skysight-inc/HackerNews huggingface dataset:
> We need ways to communicate

Microsoft developed quite a few of these ideas internally with the TwC (Trustworthy Computing) initiative in the early 2000s, and built a protocol - and development workflow - around threat modeling and security awareness. Most of their internal security-oriented protocol is listed for free:

https://www.microsoft.com/en-us/sdl/

As are some of their tools. For individual developers wanting to have a better sense of what threats their applications may face during the design stage, there’s a good Wiley book on threat modeling:

https://www.amazon.com/Threat-Modeling-Designing-Adam-Shosta...

If you’re really in a hurry, a lot of the typical OWASP vulnerabilities are mitigated by choosing higher—level, long-standing frameworks and abstractions (e.g. Rails, Symfony, ASP.NET MVC) that handle a lot of the things that can hurt you. From there, most of the low hanging fruit skids will find can be mitigated simply by following the security best practices documentation for your framework before you start writing code in it.

Anecdotally, auditing web applications for security issues is my day job. The majority of the time, ignorance is the real issue, not speed of development. They simply don’t have any idea what threats they are facing, or any real education in secure coding principles. Very rarely have I dropped vulnerabilities and had teams say “yeah, we know about that”. It’s way more “whoa, I didn’t even know you could do that”. Basic security education really matters.
Correct. But due to the separation of the front-end and back-end, the language developer doesn't have to do extra work to support different architectures.
I'm not blaming the union if it came out that way it wasn't intentional. I had to work around a number of constraints, with timings based on regulations as well as rates, budget constraints and other factors that came in at the last minute, as well as people on our sides own ability to work the long hours and I chose to balance of them all and it meant having talks at 30 minutes and the breaks based around all these factor.... I mean, I am happy with the content and the pace and the quality of the work from everyone involved especially the event crew.

It's just a factor how we chose to run the event and the content and that is what I was trying to articulate.
Should Your Spouse Be Your Best Friend?
Again, I'm sure there is some selection bias but nobody I know (in the real world) is vocalizing any opinions that the democratic process is in danger. Some vocal people online are, but I've not met them.

Who are these people? Where are they?

It's not confusing. They published some trash. It takes a few moments to verify that it is untrue. If you wait long enough, someone will come along and post a rebuttal and provide citations.

Maybe I give too much credit to my fellow humans, but I know some less than brilliant people and they happily voted D or R much like they have always done. They then went back to work and will bitch about it for a couple of years until they forget and do it again with the next political season.

Meh... Maybe I'm missing something, but that's what I see.
Probably Purescript, Elm, Buckle Script(sort of),and GHCJS.
In the US "far-left" is what, to most of Europe, is "center-right".

Free or low-cost college education, strong unions, strong consumer rights laws, inexpensive healthcare with transparent pricing, good public schools, legal cheap and easy access to abortions, subsidized parental leave and day care, etc.

This is the middle ground you are looking for, yes? It doesn't seem to be disappearing.

Or are those goals part of the far-left that you worry about?
:) thank you - it's a balance...
I might be mixing up movies, which movie is the one where he's a policeman and it starts by him entering a hangar with all of his mates being hanged from the roof?

edit: found it, new police story https://www.youtube.com/watch?v=DdEvxSxZAdE
Me too, but I still shop there and expect to shop there until I die.
I think that's the idea. Look at ELixir for example; they added Ruby syntax and macros onto Erlang and it's bringing tons of folks to the ecosystem. Sometime syou need to meet people where they are, if you want them to join your community.
Right on time too!

Back in like 2006 they were estimating that all of the stuff they wanted to put in 6 would require until 2016 or 2017 to complete. I figured that was a comment meant to negotiate down the scope to something reasonable.

Turns out, no...
The process of getting apps onto Play, is to create an Android app... so I'm not clear on what you mean. Someone will create the tooling that will automatically create this.

Trusted Web activity is just a general way to launch you PWA fullscreen from an Android actitivy.
Sure but is there a single ICO that has proven to have any value at all? It's the entire game as opposed to a sideshow.
IMHO, unless you want to use this as part of some larger script, ncdu is far superior for this particular problem.
Quality is the degree to which something exceeds minimum specifications. You can sit on a low quality chair etc. You can enjoy a low quality meal. A low quality car still moves you from A to B.

It's all the extras that make a better version of the same product that's missing.
Well, that’s the reason a large Scandinavian company I work for is moving a lot of its massive IT to Central Europe. As for firing at will, it’s not neccessarily easy or cheap to fire someone in CE as well.
I refuse to believe a single number about the online ad business while things like this are going on:

http://fortune.com/2016/12/20/methbot-ad-fraud/
As a part time resident, and a passionate Georgist, I love the Ardens. The three villages function separately for governance, but socially they're one, and there is a lot going on. The history is fascinating. (If you have access to newspapers.com, read it chronologically. I'm still working through it.) If you're in the area in early September, don't miss the Arden Fair.
Hellofresh deliver packages of ingredients, menus etc.

I can’t imagine that this is a problem that requires a bleeding-edge front end web technology to solve. ML tech, some cool logistics methodology, an awesome menu/price algorithm etc are things that I would expect to see. But this seems a bit over the top?
What is old is new again. This is the original "portal" idea that was used back in the 1996-2000 days of Yahoo.

This is also the same technique I have used at companies that need to present an "integrated" view.

For example, an internal HR web site that presents a single page of all things related to an employee benefits.

The information would come from multiple different services:

* ADP for payroll

* Fidelity for 401k

* An interval vacation tracker

* etc.

Each service would be given their own iframe that they control. No needs to worry about anything outside the iframe.

This is a time-proven way to do an integrated presentation of independent systems.

To clean up the look and feel - use basic html transformations and inject the site css.

It may seem "hacky" - but it works well in many many real world circumstances.
The problem they were trying to solve isn't clearly stated, it just seems like they wanted to come up with something they could call 'microservices' in the front end. It reads like something out of the 90s when the 'Design Patterns' book came out and many were blindly implementing the patterns, just to see if they could.
When you tax something you penalize it - so in this case you'd penalize owning land. This would seem to concentrate land in the hands of the wealthy as far as I can see.
Illinois Wields New Power to Challenge Noncompete Agreements
Unfortunately I don't know anything about the schools outside of the Bay Area.
Anecdote from my experience; having a cup of decaf tea with a spoonful of unfiltered honey leads to some of my most restful nights of sleep. My tea of choice is chamomile. My other, debatably healthy crutch is a fan which manages a cool temp while providing a constant noise.
TLDR hw is hard, “fashion” hw is double hard
Where did I say I didn't expect them to be evaluated?
Again, you’re trying to move the frame of the discussion in ways that are hiding the actual costs. Again, the purpose of propaganda isn’t to convince people to switch their votes, it was to portray CPI ton as a criminal in ways that would energize conservatives and discourage liberals.
If its being printed out of thin air (if hypothetically taxes can't cover costs) then its creating massive inflation.
> The Times has been blocked repeatedly

.onion is not for sites being blocked in China, you can just use tor and access the nytimes.com web site from there. .onion is for websites that get their domain confiscated by their domain providers or the feds, very unlikely to happen to the NYT. See what happened to sites such as the pirate bay or more recently the neo-nazi site dailystormer https://en.wikipedia.org/wiki/The_Daily_Stormer#Site_hosting...
We know more than enough about good habits of health, education and finance. This project is completely astray of the actual problem. Humans are just so very weak for some reason. Ex.: I know it's healthier for me to go to sleep, yet I'm writing this comment instead.
Somewhere was a piece by an American mother, who moved to Berlin and was surprised that free range parenting wasn't a movement there but the norm.

A couple of years ago, I was extremely surprised about a 16 year old who said they wouldn't go an event w/o their parents. At 16 I wouldn't have gone to an event with a parent.
Also, they didn't learn anything from the 'glasshole' phenomenon. The attention span of fishes.
A few months ago on Hacker News I asked about the low usage of the Spectacles and the response was generally that people who bought it liked it: https://news.ycombinator.com/item?id=14562560

Spectacles are a case where appealing to a niche may not be the most profitable endeavor. (and now that Snap is a public company, they have to actually care about profit at some point)
Show HN: Mocking library for Kotlin
I survived the Santa Rosa fires (my complex was evacuated but the flames got "only" within four block). The air was bad but it actually never reached the visibility limits of this photograph (that could be because we had only smoke and no fog, the super-dry air was a factor feeding the flames).
Did you move for your passion, or did you learn your passion from living there?

If you have the inclination, please add references to the relevant Wikipedia articles as you read old news! Thank you. :)
I wasn’t trying to refute you, just pointing out that it was a huge cost.

I’m skeptical that’s our current political climate in the US would be willing to do something like that again unless there becomes an “AI race" (which isn't far fetched, but not guaranteed either).
They don't care to do any sort of diligence about who opens an account. Someone, like a fraudster, can use a demo template for Woocommerce, apply and be accepted, only to clean out other people's cards en masse and zero intent to operate as a legitimate business.
I was really curious about spectacles, and bought a pair as soon as I could. I lost them about 3 weeks later, and that was that.

In some ways they were really cool, but the article was bang-on about pretty much everything. It's really a case study about how to fuck up a product roll-out.

Portability complications were a huge downer. The shaded lenses made them difficult to use indoors, and what wasn't mentioned was that the mic was hypersensitive to distortion from the slightest breeze, which made them useless outside as well.

But, as the article states:

>To drive demand, Snap needed to demonstrate all the creative things you could do with Spectacles, and the cool people who wore them.

Why the fuck didn't they do this?
I’m guessing they took it into consideration but thought hey could do better.
Why does it? If the metaprogramming is readable and sound, I don't see where the problem is. Most of the time, good meta-programming can turn 30 lines into 5, which is not systematically better for the reader, but can help avoid some of the most mundane repetition.

It's true that it shouldn't be abused and it most often is, but it does have its place.
I love OWASP. but everything they do has zero usability.

At times it looks like a bunch of 7yr old trying to mimic a big corporation.

This list is a huge example of it. Instead of a text, they have a repo, that generates a huge PDF, mentioned in a press release, with the release described verbosily in a wiki!

And I went trhu all those hops, and I still couldn't find a single link that points me to what "Injection" means.
If "black market" ads are more potent (more click throughs, buys, ect) then they will always exist, regardless if there's a "legal" way to do it.
Can you elaborate on the socio-political front? I am trying to understand how politics and social dynamics prevent the penetration of technology.
Agreed. Where is the modern equivalent of the Weather Underground and their bombing campaign? Or the Symbionese Liberation Army and their bank robberies, murders and kidnapping?

What modern actions are like the bombing of Sterling Hall?

And those weren't anywhere close to representative of the anti-war movement in the 1960/1970.
https://slides.com/

Is a commercial SaaS GUI for reveal.js: http://lab.hakim.se/reveal-js/#/

I’m a paying customer, and find it useful. Where possible, I create slides using standard open source reveal.js (or often some markdown format that compiles to it) but sometimes I’ll want to do something that’s easier with a GUI, or just run out of time/interest for design-from-the-command-line.

It’s easy to export decks to HTML, and the auto-generated code is pretty clean and sane, as these things go.

Additionally, the CEO of the company is the maintainer of reveal.js, so buying the product saustains his work in the open source library. You can also write to him with bugs and requests, he’s keen to listen and responsive. Thanks, Hakim!
buzzwords I see. what does it do?
This was obviously a marketing-led disaster from day one. It's hard to accept company leadership that can be be persuaded to do go down a path like this so easily.
Where did I specify types here?

Prelude> myfun x y = x ^ 2 + 2 * y * x - y ^ 2
Prelude> myfun 3 6
9
I've heard of it but not investigated. So many programming languages. Is it general or tied to Apple?
I didn't have a bad experience with them. I clean up their mess on the regular. It's a steady source of income for me — you know, people who rely solely on their payment processor to protect them from fraud.
Because they were pointless.

The first time I saw them I thought to myself, well that's a cool idea but that was it.

It truly felt like marketing or some attempt to trick people into believing Snap could make cool things... like a response to Facebook/Oculus.
The Iridium transfer rate is ~2400 baud, too slow for Ingress I suppose.
Notably missing from the list - nobody wants this product.
Like I said, they have a responsibility defined by the market. I’m not sure how your argument extends their responsibility any more than I did.

You comment concerning the users’ freedoms is, sure, correct; that’s the market I’m talking about.

Please clarify your argument if you have one.
Lived in China for a few years in Shenzhen, until a few months ago. Then back in Silicon Valley.

There was a thread yesterday about China's awakening AI: https://news.ycombinator.com/item?id=15568213. In it, a few posters mentioned a few things:

1.) This will give China the edge in almost every level and attract top researchers back. The US is losing its edge.

2.) The US will continue to cut funding for research and higher education in general. China has more than 4 times the population of the US, so the difference in potential numbers of AI-capable natives could be around 20 times

I had to laugh when I read some of those comments. These people have obviously never lived in China; From what I can tell online, some of these posters are Foreign-born, or currently foreign residing native Chinese, and some just plain hates US and wants to see anyone else succeed.

1.) Top researchers (especially those with family) won't move back to a country that will reduce the lifespan of themselves and those they love. The Chinese government always pay lip service year after year about reducing pollution. And it's always around the time of some sort of convention or foreign heads of state visits. Afterwards, the pollution comes back. In addition, great wall of censorship ensures that you will have a hard to finding information outside China's intranet, especially with VPN not working these days. Even if your college/company has a VPN setup, you will still run into trouble doing research. And no foreigner in China thinks Baidu is anywhere near the quality of Google. Finally, there are still issues of food and water. Look at this https://www.reddit.com/r/China/comments/77sxn9/chinese_food_... and see if you aren't disgusted by the food treatment in China. Who in the holy hell that is sane and smart is going to stay in China?

2.) China has a huge rural population, something like 700 million or half the population, that is under-educated and very poor. Just a quick search turns this up: http://www.sciencemag.org/news/2017/09/one-three-chinese-chi.... 1 in 3 rural children have IQ below 90. We can probably count most of the rural population out of contributing to any sort of AI boom. Then you've got the middle class, maybe about 600 million, which makes about $1000/month. Obviously the smart and qualified ones are going to move abroad to get a good qualify of life, and better pay. Compare that to US, where US can tap the resources of the ENTIRE PLANET.

Silicon Valley is HEAVEN compared to any city in China.
Ask HN: Are companies ever willing to hire non-“top-talent”?
Maybe it's impostor syndrome or something but I'm just curious: do companies ever look at "promise" or "loyalty" when considering a candidate for a job? I wouldn't consider myself top-tier, but I'm definitely more productive and a much better programmer with busy work and clear tasking...but that comes after the interview. How do I market my "willingness to learn" more to companies who apparently love that in their candidates?
Glass was released in 2012. For the teenagers that Spectacles was being targeted at, 2012 is ancient history.
Is there a talk associated with these slides? I bet it would be fascinating!
In practice, that isn't remotely true. People on the lower end of the income scale (are forced to) spend a much larger percentage of their income in order to meet their basic needs. People on the higher end of the scale spend more on a dollar-by-dollar basis, but a much smaller percentage of their income. Then they save and invest the rest, which also creates more wealth from their existing wealth.
From the FAQ:

The Orchid protocol uses an overlay network built upon the existing Internet, which is driven by a peer-to-peer tokenized bandwidth exchange.

The orchid protocol is an open-source overlay network that runs on top of the Internet. Its fully decentralized, because rather than traffic being routed through central authorities—your ISP or your VPN—it’s instead routed randomly through a network of bandwidth contributors who sign up to share their surplus bandwidth and activate their Internet-connected device as a “node.”

Users that want to access an uncensored Internet (bandwidth consumers) pay the bandwidth contributors in Orchid tokens through a peer-to-peer exchange. Because neither the traffic nor the payments can be monitored by central authorities, both contributors and consumers of bandwidth enjoy a fully anonymous, surveillance-free experience.

Also of note:

Who are the founders?

Stephen Bell: Steve started companies in Europe, the U.S., and China before founding Trilogy VC China, where he spent 10 years backing Chinese seed stage startups.

Brian J. Fox: Brian is an entrepreneur and open-source advocate, the first employee of the Free Software Foundation, and the author of the GNU Bash shell.

Jay Freeman: Jay is a software engineer and the developer of the Cydia software distribution platform used on millions of jailbroken iOS devices.

Gustav Simonsson: Gustav is an engineer and developer who helped launch Ethereum in 2015, working with core protocols, clients, and security auditing.

Dr. Steven Waterhouse: Steven is an experienced investor and entrepreneur, having co-founded RPX Corp, led cryptocurrency projects at Fortress and Pantera Capital, and the Honeycomb product at Sun Microsystems.

[Edit] I _think_ they are trying to create something like Etherium but for decentralized internet.
HaveIBeenPwned makes this really easy by publishing a list of hashed passwords that have been observed in breaches [1]. The list is by no means complete, but it should cover a lot and is very easy to setup.

1: https://haveibeenpwned.com/Passwords
I feel like the syntax could do with bit more explanation. For example in "(* ) + (* )" the use of parenthesis is not explained anywhere as far as I can tell. Also, shouldn't it be "(* ) `+` (* )" instead if "+" is used as an infix function instead of postfix, i.e. so that the expression desugars into "(* ) ; (* ) +"
Wouldn't it be trivial to hack and link portals in Antarctica, or anywhere, with a jailbroken/rooted device and location spoofer?
DART: Noise Injection for Robust Imitation Learning
> I'm trying to verify her claim.

This is one of those times when you're going to want to hire a lawyer. She should have ample paperwork from the original filings, forgeries would have had to be witnessed, etc...

This here is lawyer and, probably, court territory.
Ask HN: Opensource Ethernet Router OS
For a long time it seemed to be common practice in Berlin that people simply use OpenWRT on relatively cheap (<$50) Routers with Ethernet ports and Wifi.

This doesn't seem to be the case anymore. I investigated a little and wonder now even more what to do.

There is OpenWRT but some people even consider it dead. And there is LEDE which may not yet be fully usable. And both dev groups seem to be fighting with each other.

Then most router suggestions are $150++, some even over $200. Honestly I didn't plan to invest that much for a simple home wifi. I basically just need NAT and a playground, since my cable provider decided to put everything on the free internet without any protection because apparently IPv6 is suddenly cool.

So, does anyone has something additional to say about this? What would you do for the time being?
Just curious, am I the only one who really, really wants the AR glasses from Daemon by Daniel Suarez? I would very much like a pair of glasses that records information, helps me to recognize faces, and bring information further into my reality.
From the article:
"engineers mistook acceleration readings measured in English units of pound-seconds for a metric measure of force called newton-seconds."

Yikes. Acceleration is change in velocity per unit time, and would be measured in feet/second^2 or meters/second^2.
Both pound seconds and newton seconds are measures of momentum (mass times velocity). He then goes on to define a custom domain called "acceleration" but gives it units of "1 m*kg/s".

Seems to know his stuff when it comes to PostgreSQL, but evidently it's been too long since he took a high school physics class.
Women sneakers
I participated in a closed source project that tackled exactly this. We added tensorflow support into DIGITS and it made it a much easier framework to use.
> Google’s core mistake was allowing geeky developers to become the face of Glass.

That's us! We're the mistake :-D
I'm most concerned about interacting with other systems, like databases, http services, whatever, where the data that's being worked on includes such values as `false`, `null`, and `[]`.

In that context it's hard not to simply conclude that CL would be at a disadvantage.
Can anyone recommend papers/chapters about locality specifically in OOP/managed code ?
Apple fires iPhone X engineer after daughter’s hands-on video goes viral