skysight-inc/HackerNews huggingface dataset:
>Including, I believe, a rather massive body of drawings and animation films from Japan (I'm thinking of Hentai involving underage schoolgirls).

This is not illegal at the country-level in the US, however such laws do, hideously in my opinion, exist in England and Wales, Northern Ireland, Ireland, Australia, New Zealand, Canada among other places. They also exist as "oscene" at the state level and thus you may be liable depending on state law.

There was recently a case in Austrila in which a prisoner was brought before a court on the charge of producing child pornography, while in prison -- how? He wrote short fiction stories and they were found by a prison guard. Similarly longer ago a case in Australia decided that children in the Simpsons do indeed qualify as children, beacuse although they do not share many bodily features of real humans, the genitals as depicted in the pornography did share characteristics to those of real humans, which was apparently enough to secure a conviction under the charge of possession of child pornography.

Canada similarly has illegalised possession, even of story material depicting sexual acts involving a minor. To me at least it is ridiculous to think that one may be libable under the law for prison time of up to three years for possession of a drawing.
If I understand you correctly, you can in LaTeX. \newcommand can be used before \begin{document}, sure, but it really can be used everywhere. The only catch is that the resulting definitions are global, and I know (as a programmer and mathematician) that this is all sorts of bad, but it's workable. It's definitely not an excuse to repeat yourself everywhere. ;)
Funny that you picked TF2 as an example.

From my experience with the game over the course of several years, TF2 becomes insanely addictive only after you overcome the horrendous learning curve.

This takes around 50-100 hours of pure playtime on average.

Once you understand the game mechanics, how to play the classes reasonably well (fully mastering a class can take 100+ hours), how trading works, and how to play the most popular game modes (including duos, 4v4, dodgeball, bball, MGE, surf, etc.), you're basically set for life!

For those who overcome the curve, the retention rate is quite high, from my experience at least. The release of Overwatch probably pulled quite a few people over though. This is primarily due to how Valve has treated the game over the years.

I have over 1000 hours, my brother has twice that (at least), and I know several people I played with regularly who had 4000+. Keep in mind that the country that I was living in had an absurdly small TF2 community.

I don't play anymore because: (1) I don't have a good PC, and (2) grad school sucks.
> You do not need diversity to have a meritocracy in 100m sprint.

I'm not sure that Jesse Owens would agree with you.

The only reason why it seems that we don't is because there are rules which determine the winner, and those rules reflect the worldview of those who have set them. Even today the athletic sprint is not full "meritocracy", as women compete separate from men.

One more note: I've put the word meritocracy in quotes because 100m sprint has nothing to do with meritocracy. That term means that the most capable ones rule, while in athletics those with best results certainly don't rule, even if they reap other rewards.
Can't forget these massive massive student loans people have to pay off.
A definitionally systematic defunding is proposed and you question if it is systematic or oppressive?

Okay.
There have been a few comments on whether or not the MIT license includes an implicit patent license, or is just a copyright license.

It should be noted that there is nothing in the MIT license that actually says it is a copyright license. Here is what it grants you permission to do:

> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions

It is giving you permission to "deal in the Software". What that means is not defined but it gives several examples that it includes: use, copy, modify, publish, distribute, sublicense, and/or sell copies.

Several of those, including use, copy, sell copies and maybe distribute, are things that require patent permission if the software is patented. The plain language of the license says that you have permission to do those things, and the only way you can have that permission is if you have a patent license, so I don't see how a court could read the license as not including a patent grant if the licensor has patents that cover it.
Write, pitch, repeat. Working as a runner might help you network and understand the industry, there are various mentorship schemes, but ultimately nobody gives a shit unless you've got a great script. You don't need permission from anyone to write a script and send it to a commissioner.

There's a mile-long queue of people who want to be a script writer, but a much more exclusive club of people who actually write and pitch scripts regularly. As the great Ronnie Coleman said, "everybody wants to be a body builder, but ain't nobody wanna lift no heavy-ass weight".
It will always be possible to exchange you can't stop everyone from trading bitcoin even if it became illegal, people trade illegal things everyday but that's irrelevant bitcoin is legal in many countries so I am not worried
When you are learning spending time on the front end is a terrible time investment. Your first web apps are for yourself usually. This is exactly why the grandparent gets frustrated. Make an ugly app that works first.
That's meant that way. What better way to get rid of annoying independent programmers like you (and me) than by setting things up in such a way that you need a large company to make any headway at all? That's just another form of lock-in and a way to deepen the moat for upstarts who are historically the most dangerous types for established players.
>Hence my conclusion: if you can’t hire web devs that understand how to write secure web apps then writing secure web apps is impossible.

That..that doesn't even make sense.
You should research this then. I've provided a link in other parts of this thread, please refer to it as the root.

Because I really question if you'd know simply by casually inspecting your surroundings.
And where do men get state funded birth control?
It's really not. HTML and CSS are far from ideal for making applications. JS has gotten better, but it still lacking in some ways. And there is no IDE for the web, whereas Smalltalk had one in the 70s, and numerous ones have existed for other platforms since then.
They are subsidized, yes.
Yes, I agree. Sometimes (maybe often?) plain HTML and CSS with a little bit of Javascript (and server-side logic) works perfectly fine for many "web apps". It can even be faster (and simpler) than downloading all the app logic and a fat Javascript library to the client.
I did not disclose usage as well. It's hard to start a moral conversation. Do we ask permission from users to display ads ? No ? Why a miner then. My throttle was at 0.5. Will discontinue due to antivirus/internet security software labeling the site as hacked/infected. But even if it was close to 100%, I don't think notifying them is important. Does Adobe inform users that photoshop or premiere will work at 100% when doing difficult tasks ?

Hopefully a solution will be found.
Brokoli Salatası Tarifi
No, it's not "time". I hate stupid headlines so much.
Nope, looks up from here.
I've had to use security answers because I was locked out by systems that detected I was using an ip from a different country and so refused my correct password and were using the security questions as a kind of extra authentication.

The amount of stupidity needed to build such a system is staggering.
Hereabouts (Western WA), some cities have actually started painting the location of the sensor, specifically for cyclists. Here's an intersection in Redmond where you can see those.

https://goo.gl/maps/TRmyGzWZDAQ2
You're right, I misspoke. All I needed was a transceiver (or even just separate TX). Regardless, you can't even get a SDR transceiver for an affordable price.
That wasn't even the point of my whole argument. All I'm saying is that perhaps women don't want those jobs in the first place. Then what will you do? I mean that is the whole assumption of this argument right? That women want these jobs, but are unable to participate in them because of discrimination. What if that assumption is wrong?

You can push for diversity all you want, but what if that's just not how people behave? Again watch the documentary I think Norwegian society is a far better a case study for Gender issues than anywhere else on the planet.
Including some fixed piece text in a server response is not complex. It does not increase the security of the system.
League of Legends Shows Off Evelynn's Reworked Gameplay in Champion Teaser
I don't think the point is that there aren't any people advocating for those industries, it's that there are far fewer people advocating for gender equality in those industries. It's extremely easy to find a couple of people/organizations who advocate for those industries, but overall far less than tech and other desirable jobs.
That's a very good point, in fact I always use the various global state variables of a program to explain the complexity of the program to others to show them why they can't possibly know their programs do not contain bugs simply because they have not tested all possible states.

Thank you for pointing this out, it is a very important thing to realize and it applies to configurables, global variables and feature switches alike. The more you have seen of the guts of complex systems the more amazed you will be that they work at all.
> A zero-knowledge proof is about a prover convincing a verifier they have some knowledge, without sharing the knowledge. In the case, the prover certainly didn't share the knowledge, and convinced the verifier. Bingo.

What was the knowledge they had but didn't share?

It wasn't that they knew the verifier's mother, because they shared that.

It wasn't that the verifier's mother was in hospital, because they shared that.

So what was it?
Read it again, the SSL is validated normally.

What isn't "validated" is the fact that there is a real exchange server beyond the HTTP/HTTPS endpoint.

You can do a layer 7 validation and validate that there is an actual exchange server beyond the HTTP endpoint but as I stated it's utterly useless since if you can MitM the SSL connection answer "yes I'm a real exchange server" won't be a technical problem at that point.

The author basically sees something that isn't there, the mail app tries to connect to an exchange server, it does so over SSL, it does validates the SSL certificate or prompts the user to approve it if the chain cannot be validates, it does however sends your credentials in the request to the server like it should.
I've read your link and replied to it. It only points to a grand total of three conservative states cutting off federal funding.
Targeting an expected value equivalent to what Google might provide is under-compensating relative to the risk. Why not just join Google?

Compounding this is that "expected value" is often grossly optimistic.

Furthermore, depending on when hires 1-5 occur, 1%-2% equity in the form of options can significantly under-value the risk they take.
So suppose they go and fetch these malicious ads and forward them to you. Now you get that malware directly from the first party. The malware has all the same-origin access as the first-party application, and you can't trivially block it with things like uMatrix.

That's what I call server deciding for the user. And now you're in real trouble with security.
People used to do that, in 90s CGI scripts were usually written in C, or even assembly. And let me tell you since I'm old enough to remember it: no, it wasn't a great experience at all. It was actually quite horrible for web developers from the today's perspective. Development was slow and painful and hard to debug as hell. Also, it wasn't secure at all, hacker usenet groups were all about stack overflows back in those days.

One of my first jobs in late 90s was a complete rewrite of a huge web app into perl. It was originally written in pure C, and it had so many security and stability issues due to bad castings and stack overflows and null pointers and all that usual C stuff, that today it'd be considered completely unusable (back then corporate users were far more tolerant I guess). Perl rewrite fixed it all, no stack overflows, no worries about casting every input every freaking time, no sql injections (perl DBI used prepared statements), everything worked like a charm. And it took us only a fragment of the time it took for the original development. Programming cycle was like 10x faster since you didn't have to compile it first (just that was worth it), code was easier to read, we were much less likely to make stupid errors, etc. That's why everyone moved to perl and then php, python, ruby, etc. in the first place. They are simply better tools for the job, history has proven it already like 20 years ago.
Thank you.

This is the important takeaway here. Changing the encoding simply swaps out one set of vulnerabilities and attacks for another. Separating control flow and data is the actual silver bullet for this category of attacks.

Unfortunately, there’s rarely ever a totally clear logical separation between the two. Anything you want to bucket into “control”, someone else is going to want the client to be able to manipulate as data.
Sure, but I doubt it would be easy to find my identity from my hn account name.
Yes but is the issue here solved by diversity hiring i.e. doing whatever it takes to hire more women or is the issue here solved by redefining how the workplace operates and making it something that enables women to succeed and enjoy the work without being highly aggressive? Actually it isn't just about women in software development, men should be included too. Plenty of men in software development are atypical compared to other men.

I'm a man in STEM - weird to put it that way - but I have a lot of issues in dealing with hyper aggressive people in the workplace. Unfortunately I've found that sometimes the only way to be heard in the workplace is to be aggressive and repeat myself over and over again.

Being aggressive in the workplace has resulted in me, against a company full of people who don't appreciate methodical software development, introducing less bugs, having more time to work with customer issues, and spending more time on testing and maintenance. Admittedly, it's very emotionally and mentally fatiguing.

As I write this I'm thinking about nurses and how insanely aggressive you have to be in a hospital, which is a women dominated field. I suppose that the difference is that the work is incredibly high-impact whereas it's easy in software development to feel that your work is for nothing because often it is.

I don't know what the solution is, or if the question I'm asking is the right question, but I'm fairly certain that the current practice of diversity hiring doesn't help the issue but instead hurts it more. Same thing with this unconscious bias training.

Now, I do strongly believe that encouraging women to consider STEM in school is a very good idea and that it opens a lot of doors that otherwise may of not been open. I believe this, in the long-term, is a giant step in the right direction because of cultural pressures and norms for people at a very young age.
So just current state of adoption? Kinda lame but such is progress I suppose
This article addresses web apps at the micro level. Comparing a React based webapp to a 20-year old UI, the end result. It fails to address distribution. How did that UI end op on your display? Through 13 floppy disks. How did the React based web app end up on your display? In the blink of an eye. Distribution is key. Real artists ship.
Two copies of this have already gotten killed and this one is about to get killed so you already got your wish.
So is tubal ligation.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3490665/
That's not the point though. The example given in the article was Google Docs which has the same UI paradigm to Word. Under the hood it's massively different obviously with real time collaboration and constantly up to date syncing.

So, the reasoning is that UI is fundamentally the same (or worse if not done right) to native UI from the 90's, yet it hasn't had a massive speed increase which seems wasteful.

But modern UI in Office is only an evolution of what was there in the 90s and hasn't changed fundamentally either yet it doesn't feel any faster.

UI is only a small part of an app, a well designed app will have most of the work performed outside of the UI thread and it shouldn't feel any slower than a native implementation. My thoughts are rendering speed isn't the issue but application design.
maybe i should spend my time reading about car engines instead of spending time learning php?
amd64 is just an extension on x86. I took the (64bit) syscalls from a kernel header, that i can't find now, so you can take from that header you found.

C calling convention for x86 is to push everything on the stack (and use call, that is short for "push instruction pointer and jmp", ret being the reverse), while the linux kernel uses a variant of fastcall (aka put stuff in registers (then use int 80)).

When i was learning i found a lot of x86 examples and tutorials (and a book, can't remember the name (is free)), and not much on amd64.

Just play with it, it'l get easy when you go over the wall.

With "normal" C calling convention you have to care about the stack pointer (esp) (i think it's the callee's responsibility (of the called function)), maybe even the bottom pointer (ebp) (i remember the wikipedia page on calling conventions explains it). The other difference between x86 and amd64 is floating point math, where sse is the default on amd64 and x87 on x86 (x87 works on stacks of numbers, the reverse-polish using a stack way IIRC).

Useful tools are: objdump -d ("-M intel" for the intel notation), strace to trace system calls, and fdbg since GDB can't make sense of a valid ELF file. You can also join the flat assembler and/or nasm forums. I like fasm better then nasm for no strong reason, but nasm is a bit easier.

glhf
MathJaX is sluggish because it's translating stuff after the page loads (and it takes the target browser + window size into account, so it's hard to move it out of the browser).

KaTeX can work as a preprocessor (but has less coverage of special environments and macros), and looks very promising to me. (And as long as you keep the original text in an attribute or hidden element, you can always migrate to something else later.)

The fidelity of MathML that I've seen has been terrible. The only people I've seen make it work is Apple, and there it's only working for their proprietary iBooks files. They render parts of the equation in SVG on top of the MathML, and they've got a special XML file that's tweaking a bunch of MathML layout parameters. I've tried copy/pasting the MathML into an epub, and it looks completely different, even when viewed in the iBooks app.
There are still popular desktop apps. Native Office is still used widely despite Google Docs and web versions of Office. Adobe applications are still widely used. Most programmers use desktop editors and IDEs. I use a lot of the Mac applications.
> You're not supposed to save lives at any cost.

The cost is quite manageable.

> Not if that means you'd associate with or reward crime.

They don't.

> That's why you don't submit to blackmail, for instance.

What does that have to do with any of this?

> In the same way when someone is selling drugs illegally, you're supposed to put him in jail, not help him with his business.

I'm sure you will feel right at home in AG Sessions office or with the Philippine leader. Me, I'm much more comfortable starting from root cause analysis rather than to just hunt symptoms, I think hunting symptoms is a waste of time, effort and resources.
They should just put up sponsor banners like sports do. I almost reflexively fast forward 10 minutes now when I watch a lecture because it seems they always feel that need to give a long intro speech.
annoying clickbait title and irrelevant trolltastic comparison to '90s windows garbage designed to incite anger.

1) yes, large webapps are hard to secure. but they're also infinitely easier to patch.

2) yes, the fact that google just shits out random things so people can get promotions (SPDY, NaCL, whatever) and it becomes a thing is a problem. this was not how the decentralized web was designed... but that doesn't mean that it's "time to kill the web."
I get that and tried to make it clear that I get that, particularly in the paragraph about npm; Perl has the CPAN, Python has had a half dozen package managers (I don't even know which one finally "stuck"), Ruby has gems, but nothing exploded the way npm did. So, what's different? I would argue it's not that JavaScript is a better language (though it's a pretty strong language today). I would argue that it's a better platform, and that platform, ultimately, is the web.

Every package manager works over the internet. Only one represents the web-as-a-platform. And, it turns out that's the one that has dwarfed all others in size and scope, in a quite short time. Nearly everything I mentioned above requires the internet for interconnectivity, sure, but also a platform that delivers it to the user. Any platform for building apps that fails to deliver at least as much as the web will never be as successful as the web.

Edit: Also, desktop apps have had the Internet for decades. What have they done with it?
> I worked in an all-senior team once. Nobody admitted not understanding something. Everyone wrote overly-complex code just to 1-up each other

Sorry to hear about that experience. Those aren't senior developers. There's no room for learning when you think you know everything. Senior developers mentor, simplify, document, and admit when they don't know the answers.
Academics would love it if they didn't have to do that. Society's undervaluation of academic research has led to this situation.
The react ecosystem is massive, and includes impressive projects like the various backends/renderers: react-native, react-sketch.app, react-vr, react-pdf, ink, that have no equivalent in other frameworks (or at least to nowhere near the same level of maturity), so yeah people ditching it may well regret it.
To be completely honest, what you just wrote is far more disruptive to the conversation than what I wrote.

The analogy you made was a pretty central part of your post, and it's really disingenuous to compare abortions to vasectomies. They are utterly different procedures. There simply is no analogy to an abortion procedure for men.
The historically popular national insurance subsidization program that is part of the ACA.

But also vasectomies are an unremarkable part of what many government subsidized clinics.
I like how the final remarks so clearly show the shift in perspective, review and affiliate marketing after the Casper influence. Many of these on-demand mattress companies had 30-day return policies: has any one tried and returned such a mattress? My suspicion is that the large unwieldy-mess of the mattress suppresses ability for the customer to return, so the police is great on paper, but then you end up stuck with the mattress and settle?