skysight-inc/HackerNews huggingface dataset:
CSRF protection:

* Use SameSite cookies (unfortunately, not yet supported by all browsers)

* Don't accept application/x-www-form-urlencoded, multipart/form-data, or text/plain at your endpoints, or

* Use CSRF tokens if you need to accept server-side rendered HTML forms
I think the expense of validating authorization to a database can often be worth the cost. Having a dedicated sharded SSD DB system, or other fast cached DB system that is dedicated to checking and validating a cookie/token of a user for each request solves many problems, such as quickly clearing tokens in the case of a hack, and if there is a DB failure on one of these systems then the user simply has to login again and their token/cookie will be stored on another DB in the shard.

The extra overhead on each request of checking these credentials, especially when these requests are hitting the product's database anyway, are often worth the additional security.
> If you don't want FB to have your pictures then don't go there.

That's all well and good until you get to US Customs and they demand to see your Facebook before they let you back in the country.
Criticizing your employees when they screw up is your moral obligation
So thats another factor to see if its a pattern:
Do the images w/o problems apt-get update && apt-get upgrade

And maybe there's an opportunity for a chrome browser extension that can overlay an indicator when choosing a docker image to pick one that uses best practices like that.
Maybe that day can be written 2017-π to preserve both the pun and (if not the letter) the spirit of ISO notation. In that sense, it's Pi day for a given year.
Yeah, Damasko is another good example. Their metallurgy tech is really impressive.
> the cold startup time of the JVM itself (which is not relevant on a server in comparison to desktop Java apps).

I disagree somewhat with this.

We found that when we started writing microservices in languages that are not java, the short startup time changed how we did some error handling.

For errors where we say lose connection to the database, or rabbitmq, we much rather have the nodejs-process die and restart, than try to construct reconnect logic.

The problem with reconnect-logic is that it is code that (may) be tested very rarely. This in turn means it's easy to get strange long term problems there like very slow memory leak due to some listener being added to a connection object once the connection is initiated.

We did a 180 on reconnect-logic in our nodejs-processes and let the exceptions just bubble unhandled and take the entire vm down. With automatic restart script, the process will be back in seconds anyway, and with docker having built in back-off timers for auto restart, we don't necessarily overload the shared resources.
Classiness does not preclude being insulting. It simply calls for a higher degree of skill in the insulting. History is full of classy insults. Diplomacy is nearly made of them.

http://allowe.com/laughs/book/When%20Insults%20Had%20Class.h... - just a quick hit on "classy insults" that seems to fit what I'm saying here.
Habring2 are likable, but not what I'd call 'relatively' cheap, as none of their models are less than $4000 USD. For people who are interested in modestly-priced mechanical watches, I would suggest Seiko, especially some of their models intended for the Japanese Domestic Market, many of which are less than $500 USD. They have very good quality throughout, though the aesthetics vary (I like some of their divers quite a bit).
Logistic Regression Isn't Interpretable
If you look at the actual list, it's a recipe to living a generally happy life. If I had to summarize the list, it'd look like this:

1. Let go of small things.

2. Have sympathy for the people around you.

3. Repay your debts.

4. Don't lie, don't brag, and don't gossip.

5. Don't disparage yourself to fish for pity.

6. Be humble. Let your talents prove themselves.

7. Spend time on the things that matter to you.

8. Long list of stuff that's generally about living in moderation and maintaining your body and environment.

There isn't much here to be smug about.
These machines have a fairly low max payout. Winning 500$ is nice, but hardly a life changing event. Further, the cost is higher, where a lotto might cost 2$ for some hope these machines can burn 20$ fairly quickly.

As to odds. If you have a 1% chance to win 99$ and play 90 times you are likely to be up 9$ and have a lower odds of being down 90$ And even lower odds of being up 108$. Over long enough time frames you still lose money, but it feels very different from losing 0.01 cents per pull.
Should Developers be involved in UI/UX?
Well, Facebook is not so much of a threat as WeChat is in China.

https://www.youtube.com/watch?v=VAesMQ6VtK8

Basically all apps converge into WeChat, and there is absolutely no way to avoid it.
I think a 6MB string is preferable to calculating pi to 6+ million digits in JS on each load.
Article used the word "meanness" so I did too.

Which is, of course, not remotely a "hidden" rule, and may be one of the best known rules of the Internet. Penny Arcade gave it a name, years ago: The Greater Internet Fuckwad Theory. So the headline's not just uselessly hiding info to be clickbait, it's lying.
http://wordsafety.com was posted on HN a couple of years ago.

It doesn't detect "gomix" though, which is odd, as I submitted it when gomix.com was launched and the naming snafu was mentioned here.

Edit: having tried variations on some common English words, I can see why not - the phonetic matching seems pretty poor. I wonder what algorithm they're using?
No, it is to short the stock.

The question is if you can hold out long enough and if the change you predict will happen fast enough.

That can get expensive quickly, so it's not quite the inverse of holding stock where the only downside is how far the stock can drop, not how far it can go up.
Any plans on allowing subdomains so people can use their own domains? Wouldn't mind a hexopress footer (similar to how PostHaven would do it) on the site in exchange.
JWT are even smaller than their size since you can revoke them by hash (although you should really just revoke by user ID in most cases).

Your tokens should generally have a rather short lifetime - then you can keep the entire relevant window of revocations in memory.

The implementation is not trivial though, that's for sure.
Wireframing do’s and don’ts
Evolving Deep Neural Networks
That video you sent is funny because it shows Sowell contradicting himself.

He says public intellectuals create demand for their own work by exploiting their authority in one field to claim authority in others. Example he gives: Noam Chomsky. Genius in linguistics who exploited that fame to become a political commentator.

Does Chomsky's background in linguistics really give him any standing to be a political commentator? No.

Sowell is an academic economist. His specialty is social trends concerning topics like race, minimum wage, affirmative action, welfare, etc.

Should he really be commenting on global warming? No!

Check out Sowell's work on social issues and I think you'll find it more attractive (at least intellectually attractive, because you might disagree with it, which is totally okay).
The heuristic would probably show black as ahead, but it would also show that black can make no progress. So it's an obvious draw.
This is a very underrated comment.
Ooh, I like that idea. Don't tempt me!

xD
Of course we knew who did what and when, that was not the problem and I never said it was. But the start date+time they entered for recurring series was converted to UTC on the client before it was sent to the server. So when it was decided that what they really wanted wasn't to run it "every 24 hours after the start date+time" but to run it on the exact time they entered every day, starting on the day they entered, the information about the exact time they had entered was gone.", all we had was that time converted to UTC. This meant we could not deduce the original time zone in which it was entered and thus could not deduce which DST schedule it should follow to keep it running at the same time every day.
There absolutely is a pattern, but the thing is -- even if the image is updated at build, as soon as you deploy it, vulnerabilities begin to emerge.
When you are writing that full-blown HTTP REST server with DB access you would probably be served better on the JVM. Scala native is just as garbage collected as Scala JVM and garbage collection is where the JVM shines brightly.

In my eyes, the main value proposition of Scala native will be "you don't have to learn a new language if you need to write an echo or a grep", with "you don't need to learn a new language if you need to run some of your code on a platform that does not have a reasonably good JVM" a distant second. The former would suffer a lot from oversized binaries, the latter depending on the specifics of the target environment.
Instant gratification modern stack web (frontend/backend) programming. Ok for playing around, but for anything serious it doesn't seem to add much imho. Maybe I am missing something. If you could install it on your own company servers it would be better.
Still broken. I can make one change in the web interface per several minutes. This is ... really rather annoying.
Are libertarians usually for open borders? I hadn't heard this perspective.
Me too. My reading of the Blue and Brown books led me to believe Wittgenstein's conception of meaning is inextricably tied up with the notion of "learning" and exposure to language and its use. Rather than meaning being contingent on 'hard' logico-mathematical derivations of formal semantics.

This contrast seems somewhat reminiscent of the complementary approaches of hard-coded rule based AI vs machine learning.
I heard about it for the first time today and I tend to check on the JS framework ecosystem periodically...
okay, then let's regulate donuts, let's regulate hacker news because I just can't stop myself from checking it everyday. let's regulate cereals and candy, etc. Oh and coffee too. oh and toothpaste as well, i can't help but brush my teeth two or even 3 times a day!

my sister has an addicition to shopping for clothes, so that's going to need regulation, as well as my friend's action to watching tv, etc.
The million dollar engineering problem
Why Ring, Not Amazon Echo, Is the Killer IoT Product
OK, found out what a bare repository means and pretty sure that's what it refers to. Still can't find any documentation for the query string parameter and don't know how that makes sense for github's repository view page.
I don't know anything about you, but I do know that I know a somewhat fair amount about electronics and mechanics. I'l just respond to the first one.

> no it doesn't. rfid, weight, a camera, can easily do this.

Dirt, egg-white, temperature variations. Rfid on eggs ? I get my eggs from the market. A nice lady has chickens that lay those eggs. I get 50 of them at once, that is much more then it fits in the egg drawer. (bdw lasers are better then cameras) The best solution i can think of are actually weight sensors (your idea). But even that has immense problems in that all eggs are not equal. Meaning that the whole.. what you call the little cup they sit in.. would have to be weighted. Meaning either separate cups or rubber cups, bout of which are a reliability problem.

>And it's no problem living without a cell phone, or central heating, or indoor plumbing, but we don't see many people running to that lifestyle very often.

Hyperbole. But anyway, have you tried living in a forest ? Just because you think it's bad doesn't mean it is. (see that, i can hyperbole too)

>Just because you don't want something, has no bearing on whether other people want it or not.

I didn't say i don't want it. I explained that it is too much trouble for almost no benefit. Some such things are great. I can think of a dozen things that can be done with electronics that are nice, kind-of useful and, most importantly, actually liable (fairly cheap, reliable and fairly easy to do). An egg-counting refrigerator is not one of them.

Mind you that i love electronics. (my desk is littered with it) Would even be doing it instead of programming if it wasn't so expensive.
Languages like Julia, R and Matlab offer a whole lot in the way of built-in syntax, data structures, functions and constants for scientific computing that you would have to get from libraries in general purpose languages. But unless those languages have the kind of libraries that Python offers, such as Numpy and Pandas, you're not going to have that kind of support.

In addition, scientific languages will have libraries mostly in that domain. You can't beat R's library when it comes to statistics. They will also have good plotting libraries.

What you also get with Julia and Fortran is code designed to be optimized for numerical computing. Python attempts to offer this kind of performance via Numpy, which is Python wrapper on C or Fortran BLAS library. Or by JIT compiling with Numba, which is something Julia does automatically the first time you call a function.
I wouldn't consider most Trump supporters to be particularly Libertarian either.
A good irish bar is about the only place I can get people to go to where we can have a conversation in a booth with high wooden walls and not have our ears bleeding from loud music. The few irish bars that don't even do that are bound to fail. I don't really care if the bar is a premade transplant, as long as it fills that role well.

I have long wished the US would learn to have more pubs in that booth style, geared towards good alcohol and conversation, rather than music. English, Irish, Scottish, the structure is far too few between.

In the college town I am in I have thought a really cool bar would be a library/bar, designed for study groups, where you could bring a good non-fiction book and get a free drink or discount on one, and have an attached sleep-pod structure to encourage people to not drive drunk. Less sports bars, more intellectual bars...
> please state why you want to fund people who are living in the US illegally

So your argument is that as long as each individual immigrant contributes to society, you're fine with aiding and abetting their breaking of the law? If somebody were a serial bank robber that donated most of their taking to charity, would that be acceptable also, since they're arguably performing a net service to society?

> Now, the fact that their business model is so unsound that they can't pay legal minimum wage

In case you have problems reading, the business model of their employer has no relation towards their legal/illegal status. I don't know why you'd highlight that particular quote of yours.
There might still be potential for future ultra heavy lift airships for niche transports of things heavier than 20 tons, bulkier than 40x9x9', and destinations lacking in an airport.

I'd say the major problem is that the niche may be too small to amortize construction cost across a big enough fleet. A reduction in global poverty may be able to increase demand to make the niche market big enough to be viable. For now we wait.
Also Man AHL.
If you are interested in a Ruby library for signing and verifying a token containing a simple payload, take a look at our Slosilo library:

https://github.com/conjurinc/slosilo#signing

We use this library to store a signed username. Nothing more than that, just a username in a signed, expiring token. No `alg` field or any other options.

The Slosilo code has been subjected to a professional crytographic audit, so it's safe for you to use. Unfortunately, without an NDA, we can't show you the audit report, that's just how these things work. The only audit finding was a recommendation that we switch to `AES-256-GCM`, which we did in Slosilo 2.0, November 2014.
Doesn't even seem to be available yet (website still offering preorder && no Amazon listing as far as I checked).
dask has been a real pleasure to work with.
Seems like, practically, that suggests three options:

1. Take something like AS::ME that already has real use and implement it for as many platforms as possible

2. Define a really restricted subset of JWT (which may be necessary anyway for purposes of saying to management "yes, we're buzzword compliant")

3. Invent a non-AS::ME "bag-of-attributes secure bearer token" system and implement it everywhere.

I think part of the trouble with 3 is that people like me genuinely worry that if we tried to roll our own we'd manage to do worse than JWT in spite of JWT being terrible.

So maybe step zero is for somebody with crypto knowledge to explain one sane way to do the "bag-of-attributes secure bearer token" part ... or you to point the audience to a blog post that already exists that describes it, because, well, because I suspect quite a few of us trust you to say "this post actually describes a sensible plan" while we don't trust ourselves to be able to tell.
> if you consider Democrats to be liberal.

The long- (since at least Clinton's "Third Way" politics in the early 1990s) dominant faction (and the one whose standard-bearer won the nominating contest) of the Democratic Party is center-right.

While that's less right-wing than the Republican Party, the Republican nominee was a political outsider that deliberately—alongside some fairly explicit endorsements of some far-right and extreme nationalist positions, to be sure—largely adopted vague language filled with direct appeals to liberal values and interest groups, and specifically targeted those dissillusioned by the progressive defeat by the center-right faction of the Democratic Party. (This kind of ambiguity and rhetorical gesture to the left has substantial precedent from the authoritarian right.)
But what is authenticity?

That is a serious question. What is it?

When I was in Dublin the thing that really surprised me was how every bar.. er... pub had these amazing Irish musicians who sort of picked up various instruments and just went at it. I would identify it as "irish folk music" though if they were belting out lesser known Richard Thompson tunes, I would not know.

Were they paid? Did they carry their instruments with themselves? Who knows.

Now, I consider that authentic. Was it authentic? Do Irish people read this and think "he was stuck in that tourist trap area" or do they think "yup, that's good 'ol homestyle music"?

And can we reproduce that here?
Introduction to Recursion Schemes with Matryoshka (Scala Library)
Live Webinar – The Anatomy of a Phishing Attack
7 Social Influencer Marketing Techniques for 2017
I'd always had an impression of classical Russian writing as being impenetrable, but this was delightful. Thank you!
To emphasise this point, he believes that consciousness is provided by a non-physical unmeasurable substance that has some kind of complex structure, in order to contain the complex consciousness. Could you build a human molecule by molecule to match another that was naturally born, then it wouldn't be conscious as you wouldn't have the means to build a consciousness to go with it.

Once I'd got this far with the book, I put it down.
With the average American now spending 40 minutes on Facebook per day [0], it may be worth checking out this TedX talk: Distracted? Let's make technology that helps us spend our time well | Tristan Harris [1] (he speaks of a good design example at 4:00 in). It's astounding that this average means that roughly an entire day is wasted each month essentially scrolling through a newsfeed.

[0] http://www.businessinsider.com/facebook-monthly-average-time...
[1] https://www.youtube.com/watch?v=jT5rRh9AZf4
"DON'T SHARE, COPY AND PASTE"
The corned beef and cabbage was a surprise the first time I visited an Irish-themed bar. The house gave me it complimentary ( for being Irish, I didn't emphasise the northern aspect ) and it was the first time I had ever eaten it...

Even more surprising was that many of them had a cocktail called a 'Carbomb' which they thought I'd find amusing. Pity I didn't have one called 'Wheelbarrow' in response.

Eventually we found a pub in Chicago called Celtic Crossing without adornments and with a Belfast barman who sold Club Orange fizzy-juice and Tayto crisps. Bliss.
I have been dating all official documents in ISO-8601 format and never had an issue with that in over 15 years. This includes bank forms, checks, contracts, and many other informal docs. Same for when my birthdate is requested of me. Even if the form has specific spaces for MM/DD/YYYY, I just write over it with the pen.
Thanks for sharing, never realised that Dostoyevskiy is so hard, being kind-of-native-speaker.
For automatics, I think you are right. I've seen this mainly for quartz or mecha-quartz movements.
German Official Wants $53M Fines for Social Media “Hate” Posts
When I was a kid in the 70s I remember reading a national magazine article about another kid my age who had his own computer. Amazing! This was something I wanted.

Reading on, it described how he had built his computer from electronics and operated it from his attic. He had quite a few programs for his computer. One he liked the most allowed him to simulate buying and selling of stocks.

If you've ever read any ads from that period, the implication is clear: computers are awesome because they are going to challenge us to become better people. They will teach us at a speed we can learn, they will reward us as we progress, and the obstacles and learning will get more and more advanced.

People who don't have computers are going to be missing out -- on self development.

Contrast that to my trip the other day by commercial air travel. Everywhere I went, people were on their phones. Were they learning foreign languages? Becoming experts at symbolic logic or global politics?

They were not.

Instead they were playing the stupidest games imaginable. Facebooking, taking quizzes where any moron with the ability to type would get 90% correct -- and then sharing the results with their friends.

Zuck and others figured it out. Computers don't have to be computers. They have to be video games. Who gives a shit whether the guy on the other end is learning to be a better person. Challenge them with idiotic trivial tasks, then reward them with blinky lights, sound effects, and the imagined praise of their peers. They'll do that shit all day long. All they need is more batteries.

Yes. It's a problem.
Kern Type, the kerning game
And, in the ISO format, when omitting the year, it's still 3-14.
I agree that they are just assumptions.

Some people just want to watch the world learn.

That's a good line. I'll have to borrow it from you.
It's addictive if you want/need to be social. My wife does, not me. I'm not a very social guy honestly, I have a few friends in my inner circle who I text/gchat/fb messenger with but I don't use the facebook app or the web interface.

Since I deactivated my acct in Dec last year to focus on bschool apps, I've accomplished so much, and I say that not to brag, but to illustrate that it was a bit of a timesuck for me and I've been able to do a lot more since I quit.
Indeed. Pascal with WordStar on CP/M, running in my father's Osborne 1.
StackOverflow was named by a public vote: https://blog.codinghorror.com/help-name-our-website/
>I have long wished the US would learn to have more pubs in that booth style, geared towards good alcohol and conversation, rather than music.

>Less sports bars, more intellectual bars...

You're in the wrong country for that kind of thing. Americans don't like intellectualism. Just look at our elections.
> If you don't want FB to have your pictures then don't go there.

There's a trivial error in your example: I can upload the photo of you to Facebook, and there's no mechanism you can use to take it down.
The 75% that use Facebook is much bigger than 100% of the people that used computers back in the late 90s.
Why is Alt+D the keyboard shortcut for putting focus on the address bar?