skysight-inc/HackerNews huggingface dataset:
A comment posted on the original article:

"It’s time to Investigate all Activities from The GOP and Tea Party and Wealthy ,Because They are The Real Terrorist Americans Citizens,For That Reason they are scare to the drones.The History from the wealthy in this country is not Very clean ,For That Reason The FBI has to Investigate This People.They Want Shut Down The Federal Government."

These people are the problem. There needs to be an IQ and political education test before people can register to vote.

Sound crazy? Yes. Extreme? Yes? Will it work? Maybe; probably not. Is it worth a shot? At the rate things are going, I'd say definitely.

By the way, expect a posting about this on rms' blog way before anybody else heard about it.

EDIT: Found another politically uneducated comment:

"You need to replace every mention of CIA with obama. HE is the one behind this crime and HE is the one 'in direct contradiction to their oath and the 4th Amendment.'"

My goodness.

EDIT: Interesting that people seem to think the only choice is blue or red. Ever heard of the Libertarian Party?

"@sjfella, seriously man, do you think Romney with his neo-con Bush advisers would have done any better with respect to maintaining of civil liberties while still hunting down terrorists? IMO, it would have been much worse under a Romney administration, we probably would have never even heard of this and they would still be doing it. The right and the neo-cons are the ones that want to throw out all our values just to fight the ‘war on terror’, hence things like the Patriot Act and Gitmo."
Should Programming Classes be Covering Software Testing too?
"SO" this dude uses other programmers code that they chose to submit to the repositories and complain it didn't meet his "high" standards? no docs? write the "fuckin'" docs! or better the source code is there look at it, if the source code is not commented well enough and the way the classes methods aren't clear on how they function then it's probably a bad or hard to maintain module anyways and you are better off not using it! and as others do, i wonder how did this get to the front page.

edit : spelling.
On just the subject of a watches and status/fashion.

If I’m going to a formal event I’m going to be be wearing a watch with my suit. It’s a status symbol perhaps, but I’d put it closer to a fashion. And it’s an old fashion - this is not something I see changing in my lifetime.

I would tend to think that a 'smart watch' and a suit is a misstep, more frequently than a winning style. Of course we are talking about products that for practical purposes doesn’t exist. However history has shown that taking tech into fashion is a hard go and this is not the slam dunk that Techcrunch is raving about.
"when your tools are oriented toward making huge balls of mud and your philosophy is oriented toward making huge balls of mud, you will make huge balls of mud"

New sig for me on forums ; )

Paraphrasing Rich Hickey: everytime you're using a "pattern" and have your IDE generate code for that pattern for you, then it means: "I have run out of language" : )
This is wrong or awkward answer at best.

Your session based generated HTML (i.e. Your Credit Card usage history) is safe against these kind of attacks, also guess what your XML is safe as well and all other data formats that cannot be called and interpreted by JavaScript from another domain. Heck even session based generated images are safe and cannot be read from another domain, other than some rare bugs (they are security bugs and will be fixed, not design issues).

Another format I can think of that cannot keep session based information safe is JavaScript. I wrote about a real world example of this before (a vulnerability in IntenseDebate) : http://www.mavitunasecurity.com/blog/javascript-scope-and-in...
These ads usually appeal to the lowest common dominator, in terms of both intelligence and morality. It's a race to the bottom.
I do not accept any of their claims at face value.
The URL format is: http://yourereallypretty.com/#First+Last

The idea is you send that URL to someone you want to creep out, I mean compliment.

Edit - fixed URL
Comin' to you theatre ....
>In its 14-page complaint, Hispalinux said Windows 8 contained an "obstruction mechanism" called UEFI Secure Boot that controls the start-up of the computer and means users must seek keys from Microsoft to install another operating system.

Windows 8 contains no such "obstruction mechanism". It will happily boot even if secure boot is not supported on that machine or if it's disabled. Maybe they're trying to get some free publicity with misleading hyperbole and FUD on this as the EU has already knocked down this kind of complaint before.
Exactly. This.

Managers are an internal police force hired to protect the interests of owners against theft (or adverse negotiation, overcompensation, etc.) by employees. The difference is that we need police in society. Companies don't need a separate police force; ideally, they're self-policing.

I wrote about these incentive and principal-agent problems in detail: http://michaelochurch.wordpress.com/2013/03/26/gervais-macle... . Essentially, there need be no conflict of interest between employees and investors/owners. In fact, employees are investors-- of time.

Like police, most managers (by numbers) are good people but the dirty ones are really awful-- and usually get rich. In the corporate context, this is because they get so good at taking credit (the actual A players fear them) that they look like high-performers and rise quickly.

What happens in the worst companies is that owners are protected against low-level workers but robbed by the managers. They fall down hard on the "who will police the police?" question.

A small group of people, if there's full transparency about what's going on and how proceeds are divided, can be self-policing. Rick Grimes is no longer the sheriff of his group of ~10 people. They all take on the "police work"; even children. Yet cities of 4 million and nations of 100+ million need a specific police force. They can't do without them. At that scale, it's a necessary job.

By the time your company needs a police force-- it's spending a substantial fraction of its budget protecting against theft (mainly, "time theft" by an employee who favors personal interests)-- it should be scaled back and hiring made more selective, with transparency improved to make sure incentives are aligned and behavior is above-board and ethical. Cities and nations need cops because they don't fully control who gets in (or is born there); small companies aren't the same way and can be self-policing.
According to a convenient nuclear effects calculator I found[1], 20MT at 5km and an optimal burst height will generate over 40psi of overpressure. The fireball itself will reach about 4km in radius. According to another site[2], 20psi is enough to severely damage or destroy heavily built concrete buildings, and the maximum wind speed at 40psi will be greater than the speed of sound. For comparison, 3psi is enough to destroy a normal house.

So, yeah, 5km counts as "close range".

[1] http://www.fourmilab.ch/cgi-bin/Bombcalc?yield=20&yunit=...

[2] http://www.atomicarchive.com/Effects/effects4.shtml
Web technology (http and relatives) was not meant to do this.
Can do it? of course, but will do it badly..

Its time to wake up, and see that we need new kinds of technology to keep up evolving

Its like glue wings in a old car and say that it is a plain and can fly..

The idea is good, and we need it badly, but the technology infrastructure its based on is weak for this scenario
Sexism in the tech industry - it's not just the guys
Finding out which library is used would not be a big deal, but there's also no reason why cookie keys would have to reveal that either.

Signed cookies with app name as key should be good enough for all purposes.
I'm just trying to figure out at which point this conversation invoked Godwin's law... Seems ambiguous in this case.
http://www.huffingtonpost.com/lisa-bloom/how-to-talk-to-litt...

Sorry, I think I agree with this article. Pretty is just another word that objectifies people by complimenting the most superficial aspect of their being.
ITYM Java can take advantage of an IDE because of the language design, so you don't have to hack together scripts to do things like re-signature a method across a 100-person billion-dollar product, whereas other languages make refactoring a pain regardless.
Douglas Crockford was wrong. This was a real issue back in 2007 that was specific to JSON. A proof of concept exposed gmail contact lists. It is not true for all data formats.

Douglas Crockford defends JSON to the point of making himself look foolish. He causally dismissed this real issue as a non issue, and has done the same with the U+2028/9 line ending issue.

Edit: It is worth pointing out that Google still prefixes their JSON with )]}' to protect users that are still using 2007 browers.
This is definitely an inherited notion, and one that's quickly (at least in the tech industry) becoming more fuzzy. I get told routinely to push back against project managers if I feel their decision making is flawed. Thankfully, it's not as common an occurrence as it could be. Our PMs are pretty good at seeing product viability and have likely considered most angles that I'll only see as I'm working on it.

But it all goes back to feeling empowered, and its up to your horizontal managers to give you that breathing room.
http://youarereallypretty.com/#Ryan+McGreal
Are the reported numbers that you are familiar with outright falsehoods or are they distortions like an unrealistic earn-out provision?

Besides spreading the amount over many years what other tricks are used to bump up the reported number?
Yes it's indeed correct and document.

CORS safely solves this problem.
http://en.wikipedia.org/wiki/Cross-origin_resource_sharing
Calls to read and eval stand out quite clearly, so I think it's nowhere near as bad a problem.
I'm sure Authlogic/Devise leaks information about itself in other places than just the session data (e.g. query params, routes).

Besides, this only adds security through obscurity and doesn't actually make it any more secure.
Well, you could try to use NetBeans with the vim plugin instead. The ability to use vim, plus the undocking windows, are what made me switch from Eclipse to NetBeans.

Got tired of tiled windows crowding each "perspective", and constantly reaching for the mouse.
Clojure Data Structures in JRuby
We were hoping to be more on the endearing compliment side
i loled hard
Ah, thanks for that info, I wasn't aware that the time from development to deployment was that low now.
There's a Hole in 1,951 Amazon S3 Buckets
Is that actually a concern? Sounds like security through obscurity to me. What frameworks besides Rails encrypt session data?
On top of the arguments of jackalope, I would like to add one more.

For many domains, the A record do not go directly to the actually webserver of the company. Many domain has redirects for SEO reasons, and often get this services directly by their DNS provider (and often do not allow https). Persona prevents this kind of setup. I am also a bit curios if a certificate under one domain can verify a email user of an different domain.
I don't carry a wallet. For the past four years I've been carrying just a money clip with cash, ID, and one credit card.

That's splitting hairs a bit isn't it? You are still using an object that serves the same purpose that a wallet does.
Converged Infrastructures Require Converged Tools & Processes [Webinar Recap]
Use a router that monitors spikes in traffic. Check the logs occasionally (weekly?).

Turn the computer off when you're not using it.
How Private Data Became Public on Amazon's Cloud
From what I understood, these attacks used DNS amplification. I am no expert on botnets either, but here is the basic idea: they basically send a small request to a DNS server with the source spoofed. The server sends a much larger response to the spoofed source, which in this case is Spamhaus. This happens on those DNS servers that don't check whether the request originated from inside their own network.

So the botnets involved don't have to send 300 Gbps of traffic to Spamhaus. The DNS servers being much more powerful will take care of that. I have no idea about the going rate for a botnet, though.
That is a really inspiring link, thank you for sharing.

It got so discouraging that Lee reportedly contemplated learning computer science so he could find a job during this time, but was scolded by his wife when she found out, telling him to keep his focus.

Wow, if only more spouses/boyfriends/girlfriends are so supportive...
You seem to be taking the line of the attackers' spokesman, who accused, rather hysterically, Spamhaus of deciding what goes on the internet. Of course, all Spamhaus does is supply a list of hosts who are sending email spam, and other things like lists of dynamic IPs. Sounds like this hosting outfit was making money hosting spammers and their business is threatened by legitimate countermeasures.
Let's Fix File Uploading
They don't want to frighten off their customers.
Braid is fantastic, buy it.
George W. Bush is not really pretty:

http://yourereallypretty.com/#George+W.+Bush
Where's documentation of how to use the graph widget?
It doesn't look like this toggle exists on the mobile app.
Please share how many billion users generating many billions of dollars you are serving with your elegant tiny project.

Bonus points if you use Heroku/EC2 or AppEngine and ignore the "giant ball of mud" that is a critical reason your business was able to launch.
Why does Java switch on ordinal ints appear to run faster with added cases?
That they did. I assume it’s for the reason that maxerickson stated. These where some /really/ simple taxes.

Other than the huge (for me) fine, it was a fairly painless experience. My parents did handle it - but even for them other than the stress of knowing it was happening, I think it involved not too much work for them, and as far as they where concerned had not too bad an outcome.

I do suspect my parents double-checked my filings from then on a lot more closely than they had before.
Document Freedom Day from Brussels to Taiwan
Ok, would someone explain #6, "The Broken Water Heater Problem" to me? As expressed, there's nothing to say that the person (who repaired the heater) could not be just a plumber, or perhaps just a handyman and neither an accountant or a plumber. Yet, as demonstrated, the person is given to be an accountant.

Event A is "accountant and plumber". Event B is "accountant and not a plumber". Hence A unioned with B means "accountant"; or, if that's too general, "is an accountant and may or may not be a plumber too". In any case, both events A and B qualify the person to be an accountant.

So what's the controversy? When it comes to water heaters, we're all accountants?
But it should be! Imagine how productive you would be with an edipsesudo instead of visudo :)
FWIW: there is a security auditing tool named Brakeman (http://brakemanscanner.org/) that is worth your while as a Rails programmer. I don't know if it addresses all of the issues mentioned in the OP, but it definitely complains about Unresolved Issue #3 (Versioned Secret Tokens), if you do indeed have your secret token hard-coded (as is the Rails default!).
As a daytime Java developer who dabbles in Scala on the side, these changes look great. The inclusion of a Joda Time style time library is long overdue as well.

I just wonder how many years before there's adoption from the general Java community.
Wanna play "Fallacies Bingo"? :)

https://dl.dropbox.com/u/10190786/fallacies.jpg
So, in my spare time I help people become expats. The (precious few) studies of US expats show that most of them have moved to other countries for someone they love, followed by work or adventure (search for von Koppenfels' study). Very few of us expats have left for political reasons. However, when I talk to people today who want to leave, while adventure and love are still cited, it's the political crap in the US which is driving a lot of it. People are telling me that "the US isn't the country they grew up in." They're saying they can't fight the Koch Brothers, the Waltons, Big{Oil,Pharma,Banking}, Citizens United and so on.

I think it's not coincidental that the rate of 18 to 24-year-olds who are interested in moving abroad has skyrocketed from 12% in 2007 to 40% in 2011 (http://www.americawave.com/2011/10/05/somewhatseriously-inte...) but the number of them planning to relocate has collapsed (http://www.americawave.com/2011/10/06/yes-plan-to-relocate-b...). I think the reason is simple: young people are tired of the constant bad news but they don't have any money to move abroad.

Interestingly, when they talk to me about this, they're usually not looking for greener pastures: they aren't assuming the world is better somewhere else or that they can escape what's going on. Maybe that puts 'em back in the adventure category instead of moving for political reasons? (That being said, the demographics between actual expats and would-be expats could be radically different).

Note for the curious: I moved abroad for adventure, not political reasons. Five countries and counting.

TL;DR: Young people in the US are waking up from all of the bad news and wondering what it would be like to live somewhere else, but they think they don't have the money to leave the US.
Forgive me if I'm missing the point, I'm just trying to obtain some perspective. Assuming that telling someone they're pretty does indeed work, what benefit does the sender have by sending them a link to your website? Could not they just type directly onto their wall (as it seems to be centered around facebook)?
While I've heard much about them, I have yet to try out Google glasses. So the innovation is still on the horizon from my perspective.
Dutch Company Offers One Way Ticket To Mars
Hahaha. Touché.

To be fair, however, I think we'd all agree that his accomplishments by that point were of a significantly higher caliber.
"...add a new parameter, set a default and it does it across the entire codebase."

OK but why exactly does a new parameter with a default need to be repeated at different places across the codebase? Because you're using Java and Java is incredibly verbose and requires you to do crazy stuff and you end up with a super-complected codebase where instead of passing messages around you're actually telling objects "do this", "do that" and then when you have one parameter to a method you're in a world of hurt (because that method is used from different parts of your spaghetti codebase).

In Clojure, for example, you'd simply pass the parameters in an associative array (a map) and, even better, when you're constantly passing through the same set of parameter you'd simply wrap the method + its common parameters in a higher-order function and then you pass that higher-order function order. This makes for incredibly shorter codebases and incredibly easier refactoring.

Don't get me wrong: at 75% off during doomsday I did buy my IntelliJ IDEA licence but you're foolish if you think that the "text editor" part of IntelliJ is anywhere near close what vim or Emacs do offer you.

Also what's really great about Emacs is that you can add functionalities yourself to the "editor". Wanna run unit tests automatically and see the result in another frame/window/buffer? That's trivial to write.

No later than yesterday I missed IntelliJ's "goto declaration..." feature. I wrote a quick defun in elisp that had... Seven lines of code and did 90% of the job. Sure people are going to hard that it's for those 10% cases where my script doesn't work that IntelliJ really shines but that's not the point. The point is that you can program Emacs to suit your way of working.

You adapt vim / Emacs to yourself. With Eclipse / IntelliJ you have to adapt yourself to the IDE.
Wow, thanks mate! I never knew of CORS before.. (I admit).
>There needs to be an IQ and political education test before people can register to vote.

Would you care to expand upon this argument? What sort of test would you require, and how would such policy effect American democracy?
This is why Google, Facebook, and others prepend JSON responses with while(1){}. Any browser trying to eval it will get stuck in an infinite loop, protecting the payload. That's what they did a couple years ago at least. It looks like gmail is now prepending with )]}' for some JSON calls instead.
"VMware’s RabbitMQ, an open source middleware-type application deployment project, ..."

Perhaps it's mean to poke fun at reporters, but this is pretty brazen.
Those are the risks of a standing army- computers don't change that. The bottom line is that if you want to "play" in the military's back yard, you can't hide behind your computer as if it makes it any less serious.
How many Linux boxes do you spend >10hrs coding on in a year?
ASP.NET optionally encrypts and signs the ViewState, although there the goal actually is to allow storing sensitive information in the session.
I don't think that creating content people want to consume in an effort to get them to link to your site qualifies as black hat SEO.
I'm sure i'm missing some important context because some other folks liked this post, but it ends up coming off as entitled whining.

To summarize the author's gripes:

> Why are there modules in 2013 which aren’t pip’ed?
> You don’t just drop version 0.1 and never care for it again.
> I really want good documentation and examples.

talk about looking a gift horse in the mouth. there was an insightful post on here a while back about how repo-owners should give write access to (most) anyone that submits a pull request. That seems like a better solution than complaining about half-baked modules.

tip for the author: fork, update and pull request. Even if your changeset isn't accepted, it will probably help somebody in your position.

> I expect from a general purpose language a broad, general purpose range of useful modules.
> I expect a certain pacemaking and modernity, a friendly competition between languages and interesting features.

the whole post is a series of moving goalposts. 'i hate perl because it's not java,' 'i hate js and ruby because they lack a comprehensive package database like perl,' 'i hate python because i have to manually run setup.py like a chump,' 'i hate perl because it's too complex,' 'i hate every js and ruby project because they don't have docs,' 'i hate java because it's stodgy and enterprisey'

Instead of looking at these as obstacles, why not approach any of these issues as opportunities instead? That seems like what happened with the python Requests module. The author complains about the lack of general purpose modules in npm (which, huh?) and then bemoans only having web frameworks to hack on.

i'll grant that sometimes it feels like everything sucks, but that doesn't mean we shouldn't do something about it.
This changes the moment you realize your 'assets' have free will, a capacity to discern, and really strong opinions
My Svbtle inspired responsive theme for Pelican