skysight-inc/HackerNews huggingface dataset:
Good JWT libraries essentially have a "box" and "unbox" function; the work required by the client needed to go behind the library's back here is on the same level as that needed to behind crypto_box's. Further, crypto_box works on a lower level than JWT encode/decode functions typically do, and would leave many concerns that JWTs handle in the user's hands for them to handle, alone. Having the user write their own code to handle those concerns is a terrible idea.
"Fire in a crowded theater" comes to mind. In reality, the judge making that comparison later rescinded it, and the guy won his case (about distributing anti-war pamphlets) anyways.
RTFM-core – Reactive, real-time, concurrency-safe IoT language [pdf]
The ability to compose sentences with multiple correct and interrelated meanings made me want to learn it. That sounds fascinating and beautiful, the best possible language for poetry.
Why not Elm on google turns up this: http://reasonablypolymorphic.com/blog/elm-is-wrong

I think the basic gist was that it's type-system is far from complete.
That's why I wrote "with different lifetimes".
Sometimes you don't get to "run bash", but just pass certain parameters, or add things on the end, or whatever other monstrosity an application programmer comes up with to use bash to do something. This allows you to do things like potentially redirect files to sockets of your choice, where you might exfiltrate data, or provide unexpected data to internal processes.

You would be correct in then pointing out that if you pass user parameters to bash without treating them as carefully as you'd treat radioactive waste, you're asking for trouble, and that /dev/tcp doesn't offer much than the various "nc"s don't. That's why I was sort of non-committal about condemning them; it's not like they are a massive breach of security. It's just one more thing that can surprise people if they're trying to lock a system down, and that's already a pretty long list. And since it's not clear to me that it could ever be a short list, that's why I wanted to emphasize I wasn't trying to condemn UNIX. It's just that it's a feature that doesn't add much but complexity to bash, while not really offering any functionality that isn't better done with nc or something, and on the balance, probably ought to just be removed from an already complicated and security-sensitive program.
JWT uses JWS, JWE, or both. Any criticism that targets JWE and JWS is necessarily relevant to JWT.

The problems with JWT being addressed are in the domain of cryptography designs, so it's natural to criticize the cryptography components.

The other problem with JWT is how people use it: http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-fo...
>If I do set an alarm, I usually set two: one to remind me that I'm alive. The second to remind me that I have to get up. The first is normally set an hour beforehand, while the latter is an alarm set around a half hour before I have to actually wake up to let me know: Seriously, get up.

Would you benefit from an extra half an hour of uninterrupted sleep instead of setting two alarms? I find myself worse off in the morning if when I set two alarms an hour apart rather than setting a single alarm.
Monitoring and Architecting for Failure
Well, yes. Thanks. What I was trying to say is that the formalization is actually great:

- it is useful to linguists. (Modern linguistics borrows terms like sandhi and bahuvrihi for example.)

- it is acceptable to language users. Poets have continued to compose in the same language, without finding the formalization artificial.

- it is interesting even as an achievement of the human mind/culture.

A somewhat trivial example, but possibly of interest to the HN audience: the grammar needs to refer to various sets of sounds (like "nasal consonants", "short vowels", "aspirated stops" and so on). To compactly encode these sets, it adopts a curious ordering of the sounds, so that each required set can be represented as a certain substring of that sequence.

It turns out that this ordering can be shown to be optimal: see e.g.

- Economy and the Construction of the Śivasūtras by Paul Kiparsky, Stanford University http://www.stanford.edu/~kiparsky/Papers/siva-t.pdf

- A Mathematical Analysis of Pāṇini’s Śiva sūtras, by Wiebke Petersen, University of Düsseldorf http://user.phil-fak.uni-duesseldorf.de/~petersen/paper/pete...
Watch Live: Yates and Clapper Testify at Senate Hearing on Russian Interference
So, that's applicable to every instance except where being provided to the government (section h), and . It's somewhat circular in that regard. Combined with disclosure restrictions, specifically 2(c)(ii), the net result is that only aggregate disclosure is allowed unless specifically permitted by the end users.
You come from the high horse with wrong accusations..

> There are lots of features that open source databases still don't have.

..that shed open source databases in bad light. Why? Are you related to MSSQL or Oracle DB in some way? If not, which feature do you actually need and miss from MySQL, MariaDB or Postgres?? Please name it. Suggest it to MySQL, MariaDB, Postgres - they have open bugtrackers.

MySQL and MariaDB have a very good clustering support. It's very well known for that. Many companies use it at web-scale in such scenarios.

MySQL, MariaDB and Postgres have data integrity the same level as Oracle and MSSQL and DB2. This is 2017, not 1990.

If you need advanced XML, Java and what not SQL2003 support, have a look at Postgres, it's basically a open source Oracle with it's goal originally to clone the PL/SQL language.
Profession: reverse engineer

<100 employees organization

Workday:

- wake up (09:30)

- go to work

- try to do something productive, but fail miserably, because I'm still asleep - so I fall back to reading tech blog posts (oldnewthing mostly, I love it) (till 13:00)

- eat something, feel better (13:00-14:00)

- waste half an hour doing random non-work stuff to get in the mood

- 14:30-17:30 -> peak brain activity: here's where the reversing happens

- 17:30 to 19:00 -> read mails, help colleagues, fix minor bugs, or anything that allows me to relax

- 19:00-21:00 -> go home, eat, have a small break, watch some shows

- 21:00 -> gym

- 22:00 -> dinner

- 23:00 -> HN, reddit, etc

- 00:00 -> sleep

I couldn't even begin to imagine arriving at work before 10AM. I have no idea how any of you do it.
Sure, but where do we stop? At the customers electricity socket? Behind all power supplies, but before the specific device?

Computers will turn essentially all power entering them into heat. But then by that measure we can never make an efficient computer but would have to look at something like flops/W to give us actionable information.

What is a measure we can apply consistently to computers and cars and get actionable information?
> NN hurts low-income internet users.

wat.

This is completely unsubstantiated, and in fact quite likely the opposite. Often, rural WISPs will rely on other ISPs for backhaul. Imagine if ISPs could charge/throttle whatever they want, rather than treat the WISP's backhaul as an opaque pipe?
Fascinating, thanks for sharing. The points made in the article seem obvious, but doesn't offer much in terms of a suggested solution (conscientiously redraw zip codes). Do you know of any effort to have a more accurate "health boundary" region designation?
There was an Ask HN a while ago that pretty much asked "Why are you here?" that received a lot of responses. IIRC, there was a fire lookout and some other interesting jobs that stood out... You're certainly not trespassing. To me, HN is just a better-moderated Reddit. Makes sense that it'd attract pretty much anyone (with a bias towards tech).
What about from country to country. I'm from the US and, at least where I live, it is rare to see someone smoking. Second hand smoke has basically become a thing of the past. But this past week we went up to Vancouver BC and we were shocked at how many people were smoking. It seemed like you couldn't go 10 feet without walking through another cloud of second-hand smoke. Apparently the anti-smoking campaigns of the US never made it up North ;-) Or maybe their socialized medicine makes it so that they don't have to worry about health consequences as much. I don't know. I just wonder if the life expectancy is lower in Canada (or at least Vancouver) since smoking seems to still be A-OK.
Right now, there is no need for an alternative search engine because Google fully satisfies that market (it is fast accurate and clean). However, once
Google gets so comfortable in their position as AOL/Altavista/Myspace once did, and turns into a bloated adware machine, any alternative but functioning search engine will take over, even one that pales in comparison to what google can do today. Net neutrality is the Internet's "invisible hand" that can immediately slap google into shape if they start offering degrading product quality.
Not much, but old languages seem ad-hoc in nature, see measurement units before the metric system, or counting subsystems (4x20 in French for instance). It was a discontinuous aggregate of pragmatic descriptions. Indians very early into fully regular and deep nesting (based on the few thin bits I've read).
The food desert theory is controversial, no? One random source I googled just now: http://www.npr.org/2010/12/15/132076786/the-root-the-myth-of...
None of the pictures I've seen of facebook or Google offices provide any motivation to work in the office. They're crowded noise factories to me.
this is a severe issue, I can wake up at 5am strictly when I am pressured to, but when there is no pressure and I can 'get the work done anytime' I end up getting up much later and sometimes snoozing ever 5 minutes for an hour +.

I say sometimes that I need pressure because thats when I thrive.. I'm not sure how to artificially create that pressure
Thanks for clarifying; I'll reread your comments.

Do you have a standard that you would recommend for any of those things?
I've had great success just doing my job, and ignore the small stuff. I don't really care for office politics, and I've always kept myself out of it.

The joy of software engineering, in my opinion, can be found when you focus on getting fun work. If that was not available at my current job, I have always been able to switch.

For the last couple of years, I've gotten a nice extra boost by changing specialization (from embedded to iOS) ND starting as a contractor instead of regular job.

For me, software engineering is usually good fun.
Localization support for the Laravel framework
This is not a scientific answer, but my perspective is that healthy food is more expensive, therefore purveyors of healthy food tend to avoid poor areas. It's not so much the consumer's "choice" to buy these products, but their inability to purchase or lack of knowledge that fresh foods may extend their lives.

Edit: Another issue affecting these consumers is that they may not have as much time to cook as a family with 2 parents working 1 job each.
Yes, it would be trivial to go around. But that's not the point.

It used to be case that people with technical knowledge got around DNS blocks by simply changing the DNS servers.

Today you cannot access to Wikipedia even with, say, OpenDNS because now some popular DNS providers are being "hjacked" in Turkey [1]. Yes, hjacking.

The key concern is the fact that an Internet service provider employs an illegal hacking technique under the pressure of a totalitarian government to censor the largest and most collaborative information repository of the whole human history just to cover one article mentioning the truth about that totalitarianism.

Do not think it is too far of a dystopia for the "more advanced" countries like U.S., especially with Trump.

https://bgpmon.net/turkey-hijacking-ip-addresses-for-popular...
Interestingly, this appears to be partly the result of having bred cannabis to have a very high THC content, while CBD shows some anti-psychotic effect[1]

1: https://www.theguardian.com/society/2014/nov/16/new-strain-c...
If ^ makes the 's' sound in summit, why is ^| = "she" and not "see"?
I thought the logic of pursuing self-driving trucks was that it was generally easier than self driving taxi services:

- Mostly highway miles (or you could arrange it to be so)
- Fewer weight requirements
- Better economics (a greater % of the economy is dependent upon trucking logistics than taxi services)

This isn't to say that there's a big master plan of making a trucking company, more that making a self driving trucking company is a very practical step on the path to full autonomy.
I wonder if you were in heavily Asian areas of Vancouver? It's my impression that smoking is most popular these days in Asian countries, so more recent arrivals would be more likely to still be smokers.

I have never noticed a particularly large rate of smoking in the areas of BC I've been to.
pizza pie is an NYC-ism, as far as I'm aware. It sounds strange to me, at least.
My first exposure to this was Kramer on Seinfeld talking about how people want to make their own "pizza pies".
One pays the content, one pays the hosting.
Purely curious: what's your sleep (quality, schedule) like?

I've recently begun waking up at 5:45am and have had a tough time adjusting. I find myself ready for bed at ~8pm more often than not.
you make it sound like they have a chance
If 50% of the labor force dropped out, I would absolutely expect wage increases. I'm ignoring the claim of a 50% drop in GDP because that muddies the waters, and is conclusory; precisely the thing I think we avoid if we stick to my original point.

Yes, we know that "ceteris paribus" is a lie--other elements of the equation will always be different. Moreover, there are complex feedback mechanisms at play. But _how_ they're different is what matters, not simply that they're different.

Precisely because those second-order effects are so complex is precisely why people relying on them for their argument should hold the burden of persuasion. I don't think that should be controversial.

Yes, it's a PITA. I'm tired as much as anyone else of conservative economists and conservative politicians applying economic laws too simplistically, arriving at conclusions completely at odds with _reality_. When our conclusions differ from reality, that's a strong hint we should look for the flaw or missing element in our model.

But none of that justifies shifting the burden. Once you shift that burden you've effectively discarded the laws of supply & demand, and have put earnest, learned critics on the same pedestal as charlatans and radicals. Once you prime people to accept the more complex, non-intuitive answer over the simpler answer, you've poisoned public discourse.

That's how you end up in a situation like Venezuela. Venezuela isn't broken because it's corrupt; all those working poor knew the government was corrupt while voting for them. But people there believed the destructive and poisonous criticisms of liberal economics, and so are simply no longer able to accept even the most basic precepts of supply & demand.
I guess... but you can get away with questioning my personal judgment. What if you went around to all the comments here saying "it definitely saved my life" and questioned their judgment? Maybe it's those people who don't realize their ability to beat depression without medication.

To your second point I would say that a struggle shouldn't necessitate a clinical diagnosis. Life is full of struggle, and equating struggle to depression to medication is why we're in the overprescription business in the first place.
I'm not sure it has to be quite that binary. Certain areas of cities may be unattractive to better markets for a variety of reasons. However, I had the same thought you had. I'm not sure dropping a Whole Foods into an area with poor food options today is going to be a panacea that suddenly makes everyone eat healthy home-cooked meals. For example, this piece [1] presents a fairly mixed picture on whether new shopping options improve outcomes.

[1] http://www.pbs.org/newshour/updates/takes-grocery-store-elim...
> The middle class is decreasing mainly because of divorce and thus the creation of single parent homes

Citation needed.

What, exactly, is the magnitude of the effect of single-parent homes on the size of the middle class? Without answering that, your "gut instinct" explanation, if that's what it is, is meaningless.
Is there any reason this isn't just selection bias? Young, healthy, people with good careers travel to big cities. The rest stay behind. Do we have data to compare those who stuck around vs those who grew up there but moved away?
this is EXACTLY my goal here ....pushing myself into getting started...
we CAN live comfortably without the gut wrenching feeling everyday ...for me it started with the garbage warrior... a house that provides all your energy, food, water, waste treatment... combine some of these excellent ideas with automation and ...your house takes care of you - only problem is - everyone doesn't have their own little chunk of dirt to build on...
Per my point about evolution almost certainly prepping these bacteria to live somewhere other than the rather hostile insides of an animal, at the very least I'd modify that metaphor to someone shooting their bullets a few miles away from you, and pointed the other way.

I don't think we need to hypothesize that the Black Plague was some sort of bacterial refugee from the past; I've never heard anyone express any confusion about where it could possibly have come from, so it seems like a solution to a non-problem.
Would you mind telling me what state you are from? I have a curiosity I need to satisfy.
State Passes Emergency Law to Fine Protesters
The content likely was not attractive for an advertisers to put an ad on in the first place and so revenues dropped the minute ad controls for advertisers were added. Google didn't really have a choice but to do this given the billions that were pulled. Will be interesting to see impact on AMJ quarter results.
Well, based on his other activities helping lead an organization called Food Link (http://foodlinkny.org/), there is very high demand for healthful food in those areas. So while I would agree with you when taken without that context, he's been working hard for years towards proving the causation using multiple avenues.
Yea, I was thinking of the global level. Focusing on US policy is a fair point. There are definitely things the US can do to address deforestation internationally, but maybe it's a more difficult task than focusing on domestic transportation.
actually, if you define upper class as the top quintile in household income (a common objective definition, as opposed to the also common colloquial "how you feel" definition), then anything above $112K in household income is upper class:

http://www.taxpolicycenter.org/statistics/household-income-q...
Have I argued otherwise?

I am simply asking people to stop claiming that Google can be easily competed against with minimal resources if you are just clever. It's simply false.

Competing against google is a red herring when it comes to net neutrality.

Net neutrality hurts new products that don't compete against Google. It is barely relevant to competing against Google because the other barriers are so high.
Ask HN: What is in a toolbox of modern C developer?
I am curious what IDEs, frameworks and other tools are used by modern C developers. My bet would on valgrind and CLion .. perhaps?
Also a High value : weight ratio and easy storage which is where beer fails.
Divorces went up after becomming easy and acceptable, but then slowly down. Upper and middle class divorce less then poor people.

Besides, two salaries won't move you from middle class to upper class.
Big caveat: I'm an author of the Macaroons paper.

Macaroons and JWTs are two fairly different things. JWTs are a combination of two things: 1. A standard encoding for authenticated JSON objects, and 2. a fairly ad-hoc standard set of field names.

I say ad-hoc because it's pretty much up to you what you actually put e.g. in iss, sub, jti, etc., and most of them are optional. So applications of JWTs still have to make those decisions (e.g.: If you want to convey that a JWT is issued by a particular key, do you (a) put the hash of the key as the "kid" in the header, (b) put the hash of the key as the "iss" claim, or (c) neither or both. The answer seems to be whatever you want.)

So at the same time, JWTs tie your hands by deciding encodings and identifiers for you (e.g. bytestring valued claims must be base64 encoded into strings, which then gets base64 encoded again for signing (!), keys should be JWKs, ...), but also don't actually make the important decisions for you.

Macaroons (as described in the paper) are more abstract. There is no standard encoding, or registry of hash algorithms. And indeed there is no standard language for caveats (aka claims), since that is entirely application specific. So.. macaroons make no decisions for you at all.

The main point of macaroons is delegation: If you want to pass some authority to someone and let them pass on a subset of that authority to someone else, Macaroons do that well. JWTs don't.

As a consumer/verifier of macaroons, they allow you (through third-party caveats) to defer some authorization decisions to someone else. JWTs don't.

If you just want to protect the integrity of a cookie, or an OAuth token, and nobody but you, the issuer, should touch it, then you just have to sign it - so macaroons and JWTs will both do fine. JWTs have the advantage of fixing some of the details for you.
Bitcoin price hits record high and $4,000 is ahead, investor says
Maple’s Delivery Platform Will Cease Operations in New York City
The best part of Fuchsias UI is their Armadillo logo.
My cousin is a YouTuber, and for him (and a few others) they follow a "Premium Content" model.

Their YouTube channel has free, ad supported content to develop an audience, and Patreon subscribers get that content ad-free, as well as extra content.

It's a decent model, but as I find myself watching more YouTube than Netflix/Hulu these days, I really wish this concept was supported by YouTube itself. They have YouTube Red, but that doesn't directly support my favorite YouTubers.
I'd be interested in hearing more about your journey from fast food to software development.

Grats on the life change!
There is no lose scenario for LTT re:Float Plane, just a less monumental one.

They've released early-access subscription-based material before through the defunct Vessel platform (which exited successfully via buy-out). Now they're building that platform themselves for their audience.

Whether they can expand it successfully to other creators is another question, but I see no reason why they wouldn't...
Bummer, I wish I'd have caught this earlier.

Look up "multi-armed bandit"; it isn't just "riffing it" like you think it is. It is a mathematically-principled technique.

In fact, it is probably safe to say it's more mathematically-principled than the "scientific method" itself, as it is popularly understood.
Java 9: Red Hat’s “missing pieces” vs. responsible platform stewardship
Whole Foods is absurdly expensive, though. Even after I became an engineer I didn't understand why I should pay like 3 bucks a pound for broccoli when I can get it for a buck a pound at the local Mexican/Chinese Shop (99 Ranch or ma and pa).
It's a bot.
I suspect that the at 25 income prediction will be less and less accurate as a predictor given high value PhD's. In the past the rarity of those programs might have covered up the problem with using those estimates for that group, but as it grows it probably creates substantial challenges for such a metric. Similarly, with start-ups becoming more popular, income at Age 25 might value options at 0 and lead to an underreported value for anyone in a successful exit. Willingness to take risk with low income when young, might also lead to situations where founders are reporting 0 income at 25, but are likely to have successful careers regardless of whether they exit.