skysight-inc/HackerNews huggingface dataset:
> Also privacy is like a thermodynamic arrow.

Running off on a tangent, that's a really interesting analogy. I wonder how much could be done with the notion that privacy is the opposite of entropy: that is, privacy is about minimizing the arrangements of how your information is formed, and there's a universal, inevitable trend towards maximizing those arrangements. Differently, privacy as the predictability of how a piece of information moves: as entropy, or publicity, increases the predictability of the information becomes less as its possibility space increases.
On the contrary; I think those are already well taken care of (even in USA, with E-1/E-2, L-1/L-2 and probably a few others). If you have a successful business, you can move nearly anywhere.
Interesting checking the traffic rankings of the two sites. stevepavlina.com killed a popular part of the site and has gone steadily down over the past two years, ranked at 13951:
http://www.alexa.com/siteinfo/stevepavlina.com

4chan has added boards whenever I check, has gone up rank pretty steadily the past two years, and is ranked at 729:
http://www.alexa.com/siteinfo/4chan.org

Both authors intellectually masturbate quite a bit in long posts, but it is clear who made the better decision in terms of user interest.
I'm not sure exactly how your proposal might work, but, generally, the problem you would run into is that the group of characters can be shifted. So you'd end up having to compare every possible shift.
I find it interesting that DHH dismissed this out-of-hand given Egor's history with Rails. In his tweets he highlights some pretty large Rails projects that impact a lot of users/sites.

I know a few of my own are affected by this.
Ask HN: Why do people like this get banned?
I recently turned on "Show Dead" in my settings, and have been seeing users such as this one: https://news.ycombinator.com/x?fnid=CVczXZH5Wb9GnOwIlOBszu

banned for no clear reason. His comments were all quite short, like another recent case I ran into, but not immediately thoughtless or argumentative. I could certainly find worse examples of non contributions in almost any topic. Is there some guideline at play that could be explained?

If I happened to pick a case where he was doing something shady that can't be seen in his comment history, feel free to ignore this. I'm specifically interested in knowing if there are non-obvious etiquette guidelines of which he ran afoul.
Facebook's logic is utter BS. Not even G+ is that bad. They could publicize the list of Friend Requests, not confirmed Friends.

The same logic means that all of Mark's posts should be public, if his friends check a box saying "publicize my news feed".
You sound pretty angry. Lucy's claims, true or not, clearly struck a nerve with you. I think even if she did have more data you'd find someway to discredit it. You could have easily just shown the very real examples of rich people from poor origins, but you didn't do that. You jumped straight from poor Japanese man in Japan to minorities & women. Probably because Lucy's comments directly conflict with your world-view and opinions of minorities & women and that's what offended you.

What do you think of the following articles? Do you find their implications as disturbing as Lucy's claims?

"Poor people, generally, make bad decisions—bad in the sense of their long-term physical, mental and financial welfare. But their bad decisions aren't the reason for their poverty. They're caused by it."

@http://killermartinis.kinja.com/why-i-make-terrible-decision....

"Growing up poor is bad for your brain"

@http://motherboard.vice.com/blog/growing-up-poor-is-bad-for-....
Summary: The fractal dimension of a software project is roughly 2 or 3. :) https://en.wikipedia.org/wiki/Fractal_dimension

Now, if you think about that metaphor for a while you may find value in seeing:
(a) the metaphor doesn't really fit intuitively because software projects are often charting new ground, not zooming in on a predefined complex problem
(b) the metaphor is not too bad of an intuitive explanation -- you learn more about what is really needed as you get closer to the details.
If you really can twist your brain into ascribing malice to those words, it's not surprising that the self-evident satire is completely lost on you.

Imagine if the license chose Bill Gates as the exclusion. Would it seem more satirical to you then? If so, why? What if it were George W Bush?
What niche do you see Scala filling on .NET that isn't already handled by F#?

Case in point, .NET already has FunScript, an F#-to-JS compiler: http://funscript.info/

FunScript also provides a way to do strongly-typed interop with TypeScript, via F#'s type providers.
This is why `request.xhr?` exists. It will be false when the action is called with JSONP.
This seems off too me as well. Some of his comments could be viewed as off color on other sites but I hardly think that's the case with HN.
BTW this link is broken, if you don't sign in it redirects you to the homepage. You should copy and paste text if you want people to upvote.
Accidentally upvoted. NSA getting everything is not the same as everyone getting everything. NSA doesn't share with my mom.
Well, what do you mean by the opposite? SAT scores negatively correlated with parental wealth? Kids born in poverty more likely to complete college?

You can find e.g. that adopted children's income as adults is closely related to their biological parents' adult income, but unrelated to their adoptive parents' adult income.
location.__defineGetter__('host',function(){return 'google.com'})
undefined
location.host
"google.com"
I just managed to confirm that a similar attack is possible against sites using DjangoRestFramework. I won't publish it as the site I used to test against is currently working on patching the vulnerability out.
actually what I had in mind was doing something like:

(function () {

if (location.hostname !== 'mydomain.com')

return;

// the real content here, e.g:
$('#someid').html('sensitive data');

})();

Makes any sense?
According to DJ Wonk's Law (shamelessly self-named), when discussing software estimation, it is inevitable (only a matter of time) that someone will mention Hofstadter's Law.
Good point.

And after having a client deliver us an Adobe Air app to "fix", I am so glad it didn't become a popular way to develop iOS apps.
Probably for acting like this:

https://news.ycombinator.com/item?id=6548826
second part of your post looks vague. I'd say any GET-accessible .js template is leaking all data it has inside.

It's not precisely JSONP. It turns out to be JSONP, unintendedly. This is where it becomes vulnerable
Avoiding harsh words could look like a logical fallacy but it is just being polite. Essentially, attacking an article he wrote about software development years ago is a lot like my attacking an article on software development written by a lgbt person because of their sexual orientation. People have avoided saying that to be polite. That is why I likened it to declaring war on the individual for their thoughts for one thing, expanding it to all things.

A simple statement on distaste for the individual is perfectly appropriate, and personal, and many people would agree with you on that one.

I am pretty sure if I remember right his words against gay people was at a small conference and then was blown up by the lgbt community. No one would have otherwise known... If I were on LGBT mailing lists I would probably get emails helping to fight "orson scott card" and asking me to donate.

I see it how it is, Orson Scott Card holds no influence to change laws, the gay movement has won on marriage. It is just a matter of time until it is upon us all. Far right Republicans use it as a wedge issue but it is becoming a weak issue. Even surveys of church going people show that the idea has a majority of popularity in the positive. The Pope doesn't even want to focus on it. No one wants to touch the issue with a 10 foot pole, it's a loser, the issue is lost. The last few holdouts will get ran over.
Because the estimates are always BS, but teams get 2-3x slack before they are force to declare victory and launch whatever they have. The more over budget they get, the more they cut features (including QA and security details)
Crazy? Probably yes.

But we all owe RMS because he serves as the radical counterbalance to closed source interests.

Maybe he's a little extreme, but he does well with advocating for that end of the FOSS spectrum.

We need a RMS, whether we like him or collectively agree with his opinions.
I personally like to get outside and walk around, preferably in a less than crowded space. When I have smoked cigarettes in the past this has been a very good excuse, but now I just take walks either way.
> TextSecure oddly requires phone numbers

That's because it's an SMS app, not an IM app. It probably has the best crypto going though, and the user experience is nice (well, until you move to KitKat where every bloody app wants to eat your text messages and you end up with all your texts across more than one of them).
The odds of this natural experiment happening at all were quite low, but surely you don't mean to imply that the outcome we have observed would be very unlikely to occur again if the experiment was repeated. I would expect many of the results to be similar to this (in the hypothetical situation where this unethical experiment was done numerous times). Our environments shape us immensely.
+1 https://twitter.com/homakov/status/406466616897986560
He dismisses removal of it. He just wants to find a painless way to fix security concern. I don't know such way
proved above, can be bypassed
> Now, when you raise a kid it's easier to understand what's happening when she/he has the same kind of behaviors, physical type (including heredital illnesses) as you.

I feel this is a very important concept.

I have some personal experience with aspergers and ASD, and have learned a great deal about how such people look at the world and how that differs from those more neurally typical.

I intend to have children, but I would seriously reconsider bringing someone with my genes into the world without the benefit of my experienced guidance. I would be able to teach them so much that other parents would not even realize they needed to learn. Borderline cases in particular can leave people relatively normal in appearance (although no one who knew me ever called me normal) but completely blind to so much that they need to be able to see to function successfully in the world.

I know it well because there was so much that nobody realized that I needed to learn, and so much needless suffering that I now know is largely preventable. An aware parent with your own genes is irreplaceable.
Being A Victim Of Revenge Porn Forced Me To Change My Name
That's a good point, haven't thought of that. So the idea sucks...
true.c could be useful as a kind of helloworld -- a minimal example of the conventions followed by gnu command line programs.
That's the thing about satire, it's not always self-evident (to everyone).
My estimates are always off because management decides to constantly change requirements or didn't have all of the requirements in the first place.
Honestly, the land grab actions of google and Facebook are Also not helping to change the perception
It's _A New Kind of Search-Engine_
False.

Please go read up on modern scheme. particularly racket lang.

In many respects, Clojure is Racket, but on the JVM rather than native.
And this license, which I still contend is self-evidently satirical, does nothing to hinder RMS from his views. If anything, it helps maintains RMS' mantle within the software licensing zeitgeist. After all, we're talking about it now.
What's wrong with bouncers? ZNC has been serving me well over 5 networks for years now. I don't see the appeal in an in-browser solution at all.
I have been there, and feel your pain. It has taken me a long time to learn to say, "Oh, you told somebody that? Well, then you have a problem, don't you?" Of course, there are some companies that are so pathological that this stuff just won't get better: there's a broken feedback loop between the promises and the consequences. Ugh.
Yeah, just disaggregate content and comment. It was stupid to have every local newspaper build a boutique moderation system.

We'll have this really figured out when I open a news story in my browser and a second window pops up on my other monitor with a list of comments linked to that article from Twitter, Facebook, G+, HN, Reddit, Digg, or whatever social sites or aggregators I'm into.

EDIT: brevity.
I'm not a fan of this license. I'm going to avoid software with it.
Animals Were Harmed: Hollywood's Nightmare of Death, Injury, and Secrecy Exposed
Isn't this solved by just requiring the CSRF token on any JS get requests? (In fact, isn't this just a cross-site request forgery with a different verb than we're used to?)

I know it's only generally checked on posts, but turning it on for any xhr calls seems like it would solve any potential data leakage.
You'd be surprised. There's a certain segment of the population thats finds it vital to their self-image to insist that--in America, now--absolutely anyone from any social background can be guaranteed success if they only work hard and apply themselves; and therefore, if you're poor, you must obviously be lazy and deserve to be poor.

Naturally it's mainly successful people who say this, but they say it with such fervent faith and belief that there's a fair few miserably poor folks who buy it, generally in the form of "I'm better than the rest of you poor bastards 'cause I work hard and I'm gonna be rich any minute now." And then they spend the rest of their lives slaving for minimum wage and not rocking the boat, always convinced that the American Dream is right over the next hill. It's sad.
you have to be logged in for the request to work right?. if you are not logged in / don't have the cookie / session it won't work. so whats the problem? when your logged in you see all that stuff anyway why does it matter which flavor its in?

as long as your session is secured how will this work?
Health Care Site Rushing to Make Fixes by Sunday
Lisp Tips
Convert A Paper Airplane Into An App Controlled RC Toy
>Is this RoR specific because RoR will always allow JSON responses to be turned into JSONP, or is there something else at work?

you can't turn any JSON into JSONP. No, JSONP here is result of using RJS templates. It has nothing to do with original JSONP
2013 Safari
Personally I thought this was a genius idea and had to be shared!

What are your thoughts?
Books got me a few jobs.
Seems to me like this solution, or checking for `request.xhr?` are the best suggestions so far.
I suppose this won't work for RJS, but for other similar JSONP vulnerabilities the correct approach is probably to strip out authentication from JSONP requests -- this could be done at the middleware layer or where authentication happens. Now JSONP would only leak data that you'd give to any other anonymous user.
Agreed. Certainly, estimates of cost shouldn't be more precise than estimates of value, because ROI is the number that matters. And business is a black enough art that estimates of value are very rarely more precise than a factor of 4x.

What I think people try to get from estimates is a sense of control. But I think there are better ways of giving people not just a sense of control, but actual control.
The heart of satire is ridicule, so malice and satire can indeed live quite nicely side-by-side.
There's actually a useful Zapier script that already does this [0]. I remember reading about it on Mike Knoop's (Zapier cofounder) blog [1]. I haven't tried it out but you should be able to hook it up to any of the alert services that Zapier integrates with. (Which is a lot!)

[0] https://zapier.com/zapbook/webhook/rss/8249/hacker-news-ment...

[1] http://mikeknoop.com/my-zaps/
Note that this license is not Free or OSS, as neither definitions allow these kinds of restrictions.
I'm not entirely sure about this, but don't most of what we know about pre-Socratic philosophers come from secondary texts reporting on these philosophers' views? If so, then it will be difficult to consider these texts that have informed us about these authors as philosophical texts themselves.
If you get college credit and eventually a degree then people do give a shit.
I see it as self-evidently satirical because RMS wouldn't object to being singled out; he'd object to the license not qualifying under his definition of free software.

(Being absurd and arbitrary, it's also funny in the same way as The Ancient Mystic Society of No Homers was in an early Simpsons episode.)
it can be a solution, not ideal: proper non-xhr insertions on site.com will stop working. but for first step it's good enough.
Not on our moon.
How ugly.
The problem with covering claims of changing paradigms is: who is qualified to evaluate such ambitious claims? Realistically, not many folks.

I think the best thing for a reporter to do is to connect the appropriate experts together to build a balanced story. Yes, spend time with Wolfram, take good notes etc.--but then find the right experts to respond to and evaluate what he said.

To me, this story reads a bit too credulous to be really useful in understanding what Wolfram is claiming. I read Wolfram's blog post already, and this story seems about the same in tone and content.

What I want to see is the equivalant of this [1] article: a cranky review by an expert in the field...with citations.

[1] http://vserver1.cscs.lsa.umich.edu/~crshalizi/reviews/wolfra...
you make logged in user to visit specially crafted page, where you attack him with cross site <script> tag. and leak the data.
Except inasmuch as you're using a framework that allows any JSON data to also be requested as JSONP. The very first site I checked on this (which uses DjangoRestFramework) I was able to access email addresses from an attack page. This is purely due to DRF handling the JSONP for you without the devs really being aware of what was going on.
The information wants to be free!

Great books which do not need registration based shilling techniques for your hacking careers:

https://mitpress.mit.edu/sicp/full-text/book/book.html

http://www.paulgraham.com/onlisp.html

http://htdp.org/

https://gustavus.edu/+max/concrete-abstractions.html

https://www.cs.cmu.edu/~dst/LispBook/

Open and Free FTW!
this is slightly different vulnerability (JSON->JSONP upgrade) but it's really severe. Good find!
I suspect it's due to SO's treatment of low-reputation users. For those who don't frequent SO, when you first sign up, you are severely limited in functionality. So called "privileges" are unlocked as you gain reputation. Specifically, until his rep reaches 2000 (roughly 200 upvotes to his answers), his edits need to be approved by someone who has a high enough rep.

I guess the system works fairly well in preventing spam and gaming of the system. In this case, it seems to have backfired, leaving an expert feeling unwanted. BTW, his reputation on SO seems to be around 200 only [1] (around 20 upvotes altogether), which is very low.

In this case, the issue is probably two-fold (and serves to highlight some of the imbalances in the reputation system). Firstly, his area of expertise / activity is less popular than the mainstream ones on SO (lua / luajit only have 5000 questions tagged collectively, which is around 100x less than C#, Java, etc).

Secondly, as an expert, his answers probably cater for highly specific, difficult technical problems. These typically fly under the radar and get a handful of upvotes (unless they show something of interest to the rest of the communities, in which case a perverse upvoting cycle can happen via the popular questions list, with leading answers getting several hundreds of upvotes).

Disregarding confirmation bias w.r.t. reputation (i.e. how anything one of the SO super stars says is immediately upvoted), the most popular answers seem to be ones that involve a popular language, address a common misunderstanding / lack of knowledge (usually at a trivial or fairly elementary level), and have an element of surprise to it, which makes people share the answer. As an example, JavaScript's type coercion is always popular, even though it's been discussed dozens of times: [2]

These two issues, taken together, mean that you could spend an afternoon prototyping some guy's difficult problem, solving it, writing up a good answer, and getting only 3 upvotes for it.

A similar thing can be said for less populated time-zones; if you're living in one, most likely the questions you are answering are not on the "first page" by the time most of the SO world wakes up / has their morning coffee.

As an aside, I suspect most reputation-based systems suffer from these effects. Some of it can be seen right here on HN. Nevertheless, I guess they work slightly better than having no reputation system, as long as people aren't purposely exploiting it.

[1] http://stackoverflow.com/users/1657919/mike-pall

[2] http://stackoverflow.com/questions/359494/does-it-matter-whi...
The Simple Distinction That Will Completely Change How You Think About Upworthy
There are two pie charts under "Views by platform": "Browsers" and "Browser Versions". Under versions, both "MSIE 10.0" and "MSIE 8.0" are listed.

Though assuming the two pie charts are based on the same data, I'm not sure how specific versions of Chrome and Mobile Safari have greater shares of the "Browser Versions" pie than all of their versions have in the combined "Browsers" chart.
There's something to this, no doubt. I recently took part in a project where a firm was contracted due to their "expertise", which they fulfilled by hiring a team of contractors, most of whom were woefully unprepared, in terms of knowing the system on which they worked.
Some more:

- 3px of padding makes all the female developers?

- Postgres on the moon

- Game Over: Zynga Shuts Down 84,000 Websites, ‘By Mistake’

- IBM to Acquire Tumblr

- Firefox Beta 15 supports the possible suspension of U.S.

- Kim Dotcom: The US recording industry is stealing my ebook
Please look harder, I want to see!
'map' is the standard library 'set' type. Trying to make a 'proper set' is the sort of impractical elegance that the go devs rail against.
"Avoiding harsh words could look like a logical fallacy but it is just being polite."

The logical fallacy is accusing people who consider intolerance unacceptable of themselves being intolerant. That is an example of tu quoque.

"A simple statement on distaste for the individual is perfectly appropriate, and personal, and many people would agree with you on that one."

You seem to be repeatedly missing the point that many people - including Card - are going far beyond a "simple statement on distaste."

"I am pretty sure if I remember right his words against gay people was at a small conference and then was blown up by the lgbt community."

In fact you do not remember right. He has written numerous articles advocating for the treatment of homosexuals as second class citizens and even armed insurrection against the government should they treat homosexuals as equal under the law. You could easily find these articles if you spent two minutes on Google. They make a lovely companion to his article about how Obama is going to recruit an army of "urban thugs" to do is his bidding.

"I see it how it is, Orson Scott Card holds no influence to change laws, the gay movement has won on marriage."

Given the widespread hatred directed at them - which goes beyond mere personal distaste - and the numerous discriminatory laws that still remain on the books around the country, and the fact that there are still 33 states that specifically outlaw gay marriage, I wouldn't say that the issue is "won" by a long shot. Don't confuse some high profile victories with total victory.
China will send a rabbit rover to the moon this weekend
This of course does beg the question as to how you know when you're 1/4 of the way though the project!
A Great Education Here! Space the beginning of an infinite destination. Some day we will move beyond a geosynchronous transfer orbit because no one have measured the equator of the universe :) as of yet :)