skysight-inc/HackerNews huggingface dataset:
You've got the City of Westminster and the City of London, where London is in the east. I guess this why we end up with east end and west end to refer to parts of the city.
You swore off an entire company over the first iteration of category-defining product?

Did you go back to dumb/feature phones?

When did you start using Android, and with which phone?

> I use android because it's the only real alternative to Apple's ecosystem.

Apple did not even have much of an "ecosystem" at the time of the first iPhone, and if you didn't use iPhones since 2007, which experience are you comparing Android with?
Looks like they don't, but they turn off usbhid on that particular port: https://github.com/CIRCL/Circlean/blob/master/circlean_fs/ro...

However, that could be bypassed if the USB key acted like a USB hub with a keyboard attached.

If you do get a keyboard working, it looks like you can just log in with raspberry / raspberry and then full privileged access since sudo from the raspberry user, and /dev/kmem from root is enabled. That would allow arbitrary content to be copied on to the user supplied USB, and depending on the device, possibly firmware reprogramming.
He probably means 10 microseconds, even if he's talking about HFT. The state of the art for FPGA's seems to be around 700 nanoseconds. [0]

[0] http://stackoverflow.com/questions/17256040/how-fast-is-stat...
Oh my god! Outrage! Superlatives!

Come on. By all means, criticize flawed implementations containing bugs and security holes, but drop the attention-seeking behavior of screaming loudly about how an entire standard is [insert string of superlatives here related to "worthless" and "broken"]. If you're going to make such incredibly strong claims, your arguments had better be up to snuff.

With good implementations (plenty of which exist), and careful usage (via good coding and design habits), JWT is a fine standard and it can save a solid amount of time when constructing the security portions of a system.

Shouting about how something is 100% flawed and should be cast into the flames may get you plenty of views and outrage cred, but (thankfully) it doesn't say much about the veracity of your analysis.
ls -d * | entr make

Just a nit: this seems to be imperfect for filenames containing new lines (I know, I know). An xargs like -0, --null option could make it more robust. Then the equivalent of the above command would be something like:

find . -maxdepth 1 -name '[!.]*' -print0 | entr -0 make

Edit: Seems like -print0 is not POSIX compliant. Is there any safe way to pass a list of paths using the shell in a fully POSIX compliant way?
Well you cache the blacklist and push updates, so it has no real performance cost. Just a tad more dev time
s/database/in-memory-map/g should be fine - and suddenly it's pretty lightweight (subtracting service restarts and a highly available message bus of course :)
I'm from Germany but we do have those Sky Tickets as well. It's tempting but if you get both tickets (Entertainment and Movies) then it's actually as expensive as the real thing here. Plus there's always content that's exclusive to TV.

I didn't like the Netflix Marvel stuff but you're right there are good shows on there no question. I enjoyed The Expanse and Killjoys too (on Sky) but good to see that those are available too (although Killjoys not in Germany it seems..). But as soon as the second seasons of The Expanse starts it will take a while until Netflix has it whereas Sky will show it sooner (or did Netflix get better with this?).
Better to find out early that they can't afford than to waste even more time.
> Also loops of shifts and xors that are accumulating, etc.

I think the problem is then to avoid punishing binaries for, e.g., using a hashmap :)
> "unfortunately we are looking for candidates with professional experience".

Just develop something on your job. Any role in a tech company, or beyond, has lots of opportunities for developing code. Bosses won't get in your way, they are hungry for automation. Then, once you have spent even a little time coding, your role as described in your resume accurately includes coding.
When it comes to the self driving car business I really hope Alphabet kicks Uber's ass, because as a consumer I must trust the car to do the best in my interest and safety and I don't trust Uber for a second. This company would do every dodgy thing to become quickly profitable. I rather trust Alphabet or Tesla.
I'm just wondering why no one intervened. Why was he allowed to gain weight in prison? Why was he left isolated in an old persons home? Why was he allowed to gain weight there? Why wasn't he given psychological help there or something?
We have been annoyed of old screen-sharing services and developed this
Why should $500 be too expensive? When I was in college I payed $200 per text book sometimes. If a person makes $45 000 a year, $5 000 of which is spending money, and they spend 700 hours a year reading and taking notes, then $500 is just %10 of their spending money and pays for something that they will use during %10 of their waking hours. A far better deal than say flying to disney world, or buying a $60 video game with 30 hours of game play.
Note that that particular go implementation is prone to deadlocks.

Also, inotify is suboptimal for this use case. inotify has no recursion support, which means that the user must keep a watch on all files individually. There is also a limit to the number of inotify watches that can be in place at any one time.

A more modern, and more suitable interface for this use case is fanotify[0]. It doesn't provide all the functions that inotify does, but importantly it supports recursion, which alone would seem to make it a more obvious choice for this task.

0: http://man7.org/linux/man-pages/man7/fanotify.7.html
I wish some of these ideas would bleed into the mainstream. A small simple powerful core language and the minimum possible special syntax.
The Russia you'll never see on postcards
There is also this perl script for generating a DNS based blocklist for unbound out of Dan Pollock's hosts file.

https://github.com/jodrell/unbound-block-hosts
PHP vs. Python vs. Ruby in 2017
Yes, this is how I believe the RPi works, we are by now too used to the "automagic" features of the common OS's (and BIOSes/UEFI's), I presume that the same effect could be obtained by using an old DOS machine with (say) the Panasonic driver, or something like that.
Token invalidation being an issue depends on the app.

Checking against a blacklist / some secondary measure may only be required for important actions such as changing password, checking out, etc.
What Can Be Expected from Comcast’s New Accelerator with Techstars?
Agreed. I actually don't care about watches, personally, but I found the author's writing compelling enough to remember why I care about some things that just might not be considered "practical". Very inspiring.
Very interesting names indeed.

Some notable ones:

- Tim Berners-Lee

- C. A. R. Hoare
A lot of people are talking about the "none" algorithm issue, but the more recent vulnerability[0] is more telling: The report to the working group mailing list[1] led to the point that the standard had a "security considerations" section in the RFC, and this particular issue was never covered.

And now there are difficulties around the fact they cannot update an RFC which people will refer to for years.

It's not a vulnerability in one or two libraries - it looks like just about every made the same mistake, which points to something much more broken.

[0] https://auth0.com/blog/critical-vulnerability-in-json-web-en...
[1] https://www.ietf.org/mail-archive/web/jose/current/msg05613....
How long does the battery last? I'd like a camera at our summer cottage to take a timelapse during the whole winter (in Finland, so snowy), turn itself on each day, take a pic, shut down, repeat for like 6months, not sure it's possible?
Could be the background clouds video + software rendering.

Try taking out <div class="video-background"> and see what happens.
Facebook doesn't have timetravel, so contributing to Meson would have been impossible.
I'm aware. I live in London. I just found the idea of calling Oxford, an almost thousand-year-old university "reasonably well know" absolutely hilarious!
Why Robots Won’t Take All the Jobs
Gender Bias in Academe: An Annotated Bibliography of Important Recent Studies
That's what I find so strange though. I don't mean to gloss over the difficulties in getting funding, but in a very general simplification, there's much more VC and investor money being thrown at startup companies right now. And yet, the culture persists that you can't possibly pay employees well.
It is like calling British currency pound sterling because it was once based on the wight of sterling silver.

What you pay in transaction fees is the amount of bytes used to represent your data.

Byteball can then also store immutable data of various lengths, if you are willing to pay for it in the price of bytes for the storage of bytes you like to store.

Makes sense.
I use JWT in a couple of projects and it never once occurred to me to let the client decide the algorithm. I am not sure what use-case would necessitate something like that.
For me the high CPU usage seems to happen because of the video background. As soon as I remove the
<div class="video-background"></div>
the CPU usage drops to normal on my MacBook Pro (with integrated GPU)
And here I was, thinking Germans and Austrians were kind of in love with their academic degrees, but this sounds even worse.

But maybe the vocational training is better institutionalized here, so people can actually earn enough as a craftsman or in the service industry.
Is there a chance that some day your work (expo) will be merged with react native ? Conceptually, I think you are doing what people would expect the rn team to be doing. Namely providing access to the native apis through javascript, except that expo seems to provide much more features.
For me, what's holding me back from using expo is the additional complexity of yet another dependency and having to use more tooling (e.g. expo client).
They arent related, at all.

Byteball is live right now, Iota is still in closed/private beta testing with less features.
Agreed, the author of the article shouldn't point out a few flaws/bugs that some JWT libraries had in the past and then deduce that the whole standard is broken at a fundamental level.
JWT is not designed to hold sensitive data, it's designed to hold non-sensitive authentication information like usernames, access groups, privilege levels, and other similar non-sensitive identifying information. It's useful because it loosens your reliance on back-end memory stores like Redis to track session data and makes your architecture much cleaner/simpler.
The article offers no solution to that though.

> So, you had everything right, but result is wrong. Life is unfair. Deal with it.

It mentions a workaround, but not a solution.
I've often found myself in a similar situation as myself where I just can't seem to enjoy using Make and never make it past trivial things. For that reason, I'll shamelessly plug what I think is a viable alternative: the Taskfile.

https://hackernoon.com/introducing-the-taskfile-5ddfe7ed83bd
DO explicitly remove sensitive data (encryption keys, raw collection data,
shellcode, uploaded modules, etc) from memory as soon as the data is no
longer needed in plain-text form. DO NOT RELY ON THE OPERATING SYSTEM TO DO
THIS UPON TERMINATION OF EXECUTION.

DO NOT explicitly import/call functions that is not consistent with a tool's
overt functionality

DO NOT perform operations that will cause the target computer to be
unresponsive to the user

DO make all reasonable efforts to minimize binary file size for all binaries
that will be uploaded to a remote target

DO provide a means to completely "uninstall"/"remove" implants, function
hooks, injected threads, dropped files, registry keys, services, forked
processes, etc whenever possible.

DO use end-to-end encryption for all network communications. NEVER use
networking protocols which break the end-to-end principle with respect to
encryption of payloads.

DO NOT break compliance of an RFC protocol that is being used as a blending
layer.

DO NOT read, write and/or cache data to disk unnecessarily. Be cognizant of
3rd party code that may implicitly write/cache data to disk.

DO NOT use hard-coded filenames or filepaths when writing files to disk.
This must be configurable at deployment time by the operator.

It's remarkable how many of these guidelines are just good software development guidelines and have nothing to do with malware, necessarily.
Sorry! You’ve run into Poe’s law.[1]

[1] https://en.wikipedia.org/wiki/Poe%27s_law
Exactly that. The doctors and nurses of the NHS will have evaluated this man and in their professional opinion deemed him to be in need of help. It wasn't like they just came across a hungry guy and just kept feeding him because he asked for food.

People are far too quick to jump to outrage, like the whole world is out to make life hard for them and them alone.
This reminds me to https://en.wikipedia.org/wiki/Public_Service_Broadcasting_(b...
No. Its too risky for Australia. This can get polluted: https://en.wikipedia.org/wiki/Great_Artesian_Basin
CGP Grey's "The (Secret) City of London" are great videos on the topic of the City of London (vs. London)

Part 1: https://www.youtube.com/watch?v=LrObZ_HZZUc
Part 2: https://www.youtube.com/watch?v=z1ROpIKZe-c
This is a nice write-up :-) Any chance you could provide a dd image to get up and running quickly?
Cutelyst 1.5 released (C++/Qt based Web Framework)
Huh, at least it seems that they care about this attach vector. Blacklisting seems to be the wrong approach.
If Your iPhone Is Stolen, These Guys May Try to iPhish You
Most people can be brought to realise that they are going somewhere dark when they're using typeof in an if statement. This is a whole language construct built and communicated around this (dark) idea.

I understand that general pattern matching is A Really Nice Thing and that Mads misses it from SML (or something like it), I just can't see the value for all the dangers from an OO perspective.
This reminds me about "Astronaut Farmer" movie.
I don't see any valid arguments in the post. The issues raised are either mis-implementation or misuse of JWT.
All I am getting is "JWT can be misused in such such way that makes your application vulnerable. And neither its standards nor libraries prevent that, so it sucks".

But when is the last time we see any technology successfully prevented people from being silly?
Some of the tools seems more like improving existing tools such as yarn (instead of npm) and jest over jasmine. However I still applaud Facebook for releasing these tools since they often offer massive improvements over previous tools many regards. It might be more apparent if you're exposed to web development since the toolsets are changing constantly and quickly, some stability would be great in this space.

This doesn't mean that we should disencourage creating new tools fundamentally changing the ways we work with them. You mention Git and I see it as on great such example, I remember with anguish some of the SVN trunks, working with their pseudo tags and the mess which you'd often be introduced to.
The work done here is so impressive. Oh my. I learned so much!
Oh sorry, I guess it's not exactly the "same thing", mine's plugged into a socket :P
inofity is no fantastic. Memory use scales with the number of directories watched. The program that uses the inotify system call has to keep a mapping of file descriptors to paths. Inotify is slow, inefficient and error-prone for recursively watching file systems.

fanotify is not an alternative because it cannot monitor file deletion or renames and it requires root permission.

http://www.lanedo.com/filesystem-monitoring-linux-kernel/
> They could fix all of these including the instructions.

Where "They" could be anyones pull-request
Agreed. One case of a guy not getting a job. Is this seriously something to get up in arms about? Let's take to the streets! Let's manufacture some outrage.
If anyone here ever came across a daily IT newsletter called Computergram, you will be glad to know that it was written (and laid oud) using WordStar until at least the mid-90s.

The newsletter had a multicolumn-format, and box-outs. These were arranged by using different margin settings and then running the paper through the printer multiple times. Erk.

^KS
A person with this skill set would not be the same who do burglary. More likely, burglars would just license the software / hardware for disabling alarms the similar way how car thieves probably do this now. I doubt car thieves are security experts, but they somehow know where to plug in their comuter into CAN network and how to run an exploit to reprogram the ECU and disable any security.
Geo-strategic irony: Because everyone has a secret nuke lying around, nobody engages in conflicts any more- thus the usual social tension valve beeing unused, leading to civil wars instead of the conventional wars.

TL,DR; Iran vs SaudiArabia turns with nukes into, Iran <-> Iran and SaudiArabia vs SaudiArabia.

Short term gain is long term pain.
Infinities can be handled safely in logic. You just have to be careful about them.

There may not be physically real infinities. But there are no physically real perfect squares either (assuming an analogue universe). It's a simplified model.
Ah I didn't know that Buck was created before 2013.

What about Waf though?
A similar tool written in Rust is watchexec.

https://github.com/mattgreen/watchexec
You've already been to the server once, if you terri-bad app design requires you to go twice that's more your problem than a "feature" of a broken session system.
Understanding the Haiku Operating System
>Why do people need someone to train them?

You should be asking the other question. People don't realize how poor professional IT training is.

All APS[1] registered psychologists have to do 10 hours of formal training a month. It's mandatory to keep your accreditation. Employers give them the time off, and pay to send them to seminars on the latest developments in the field.

About a quarter of a specialist doctors job is to stay up to day with the field. Hospitals bring in experts to lecture and send their staff to conferences. They have to, especially in the USA where healthcare income is proportional to success rates.

The same is true for lawyers. Good lawyers must keep up to date with the latest developments in their countries case work, and again, legal firms that hire their lawyers on a salaried basis expect them to spend 30-50% of their time just reading case reports.

It's pretty much only IT that expects it's employees to keep track of a fast-developing field in their spare time. So a) I don't think we're due anything less than anyone else and b) you're inevitably going to see some pretty serious attrition if you ask people to choose between a family/social life and their career.

[1] http://www.psychology.org.au/
Comparison of Arduino Nano vs Micro
Join the New Forest Complex Systems Conference in May to Develop a New Approach
> Oh, yeah, and write provable programs

Provable wrt to what specification?
We switched from watchman to entr on the project I'm currently working on because watchman was troublesome to configure and IIRC it completely detaches from the shell as well.
Yuval Harari Works Less Than You
At a guess: cross country sales travel. You could easily rack up 2 or 3 fairly long distance Uber trips / day doing that (Airport -> Hotel -> Client -> Airport to travel to the next client)
Google removes underlined links, says goodbye to 1996
Cassini Sees Heat Below the Icy Surface of Enceladus
This is happening currently as well, even with very sophisticated remote car keys in cars from 2016-2017. Most modern systems have exploitable vulnerabilities and thieves are probably the first to learn them.
> As in nature the language that thrives is the fittest for its environment, not the most powerful.

Now hold on. The most successful sprog of nature is humanity[citation needed] and we're a case study in the fact that raw intelligence is more effective than fitness for any particular niche. So: as in nature, there may be a bunch of niche languages, but in time they'll find themselves with a conservation status while a smart language rules the earth.
I mean we as a society.

> Shouldn't taxi drivers be free to define how much they want to sell their time?

The problem with this is that, in my (perhaps naive) mind, the logical conclusion is a race to the bottom fuelled by greed (of the business) and desperation (of the employee) which helps nobody. In my view there should be a regulation to prevent how far this can go.

By the way, I don't think we'll agree on any of these points, but it's refreshing to have a discussion that doesn't descend into name-calling and personal criticism :)
Women in Finance Are Punished More Severely, Especially When Their Boss Is a Man
Show HN: KnightSpear -IT Project Management gamified and made social
Co-Trading Space Idea from Hong Kong City
why does it matter?

Why would anyone write code for anything other than the job at hand, watsing time with "Look at me I'm cool because I use this nifty trick"....

Waste of time. Concentrate on the job at hand.
Yep. I do it, for example. A few of my colleagues do it. Others work more like described in the article.

(But I know that I myself are somewhat of an outlier, since I'm a rather extreme top-down learner.)
s/in-memory-map/cache-server/g if you happen to have a load balancer without sticky session.
In those kinds of environments, typically I just will the program into existence, bug-free.
There is a disable button on the web interface[1] which allows you to either disable it permanently, or for a specific amount of time. Of course, client devices need to clear their DNS cache, too, in order for this to work properly, but at the moment there is no way of automating that.

There are also other tools to help with blacklisted domains that cause issues/site breakages, such as a query log to identify them, and the ability to whitelist with ease!

[1] http://imgur.com/a/DlIeq
Give me an experienced programmer who doesn't know the stack over a junior who does any day.

Knowing the stack is often syntax related and doesn't take long to learn. Knowing best practices does take longer to learn, but its easy to point experienced people in the right direction. Knowing how to write elegant solutions and how to do high level architecture takes longer still, thats where experience comes in.
Silicon Valley's secret
The video emphasises the creative aspects of the tablet but I wonder how they'll go without an online bookstore.

They explicitly don't support DRM which means they can't, say, read titles bought from Google Play Books - if they hope to migrate Amazon and Rakuten customers.
Social Selling – The Bitter Business
I presume they use some sort of path prediction to make up for the laggy display. Doesn't work well for sharp corners.
Trial
It is good to investigate well and hire the right hacker when you need one for your social media, accounts, database hacks, you can direct all hack related issues to 9193076946 Or darkwebssolutions on gmail
The Internet Warriors