skysight-inc/HackerNews huggingface dataset:
One difference is that in dynamic typing, if the object doesn't have the method, the runtime will tell you it can't be done.

If you mutate DateTime when the rest of the code expects it not to change, the runtime will let you, and you'll only notice through a logic error somewhere, that probably won't be obvious until way too late and the error has propagated through your system and screwed a chunk of your data.

On a conservative/liberal scale, decisions seem less conservative if the stakes are higher.
Not magically. That part is, for now, in the scope of the IDE/editor plug-in. You can feed Tern a set of files to analyze, but Tern doesn't, for example, scrape HTML files to determine inclusions.

The one exception is requirejs-style dependencies. Those, if you give Tern some information on where to look, it will resolve and automatically include. I'll do something similar for node.js-style require calls in the future.
True, though the ELB also does some simple buffering of HTTP requests.
I hear what you are yearning for - I remember trying to convince my supervisor that researchers need to look towards github for progress.

His response stuck with me: While scientific research is continuous and never complete, the whole point of publication is that it is a record in a fixed point in time. The results and discussion cannot be altered, or reused: it is a milestone, a historical record of a novel contribution to knowledge. Sure, you might reanalyse your data, rework an image with new parameters what have you, but the nature of sharing your work with your scientific community requires it to be static.
The C64 has constantly been pushed and this his how demos look today: http://www.youtube.com/watch?v=SGJ1Mpqp94w http://www.youtube.com/watch?v=bzvMYE3PUn4

I recommend all the demos from Oxyron and Booze Design.
It's more or less public knowledge. You can find it yourself by running "strings" on the Twitter app binary. Any attempts on Twitter's part to limit the disclosure of these tokens would almost certainly invoke the Streisand Effect.
A couple of typos: shedule -> schedule, developement -> development, won't be broken -> broke
Couldn't another app use these tokens and take advantage of lax api limits ?
Why do you feel knowledge of WSGI is critical? (I can think of a few reasons why it's a very good idea to know what's going on roughly, but I wouldn't put it as strongly as you have, and I'm curious to know your reasons.)
Nginx dev version proxying WebSocket
Isn't this actually a great thing since it enables developers to develop Twitter clients that aren't dependent on tokens and approval from Twitter?
Google has some fairly large projects running with Angular. The entire doubleclick app is full Angular, it has ~200k lines of code with comments included and about 90k lines of just controller code. There's a talk about it on youtube, check the /angularjs channel for something with "doubleclick" in the title.

There's also tons of tutorials, videos, documentation and examples floating around.

I've been using it recently and it's really nice but I haven't personally used it on anything huge yet, not because I don't think it would work but because I have no huge projects atm.
Skyfox ran just fine on the C64 too.

You're probably right the main limitation is memory.

Skyfox was written around the constraints of these platforms from the outset, and if you have a little bit of extra memory to waste there are tons of methods you can use to do less work.

On the C64 at least (not idea about the Apple II, as I don't think I ever even saw one in person - they were not widespread in Europe), custom character sets (so you could move just a few characters to move an object), hardware sprites and careful animation of small subsets of characters in the custom character sets, coupled with multiple versions of these character sets with pre-scaled objects were all common ways of handling 3D.

Only a very few games ever tried doing 3D "properly" with bitmap graphics, and they uniformly looked much worse. E.g. Elite.
The enigma of the Ford paradox
Will outlook online catch up with Gmail?
Will outlook online being offering apps or plugin extensions like google apps / plugins have for gmail.
A Startup That Scores Job Seekers, Whether They Know It or Not
Of course there's a gap between productivity and wages. It's called profit. If a company doesn't make some profit off an employee's endeavors, why would they hire him/her?

And if this gap, as you call it, is too high for the American workforce in general, for millions and millions of people, it would mean there is tremendous money to be made by companies willing to pay higher and so capture a portion of this surplus.

The real reason that Americans are so exploited economically is because they lack the ability to reason about economics and are easily fooled by fallacious claims that benefit the most powerful at their own expense. The minimum wage is just a minor example among countless schemes designed to make the poor, working, middle, and even upper middle classes feel they are being aided by government policies while they are actually being copiously robbed in broad daylight.
This is because we try to fit these patterns into elementary functions, and we do that because it is most useful.
upvote for vim bindings, that would totally rock!
Yes. And that's the point of the disclosure.
I'll test that very soon !
NekoTsui supports to change consumer key/secret.
https://itunes.apple.com/app/nekotsui/id476924886
You're right - I've had customers on my mind ;)
>I think we need another president as bad or worse as Bush again (perhaps Romney or Palin) to put enough pressure on citizens to become actively engaged again and take to the streets.

You're all but saying that you don't think that people will take to the streets when a Democratic president is in power. I'd submit that Obama has been worse than Bush in a number of areas. In particular, he extended every major Bush-era power-grab, ranging from the Patriot act, to warrantless wiretapping. And then he piled more on top of that.

It might be more accurate to condemn both major US parties as loving power and war. If people won't condemn both, and prefer instead to remain tribalistic in their allegiance to one of the parties, then there's really not much hope for any change (not that I was ever optimistic about that).
You could only make an app that would explode if/when they decide to change keys
Overcome Designer’s Block: Tips and Tricks
Ever get designer's block? Quick training exercises for designers and ideas to overcome creative roadblocks. With a gallery of super-creative designs.
You know, I've actually seen a pretty useful writeup on why HP urls are so crazy. I wish I knew where to find it, but there was some allegedly logical reason. I think it had to do with the site knowing which server to talk to? I wish I could remember more.
And neither do they (LV).

Trademark is not copyright.
Horizontal centering using CSS fit-content value
people have ethics.
> check out this QR code!

Instead of trying to scan that QR code (in a corner of a billboard), here's the URL: http://www.btp.police.uk/pickpockets/
The newest PyCharm uses an interesting dynamic approach. You can run your app in their debugger and enable collecting of type parameter info (at a significant performance loss, however).

So when you have a function like: def foobarize(f): return f.something *2; then it will know what types f might have when foobarize is called. Now when you go back into the editor, it can give you a hint about it.

Other than that, it uses some type hints from docstrings (you can tell it type foo is YourClass and it will complete based on that) and light type guessing.
There are substantial similarities between the two. That it's not a 1 for 1 copy doesn't change the fact that they are substantially similar.

Case in point. The text below has more difference contained within it then the list of 9 specific difference you listed in your post. Taken individually, they prove that I did not copy your post, and that what is below is original.

However, any reasonable person would take a look at the two and find that they are very similar in terms of style, presentation, and intent. That they are copies. Identical, no, but copies nonetheless.

---

There aren't any examples of identical artwork from the two sources that I can see. There are links such as http://bit.ly/13IvNcq that show substantially different artwork side by side. Do you really mean to tell me you can't see any difference between those? The only substantial similarity in either of those is the placement of the pins of the map. Notable differences:
The clock:
* The FlatUI one has a drop shadow.
* The length of both hands is different.
* The colors are not at all similar.
* In the Dribbl artwork the hands are all the same size, while the FlatUI one has a 'skinny' minute hand and a skinnier second hand.

The map:
* The landmasses are different.
* The width is different.
* The colors are quite different.
* There are a different number of landmasses.
* The Dribbl art is of a map with three folds, with both ends facing downwards so it forms an 'M' shape, while the FlatUI one has four folds, with one end facing down and the other facing up.

Beyond details inherent in the objects and art style (e.g. clocks are round and have hands), there are more differences than similarities. I would hardly call that 'identical.'
Apple does go after other designs that are similar to theirs, but (big BUT), they don't use DMCA unless there was an actual copy of their artwork/software. They file an injunction with a judge to stop sales of the product and/or sue them in civil court.
Actually under no circumstances whatsoever can copying an icon cross the line into actual theft. It's possible to cross the line into actual copyright infringement.
But they can't change those keys without isolating every installation until it's updated, right?
1: Just because some ubiquitous libraries have dictated a practice doesn't make it a good idea or a good model. In fact, Hibernate's tracking of mutable objects in the current session is one of the most painful things about it. There's nothing inherent about client server communication that forces beans on you?

2: That's good, but work in the constructor is by no means gone.

3: That sounds like god objects. "FinancialInstrumentService" is way too much functionality (or poorly named). Getting a current quote, getting historical quotes, doing quant-stuff and placing a trade are all completely separate concerns. Opening a document, saving it, printing it - all separate concerns that are better kept in separate interface. Now, there's little harm in having an implementation implement several interfaces if the implementations has much in common. Extra bonus: Easier to write tests for.

4: Mostly agree, but:

> Believe me in a quarterly release- developers get around only 3 weeks – rest is divided into BA, QA, UAT, freeze, deployment time.

I won't believe you, because I've worked on a team that pushed out releases every two weeks, and got 8-9 days development in for each.
Thank you - I've edited my post. Sometimes I don't catch all of my typos, but I always urge to improve my english!
Actual link: http://en.wikipedia.org/wiki/Tarskis_high_school_algebra_pro...
Along with any official client that is slightly out of date. Twitter might be hesitant to alienate their users.
I'm an atheist, but if there is a hell, people like the leader of the teachers’ union, Elba Esther Gordillo, need to be in it.

The amount of lives that have been ruined by her union and the teachers they control must be in the millions.
I guess twitter, and any other client would just say - key revoked, you need to update the app for it to work again. It's an endless game of cat and mouse.
Been meaning to look into Automator ever since I got my mac. Does anyone have a good guide on all the features available?
A c or c++ api for which platform?

Dropbox have to implement this api on a per-platform basis, so the question is first which platforms to support, then on those platforms what language APIs to provide.
It was invented out of nowhere at one point, even if it was 3000+ years ago.
It would be possible to obfuscate a secret by storing it in several parts and combining them at run time. Still very far from secure, but this would require much more effort to extract the secret from the app.

Anyone: what is best practice here (Android and/or iOS)?

Edit:

Storing application secrets in Android's credential storage [1]. I have no idea how secure this actually is.

Should I obfuscate OAuth consumer secret stored by Android app? [2]

[1] http://nelenkov.blogspot.co.uk/2012/05/storing-application-s...

[2] http://stackoverflow.com/questions/7121966/should-i-obfuscat...
And with this one of the huge flaws of OAuth comes to play. OAuth just doesn't work with locally installed applications as it's impossible to hide anything there, but OAuth strongly relies on the client having some secret knowledge (the client token).

As long as all clients are equal when using the API, this might go well (minus some malicious clients), but once some clients start to be more equal than others - even more so as the service starts to get to be real jerks - then the whole system will fall down.

What we see here is twitter's secrets leaking out (though remember: That's more or less public data as it's technically impossible to hide that info - the server has to know) due to them being jerks giving their client preferential access.

What does this mean? For now, probably not much as I can imagine the bigger third-party-clients want to behave.

It might however make Twitter reconsider their policies.

If not, this is the beginning of a long cat and mouse game of twitter updating their keys and using heuristics to recognize their own client followed by twitter clients providing a way to change the client secret[1].

Though one thing is clear: Twitter will lose this game as the client secret has to be presented to the server.

Using SSL and certificate pinning, they can protect the secret from network monitors, but then the secret can still be extracted from the client, at which point, they might encrypt it in the client, at which point the attackers will disassemble the client to still extract the key.

It remains to be seen how far twitter is willing to go playing that game.

[1] even if the keys don't leak out, as long as twitter allows their users to create API clients, an editable client secret is a way for any twitter client to remain fully usable
The app could also just download the latest extracted keys from your server when it experiences an authentication failure.
I think Apple will simply not permit applications that use these keys and are not official clients in the App Store. Looks like something that is pretty easy to automate.
Correct me if I'm wrong here but I believe that then all one would need to do is stick an SSL intercepting proxy (such as http://mitmproxy.org/doc/ssl.html) in the middle and get the keys from there.
That doesn't work either - this one should:

http://news.ycombinator.com/item?id=5337182
Taken down by DCMA: https://github.com/designmodo/Flat-UI
It's not really fair to call this an OAuth flaw, since it's just another instance of the 'trusted client' problem in security.

Essentially it's impossible to differentiate Twitter's own client on an untrusted platform since it will always be possible for 'malicious' client to behave exactly like Twitter's own client.
Virtualization With KVM On A Scientific Linux 6.3 Server
For Android, I suppose you could just run a Java bytecode obfuscator before converting the bytecode to Dalvik. There doesn't seem to be something comparable for iOS.

One simple solution is to set N-1 arrays to random data (hardcoded or generated at compile time) and set the last array to the real secret XOR random array #1 XOR random array #2 XOR ... XOR random array #N-1; this doesn't exactly stop a determined attacker, but it does stop "strings".
Will Anyone Create a Killer App for Google Glass?
It's at least possible to accept only the keys from your real servers, which would stop this attack.

For what happens in the real world, see Georgiev et al.'s "The most dangerous code in the world" at https://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-client-... (spoiler: I described this paper in our internal knowledgebase as "very readable. Promises lots of facepalming and delivers in spades.")
> OAuth just doesn't work with locally installed applications

That's not really true, Twitter just has a broken model where they want to authenticate the application as well as the user...

The rest of your comment is quite spot on, though. This is going to be a cat and mouse game for Twitter and I'm not sure they can win.
Slowmo.js
That's a great idea and really good implementation. The only thing I'd miss from Google Docs are comments that are not part of a text (in Docs these are rendered on right side of document). You could implement it by come special syntax for comments, which wouldn't render when exported and on site, and in edit mode, it would show just a little icon. GUI option to click somewhere to add comment in this place would make it even easier. It allows further capabilities, like easy inline peer review.
Brands Wish Oreo On 101st Birthday As Indian Brands Look On
I honestly couldn't make head nor tale of this.

It's certainly not a parable as there's no lesson drawn.

Without any code specifics this comes across as a bunch of smart people who thought they knew how to program but didn't constantly reinventing the wheel even though everything described was a solved problem.

To me anyway.
How I migrated from Heroku to Digital Ocean with Chef and Capistrano
PiAddict Magazine Launched for Raspberry Pi Users
I'm not sure why Apple would play police for Twitter, though.
If this is the reason, thats a horrible way to do it. Would love to know whats their thinking behind this.
> i.e. the slide to a welfare-dependent state where people don't feel the need to work for their luxuries and economic stagnation

That's the main counterpoint to the basic income guarantee. If people are no longer afraid that they starve or die of cold or heat on the street they won't work. Funny thing is that same people that voice this concern usually think that working is usual way how the people fulfill their higher needs (belonging, esteem, self-actualization).

> At 7bn, I'm not sure more kids is the answer.

There is a strong fear in many rich countries that their original populations that are currently growing old will eventually die out and be replaced by immigrants.

Personally I'm not against population growth. Having more educated kids in rich countries might be beneficial.
You presume that one would use the keys on iPhone. No reason you couldn't run them on a Linux box in AWS...
A Video-based Interface for Hand-Driven Stop Motion Animation Production
I wanted, MacPro in Cube Shape. Dual CPU ( Not Xeon Only, ) and up to 64GB of Memory, Dual Geforce GTX Titan, Dual Thunderbolt, SSD in Raid.

Because the Margin of SSD and Geforce GTX is much larger, Apple could make their own SSD and Buying Geforce GTX Titan at discount price. Making the New MacPro as similar pricing if you have built it up yourself.
I don't think NaCl keys are suitable for persistance. It seems to require absolute uniqueness of nonces.
Perhaps John Steele is the inmate running the asylum...?
Actually, his accent is a lot better than that of any other member of the core Ruby team I've heard speak. Probably due to more practice..
What the BlackBerry Z10 reviews may have missed
That depends on how the secret is used by the client to authenticate with the remote service.

If the client just sends the secret as part of an authentication request, then a proxy would reveal it. But if some form of challenge/response [1] process is used, where the value sent is derived from the secret and an unpredictable challenge sent by the remote service, then as far as I know a proxy wouldn't help.

I don't know enough about the details of the Twitter/DropBox/etc APIs work to know if they use challenge-response.

[1] http://en.wikipedia.org/wiki/Challenge%E2%80%93response_auth...
Hello Android,this is Chrome calling
Today in the webrtc mailing-list announcing and the first demos are now online.
Orkia.fi is a finance company and we are hiring
Orkia is a ground-breaking internet lender, offering consumers small, short-term loans with unparalleled speed and convenience.
Did that for a few weeks, and the Chrome performance boost was nice. I had to jail-unbreak though because stability was horrid for me, with applications constantly crashing :/
Well maybe it helps to wrap your mind around Ember controllers. From what I read, I'd rather use Backbone.
Huh? What on earth are you talking about? Nothing you wrote makes sense. Someone asked a question on the merits of a patent, the likelihood of it being upheld if challenged, if it is at all patented, etc.

What you are referring to is anti-intellectualism, to ask questions for the effect of the question itself. Hiding behind the hypothetical, and not for the desire to know the answer. The root question here wanted to know an answer, not play any game.

"Silly at best to ask it"? Again, what on earth are you talking about? If people have an insight to give, they will give it.

"Not something i"d take someone to task for"? Do usually tell people the things you don't feel like doing?
WebKit code execution against Chrome is also likely to work (in modified form, but same basic exploit) against desktop or mobile Safari. Desktop Safari sandbox escape is likely to be completely different from MobileSafari sandbox escape. And in all three cases, the sandbox escape is the harder part.

So that logic does not explain to me why people are going after Chrome but not Safari.

I honestly don't know why it is. In particular, I don't have specific reason to believe Mac Safari's sandbox is more bulletproof than Windows Chrome's, but I guess Safari has the advantage of not being exposed to Windows kernel bugs.
Weird, I'm on almost the exact same version (24.0.1312.57) and it does nothing when typing any number of '['. I have the branded version of Chrome, though, but still, weird!
Irish politician seeks tough new Internet laws to stop "Facebook rape"
It might sound like an abomination, but Visual Studio is apart from obv. being excellent in C++/C# also a very pleasant IDE for Javascript, Python or even PHP!

In fact i have been an "texteditor-only" type in the past, but coding C# in Visual Studio has really been a revelation for me.
Leaked Screenshots Confirmed Samsung Eye Scroll Feature
While those numbers are distressing, one has to ask if government is their biggest threat. More black males are killed by other black males yearly than the entirety of what the KKK did.

Go look at Chicago for example, it may actually be safer to be in jail. I am not sure which statistic is actually worse.
The federal government agency i deal with has similarly locked down computers but, as you say, java, old versions of browsers, and many unsigned applets.
>> 1000/hr will make all jobs unfeasible - on the basis that a job is a way to earn money by offering greater value in labour than in wage.
>> But what if we lived in a society where solar powered robots did everything and one guy earnt all the money for just pressing the power switch at 8am each day?

This is highly unrealistic.

1) We are a very long way from having robots able to do most human jobs.
2) There will always be scarce resources. Even if you could 3D print houses for pennies, land, access to desirable events and people, etc will be scarce, coveted, and distributed to the highest bidder.

Let's talk about policies that work well in our actual, current world.
> Last time I looked the vast majority of Windows users don't need the console.

And a vast majority of Firefox users don't use the developer tools. They're still doing something about it.

Also, what about microsoft's programers. Are they using Linux when they don't have the tools they need?