skysight-inc/HackerNews huggingface dataset:
I don't get it. His first example is that since the string replace method takes a callback as its second argument, you can use it to run code. So if you happen to find an app that injects unescaped user input into Javascript, you could enter the string alert(1)".replace(/.+/,eval)// and have it run the alert.

But if the app is injecting unescaped user input into code, wouldn't a simple ";alert(1);// achieve the same thing? Why do you need to be tricky?

The examples seem to be based on the premise that web apps commonly forgo the simple escaping of quotes, and instead implement a complex parsing and analysis of user input as code to identify malicious statements, which can be defeated as long as you obfuscate enough.
Fark, mostly.
> At what point am I "allowed" to feel uncomfortable? Is it the first time in a day when I'm asked for change outside the Post Office? Is it the second or third time in a day when I'm asked for change at the bus stop? How about the fourth, fifth, and sixth time when I'm asked for change at the major transfer point for buses and trains where lots of people have to wait? Or the seventh when I'm coming out of an office building?

The solution to your discomfort is for homelessness to be tackled meaningfully, not to have the police get extra authority to remove those people from your sight.
Me too, until a day later I realised I should probably try Ctrl+F5, worked like a charm.
CAGEddEVIL Urban Krav Maga Self Defence Classes, Isle of Man
Yep, I think your takeaway is exactly the right one, about planning in advance for outages.

I didn't post to try and make HN look bad, using the wrong http status code isn't a huge deal or anything. I just wanted to take the opportunity to discuss http response codes, an issue near to my heart. (In my day job at an academic library, the fact that most of the vendors we deal with deliver error pages with 200s does interfere with things we'd like to do better).

Thanks for the reply!
Likewise. With a 3 month old baby, I didn't even realise it was down until just before I went to bed and checked it on my phone.
I guess this "they're not even making money, so nyah!" attitude is an appeal to the authority of a supposed efficient marketplace.

Taken to absurdity, it works like this:

A: "Simone Weil was an influential philosopher."

B: "Ah, but did she get rich with her writing? No? Then Ayn Rand was clearly more influential."
Perspective Mockups using CSS3 3D Transforms
The depths of watergate were pretty bad, but most people concentrate on just the burglary. The fact that the president was using government forces as his personal bag men, bribing people with campaign funds, using the IRS to harass political enemies etc. was extraordinarily bad. Democracy poisoning bad.
Ok, great. Since I belong to everyone, I will accept any "natural" amount of money from anyone. Thank you.

Find my paypal account in my profile.
Massachusetts launches open cloud to spur big data R&D
The problem with people who use words like "left wingers" is that they don't realize that money is a fiction and macroeconomics works quite different from running a household or small business.
Went back to Slashdot for a day.
The government & police do not influence the British Crime Survey, which is widely considered to be the most trustworthy measure.
I think you should reconsider the assertion that poor in the US usually don't work. Minimum wage jobs leave you just above the poverty level if you're single, below if you are supporting someone. Considering cash based, under the table, transient work that poor people accept is under reported (for fear of loosing benefits which fall off steeply as a recipient's income increases) I think even finding statistics on this would be difficult.

There are sociopaths on welfare (http://www.slate.com/articles/news_and_politics/history/2013... ) as surely as there are sociopaths in power. But what this article is saying is most people who need assistance are going to do good things with the assistance.
I've worked on huge web applications that were super maintainable and fun to work on, solving pretty interesting problems for multi-billion dollar companies... In PHP. I sometimes want to defend the language, but it does have some terrible parts to it, and a lot of the people that use it aren't software engineers. But a lot of them are, and so I just choose to work with them instead of complaining about it all!

On top of that, the latest developments in the language and community have seen some big changes for the better around tooling, best practices, and the like. So I'm firmly of the belief that with the RFC, PSR and Composer/Packagist trio, as well as things like HHVM, we will see things begin to change for the better on this front in the future. Call me Mr Optimistic ;)
I mean the people employed to administer the current bloated and inefficient welfare system.
What happens if a basic income were adjusted for those price increases? One would think it would be linked to CPI and living costs.
I totally concur if a group of people decides to go all out in asshattery, the worst thing is for business is to participate - they become partial which is never good when you start taking sides in this sort of thing.

If you get court order to take a page down do that - probably because it is illegal. IMO the more drama the more your business is visible. For one I heard very good things about Digital Ocean - however I am very libertian minded and I think whatever people go going between themselves - they should figure it out. If things turn criminal let police deal with it.
Response to the request to remove CFRG co-chair
It is a world where we purposefully place people in permanent poverty. Give them enough to survive but not climb out of their situation.

This idea was addressed by some of the points raised in the article. Many of the homeless people mentioned in the first section spent their money to better themselves with education. Students were able to study without as much financial concern, mothers were able to spend more time with their children.

The opposite of what you said is true. Our current social welfare system is a trap. It's almost impossible to develop new skills while being forced to apply to jobs that you can never get. It's hard for someone working overtime at McDonalds to find time to go to classes or develop new skills. Some people will accommodate themselves to living only on basic income, but those people weren't going to succeed no matter what opportunities they were given. Motivated people on the margins will benefit greatly from a little financial help.

If you've seen the harm done by our current welfare systems, why don't you want to pursue alternatives? Basic income isn't supersized welfare. It's a whole new concept that will open up opportunities that a lot of the poorest people never dreamed were possible.
I released http://twittersearch.algolia.io/ :)
What 'law' are they enforcing here? They are enforcing their own TOS, which is perfectly within their right. I'm not saying this is the right thing for them to do, but he is using their service, so they have a right to enforce their TOS. He is perfectly able to move his blog post, unedited, to another VPS provider if he does not like what they are asking him to do.
Dear Google, haven't you missed a 1.6?
Git - The Definitive Commit Hook
People who comment on the NYTimes are literate and can use full sentences. But beyond that it's about as useful as any other general-purpose comment board: a whole lot of self-selecting, self-important, in-group tribal bullshit.
Very well said. Tackling a problem with a broad brush law that grants liberties to one group while denying those same liberties from another should never be the answer.
I don't think what they are doing is the right thing to do, but they are perfectly within their right to enforce their TOS. If a person does not like that, they should use a different VPS provider.
Poverty is not the issue, though it is the cause. Restated, I have no problem with someone begging for change _because they are poor_. The problem comes from being hassled, repeatedly, daily, by anywhere from 1 to 8 (not kidding, kept count) people who are trying to sell me something, trying to get me to give them change, or trying to have me sign a petition of some sort. Where does the line for my choosing not to interact with anyone blur into being forcibly interacted with?
I'm quite happy with them. I run two production servers and a development server on them. Way more barebones than the AWS ecosystem, but significantly cheaper, which gives me a better margin in my maintenance agreements with clients.
Seriously? Can we stay a day without constantly checking hackernews and the internet? And then posting about it to show how much YC fanboi they are?

Maybe be productive instead and actually code your startup instead of posting on hackernews.

Seriously.

Sry, I saw this discussion was all humane, so I thought it was time for token snarky comment guy. :P
Seems fixed in French:

http://translate.google.com/#auto/en/combien%20de%20kilom%C3...

But works with yards too! (including French)

http://translate.google.com/#auto/fr/how%20many%20yards%3F

I now want to make a table recording correct/incorrect translations between the metric system and the imperial system! This is going to be an unproductive day.

EDIT: it even works in Spanish if you forget the accent on "kilometros" http://translate.google.com/#auto/en/cuantos%20kilometros%3F
No, it's always like that, unfortunately.
The Luxury Shanty Town In S. Africa Offering ‘Poverty Porn’ For The Rich
The real benefit is immutability, the rest is syntax sugar.
I think a more apt analogy is:

If 100 people produce 10 apples each, and 99 robots take over the job of producing apples, there will be 99 unemployed people with no money to buy your 1000 apples.
Well, not until the current government manages to abolish or abandon the ECHR, something they've consistently and publicly stated they want to do.
How Google is becoming the new AOL
How do you host content then? Don't most collocation facilities and ISPs have their own TOS that are not that different?
A Coder, Programmer, Hacker, Developer, and Computer Scientist in a Venn Diagram
Another, of course speculative, motivation may have been that the destroyed records could have thrown existing land ownership into legal doubt.

EDIT: The article speculates a cover-up. I'm speculating a make-this-messy-problem-go-away action, perhaps by someone who'd have to deal with the mess as opposed to someone who'd be embarrassed by it. On the other hand, I'm not denying that it's a cover-up.
Reading TechCrunch, BBC News, and flipping through Flipboard.
JS The Good Parts is a little pamphlet. But JS oddities sounds like a huge bible.
I stand by my claim, about 80% of the US poor choose not to work: http://www.bls.gov/cps/cpswp2011.pdf You may be right that some of the poor are earning additional unreported money, but that also means some of the poor are not really poor.

Insofar as the poor are secretly employed in the grey market, poverty is also secretly not as big a problem as we think. You can't have it both ways.

The article asserts that people will do good things with the basic income, but the one statistic they mention suggests they won't.

[edit: read paragraph 1 to find the stat I cite. I've compared the numbers of poor and non-poor excluding children as well, it doesn't change the comparison much. https://news.ycombinator.com/item?id=2130441 ]
Bonsai Programming
I found it interesting that in one breath you lay out your plan to land enterprise sales and in the next speak of the poor quality of the underlying code base.

A good lesson for software developers, you don't need NASA hardened code to make money.
Freedom of press is guaranteed only to those who own one. -- A. J. Liebling
Reading a book (the origin of species, to be precise).
Ah, that may be true.
Lyricize: A Flask app to create lyrics using Markov chains
MPAA joins the W3C
So is this a search engine for images or...?
Celebrated Content 3: Week Ending Friday 3rd January 2014
Larger numbers of units of a specific model sold bring greater stability to the user. When you buy one of the official steam boxes, you (hopefully) suffer less from the usual PC weirdness. Kind of like buying a HP or Dell machine compared to a "supermarket PC".

Also, I imagine you plug it in and you can start installing games, without having to go through the thousand and one steps that are neccessary to make a Windows PC useable (Is that still the case today? Been a while since I set up a Windows box).
Without access to login to their server and look at the running code anytime you like, you still don't have any "proofs" of the encryption/deletion -- regardless of whether the code is open source or not.
Will Work for Food and Lodging
I think it's search engine for sites but it's just not working. It can't even find link to main page of wikipedia and that is bad. It not even looks nice.
Um...

The main problem is that it would create an economy where the the media outlets that produce the media desired by the paying authority (people are people and the fund will not be unlimited dollars) are prioritized over others, so that the only news will eventually be that which will be known to get you paid.

I.e., the controlling body -- I'm guessing a government entity, here -- will be the sole voice of the fourth pillar, and the whole notion of press freedom is buried and forgotten.
Well I think it is wrong, A mile is not a kilometer and a yard is not a meter. I think it is a mistake, one can talk about miles in spanish and kilometers in english.
A search engine for hipsters?

Also: http://niice.co/?search=hackers
This is no different from asking someone a question, slyly videoing their answer on your Google Glass, and uploading it to Youtube.
Each individual is not harassing me but in the aggregate it is annoying and harassing. That's why I retold one (particularly bad) day like I did. One person, fine. Eight people, fuck it I'm staying indoors today. Each person was acting lawfully but the point is that all of them added together were a nuisance, especially since that kind of activity--leafleting, panhandling, and petition gathering in particular--gather around places where people must be. If I need to take route 5B into downtown, I have no choice but to be at a bus stop along route 5B so I can't just remove myself from the situation. At some point, "people have no right to not be annoyed" turns into "people have the right to impose annoyances on others" and I think that preventing this change is a worthwhile goal, even though the law from this article goes too far.
4chan has had campaigns to get "penis" and a certain racial slur inserted into books. I was going to post links but then decided I didn't want to get fired today for my web searches.
re-reading nodeweekly, jsweekly and pycoders weekly. oh and statuscode
It means "leftist" AFAIK
Politically left-wing.

Increasingly these days, it seems to be a term for anyone who doesn't give credence to the theory that global warming is a hoax made up by Satan so Barack Obama can marry his secret Kenyan gay lover.
That's a very creative interpretation of Orwell's work. You do realise that he was very much a socialist and that much of his work was inspired by his socialism, right?
The latest really disastrous LessWrong thread:

http://lesswrong.com/lw/jfr/link_why_im_not_on_the_rationali...

It turns out that if you provide a safe space for "Human Biodiversity" advocates, this can put some people off your site entirely.
Because is a developed economy, total production is an increasingly irrelevant measure.
This is unusual: an article about neural nets that actually uses neural nets.
I appreciate how open this post is. The cash crunch section struck a cord. For anyone considering starting something on their own: build a buffer. Build a bigger buffer than you think you'll need.

I started three years ago, out of school. I'm not a hacker, and didn't have an immediately monetizeable skill. I saw an opportunity to build recurring revenues (through e-book sales with a partner) and pursued it as fast as I could.

The strategy worked. Those recurring revenues are wind under my wings, and gave me the skills to expand my business into other areas.

But man, that was a tough couple years. I was constantly short on cash. Historically, when people guessed my age, they guessed [biological age - 3]. Once in this rough period, people guessed my biological age!

2013 was the year my business took off. In the final six months I earned enough to pay off my loans from school, my taxes for the year, and build a savings buffer. That was from being almost bankrupt in June.

What a difference. I feel relaxed. People now guess [biological age - 1 or 2], so the decrease in stress must be having an effect. I look more rejunvenated to myself in the mirror.

I can see and pursue opportunities much more effectively. And it's all because I have a relatively small amount of excess dollars in a bank account. That surplus allows you to raise your head and look around.

Build a buffer.

Some time ago a HN member posted about maxims he uses to guide his life, and he ended up making a daily maxim site. This one came up yesterday, it's quite relevant:

http://www.maxims.us/build-superreserves/
Scarily I can't access torrentfreak now, and I'm not supposed to be censored by anything.

This is important, torrentfreak isn't so much a pirating advocacy site as a really decent analysis of issues around peer to peer Internet. They had a really good comparison of VPN providers including which ones are compromised.
What about this labor drop? http://research.stlouisfed.org/fred2/series/CIVPART?rid=50&s...
"Oh sh*t, there goes the planet."
Googler speaks out on Manny Cardenas and second class citizens at the Plex
In the U.S., there are various efforts to compare the OSM data to TIGER data from after Census started their big quality improvement project. They go a long ways towards showing where people are actually working on OSM (which has a rough correlation with quality).
> one example: in the third world the poor usually work

You'd actually be surprised (speaking from personal experience).
Question: have things always been like this in the past few decades? Have we always gated off our poor, and passed laws to harass them? How can we change it, and will we ever? I honestly am asking, not rhetorical.
How we did 15 startups in 21 months
The Rise and Rise of Television Torture
I just put in rubbish for that part. OCR'ing books isn't bad, but I really don't find the idea of helping Google with house numbers appealing at all.
Had that too. Recovered most of the pics, thankfully.

tl;dr grovel through disk image for JPEG headers.
Bored of "SUDO npm install"?
Poll: Was HN Being Down An Improvement Or Problem For Your Day
HN was down for a day or so. During that time, did you experience more productivity? Less? Would you like it to be down more often? Did you really miss something by not being here that couldn't be replaced?
I'm glad it's down. We should consider shutting it down permanently as it causes more distraction than anything.
It was good that it was down for a while. I got much more done than usual. I'd like to see it taken down on a regular basis, but not permanently.
It was good that it was down, but I don't want to see it happen again.
I have no opinion about HN being down as I did not notice.
It's bad that it was down, but no big deal. It'd be okay if it happened again from time to time.
It's a terrible thing that we lost HN for a bit. I'd pay a monthly subscription to make sure I could access it any time.
HN is a utility for the tech community, and we can't afford to lose it, even for a little bit. We should take whatever steps are necessary to make sure it stays up 24/7
There aren't many English language sources so I have to give you an obviously biased one: http://revolution-news.com/activists-hamburg-protest-danger-...
Add a Back End to Your Angular App With Firebase
Why?

What did he say that relates to a basic income and where can I read more?

(All I, and I suspect many people, know about him is that he is supposedly the correct answer to economics, promulgated all over the internet by crackpot^H^H^H^H^H^H^H idealistic libertarians.)
I don't agree with the general theme of restricting things in this way. However, to be fair, powerful computing technologies are sometimes restricted from export to certain countries. It was only fairly recently that this sort of regulation was eased a bit wrt Iran.

http://news.cnet.com/8301-1023_3-57586991-93/u.s-lifts-ban-o...
Did Digital Ocean just lose any DMCA safe harbor status it had, by policing client content in this way?
This is basically a ploy by someone who is seeking publicity for his attack on this other individual by taking his words out of context and altering their meaning.

Here is a previous submission of HN of the disputed post: https://news.ycombinator.com/item?id=6984487

http://www.firstlooksy.com/frustrated-googler-speaks-out-on-...

His is a repost under another date of the same bat-shit crazy "nothing" that makes Gawker seem reasonable.

The author is an attention monger who probably has some sort of a personal vendetta against the person he is attacking, I suggest not to take his account of things on face value.
It says "Search for Inspiration".

This blog explains its purpose: http://blog.niice.co/2013/02/introducing-niice-a-search-engi...

According to that blog it searches on "multiple hand-picked sources (Behance & Dribbble for now)".
Ludum Dare 28 Results
... unless the owner of the robots who profits by selling all the apples to wealthy people in other countries is forced to redistribute the wealth in the form of a basic income.
Earthquakes, arrogance and do entrepreneurs have an attitude problem?
That site breaks the back button during the animation.
Yes.

Why is that in reply to my own previous comment? I cannot see how this is "replying" (maybe you intended to post a regular comment).
How to Have Horrible Phone UX
The examples seem to be based on the premise that web apps commonly forgo the simple escaping of quotes, and instead implement a complex parsing and analysis of user input as code to identify malicious statements, which can be defeated as long as you obfuscate enough.

He gives an example of such a system.

The larger issue is that the premise behind the design of web browsers is itself flawed with respect to displaying user content. As long as it is acceptable to execute JavaScript that is embedded directly in a web page (such as within script tags or as the target of an HREF), and as long as you are also trying to display user-supplied content, security is going to be extremely fragile.

We are perpetually one careless oversight away from pwnage, and we are vulnerable to mistakes that might creep into our libraries as well as into our own code.
Another damn iPhone app?
This a strange reaction. I agree that perhaps "this is different", but I am hoping I can assume that the next time I see an article on HN, about another website going down, or losing their data, that the HN community shows as much compassion and understanding. In my experience, when not related to the work of pg, there tends to be a lot of "you should have done X and there is no excuse for not doing Y!!"

If I'm being honest, it's off putting to watch community-wide apologist response to what would normally be outrage of poor execution.
I rediscovered lobste.rs - which seems to be picking up a little since I last looked. Quite a few duplicates from HN but some alternative stuff too...

(Shameless, but I'm still looking for an invite if anyone's got one....)
TBH, I don't know enough of the law to provide an example. There may well be laws that would cover the case, but the ASBOs seem to be the preferred instrument by councils or whoever. If I was the person suffering the harrassment/noise pollution/whatever, I wouldn't really care what legal instrument was used.