skysight-inc/HackerNews huggingface dataset:
You'd be surprised how many applications and web sites still rely solely on client-side validation, even these days. Either don't think at all about threat scenarios ,or they trust their "Do not reverse engineer" EULA to protect them :-)
Please read this :
http://en.wikipedia.org/wiki/Basic_income_guarantee

This is the only way to change the world economy and stop the race to the bottom.
I think it's important to educate new users about why they're being down voted so they don't repeat the same mistakes and integrate the community. The same should apply to killed stories, especially when they have so many up votes.
A week ago, I implemented drag&drop for an iPad app. I explicitly made it not depend on the finger position, but the center of the dragged object, giving a much better experience.

This advantage might be specific to touch interfaces where your fingers obscure whatever you touch.
This attitude throws the baby out with the bathwater.

Client-side verification is Good, it saves bandwidth and reduces annoyance to the user. Client-side verification without also checking on the server is bad.

Given the example of a word game to be played on a phone. I would argue that client-side verification of valid words is vital.
Apache Lucene/Apache Solr 3.3 Release
Ask HN: Ipad & Appstore question
Can I get an iPad app certified or whatever is necessary from Apple's side so that it can easily be loaded onto ipads (can I do this directly or is it necessary to go through the app store?)

What's the best way to prevent random people from installing it? (I'd want only certain people to be able to install it - on non-jailbroken iPads).
Regarding why we dream, I've always thought that it's got something to do with exercising our right brain. We feed our left brain when we're awake, we feed our right brain when we're asleep ...

can anyone confirm or deny this ?
The title should probably read "Why relying only on client-side verification is bad".
I don't think the author is suggesting that doing client-side verification is a bad thing in itself.
What's the merge join doing anyway?
Is the video available somewhere?
Percept - Erlang Concurrency Profiling Tool
I'm subscribed to 8 of them :)

B&A is relevant because I'm not a iOS developer (though I do like coffee).
Validation client side is just a way to make user interaction faster. Nothing more, but quite useful, indeed.
Virginia Beach Restaurants
The Visitor's Center of Virginia Beach is located at the end of the interstate as you drive into the resort area. If you have any questions you will find answers at the Visitor's Center. Also, they've got a HUGE selection of brochures for dining, entertainment, activities more.
That's true, but meta-posts like this just exacerbate the problem. Perhaps the addition of a message to the existing post that was killed would be the best solution?
I flagged it for being completely off-topic and having a whiff of politics. I'm probably not the only one.
In this specific instance there is also validation by the other player. Hacking the game is obvious and the other party will refuse to pay.

In more competitive games like Starcraft you can't trust the client (maphack for example).
Sure, we can all poke fun at them for being stupid programmers. Multi-billion dollar company and they don't even know how to do server-side verification? LOL, we're so much better than they are!

But think about it for a moment. Assuming the ideal product would have both client + server verification, it's clearly less work to only do client-side verification. The product can be released quicker.

Maybe they intentionally forgo the server-side verification code until they actually get cheaters. Then they implement it before it begins to hurt their bottom line.

Because what if the game was an utter failure, and never got any users? How glad would you be that you spent all that time writing the server checks for every game action?
I'm a student here, and I'm not surprised. Their University network went from being very fast and restriction-free, to be a SafeConnect riddled disaster. In personally troubleshooting issues with game consoles, I discovered how it worked and various methods of avoiding identifying myself on the network and avoiding bandwidth limits.

I passed this information on to deaf ears. (Hell, I even chatted with a SafeConnect employee on reddit that assured me it was resolved. Everyone gets random disconnects every 5-10 minutes and tiny outages once an hour. Game consoles will stop working for days at a time without my work around).

Anyway, they also went with Microsoft for the email over Google. I'm biased, but whatever. But, I am not surprised at this decision. The business people made the decisions instead of the tech department. And to be honest, is it that bad. UNL could use the money and Office 365 really isn't bad. I hate running Windows 7 just for Office. And let's face it, Google Docs sucks.
While we're looking at other predictions of the future, here's another standout from a 1981 KRON broadcast which I'm sure you'll remember:

http://www.youtube.com/watch?v=5WCTn4FljUQ
Nah, passive aggressiveness with lack of communication is the way to go. Let the noobs lurk moar.
Still a long way until they match the perks of more traditional industries:
http://economicsnewspaper.com/policy/spain/the-insurer-munic...
Louis Vuitton Hats - Replica Louis Vuitton Hats on sale
This article is indeed very interesting. I've read somewhere that there's a more recent, extended version of it available via the ACM Digital Library.

For correctness proving, you may look for example in http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.101... . It is constrained to π-calculus though.
I think you might be happy to hear this, I'm a noob as you are and TIL that I'm "sponge learning" aswell! Thanks!
It's also not exactly the only way to cheat (low-tech solution: spend a day with your grandma, who is an absolute Scrabble wizard.)
That's probably what's in the authors mind, but not what's in the article. The author is not just suggesting that client side verification is bad in itself, but stating that position quite precisely.

"Why client-side verification is bad.."

(rather than the title you suggest)

"to my surprise discovered that it did client-side verification of the words"

(rather than "...that it didn't do server side verification")

However, in support of your position; in his opening paragraph, he does say "you can't rely on it to do authentication", rather than "you shouldn't use it to do authentication".
Function is not a separate data type in JavaScript, but they could probably list Object there (EcmaScript defines 6 types and 5 primitive values, I can't really find any definition of "primitive type")
"our desires become shaped over time by the process of thought and past experiences"

How does, for example, sexual arousal fit into that theory? Sure, it's a desire, but can you argue it's not an instinctive desire that evolution has given us for pretty obvious reasons?
whew, i thought it was just me
Surely this is just common sense at this point?
Your comment is a bit like commenting "am I the only one who only likes Android?" on every Apple story. In other words, it does not seem to convey any useful information related to BitCoin.
I'm probably too old anyway but Mustache Monday could get old on me real quick.
We have only one brain.
Yes absolutely. Programmers/devs often get way too wrapped in doing everything _right_. But doing it right takes time and money. Commercially it makes sense to get away with the bare minimum. The holes will only be an issue if the product actually takes off.
That was my original plan as well but comments are disabled on dead stories.
it is very annoying to have to duplicate validation logic though.
For those initially confused by their link to the personal finance service named Mint, I believe their intention was to link to the web analytics service also named Mint at http://haveamint.com
No. Just like any other open source software. It's also possible that people who download the apk from the Android Market Place are getting a backdoored version of the software.

This relies on trust.

Does anyone remember Paypal updating their iPhone app last year to do SSL certificate verification because up until that point it was trivially MITM'able?
Or they figured it out without a book.
it, definitely reduces my unknown unknowns
Unpatched WordPress Blogs Rife with Malware
This is a very good point. After all, it is just a game, not a banking application, and a pretty simple game at that.
wow, I suppose we shouldn't begin to talk about sql sanitation...
Voting is really required here.

There are many good StackOverflow (and other StackExchange sites) questions listing good books on certain subjects.

Other than that - It's a good idea.
The gap between most books and really good ones is HUGE.
Pokemon Game Coming To Android & iOS This Summer
> We've been failing to acknowledge that ever since, since it's considered classist/elitist to point out the problem.

That's what Marx was actually wishing for, i.e. more intensive work done by the machines equaling more free time for the laborers, who would use it to improve themselves etc.

Of course, he was aware of the fact that were the machines to be owned by a select few (the "capitalists") then the profits would go mostly their way, this is why he said that the "means of production" should be owned by the workers.
"It wasn't very hard to circumvent this, resulting in a version which accepts moves like the above one.."

I'm more curious as to how you go about circumventing this. I would imagine that it probably IS very hard.
Bedroom designs ideas
A stark design, simple and clean lines, an image of the future – these are the elements that bedroom design in the contemporary style depend on.
The only legitimate way to install apps is through the App Store, so you should check out the process – http://developer.apple.com/programs/ios/
If you want to do that, you'll have to also make it very easy to get an abortion. Unfortunately, due to the nature of political alliances, the people who wish to liberalize abortion and the people who wish to remove these sorts of subsidies often end up on opposite sides of the aisle.
his working demo takes you to his router, with the password prefilled. FAIL
I have never seen so much emphasis on the 'unstable' aspect of a software release.

eg http://twitter.com/#!/search/nodejs%20unstable

Though I know about the even/odd thing, it seems rather damaging to the platform to be announcing 'unstable' seemingly 'major' releases, don't you think? Why not Alpha? or Beta? or some other common convention? Ugh.
MailChimp is fantastic. I just wish their newsletter composer was more like the MadMimi.com guys. Is just SO easy to use.
Custom Software Application Development
regarding n.2 http://en.wikipedia.org/wiki/Kolmogorov_complexity defines formally the concept of minimal encoding of a message
How to start unit testing
Shortmail
And Ive was a mostly invisible, disenfranchised employee then.
like i said just find some launch pages or home pages you like and copy it. I imagine there are other similar services you can find that do a much better job of explaining a similar product than what you have.
You need one Senior Developer/Architect/Bad-Ass Technical Person on your team. Preferably, you need somebody that has experience dealing with $5/hr offshore developers (i.e. they have learned how to effectively use them on somebody else's dime). $5/hr sounds cheap until it takes 4 weeks to deliver a crappy deliverable that doesn't work, then you start feeling just how expensive $5/hr can be. :)

That technical person can source qualified offshore talent, bundle up both design and development projects to outsource, do the heavy lifting programming that just can't be done via outsourcing and they will be able to setup your infrastructure.

Without that one technical person on your team, there's virtually no chance you'll be able to effectively use an offshore developer.

To find this person, find some local companies with at least 100 employees that build a web-based product. Call up pretending to be a manager for an offshore development firm and speak with their Director of Development or CTO. Your goal is to find a local company that currently outsources their development. Then find who their senior developers/architects are and poach them. They will be eager to join a start-up, they won't realize how valuable they are and they'll know how to deal with outsourcing projects.
Effective Network Bandwidth Visualization
It could very well be just block headers, to be honest I'm not sure (didn't realize the desktop version was that big). We're using the bitcoinj library and contributing back some patches along the way. Mike Hearn at Google wrote the blockstorage and deserves a ton of credit for it: http://code.google.com/p/bitcoinj/
The author wrote "A common mistake is the web site that relies on javascript". I think the key word is "rely". You either rely on something or you don't. It's not a partial measure.
But you can't trust client-side validation, unless you run the client in a DRM container (client then can just sign the request and you can assume that it executed in a secure memory, unaltered).
If you are at the bottom of the American labor heap, you
have never faced competition from machines, globalization,
and immigration like you have now.

That's begging the central question. The biggest leaps were made long ago. The invention of electricity, the steam engine and the combustion engine, those enabled automation on a scale that was truly never seen before. Then there was slavery: that's competition from globalization/immigration if there ever was. China, India and the other low wage countries are getting higher standards of living fast, so their wages go up and their competitiveness down.

I strongly question the assertion that we are currently losing lowskilled jobs to automation or competition at a faster pace than in the past.
Just logged off MailChimp after scheduling our next newsletter send.

This article is particularly relevant because of my business - our tagline is 'Love Business', and we're best known in many places for the packs of coloured pens we use with our clients (http://www.shirlawsonline.com/blogs/136-the-big-picture-show...). Here's hoping I'm one of the random clients sent a colouring book, since I already carry the equipment to colour it in!
It is save to say that in no point in time have so many people worked so little while being so rich. That contradicts that automation creates as many jobs as it destroys.

We are not talking about a 'point' where the 40 hour week stops. It is a gradual decline in the amount of human labor, which has been going on for centuries. Automation means just that.

Thinking that work can forever shift towards other areas is stated on the assumptions that:
1. Not everything can be automated.
2. Human need will always grow to accommodate supply.

Now more than ever, you should question nr. 1. And in the areas that prove difficult to automate (e.g. education, law, healthcare, design..) there really is only so much work. (Except for law, maybe.)

Regarding the second assumption, when I look at highly educated people (which in my eyes, represent what in the future modal educated people will be like), they recognize desire as something that should be limited. They know that more money does not make you happier. Some even find a lot of joy in living simple and frugal.
That was my original plan as well but I'm trying to provide some constructive criticism here. Since olalonde's been on HN for almost 2 years, I thought he deserved at least that much. If his account were less than a year old, I would've just passive-aggressively ignored his reply too ;)

In all seriousness, there is value in learning by observing vis-a-vis learning by being told. Things tend to stick better and for longer when you have to observe them yourself.
Author's comment on his site:

"It's not wrong to use client-side methods to do initial validation, but it's wrong to trust that validation on the server side."
14 HTML5 Game Developers to Follow
Spirits possess people. "Filled with the Holy Spirit" means you get puppeted. A psuedo-random number sequence is not the Holy Spirit. Stopping a stop-watch without looking or randomly cracking-open a book or flipping a coin is the Holy Spirit. "The lot cast in the lap is entirely the Lord."

God says *
faced modesty answering continency commission vileness
experience baggage challenged spots reverently rightly
affects prophet game attuned shelter meantime statue drowsy
deridedst top Corrected unhappiness lively encompasseth
Excellently milder heavy opening genius Verity scarce
defile Seven burden sucking down gravity publicly equinoxes
stipend oil share wavering lastly disquiet endeavour emerge
https://plus.google.com/102021670972797895172/

Though you don't know me that well.
When this was written the Internet hadn't really been developed very far and the report cited is talking about videotex services (like France's Minitel or the UK's Prestel). http://en.wikipedia.org/wiki/Videotex

These services tended to be centralized and look nothing like the current Internet (although France's Minitel network did use packet switching and some service providers ran their own data nodes).

I remember really well playing with Prestel and Minitel in the early 1980s using acoustic couplers and dedicated terminals. The feeling associated with the sudden access to unlimited information at incredible speeds (1200/75 baud) was really amazing (even just being able to look people's phone numbers up on white pages). Wikipedia has a nice example of French Minitel terminal from the year this report was written: http://en.wikipedia.org/wiki/File:Minitel1.jpg

What's most interesting is that there wasn't much 'future' in this report given that France already had a functioning viewdata system at that time and it was clear from the services that were being offered that the things mentioned in this report were actually available or easy extrapolations.

Also notable was that viewtex services used a subscriber pays model where access was metered by the minute and added to the phone bill. On Minitel some services were free (except for the per minute charge), e.g. white pages, other were premium (access to special databases, for example) and some were very expensive (access to Le Minitel Rose where pornographic chat etc. was available).

As William Gibson might have said: the future was already here, it just wasn't evenly distributed yet.
Create a Game Character with HTML5 and JavaScript
And as long as philosopher will refuse to dig a bit into mathematics or computer science for answers to questions they call "philosophical", I'll have a hard time being interested by philosophy.
Is a debugger the mother of all evil?
Wow this video is from a different millennium
This is acutally kinda cool.
The homepage (shortmail.com) doesn't really do it justice though. You're explaining HOW it works, but you don't really mention any reasons why I would need it, or what makes it more useful than say, normal email.

You also need to clarify it's realtionship with normal email , as in, if I send an email to my short mail address to my normal email will it get there etc.

The actual messaging UI look very nice, and clean. It's not confusing and is nicely designed. Perhaps a little bit of work but it's great.

Good luck!
What I find interesting is the nature of the perks being offered. So while a big established business might offer 401K or medical and so on (and to be fair, it's probable that startups offer some of that too) the focus seems to be on perks that "keep you at work".

Free meals? Great, I don't have to go home just because I'm hungry. Fun at work? Great I don't need to go home, or go out, to meet my friends. Place to nap at work? Shower? Great - I can spend more time in the office.

The work-hard, play-hard mentality, appeals enormously to people who have no real reason to ever leave work. If all your daily chores are taken care off (free dry-cleaning, free food), and if your social needs are met at work, then you'll naturally spend more time there.

This life-style appeals less to me, 'cause I have a wife and kids to go home to, and a social life outside the office, and hobbies, and fixing-the-roof-when-it-leaks and stuff like that. But when I was 22 I had none of those things, and I would have thrown myself at an environment like this. Does it honestly matter if I'm making 10K or 20K a year less than I _could_ when I get all my (paltry) living expenses paid for? And the bragging rights over my peers are worth a LOT.

Is it a bubble? Well, it's a sign of supply and demand reaching the place where demand outstrips supply. Demand for employees, and also demand for investment-opportunities (by those with cash). That will inflate salaries, and lead to creative (read "fun") work environments.

Enjoy the good times, because as sure as nuts are nuts, the wheel will turn and the down-times will come again. Party hard now, but save some nuts too for when the supply overtakes demand again.
'No we don't free chunks right away (except with the new SHRINK GC call). They survive 3 GCs because of allocation heavy workloads. Freeing and allocating right away hurts benchmark performance'

This is the real problem then - benchmark score vs real-world useabilty.
I know it's not massively important given the subject matter of the website, but you should still sanitize your inputs:

http://bestintrobook.com/books/%3C/title%3E%3Cscript%3Ealert...
Your phone number and email address were never meant to be secret. That only provides security by obscurity and leads to exactly this problem - you, a user, being upset when the security you were led to expect doesn't align with reality.

If you wish to not receive certain communications the way to do this is by screening incoming connections/contents. This works, unlike secrets.

Now, understanding that what you wanted to do (keep an email address secret) is a bad idea - it won't do what you want, you can see why those who understand don't care about this "privacy" - it isn't.

Claiming to authorize your email address being shared with CompanyX but not CompanyY is like saying "Here's my phone number, I'm only lettingVerizon subscribers know it, to keep AT&T from snooping on which of their users calls me." It's just nonsensical.
Exclusive Villas
Flights to Denpasar from Heathrow
This could be a huge contender for Jive, Chatter, etc.
what if you sever your corpus callosum?
Pandora jewelry,Pandora Michigan
Pandora jewelry Michigan-If you are looking for wedding rings, Rottermond offers you a huge selection of unique design in wedding rings, engagement rings, tycoon rings, platinum rings, bridal rings and men’s white gold rings.
You seem to imply in other comments that you think it was killed by mods. I didn't see it, but judging by other comments here it seems plausible that it was flagged by ordinary readers often enough and early enough to get automatically killed.

In particular, if it's a repeat story (even if from a different source) and it's not "deeply interesting" (specifically to the hacker or entrepreneur mentality) then it's likely to get flagged.

And looking at the article suggested in another comment as being the same story, I can't see what's "deeply interesting" about it. Having read it, I don't think I've learned anything interesting at all.

Can you explain why you think it's interesting?