skysight-inc/HackerNews huggingface dataset:
Too much designer, not enough carpenter.

And by that I mean, you have spent a good deal of thought on a pretty marketing page, but your spiel doesn't really demonstrate knowledge of the wooddust and nails that make up homebuilding. You're not being careful with which codes you satisfy, you're not talking physical tolerances (earthquake? hurricane? heavy rain? wind?), you're not discussing the existing prefab systems and what makes yours better.

There is, of course, potential in prefab. But I would suggest more sweat of talking to carpenters and other tradespeople. Hiring a top carpenter for 6 months to throw darts at the thing would be useful. willyt provides some good feedback, but I think its revealing that you don't treat that kind of information, in that kind of depth, in your current information copy. You can get there though!

best of luck.
I think you're right, but I'm not sure where to get those stats :)
Bit City: Build Your Own Bit City
Assuming that:

- your JWT libraries don't do anything dumb like accepting the `none` algorithm

- you're using HMAC SHA-256

- your access tokens have a short (~20 min) expiration time

- your refresh tokens are easily revocable

Can you elaborate on the specific security advantages that a token encoded with ActiveSupport::MessageEncryptor would have over such a JWT implementation?

Why do you think there aren't more AS::ME implementations out there if it's a superior solution? I only know of a Go implementation and haven't seen others: https://godoc.org/github.com/mattetti/goRailsYourself/crypto

Edit

I saw you mention Fernet in another comment. As a Heroku alum I'm quite familiar with Fernet (we used it for lots of things), but to my knowledge those projects are on life support at best.
Symmetric signature is simpler, leaner (in message size overhead), faster and more secure (by virtue of it being simpler).

But there are still cases where you would choose asymmetric signatures over symmetric signature, due to the very essence of it being asymmetric.

The rule of thumb is that when you want to produce a cryptographic token that will be consumed by parties which you don't trust, you should use an asymmetric signature. Realistically speaking, the untrusted party could (and very often should) be almost any other service inside your own company. If you let symmetric keys spread around, you should treat them as good as if they've been leaked.

There is an alternative that if you're able to (and willing to) manage shared secrets through a safe out-of-band channel (e.g. deriving from client secrets).
As opposed to Google that does the same? I am kinda surprised facebook has not given out free email ids yet.
Actually, there are people using Scala.js to run Scala on AWS lambda, precisely for that reason.

* https://github.com/tptodorov/aws-lambda-scalajs

* http://underscore.io/blog/posts/2016/03/21/serverless-scale-...
Panoply: Low-TCB Linux Applications with SGX Enclaves
3.1 TB!
> They do not ask for the cleverness which shows itself in
continual lying. They want especially, if they are artists, freshness, elegance, humanity, the capacity for motherhood

ugh. Cut the misogynistic crap please Chekhov
Thanks for clarifying. Yes, seeding lectures would be the best way to contribute while still maintaining a personal copy.

https://archive.org/details/@schule04?and%5b%5d=subject%3A%2...

(If you go onto one of the course pages above, there's a download option to grab a torrent.)
Open your eyes, if you dare.
This is a great tutorial. Unfortunately the Espressif SDK it uses is out of date, and I was unable to get the source working with the current SDK.
Check out Daniil Kharms too - http://www.sevaj.dk/kharms/stories/noteb10.htm
I suspect that in part this is because having HN's actual ranking algorithm as implemented today (including the secret sauce) would not benefit HN.
US Navy Paper on Animal AI for Simulation [pdf]
> There's plenty of rational reason on the right.

...and the people with those views tend to not win Republican primaries nowadays, and their views do not have much influence over Republican leaders in Congress.

We have in effect a two party system. Suppose on a scale of 0 to 10, where 0 is most left wing and 10 is most right wing, the average Republican is 7 and the average Democrat a 3. It used to be the the 6, 7, and 8s made up the overwhelming majority of Republicans, and the 2, 3, and 4s made up the overwhelming majority of the Democrats. The 5s would go R or D depending on the candidate and the particular issues of the day.

What about the 0, 1, 9, and 10s? These were the people that were considered too far to the left (0, 1) or right (9, 10) by the Ds and Rs, respectively. Nevertheless, because we are in effect a two party system they would often join the Ds or Rs, recognizing that joining a third party is largely equivalent to not participating.

So both Ds and Rs end up with a small extreme wing.

In addition to being effectively a two party system, we also have a fairly apathetic electorate. Few people make an effort to actually be well informed. Make a proposal that seems great in sound bites, and a lot of people will believe it is great, even if it does not stand up to serious analysis...because they don't pay attention to places that publish serious analysis.

The Rs managed to effectively lose control of their party to the 9 and 10s. They came along at the right time (when there were serious economic problems that had people very worried) for that apathetic electorate to be particularly receptive to bold messages, and quite uninterested in hearing any real analysis that might show that there was nothing behind the message.
This sounds like a plausible explanation, but is this verified/verifiable? Are there memory profilers that can show me the relative sizes of the young/old/permanent generation segments of the GC?

I'm always blown away at the memory usage of JVM apps. Part of it is the fact that java has encouraged insanity-inducing inheritance hierarchies...but also it is incredibly hard to do dead code optimization on for such a static (type and compilation model) language (I blame dymanic classloading, but that's more of a guess than anything). Maybe what you're saying is the reason we don't see noticable GC pauses until you start seeing large amounts of data...but it is still a huge pain for low memory environments like phones, embedded devices, IoT, etc. And while memory usage is always gonna be higher on a GC'd language, the JVM still consumes vastly more memory than other languages like OCaml, D, Go, etc.
It's a universal truism that all compilers cannot be bootstrapped from source without a trusted binary. It's true that in the world of standardized languages (which mostly means "C" in practice) there are compilers (mostly just gcc and clang) that can bootstrap themselves with a trusted binary of a previous release of some other compiler.

Is that such a big deal?
yea i think the bits i'd shoot for with this now are

1. Bcrypt(or scrypt, or similar) for initial hash of password. (used PBKDF2 i think before).
2. Add time expiration to the challenge-response
3. Rate limit the challenge/response per account
4. make sure to use a good hash for HMAC() (was using sha-1 since JS was much slower then).

Ideally I'd also have a single challenge/response token per user and not let you get several to try against (i.e. invalidate old ones) but I'm not sure how I'd make that scale well. Maybe a salt+counter put into a hash (like HOTP) and then after a token is used invalidate all tokens with the counter less than the most recently attempted version?
I encountered that in Manhattan in the late 80s. It was fashionable among anarchist hippies to support the IRA.
> If people are happy with that status quo, who are we to challenge them?

Engineers who have identified a systemic risk to society.

Couldn't your argument apply all the same to heroin?
how big of a problem is it, really?

is it a theoretical problem or a practical problem for industry users?
They went after him. He took a plea, was fined $100,000 and left govt service. https://www.nytimes.com/2015/03/04/us/petraeus-plea-deal-ove...

This is quite different than nothing happening.
I've been thinking about this, and personally, I thought Twitter was done years ago. To me, it was just a media that was designed specifically to give a few well-privileged famous celebrities a way to spew their empty garbage to the masses. It's very much a one-way "popular kids" channel.

I thought that most people would find it boring and useless and abandon it. But I think it's done the opposite. It's fed into the tabloid-news impulse of the lowbrow class, and only become more popular.

The genius of FB is that when sub-groups of people piss each other off, they can just unfriend, block, and ban, and they're in a nice comfy bubble.

The next thing that comes along will probably be both of these. With better AI-generated/sourced content.
Disclaimer: I run a consulting company that fixes horrifying AWS bills.

By and large, this is going to make life a lot easier for most of my clients.

That said:

* You still have to watch out for generational changes ("Oh, you have a lot of reservations for i2 instances? That sucks, i3s just came out, are a third cheaper, and you can't use your RIs for them."), so 1 year is still where it's at unless you're doing something like writing your cloud spend as CapEx.

* You still need to figure out how your application profiles. Converting an m4 reservation to a c3 isn't happening.

* Smaller instance reservations apply to larger instances, and pro-rate the difference down to on-demand pricing. This is "the right thing," but it's going to make Amazon's already byzantine billing even harder to dissect.
Asynchronous Space Warp hides most sins.

IDK how ReactVR does it, but Primrose pools most objects to avoid GC.
how delightfully steampunk!
Unfortunately this doesn't do markerless.
Chekhov was very popular in Russian schools up until early 90s because of his writing style. You're absolutely spot on that he writes in very plain Russian. Dostoevsky has some mindfuck-inducing way or getting across to the reader. His writing is difficult even for a lot of native Russian speakers. L.N. Tolstoy also has some easy reading ( Детство. Отрочество. Юность / Childhood, Boyhood, and Youth is my favorite)
Looks like a good fit for the CLI we have been planning for our API bases on a Scala backend.
I think when you say "make Android builds faster", you mean "make Android application builds faster" -- as opposed to making Android operating system builds faster. Those are two very different things, and for the uninitiated the casual use of language here is confusing. The Android operating system has never been built with ant, but historically was built with make until around Android N when that team started migrating to ninja-based builds instead.
Reducing power consumption for background tabs
Selling HR Technology: How to Structure Your Team for Success
I tried out ReactVR for a prototype and I liked that I was able to use my familiarity with React to set up a simple VR project in a few hours with no prior VR experience and without having to learn any new syntax, just a few new classes.
> You make the exact criticism that you say isn't being made.

Yes he did. I was a little shocked by that. Apparently the public school system failed him in rhetoric and logic.
Really, a history of likes, a corpus of chat messages, a corpus of public status, and some corpus of potential location data/ usage data depending on the devices used; that's what you liken to an apocalyptic event? Your family, your community, everyone will be just fine. Potentially some population already living in oppressive situations will be impacted (your religious family learns you're gay, etc) but the vast majority will just stop using Facebook and move to the next social media site. What kind of data do you imagine people storing on facebook (remember nothing is there you, the user, hasn't explicitly decided to share with someone aside from whatever they track internally interms of usage and location).

By default a person's friends list is visible from their public profile so if you want to go put together a graph you're welcome to.
Yeah, the current macro system will be replaced with scala-meta, which is a different macro system, but it hasn't happened yet. Scala-meta doesn't have def macros yet, so it's not ready.
Are there any Chinese brands that aren't replicas? Just selling their own designs I mean for a cheaper hand crafted watch?
News for everything here http://www.clippingserviceindia.com/index.php
Those are all really good points. We wanted to push people to download the apps because the performance is so much better than Appetize, but maybe that's not the right tradeoff.

Thanks for letting me know the OpenGL demo is crashing, I'll take a look at that.

edit: It looks like we have a bug with our iOS simulator build. We'll update that but for now Android Appetize works.
Edinburgh's Greyfriars Bobby (a dog) has a nose people touch for luck. Nearby John Hume has an enlightened toe: http://www.scotsman.com/news/hume-giant-of-the-enligh-toe-nm...
FYI to Mac users: brew install youtube-dl works just as well.
I don't think facebook is a fad.

It's the default communication mechanism for many people.

Telephones stink and we still use them because they are a standard.
Physics C10 (aka L&S C70V)
Case in point: I'm better than you attitude. So cultured!
I was going to mention that book. Pretty hilarious.
A huge list of interesting open source projects
I am a regular Scala user and I hate that message
I agree. The outrage is how taxes are spent. If my tax dollars are used poorly then it's difficult to feel good about paying them.
> Is that not effectively a server-side session?

With most web frameworks (e.g. Django), the user model is retrieved on every request anyway. So it would be perhaps more accurate to say that it's a server-side session that's effectively not a server-side session, since no additional lookups are needed, only the user model lookup that's already done anyway.
I grow more and more tired of posts touting engineering sensationalism.

Here is a point of order for developers who work on something realize it isn't idiot proof (them proof) out of the box and then want to write a sensational post:

Implementation and design are a core part of anything you do and considering the risks and accounting for them are part of doing business.

Having worked with large organizations that do active and passive scanning of the web I am constantly shocked how often we are contacting someone about basic SQL injection in their application... in 2017.

JWT is an incredibly powerful standard if implemented effectively but its not for the LAZY, it requires thoughtfulness where ever it is active.

JWT solves a serious and real problem that organizations face at scale which is why you see it implemented in systems like google sign in. Realistically its not going anywhere.

People love criticizing the movement towards stateless tokens on the web I find it pretty funny... crawl down the stack from their webheads and you usually come face to face with Kerberos managing auth within their networks...
Absolutely this. Facebook is almost entirely, if not entirely, empty of anything I care about. After a while it just starts to look like a ton of people all pointing out, "Hey, look! I have an asshole!" "Whoa really? Look at my asshole!" "Nice asshole, here's mine on the beach..."

HN can be totally anonymous, but good luck being mean here! The issue is how you moderate your forum, the competence with which you do it, and the kind of people you draw. Having a name doesn't change behavior as much as people would like to think.

We're not suddenly turning into beasts because of the internet, we're just connected to every last beast out there. They always existed, but they use to have to do things like slip pamphlets in the pages of library books, or shout at people on the street. Now they have the internet, and a lot of people seem to think that it's not just a new medium for them, but a new species.

It is not a new species, or a new behavioral profile.
You're wrong about Clojurescript. It's the most pragmatic and efficient language today that compile into JS. And it's definitely steadily growing.
What about the German Zeppelin?
https://en.wikipedia.org/wiki/Zeppelin
First lift off was 1900/06...
They tried to reinvent it:
https://en.wikipedia.org/wiki/CargoLifter
But announced insolvency in 2002...
https://en.wikipedia.org/wiki/Suffix_tree
Introducing Keras 2.0
Pi Day is the same in Drunk Endian (US) and Big Endian (ISO Standard) formats (March 14th). It's different in Little Endian (Traditional European) format.
Could someone make a torrent with all of the videos? I would but I've never done it before and don't have the time to learn. :(
I would like to add that the visual component of interactivepython.org seems to be:

http://www.pythontutor.com/

Which is great as a visual learning aid especially for things like recursion as it allows you to step through your code a stack frame at a time.
> "this cannot be the case, because ...".

What I should have added is that invariably, the problem would be in one of these places that they had eliminated by reasoning.

While you obviously need to think about your code, otherwise you can't formulate useful hypotheses, you then must validate those hypotheses. And if you've done any performance work, you will probably know that those hypotheses are also almost invariably wrong. Which is why performance work without measurement is usually either useless or downright counterproductive. Why should it be different for other aspects of code?

Again, needing to form hypotheses is obviously crucial (I also talk about this in my performance book, iOS and macOS Performance Tuning [1]), I've also seen a lot of waste in just gathering reams of data without knowing what you're looking for.

That's why I wrote experimentalist, not "data gatherer". An experiment requires a hypothesis.

[1] https://www.amazon.com/gp/product/0321842847/ref=as_li_tl?ie...
TFW you're voted down immediately for calling out sexism which, though very explicit, has so far gone uncommented upon

[edit] - could someone please explain why they're voting me down?
Google launches new effort to flag upsetting or offensive content in search
Solar Experiment Lets Neighbors Trade Energy Among Themselves
That is a great list to have so far! On top of that, I have to highly recommend CS168: Internet Architecture (preferably with Scott Shenker), CS 161: Computer Security (with either Wagner, or Weaver), and CS169: Software Engineering (with Armando Fox, also available on EdX). These are the 3 courses that were most influential on my Undergrad experience (on top of the 61 series and 162)
From the point of view of someone gaming HN, there's nothing to be gained by knowing the ranking algorithm. It doesn't matter if you know five flags will bump you off the front page, or that mods can adjust the position of your story, because that's not something that you can use to your advantage. The only thing you'd be able to do with that info is to use it maliciously, like flag a story off the front page. But everyone already knows that you can remove a story via flags, and it's pretty easy to figure out how many flags are required.

Honestly the argument "there are bad people, we need to worry about them" is getting tired. It was cool when pg was showing off Arc to the community. It felt like we were all discovering something new, and how to build a community together.
The archive files can be accessed here:

https://archive.org/details/@schule04?and%5b%5d=subject%3A%2...

Should contain the full backup.
Thinking immutably when slammed with a ton of new feature requests
Google’s Allo app can reveal to your friends what you’ve searched
Or you could just look at facebook comments
Interesting, I guess I understood that wrong. Looks like no "easy" interop, but it's there if you really need it and don't mind the extra work.

I've been playing with this and trying to convert a ~20 line helper script that I use at work (and would really like to benefit from no JVM warmup time), and I've already run into missing core library functions like parallel collections and regexes.

This thing will be really great when it's ready, but it's not even close yet.
I've made this argument to myself and I can't find fault with it, but it does really bother me. Can it be true that I have no control over my life? I find that hard to swallow at a gut level but can't explain how it might be otherwise.
That's probably a seisiun (pronounced, sometimes spelled session): https://en.wikipedia.org/wiki/Irish_traditional_music_sessio...

There's a bar in Queens that has a killer session Sunday nights (there are dozens at other bars in NYC throughout the week). It drives me insane but during football season, they cancel the session if the Giants or Jets are on TV. Alas, at least 2x as many people show up for football as for music.
You should also make sure to allow only tokens with the "HS256" alg headers before you verify them, in case somebody decides to add a new signature algorithm to your library, and it turns out it could easily be broken and lets you use the same key you used for HS256.
Announcing NGINX Plus R12
Funny I downloaded exactly the same courses.
Jeeeeziz. HTML/JS were designed to display interlinked text documents. Now you can use them for VR. It's like building a spaceship out of bicycle parts. That's crazy. Crazy cool maybe, but definitely crazy.

Love React by the way, will definitely check this out.
This is a terrible puzzle. I'm glad I didn't rack my brain for hours looking for the "flash of insight" when all I had to do was be reminded of the 50 move rule.
"Random" chance is still probably deterministic.
Ruby, RubyGems and Bundler
Have you ever noticed?
Have you ever noticed how much time you spend on social networks? How much time do you work? How much time do you spend chatting with your family and friends? I suggest to stop there and think about it for a minute. Also, think about things which bring you the best satisfaction. Well, of course, meeting with friends, colleagues or other interesting people in an informal setting are bringing more joy to you. When we created Meeti APP we thought about those people. If your day is written at every minute and you have no time for some entertainment you need Meeti APP! It’s very simple in use. You only need to download Meeti APP, register, add your information and photo and you are ready to new meetings. If you have few minutes of free time you can look at profiles of people that interest you and suggest to meet, or arrange a meeting with people who are interested meeting with you. There’s a possibility to arrange individual or group meetings. That’s how you can invite a lot of interesting people on your party. Also, you choose the time and place of the meeting by yourself! With Meeti APP you can have new meetings in real life every day. We won’t let you fall into depression! Because we know how valuable is real communication! Our investigation shows that people only feel lonelier in this cold world of social media and virtual technologies, that’s why we want to make some changes with Meeti APP. Remember there are a lot of people like you, people who need new Meeti. Don’t miss your chance to be closer! Try Meeti APP today! http://mymeeti.com
That's weird. Cookies are part of the HTTP standard, no? That means iOS would be the one that is not respecting the RFC.

Kinda like Safari throwing exceptions when you're trying to access localstorage in incognito.
It is mandatory. Maybe they don't need that much schooling.
Yes, exactly. Enough accusations, and you become a distraction to the company. Were I on the board, he would be trying to justify why he should remain as head of this company.
The main 8 ABO+RhD types are encoded by just 2 genes. But there are about 200 rare blood types that arise from interactions with another 49 genes. Those 51 genes can express 379 blood antigens.
I think it's the exporting that was being described as assiduous. However, since the word is needless we've omitted it above.