skysight-inc/HackerNews huggingface dataset:
however it's still best to protect your secure data with un-predictable URLs.

Please, please, no. This is terrible advice - do not rely on security by obscurity! This is not even obscure - anybody can open the network monitor in Chrome and get the URL. You should be doing exactly the opposite - publish your URLs and get researchers to investigate them. Give a bounty if they break it and you'll have tons of researchers all happily fixing your security for you! Do not obscure this stuff.
Thanks for the follow-up post. I'm not going to continue this dead thread, but I do appreciate the reply.
Who, What, Why: What is "unGoogleable"?
Much of what is good about democracy comes from the balance it strikes between the need for governance and things like self determination and personal liberty.

If you have one group deciding what sort of person deserves self determination, you aren't striking that balance anymore.
I only have a few servers here and I would love to test open/dev stack here inside a VM, but the script keeps freezing :(

... I am not expecting to deploy or do much on virtual hardware, but, the servers are pretty beefy and I just want to muck around with the management and learn how it works so I can deploy it at a later date.
...what? What part of "killing is bad" don't these people understand?!
Hands-on with Mozilla’s Web-based “Firefox OS” for smartphones
I've tried using fonts that are not monospace for programming, and it was ok for ~1h, then I started really hating it and switched back. It feel unnatural.. Maybe my eyes aren't trained for reading code with such fonts though.
This seems like distorted thinking. Surely there is a balance to be struck between hyper-rigor and abandoned rigor. This guy seems to have an awareness of various best practices, but no sense of perspective about their relative importance.

I'm not a programmer (at least, I'm a very beginning one), so maybe someone can clue me in: Are all best practices equally destructive if you don't follow them? Or are there best practices which can be neglected?

I'd expect that the best practices being neglected would be differently relevant to different projects, types of application, customers, etc. Would it be productive to modify the discussions of "best practices" by talking about under which context those practices are necessary or unnecessary?
Still, they're hardly SPEWS.
Facebook ad trial risks new privacy fears
19-Year-Old Develops New Method to Clean the World's Oceans
STAPLED SKYLINE | Imaginary Foundation
This is amazing! (and amazingly helpful with the Community tab to show examples!)
Apple is off in its own hardware and software ecosystem, so the potential for widespread harm is small. Microsoft has clout with the people who make the hardware most people use, so there's considerable potential for damage depending on how Microsoft's will is implemented.
I see another simple fact - the author does not feel comfortable posting his views under his name because he fears retaliation.

And that's a problem.
Confirms my suspicion that code is the most direct extension of biological evolution we've seen thus far.
Today is the international Document Freedom Day
Not exactly, it doesn't have the same goal at all.

From the first line of the script: "stack.sh is an opinionated OpenStack developer installation". It doesn't provide nearly the flexibility of Puppet (or Chef).

Devstack does one thing, and one thing (almost) only: get a simple installation of OpenStack up and running as fast as possible (predominantly for developers to test their modifications against).

Puppet can handle much more complex scenarios, and is really meant to deploy production.
Well, maybe people don't know, but if you are an unskilled and unsuccessful man, you are FUCKED and hopeless, and will tend to have no money, no love and no sex.

If you are a girl, you can work a bit on your attractiveness, and then have sex for $200/hour, giving you both a lot of money AND a lot of sex.

On average, being a woman is way better than being a man.
A real driver for the inflated price is so that they can cover the marginal loss they're taking on every Medicare patient. That loss is only going to get worse as the program expands.
pybit, my organisations very own rbit.

THink replacing Jenkins not make
For web development, the two major haskell frameworks (Yesod and Snap) are both designed with security as a major concern, and in general haskell libraries seem to take this stuff pretty seriously (I guess people who like haskell like safety, _and_ eval is not something that's too easy).

As a more extreme example, this language/framework is designed to statically guarantee that you can't suffer from most web vulnerabilities - http://www.impredicative.com/ur/ - but if you want any complicated libraries, they need to be C (or linked through a C shim), which may not be the most desirable.
You are almost certainly mistaken. The statement was followed immediately by the claim that Spamhaus has the largest network of DNS servers in the world.
1. They're a coward about this. There are good reasons for having women-only events - because in "normal" events there is a massive gender imbalance that can make them feel uncomfortable. Men are not faced with this situation, so they do not need men-only events.

2. It's not.
There is an easier way though... change all the fucking passwords from "password" and stop buying compromised equipment from China because it's cheap!

Military intelligence.
>Operator overloading is easy and common in Python, but in my (limited) experience, it's used to create new classes which respond to existing operators with existing semantics, e.g. to make new number classes.

In Python, it's called "special method attributes" and they can do a lot more than just create classes. The __eq__ attribute returns a straight boolean for example in response to the "==" operator. And yes, by the way, you actually can accidentally alter attributes in the calling and callee objects if you aren't careful.
It just seems an odd hill to die on. Just a minor little feature that most people would use only occasionally in their objects.
Give the desire for lambdas to enable more simple concurrent programming, and the added complexity mutating the external variables in the implementation, I think they made the right choice.

If you _really_ have to mutate those variables then put them into a final array, and alter the entries in that, the same can be used if you need to do an effective pass by reference.
How the Science of Swarms Can Help Us Fight Cancer and Predict the Future
Which is all well and good; there's a market for hideous stuffed animals with human teeth [1], but that's not an argument for Apple (or Samsung, or Google) to get into it. Basically, it seems really out of character for Apple to do this sort of thing. To be honest, I would expect a Google Glass sort of ubiquitous computer before a "smartwatch"; at least the former has the potential to turn into another pillar for Apple.

[1] http://www.etsy.com/shop/cathairandteeth -- I have one and it's awesome
Source? 300gbps would definitely be visible, and I think I remember hearing about something between 60 and 100gbps.

From Cloudflares response [1 - nice graph in blog] ~75Gbps extra traffic was hitting part of their network.

Obliviously there would have been much more traffic floating around and getting dropped by ISPs that have correctly configured their outgoing traffic filters.

Many [not all] ISPs that were affected only have themselves to blame, the 'Internet' didn't slow down - the part that they are responsible for did - and it was their fault....

1. http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-of...
When did the USA come out and say they made Stuxnet?
I'd love to watch it again. Unfortunately it was years ago and I keep failing to find it. But if I do I'll post links here.
If you wash it through bit.ly, it's fine: http://bit.ly/Xc4RQc
How to Create Android Virtual Device
They are not "talking about hacking the US military with potentially life and death consequences."

Where did you see that in the text?
Surely in this context "cyber warfare" means state sponsored hackers, probably working for the military at a military establishment guarded by people with guns.

Not just some kid who nmaps the wrong netblock.
We actually evaluated Lombok for this reason (and others), and eventually decided against continuing with it for a few reasons:

* Every team member must install the eclipse plugin (which, if you already have any eclipse vm args set, also requires you to add a couple of extra arguments).

* No reasonable way to add javadoc comments to getters and setters without explicitly writing those getters and setters (kind of defeating the purpose of lombok).

* Sonar (which we use for static code analysis) will now report those private fields as a major warning as it thinks they are unused private fields. You can make those warning go away by adding //NOSONAR on each line, but yeah..

* Relies on internal java APIs. While the authors seem to be quite good and stay on top of things, I fear that this is still inviting issues down the road.

We felt that the cons outweighed the pros in this case, despite some of the beauty in lombok.

Disclaimer: I am a colleague of the author of the linked article.
I think it gets even easier than that since stream/parallel are the basic calls:

collection.parallel().map(operation1).reduce(operation2);
So, I think I've clearly shown where Generics are useful - you can use them to avoid having to create new classes that share very similar functionality, except for the type they operate upon.

You can do the same things without them - but you have to write separate code for each type you deal with.
Is this the HN equivalent of "fake!" comments in YouTube videos?

You can read that they were "operating from a Cold War era government command bunker that was purpose-built by the military to house sensitive electronic gear".

This makes the story about the SWAT team very believable.
I'm not going to argue your point (that killing them might be justified), but I do want to add that if you're close enough to capture them, they'd be a much more valuable prisoner than an everyday soldier.

If you think about it, a cyber-hacker (normally) won't be much of a threat to the capturing force ... how many are trained warriors? And the amount of knowledge that might be gained is immensely more (again, how many are trained to withstand even mild torture)?
> I suspect there's a lot of exaggeration in the headline and the actual document is more nuanced.

Indeed.
And why shouldn't he fear retaliation? The suggestion that women having safe-space events is sexist is outrageous.
- A class can only inherit from one abstract class, but can implement multiple interfaces.

- An interface cannot have member variables.
Pure CSS Triangles Explained | appendTo
wow, didn't know robohash, it's cool :)
Agree with the article wholeheartedly.

In my case, sometimes, another team fucks up, they cannot ship the product on time and I have to join to help them.
As I have to deal with bad codes, bad practices, short deadlines and a product that I don't have any interest in, I often become a zombie and get it done as fast as possible and hope I would never have anything to do with it again.
That analogy doesn't make sense. We are talking about defaults. If the car was automated, insecure defaults would be a car that automatically drove on the wrong side of the road, but you could change it to drive on the right side of the road.
> You can log into a Google, Yahoo, or CalDav account to sync with an online calendar. I had no trouble logging into my Google account for this purpose, and I could create and edit events as well as viewing them.

I wonder if Mozilla plans to launch their own contacts & calendar sync service based on their Firefox Sync infrastructure. Letting Google know everything might be too much for the privacy-sensitive Mozilla folks. On the other hand, I would be very wary of any sync service that is modeled on Firefox Sync. It syncs when it wants to. It takes hours, if not days, for my PC bookmarks and history to show up on my phone (Firefox for Android).

> things got awkward if we wanted to read a website linked from a tweet. Clicking on a link causes Twitter to load the tweet in a separate browser window. After reading an article, there was no obvious way to navigate back to Twitter. The browser's back button was grayed out because as far as the browser was concerned we had merely opened the page in a new window.

I don't see any reason why, in 2013, a web page should open in a new window. The desktop version of Firefox opens "new windows" in new tabs instead, and has done so for as long as I can remember. Every modern browser except IE does this by default. Even the mobile version of Firefox supports tabs, albeit in a slightly unusual manner. If everything is going to be a web page anyway, why not open things in new tabs by default? Everyone already knows how tabs works. Pressing Back would return to the tab that opened it.
the internet is a series of on/off ramps.
Or just getting all their peering exchanges to null route packets in and out. Advantage being that it's cheaper, more effective and less lawsuit prone.
Are Customers Addicted to Handset Subsidies?
Overloading Django Form Fields
They are not talking about hacking only military targets.
But they are talking about State-sponsored attacks and State-directed retaliation.

The study indicates that killing state-sponsored hackers is justified as an act against the aggressor State, not as an act against those individuals.

Attacking an individual in another State is itself a violation of that target State's sovereignty and would be grounds for legal retaliation.

The real legal problem in this comes from the grey area around where "terrorists" fit in these definitions [1] and who exactly gets to define "terrorist" [2].

But given how far US legal minds have already taken the escalation of executive power in these cases, it seems silly to think they'd feel particularly restricted in adding "hellfire missile" to their list of options, if not for some third party's supportive legal opinion.

Frankly, when the State can simply disappear a citizen without recourse, the question of whether they may decide outright murder is legal seems rather superfluous.

[1] Where it is precisely the lack of State sponsorship that brands one a "terrorist" and opens the door to extra-legal abuse.

[2] In the US, two administrations have asserted that a "terrorist" is anyone the executive branch claims is a terrorist due no particular evidential requirement and subject to no legislative restriction or judicial review.
There are trees all around.

Light could be coming from the top (around midday) and be blocked in arbitrary parts by the trees, so one part of the place gets light from the right, while another gets it from the left.
The problem here is still "the technique of fetching remote content into JavaScript", not json itself.
it seems like their biggest problem is that when they run into problems with the way that something functions their fix is "we're working with company X to change code so that it works better with our OS"
Actually I just finished my first week working in R. And I could have done the same amount of work in Python in an hour :-(

It's like every line I wrote there was some catch or trick I had to know just to get it to work. Pretty frustrating.
It's not a bad plan, in principle.

The difficulty is - "Who gets to write the test?" Whomever controls the test has all the power. Furthermore, if inappropriate metrics for intelligence are used, you select for the wrong voters.

Our imperfect system works, even if it doesn't always work well. If you take the time to reason with people who are "the problem", things will improve. I bet you'll learn something too.
This is the very same critic that was (and still is) made about perl.

>> I won’t bother to explain all of these; the point is that, as you can see, they all return the same result (namely, the first column of the ice.cream data frame, named ‘flavor’).

Having many ways to do one thing is good - whatever float your boat you know. Just for the given examples, I see how one may be better in a loop (the one where you use 1) while another one may be better when you type it on the command line to check stuff (the one with flavour)

>> The answer is that when you’re trying to learn a new programming language, you typically do it in large part by reading other people’s code–

No. You learn by doing. You write some stuff, test it, and if you don't get the result you expect go back to try and figure out what's wrong.

And even before doing that, you set aside some time to LEARN about the language.

But maybe, just maybe, the problem is not with the tool but with the person using it?

>> I have to confess that I’ve never set aside much time to really learn it very well; what basic competence I’ve developed has been acquired almost entirely by reading the inline help and consulting the Oracle of Bacon Google when I run into problems. I’m not very good at setting aside time for reading articles or books or working my way through other people’s code (probably the best way to learn), so the net result is that I don’t know R nearly as well as I should.

At least that's honest. Maybe you don't do well with a language (any language!) because huh, you didn't take time to study it and expect it to magically work??

I know I'm no good in java, but I also know why - I never took some time to actually learn it. I can do things with java, but not very complex things, and when I fight my way out of a problem I caused, I won't blame java but myself and my lack of knowledge of java.
This is NATO. It is not a doc produced for DOJ, or some other executive-branch agency.

This article is bullshit reporting sensationalizing the story. Here is an actual report on the NATO manual this article is about: http://www.guardian.co.uk/world/2013/mar/18/rules-cyberwarfa...
So is the solution to this to use the double-cookie send or nonces as the article states? I've been doing that in all my AJAX calls just to ensure no XSRF possibilities exist.
So until this all gets sorted out, you'd be fine if an all-male event was put on so men could feel safe from being publicly shamed by an overreaction to overheard comment? Everyone has an equal right to feel safe, right?
The concept of a "safe space" isn't discriminatory, it is a reaction to discrimination.
Java 7 bytecode checker is a real drag
Last june.

http://www.nytimes.com/2012/06/01/world/middleeast/obama-ord...
Anyone who does not specify a web sever in the Gemfile and deploys to Heroku is running WEBrick in production.
looks like someone got the town name wrong. The pin is located at North Hampton (which is the town name they list), though the venue is indeed in Northampton.
Honest question - can't one take pride in the fact that people are using his/her code and it is making their life better - saving money/ time etc, even if the code is not top class? Then the question is - which is more important? Make something good enough (and quickly enough) that people can start using, or keep working on something until it is "perfect"?

Obviously, this doesn't apply to life saving (or threatening) software like medical, defense, embedded systems etc.
Just for newbies: Learn how to work with CSS
Avoid ‑webkit‑text‑size‑adjust: none
Google Chrome to remove Google.com’s search bar?
Not in hpcloud. At least not the public cluster available via hpcloud.com
If you had said he was a MD at Morgan I would have raised an eyebrow, as is, VPs are a dime a dozen. Furthermore, it seems as though his father is on one of Morgan's commodity desks. If he is in fact a trader, this means he has no influence on the I banking side (where deals are done.)

Edit: "his father works in commodities for Morgan Stanley..."
http://www.telegraph.co.uk/technology/9885632/Nick-DAloisio-...

And now I'm going to do something actually productive.
I was a VP at Morgan Stanley - it is simply a title that is bestowed on all more-or-less competent front-office employees who've been with the firm for about 5-6 years. Ie - there are thousands of them.
Investment Banking hierarchy:

Analyst - college graduate - 2 year program)
Associate - MBA graduate or promoted Analyst - lasts 2-3 years
VP - promoted associate (minium 5 year experience in the industry)
Director - promoted from VP (after a few years)

Managing Director - promoted from Director. These are the real rain-makers who earn a lot. Still - the firm promotes roughly 200-250 directors per year. Total number of MDs is probably a few thousand.

So - saying that someone is a VP really means nothing.
There are several other buildings with trees inside, in Buenos Aires (Argentina), one of the tallest towers (the YPF tower, by architect César Pelli), has an Eucalyptus grove inside.

http://www.flickr.com/photos/guido-martinez/4686769123/

http://www.skyscrapercity.com/showthread.php?t=342972&pa...

In Mexico City, you have "La Torre del Árbol" (Tree Tower), with a baobab tree that goes outside a window on the 9th floor, it has now grown up to the 13th floor

http://www.judastechnologies.com/2009/10/30/la-historia-no-a...

Edit: j1o1h1n mentioned the Capita Centre in Sydney, Australia:

http://www.sydneyarchitecture.com/cbd/cbd4-008.htm

Le Corbusier built the Curutchet building in Buenos Aires, also with a tree in the middle:

http://majocobe.blogspot.com/2009/01/casa-del-doctor-curutch...

Edit: an amazing amount of examples from everywhere from Vancouver to Paris to New York to Chicago in the comments.
On Prioritization - Important vs Urgent.
JSON is a container for data. It is no less safe than XML, HTML or plaintext. It's your application's architecture and basic security measures that define how "safe" your JSON is. CSRF tokens?
Doesn't the MongoDB daemon run in a privilege-free sandboxed environment?
I disagree wholeheartedly: the verbosity caused by a lack of such an 'irrelevant' feature makes my eyes bleed.

It doesn't really matter, some people see classes/objects as a minor feature too. I agree with him: operator overloading is not a minor feature and it's probably one of the reasons I am not very fond of Java.
relevant fiction:

http://craphound.com/overclocked/Cory_Doctorow_-_Overclocked...
You mean like this? (not Java):

multi infix:<plus>(Int $a, Int $b) {
return $a + $b;
}
multi infix:<plus>(Str $a, Str $b) {
return $a ~ $b;
}

say 10 plus 4;
# 14

say "foo" plus "bar";
# foobar
I can confidently say forbes.com is the worst website of all time
That's just part of learning programming languages. Learn a language well, then decide. I thought Python was better than R, but a homoiconic functional language just makes sense for statistics. You get really neat functions like with, within, local, that let you keep everything tidy. S3/4 classes are hugely inspired by CLOS. It's also a great language for extending C with.
If the roles were reversed, it would not even have been up for debate...
At this point, mostly library support. Python is quickly getting closer to being a viable R replacement, but it's simply not there yet IMO. The two biggest holes in python for me are:

* The lack of built-in dataframes and libraries to work on them (like plyr). Pandas seems to be getting pretty good, but it's still not as mature as R's solutions.

* Visualization. ggplot for R is great, matplotlib for python not so good IMO. I've heard Bokeh and rplot are attempting to bring ggplot functionality to python. Again, not nearly as mature as R's solution.

I'd love to move to Python because R is not a fun language to develop software in. But at this point, R is by far the better tool for working with data (for my needs at least).
Well put.

Exactly some of the points I tried to point out, as well, in my comments. There is also the central issue that this document is a NATO handbook, not a doc focused on the US military or other governmental agencies.

NATO is trying to wrestle with how to understand and apply the Geneva Conventions to cyberwarfare.

Seems some people are missing that part and reacting as if this is another secret White House memo.