skysight-inc/HackerNews huggingface dataset:
> Why do you think the other method does not have the same weaknesses?

Trivially: JavaScript encryption is vulnerable to MITM attacks that SSL is not. The only solution to this is to deliver your JS over SSL, but browsers will complain if you try to mix https and non-https elements in a page, and you might as well serve the whole page over https anyway. If you do that, then you still don't need JavaScript. (As one example; I know there are others but I just came in from the yard and my brain is a little melty right now.)

> As far security is concerned, the two are equally (in)secure.

This is a statement which flies in the face of the recommendations of some very smart people in the security field, some of whom have written extensive posts which have been linked to in this thread.

Even if I didn't (barely) know enough to evaluate your claims on my own, I could conclude that you might be right ... but I wouldn't bet on it.

Look, this subject has been discussed to death and nauseum, including here on HN. There have been extensive essays written about it. If you don't want to believe me, I'm OK with that. Go read their stuff, and see if it makes more sense to you.

If, after reading all of that, you still think you have some new insight in the field that everyone else has overlooked, and you can show why JavaScript is "equally (in)secure" to SSL + server-side encryption, then make your own blog post or essay about it. Make it good and in-depth, link to it from HN, tell everyone about it. I'd be happy to read it.

Otherwise you and I are just going in circles and not getting anywhere.
I've seen type #1 managers alienate top notch developers due to a lack of being able take constructive criticism, and in general not knowing jack about software development. I've seen fantastic people who were canned due to minor technical disagreements with management while poor performers were left around to cause damage in addition to poisoning moral. I've seen people get the "we expect you to be doing X, Y, and Z at your level, none of which you are" talk, and when they those folks leave, everything falls apart, because either the expectations were bogus, or it really was a personal issue with the boss and the person in question. I've seen junior developers (with talent and potential) languish because they were given zero guidance, yet expected to perform at the level of a senior dev by a type #1 manager without any expectations being presented.

I really don't think you can group managers into these two distinct camps. Maybe you need to have an axis or two extra for rating things like technical competence and interpersonal skills...
This article reminded me of the larger issue: why do so many modern, national governments seem incapable or unwilling to ever operate with a balanced budget? Why do deficits and debt seem to be the norm? Why all the excuses? Is it a kind of stupidity brought about by having a large group of people each pulling in different directions? Or is it by design and due to malevolent intent? Just curious what everyone thinks.
El glutation, la preclamsia, eclamsia y el embarazo
That's a great idea for an app! The only problem is that I don't have a cell phone. :P Is there an Android version too, or is it just for iPhone?
What every programmer should know about time
Can a workplace block Google+?
There must be millions of people who work in businesses who block Facebook.

Because Google's social network is built on top of their productivity products, will this open up a social network for these people?
A Beginner's Thoughts on ZeroMQ
In my opinion the EU needs to trace the contagion effect and limit its effects.
It can do this by offering to take over all credit default swaps on Greece's bonds, no sane economic actor is going to refuse that when a default is imminent.
What happens then is that the ECB absorbs all losses from a Greece default, blowing a large hole in its balance sheet.
However the ECB can just print itself back into solvency.

The aftermath will be a period of high inflation.
Very nice. I did something very similar for an RPC server I wrote, but it's less general and relies on the ORM (SQLAlchemy). Essentially, it turns database id's into the mapped objects, checks the objects against the constraints declared as arguments to the decorator (much like this module), and then passes the mapped objects in to the original function in place of the id. It's proven to be a very useful pattern, but I'll probably use this library instead for future projects.
If you use Anki, you can search through public decks and download them for your own individual use. I use Anki for studying Japanese although so far I've just been making my own decks.
The Promise of Games in Lifelong Learning
We're getting off-topic, but I don't blame him. A lot of comments are just really bad, and he doesn't want to deal with them.
Make Your Life as a PHP Developer Twice as Easy With phpsh
Elected politicians have to aim for the short-term goal of getting re-elected. Money, and both monetary and fiscal policy, are based on collective hallucinations that people rarely think clearly about. No politician wants to be seen idle, and killing projects makes enemies, so they make new projects and spend more money.

As Bob Kerry once pointed out, sometimes it can be truly heroic to simply do nothing.
Bit coin java web browser mining
has anyone heard of it? bitcoinplus
if this pool is useful (please donate)

177nkdh8kCH2YWjikMBdivnRZZM8t2Jt98
I know, but there's so much junk! A HN collection would be awesome.
Can someone explain the IBM panel (the one about the fridge) please? I have an inkling as to what they are referring to, but am not sure if it's my personal bias mis-interpreting the joke.
Tell a homeowner that you need that property more than they do because they have another home and how it's more fair that you get it.

Your real estate analogy is a flawed one, especially in today's domain environment. A more accurate analogy would be an overpopulation of people (financially stable mind you) forced to live in cardboard boxes due to real estate investors buying up neighborhoods of good homes, bumping up their prices, and not returning phone calls. Plus, real estate investors in the real world at least try to maintain their property and improve it through actual work. Domainers just park pages.

May I ask why I have to use my capital for YOUR benefit? Since it's mine, I can do whatever I want with it. That's the nature of capitalism and freedom. Just because you don't like or even agree with what I do doesn't mean the system is broken.

Just because something is a product of capitalism doesn't mean it can't be broken by selfish extremists. How do you think we got in this recent financial fiasco? One word, greed. Sometimes there needs to certain measures of regulation to ensure individuals are not taking advantage of the system at the expense of others. That is all I'm saying. There comes a point when a foot has to be put down after a certain threshold, especially when the majority of people in a system are being hurt by these extremists.
Don't switch from uranium. Switch from coal.
I think you're mixing up multiple things.

- HTTP is a protocol.

- HTML is a markup lanaguage.

- REST is an architectural model for building web services.

They are all different.

> HTTP is not a programming language..
> HTTP statuses
> REST is stateless

HTTP is a protocol. A protocol by definition allows certain constructs and prohibits others. There are books available for modeling real-world problems with REST, such as RESTful web services cookbook. I'd suggest going through them, before declaring REST is impractical.

>I'm not sure if I can do it pragmatically in HTTP without getting yelled at

You can certainly use HTTP as you like it, just please don't call it RESTful unless it actually is. A lot of web APIs are not RESTful, nothing wrong with that.

> don't tell me HTTP is the best we can do..

Unfortunately it is for now. Everybody is free to invent their own protocol, write production quality servers to implement it, and get everybody else to adopt it.
1) HTML isn't English, it just has some similar sounding tokens. You can't assume the semantics are the same.

2) Well, there's HTTP and there's REST, they're related but no the same. HTTP is a full protocol, completely defined; you can't add more verbs, period.

REST is an architectural style. It has a series of constraints, and it tells you that if your system architecture complies to them, it'll have some useful properties, like low coupling and such.
HTTP is just an example of a RESTful architecture.

Now, if you're designing an architecture and you want to follow REST, you can choose the verbs you want, but these should be generalist and not tied to specific names.
This provides an Uniform Interface, which simplifies and decouples the the architecture.

3) See above. HTTP statuses are fixed, you can't return other stuff. If you're designing your own architecture, you can use whatever you want. Hell, you can return different pictures of kitties for each status if you want to.

4) As the Zen of Python states, practicality beats purity. But you should be aware that by adding state to the connection, you'll lose some advantages.
Let's say the user is performing a multiple step action, and the server he's using breaks.
If the server was holding the state, now the user has lost all the work and he'll be pissed at you. If on the other hand, the state was saved by either the client, or more "RESTfully", by the mere fact that he was on a specific URL, than any other server can pick up where the other left without annoying the user.

5) Sure. We just need to rewrite all the browsers and servers worldwide, including a bunch of embedded ones that can't be reflashed. It's possible...
Thanks! That's a good point, I'm going to have to do that (and perhaps add an option to fade it in gradually.)
not the one i was thinking of, but i found this: http://news.ycombinator.com/item?id=1386329
Han Ahn Soon Autumn/Winter 2011-12, Tokyo
Is there any personal punishment for leaders ruining a country? There would be if the Greek ministers were committing war crimes, or if they were driving without due care and attention. Why not for "running a country without due care"?
More Likely You'll Survive Plane Crash Or Win Lottery Than Click A Banner Ad
Not quite. This is a quine that relays through eleven languages before finally reproducing itself, not a quine that works in eleven languages. There's an actual algorithm for doing it in some journal somewhere, but it's still pretty impressive.
"...if you fail you can learn from your error and understand the problem better the next time."

Or just hire someone who understand the problem while you understand the goal :-)
A quick look through Zed's comment history tells me that the % of posts he has made that could fit your description is roughly 1%.

So Im going to go with you having a selection bias.

OTOH I do appreciate your vigorous defense of the HN community, too many people just dont care about implied insults to their self identified tribal group.

Go llambda!
Personally, I really like the whole coffeescript/sass/haml trio. (I really don't like SCSS).

It drastically reduces the amount of errors in your code, at the expense of a syntax that's a little different.
The idea that it's unfair to take other people's ideas and works and use them as you like without their permission predates the idea of copyright.
Good post. It had to be said.
http://www.clipperz.com/
I'd be happy to help beta test for iOS. Email in profile.
I have used it a bit on a reasonably high traffic site (but if you do this, be careful - make sure its a site where people don't mind) and honestly, it wasn't really worthwhile. The payouts are much too small. I may be wrong, but Bitcoinplus seems to share equally between all miners, rather than proportional to the CPU power put in. At least, a similar number of mhash/s in a normal pool gave me much higher payouts.
Your example #1 is a destructive narcissist. #2 is a Laissez-faire type in an inappropriate situation.

Corporate cultures tend to produce explicit or cultural incentives that encourage particular leadership styles. Government is a great example -- senior leadership in the bureaucracy tends to attract various types of narcissists (ie political appointees). Mid-level managers tend to be incented to avoid risk at any cost. (ie. don't rock the boat)
They're for different things. Blowfish is a block cipher. Bcrypt is a password hashing function build on top of a modified version of Blowfish.

If you want to store hashed passwords, Bcrypt is a Right Way to do it. Blowfish doesn't really get much use anymore.
Though I love CoffeeScript, I feel it's very important to understand how JavaScript works. It's a great language, but only if you understand what is going on, and why you do have to use hasOwnProperty.
I'll use anything that fixes the way javascript handles scoping. Take this gem, for example:

<html>
<body>
<ul>
<li>First</li>
<li>Second</li>
<li>Third</li>
<li>Fourth</li>
</ul>
</body>

<script type="text/javascript">
els = document.getElementsByTagName('li');
for(i=0; i < els.length; i++){
els[i].addEventListener('click', function(){alert(i);}, false);
}
</script>
</html>
yes i'm thinking more pragmatically. From an API perspective the header is part of the request but given that the human-readability of urls is a feature of http, it just somehow feels wrong to me to modify the response based on a request header.
But to access that JSON document with the URI, you had to know the URI already (in this case, by following the Location header).

It's like having a link on a webpage to itself, what's the point? I can just refresh.
No no no no.. you don't want to do subcritical particle accelerator reactors. Well, you don't want solid fuel reactors, solid fuel has the same cooling issues as standard uranium, since it's the fission product breakdown that caused the Fukushima accidents (not an initial nuclear excursion, like Chernobyl).

Molten salt can be passively cooled (much better thermal conductivity) and can be moved from core to containment by gravity. Also it expands when its hot, which slows the reaction, and it's chemically stable and doesn't crack like uranium fuel pellets.
Yeah, you've hit on what really appeals to me about those three and others like them. They shift focus to what's really important in each case.

In HTML I want to focus on document structure, not closing my tags. In CSS I want to focus on style and visual consistency, not nesting. In Javascript I want to focus on application behavior, not semicolons.
That's a non sequitur. Copyright does not grant you a living; it grants you the opportunity for one.

Few writers make a living from writing, not because they are denied the opportunity, but because not enough people are willing to pay for it, or even interested in it! The same is true with other artists.
Adam D'Angelo's (former FaceBook CTO) TopCoder profile:

dangelo
Algorithm Rating: 2351
Total Earnings: $3,082.50
School: California Institute of Technology
http://www.topcoder.com/tc?module=MemberProfile&cr=26098...
Quick point of clarification. The post says:

> As it turns out that isn’t entirely true since coffeescript
> is a class based object oriented language and javascript is
> prototype based. This was actually a mark against
> coffeescript for me since part of my desire to learn
> javascript was to dally in prototype based OOP.

CoffeeScript is prototype based to the precise same extent that JavaScript is. The "class" keyword is just sugar for JavaScript's constructor function + prototype chain combination. To mangle Shakespeare:

What's in a name? That which we call a class by any other name would smell as sweet.

Call it a prototype if you like -- it's the same thing in code.
Do semicolons really distract people from thinking about the behaviour of their code? Really? Would these people like their novels and articles decompiled so that every sentence is on a new line, and thus periods wouldn't distract them so much from the meaning of the text? Or is it just transparent after a while, as the way you end something?
Illustrated Calculus Textbook
You might also like LESS.
Good eye :) The web version lacks a lot of optimizations we were able to add on the client though. If you're excited to start using the thing now, shoot me an email at support [at] splitterbug.com and let me know what device flavor you prefer (iPhone/Android). I'll get you set up.
You're describing a bully.

As long as compensation is enough to afford whatever you need to live, bullying is generally the worst motivator. Employees learn quickly that they can produce just enough to not get fired -- then they do so.
Javascript has a few gotchas like this one. These are annoying for people new to the language but after knowing they exist they're easily avoided.
I guess any entrepreneur already thought about building that application once in their life. I myself thought of it a lot of time.. but always dismissed it thinking that it wasn't a monetizable business and only a fun hack project over a weedkend.

However, these guys seemed to have proved me wrong as they're in YC while my "serious business ideas" were rejected. Or, maybe YC decided to invest mainly for the team (Both founder were "Product manager at Google") ? Still, I'll follow their path and I hope they'll be successful :)
The one thing to take away from this profile? He figured out how to improve his rating fairly quickly. This U shape is fairly common, but (especially back then), I don't think it would be that common to get on a stable upward trend within 2 months
I'm working on it. I did mention that I'm learning Javascript at the same time. I should add Crockford's JavaScript: The Good Parts to my coffeescript resources list. Can you link me to an article explaining hasOwnProperty?
well, in the android market apps tend to be on the cheaper side. You rarely see app for more than $5, so compared to the rest of the market, the price might seem high.
From one of the author's responses to comments:

"It’s that insurance is fundamentally zero-sum — the only transaction is money going back and forth. When you buy a refrigerator, say, your value for it is huge. (If refrigerators cost $50k you’d probably suck it up and buy one — how the hell are you going to live without a refrigerator?) So you come out way ahead when you get it for [I haven’t actually the faintest clue what a refrigerator costs]. And Maytag or whoever does too. Win-win! Insurance is fundamentally either win-lose or lose-win."

I don't think that's true. The consumer also gains a reduction in the variance of his or her expected outcomes. This is a good for people who have diminishing marginal utilities of wealth (most of us).

There're two components to the money going back and forth: the actual costs of the claims, and the insurance company's margin. The costs of the claims are like Maytag's production costs.

We buy the refrigerator if we value refrigeration more than the margin we give Maytag. Similarly, we buy insurance if we value the reduction in variance more than the margin we give the insurance company.

Whether or not the price is worth the value we get from the service is a different question; but it is not fundamentally win/lose.
iiuc, two resources can contain the same value, (http://www.ics.uci.edu/~fielding/pubs/dissertation/rest_arch...) so you're not constrained by the number of identifiers with which you can reference a single entity. furthermore, it's debatable whether the versioned identifier hierarchy adheres to the principles of HATEOAS and discoverability, so practicality probably rules when implementing such an API.
That may be true, but give the guy a little credit, he created a service that has 750 million active users. How many other people can say that?
I'm guessing someone who prefers SASS over SCSS is going to also prefer SASS over LESS.
And in particular, removing 100% of the terms doesn't mean much either, since, for example, the series 1/p for all primes does not converge, or 1/floor(n log n). You need to remove them harder than that.
Using mobile devices to facilitate a shared buying experience with friends is huge. This app is a first step into this wide open and potentially massively profitable space.

Discounting the future of the business from a landing page describing its very first private beta is not only mean-spirited but also shortsighted.
CoffeeScript has some nice benefits but in my opinion not having to deal close curly braces or add semi colons hardly qualifies as a reason to use one language over another.
Nice! Where's the rest?
They might look at sequences of searches, i.e. "pdf" is followed by "pdf w4" enough that it ranks more highly. I got similar results; I thought it was because I read some R articles recently and work in HR...
We're both very big Billmonk fans, but unfortunately the application hasn't seen very much improvement since it was acquired a few years ago. Splitterbug helps you solve the same problem using some very cool tech that Billmonk didn't have access to (native iPhone apps/Android/Facebook graph/etc).

Our primary focus right now is building an app solves the problem of splitting bills and tracking debts. We've got a few ideas about monetization, but if we can't build a useful app first, that discussion is moot.
Does anybody know how an individual investor could actually buy one of these?
Still, if you made a u233 device (and I'm thinking it would have to be a dirty bomb, an explosive seems unfeasible), it would difficult to get it to a target since it's so easy to spot the gamma rays.

u235 is still the way to go, since you can just hide it in a lead pipe in a crate of bananas.
แทงบอลออนไลน์ แทงฟุตบอล สมัครแทงบอล พนันบอล ที่นี่
Both an Android and an iPhone versions are looking for beta testers :)
That rating is pretty low. Your average guy that gets hired at Google or Facebook is >1500 in rating probably.
It really is a good read, I need to digest it, but my initial reaction is that some of this isn't pragmatic. Versions in URLs makes for dead-simple routing in any framework. Also, many APIs are used in a way where you know consumers will create a resource without requesting it (or at least, not within the same session). So why return any location information (whether in a header or in the body)?
Is the situation dramatically different in the EU than in the US?

Here in the US, we are not suffering from a crisis of demand at all. We are suffering from structural unemployment - demand and production have both recovered, but people remain unemployed.

http://news.ycombinator.com/item?id=2240468

I'd be very curious to see data indicating that the EU is in a different situation.
The biggest problem? I'd say the biggest problem is browsers not fully implementing HTTP's REST support. Instead of having a different API for every freakin' website on the planet, we could use HTTP and actually implement GET, PUT, POST, DELETE.

It's sad that it didn't happen in XHTML2, and also removed from HTML5.
Maybe some distant galaxies are made completely of antimatter, and they contain civilizations like ours, contemplating why the big bang produced more antimatter than matter.
That's certainly true, and I apologize if I made it seem like I was encouraging type #1, in particular the "tends to micro-manage, frequently overrules consensus with his own views." Micro-managing your reports is a sign that you're either working on the wrong problems, your organization has span of control issues (i.e. you only have three directs), or you've got too many extremely junior/new-college hires who aren't yet capable of independent work. And if you need to overrule consensus, you failed to be clear about what success would be measured against when you delegated. These are pretty basic issues, but shops can certainly get them wrong.

I guess, if nothing else, I'd argue that managers need training. I'm of course biased, but the training they provided at MSFT, particularly at the manager-of-managers level, was just fantastic. I only wish it had been available to people lower on the hierarchy so they could have learned about these mistakes as their scope grew and not after it had!