skysight-inc/HackerNews huggingface dataset:
Ask HN: issues involved with implementing secure RESTful APIs
Hi all,

I was curious about the issues involved with implementing a secure RESTful API over HTTP/HTTPS. I have a passing knowledge of the issues (HTTP basic authorisation, API tokens, etc.), but I couldn't find any detailed literature on the subject, and I would like to be able to assist our clients in designing these systems from a more enlightened position than "I know slightly more than you."

Any explanations of API design decisions, or more thorough treatises on the topic would be greatly appreciated. I'm also open to suggestions such as XML RPC/SOAP, etc. I need as much knowledge as I can - dealing with client-designed APIs constitutes most of my work.
Sample from a univariate distribution by taking the inverse function of the cumulative distribution and plugging in a [0,1] uniform random number. So, if X is a real valued random variable, then its 'cumulative distribution' F_X(x) = P(X <= x) where P denotes probability. Then F_X is monotone increasing so has an inverse function, say, G(u) = F_X^(-1). Then if U is a random variable uniform on [0,1], G(U) has distribution F_X like X does. Note: Have to patch up a little in the case F_X is not strictly monotone increasing.

For the inverse of the mean zero, variance 1 Gaussian distribution, look in the old NBS AMS-55 math handbook. They have two nice, simple formulas that are plenty good as approximations; one formula is a little more accurate than the other.

For getting samles from a multivariate Gaussian, that is the second lecture!
Of course I haven't met either one of them and I can't really talk about the kind of person they are, just about their personas and the way that I perceive them.
I don't see how you could do this for PE files, which would be required to pull this off on x64 (since you can't run 16-bit binaries like .COMs). There are several fields in the headers that require non-ASCII values.
Finally a use for 3D. But I'd love to see some eye tracking (and some way to determine each eye's focal length) to determine what we're focusing on -- Tron gave me a headache.

But, a virtual blade runner in proper 3d would be a little fantastic.
It does take time. My application took nine months and that seems to be the average time.
So would HTML+CSS+two drinky birds tapping the keys a'la Homer Simpson count?
One thing that annoyed me about some of these AppSumo deals, is that I got bitten by that fact that some of them had an expiration date. There seem to be alot of constraints that don't show up until AFTER you pay for it. Would be nice to make some of these details more upfront
Wouldn't it be ironic if Steve Jobs, during his iPad 2 keynote, drove developers to the Android market by pointing out the low app number for tablets?

With just 100 apps for Android tablets, NOW seems like the perfect chance to get your app noticed by being first on the market...
Response #4 answered your question (http://code.google.com/p/chromium/issues/detail?id=150#c4), and I agree.
drop.io is a well known, recently sold to Facebook.
path.io changed to path.com
boxcar.io is an awesome iPhone notifications app.
pen.io is a new startup from the Launch Conference.

Thats just off the top of my head... If you find any more please add them to this thread :)
So my goal with Like.fm is to take that but have all your friends connected in that way regardless of what music service they use.
Milton Friedman on Greed
Awesome cool.
Great comments. Watch this space :)

Re UI for 'new' and 'comments': It's a good question how immersive an experience this alternative UI should be. Our initial ambition was just an alternative view, a different random sampling of HN, to augment the HN UI rather than replace it.[1] This is why the UI mimics HN, and we link back everywhere that it makes sense. But this exchange has given me some ideas to expand my ambitions, so thank you.

[1] Especially since we can't let you vote or reply directly on hackerstream (due to security restrictions in browser AJAX).
> What we don't have (in response to your first point) is a demand that those people be available Sunday night.

Boring, un-agile places have concepts like 24/7 rosters of operations staff and the ability to rotate "on call" duty amongst developers.

However I agree with your conclusion that performing irreversible rollouts are best achieved during (your) daylight hours.

> The real problem here, which has been fixed, is that Kiln should not attempt to hide a problem communicating with FogBugz.

Question: why wasn't an alert raised immediately?
Hugo Boss Caught Spamming Google
Hugo Boss caught using Doorway pages and cloaking on their domain.
Just curious... Why not get a 40" high desk, and an adjustable height chair?
A 1.1mb background image? 200KB of javascript?

Whew.
also

adb lolcat
Modern divorce: Wiretapped teddy bears, $120,000 in fines
I've never even heard of Pocket Legends before, much less the developer.
You can kill it though, use SHOW PROCESSLIST
I look at it like a sample bag from a carnival, but without the creepy carnies or the smell of cabbages.

Basically, you get to tool around with a bunch of products for a while and see what they're like, how you can use them and what value they provide. Sure, they cost you 1000 packs of Mi Goreng, but so does a tank of petrol.
If I remember correctly, the first iPad shipped without a calculator app, so the first 3rd party calculator apps made a killing (and Apple made their 30%). I'm guessing the same might be seen with Android Tablets.
What do you mean by "type of programming"?
too bad videogame marketers have cried "real-time" too many times for me to believe any of it before i'm actually playing.
I think you can do away with content. Think of sites like chatroulette, omegle and their ilk.
Let U = Users

Let Price = U / (1000 x (LOG(U) - 2.44))

Disclaimer: $fuzzy_math_fudge_factor = TRUE
It's actually the other way around. Night shots are harder to pull off well since the effects of individual light sources are much more pronounced. In this video, they are trying to showcase a number of different light sources, reflections, diffusion which require a dark setting to stand out. Outdoor day shots get most of their "character" from a spot source at infinite distance (parallel rays) which is much less computationally demanding.
For Firefox users:

Similar functionality can be achieved in Firefox using one of its settings. From the privacy tab of the Preferences Dialog (Options in Windows), choose "custom setting for History" and disable third-party cookies.

Another method is to use an addon called Facebook Blocker: http://webgraph.com/resources/facebookblocker/ (haven't tested).

Some other methods are suggested here: http://superuser.com/questions/220696/how-can-i-block-all-fa...
Yes, I was going to post that as well. Very entertaining writeup of a topic that tends to be dry (regardless of how stressful or exciting it is in the moment).
I actually like to have several PDFs open in different tabs. Preview.app (OS X) can't do that.
It addresses pretty relevant issues concerning C vs C++.

C++'s major faults are addressed not by C but by a higher level language.
"where C is a multiplier that has changed with time"

Well, there's your bug :D
The client only runs when your music player is running. And it's very lightweight. You can think of it as an addon to your music player.
Thanks! I'm really glad you liked it.

Don't worry about people being better at hacking than you though. There's always someone better, and in the end the only thing that really matters is your ability to get stuff done.
But that's not the news.

The news is about the overall trend of Android surpassing iOS on metrics that people track and care about.

There was a period where newspapers were reporting about iPhone developers making big bucks. It wasn't news because a particular developer made some money but because it showed a new trend of iPhone becoming a new way of making good money for many people. The "new" part was why it was news (a new company making big bucks selling Windows software isn't news those days, even though there are still plenty of them).

Similarly, the current thinking today is that you can make more money on iOS. This article is newsworthy because it shows that this might be changing (granted one data point doesn't make a revolution, but one data point is more than zero and to get comprehensive picture we have to start with sharing single data points).
I wanted to contribute a couple things that probably won't get mentioned by others, especially because there are likely not too many new mothers on here.

First, find out the percentages of cesarian birth and breastfeeding for both your obstetrician and your hospital as compared to the national average. If the numbers don't look good, don't hesitate to switch (even if you like your doctor but they are affiliated with a knife-happy hospital). You can adjust your parenting style as you go but the window of opportunity for the birth and breastfeeding experience - which will lay a foundation to the mother's happiness and the baby's health - is literally hours. (The breastfeeding window is minutes after birth - the longer you delay, the harder it becomes, for both mother and baby, so if your wife ends up with an unnecessary c-section and cannot breastfeed due to post-op issues, or if the hospital doesn't have any nurses to show her what to do, you may lose that window for good).

Second, don't go crazy on parenting do's and dont's until the baby is at least 3 months old. They won't remember anything so there is no reason to do sleep training or any other training. If the baby wants to sleep with mommy, let them, and if the baby cries to be in mommy's arms, let them. (Research shows that babies who get lots of mommy time are more independent later on, as opposed to getting used to it as disciplinarians will suggest). I think one of the nicest things you can do for your wife is let her know that you won't judge her if she is being a bit of a pushover for baby. Keep telling her she is a good mom - every time my husband says that, it makes my day.

Third, be understanding of her need for some untouched time. I mean that literally. It's draining to have a baby holding on for dear life 24/7. Don't take it personally. Go out constantly for the first several months, it's an amazing luxury that will not last forever.

Lastly, buy her a moby wrap. It works for a newborn with no head control, it keeps the baby and mother close and happy, and it's amazing for weight distribution, especially if she is a wimpy 100-pounder like me. It's just as good for "wearing" the baby at home. Seriously, a total back saver.

(I also second @kerben's motorized swing/cradle).

I think it will be a great experience for both of you. It sounds like your head is in the right place and she is lucky to have you as a partner. My husband is a rockstar daddy as well and that makes a huge difference. Everyone talks about sleep deprivation and all that but my experience has been "baby rainbows" (a term I've come up with to indicate the opposite of "baby blues") and he is largely to thank for that. I wish you the same.

P.S. Apologies for the TMI (non-parents feel free to stop reading) but I thought I must mention something else since you are having a boy. If she is breastfeeding, they will put her on special contraceptives in order to avoid dosing the baby with estrogen. These will be an absolute killer for her sex drive so I highly recommend that she look into a copper IUD instead. No hormones, no daily pill popping, and no side effects such as mentioned above. Daddy happy too :)
Yeah that's a good idea. We still have no customization based on your username, but it's on the roadmap.
Ask HN: Legit source of market rate pay for engineers in SF?
Anybody have a good source online or elsewhere that can be referred to for market rate pay for engineers in the bay area?
Sedtris: tetris written in sed
"Openflow" switches introduced in Europe
Admittedly, this is a tech demo which was designed to pack in the maximum amount of variation into the shortest possible time frame. Game development typically reuses the same carefully-crafted assets (particle systems, models, textures, shaders, even level geometry) in as many places as possible.
This link is very interesting. I thought incorrectly that it was only a random string. You should submit the link.
Heh, all of these points could easily be applied to Python as well. All the concepts are there in addition to the for loop. It's nice how you can do a lot of functional programming in Python with these simple tools (map, filter and reduce (Haskell's foldl).

I wonder why there aren't more people advocating the use of these functions in Python programs instead of for loops.
Why is everybody complaining about how long it took for Epic to create this demo? This is a next generation engine so the team directly working on the demo was probably working concurrently with development. They probably encountered multiple bugs with the engine every day.

This engine isn't meant for release today, it's meant for release in a few years. Any pronouncements you make about how this engine is too X for today's Y are going to be invalid.
I feel this post is more an argument for first class functions than closures. It is true that much of the usefulness of first class functions is lost without closures, so having useful first class function almost necessitates (though does not guarantee) closures. But in none of the examples is the key attribute of closing over free variables emphasized, which is the powerful and dangerous part.

A simple example showing the usefulness of inner functions might have been more pertinent to the term closure IMO.
Wijmo – Complete Kit over 30 jQuery UI Widgets
Wijmo is a complete kit of over 30 UI Widgets that is a mixture of JavaScript, CSS3, SVG, and HTML5. It is an extension to jQuery UI with every widget built to its standards and framework. Each widget is ThemeRoller-ready.
It would be great if they built Chromium for CentOS. Alas only Ubuntu.
XSLT is the transformation part of XSL (hence the T), meant for transforming XML into other formats, including things like XSL-FO which is the formatting part of XSL. As it is a general purpose language (with iteration, recursion and conditionals) it's not that surprising that it is Turing-equivalent.

XSL-FO is the formatting part of XSL (i.e. the bit most like CSS) - I'd be pretty surprised if this was shown to be Turing-equivalent.
No offense, but if you're reaching out to that many people and getting zero engagement it's probably just not an interesting campaign. Young people (twitter user demographics) are awesome at filtering out ads, they don't process things unless they're unique/funny/interesting. I'm not a marketer (in fact, I'm pretty terrible at such things; so take my critical view with a grain of salt), but the reason people remember old spice isn't for the deodorant.

Perhaps try a new direction with your messaging, before you give up on the medium/channel. I'd love to see more A/B testing here to know what really works.
The "what topical experts have to say" leaves me worried.
I'm on a Mac. It says I have two versions:

Shockwave Flash 10.2 r154
Version:	10.2.154.18

and

Shockwave Flash 10.1 r102
Version:	10.1.102.64

One in a Chrome sub-directory and the other in /Library/Internet Plug-ins/

I'm not familiar with SuperUser, but I'll check it out if I can't figure it out. Thanks!

Update: I disabled one of the two flash plugins and tried youtube and it was fine. Then I re-enabled it and it was still fine. Weird bug, but hopefully it's gone for good.
I think a really strong FPS AI would be a technical achievement similar to automatic car driving; it has have a "real eyesight" algorithm, notice motion, understand varied terrain, etc. A basic LOS check is insufficient since there's lighting, smoke, semi-transparent items like fences etc. included in typical FPS environments.

Even considering that the data structures for the world and rendering can be reused for AI purposes, it's still pushing our current hardware to expect to get a whole squad of really detailed, smart AIs and also have a playable action game with modern graphics quality.

It's a lot easier, for the purpose of making a novel, amusing game, to just back off from realism and find other things to try.
9 Things I'd Do if I KNEW I was Going to Die Today
Yes, I agree any creator needs an able tool, but that's a clear strength of PHP when it comes to Web deployment. That's a fact. I believe people should use whatever they feel they can get the job done with, even if it's BASIC (http://news.ycombinator.com/item?id=2257866), because focusing on a language more than what it is you're actually trying to accomplish IMO is missing the point.
Eat your broccoli.
I definitely agree. It matters more that there is a sane limit than what that limit actually is. Your 113 column files look good to me.
As somebody who's never heard of the product, I think that the IDEA is gold -- however, there is significanly more information on the regular ol' landing page.

I'm guessing if you split tested them, it would convert better by a lot.

Regardless, I'm eager to hear the results.
XSLT performs transformations (i.e., takes input and produces output). This sounds to me like a "program" so I wouldn't be surprised that a language like XSLT might be Turing complete.

HTML and CSS are much more "static" in flavor (hence the OP's use of the term "descriptive") and so it might be more unexpected that they can perform universal computation.
A Post-PC Device is a Marketing Term used to refer to a iPad, and as far as apple are concerned, Only an iPad.

Personal implies choice, customization, and individuality, and these are precisely the things apple strives to remove from it's devices and services. The ability to choose one of seven particular colors and three price-range specific models is a laughable substitute.

The iPad is the first Computer which is post-Personal.
Probably not. Pooling the resources is more likely to be efficient. If you do it at the individual level, everyone has to allocate resources for some kind of maximum likely cost versus allocating for the average need. That's also why it's more efficient to say, buy fire insurance than set aside the amount of money necessary to cover a fire - pooling risk.

I'd much rather be in a society where there are sufficient social services for the elderly and higher taxes than one where I have to depend on either my own savings or my children's earnings to cover my (very unpredictable) post-retirement needs. (Unpredictable because of the wide range of years I may live post-65.) Otherwise you have huge opportunity costs because of the need to allocate for a worst-case scenario.
In Depth: The EICAR Standard AV Test Program (warning: some assembly required)
Are you increasing the rates for Archival accounts, too, or just the Basic?
Not to put too fine a "trolling point" on it--but after playing Final Fantasy XIII I'm inclined for game developers to take a step back in terms of their graphics aspirations to continue to deliver quality games. It's been speculated (and supposedly admitted to--though being at work I don't have time to dig up a link) that the incredibly linear world of FFXIII was a direct result of being overambitious with the graphics. There just wasn't time to build a more "complete" world to the graphical standard they set.

I agree with much else of what is said here about it being a "perfect conditions" demo that doesn't have to deal with any unknowns--and I also echo that it looks exceedingly cool. All that said, great graphics does not a great game make!
Nobody in Peter Seibel's "Coders At Work" seemed to have very much time for unit testing as far as I remember, and they pretty much all qualify for that title in my opinion.

I'd stand by pretty much everything I wrote in my original post, for what it's worth, but I guess I don't really understand why it seemed to ruffle so many feathers to be honest.

Unit testing doesn't help me enough for the work I have to put in (compared to things like good logging and monitoring, for example, unless I'm writing something like a parser, with well-specified behavior). It doesn't seem to have helped justin.tv too much either, when we've tried it. But if it helps someone else, then good for them!
Even a partial transcript would be better to elucidate folks with the video content/tone.
I am in the same boat as tobtoh. I usually never watch videos but will read (or reject) a 15 page article quickly.
DICE made Mirror's Edge, but it was a commercial flop, so we are unlikely to see a sequel anytime soon :( Personally I loved it.

Slightly OT but interesting: from what I hear from people at EA, it was a huge internal political war that year between the people who wanted to build more sequels and licensed franchises, and the people who thought that EA would die if it didn't innovate on its own IP. The latter won and were given a chance to prove their worth - the two main titles to come out of that were Dead Space and Mirror's Edge. From what I hear management considered this direction a flop (Dead Space, while popular, and spawning a sequel, was not the sort of hyper-blockbuster it needed to be, and ME was an unquestionable flop) and now EA is culturally back to the sequel-mill mentality.

A sad opportunity that didn't pan out :( There are precious few new IPs being worked on at EA right now.
Hackers versus Apple
4 API Trends Seen in Programmable Web's Milestone Numbers
There are a lot of bad laws out there. This is not the first really dumb case involving children out of Nebraska, back in 2008 the do-gooders there passed a child drop off law that said you could abandon your child at a firestation without problem, thinking it would save babies from dumpsters, but instead they had people from as far away as Florida driving to Nebraska to drop their teenagers off.
And what point are you trying to make?

Their game is getting 12-13k downloads per day and has made best-of lists on Mashable and MSNBC; clearly they are well known, even if you are not personally aware of them.
You kid--but it's the sad reality of most modern games (or at least the ones that generate the most press). Rather than just putting a new "pretty face" on the same old shooter concept that's been the norm for the past 15 or so years, I'd like to see game companies get back to innovative gameplay concepts. Interestingly, I see far more of that innovation coming from the indy publishers who don't do anything in the realm of "crazy 3d graphics" than I see coming from studios churning out "DOOM clone v 29345.2"
On the other hand, you have studios like Bethesda - who build great games with incredible gameplay... but graphics performance so sluggish that it really takes away from the experience, not to mention buggy and crashy as hell.

There's room on both sides to improve. IMHO Valve is the best at this - their games run on an incredible range of hardware and look good on just about anything. Their engine is also rock solid to boot.
In short, because sitting on a bar-stool type contraption (even if it has a back and a ledge for feet) is a very different feeling than sitting in a chair closer to the floor, with feet on the ground. Also, invariably higher chairs tend to be narrower.
The most notable thing about newborns is the sleep deprivation they cause. To prepare, get off of caffeine right now and if you don't already, take up regular exercise. These will help you be more normal when sleep deprived. Not drinking alcohol would also help.

I would read about how to calm a crying baby. There is a formula that works really well: wrapping, rocking, shh-ing, etc. I found squats worked well with my first. The second didn't like it so much.

Finally, you might underestimate how absurd giving birth is mechanically. It just doesn't make sense. A friend remarked that giving birth was "like getting butt fucked by a rhino". No rhino's were on hand to tell their side of the story. The point is to expect incapacitation.
Getting Computers to Recognize Facial Expressions