skysight-inc/HackerNews huggingface dataset:
The author isn't really discussing typography as the main focus, though. He is talking about handwriting, and how it could possibly relate to typography. I'm not trying to be picky or pedantic here; I think the distinction is actually important. He need not be an expert in typography (or even display good sense in presentation around typographic elements) to take a look at his handwriting and find inconsistencies between it and some common metrics used in typography.

One need not even agree with his conclusion/belief that you can make your handwriting better by post-processing it to make it have consistent letter spacing, line heights, etc. I think just the idea of doing those comparisons is interesting, and one is free to draw their own conclusions. Just the idea of making those comparisons made it a worthwhile read to me, because I wouldn't have thought of it on my own. Sure, you can disagree that it was a worthwhile read for you, but that doesn't make it somehow ok to trash the guy's article like the great-grandparent did.

I think what I'm getting at boiled down, is this: be nice. The original author had an idea about something, looked into it, and wrote up some of his findings and opinions. You can disagree with those opinions, or even the methodology around the findings, and it's fine to express that disagreement, but the great-grandparent did so in a fundamentally rude way, which I think is well beneath HN's standards for quality, respectful discourse. It amounted to little more than an ad hominem attack.
Not so goldilocksie after all
In as a non value added way possible I want to add that the roulette wheel analogy holds really well - sometimes, only sometimes, the wheel pays out a HUGE win to a really lucky couple.

Most often, not.
'Getting a car to drive this way was an impressive feat. But it’s also a bit unsettling, since it isn’t completely clear how the car makes its decisions.'.replace(/car/g, 'human')
No, it's the basis of the ruling discourse.
Car problems
Help! Why a car won't start but the radio and lights work, how do I Troubleshoot a Car?
Exactly what I was thinking while reading the article.

I'm using JWT for an API, and the server is choosing which algorithm to chose.

Really don't understand why a client should bypass server.
Well, notably `npm uninstall nul` gets rid of it. But in the Explorer you can't do anything with it.
China's first passenger jet
As long as nobody attempts implementing a banking system in pf
Software remote update channel of the supply chain exploited as attack vector
Sinatra is what finally made me "get" web applications. A few years back I considered web programming a confusing, scary place, but figured it was my future. I had tried out rails but I was overwhelmed with it all. I had done PHP at university and sort of understood it, but didn't like it. But Sinatra was such a nice abstraction over HTTP, and it came naturally to me.

We need more libraries like this. Straightforward, to the point, based around an effective abstraction. It lets you implement the other bells and whistles how you want - or lets you not implement them at all.

Really can't say enough good things about this library, but it's numerous clones probably speak for themselves.
So, for you, one bad outcome negates a preponderance of correct outcomes?

Even in the best legal system in the world, you'll be able to find a rapist or murderer who got away with it. That's not a valid counterargument.
Hilariously along these lines is "When Seinfeld met Zuckerberg".

The world weary Jerry is counterpoint to Mark's fresh faced idealism.

The bit about staff prepping Jerry not to mention Marc's 'broken arm' had me in stitches.

https://www.youtube.com/watch?v=0mkR3BkuKCI

Seinfeld : "You and I showing up would ruin everything he likes about that community."..."Your goal was to take the social experience and put it online; my goal was to take the actual human social experience and get away from that."

Zuckerberg : "Get away ?"

Seinfeld : "I would like to eliminate the entire social experience."
The use case you mention is exactly the reason, why we have SAML2 and similar SSOs.
I'm curious, which libraries are you talking about specifically?
> - beginners minds. Without it, systems will be stuck in what we assume are the best fit.

Couldn't we solve this by having an individual go through a mind erasing procedure every 100 years or so?
NEET Answer key 2017 with Paper solution of all Sets
That's the first question I asked. Or are we crossing one now? or about to cross?
Why is it as the US' population went up, the US' health and food services quality degraded? Observe that the US' own stand-in for government/communist style supplied food services through the fast-food chains of McDonalds, Burger King, etc... as well as the food stuffs supplied by their groceries, contributed immensely to the degradation of US health.

The US "beef industry" irresponsibly used antibiotics to artificially fatten their cattle, causing everyone who ate their products to also consume those antibiotics. Also, the US' own companies push sugar saturated products to their youth without any disposition to responsibility, where sugar is known and has been known to cause serious health deficits.

The US practices culling of their population to reduce density.

edit: People have trouble viewing it in this light. A simpler way is to view it through its parallel in warfare. European and "civilized" warfare is the sudden loss of large portions of the population and able bodied men through massive violence organized by their "ruling parties". "Jungle" warfare is one where the losses on the participants isn't high per encounter, but is very high over the duration of their "war".

Despite the West criticizing Mao and Stalin of killing off many of their citizens, the US can also be found to have killed off many of their own citizens through the use of subtler methods.

For example, as the US' population became aware of the detrimental effects of tobacco (whose mortal danger to health was known in the West's "ruling class and educated" for centuries), the population loss related to tobacco induced health deficits dropped, while other issues began to surface and increase. The observable culling of the population is far more active in the US than it is in Russia or China for example (once one becomes aware that it is more subtle, and more like 'jungle/islander warfare')
Ask HN: How to monitor what happens to device examined at US border?
If these folks are going to monitor us and take our electronic devices, we might as well monitor them whilst they do so...hypothetically speaking of course.

So what are your suggestions for software that would monitor everything that happens to the device?

I'm talking both phones and laptops or any other devices you carry.
Depending on the contract and the law, the other party being in breach of contract does not mean you can, without consequence, also breach the contract. You signed the contract so you are bound to the contract, not to the other party.

In other words: two wrongs don't make a right ;)
Ah. My favorite dystopia.
Five Reasons Why Macron Won
This is acronym heavy. Author needs to specify in the opening which JWT he is talking about. Java Web Toolkit? or JSON web token? It took me a fair amount of reading to work out which one he means. And even them I'm only pretty sure he means JSON web token, but I can't be sure because the Java Web Toolkit also connects to servers, and uses encryption, and all the other stuff he talks about.
Do I assume you pay for safe access to content but not for the content itself?
builtwith.com is a solo founder too
WordPress Admin Password Reset Vulnerability – Hope Everyone Has Read by Now :)
With a little cross referencing of third party "anonymized" metadata such as cellphone location, or facebook graph (works with other data set) it is very easy to uncover all the identities involved in this scenario with a high probability of success (>90%).

You'd have to push preventive measures further than distributing outside of the same social circle if you are serious about this.

One should also consider the legal aspect of this as there are places where faking your online identity is illegal.
original anouncement this reports on: https://apricity-os.github.io/
Roughly.

Deal breakers: values very far from yours (politics, ethics, etc).

Turn offs: taller then you, looks under your expectations, older then you, personal life more complicated than yours.

I believe that you can't have a fruitful long term relationship (male point of view) if you ignore these markers.
Android TV with Plex and Kodi, and a Mac with Plex server installed. I really need a Plex capable NAS to not have to wake up my mac.
This will be very familiar to readers of The Systems Bible [1], which expounds in great depth about the above problems and potential mitigation strategies.

The basic takeaway is that these behaviours and forces are natural, intrinsic and inevitable; that a wise systems-manager will seek to carefully manage them rather than oppose or decry them.

[1] https://en.wikipedia.org/wiki/Systemantics
I've worked with Java for about 17 years now. IMHO Java in 2017 owes a huge debt of gratitude to Ruby, especially Rails and Sinatra. Writing Java REST apps now is immeasurably simpler via things like Ratpack/Dropwizard/Vert.x, using ideas that came from the Ruby world. Even Spring, itself a breath of fresh air, has been forced to play catch-up on occasions.
The fact that this is a relevant question in our industry scares me (I have similar concerns, not criticizing OP).
This is why the tech industry needs challenger banks
Fantastic reads on cultural criticism
The 'greenhouse effect' (which was the umbrella term for what is now called climate change) was widely discussed in the 80s and 90s and taught in schools, at least in Australia.

As a child I learned that many metropolitan cities would be underwater by the year 2000.
Oh hey, it's another "JWT libraries used to be terrible" article.

Idiots shouldn't write authentication code. Especially when credentials are involved.

Funny jwt-go was used as an example; it was never vulnerable to the alg-none attack:
https://github.com/dgrijalva/jwt-go/commit/2b0327edf60cd8e04...
I didn't learn that most cities would be underwater by 2000.
37 and love it.
Using Quality Views to Tackle Tech Debt Tesla
You could even hit 2 birds with 1 stone by going with headerless JWTs (just strip the first segment).
- https://riscv.org/wp-content/uploads/2016/07/Tue1100_Nvidia_...

- https://www.phoronix.com/scan.php?page=news_item&px=NVIDIA-R...
We can assume events of this magnitude can be seen with naked eye. It the the Moon after all. Apparently this is based on recorded eye witness testimony.
People still use Java Web Toolkit?

Okay, dumb jokes aside, they're clearly talking about alternative ways to authenticate, so I wouldn't know how you could conclude this was about anything but JSON Web Tokens.
I'm hitting 30 this year, and just had a kid.

Still going strong.
As the old saying goes: a woman marries a man hoping that he'll change. A man marries a women hoping that she won't ever change. Usually, both are disappointed :)
Yeah, parts of that advice sound very questionable. Making non-payment more costly for them than payment might be reasonable advice, but slandering them and harassing their family can end up a lot more costly for you.

If you want to play this hard, threatening them with a lawsuit and bankruptcy is probably the most painful thing you can do.
> The problem with JWT is the user gets to choose which algorithm to use.

Only if you completely bungle the implementation on the server-side. The 'none' 'algorithm' isn't supported by up-to-date JWT libraries with a good track record, and you should always limit the algorithms you'll allow on the server. So if you sign your tokens with a RSA-2048 key-pair, you would discard any token that isn't using that algorithm.

Of course if you are building an API that blindly accepts whatever it receives from a user agent you are bound to create a security gap — but that holds true for anything users send you though, not just JWTs. JSON Web Token is not that hard to grok, and it isn't a 'foot-gun' technology (just practice trigger discipline — i.e., read the documentation).

I'm a Java guy, so I'll limit my experience to the libraries available there, but of the four Java libraries available, three provide strict validation of the signing algorithm out of the box, and explicitly document this in their examples and documentation (I think the fourth does too, but I haven't tried that one myself).

JSON Web Token is a neat standard that has a lot of good parts that can reliably be used to create and process authentication tokens. So if you are still worried about developers getting it wrong, then instead of saying 'don't use JWT', why not promote a safe subset of the specification instead and promote that? Call it 'iron-jwt' or something. It beats rolling your own solution.

Or if you want to be particularly constructive and feel that developers are misusing this technology, write a sensible, short, to the point implementers guide for using JWT and spread the word.
Electric bikes are making headway but many employers have rules specifically forbidding employees from riding them (or any other form of personal transportation) to work. There is a major national insurance company with which employers have a contract and that company won't pay out for accidents that happen on the way to or from work while the employee is on a bicycle or in their own car, so employers ban commuting by bicycle or car.
Interesting read but too bad it is not practical for people don't work at albine (company making online privacy tools) and falls short of preventing your DNA code from being added to the large collection that is or will be used for whatever unknown purposes.
If I ever* travel to the US again I shall avoid all of the above by NOT taking my real laptop and phone; I may take fresh ones or buy/borrow while in the US to finesse the issue.

I know it doesn't answer your question directly, and whatever other answers you get may still be applicable to fresh kit brought in.

*In the foreseeable future, with fingerprinting and device scanning and generally treating all visitors as at least a nuisance...
Tunes Affiliate Resources – Commission Update
Could a big enough comet impact cause the Earth behave like a liquid and therefore a wave destabilize the crust and increase volcanic events?
Not sure what you are talking about. Hypergamy is about a difference in social status between the partners. More here: https://en.wikipedia.org/wiki/Hypergamy

Since you were talking about a "redpill perspective" you may have wanted to find a term that describes the idea of having intercourse with a larger amount of others. Maybe you searched for "promiscuity"?

If the latter is the case I'm not certain how it relates to the article. The article elaborates on common problems in monogamous relationships.
> If you really, really need to poke holes into your firewall can easily that with ssh to a cheap vm hosted at your trustworthy hoster. If ssh ain't enough, nc and socat are your friends.

Wouldn't that still be the same, considering ngrok is just doing the tunneling. In this case, ngrok is your trusty hoster. You can park your trust into your own VM in Digital Ocean, or you can park it at ngrok.
"To make good on its dominant Encyclopedic role on the Internet, Wikimedia needs to grow."

Does it? What does "make good on its dominant Encyclopedic role" even mean?

That's just hogwash pretending to be a sentence.
After my first week in high school computer class they moved me to a separate room where I was free to work on my own. This was in 1984. The class was using Commodore PETs. They gave me a Commodore 64 to play with. Easy A.
Java is faster then Ruby. In other news - sky is blue.

This is no surprise, I think the OP was stating that it is performant compared to RoR.
But would they still be so thrilled on a Tokyo salary? People here (I live and work in Tokyo) have a much narrower pay band than you would see in NYC or any American city. You might make $25~30k to start, and $40~50k at age 40.

I'd love to move back to my native NYC, but I've been priced out forever, as the cliche goes. There are entry level people earning more than I earn as an 18-year veteran in Tokyo.
Keeping the JWT format as-is is useful if you have signed (but not encrypted) tokens though; in a web browser you can use standard libraries to inspect the token and alter the UI based on a user's permissions (the final check is always the API's responsibility of course, but if there is no need to show the 'admin' link the client can do that).
This is a really fascinating read. I'm only really familiar with the Smalltalk side of ADTs/Modules/Objects that started gaining steam in the 1970s, due to Alan Kays prolific speeches. But this was all happening completely concurrently!

It's cool to see how people in the 70s were wrestling with concepts we take for granted today. Maybe some of their abandoned ideas are even worth pilfering - we're still a young field, which has its strengths.
Death is the word you are looking for.
Exactly. Life extension is the apex of selfishness, and also extremely inefficient. My death is a little annoying for me, but oh so great for everyone else!
If you wanted to rendezvous with a foreign spy satellite (I have no idea why you would) you couldn't do it in a huge space plane because diplomacy. You'd have to send a tiny non-trackable interceptor thing. If you needed a vehicle to deploy such things from, then perhaps the X-37 would make sense.
Huh? The alternatives listed make me wonder if the author actually knows what JWT is being used for.
32 and writing more code than ever. I've gone gradually from very basic data analysis in excel at the start of my career, to today, utility scale power simulation, probabilistic modelling, and enterprise ETL stuff using a combination of python and clojure.

I also run weekly data analysis workshops with my staff, where I get to teach junior analysts and engineers how to think Bayesian, and how to replace Excel with Pandas.

Having the time of my life at work :)
American energy use
Mini PC: http://www.gearbest.com/tv-box-mini-pc/pp_376410.html (not especially fast but it will just about do 4k)

I have a slightly different requirement: I want to

a) watch and record broadcast TV

b) watch youtube/iplayer/amazon

c) watch other random TV and streaming websites (Eurovision selection shows, my wife is a huge fan)

This leads to Windows, and the best solution for recording TV there actually seems to be Windows Media Centre ("ehome"). Unfortunately this is 7 only, so I'm going to try installing a version that's been hacked by the community to run on Win10.

Most of the HTPC software seems to have PVR as an afterthought, where it's either very hard to set up or unreliable. I never want to see tvheadend's web interface again.
That supposes you know what DNA combination you need. But the whole purpose of diversity is to have a backup plan for things you don't know.
I have almost the same setup, one difference being that I have Synology DS215j NAS. I've transited recently from NoName Android box (had it for over 2 years) to newest Amazon FireStick. There is one huge draw back of that. I can not use Amazon Firestick when there is no internet connection. So forget about searching for movie in your library when there is no internet.
Network Monitoring Basics
https://en.wikipedia.org/wiki/Coal_gasification
The diagram itself

https://flowcharts.llnl.gov/content/assets/images/charts/Ene...

But I believe the blog adds useful context (starting with the quads)
Every mass extinction, a new DNA set is gaining traction.
What scares you? Mortality, or being able to keep being useful, or something else? (I'm not being flippant: I live next to a graveyard which reminds me that I'm not getting out of the first of those!)
Absolutely not. You get somebody trying to do B the A way. Not with a blank page. That's the problem.
39 and no idea what I would do if this was not my career. Having an active social life makes it hard to do much programming outside of work, but do manage occasionally. Submit code to open source projects as I use them at work, which might make me a fly-by committer, but may be better than nothing.

Get some nice chunks of free time by contracting and taking chunks of time inbetween, though I guess this could change once kids come into the story.
36 and still going strong!
If it isn't encrypted, the only thing the client needs to know is that it's base64 encoded in order to inspect it. You'd need the secret to verify the signing and you probably shouldn't have that on the client-side!

So I still think the header is superfluous even for this use case.

edit: in fact, the client needs to know that it's base64 encoded to even read the header in the first place.
Over 30, still active, not in OS though.
When you can't be brillant in any other way...
We have a lot of that here in Italy: http://pacs.unica.it/cere/?page_id=162
I figured this sort of thing would be best put on a fresh device. If we're forced to go to the trouble of getting a clean device just for transit, we might as well load it up with monitoring software and see what happens to it.

If nothing else it would be very interesting to see just what sort of examination our devices are subject to.
Deterministic Components for Interactive Distributed Systems
I am 27, have no kids but the code I write outside of work tends to be more focused on my private projects. Some is open source, but far from all of it.
46, still in the game, though I admit the design portion holds much more fascination for me these days. To the OPs point, I do experience a great deal of pressure to head towards management every time I switch jobs. My rational is that when I get to the point where I can't absorb the minutiae, but can still see the big picture, maybe it's time for me to push the keyboard away and manage. Haven't gotten there yet (that I know of).
Dog almost roll off cliff
> I believe the one major change has been about trust in institutions. It used to be that census, or unemployment data was, for the purposes of political discussions, assumed to be accurate.

First question that comes to my mind is How can you tell? I assume it was even harder back then to get your hands on real data. What was stopping the political elites back then to mangle the unemployment data when needed?
ClojureScript Next (2015)
Namecheap still doesn’t support 2FA in 2017
OP literally just deleted a bunch of files from the repo and then went out of his way to break compatibility with normal JWT HS256 tokens by changing the typ and removing the alg argument. If you wanted to pull out other algos from jwt-go, deleting their implementations would've been entirely sufficient. There is a map that holds a alg-string to implementation that would've ended up with only HS256.

Instead OP made sure these tokens can't be used outside their fork, and thus only in Go.

ISHYGDDT.
37, just in the process of switching back to been a programmer for someone else (rather than working for myself).

Really looking forwards to it.
People still use Cobol, mate.

Just specify in the first sentence what you are talking about as full words. Is it that hard? Apparently it is.
This is why you buy a fully-depreciated ~40-year-old apartment or house.

I spent my entire life's savings to do this and it was the best decision I ever made. When and if I leave Tokyo, I will rent it out for side income. I can't overstate the peace of mind this gives me.
ESCORT MASHA – ESCORT – ESCORTS – ESCORT ATHENS – ESCORTS ATHENS
Or if you have low power requirements. The TI MSP430 really shines here.
Friend: "So my father said 'stop the car, Jack.'"

Me: "That's funny."

Friend: "Do you want to get lunch tomorrow?"

*car assistant: Do you wish to stop the car?"

Me: "Yeah." (responding to my friend's question)

This is a valid response. Yes, but this is the case if the assistant has a bug, so the safety meter isn't working quite properly.
This is more due to ageing than to getting married.