skysight-inc/HackerNews huggingface dataset:
> you wouldn't really want to allow threading at the JS level in a browser

I was wondering over this same statement. It seems rather...presumptuous?
I don't disagree with your point, I just hope working for Google isn't as humourless as portrayed in the film.
And I'll build a mock environment so that I can run my python script as if there is a real DOM to manipulate, and then I'll write a test rendering system to actually display the page as if everything is running in Python. Eventually I'll just implement every single aspect of a web browser so that I can be sure that after I stop transpilfering Python, I can indeed just start putting <script type="text/python"> everywhere and convince everyone to use it, so my giant mock environment will become the latest, greatest browser, and Google will spend millions adding a tune-able JIT to cpython, leading someone to decide what a great idea it would be to use this JIT as the runtime for server-side Python, and Pode.py will take over the web, and "isomorphic" Python frameworks will sprout faster than TCP connections on a DDOS'd server.

And after that, we can start writing and re-writing everything to "transpile" to PHP and use hip-hop to make it C++. I can't spend any more attention on random me-to JS without feeling like I'm waiting for my vestigial appendix to fall out.
Both my kids required a few stitches near their eyes. Did I opt for the $30 suture kit and do it myself? or did I opt for on-demand (there & ready, patients or not) doctor analysis (risks of fractured skull or aggressive infection), sedatives (both wriggled & screamed as I held them still, how much worse without?), experienced threading, and whatever other ideals applied?

"Sure you can buy a hamburger for a dollar. But then you'd have to eat it." - local restaurant ad
Yes! People want a prescriptive approach, and then they are surprised when they get a random walk. Once you use your brain and develop a meta-approach that you understand why it works (and doesn't), surprise, you beat the market.
I'm not sure how this is significantly different from the Federal government's approach. Both hired Big Data. There was little to no accountability during the process. In the end, neither product was delivered because the consequences of nondelivery weren't, well, consequential.
I laughed. No first-hand experience, but a buddy of mine has to work on fancy web code that just has to deal with just 1 ancient COBOL backend from an insurance company - he spent over half of his project's time dealing with it. And he was lucky: The original COBOL Programmer was still on the payroll and available for questions!
I think you may have misunderestimated the scope of this "site." To be fair, you'd be in pretty good company with many people in the Administration.

The following would not be easy to complete during your weekend:

1) HIPAA compliance

2) Verifying income against IRS records to determine eligibility for subsidies.

3) Automatically forwarding gathered information to insurers, in a patchwork quilt of formats, many of which are under-specified

I believe one could get to at least two dozen requirements which are similar in complexity to the above three without breaking a sweat.
There are three right here in my kitchen, so that would allow me to charge up to 9 devices in the most high traffic room in the house.
David Kennedy, they guy who just admitted it on TV?

> The botnets that continually, around the clock 365 days a year "poke and prod" nearly every IP address that responds to port 80 or 443?

If you can find an operator that confesses it publicly. How many do it? Pretty sure if say Vasile Bogdan from Bucharest, calling CNN confessing he just broke into Bank of America CC processing center, he might find himself on Interpol's most wanted list.
These things drive me crazy, 40 million $? I'm sure half of the people here in HN if not more, would do it twice as good, twice as fast, for a fraction of the price.

On the other hand, I've worked with tough clients that want a solution "for everything" and force the vendor into a rigid waterfall / BDUF but in the same time keep changing the requirements as they go.

But come on, for 41 million dollars you can develop it as static pages, that get submitted to mechanical turk and will have change to operate this for years... I don't get the math.

I'm in the wrong business, I should start applying for government contracts.
"Most things"? Haven't we just learned that if you make a smart phone that looks like a smart phone (rounded rectangle, button below screen) you can (and will) be sued?

I suppose the fact that stuff like that is the area where big legal battles are fought, does imply that a lot of the "hard" patents (radio spectrum/coding, noise cancellation, audio encoding etc) are indeed covered by FRAND patents, though. It still seems to be a bit of a leap to go from there to saying that you'd not run into patents when making a smart phone?
They probably heard of it, but they are probably using SOAP webservices or Java EE MQs
His bio said he spoke at Black Hat. I can't find anything listed by him except for an "Arsenal" talk, which is a lightning talk people can give about open-source tools they've written. Can someone find a real BH talk this guy has given?
Does anyone in California know if you can get a discount on private health insurance if you're currently unemployed (healthy non-smoker) trying to start a business and don't want to sign up for Medi-Cal because the only doctors are far away and crowded?

Also the Covered CA site has an expired security certificate.
For those that have been following this, Eric Holder the head law enforcement officer for the USA was found guilty of contempt of congress. That means it was proven that he's a liar. This goes right to the top. Right to Obamao.
Where did you see those claims? I would not be amazed to learn that there was SQLI on the site, but I don't see it in his report.

Are you talking about his report to the press earlier in November? He appeared to have been referring to cached search autocomplete terms with SQL syntax in them, evidence of people attempting SQL injection against the site. Which, of course, people would do whether the site was Healthcare.gov or CatBnb.com.
Why Millennials Can’t Grow Up
This is first up in my list of things to fix!
I would rather focus on the many opportunities technology and the internet offers to preserve those 6000+ languages that are currently not being used online. It's not very bold to say that technology will prevent them from disappearing completely unlike many languages in history that were not persevered.
Average FPS of 42 is OK, but in any serious FPS you'd want to have 60 FPS constantly at least. Any number lower than that and your shooting accuracy decreases greatly with the framerate.

So, playbable, probably, but enjoyable, not so sure about that.
This'd be a great use case for a bug bounty. It's a situation where you have tons of bugs[1] and tons of cash to pay out a bounty. It'd probably be cheaper to open source all the code and hire one full time person to manage the bounty program then whatever they're trying out right now.

[1]: Pure speculation as I have neither used the site or looked at the code but I'm assuming most people will agree with me
You are a bit mistaken on the price differences. The 16GB iPod Touch is $230. The 16GB Moto G is $200 and the 16GB Nexus 5 is $350. The $300 iPod Touch is 32GB, which is $100 less than the equivalent storage size N5 (and there stops being a Moto G at this point). So if you have an extra $100 you could get an N5 instead of an iPod Touch - or you could spend that extra $100 to get a 64GB iPod touch.
This is the third time in the last week you've spammed HN with your link. It's obviously not working. Go somewhere else.
Right. The systems healthcare.gov has to interface with are established and NOT subject to change. It is up to the new system to be interoperable with whats already there. And this is where this get hard: you have to be able to speak with a myriad of different systems, translate the data to and from the schema of each target system, and do it all securely and robustly. This is all much more complicated than most of the armchair critics realize.
"A language’s Wikipedia presence was one of the most important indicators of its ability to leap into the digital age."

Which made me curios to search for and find Vicipaedia http://la.wikipedia.org/wiki/Vicipaedia:Pagina_prima, it's in the 10k+ article category.
I don't think it's unreasonable to expect that a website which people are legally obligated to use by a certain deadline, entering very sensitive information in the process, have a decent standard of security at launch. I don't see "having the crap beat out it in production" as a good strategy here, and certainly is worth complaining about, even if not worth re-writing over. Would you be comfortable entering your SSN at healthcare.gov?
You are very wrong. Poking and proding is completely legal and isn't going to send anyone to jail.

He's not performing a full pen-test on the site. He's not looking to get a shell. He's just checking out best practices. Is there an HSTS header? Is my input validated? etcetc.

The main hacking law that applies here is the CFAA and Dave definitely isn't violating it. To violate it you have to access something you're not allowed to. Nobody will EVER go to jail for an XSS or the types of things he's poking around for. This is because the computer the code is running on is his own....
That was my immediate reaction. I'm glad to hear it from an expert in the field of security.

Hearings like this tend to be partisan by their very nature, and committee members can and will cherry-pick the experts whose testimony makes the best headlines. I lost any expectation I had that this would be a fruitful inquiry when they had Kathleen Sebelius up and most of the questions were along the lines of "why did Obama do this?" "why did Obama say that?" "what did Obama know about this other thing?" as opposed to, say, "what went wrong with the website?" "what are you doing to fix it?" and "how can we stop this from happening again?"
The Language-Language Matrix
Hong Kong Confirms First Human Case of Bird Flu
Actually in this case it would work fine. The Seiki's panel is actually 120hz, the 30hz limit is on the input side. Send it a 24hz HDMI signal and it can easily match that up to the panel's actual 120hz refresh rate by simply showing each input frame for 5 panel refreshes instead of the 4 refreshes it displays the 30hz input at. The Seiki can also take 1080p input at 60hz, which would be a reasonable fallback for gaming. Run 4k 30hz for desktop usage, and 1080p 60hz for gaming.
One of my software engineering professors told how back in the 70s when he was promoted into management, he had his teams write a user manual before starting on coding. He said it brought up all the important fuzzy-requirement problems much earlier in the process, for much lower cost.

Plus, you ensured that there was a manual written. That might not happen otherwise, or it might be done in a rush because of the next project.

It was a different time, but I always found it to be an interesting anecdote.
1,200 year old temple ruin razed in Malaysia
There's a model in all this that many developers lose sight of. More and more intensive work is being lifted on the front end. Obviously not a universal phenomenon, but important to any discussion about performance, threading, and IO blocking.
YouTube is 30fps, so it should match up with vsync nicely.
I've been using GMVault for the past month and I have really enjoyed it. I wrote a cron job to periodically pull down my latest emails and back them up (encrypted).
> They are following the Google playbook of creating goodwill and good PR through these types of "innovations" that are destined to remain as vaporware or never really considered by the company to be a real business for them to get into.

I'm sorry, what Google "innovations" are you referring to here?
Hello Samsung, Meet SenseGiz, A Wearable Tech Startup from Belgaum
How on earth can you think a free market solution is appropriate for emergency medical care? For elective procedures, sure. For the ER? How do you expect the consumer to have perfect knowledge, rationality and freedom of choice in that scenario?

If your kid is gushing blood, you call an ambulance to take them wherever they can get patched up the fastest. To expect someone to shop around until they find an equilibrium between supply and demand in that situation is ludicrous. It is absolutely the role of government to provide a safety net in these situations.

Source: I live in a first-world country and thus have universal health care.
Last first: yes.

For the rest: if you have standards or expectations for the security of any site than handles your personal information, you are bound to be disappointed. I am less worried about the information I post to a site like Healthcare.gov than I am about online banks. How secure do you think new, production, real-money online banking sites are? Here's a hint: you have more to worry about than open redirects.
The thing that scares me most about US is not NSA spying but health care system.

People can get broke by breaking their fingers.
I had a panic attack in the beginning of the year which lead to severe PVCs in my heart. I freaked out and thought I was about to have a heart attack, so I decided to go to the ER. They hooked me up on an EKG and told me I was OK and that it was just anxiety. After more than an hour of monitoring and a few blood tests, they let me go home.

A few days later a $4K bill came through the mail :(

I'm appalled by the cost of health care in the US. For routine stuff the level of treatment and the expertise of doctors is not different than in Brazil, where I come from, but here I pay orders of magnitude more than I used to pay there. Health care here is so expensive that my wife said the other day that next year she's doing all her medical exams when she goes to Brazil.

What is the reason for such absurd prices in the US?
You could do that and gzip though; it would probably yield some savings.

An obfuscator generating code à la iocc efficiency would be quite neat (e.g. http://www.ioccc.org/2012/endoh1/endoh1.c)
Not sure why your comment was down voted. You are correct. The "news" are reported such that you agree with them and your thus more likely to stay on the channel.
Reflected XSS testing can easily end up disrupting the whole site for every user; all it takes is for input to some endpoint to get stored and replayed across the site. Relying on the idea that any kind of active testing against a site you don't own is safe, technically or legally, is a bad idea.
I'll do it in MS Frontpage for the cost of a sixer of beer and a box of twinkies.

Toss in a bag of M&M's and I'll do up some animated gifs, too.
+1 If you priced it like an airline, you'd have dynamic pricing models to obfuscate the fact that you are ~front-running clients based on their route-inquiry history (& cookies)!

https://en.wikipedia.org/wiki/Opportunism
Send GMail emails from the past
Customer service is definitely non trivial, and it's actually something that needs to be part of company's culture and be driven from top management. I heard that at Amazon, Jeff Bezos asked all managers from from director level's up to do customer support one day a year in a call center (including Jeff himself). I can't imagine Larry or Sergei would pay any attention to that kind of things, and just ask why can't we automate that self-help page :)
Well then the #1 rule is also the most widely violated rule on the Internet.
Also verifying citizenship with DHS, verifying no benefits are currently being received by Medicare, Medicaid or through Veterans Affairs. I'm sure a lot more.

It's a nightmare combination of legacy DB integration where if you make one mistake that ends up in an illegal immigrant getting healthcare your ass will be hauled into Congress to testify.
Seeming reasonable to people this thread is not a priority for India. Neither is seeming reasonable to western countries. India wants to industrialize, and they will do it any way they can.

If you care about emissions, you need to understand that. Saying that they are making dick moves for making perfect reasonable, rational decisions given their position will not be compelling to them.
> Every european country has own laws, culture and language.

You're completely disregarding the EEC and European Parliament. As an aside on language, while on the train to Brussels from Köln, I was chatting with some Young Greens who were en route to a pan-European Green conference. One was from Serbia, one from Germany and one from France, and we were all speaking in English, it tends to function as a lingua franca, so language has never been a barrier for me yet. The multilingual capacity of Europeans really puts me to shame, my German barely goes past "I would like a beer" and "I would like a coffee".

But yes, they have different languages, so i18n is a thing you have to pay attention to, and yes, they have different cultures and markets, so how you sell and engage people can differ. But you can recruit a small cadre of local sales experts to do your sales - a sister company of ours develops in the Czech Republic and sells in Poland, Romania and Turkey. The European market is hardly as balkanized as you make out.

If what you say was true, then iPhones would have presumably never impacted in Europe - after all, every european country has own laws, culture and language.
i had it as a homework in physics. and another similar of a cube with capacitors at each edge.
Ask HN: Is it normal that designers get awarded, not programmer built it?
Here is the situation, i don't usually go behind rewards and recognition, but it does get you when you know you built the product and you are only person who did the code from start to end and the visual designer gets all the rewards.
Is it common in small teams or is it just "this is how it is, developers don't get the rewards" kind of things. i'm just confused.
HN, please pour in some inputs.
Isn't that what I do "partially" with searching, though? I am looking for something I don't necessarily know ahead of time.

The stuff I don't know I don't know is exactly that which is most valuable to broaden my horizon.
Post a SHA1 hash or two, here or on Twitter. I believe you, but let's keep it concrete.
In Japan, stitching of that size would've been around $20-30. And that's not patient portion. That's the amount doctor is reimbursed by the government.
Go2js: Go to Javascript translator
These high chargemaster prices are a consequence of how insurance companies pay providers. Private insurance companies never pay the list price, but rather a percentage of it.

It's sort of like if your boss asked you to something and offered to pay 200% of your costs. You'd certainly have an incentive to overstate them!
Reflected XSS? Do you mean stored? If Dave is testing for reflected XSS he's going to be alert(1)'ing or using img tag....Which is not a persistent xss...

For reflected xss to affect every user on the site he's going to have to use his own toolkit to send a malicious link to every user on the site....
Chrome Apps are coming to Android and iOS
Have you seen the profit margins for the hospitals with these high prices? They certainly aren't raking it in.

I agree that's stupid, but that's how the system works for paying for medical care in the US. From the perspective of the hospital, it makes perfect sense.
And how much of that is "profit"?
I've worked on two roughly similar but much smaller projects, one of them with an AS/400 admin who had to be sent documentation on what JSON is (he was "familiar with" XML but hadn't used it before), and another working through a middleman company which had built a reasonably sane API to query a small subset of the offerings of several insurance companies across a particular set of states. Both projects were a huge pain in the ass, and neither of them even required testing for eligibility.

When I think of healthcare.gov, I think of that same pain in the ass multiplied by the large number of states and additional insurance companies involved... as well as testing for eligibility, doing income validation, calculating subsidies... probably some state-by-state regulatory requirements... just the sheer number of external organizations and systems involved boggles the mind.

Frankly, I'm shocked it works even to the extent it does.

Incidentally, the complexity involved in building a site like this for so much of the country is why the ACA was set up for every state to implement their own exchange. Unfortunately, a lot of states didn't pull their weight and now it's the feds' mess to clean up.
If it were possible to translate every concept or expression, transparently from any language into any other, there wouldn't be any real reason to have more than one language. Or, in other words, if the only differences between languages are cosmetic, different words and slightly different grammar, then there would be more to gain from being able to communicate without using a machine as an intermediary than from keeping the old phonemes (which will eventually be replaced anyway) in use.
This is being developed by Google, despite being hosted on Github (and not code.google.com):

https://groups.google.com/a/chromium.org/forum/#!topic/chrom...
New Obamacare Headache: Is Your Enrollment Real?
I am probably somewhat wrong, not very wrong. It depends on what "poking and prodding means". That is why I said, it _can_ get him in legal hot water.

Even port scanning was not always a free pass. Around 10+ years ago there were a couple of court cases that revolved around it. Luckily the judge ruled in favor of the defendant. But what if it was an SQL injection, or what if he did a GET request and obtain the list of plain text passwords, what if he pinned the CPU to 100% by testing one of the vulnerabilities. That is not 100% clear cut.
When I was in school, I used to troll around government offices looking for easy contracts my friends and I could actually deliver on. What we discovered is that the amount the government pays is not for the work, but for the pain you endure in dealing with the government.
Oh, admit it. Antirez wrote a hell of a blogging platform.
I mean reflected. The kind you don't expect to get stored. If that's a surprise to you, you might not test a lot of websites, because this comes up somewhat regularly.

By the way, the XSS payload has nothing to do with the persistence of the attack. You alert() stored XSS in testing too.
Maturation cannot occur without independence. The Great Recession has prevented independence for a large number of young people.
Fantastic article. For more info on why US healthcare costs are so high, I recommend a recent article from PBS: http://www.pbs.org/newshour/businessdesk/2013/11/why-does-he...

"Administrative costs of running our health care system are astronomical...Duke University Hospital has 900 hospital beds and 1,300 billing clerks. The typical Canadian hospital has a handful of billing clerks."
Two issues came up during congressional testimony that I haven't seen discussed are (1) the constantly evolving requirements and (2) the lack of security. I don't know whether the Oregon site has security issues, but the evolving requirements would likely affect both the federal and state sites. According to the testimony I heard, the 2400 page law resulted in tens of thousands of pages of regulations, which were still being codified up until September of this year and impacted site requirements. If this is true then it's little wonder the project failed.

BTW, as an Oregonian myself, I find it irritating that the site doesn't work but we are still being subjected to the truly awful Cover Oregon ads (see http://www.youtube.com/watch?v=Xv2UUcXCo9g).
So, do you have any experiemce of consulting work (I mean the big firms like McKinsey and Accenture)? Most consulting work comprises being paid handsomely for failing to deliver. Sometimes they get paid to destroy companies. (I think McKinsey has run some countries into the ground.)