn't necessary means it's good as a built-in concept NA.

Python panda and such does not handle NA as beautifully as R. (http://pandas.pydata.org/pandas-docs/stable/missing_data.htm...)

Python Panda default to Null and before that it uses something else to represent missing data. Null value in general is the last thing you do when you don't know how to represent a certain type. If you have a type language with sum type and pattern matching then you don't even need null. And yes R have its own Null type so NA is separate from it.

Erlang have PID as a primitive.

I think any domain specific languages are smaller in rules and syntax, and it makes it very very easy to learn for experts and people of those domains.
I once found myself confused as to how to date a US patent application, I was happy though to find that it was August 8th at the time.
Nim has pretty decent interop with C++. In general, though, you are right that C is much much easier to interop with
Show HN: Kaleidoscope, an interactive data visualization of current events
My Path to Machine Learning
I have no feelings on the subject. I don't use JWT. I just want to point out this sounds like (and continues to sound like) "Roll your own" advice to me.
> I'm not a member of either major party, but I'm tired of people labeling the left as the party of 'logic and reason' and the right as the party of stubborn, mindless tradition.

Left and right aren't parties, and since left and right (also true of liberal and conservative; different names from different places for similar things) were first applied to political movements, the left has been the faction favoring science and reason as ideals and the right has been the faction favoring protection of pre-existing elites backed by appeals to tradition. That's fundamentally what the left/right distinction is, and always has been.

To the extent that's not applicable to some subsets of the groups currently popularly labelled left and right, it's because those subsets are mislabeled.
Yeah, this isn't known to be true. pi has not been proven to be a disjunctive number (a real number whose expansion contains all possible finite strings), let alone a normal number (where all finite strings occur with the probability you'd expect if the digits were random). Both of these, however, are generally conjectured to be true, but it's just a conjecture.

https://oeis.org/wiki/Disjunctive_numbers#Is_pi_a_disjunctiv...

https://en.wikipedia.org/wiki/Normal_number
It also includes sequences that can never match such as "999". I wonder if overwriting those with a non-digit would allow indexOf to be infinitesimally faster?
Superstars vs. Rockstars: How to Build a Kickass Team
I think the argument is that Facebook is spending an absurd amount of money on engineering. So, anything that emerges as something that huge pool of engineers find useful and cool is probably pretty well made.

On the other hand. I do think you are right. React suffers from this a lot. React is good. It has a lot of strong competition from smaller groups. But, the attitude seems to be "FB will rub so much money against React! That much money and fame will polish anything. Soon it'll be popular because it's popular. Don't fight it."
It's self-important-twat-signaling. To each their own, I don't judge (heh).
I thought the same thing, that there was some sort of image being displayed. Whcih had me really interested for a moment.
> Don't you have to do something similar to invalidate tokens anyway?

Not exactly..

1. Invalidation lists can be held in memory easier than an entire token database. And if the invalidation list is huge you can distribute a bloom filter across your nodes and use that to check before hitting the database.

2. As another poster pointed out. Bearer JWT tokens are meant to be short lived. If your implementation is ontop of OAuth use a longer lived refresh token to get a new bearer token every so often (say half an hour). So if you are OK with your invalidated tokens being OK for "up to" the expiry (so up to half an hour in this example) you only need to do strong validation on the refresh tokens.
"Other than micro-economics laws like supply, demand, division of labor and others, I've never read an economic theory that didn't have some hand-wavy aspect to it."

Steven Keen's Debunking Economics has some arguments that might make you revisit microeconomics (although much of the book is bad). Also, check out Misbehaving by Richard Thaler.
Why is Trump courting US tech workers with his proposals on this?

Note: I support H1B restrictions.
Peripherals I/O in Go
I will absolutely release some data. I intend to fully automate this research so that it is current whenever viewed as well.

Not sure about the state of CI/CD in the image building process, I assume it varies wildly. Two of the major points I'll address in my next posts are regarding deprecation in Docker repositories and lines of a Dockerfile important to minimizing vulnerabilities.
After reading your first sentence I was going to mention Beer Market.

I was in Ireland for the college football game at Avia last September and my hoppy beer loving friends took up residence there for the couple of days that we were in Dublin. Great place.
I'd guess the biggest obstacle is competition, actually. There's excellent local craft beer in even smallish midwestern cities, plus a substantial selection of top-notch beers from the region and the rest of the country.

It's different for, say, wine, because the economics are weird (the economics of grape growing and terroir in particular) and even with an ~2x markup from import and shipping you can grab a random $12 bottle of (say) Spanish wine and there's a very good chance it'll be a hell of a lot better than a random Californian at the same price point, plus, ignoring questions of quality, there's going to be significant demand for (especially) French wine for reputation and signaling reasons. European protection/assurance of production processes probably aids consumer confidence in European versus new-world wine, too, especially on the lower end.

Beer? I can get some damn good $10 US-made 4-packs. I've had some really wonderful $5 bombers. Good luck competing with that after the cost of importing, unless you've got something incredibly special.
PEP 628 – Add math.tau
I did wrap JWT/JWE with a library lest somebody else in my company would get the bad idea to implement directly, and yes, the first thing I've done was to limit the signing algorithm to a single specified algorithm (HS256 for everything that doesn't have to cross service boundaries).

But I admit never thought of it as a particularly bad crypto protocol. It's actually pretty good compared to most negotiable crypto standards out there. I mean, yeah, JWK allows you to embed X.509 (but you don't have to do it), the value of supporting RSA is questionable, their selection of curves is regrettable (but all the world went with the NIST curves), compression on JWE (and not JWS?!) makes me suspicious, and yeah, JSON is kinda verbose compared to MsgPack et al.

But then I remember that before that before JWT came SAML+XML-DSIG (and the whole WS-* ecosystem) and CMS/PKCS#7 (and the whole ASN.1 ecosystem). Ah, compared to these JOSE is a fresh breath of air.

What a lightweight and uncomplicated serialization format - It couldn't even be used for amplified DDOS attacks!

What a modern set of ciphers (besides 'none', sorry, missed that on there ;). No more DES, RC4, or unpopular untested ciphers just there to fill the slots.

Yeah, JOSE still has some parts which are over-engineered but for a STANDARD it's the best one there. Management demands standards, it's a fact of life. And I'd choose JWT over SAML or CMS any day.
As a former H1B I can say that is accurate.

Americans have more mobility and can stay in the country without an employer.

Therefore, Americans have more time to negotiate better compensation and find projects that satisfy their needs.

Then, having native English proficiency is a substantial advantage in the job market.
I often translate "красивый" as "nice" or "pretty" or something similar, depending on the context.

I think "beautiful" is more subtle (less banal, if you will) than "красивый". And so is "прекрасный".
> Session cookies suck

Well that's got me convinced, compelling argument old chap.

> and don't scale.

The vast majority of developers in the world are never going to actually need the type of scalability that requires stateless tokens for authentication.
The "Free" refers to freedom, not price. Facebook is not freedom-respecting software as defined by the FSF.
Numberphile interviews Terry Tao
Free public licensed [1] SpreadServe deploys phone home to publish spreadsheet info on the spreadserve.com live page [2]. That's the way I aim to build adoption. Offline license keys are chargeable, and stop SpreadServe phoning home. Small hedge funds and asset mgrs are my first target market for paid license keys. I'm not going after big banks early as the enterprise sales cycle is so lengthy and torturous is can kill small vendors. I've seen that first hand, so those customers are for much later.

[1] http://spreadserve.readthedocs.io/en/latest/license.html

[2] http://spreadserve.com/cws/cdashboard.html
Man behind GemCoin, a fake cryptocurrency, settles lawsuit for $71M
It's much faster than Python, has optional typing (good thing), and will soon support real multi-threading (support is currently experimental).
It can also import anything in Python in a breeze, if it needs to, but this is secondary imho.
But still, as you see, there is a lot of upside.
> Even disbelief in evolution causes deaths, e.g. if we don't do enough to deal with antibiotic resistance.

I wonder if this is true? What is correlation of Americans who "don't believe in evolution" who would reject the notion of antibiotic resistance in infectious diseases if you explained it to them? I wonder how many would reject the notions of husbandry, e.g. if you continually breed for a certain trait, like agreeableness, that the offspring will be on average more agreeable than the previous generation.

There is the religion of Christian Science, which rejects taking all medicine, but even there, that would only seem to be beneficial in antibiotic preservation practices.
D'oh, thanks! Can't believe I missed that.
[Arxiv 1703.04368] Symbol Grounding via Chaining of Morphisms
Ben Goertzel is a vocal AGI advocate whose work I don't know much (nor the et al's), but he can answer the 'show me the code' probe with his opencog work -though I think still is no AGI.

In [1] I commented about pregroup grammar and word2vec (distributional) unification being seriously worked on in Clark and Coecke via tensor nets categorically, and in a comment to [2] ('Towards deep symbolic reinforcement learning'), I liked the use of unsupervised learning (there visual autoencoders) to nucleate concepts that grounded symbols.

Two independent comments, leaving behind the need of a vertical picture subsuming both lines of thought. I can't say this paper is a solution to this harmonization problem, but It seems to tackle some aspects of it.

[1] https://www.reddit.com/r/LanguageTechnology/comments/5kzn70/starting_in_semantic_parsing_is_ccg_still_relevant/dbs0zg1/

[2] https://news.ycombinator.com/item?id=12713436
To be clear, one of those lines relates to making sure you pull in upstream during image building. This is super important, as it seems that people have assumed their base image will be current and that is not always the case.
> Threat to free society? Jury's out.

Building a wall isn't going to fix climate change. Facebook is clearly a threat to a free society, but it may be the only chance we have.
Also, just saw this (see below), another example of JS injection using CodePush (by MSFT) and RN, Apple seems to fine with this....doesn't this have them same security issue?

https://blog.bugsnag.com/react-native-plus-code-push/
I've posted a few articles, look through my submission history (last weeks should suffice) if it's there.