skysight-inc/HackerNews huggingface dataset:
SSTO definately isn't impossible, it just requires performance to be prioritized in every design decision. Except for deciding how many stages to use.

A single stage would be much larger for the same payload to orbit than a reusable two stage rocket. I doubt it would be cheaper to fly one.
The primary purpose of your app is to paste some JSON then send someone a URL to access it, right?

If a user pastes some JSON, clicks the Access URL text box, presses Command-A Command-C to copy the URL, then pastes it to someone else, that person won't be able to open the URL, because it lacks a "https: prefix. That's probably a bug, whether or not it's an intended feature.

It's not something that matters very much, but your users might be slightly annoyed at having to chop off the leading "//" every time they want to copy the URL.

I admit I might be missing something obvious, though.
I find it interesting that he is asking about the ethics of not working for a living, as if paid work has some moral value, or eating without having to work for it is somehow immoral. By that measure we should all be working like dogs for peanut and we would all be saints. Sorry that doesn't work for me. If your aim in life is to work harder and longer go for it. I'd prefer to work shorter and smarter to get the same result.
Is there a reason you didn't release on Android? The app was even demoed on a Pixel.
It doesn't matter, because the fact that the walls of the oven are farther away is compensated by the larger surface area. It's invariant.
Hello, I am interested to talk more about the roles. What is the best method to get in touch?
What an inspiration. I know that Windows, Mac, and Chromebook have greatly improved upon their handicapped tools. But there is still always work to be done to help even the blind be more efficient. He has learned so much, even training himself to quickly pick up the syntax so he doesn't need to listen to the entire line. Amazing.
I haven't read the article but this is high time we rethink "commune-ism". Not a feudal system under the politburo, but communal ownership of robot-factories, more along the lines of Kibbutzim and some anarchist ideas.
9Spokes – Smart Dashboard for Smart Businesses.See the Big Picture
http://www.leancrew.com/all-this/2011/12/more-shell-less-egg...

> Knuth wrote his program in WEB, a literate programming system of his own devising that used Pascal as its programming language. His program used a clever, purpose-built data structure for keeping track of the words and frequency counts; and the article interleaved with it presented the program lucidly. McIlroy’s review started with an appreciation of Knuth’s presentation and the literate programming technique in general. He discussed the cleverness of the data structure and Knuth’s implementation, pointed out a bug or two, and made suggestions as to how the article could be improved.

> And then he calmly and clearly eviscerated the very foundation of Knuth’s program.
More skepticism than believerism about that kind of thing, I think, though the community is divided on most such matters.
So basically no information should be secret and the public should always know exactly what Intel is being shared with allied countries during a time of war?
Totally with you on the DB encryption but I'm not sure about your comments on prepared statements

>That is an extraordinarily inefficient and costly way to develop. The correct way to protect against SQL injection is to use a framework/driver which guarantees escaping and to be cautious about what you allow into queries.

I've always found using only prepared statements is feasible and justifiable. What is about using them that adds to cost and inefficiency?

Prepared statements are not a silver bullet. Somethings like limit statements in mysql are very hard to do with prepared statements but for the most part it's a good rule of thumb.
Why? It's none of your business what I do on my lunch break.
I believe the main problem here is the difficulty in pumping fuel around, rocket fuel injection is not a trivial matter

source: also played lots of KSP and looked into why asparagus staging is more difficult IRL
Is emailing jobs@unify.id the best way to get in touch?
Ways in which the WannaCry ransomware could have been much worse
The cost of full encryption is minimal on platforms like AWS Aurora. If the platform supports it - this is a good way to go. The incremental cost of encryption with Aurora is very low (< 3%). At rest, means that the data on disk is encrypted if the DB itself is compromised.

The 2nd layer is if the server-app is compromised. In this case, the data has already been decrypted by AWS. The 2nd layer means that credentials, emails etc are safe in the server-app tier.

You can lookup tokens by decrypting first. I'm not sure I'm understanding your question properly.

Regarding prepared statements, the mysql2 node driver is equivalent to the non-prepared driver in speed and infinitely safer.

I agree you don't necessarily have to do all these things, but at least think about them. We do all these items in our software and have not found it onerous. Happy to provide more details about this if you would like.
Which part do you disagree with? That its easier to enforce, or that its sufficiently effective?

The former is intuitively true; finding good rules to enforce strictly is difficult, but enforcing is simple (is the act explicitly allowed/banned or not?). Find broad rules is trivial, but then you spend all the enforcement time arguing edge cases (see: US gov)

The latter is defended by the assumption that wikipedia/overflow do indeed follow such a policy, and its difficult to argue that they are not successful. There might be something better out there, but at least currently the market seems to have converged on this policy; ala "democracy is the worst form of government, except for the all other forms we've tried.
Median != janitor
I fail to see how slightly wider dissemination of a bit of info I post publicly on my profile at this very web site constitutes a privacy or security risk to me.
Street Rhapsody in Blue
The primary purpose of the app is to provide free storage and an endpoint to access it in an app. I've also provided a VIEW link beneath the access URL to view it in the browser. If I hard code https:// in front of the access URL, it might fail on non-https URLs and vice versa. Still, I think your concern is legit, will look into it and try to make it more flexible. Thanks for the suggestion bud. Appreciated.
It is Not US App in the Not US world
They still transmitted light, they just called it a wave instead of a particle.

Am I missing something?
i have an expert who is reliable in the game,i met him through a contact named Jessica and was scared at first to give a trust,after all i had encountered with previous hackers but glad to say didn't regret my actions as hotcyberlord@gmail.com helped me hacked into my ex phone and gave me proof i been in a lying ass relationship all along,i will forever be grateful to you hotcyberlord@gmail.com,please contact him and tell him from Brenda as i owe him all my life for saving me at the moment.
> Create immutable hosts instead of long-lived servers that you patch and upgrade. (See Immutable Infrastructure Can Be More Secure).

An interesting idea, I've not come across before. Anyone know where I can find some case studies on this?
How much of this is built into various frameworks such as Rails, Django, EmberJS (for frontend) etc?
Hope the moderators edit the post title to include that this is a 'security' checklist, and not just a 'steps I need to develop a simple website' checklist. I am thinking quite a few people skipped past this article not realising the intended audience.
I realize WMI[1] is a Windows-thing only, but if you're already on the Windows-platform, WMI comes shipped out of the box and has been for probably a decade or more, and is overall very well supported.

It has its quirks, but there's practically no part of the system you shouldn't be able to get information about using WQL[2].

[1] https://msdn.microsoft.com/en-us/library/ms186146(vs.80).asp...

[2] https://en.m.wikipedia.org/wiki/WQL
I agree, they tried to do more than they should have.

A general issue I see, however, is that the real world need for flexible displays is far more limited than earlier projections suggested. If you switch to a rigid display, there is no reason to use an organic transistor back plane - that's where things start to unravel. PL were not even the first company in that space. There also were Polymervision and a couple of others.
But is it going to be applied consistently to all MS products like material design at Google?
And? Trade secrets have and deserve little legal protection. This will have one of two effects: either software products will gain longer term support because companies want to retain their secrets, or supporting old versions becomes so costly for them that they are willing to let the source go.

Either outcome seems better for customers. In fact, it's significant incentive for better development practices and good software design so these companies can maintain older versions more easily. Sounds pretty good all around, so where's the downside?
This ignores the fact that the shortage exists for reasons beyond training. IQ/specific aptitude is incredibly important in tech.

Being nice to everyone and pretending that aptitude doesn't matter is a recipe for disaster, and makes it harder to think hard about real solutions.

I'm not fully on board with UBI, but I think it's a step in a better direction than dumping resources into "training."
One of the reasons is that they want to warn against phishing mails which seem to be actively sent to the breached addresses.
Ashampoo WinOptimizer 15.00.01 Crack Free Download Get [HERE]
I did a post on that here:

https://simplesecurity.sensedeep.com/immutable-infrastructur...

but the originator was: Chad Fowler

http://chadfowler.com/2013/06/23/immutable-deployments.html
Ah, got it. Nah, you're right, it's obviously meant to be used from within apps, not manually sent to someone else. Just a late-night derp.

I didn't expect it to be a service for freely hosting data -- that's pretty cool. I assumed it would return a rate limit error if you tried to use it for anything substantial.

(I missed the About link https://jsonbin.io/about at the bottom, which explains all this.)
No much at all.
I think if you reference the Dungeon Master's Guide tables regarding loot, you'll notice a preponderance of protective magic when it comes to magical necklaces. +1s and +2s to general saves, resistance to elemental damage types, that sort of thing.

Which is probably what they're going off of.
California requires notification of things like email.
As you say there is risk of dramatic negative impact with people losing a sense of purpose and drive. If I were an author I could think of a number of scenarios that would result; Religious fanaticism, drug dependence and general apathy. hmm sounds like what we have today.

As for a lot of things, education can be an answer. Show people that the way things have always been done is not the only way to do it and you can open a world of possibilities. You also have to scaffold this with actual real opportunity before some will be able to lift themselves.

I dream of the day when the question"What did you do today?" will typically lead to something other than, commute, boring work, commute, sleep.
Jobs HN: Rust Devs Needed at Suitable
>Do both

Actually yes, this. Good call out.
> In fact, I've wondered about the origins of the term "intern" since I first heard of it; the technique was already known to me and likely others as "tokenising" before that, however, since compilers would often have to compare identifiers and doing this to them made it much faster.

My first hearing of it was in conjunction with LISP macros, or more specifically creating hygenic LISP macros. I'm pretty sure it goes way back.

You can see an example of this here: http://stackoverflow.com/a/30016344
They are called scribes (or medical scribes if you want to google it and not get hits about ancient Sumer). It is a relatively new position, largely populated by people considering and applying for medical school.
Netflix is notable for doing this with all their infrastructure. You could probably find some presentations by them about it. Martin Fowler wrote about it, so that would be a good place to start.

https://martinfowler.com/bliki/ImmutableServer.html
Nurse practitioner.

A tremendous amount of stuff that normally only doctors do can be done by a nurse practitioner, and since it's much easier to train them, (because they don't need as much schooling) there are far more of them.

Basically give them the "easy" stuff and reserve the harder stuff for the Dr. Or have a Dr. consulting for a team of nurse practitioners and they go to him with questions and summary.
I instantly noticed the speed and thought, "did they put TensorFlow on the device?!". props
I think the author of the comment meant the physical process. It was and is an art and art doesn't have to be posh and expensive to be art. The article title sounds as if it used to be a mere utility process until this guy. Besides, I was expecting to find examples of books inside with examples of good typography or art editing, but there's none; this is strange.
Sure - convince Scott Alexander to review more books? The problem is the supply of good reviews like this.
6 Benefits of Hiring an Experienced iPhone App Development Company
I think that's exactly what he's pointing at: People in general are unaware as to how to map such datasets into NNs. You could help by giving an example of some common application strategies from NLP, instead of just saying that it's done.
Looking forward to a more interactive demo of this tech. The headline is ridiculous though - I can use a RNG for a handful of frequencies and create a sound humans have never heard before.
I take your point that this could be explained a lot better. In the next revision when I fold in the feedback, I'll make this clearer. One suggestion, that I'll do is pair each checklist item with an implementation note that explains it better. Thanks for pointing out the flaws.
The big problem with Go-like concurrency is that it does not cross the ABI boundary well, because we're still effectively stuck with C for ABIs. So if you want to use that one language for everything, that is fine. But if you want to invoke an API written in other language, then "and_then" type futures make more sense, because they can be easily mapped to a C ABI.

To give one specific example, WinRT uses futures, and there you can write async code that flows from C++ through C# to JavaScript and back, with mapping to a common ABI type done transparently at the interop layers
(https://docs.microsoft.com/en-us/uwp/api/windows.foundation....).

If and when we standardize on a higher-level ABI that includes fibers or something similar, then the other approach might make more sense. Of course, the problem is that there isn't a single consensus design to standardize on...
With mountains and tunnels you can have a much longer runway. Maybe Musk's SpaceX and Boring companies can have a joint venture. With Everest at about 9000m and the deepest mine at 4000m that would give you 13000 meters. Maybe you could dig deeper or curve the track for an even greater launch distance and less peak acceleration.
The whole point of the article is that, while a President divulging sensitive information to an adversary nation is not criminal -- the President is the ultimate legal authority on what information is classified and what isn't, so he can legally declassify pretty much anything at any time if he wants to -- it is still highly consequential, in that (1) divulging intel provided by an ally damages our relationships with all allies, and (2) could be interpreted as a violation of his oath of office, and violating that oath was one of the charges levied by Congress against all three presidents who were seriously targeted for impeachment (Johnson, Nixon and Clinton).

Just because something's not illegal doesn't mean it isn't a Really Big Deal.
> What is he talking about?

What are you talking about?

> Higher taxes prevent business owners from hiring more people and from being able to offer decent wage growth.

No. I'm not in favor of high taxes but this statement is not supported at a theory level nor empirically. For one thing, employees and wages are pre-tax. Basically this type of labor economics stuff really should focus on the "elephant in the office": either an employee creates more profit than they cost or they do not. Tax levels make minimal difference here, if at all, even worse is tax topics get easily politicized, used to manipulate and distract from the real labor issues worth studying and discussing.

Also, the small business statistics you mention are misleading. I'm sure it was not on purpose but to be clear: That is 80% of ALL businesses are nonemployer (not 80% of small businesses). Does that feel right? 80% of businesses are one person businesses? Feels high, no? What percentage of people living around you are in this group?

The figure is misleading because the "23 million small businesses" counted to get 80% are not all real businesses, relatively few are. 23 million is based on the number of business tax returns filed not the number of proper going concern business businesses. There is a difference. Millions of those 23M business tax returns do not represent a "business" in the sense of an entity that would or could support hiring of an employee - it's not that type of business nor trying to be. There are various reasons for a business tax return to be filed by someone or group, including the obvious tax benefits offered right now today for small businesses. "Home office" deduction anyone? I think a business that generates somewhere around $1000 must file taxes for it but a "business" that earns nothing might also still file and be counted...

But I do agree with you 100% how small businesses are crucial to this country and they need support, legal and economic support, and they need to be able to hire new people and offer apprenticeships and compete locally and globally. Unfortunately the trend is going against this.

Also here is a pew link with related info from a different angle: http://www.pewsocialtrends.org/2015/10/22/three-in-ten-u-s-j...
Here is their bug bounty page for anyone who has found a vulnerability to report: https://hackerone.com/wordpress
It was written in Objective C?
The Last Question by Isaac Asimov (1956)
A gimmick can work in a place with a large population: even if most customers only go a couple of times, there's enough of them to keep the place running. But SF isn't that big.
10000$ by Hackerone for WannaCrypt “Killswitch”
If I remember correctly, the only reason why Modula-3 is memory-safe is because it requires a GC. That right there is a no-go for a "C++ killer" system language.
Luddites weren't wrong about the consequences; they were wrong about who it'd affect the most. The Brits pulled out all stops to create a market for British products and destroy industries in India/China. This was done by imposing high duties on local products in India, and by making China addicted to opium.

India, China were reasonably rich with vast reserves of Gold/Silver. Who are the rich in today's world ? Yeah that's right.
> At rest, means that the data on disk is encrypted if the DB itself is compromised

Right, so basically block-level encryption of the actual DB data file. While this would be much easier than encrypting the record data at the row level, it only protects against literal copying of the data file, which in my experience is not a common threat vector.

You're right though, it is simple enough to do this with something like aurora - although outside of AWS it may be very troublesome, with possible performance ramifications.

I guess my point is that this article is presented as a basic checklist for all web apps, with insufficient consideration of the ROI for implementing these solutions.

> You can lookup tokens by decrypting first

A user attempts to access your API, presenting an access token. How do you query your DB for that access token if all your tokens are encrypted at the row level? You could encrypt it at the app level and search for the cyphertext, sure, but now your server needs to have the secret, and it needs to be global, seemingly removing the point. Every other aspect of your application (notifications engine, admin portal, anything else that needs the DB) must re-implement this scheme.

Again, it might be useful, but the ROI is questionable, IMO.

> Regarding prepared statements

I misspoke here really - my reaction was against the stored procedures, not prepared statements, which are great and should be used whereever possible.

My main point is that security, and all development really, is about trade-offs. The options here are presented without due consideration of the benefits and costs of the tradeoffs they represent - and they article doesn't ask you to just "think" about them, it's a checklist. If you are a bank with 500 developers and unlimited time, sure, do all of these. If you're a startup - questionable at best.
It would be interesting to know where it's used, was it used in the JDK for example?
I'm not saying they shouldn't be disclosing that the patch is critical, I said that in the case of ancient bugs affecting all versions of Windows they should release all patches at the same time.
About 150k total images, 3k of which were hotdogs. The results are far from perfect (there's ton of subtle — or hilarious — ways to trick the app) but it was better than using a pre-trained model or doing transfer learning, accuracy-wise (honestly it was even better than using Cloud APIs). As for the difficulty in preparing the training set, I'll just say I definitely empathize with Dinesh and Jian Yang’s feelings in episode 4 :D
Ask HN: Books on the future of online education?
I'm interested in learning new philosophies or ideas about the current state of online education, as well as where it may be heading.

One thing I'm curious about is the thinking behind why Stanford, MIT, etc. decided to release MOOCs

Can you recommend any books for this?
The instrumentation here is impressive. The amount of data inspection done with just a few simple commands is a bit overwhelming. Frankly, I rarely hope to find myself looking at this level of metrics.

There's a lot down there I like to take for granted. But more likely I try to use methods like string.Intern() exactly never.

Use code you know and understand. Frankly, use code you can trust. And wtf would trust a method string.Inter() to do... exactly, what?

If you are writing a function to do something the name of the function must be the thing being done. What the heck is a 'static internalize'? The explicit HashMap was a few lines of code, and it's the most basic and obvious, and surprisingly performant approach. So definitely I agree you must use your own HashMap and not a static internalizer.
Internment, perhaps?
Optimization can happen without intentionality.

Less cost effective businesses are more likely to stop being businesses.
I saw there's ~8% performance "improvements" on Nexus 5X mobile browsing Hacker News.

I think Hacker News requires very minimal javascript to run?
You can't get a launch license unless you fit within the deorbit standard that was internationally agreed upon. "No plans"?
The phishing emails had the color scheme changed, making them very phony and easy to classify.
Should they get rid of the ping pong table too?
Ah, I didn't realise you were the author!

Sorry for coming on a little strong. I should wait a few minutes before tearing into things...

The article is a great beginning, and as we have seen, definitely a conversation-starter! So thanks for creating it.

What I'm scared of, though, is non-technical people finding articles like this and, without a thorough understanding of the tradeoffs involved, presenting it as a list of requirements for their team. That's probably not what you intended - but I've seen this kind of thing happen again and again.