skysight-inc/HackerNews huggingface dataset:
The U.S. definitely does not have some far-reaching "freedom of information." In the American system, you've always been chargeable with the information revealed by what you choose to say. E.g. if your girlfriend breaks up with you, and you e-mail all of her coworkers and tell them she has herpes, she can sue you for revealing that information. The same is true for all sorts of confidential and private information in different contexts. The core purpose of the freedom of speech is to express opinions, specifically political opinions, not some larger "freedom of information."
About as defined as anything else in JSON, eg. the range of integers.
Try working out (lift) first thing in the morning
Have more sex is easier said than done...

Also, I'm definitely going to get a therapist after this. Looked around and found some area ones. I'll make an appointment "later" :)
Both are only "correct" for specific implementation, this is not specified behavior (and duplicate keys is strongly recommended against by the key)
> a pointer is the same length for any data type, even pointers to functions

No that's not guaranteed despite being common. And function pointers are not even guaranteed to be representable by void* (POSIX08 does mandate it though.)

Relevant sections of the standard here http://stackoverflow.com/a/3941867/1546653
Usually people who attain technical knowledge are the same type to avoid politics.

Politics is a "soft" game of imperfections, where as technical knowledge is the opposite. Cold, hard, objective.

What incentive is there for technically-equipped folk to deal with the imperfections and heartache of interacting with non-technical folk than to take a white collar job amongst other technically-minded folk?
"Practical" post quantum signature algorithms
One pretty simple lesson: Save some of your money even if it's from passive income. Nothing lasts forever.

BTW: What's up with the "only make something meaningful" propaganda lately? Nothing wrong with profits, just keep in mind that you can't outsmart the whole world forever: like arbitrage in an efficient marketplace, your low hanging fruit are eventually picked by everyone.
It's overwriting existing keys, which is fine imo. When I use a map in any language and put a new value with a new key, expected behavior is that the previous key is overwritten.
>If I (a software engineer) choose to do something journalistic, why should that not count?

Because that's entirely too scary.
These stories highlight the fundamental problem with the popularized "passive income" approach: the goal is usually to support a lifestyle, not to provide value to customers. This can easily result in a huge disconnect between the business owner and the realities of the business. Unfortunately, if you don't handle your business, it's bound to handle you.

It is absolutely possible to run a sustainable, highly-profitable business without working 16 hours a day. But there are relatively few businesses that will run themselves completely, and people who want to spend the vast majority of their income every month probably lack many of the traits of successful business owners to begin with.
Yes, I can't believe Kaspersky Labs is writing these articles in citizentekk
I agree it is a cute hack, but it is also kind of horrifying. You are depending on an undocumented behavior that happens to be shared across the ecosystem. Now what happens if that file hits a parser which takes the first instance, or a functional one that errors out when it sees multiple assignments?

+1 re YAML
If the H1B visa was granted to you the individual, you could just go work for a new company without the new company having to sponsor a petition or without you having to file an emergency extension if your employer decided to let you go suddenly.

My main point is that the h1B system treats you like a second class resident at the whims of corporations, contrary to its stated claims to just exist to bring in talented individuals to fill positions that cannot otherwise be filled by locals.

I certainly agree with the "should" you've posted, but I get contacted by companies looking for people to do PHP for $12 an hour. Sure it's maybe an ok option for some person from another country with more limited opportunities, but it ultimately hurts all of us by weakening our collective bargaining position vs the outsourcers.
I think he's referring to the rails YAML exploit [0] because you can use yaml to create objects, like this:

--- !ruby/hash:ActionDispatch::Routing::RouteSet::NamedRouteCollection
'foo; eval(eval(puts '=== hello there'.inspect);': !ruby/object:OpenStruct
table:
:defaults: {}

Allowing people to run arbitrary code on rails servers.

[0] http://rubysource.com/anatomy-of-an-exploit-an-in-depth-look...
Ask HN: Feedback on Learn-through-Challenges Site
I created a site for interactive education on technical topics like programming. While it's still in an early stage (and lacks some polish), I'm looking for some feedback on it.

This is the main site:
http://www.learneroo.com/
This is the first Java module: learneroo.com/courses/11
Back in my day, they had these things called tech magazines... :-D

Secondly, right there are some problems looking for a solution:
- Can you figure out a way to improve remote internet access...
- Can you work up some caching mostly off-line reader/browser/email so when you do connect you can queue in all the stuff you had thought about off-line.

Learning general programming & making a web-dev laptop setup of technologies you want to hone are a couple good ideas.
I'm surprised by that, but obviously you know you better than I do. Burnout takes a long time to recover from.

If you get nothing else from my remarks, at least consider the possibility that the real problem isn't procrastination, it's that you're too hard on yourself.
I really liked this part: "You trust your employees, right? Maybe you shouldn’t" LOL
I believe the parent was referring the many recent YAML based vulnerabilities found in Rails (and elsewhere). He is basically saying, "You can use YAML -- if you don't care about injection vulnerabilities."
Recently bought a thinkpad (Christmas 2012). I didn't encounter any marketing specific to military grade/army use. Perhaps it's different now.

Some plastics are very durable, and the type that comes with the thinkpad is not the cheapo dell plastic. Regardless the plastic shell isn't designed to provide structural strength in the first place. The inner frame is the core strength of the thinkpad; magnesium or some kind of metal (I forget exactly).

Please provide links for your claims of suffered build quality... if only for my sake to perhaps look at other laptop manufacturers.
While on the topic of encodings (I'm a huge encodings geek), let me plug a new one we recently discovered called Space (https://github.com/nudgepad/space). It is dead simple and has the nice feature that it is extraordinarily easy for both humans and machines to read and write.
That because they're comments specific JSON parsers could (and likely would) interpret processing instructions embedded in those comment to toggle behaviors on the fly. Crockford's fear (founded I think) was that comments would be used to "extend" json.
Michael Lewis is a great writer about economics. He appears to have gotten out of his depth here.
This is part of the wider process of turning being technologically skillful (or at least, more skillful than those in power) into a crime in itself. We've already seen countless of examples, and it's really nothing new.

It started way back when the establishment managed to get society to equate "hacker" with "criminal". Many have argued that we should just accept that as a historical fact, but the propaganda was deliberate and the process that created the propaganda has only gathered strength since.

Witches and heretics, the lot of you.
h1b here. I get 20-30k year less than my native counterparts. but since it's a big company I'm still in the "salary range for position". If you count my experience and the position i had before, I'm making much less because I'm in a much lower bracket that i would be back home. I know my company spend 10k to sponsor me. Which is peanuts for saying 40k year considering all that.

Also, it's very hard for me to look better pay as a native could do. Even the ones making 10k more than i do already left...
And now he's being charged by the state of New York. This will never end as long as Goldman Sachs continues to pull the strings, I fear.
The way the average american thinks, if the police slowly came every other day and disappeared one of your neighbors, they'd shrug it off and say "oh well what can you do, we need to be safe".

Until it was their turn and there was no one to protest.

This is why we still have the TSA grabbing your genitals and the NSA grabbing everything else. "oh well what can you do, we need to be safe".

Meanwhile congresspeople would write in exemptions for themselves and figure out how to do insider trading to profit from the activity (btw, they gave themselves back the right to do the insider trading).
I'm disturbed by the reactions in this thread. To argue that the US shouldn't allow foreigners to come and work here because it undermines local talent is like saying schools should give out fewer CS degrees because big companies will exploit them to undermine existing talent. It screams narrow-minded selfishness. What are we, a medieval guild?
Why not both fully unique and based on information of the car? I could easily imagine a system where [one-way algorithm X] is used to transform the car's VIN into a good cryptographic key, and the dealers then just use some piece of software to program a blank fob with the appropriate key. Done correctly, it would be extraordinarily difficult to reverse engineer.
Is plastic really cheaper than good old fashion sugar? I think it is more plastics have a ohhhhhh fancy "specially formulated" marketing appeal to them. They put them in clear bottles to show them off, hey look MICROBEADS! Example: http://3.bp.blogspot.com/-3SVQtbwrvVY/Tk2uks5kLHI/AAAAAAAAGM... See, look? BURSTING BEADS® It's even a registered trademark. They can't say with sugar® or ground walnut® (which is what St. Ives's apricot scrub uses). Doesn't sound high tech enough.
You gain more by not being stupid than you do by being smart.
Douglas Crockford has also posted his explanation on Google+:

https://plus.google.com/118095276221607585885/posts/RK8qyGVa...
I saw a school psych when I was in college and all it really did was piss me off.

The guy spent 30 minutes asking me these types of questions except even more generic and then afterwards said "Yep, you have ADD".

I hardly talked about myself and the way he phrased the questions made it super easy to say yes to all of them. He wrote me a prescription and I never got it filled because of how little I felt he actually had done. I've taken all kinds of ADD medicine from friends, etc but somehow getting a prescription from what seemed like a bullshit therapy session made me stop taking ADD drugs altogether.

If you read some of my other comments, when I take adderall, ritalin, daytrana etc I end up just being more focused in my procrastination. It's like my brain says, "I know what you're doing drug, and I'm going to fuck with you"
OP on his deathbed:
OH NO, THIS IS TERRIBLE, WHY DIDN'T I SPEND MORE TIME CODING AND HELPING MY BOSS GET RICHER?
Your TV might be watching you. (Samsung)
This is in the UK. They don't have free speech like in America.
or RHEL if you want the deployment stuff.
Can you add "jury nullification" to the mass emails also? That's what I tell my friends and family about.
I can have fifty tabs open at any given time. Don't worry about it
The world does not give a damn about you.
I've got to commend Bitfury, the Levi's of bitcoin.

Just as in every gold rush, it is a much more blessed position to be the one selling the blue jeans and shovels than to be the one attempting to sift and mine.

I wonder if Bitfury accepts bitcoin as payment. I suspect they do not. EDIT: You can totally pay with bitcoin - http://www.bitfurystrikesback.com/checkout/
Actually, duplicate keys is very specifically recommended against in the RFC, and left entirely unspecified.
I worked at a 5 person startup (as a developer) right out of grad school. After we lost a very profitable contract (and dissolved) I went to work for IBM (largely because the offer was great).

Things are very slow to change here. People who have been at the company 20-50 years are very fixed in their ways. People don't work as hard compared to the startup. I feel like a large part of getting promoted is just being here a long time. People don't do much development "stuff" outside of work, e.g. on my team of UI developers I'm the only one who has touched jQuery, Backbone, or Angular (work just uses Dojo).

People don't seem to be hungry here.
There is some additional context that is important here: the bill is intended to create additional protections that aren't already in place, specifically a federal shield law: http://en.wikipedia.org/wiki/Shield_laws_in_the_United_State....
Right now, journalists don't have the right to refuse to testify about their sources just as nobody has the right to refuse to testify about anything that isn't covered by the 5th amendment or certain common law privileges. The first amendment protects newspapers from censorship, but does not exempt journalists from the obligation to testify in court about their knowledge, an obligation shared by every other person. Shield laws create a special privilege as an additional layer of protection. Most states have a shield law, but the federal government does not. This bill is an attempt to create one.

As for why there is a need to define journalism or journalists, it's because shield laws cut across a very basic assumption in the legal system: a court can force someone to testify about nearly anything that is relevant. The exceptions are very deeply-rooted ones, like the 5th amendment right to refuse to testify against yourself, spousal privilege (the right to refuse to testify against a spouse), and attorney-client privilege.

It's important to define and cabin the bounds of the privilege, because otherwise anybody could invoke it. Imagine if business partners in a shady dealing could refuse to testify against each other by claiming that one was giving the other legal advice and therefore their conversations were protected by attorney client privilege. Real life isn't CSI, where there is always an orgy of physical evidence. The most basic tool of the court system is being able to get people to testify about what happened, in front of a jury of ordinary people who can judge the credibility of that testimony.
absolutely. This is nothing more than a clever trick, but I would never rely on it.

Honestly, tough, I think all major JSON parser behave following the two assumption.
And the big point here is that the members of the RFC group were considering breaking the EcmaScript standard and change it to MUST which would break existing programs and the "workaround" in the article.
I feel like I could have written this a few months ago. I tried something similar but then fell right back in my normal routine.

Not saying it won't work for you. I've just become very doubtful of all the "self help" methods as it's rare that I find long term evidence that it has changed people's lives permanently. I read on average, 1-2 self help books every week, I think they've helped me with certain areas of my life but overall it hasn't fixed the root problem.
When I can't see the icons on the tab, and can't see if it's reloading - it becomes a problem, on my screen its probably 30+
In Austin I pay about 1.3 cents/gallon, or 10.4 cents/cubic foot of water, $10.40/CCF. This is including waste water service, which is nearly twice as much as water service (but based on the same amount of water).

However, this is based on my own bill (total billed amount divided by total water used) -- a bit tricky since there are tiers and surcharges.

Also, we're under water restrictions due to the drought - water the lawn once a week, no washing your car in the driveway, etc.
Adding a few random bytes to a response seems to be an easy fix and doesn't require compression being disabled.
I'd say for sure it's one of the best "gateway" desktop linuxes. The only competition here I see are the ones based on Ubuntu, like Mint.
And JSON was often “parsed” with eval().
"Apparently you've never tried gentoo."

and this right here (sorry Parent, just using this as an example) is the reason that Linux has always been consigned to the ranks of the also-rans on the desktop. Someone will always come up with a reason why flavour x is better than flavour y. No matter what aspect of Linux is discussed, there will always be a significant proportion of users that think their flavour is better.

If you care about Linux on the desktop, you have got to see that people like Mark Shuttleworth are absolutely essential if Linux is ever to compete meaningfully on the desktop with Microsoft and Apple.
Well, here we go: https://github.com/kgabis/parson/issues/7
Why don't they plug them into their outlets themselves?
if you blog about it, let me know, i'll love reading about it!
3D print your own aston martin
I think maybe this idea has floated around (no pun intended). There's a nice demo for teachers here : http://www.cmu.edu/gelfand/k12-teachers/polymers/polymer-and...

Ironically the plastic was polypropylene there too.
Interactive Map of SF Restaurant Inspection Scores
Susan Cain on the Power of Introverts, Live-Illustrated by Molly Crabapple
Because it isn't worth it.
I'm always amazed at the vitrol that comes from the people in the Pro-H1B denomination. You guys sometimes make the Protectionist denomination seem quaint.

1) You SHOULD disallow that. Why tolerate a system that creates incentives for that kind of abuse.

2) "dirty immigrant bastards" - You're assigning a point of view that the commenter isn't advocating at all. Protectionism is generally more about looking into the future and being scared for your ability to continue at your standard of living and less about disliking certain kinds of people.

And to add my own anecdote to this discussion without siding with anyone else's viewpoint (because I'm a special snowflake with my own nuanced opinions): I've worked at companies that chronically underpay H1B workers. The ones that got fair pay were the ones that were brave enough to demand it.
Yes I get that. What I don't get is how "_processing_instruction": "whatever" is any different.
I have three different instances of Chrome open. Each with about 30+ tabs, each for different research and problem sets.

Since it's Friday, I'm going to try and close everything by the end of day. I'll do this by grabbing the URLs of the important things, save them to a text file and write a sentence on why I need to open that link again. For example, if I'm researching something on say, OAuth, I'll have about 15 tabs open, stuff scattered everywhere. I'll eventually close them all and have some cohesive notes on the topic that I can either act upon, or ignore. Regardless, the tabs will be closed and my mind/task freed.

Edit: in addition to my own notes, some of the tabs I'll add to a read it later service, and some I'll add to Springpad (things like libraries that I have categories for, etc.)
Two years. Only P&G said they'd stop by 2017, the others said 2015.
I understood it that the initial attack vector required the target device to be unlocked. Once the malicious code was installed, the attacker could then gain complete control, including passcode unlock.
> it's up to the parser to keep clobbering a value every time a new value comes in for a given k

Nope, parsers are perfectly in their rights to do whatever they want with multiple keys. They could read them backwards, sort them, whatever. The behaviour in the instance of multiple keys is undefined.

> This seems like a bad idea.

It is an astonishingly bad idea. I'm concerned by it being so high on the page.

> But hey, might work well for the original author.

Depends on their parser. It's undefined behaviour according to the spec. It might work now, but I'd argue it doesn't work well, as a patch level change could bork this.
An interesting takeaway from this piece is that GS is blatantly and systematically violating the terms of the MIT license, GPL, and whatever else they happen to get their hands on. I'd love nothing more than for the FSF to take them to court over it.
Well, I am a counter anecdotal example to that. I am here on an H1B and am paid on an equivalent level to my co-workers, slightly higher than some.

Without wanting to sound like an asshole here, you are within the salary range for your position- maybe the difference between you and your coworkers is performance based? Why not just get a job elsewhere?
you make 130k, you have a whole team working under you, and you are 21 years old, and you have trouble getting laid.

That's it, this guy is a troll.
You Should Add a Hyperlink Trailing Slash to Directories
Unrelated

Did a small oauth project a few weeks back trying to integrate with web mail providers - gmail, ymail and outlook.

Gmail was a bit of a pain, but basically worked.

Ymail - a much huger pain, and extra hoops and far less usable documentation explaining basic workflow - "oauth" libraries continually failed me, and only using the crappy php4-style example code worked. At the end of the day, it didn't come close to being easy to use (and required my users to jump through extra hoops).

Outlook/microsoft webmail? Just didn't work at all . Oauth connectivity worked, as easily as gmail, but they simply don't allow sending at all - no access to the inbox at all. Oh sure I can 'download contacts!' but can't use outlook/livemail to actually handle the sending programmatically.

It really hit me that as bad or potentially bad that google might be in this space, they're 'winning' hearts and minds just because they're less bad than the alternatives. I used to wonder why so many services and add-ons were built on Google properties vs Yahoo and MS, but I wonder no more; Yahoo/MS just don't want to compete in that space (making stuff at least usable for developers). Facebook also seems to fall in to that camp, but right now they don't have any major competition (except from G+ it seems). But FB still has an upper hand with a full platform (however crappy). I suspect when G+ rolls out stronger API stuff, the game will change dramatically.
I don't agree with that. I have programmers that come in and do a solid days work every single day. It might not be the best code, but I see them working on it all day long.

It sucks because even though I'm accomplishing as much work as they are, I can only do it for a few hours a day. I'm envious of their focus and ability to actually get shit done. If it wasn't for them, I probably would be fired. Although....even then, everyone else at this company loves me so much that I don't think they could fire me.
streaming parsers can't follow the assumption short of becoming useless. They're either going to send only the first instance or going to send two different events.
Why so many programming languages to write essentially the same programs?
This is a very short book written by a professor who researches procrastination. If you are interested in what the latest research has to say about procrastination and strategies to overcome it, it is well worth the read: http://amzn.com/1453528598
According to this calculator [0], in one month, you can expect to earn $20,724.53 dollars (ignoring price changes, difficulty changes, and operating costs). This seems too good to be true, however. Invoking the old adage, "In a gold rush, sell shovels."

I wonder what effect all this has on the Bitcoin economy. If everyone begins doing this, then it will become extremely difficult to mine any Bitcoin without any sort of gear. Feathercoin [1] appears to try and stop this, although I am not sure how effective it is.

[0] http://www.alloscomp.com/bitcoin/calculator
[1] http://feathercoin.com/