skysight-inc/HackerNews huggingface dataset:
Presumably the ASP could be intercepted via MITM, when it's being passed to the application for which it was generated.
Sun - simple weather app (web based for iOS)
With this title I was really expecting some kind of study, not an anecdote from one person.
In the US, the AR15 used to be (for ten years) an assault weapon. It still is in some states.

If you ask combat veterans of OIF/OEF how often they use anything other than semi auto on issued M4/M16 rifles, you'll find the frequency is almost zero.
It's more in the links. You're welcome.
Verified. Send a request to their twitter @backstitchapp
Sure, I would be happy to explain.

> If you are using the data from the various APIs to render static pages, why do you need the local cache of the JSON data?

Because the data that I am displaying for each movie is not available from any single source. streamJoy is the abstraction layer tying together the disparate data sources.

Mongo was the right choice because instead of having to map out postgres schema, I could just store the entire JSON response as a dict.

What I have learned from all of this is that API's are not always reliable. The information changes, you don't always know what you are going to get back.

Mongo just made this early process where I didn't know what I was going to get much more fault tolerant. And, no schema mapping.

> And if you've got a local cache of all the JSON data, why render static pages rather than serve dynamic pages that reference the DB of cached data?

Rendering static pages allow you to use S3 or nginx to serve your html. For a one man operation like I am running, S3 is manna from heaven for scaling the serving of html files.

I'm using nginx right now only because I haven't taken the time to use S3, but S3 is the smarter choice here.

My goal with this was to have the smallest possible dynamic server footprint as possible.

The other reason for caching json data is I run analysis on the db items, even though I haven't published any of those features yet.

By having my own copy of the data, I can run a process on 92000 items in 6 minutes instead of taking a day due to API rate limits.
I still have 1 invite so if you give me your email I'll give it to you.
This is cool. IMO, most comments are pretty superfluous, but I think this would be awesome for setting up visual groupings of related code sections.
Could anyone explain to me what's the point of Google's two-factor authentication? I mean, before that, I used to have one password I had to guard carefully, and now I have ten passwords I have to guard carefully, and the one I enter most often requires me to additionally type some digits I have to read from my smartphone? What plausible attack scenario does two-factor authentication protect me from?
Would you make the same argument about cigarettes? Heroin?
gizmo says what I meant, indeed. In the UK, the police have been keeping a DNA database of everyone ever arrested for anything; they run samples through it from crime scenes. The ECHR has (I think) ruled that this is illegal, because of this sort of error, but the Home Office refuses to listen to European Courts, or indeed mathematics, when it comes to crime.
Jedi.el - Python auto-completion for Emacs
I can't really think of a good example of a tool that is needed to crowdfund a project in a specific industry.. but this is the best argument I've heard and I can imagine something like this actually actually adding some value.
I'll be happy to follow if you invite me :) Email in profile.
Learning How To Learn Programming
indeed, this was my point. I didn't even contemplate trying it when I was called for jury duty.
Very interesting!

It remembers me of when I used telnet to play MUD and MUSH games :) (how I miss those! Specially coding for MUSHes that use a variant of LISP! Functional Programming is very fun!)
So this starts a new business model: app.net apps and their paid users prostituting for customers/followers with an invite?
Having gone through a handful of whiteboard-style interviews recently, I found that the opposite is true. If you can't remember the interface for hash tables in Java, for example, they usually let you make one up that you think makes sense. If you can't remember that "=" means assignment or that for loops need curly braces around them, you'll be in trouble, of course, but they'll help you with the details.

When it comes to REPL and the code-run-debug cycle, they usually ask you to explain how to code would run to them step-by-step, which simulates having a computer run it. They do the same and pipe up if you miss something. So it's not the same as running the code, but it's similar enough and it also shows how well you understand the code you're writing.

I do think that the major flaw of whiteboard interviews is that it does not show a programmer's ability to organize large amounts of code. In most programming, you won't be solving logic puzzles as much as organizing several parts and sticking them together. The organization is far more important in the long run than the individual code itself, especially since the code will likely be changed later on (which is made easier if it is well organized).
I would expect you have some data that substantiates that assertion?
The comments in this thread, specifically the questions about deaf readers prompted me to Google "deaf readers subvocalization", which lead me to the book "The Psychology of Reading" by Keith Rayner and Alexander Pollatsek.

I'll excerpt a few paragraphs.

[Page 191 - http://goo.gl/VLaaM]

Electromyographic Recording (EMG) records have been widely used to study the role of subvocalization in reading. [...] Generally, EMGs are also recorded from some other part of the body, such as the forearm, where muscle activity should have no relevance for reading. In fact, normal skilled readers show little forearm activity during reading, while EMG activity in the speech tract increases markedly during reading in comparison to the baseline condition (where the subject sits quietly). In contrast, deaf readers show a considerable amount of forearm activity during reading (we shall see the reason for that later in this chapter).

[Page 211 - http://goo.gl/R3NPT]

That profoundly deaf people can read at all is sometimes taken as evidence that speech recoding in normal readers is optional. However, as we have seen, they do not read very well, and the best available evidence indicates that when reading English text deaf readers recode the printed information into their native language (ASL) for comprehension purposes. Since they have not experienced speech sounds, recoding into a phonological code is precluded from deaf readers. Instead, the information is recoded into a manual form to aid comprehension. The poor reading of deaf people is thus probably due in part to inner speech being a more efficient system of recoding than overt manual gestures.

Readers of logographic systems such as Chinese can probably access the meaning of many printed characters directly from the visual representation. However, associations between the printed word and the appropriate pronunciation are activated during reading and appear to be important in comprehending text.
Such thinking can only take you up to a certain level of excellence. Having admired some c++ standard committee members in action, I can say that if they had to google every harder bit, their skills would've been mediocre.

If you want to be one of the best, you need to have a local data cache instead of fetching knowledge from a remote resource.
add me to the list chadvscira [at] gmail
Phone-first is still pretty much the choice in many places. It's frustrating how many businesses in Eastern Europe, for example, fail to have any other means of contacting them or first-hand sources of information about them.
If you're in the US and hosting user uploaded content it would be wise to have a DMCA notice and a designated agent. See the DMCA link at the bottom of this page for an example.
If I want to hack your account, it's not enough to steal your password, I also need to steal your smartphone to generate the tokens.

edit: I was referring to the Google Authenticator App, not sending the codes over SMS. That's imho less secure.
The really funny situation regarding the phone is that Google makes you do this when logging in on your phone too. So if you go buy a new phone, in order to log in you will have to undergo a few failed attempts, use their web log in form, which SMSs a password to the very same device you're using in the first place.
I agree, we do the whiteboarding but what I really care about is how well you can take a problem and make a solution (that's a big part of my application process http://www.pagerduty.com/jobs/engineering/growth-and-interna... )
I said it then, I'll say it again -- The solution is obvious: allow per-password permissions.

For instance, if I make an app-specific password to sync my bookmarks, that password shouldn't provide access to my Gmail or my settings. Why isn't this already a feature?
There's nothing wrong with acknowledging the base motivations that drive people so long as clear ethical decision procedures are maintained. The typical neurosurgeons relishes pressure much more than the average human, and this is a contributor to them entering the specialty and to them being successful at it. (My father is a neurosurgeon.) Those kind of personality traits should be harnessed for good rather than eliminated.

This isn't to say that a doctor's decisions can't be colored. Evidence-backed, community accepted guidelines are very desirable, as are second opinions. But once the decision is made that someone needs surgery, I would want a guy who's excited to operate.
Thats exactly how I feel as well. I would pay for a social network if it created a new/better experience for me, but App.net is a twitter clone. What can I do on app.net that I cant do on twitter? What part of the experience do they beat Twitter on?

App.net also hasnt been successful enough to attract the majority of people I follow on Twitter. So their value proposition for me looks like this: Im paying for something that looks, functions, and feels like Twitter without the people to follow to create that content.
From what I've read, the M16 wasn't that popular in early Vietnam use -- it might have been preferred to the M14 for size, but the AK-47 (AKM or Chinese equivalent, usually) of the enemy was more highly regarded than either. More reliable mechanically, and still more lethal (and less likely to be deflected by light cover) than the M16's 55gr bullet.
I see. Well I'd differentiate between a researcher and a clinician. The best researcher may not be the doctor you want diagnosing and treating you.
You still need to declare variables before using them in an expression, though. I wish more languages would adopt the "where" syntax that Haskell and Miranda have. It lets you do things like:

y = m*x + b
where
m = calculateSlope()
b = getYIntercept()

I think this fits the literate programming style well.
The loop hole seems to require the plain text ASP though.
if anyone has an invite left, kmlymi (at) gmail.com please.
That's so cool for your friend :) I hope you've taken some of the credit, encouragement is such a huge part of success.

I'm a girl doing a CS degree and also often think that the amount of help I get from my boyfriend (who has graduated by now) borders on cheating which really makes me feel miserable from time to time, and constantly having someone next to you who you know can complete any task you have with so much less effort doesn't help a lot either.

Other times, however, I acknowledge that as long as he isn't plainly handing the solutions over to me (which he never does) but just kind of acts as my rubber duck, all that can really be said is that it's just a fortunate situation where you constantly have someone to bounce ideas off of. It's also a question of not becoming dependent of that person -- at first I felt that he literally always knew the answer to whatever I was struggling with, but by now I've realised that it's simply about the ability to think out loud and make conclusions as you go along, and I know that I have all the potential to do that on my own as well.

I guess it's kind of what the article is saying as well -- if you're used to someone being better than you and kind of like a mentor, it's difficult to adjust to a situation where you might just have caught up with them in terms of skill and expertise.
Is there still an issue with GZIP encoding S3-delivered static assets? From my reading, it looks like Amazon will not automatically convert assets to to GZIP encoding when the browser indicates support. Rather, you have to upload GZIPed files and manually configure the content encoding headers. This approach would be broken for browsers that don't support GZIPed files.
Is $4.50 a rounding error on $150? To pretty much everyone, yes it is.
The Best Anonymous VPNs For 2013
Yes. A good whiteboard interviewer should constantly stipulate things that seem intuitively right, and let you use obvious helper functions that should exist in your environment, without penalizing you for getting the _name_ wrong. I.E. if we're talking java, you should be allowed to use anything that "feels" like it should be in java.util, without having to name it correctly. Because that part can be quickly googled for.

Sometimes interviewers even let me just define the signatures of helper functions whose behaviors are tedious to write out, but in words we can cleanly go over the expected behavior. I have a habit of writing "pre" and "post" documentation for functions that specify finer grained types than the porous Java type system; chalk this up to my love of OCaml, but it greatly pacifies interviewers who know that I am mentally type checking, and will let those helper functions go unimplemented.
Because the code is sent to a device Google know you have had physical possession of in the past. It's either sent by SMS, voice call, or to a pre-registered mobile app.

The general point of two factor authentication is that you need physical access to something (phone, token generator, etc), meaning that if somebody across the world knew your password they'd still be unable to cause any damage - or rather, it would take a lot more effort.
There's absolutely no reason to share internal data unless you have to.
Flint locks were deadly weapons designed for military use. Why not want the most modern weapons? There is an entire sport shooting class for these modern weapons. It's also the preferred weapon for varmint shooting such as helping cattlemen clear ground hogs from pasture land.
3-round burst was fairly commonly used (less than semi, though). Most issued rifles only had safe/semi/burst, not safe/semi/auto. Mainly from vehicles or in room clearing. SAWs have largely replaced the full auto rifle, though.

(actually, I think something like 95% of troops never fired a weapon at all. There were 1% of troops responsible for most of the combat, and then a few more percent who got engaged by IEDs, etc.)
I also use "printf debugging"; I have to.

The worst problem I had, though, was REALLY annoying; I was getting an inscrutable error in the middle of a function, and I could delete large parts of the code to get the error to go away, but putting ANY of the code back brought the error back -- it didn't matter which parts I put back.

It turned out that git had changed LF to CRLF in the file, and some end-of-line character was screwing up the spacing. Tweaking .gitattributes and fixing the files made everything work.

I SO hate significant white-space. I never really forgave Python for that "feature" either. But I could totally get behind Lua for the logic. :)

Actually, if it were my job, I would use LuaJIT to write a make replacement; the dependencies could all be specified in tables or extended strings, and any more complicated logic could be explicitly outside of the "rules".

>but the problem is, the _rest_ of the build, which more people interact with on a daily basis, gets more complex when that happens

I think a good design would NOT have that problem. You could have it say "these files get built by default rules" separately from "these rules trigger this bit of Lua code, which can spit out warnings, add dependencies dynamically (oh wouldn't THAT be nice!), or do this other bit of complicated build processing that doesn't fit well into the rule-based system".

If you're doing it in Makefiles, then yes, you could make everything more complicated that way. But I think a fresh design could really do a good job in killing make. I'm just so busy with other things right now, though...

Another reason I would STRONGLY choose Lua over any other scripting system is that the entire tool can embed Lua trivially, while Python or Ruby or Perl would each bring an entire ecosystem with it. You can have a dozen different Lua installs on your system without requiring a separate infrastructure for managing Lua installs.
Who is Goliath in this case? I just got glasses this year so I honestly don't know. My glasses are all made by little Californian, German or Belgin companies that my optometrist stocked.

edit

Answering my own question, it appears Luxottica and Safilo make most of the glasses out there.
> What can I do on app.net that I cant do on twitter? What part of the experience do they beat Twitter on?

Build or use your own app without worrying about hitting a token/user limit.
I can't tell if you are serious or not, but "beating around the bush" refers to the practice of trying to scare birds out of bushes so that they can be shot by hunters.
Someone just needs to design a high level language that can be synthesised; something akin to a python of the FPGA world if you will.

The advantage of FPGAs is that they allow nontrivial parallelism. On a CPU with 4 cores, you can run 4 instructions at a time (ignoring the pipelining). On the FPGA, you can run any number of operations at the same time, as long as the FPGA is big enough. The problem is not the low-level nature of hardware description languages, the problem is that we still don't have a smart compiler that can release us from the difficulty of writing nontrivial massively-parallel code.
I really agree with this analysis of the OP. It is pretty interesting to notice that as you watch other programmers you are teaching look for things on Google. That filter comes probably out of more and more googling combined with more and more programming to see which posts lead to a good solution.
Agreed. And no questions asked refunds are definitely available. I've written two successful book so the money itself isn't the issue. I just happen to have set a $5k limit on what I can spend personally.

If everything totally fails (possible, but not likely) I will repay everyone out of my own pocket.
Absolutely.

My doctor, who is a hotshot young doctor at a hotshot medical school, impressed me by telling me she needed to look up my symptoms and then showing me what she found (and, to be fair, also referring me to an expert).

Depending on field, part of being an expert is also knowing where to look for field-specific expert information. Google is a much better search engine than the NCBI PubMed interface, but I know as a biomedical scientist that I should use PubMed or else I'll miss important research.

(Though part of being a scientist is also realizing that you're trying to understand totally new results, and google is of no use past some point. I imagine this is also true of engineers. You're building on previous work but at some point you have to move past what's been done before.)
> Because the code is sent to a device Google know you have had physical possession of in the past. It's either sent by SMS, voice call, or to a pre-registered mobile app.

None of those connect to device you've had "physical possession in the past". Only the present. Phone calls, SMS and apps are all portable across hardware.
The best do not have all the answers, but they know how to find them.
Although it may not be this way on paper, most academic funding agencies realize that the exact details of the research are likely to change. Usually as long as the general direction of research (e.g., solving problem X), they are ok with it. There's rarely deliverables, as far as I've seen. Though it is true that sometimes the defense agencies want something more concrete.
> Do you really think that people who have been forced to start working in the office under threat of termination are going to form a positive, collegial bond? If they form a bond at all, it will be one based on shared resentment of the Dilbert-esque reality they now inhabit.

I think that in hard times, you either do form a bond or you go form a bond somewhere else. I think that's the decision that was just taken at Yahoo.

They could just have fired all the remote workers - but that would have been truly stupid.
Isn't this just as true of Ant or MSBuild or Gradle (or s/.*/yourfavoritebuildtool/s)?
"we used to hustle on over the border for health care that we would receive in Whitehorse"

http://www.telegraph.co.uk/news/worldnews/sarah-palin/740955...
> We think it’s a rather significant hole in a strong authentication system if a user still has some form of “password” that is sufficient to take over full control of his account.

I don't really understand this sentence...they say that Google (post-fix) no longer enables access to security-specific pages unless you do two factor auth, so doesn't that mean that post-fix you cannot fully take over someone's Google account without two factor auth?
> I had the pleasure of working with NPR's data news chief, Brian Boyer

I found the unexplained use of the word "Boyerism" in this article to be confusing and unprofessional. I have nothing against the use of slang, or the expectation that readers will need to Google terms: this is the reality of our culture in the age of the Internet and excellent search. However, the casual and unexplained use of a private group's inside joke reveals a lack of awareness of how search affects interacts with culture. Is it a deliberate attempt to confuse and snub the larger audience, or is in unintentional?
I think that's the wrong way of going about what they're offering. Either they're lying in that blog post (which would be very disingenuous to the people who pay them to operate, the users), or they legitimately had an idea of a free model with benefits added on and wanted to get some buffer cash before going that way.

Everyone saw the writing on the wall about growth when it launched, and the best solution to drive new users (and encourage them to upgrade) is to offer a service at a model that allows them to "get their feet wet" without signing up with a credit card.
Google Chrome to display audio indicators in each tab
Simpler, Readabler Twitter
Double Submission: http://news.ycombinator.com/item?id=5279191
Well. The one thing is a service to rate (sexualize/stalk) others without their knowing and consent, the other is a social network only for girls.

The latter kind of reminds me of a sitcom-idea as pg calls it (http://paulgraham.com/startupideas.html). Looks good on paper but of no actual use. I really have no idea what problem can be solved by targeting women for a social network exclusively which isn't already solved by facebook (groups), whatsapp (group conversations with photos) or path (small exclusive social networks).

edit: okay sorry. After visiting the lulu website, it does exactly what you describe. Taps into the same socially accepted double standard popular websites like tubecrush already use.
It's an attempt to measure relative affordability, part of this is that humans are unable to take a value such as an average inflation rate of 3.4% and work backwards over 20 years.

I'm not sure how useful that number is, however, I'm pointing out that it doesn't add to the invalidity of his argument.
Sure, they're legally different, but the article as I read it covers that: they describe the M16 as an automatic-fire, military variant of the AR15. Isn't that accurate?
That mod doesn't make it a M16. It makes it an unsafe, illegal AR15.
I think that's what the ASPs are for.
richard.mallender@gmail.com. Thanks