skysight-inc/HackerNews huggingface dataset:
This is just GARBAGE!!!

He tried to bring this issue to facebook's attention and you guys turned a blind eye to him. He had no choice but to prove to you guys that it was real. So he did what he did.

Yes you guys have a test account and ask people to use it, well atleast pay this guy a portion of what you would have paid him if he would have proved the bug using a test account.

What is going to happen next? The next time a person finds a bug he is going to sale it to the highest bigger and some fool will end up posting on my facebook page embarressing me and my family.

Ever tried contacting Facebook Representatives over the phone and asking them for help with security issues?? I have... It is impossible.... After I would send you guys a ton of emails, no response.

What will likely happen is that Facebook will be taken to court because of the embarressments caused by some hackers and facebook taking too long to correct the issue.

What is just so F'd up is that Facebook could protect their users accounts by paying people a few hundred bucks.

This is just one of my main reasons i am barely on FB anymore. All you guys care about is just the money you all get on advertisments.
"Buffalo buffalo.": Ungulates bamboozle. Base case one.

"Buffalo buffalo buffalo.": Ungulates associated with western New York bamboozle. Base case two.

"X buffalo.": X bamboozle. Inductive case.

From these we have:

"Buffalo buffalo buffalo buffalo.": Ungulates bamboozled by ungulates, it turn bamboozle.

"Buffalo buffalo buffalo buffalo buffalo.": Ungulates bamboozled by ungulates, in turn bamboozle ungulates.

"Buffalo buffalo buffalo buffalo buffalo buffalo.": Ungulates associated with western New York and bamboozled by ungulates, in turn bamboozle ungulates.

"Buffalo buffalo buffalo buffalo buffalo buffalo buffalo.": Ungulates bamboozled by ungulates, in turn bamboozle ungulates that are bamboozled by ungulates.

It seems that only the N=6 case even requires a mention of the city.

I upvoted you to help you feel better.
I've been enjoying https://digg.com/reader as a "close-enough to Google Reader" substitute, as well. They launched a mobile-browser-friendly update a few days ago, and the Android app is supposedly "very soon" to release.
I really wanted to like this but it was missing a couple key features for me. I described by problems in the github issues page and wondered back the theoldreader. When theoldreader got slow and was down for over a day I came back and found he has continued to make fixes and addressed most by my issues. Very happy now, and the website is consistently responsive which I care about much more than fancy layouts.
Ok, I got to ask what exactly was HR's explanation for a particular shade of blue?

I've been part of something like this is a weird way. In the summer the humidity got too much for our HP4 printer and it would crinkle 20lb paper and get jammed. We found the 28 or 32 lb paper (long time ago / cannot remember exactly) would not jam and the printer worked fine.

So, in the summer, we changed to ordering the thicker paper. The gold paper was cheaper than the white paper at that weight. So, we order gold paper every summer.

Long after the building had air conditioning and the old printer was replaced, they still ordered gold paper every summer until the program closed.
Ask HN: 5 minutes for PredictionIO user survey?
Hello! We are seeking PredictionIO [http://prediction.io/] users and potential users for our quick survey. Please fill in the questions below. All information will be kept confidential. Thank you for your support!
Entitlement? That's abusing the term. Users are within their right to ask for features, and within their rights to throw their hands up in the air and say "WTF" when a dev turns around and snaps "Well make it yourself"

After all, go read never said "The is MY rss reader"

it's tagline is "this is an rss reader." rss readers normally don't require single sign on.
Even if we accept the operational mistakes they made, and if we also accept their questionable explanation of why it was necessary to shoot a prone man in the head... even then it's unforgivable they way they lied to the press about the incident afterwards.
How's the health quality of those less developed countries? What's the life expectancy? How many years until the kids have to starting working?

Where I live, a Southern European country, we don't really have big cars and nice vacations, but we do have cheap health care and high life expectancy (80 years).

And there aren't many less developed countries on the top of this list: https://en.wikipedia.org/wiki/List_of_countries_by_life_expe...

Is it worth the 9-to-5 (or higher)? I don't know.
Ask HN: High Speed, High Volume Inserts, What's Your Setup?
So I need to insert log-lines, sometimes it is even few millions per minute.

Keeping them all in memory is not an option (won't feet into commodity servers).

A line can be few KB (1-8) each.

How do you do this in your case?

What platform (.*db) are you using?

What's the tweaks and hacks you did?

Thanks for sharing!
All messages are both signed and encrypted. I can't remember the order, but when it was determined some research was done about the various attacks to mitigate the problem you allude to. I _believe_ we encrypt first, then sign, so that any tampering is detected before decryption begins.

Using MEF is optional for the apps that use this library. But I don't see that it opens up new attack vectors. Feel free to enlighten me if you know more on this.

And I agree with the other replies to your message about .NET being inherently insecure. It's trivially easy to inject code into any process, native or managed. If you have code executing on the machine (not some VM or runtime), from a security perspective you probably can own it if you like. So IMO the interesting attack vectors have to come in over the network.
To be fair - I've never seen such docs for SpiderMonkey. I may have just failed at finding them though.

Keeping up-to date documentation of compiler is a horrible job. I think it's good enough that V8 may be built as standalone binary with really extraordinary debug options and tools.

At the same time, I'd love to see more talks like http://www.youtube.com/watch?v=FrufJFBSoQY
There are also guys who write about V8 from time to time (http://mrale.ph/ http://floitsch.blogspot.com/ http://wingolog.org/tags/v8) but this is needle-in-a-haystack type of learning.
I think there is an inherent assumption at the heart of this logic that, when questioned and revealed as false, causes the entire argument to fall apart. The assumption is that because somebody believes that their job is "bullshit" or pointless, that their own assessment is actually correct.

Usually when people I know moan about how useless they are and how boring and pointless their jobs are, they are reflecting on inter-office politics, easier methods that could and should be employed, and a host of solutions that could render them useless. The only problem is that for whatever reason, those solutions have not been pursued and somebody is willing to pay them for their services.

It doesn't really matter whether you as the employee see the point in your job if the person paying you sees the need. It's important to remember that when you assume that your job could even be eliminated, you are making an assumption without necessary data. After all, you were hired because a need existed. In other words, I think people in many jobs underestimate their actual economic value to society. Like it or not, most artists don't actually contribute a whole lot of economic value. That is, they don't create wealth for other people. Those who do are usually compensated accordingly.
Where do I start with this half-baked article?

1) I've been through layoffs that disproportionately hit "paper-pushers"

2) Many of the "paper-pusher" jobs are extremely useful to society (e.g., actuaries), while the "manual" jobs may not be (e.g., why do we really need dock workers? Can't technology eventually replace them all in the future?)

Now economic usefulness is definitely not linked with personal satisfaction / some altruistic notion of "societal value".

At the end of the day, economic usefulness seems to always win out, because it takes money to do most anything, and generally money goes to the places with the highest potential economic ROI.

Insurance companies hire actuaries to help them manage their risk, while record labels aren't signing a bunch of unknown bands to ensure we have enough jazz musicians around.
I'm guessing that's ADD, predominantly hyperactive-impulsive type. I'm predominantly inattentive, which is actually probably why I spend so much time doing mental arithmetic instead of paying attention to what's going on around me.
> A Japanese speaker won't be able to tell that they're saying [r] in an English word that has an /l/.

There's an interesting phenomenon here. As previously mentioned, my mind has partially assimilated to losing the s/sh distinction. I had a chinese tutor who merged those two sounds, and it stopped bothering me. The same tutor also merged n/l and r/y. I didn't assimilate to those; hearing n where the word I knew used l confused me every single time.

What's relevant is that she didn't merge n/l in her english (which was not fluent). That suggests to me that she might have been able retrospectively to identify which she had just used for a mandarin word like 能 (neng). I agree that that depends on having been trained to recognize the distinction, although I find it slightly odd that she wasn't trained to make it in Mandarin. But, grand summary, I suspect a Japanese speaker could be trained to recognize the distinction even in Japanese.

More generally, I don't think the phenomenon of not distinguishing two different sounds (your Japanese speaker) is the same as the phenomenon of fantasizing that you're distinguishing two identical sounds (your english speaker).

> The same way that you perceive "a" and "A" to be the same grapheme despite seeing different shapes, Japanese speakers consider [r] and [l] to be the same phoneme /R/ despite hearing different sounds.

I know that "a" and "A" are the same letter, but I'm easily capable of distinguishing them on demand. In fact, I'm likely to get upset when one is used where I think the other should be. I don't think that mirrors the r/l situation in Japanese. Similarly, I don't vary freely between A and a (and, owing to personal aesthetics, never write α unless I have to write cursive); I follow a fairly clear set of rules that determines one or the other. I know that situation does not reflect the r/l situation in Japanese, although I don't know that it doesn't reflect the situation of any given speaker.

Given a hypothetical Japanese speaker who's capable of producing r and l allophones, if you asked them to repeat a sentence including "are" realized as "ale", down to mimicking the accent, how likely do you think they would be to mimic that realization of [l]?
A quick google search shows that it isn't completely ignored by CNN.

http://edition.cnn.com/2013/08/18/world/europe/greenwald-par...

http://edition.cnn.com/2013/08/19/world/europe/greenwald-par...
The title is crap English, but common: ignorance of De Morgan's laws means the universal quantifier "everybody", in its position relative to "not", means no one should learn to code. (Engineer with a Germanic Linguistics minor pet peeve.)

The proper wording for what the retarded author intended (it's Slate, after all) is "Perhaps not everybody needs to learn to code" or similar, but the not needs to negate the universal quantification. Because negation is not commutative with quantifiers, what the title says is not the same.
Why It Will Be Difficult to Create Secure E-mail
That's ridiculous, he didn't use the accounts of real people. Real people wouldn't have elicited the FB security team response within minutes. Real people don't have a "follow" button on their wall. He used the one account that got your attention and was not malicious and he deserves to be paid. You know damn well your terms are meant against maliciousness and spammers. Your stance is petty.
I would say that not everyone needs to learn to develop software. Software development is a sufficiently difficult and complex job, that is best left to trained experts who do it full-time.

But everyone should learn how to use their computer effectively. Everyone would be better off if they were a "power user." And in the current state of computing, the complexity of computer architecture is not yet sufficiently encapsulated as to render it unnecessary to attain basic competency in some programming language in order to achieve that.

In other words, in order to leverage your computer's full power, you need to learn some scripting language and be comfortable operating your computer from a shell (be it bash, cmd, powershell, whatever).

Most people don't seem to have a clue how many degrees of computer literacy there are. The assumption seems to be, that you are either "computer illiterate" (which means you are an old person who hunts-and-pecks at the keyboard, double-clicks everything, and can at most use "the Googles" to do a search), or you're a "normal person" who can touch type and operate a GUI and maybe do basic formulas in MS Excel, or you're a "geek" who can read and write any type of programming code, build me a website, fix my internet connection, disassemble and repair my computer hardware, etc etc and you probably slid out of the womb knowing how to do that stuff. Yet somehow, you are still only making a modest hourly wage working at the Genius Bar or the Geek Squad.

Where most people really should be is somewhere in between the "normal person," GUI-only level, and the imaginary super-geek, computer whiz level.
Valid concerns, but why does he have to write like to a five year old?
Wow! What happened to Sinatra?
Starting out, it makes sense to just "write Java in Scala", and gradually introduce the advanced concepts of Scala as you learn them.

That way, you can be immediately productive.
If your sole measure of advantage is promotion then yeah, feel free to kick back your heels and do whatever you want.

Personally, I quite like to be doing useful work, and normal ramp-up times for people seem to be about 3-6 months, which if you work at a company for < 3 years can be as much as 10-20% of your time. More if you're switching between projects within a company. It's pleasant to not have to waste that large a percentage of your time getting up to speed.
I installed openssh from homebrew dupes and just upgraded my key to ecdsa. Now to update all the things. Github doesn't support this yet so I put a special line in my .ssh/config to use my old key with github.com
I had a very old-fashioned mathematics education. If I was good at doing math in my head, I'd be a professor. Instead, I had to learn to pick problems apart, or I couldn't do them. I'm also bad at remembering the precise steps involved, so when I found out you could write a problem once and then stop thinking about it, well, I never looked back.
Show HN: NISTP
I think this is proof of Principle 1's pros and cons. (I still don't have a self-hosted blog because I tend to account for all contingencies. Therefore, when I finally self-host, it won't have this flaw. Meanwhile, you already have a self-hosted blog and are simply working out the kinks as they happen.)
I think the best thing you can to support open source phones do is to get a Firefox OS device. Edge is a nice gimmick, but will likely be a dud, even if its funding goes through.
I never said that this article was about a cure. I was responding to the quote: "A cure is the hope so great, so seemingly out of reach, that it must never be invoked"

I was responding to the fact that people seem scared to hope. There is no cure yet (probably). But to not hope that somebody has just found a cure is just silly.
At least here in Uruguay, it's not that we "love it", it's the only option.

Paypal recently added local credit cards here in Uruguay. No company is even remotely close. So, if you want to accept payments from countries such as mine, Paypal it is. Many companies consider it acceptable to miss on the marginal revenue from small countries, so I won't complain about Paypal on that front :) .
Is this just an aggregation of keywords found or is there more to it?
Because I didn't see anything like UI, UX, Design , Marketing, Growth hacking or any of those keywords? Surely those kind of positions are being offered/sought as well?
Border Map
Show HN : This is my first Android app : Nice Weather
I'd love to get an upvote and keep discussion life so that more people can jump in
"When the fossil fuels run out, modern agriculture will collapse."

We fertilize crops, especially with nitrogen, because the triple bond in atmospheric N≡N is a tough nut to break. We use chemical engineering (in this case, high pressure and heat, google Haber-Bosch process) to fix the nitrogen from the air on behalf of the plants.

This requires energy, but any cheap energy would do, it doesn't need to be from fossil fuels.
NoSQL Search Conference Ticket Giveaway
Really solid advice throughout.

If you're using non-POD C++ and want to allow custom allocators (wise), I would keep it simple and use placement new instead of messing about with per-class operator new. If you must you can wrap it up in little internal template functions to make it a little more palatable.

Eg:

template <typename T>
T *yl_new(Context *context) {
return new(context->malloc(sizeof(T)) T();
}

template <typename T>
void yl_delete(Context *context, T *object) {
object->~T();
context->free(object);
}
Someone may have commented on this: Shreateh could have used/sold the bug to anyone, however he chose to bring it to the attention of FB. Knowing they didn't have enough information [to claim it as a bug or NOT as a bug] from him they could have requested it instead of ignoring it. Despite the fact he used it to post on Z'bergs wall, in his mind he that wa sthe most articulate way for him to show them what it does. Clearly he had no intentions of hacking his account further else he wouldn't have declared who he was. To be outraged by the fact he was desperately bringing this bug to FB's attention is ridiculous and you should be thankful. Instead showing reasons to not pay him are ungrateful and seem deliberate. Dude brought to you a decent hack, sort him out.
Google kills 20% time
>A calculator. Or more likely, the calculator app on his iPhone.

That sounds so inconvenient. Sometimes I like to design programs or solve problems in my head when I'm in the swimming pool. I don't think they'd let me bring a calculator or phone in there.
"I could never have thought I could hold up the Mail as a good source :-)"

It's a struggle for me to even vaguely consider the Mail as a good source but they do seem to needle the government over certain things the others won't touch. I'd imagine because they feel they have such a swing over a large proportion of the main voter base for the UK they feel like they can get away with things that a lesser newspaper would be dragged over the coals for.
I'm very ambivalent about this article. On the one hand, it's the first serious criticism of Hyperloop that I've seen on HN. The author has dived to the deepest levels of one section of the proposal, understood them, and found a serious problem.

On the other hand, I'm disappointed with his attitude. It's the equivalent of

"This open source project is very ambitious and planned in good detail. I'm an expert on memory management so I looked at the code there and had a good laugh. This will never scale to production levels because of X, Y and Z. You can probably fix it with sufficient development time. But I won't tell you how, because I think a problem with such important code shows you're dishonest and stupid."
Happens regularly. Deal with it.

Also, I respectfully disagree on qualifying HN comments as "valuable insights trove". IMHO there are about 80% grumpy whining.
SpiderMonkey isn't a shining city on a hill in this case, certainly. In my experience though the docs that are there are easier to understand, the log messages are more verbose and understandable, and the developers are easier to get help from. I think this is all just a result of the fact that Mozilla relies more on community involvement to get stuff done, so they have to be a bit more dev-friendly.

The same dislike of documenting performance details and internals exists on the SM team, though.

Standalone binaries with debug options like d8 and spidermonkey js.exe are great for narrowly-scoped tuning and microbenchmarks, but in the real world your app runs in the browser and you end up having to debug and profile it there. That's where the whole picture falls apart (and where Spidermonkey's tools are dramatically better).

Mozilla ships two different performance analysis tools for in-browser JS that give you extremely detailed, precise performance information (JIT Inspector and SPS). They're more stable than Chrome's tools on average as well. You can literally get the browser to dump the native assembly it produced when JITting a given function.

I haven't done any perf tuning in a while, so this page is probably out of date, but I've made a point of documenting the stuff I discover about each engine, and linking to sources where possible:
https://github.com/sq/JSIL/wiki/JavaScript-Performance-For-M...
Many sites use one processor for payments from countries like the US, Canada and the UK, and also paypal for payments from elsewhere, and for any customers that prefer Paypal (i.e. trust it more, or already have CC info saved there).
I'm guessing this is another ham-fisted Surface decision that was forced onto the Windows 8 developers.
Agreed: Shreateh could have used/sold the bug to anyone, however he chose to bring it to the attention of FB. Knowing they didn't have enough information [to claim it as a bug or NOT as a bug] from him they could have requested it instead of ignoring it. Despite the fact he used it to post on Z'bergs wall, in his mind he that wa sthe most articulate way for him to show them what it does. Clearly he had no intentions of hacking his account further else he wouldn't have declared who he was. To be outraged by the fact he was desperately bringing this bug to FB's attention is ridiculous and you should be thankful. Instead showing reasons to not pay him are ungrateful and seem deliberate. Dude brought to you a decent hack, sort him out.
Oh gosh, I used to do stuff like this as a kid. I only needed a piece of paper and pencil though, no other tools. I would draw an adventure puzzle like this, but the big thing was it used BOTH sides of the paper. When you went through a door, you went to the other side of the paper (you'd have to bend the paper around your finger a little bit to estimate where the door led to).

Also, there were many locks and keys and items (think Zelda). A door might have a strange symbol on it, and you needed to find the key with the corresponding symbol to advance. Or you needed to get the lava suit to get past the pit of lava.

This is what I did during class in elementary school, and challenged my friends and brother to beat them. Now that I'm 26, I still do the same thing, but with computers and in 3D.
I think "best solutions come from new people" is an over-simplification of what actually happens. New people force you to re-examine your assumptions and blind spots. Sometimes this is useful, sometimes it isn't. This doesn't mean that new people solve more problems, but sometimes an influx of new people can help the experts to solve more problems because they realise something they assumed to be true/OK wasn't.
Good idea. I built a dictionary of terms to count/analyze, which mostly consists of technologies, frameworks, languages. It's at 135 entries now, but I can add some of these terms to it as well and re-analyze.
If everyone gave feedback as detailed and intelligently as this the world would be a better place.