skysight-inc/HackerNews huggingface dataset:
They dont exist! IMHO ADFS is actually the best of a bad lot. Your friendly Windows Admin can setup the SSO in a matter of minutes without having to know the spec inside out and upside down.

The other platforms I've used or integrated with - Tivoli, Layer 7, Ping Federate, a huge hack job written in PHP - all took weeks/months to get working.

That said I haven't tried Spring SAML recently, so maybe that is painless now. But probably not
Continuously updating info in an email sent/received hours ago (Elixir/Phoenix)
The shock tactics set to shake up immunology
>There was a chance that they would eventually find and search my laptop anyway, but I thought if I turned over my phone, they might be satisfied with that. I unlocked my phone and handed it over. The agent asked for my passcode. I selectively ignored him and chose instead to answer the other agent's questions about some items in my bag. I assume the agent with the phone decided to take it while it was still unlocked rather than wait for me to answer and risk having the phone relock and me change my mind.

Genius. 5-10 minutes after "giving in" he was on his way, laptop unsearched. This suggests a defense - have two phones...
The Etiquette of the Victorian Ballroom: Twenty Tips for Single Gentlemen
When running with sql_mode=ORACLE, the server now understands a subset of Oracle's PL/SQL language instead of the traditional MariaDB syntax for stored routines. See MDEV-10142, MDEV-10764 and MariaDB-10.3.0 release notes to know the current status.

So after the update you can use a (subset) of pl/sql.
Top-down optimized planning of complex systems works exceedingly well, as long as you allow for small actors to freely re-accommodate to their local environment conditions. I know it because my company does this for a living.

The problem with applying top-down planning to economy is not that it doesn't work; it's that it optimizes for the goals of the few doing the planning, leaving large swaths of people struggling with the awful conditions created by not taking their goals into account in the plan.
India's new ambition: All electric cars in 13 years
I didn't want to comment till I had the extension installed for a few hours, and now that I have here are my points:

- I love it, it is making me so hungry to read more and the snippets are great.

- I hate it, because now my reading list is going to go from "I'll only ever finish this in my retirement" to "there is no point to keeping a reading list as its now 100,000,000 books"

I really enjoy it, the only issue is that it is a bit of a distraction when I am about to do something.
The prevailing theory is that Uber currently controls the customer relationship for ride-hailing, and that inertia will carry them forward.

I personally don't see it. Uber has already begun being disintermediated. For example, ride-sharing is already an option in Apple Maps on iOS where Uber sits alongside Lyft and any other ride-hailing apps on your phone, price comparison and all. You can also hail a ride with Siri. As a rider, why would I care whether my ride is dispatched by Uber or Lyft? I only care about availability and price. At some point in the future, I probably won't even need to install a competitor's app on my phone; I'll ask Apple Maps or Siri to get me a ride and it will dispatch a car from whichever service is faster and/or cheaper.

Uber has a plausible route to winner-take-all dominance as long as ride-hailing remains a two-sided market, where competitors have a chicken-and-egg problem in recruiting drivers and riders. But self-driving changes the game.
There are lots of features that open source databases still don't have.

How well does Maria DB handle distributed transactions across the database cluster?

Or how does Maria DB handle object based schemas?

What about the stored procedures language features versus PL/SQL?

Don't get me wrong, it is great that Maria DB is getting lots of money so that their developers can improve it, but there are lots of database features that keep us on Oracle and SQL Server, specially when we only care about business value and not FOSS religious discussions.
Uber Hires Raquel Urtasun in the Quest to Rehab Its Future
The docs are terrible.

I was personally donating monthly to Nix foundation for past few years, the maximum amounts that don't trigger tax concerns, but finally pulled my funding after the team continued to bury their heads in sand about state of docs for newcomers.

The main site docs are incomplete and reference style. The Wiki which had some use cases also had a banner saying it was all deprecated.

So you get newcomers who can't orient themselves, and even advocates like thomastjeffery in this thread who love it but months in still think the docs are wildly unhelpful.

Interestingly, guys who understand it very well are no longer capable of seeing the problem. They forgot what it's like to have no idea how any of it works, so can't describe the happy path between ignorance and the lightbulb coming on -- or even see that path isn't lit.

For now, the only way to walk that path is either absolute focus on learning it w/ no time for a day job, or have your hand held by someone enlightened (which is expensive for your MVPs compared to fixing the docs).
I meant in a SIMT fashion, more like a GPU
I don't know my man. But just liked the tool and thought you guys might like it.
I don't think eye tracking will have much use for gameplay. It will have much use for ads though, "your eyes have moved away from the banner for more than 500 milliseconds, please try again, and remember, no looking away for 20 seconds"
> Sort of agree that the example I provided isn't the best use case for JWT. Perhaps a better example is email verification - you send a link in the email with a JWT.

Have you seen how Steam performs email verification as part of a 2FA successful login flow?

For password-recovery flows, you may still want to log (audit) attempted password recovery, which means a database hit anyway. From that perspective, "magic link" is good enough.

> OAuth2 is only useful if I want my users to decide what data they want to share with third party developers.

When you have logged in with an OAUTH2 provider, you're given a token which can be used against the API in any of the mechanisms you describe if your users are likely to do more than one request. Even if you only ever authenticate over your own OAUTH2 provider, this might still have advantages involving audit, reliability/availability, and so on.

One thing that I find very useful is using OAUTH2 to hand over authentication to my customers; they want to have their own password policy, and their own two-factor system, and so on. I don't want to implement that for every customer. Even when I implement a OAUTH2 provider for each customer I can do this easily, but nowadays, they might be able to use Amazon Cognito, or Azure to log into my API.

The first time someone wants to consume my REST API from within their dashboard, I'm already ready for this: I can build an SSO between their dashboard and my OAUTH2 provider (or just use theirs!) keeping everything separate from my actual business API, and the customer feels like this was a massive customization.

And so on.
Difference Between Flash Drive and Thumb Drive
Yeah it would seem like frequent small earthquakes are way better than rare devastating ones, so it would even be better to provoke them rather than wait like in SF and Vancouver... If only, it helps rehearsing the response, convincing taxpayers to purchase tge equipment and finding early which buildings are dangerous.
I'm sorry to disappoint you, but this photo is not staged :)
"I hypothesize the bug is in X. I predict if I add assertions Y and Z, they will trigger. My testing contradicts my predictions - I hypothesize the bug is in ..."

"I hypothesize the performance problem is in X. I predict if I add instrumentation Y and Z, it will show X is wasting several milliseconds per frame. My testing..."

"I hypothesize a blue background will be liked more by our users. I predict using a blue background will increase our retention rate. My testing..."

"I hypothesize the following invariants will hold about the code I've just written. I predict if I write these unit tests..."

"I hypothesize game mechanic X will be lots of fun. I predict if we build this prototype, ..."

For being "pure math", we're sure using the scientific method a lot. And measuring the real world. And decision-making based on empirical evidence. If your argument is there isn't enough science in computer science education, I might agree.

But then there are questions like "what's the impact on static vs dynamic typing on bug rates and productivity?" - in our current state, this is not computer math. It's not even on the mathy side of computer science right now - it is closer to being computer philosophy. We lack the experiments (can't control the other variables for A/B testing programming languages without perhaps actually writing bespoke programming languages for that very purpose!), and we've had a relatively short time to build our models of the computing universe... we're perhaps still building out the math necessary to create all those models...
The Light Phone: A credit card-sized solution to tech addiction?
Yup:

http://tron.wikia.com/wiki/Clu
> Question is why reformations started at that particular time and why Luther was so successful and several reformations before him failed.

I think the reason why Luther was successful is he was the first to die of natural causes. Also it was the wood cutting. Most people were illiterate but the pictures could tell you who the good guys vs the bad guys very easily. Also these and illustrations were EPIC. Sadly my favorite isn't easily findable. He has the Pope with a trumpet up his arse. This one will do http://blogs.thegospelcoalition.org/justintaylor/files/2014/...

As someone that was on track for a PhD in Historical Theology (Yes that is an actual actual discipline). So this is right up my ally! I LOVE Martin Luther and most Christians today would have hated good old Martin. If you can read his writings they are actually pretty amazing good reads if he isn't on full tilt rage on the Pope, hatred and lies on the Jews or the horrible Peasant Revolt. We certainly can condemn all people of history with 21st Century eyes but Martin Luther did many other things extremely well.

Here is a great quote: “You say, “What comes out of our mouth must be kept!” I hear it – which mouth do you mean? The one from which the farts come? (You can keep that yourself!)”

From Against the Roman Papacy, an Institution of the Devil, pg. 281 of Luther’s Works, Vol. 41

Also Johann Bugenhagen's funeral sermon for Martin Luther is normally not written with his opening of asking forgiveness for his coarse use of language and potty mouth.
This was years ago, I'm sure there were ways to do it but I didn't know about them.
The biggest problem with cheap is no marketing and or customer service budget.
Show HN: Should I Gem
I am using JWT for my projects to keep stateless sessions between servers and for some other
tokens (refresh, register, reset pass etc.). Of course extra security measures are required (MitM protection [HTTPS etc.], XSS / CSFR prevention etc.), but this has nothing to do with JWT. I use encryption with a frequently rotated private key to encrypt the part of the payload that only the server may read.

A good read at:
https://stormpath.com/blog/where-to-store-your-jwts-cookies-...
Here's the quick description that I would have added if there was both url and text in the initial submission:

Ever wondered if it's worth using a gem? ShouldIGem will generate a report card for a gem of your choice. Gems are graded on things like documentation, freshness, support and popularity. ShouldIGem's goal is to help you narrow down which gems you should use in your next project.

Note - The term "gem" is more branding at this point (I am a Rubyist) but it works for any project on Github - C, Node, Python, Rust, etc.
I think it just depends on the market you want to aim for.

If you want to go for enterprise sales then you need quite a different approach to most other development work, not just in browser compatibility but in how you do things like marketing and sales and technical support. It's tough for any small business to do this, but if you can pull it off without the overheads of larger businesses then the profits can be substantial. Of course, you do have to support whatever platform your big customers are using. That could be IE11 these days; requests for compatibility with older versions of IE do seem to be fading out, I suspect because support for pre-7 Windows versions from Microsoft is now very expensive. But realistically, if you're a small outfit supplying to enterprises, you're probably working on almost a case-by-case basis anyway, and you just have to find out what each customer is using.

If you don't have the resources to handle such a demanding customer, or you just don't enjoy coding for the older browsers and want to work on projects that can use the new toys, I'd suggest aiming for a totally different type of customer in the first place. If you're writing web sites or apps aimed at home users rather than businesses then in most Western countries the very clear trend is to run Chrome on desktop/laptop and either Chrome or Safari on phones/tablets depending on whether it's Android or Apple. Safari doesn't update to add new features rapidly like the evergreen browsers, but Apple do tend to push out updates along with new versions of iOS, and in any case people tend to upgrade their mobile devices much more frequently than their desktops/laptops so the lag is less of a problem in practice than it was with IE.

Small businesses are somewhere in between, and the basic rule is that the smaller the business, the more likely it is to be using individual PCs and mobile devices rather than some organisation-wide standard, and so the more likely it is that people will be running very recent browsers. As soon as an organisation is big enough to have dedicated IT staff and central management of IT systems, which I'd guess starts around the 25-50 person scale for a lot of businesses, you're going to see much greater standardisation and therefore somewhat slower updates.

So pragmatically, if you're aiming at businesses then you probably need to support IE11 at least, but going beyond that is probably into enterprise sales territory. For a consumer market, it's almost all about Chrome and Safari these days IME, but you should probably try to support Safari as it was a couple of years ago as a minimum standard and ideally a bit further back for those who have older Apple devices that they can't/won't upgrade to the latest OS and browser.
Litecoin Is Giving New Life to Bitcoin's Most Experimental Tech
This is a case where the high-level point - "insecure options shouldn't be configurable" - conflicts with a reality of crypto protocols: you have to make tradeoffs based on the best known attacks and the platform you're running on, and those change over time. The best hashing algorithm, HMAC algorithm, and signing algorithm to use on a mobile device in 2007 isn't the same as the ones you'd pick today. Any protocol expected to last 10 years should allow for the selection of an underlying crypto algorithm. Maybe "none" should never have been an option - but tying the algorithm to the protocol has pretty severe drawbacks, too.

More broadly - JWT isn't just about the exchange between a single client and a server; the choice of "use cases" misses a very real constraint of multi-party protocols. Within the context of OpenID (or OAuth more broadly), it's about the relationship between an end-user, a resource owner, a client and an authorization server -- all of whom need to be able to interact with a token, and often offline.
Cute Little Girl Eats Grandads Toast via Messenger
Smart Deployment Automation: Using AWS S3, CodeDeploy, Jenkins and CodeCommit
Exactly. I could see them keeping a large userbase, since users have inertia (speaking for myself - I'm yet to try their competitor, despite having the app installed). But like the King in the Little Prince, they only have that position as long as they don't actually take advantage of it. They'll have to keep slim margins to avoid losing users, which doesn't bode well for the investors.
Amazon Cloud in encryption power grab
It doesn't seem you got my point.
Surefire Tips to Overcome AWS Cloud Security and Compliance Challenges
Will Machine Learning and AI Ever Solve the Last Mile?
Sadly truth and understanding do not have a budget to pay scientists. So funding must flow from somewhere...
If you have an outdoor grill, put a pizza stone on it that and use that to make your pizza (after preheating of course). Your outdoor grill can reach higher temps than a kitchen oven.

If you're going to go heavy on the toppings, bake the the dough for a while, then add toppings.
Too funny I initially took this as "use a clown in marketing" to mean use some guy in marketing. I just figured as an IT guy you were being derogatory. I guess that says a lot about me.
If the base tax for a small economical car were £10000, a factor of 5 might be enough...
The right solution, actually, is to use a library that gives you the right path for the thing that you need to do depending on the conventions of the platform. For example QStandardPaths in Qt: http://doc.qt.io/qt-5/qstandardpaths.html

QString appDataDir = QStandardPaths::writableLocation(QStandardPaths::AppDataLocation);
// ~/Library/Application Support/<APPNAME> on macOS
// C:/Users/<USER>/AppData/Roaming/<APPNAME> on Windows
// ~/.local/share/<APPNAME> on Linux
I think it's the deprecating of Ruby versions that is breaking: https://github.com/sinatra/sinatra/commit/af18cf588a2fed68ed...
I'm having a hard time understanding the core of Baumol's theory as Vox is laying it out. I identify a few premises:

1) Rising opportunity cost in the labor market raises the boats of all jobs (within a given grouping of jobs with low friction of employee movement)

2) This rising opportunity cost occurred (in the U.S.) due to manufacturing, which was well paying.

3) Consumer goods prices are more affordable due to increased capital efficiency relative to income.

4) The extra discretionary dollars from (3) are being spent on labor intensive goods, which cycles back to (1) again.

One point on which this loses me is the apparently hidden assumption that involuntary un(der)employment is low and stably so, and what markers of inflation we're using. I think there's an unexplained paradox: if we're losing goods-producing jobs, why isn't the competition in the service sector a countervailing force driving down wages?

Not trying to be a critic, I just want to understand this better.
What I have learned from 13 years with the same woman is different. What you say makes sense, and having comparable social and educational background are certainly going to make things simpler.

But above everything, your partner and you need to have compatable sexual drive and desire, compatable ethics, and be willing to communicate and ability to listen to critique. If the relationship lack any of those, it will not last, or it will be one sided.

You can find this outside of "comparable social background and education level", I certainly know many couples that have been married for more than 20 years that don't fit this, and I know even more that meets this criteria that are seperated.
So, let's say you're currently using RS256 JWTs, and you want to migrate to ES256. Your JWTs are stored by clients in various places - some of them might be short-term, some long-term, so you don't want to invalidate old ones (RS256 isn't broken yet).

How do you tell RS256 and ES256 JWTs apart - so you can figure out how to validate them - unless the JWT actually encodes that information?

The trick is that JWT APIs need to force developers to choose which algorithms they want - having a `decode_jwt` function is not a good idea, `decode_es256_jwt` is much better. It'd validate that the alg in the header is correct, and return a specific error if it's not - if that error is returned, the developer can try `decode_rs256_jwt`.

This is how I've designed the API used in my OpenID Connect implementation. It works wonderfully.
I never got the impression that Chinese food is upscale as a Korean. 짜장면 may as well be pizza and hot dogs for Koreans, for example. However, the Chinese cuisine meal I had for well over $300 / head in Choson hotel years ago was certainly nice. 12 year old me still asked for 짜장면 and they brought it over from across the street probably.

It wasn't Golden Buddha I hope? That place is what celebrity chef David Chang probably would charmingly refer to as "bad" Chinese food that is addictive, and it's decided not nice by any stretch of the imagination. As an out of town Atlanta Korean I'm still clueless about what most Koreans know here ITP and what's around Duluth.
The problem with the genetic solution of the WBCs is that they are unstable. There are plenty of cancers and diseases affecting them (including autoimmune) and the complexity is immense. Immunology is a young science still, and it is only a small part of the war on aging.

WBCs are grown and raised in a stochastic, vastly imperfect process. It might be indeed easier to build an equivalent from ground up, similar to how AI algorithms do not quite copy the neuron. Some are inspired by it, but not a copy.

If everyone expected results immediately we would be nowhere now. Typically "normal science" works incrementally with occasional flashes of insight and paradigm changes.
(high return rates fir first two versions).

That would be an interesting read.
California Pizza Kitchen
Did you mean to reply to the parent comment rather than mine? It seems more relevant:)
Oracle Fires Java Warning at IBM and Red Hat
Is theoretical physics not science as well?
Visual Studio community addition is free and available
People would still die, and new people would still need to be made. Granted, at rates far lower than today - but old age is only one cause of death (usually an indirect one).
OT: if the consensus is that self driving will eliminate ownership then what will people do with their garages? Will there be a market for converting them into more useful space. Will houses be built without garages? Will we need driveways? I know self driving will have a big impact on society. Never thought about how it may impact suburbia.
Well, OK, but e.g. REFRESH MATERIALIZED VIEW ON COMMIT might be more valuable to you than working with a more ethical company. YMMV, of course.
How Can I Start My Own Sports Betting Website?
I believe that there are a lot of drivers not factoring in the maintenance and wear-and-tear on their cars when they look at the income they're earning from being a part-time driver. When Uber owns the fleet, only then will they be
CSS in JavaScript: The future of component-based styling
Knock them down, dig up the driveway, grow a garden.
> There are lots of features that open source databases still don't have.

Not true. All of the things you mentioned are available for MySQL, MariaDB and/or Postgres.

You clearly should do your research first.
It's bothering me that this question even has to be asked in the first place. I'm 34. Some of my colleagues are 40+ and very effective hackers, getting things done on time, not getting lost in configuring webpack, pragmatic, but also getting quickly and deeply into the JS framework du jour.

I actively work with one or two new technologies every year, for real money, adding it up to the current stack of things we maintain. No time for side projects currently due to kids, but my work projects are interesting enough.
Great idea. You start.
Share panoramas on Instagram (iOS)