skysight-inc/HackerNews huggingface dataset:
Update: I have added history states meaning you can bookmark / share links to the thing you're currently zoomed in on and looking at.

I'm off to bed now but if anyone has any requests or feedback feel free to keep posting - I'll check tomorrow.

Thanks everyone for your support, and especially NASA for providing such wonderful material!
A properly designed split keyboard is aimed at improving the placement of the wrists though.

I found a minor but noticeable benefit many years ago switching to the Kinesis Advantage. I've recently switched to the Truly Ergonomic keyboard; I've yet to decide if it's better or worse overall than the Kinesis.
Would 2 factor auth even fix this? If you are hijacking the session ID, the user has already authenticated.
A good example of this is how image-based submissions began dominating reddit - especially after imgur - because, more than anything else, they can be consumed in a second and voted on.

In my opinion, this development definitely did not change reddit for the better.
Politicians Will Like Bitcoin, And Here's Why
Ask HN: What's holding your project up?
What's delaying delivery, execution, go live, etc...
3D Systems Sense 3D Scanner is Professional Quality for DIY Price
I wonder how much they value the "Dropbox" brand name at. If you think sharing a file online you're probably thinking Dropbox.
You've given us no information about yourself. In what geographic location do you live? Is there a particular place that you'd like to live instead? Are there places in which you'd rather not live?

What do you want to do? You might be leaning towards web development, but that's not clear, since you asked for a "language/web framework". Languages and web frameworks are not the same things. But, let's assume for the moment that you want to go into web dev. Do you want to stick to the front end or back end? Or both? If both, do you like the idea of sticking to one primary language throughout the web stack, or does that not concern you?

And if you don't want to go into web development per se, then what do you want to do? Maintaining legacy applications (not necessarily "cool", but there can be a lot of money in it)? Machine learning? Working on distributed systems? Embedded systems? Game programming? Sysadmin? BOFH?

Try to put yourself in our shoes for a moment, and think about how woefully incomplete your question is.
I just create a torrent for the big file and email that torrent to the recipient...
C/C++, Ruby, Python - you can do anything now™
Java.

However, think very carefully before embarking on that journey. Having an average proficiency in Java already will almost certainly get you a job in some bank, insurance company or similar enterprise-style companies. At the same time you become an exchangeable code monkey that from thereon will only be hired based on the TLAs listed in his CV.

In other words, your work will become a commodity and you won't be judged by your abilities such as abstract thinking or creative problem solving any more. All that will count will be the frameworks you have experience in at any given time. It doesn't matter that you can learn a new framework within a week. If you don't already have proven experience in framework X when applying for a job it's required for you won't get that job.

To cut a long story short: Screw employability!
Note that this thread has been submitted many times to HN, but it never generated generate many comments:

https://www.hnsearch.com/search#request/submissions&q=what's...
From what I understand, Russia has a good ecosystem going for technology startups. They excel at security, among other disciplines. Perhaps the question should involve how we all educate our young people on the matters of harming others who aren't as good at one thing as you are.
The Borland name was bought by Microfocus after Borland sold the developer tools division to Embarcadero.
Depends where you live. Where do you live?
Depends how 2FA is used. If on per/action basis it could save (you know the SID but don't know the OTP/token)
It shouldn't be possible to launch mailto links without an interactive prompt; if it is, please file a bug on the browser.
why in the world are POS systems connected to the internet on public ip addresses?

Historical reasons? target does has a /16.

They can probably fill that block many times over now, but it would make sense that their numbering scheme has historical roots and to continue using that space for interstore communication today. They got it in 1993, back when we were still pretending like exhausting the v4 space wasn't a thing and before everyone started acting like the fact a many-to-one NAT requires what is effectively a statefull firewall somehow offered a security advantage you couldn't get by just writing those firewall rules.

I was at an organization with a large v4 block once. It took a few years of having my desktop, laptop, and cellphone wifi connections all with routable v4 addresses before I stopped thinking it was weird, bad design and really came to appreciate: "oh shit, this is how the internet is supposed to be and it is so much nicer to work with."
I appreciate the effort, but it was already submitted to HN at the time at https://news.ycombinator.com/item?id=1527676
For server side work, Java or C# are a fairly safe bet. Generally you would pick one or the other to learn well and focus on for a while. Try to get an entry level cert to show you're proficient and you might be able to get a position as a developer without experience within a company (eg if you work at an agency in Ops, you might be able to convince people to let you move into a dev seat after 6 months).

I think Java is likely the single largest market - .net platform costs quite a lot so it's a bit less appealing to many companies.

If you want to be a front end guy then there is only one choice (exclude transcompilers which you don't have to think about for some time) - html/css/js
It was optional in 100Mbit. In gigabit, it is mandatory.
So if sending files in the clear is free, whats stopping me from encrypting the files myself and then sending them? Is their value in key exchange, convenience?
Really good copy on the WireOver homepage. Kudos!

I counted a mere 99 words (not including navigation) and every one of them tells. Concise and casual is a powerful combination.

I especially like the slogan/pitch:

Send Big Files Really Securely tells me exactly what the product does and makes me think it'll be easy and fun to use.
What does this even mean? The name GNU itself is a joke.

I mean, the project wants to create an operating system that looks like UNIX, acts like UNIX, smells like UNIX, but from scratch with appropriate license that allows usage and access to source to anyone - so that the project doesn't get into legal trouble from whoever actually owns UNIX?

So drunk Stallman in 1981 says: "hik, let's call this, hik operhikating system GNU, hik, because it's not UNIX hik, but it sure looks like one, hik, but it's not, hik, but it kinda is hik, but it's not theirs hik it's everyone's hik". That's how I like to imagine it happened.
I'm curious what their specific methods are to circumvent ad-blocking. More specifically, I'd be interested in an extension that could keep a blacklist of companies that make use of this kind of service and inform the user that the company is trying to circumvent their choice not to be bombarded with advertisement.
A flexible FTPClient library for python web development.
Why did it take so long to launch? It looked like it was ready to go ~2 years ago.
Have... you tried clearing your cookies?
:-)
Suave is a simple web development F# library
for a free similar service check out:

https://github.com/abemassry/wsend-gpg

its a little different premise, but worth checking out
> 4. It's creepy, and you're creeping me out. [...] Incidentally, subscription content suffers a similar issue: [...]

This is mentioned a lot. I don't really see what's 'creepy' about ad placement algorithms? It's a mechanical process that results in a (hopefully) more relevant display of advertising to you. The word 'creepy' suggests unpleasantness or something frightening and I just don't get it.
I believe ADD is an umbrella diagnosis for a number of related/unrelated symptoms we do not fully comprehend, or want to comprehend. I'm sure nobody's brain reacts the same as any other, so 'imbalance' can easily be misconstrued to include everyone, not just extreme cases. It is an easily marketable diagnosis requiring little effort(patient's prerogative) and profitable returns(healthcare provider's prerogative).

I strongly agree with 2nd point, personal accountability and good stewardship/parenting are lost values in the western world. Our youth are bored and brainwashed by the media...I was too. We're constantly reminded we are 'special'(individually, just like everyone else), we can buy happiness/solutions to our problems if we have the latest/greatest (*) and 'Not my kid' is almost a national anthem. Perception is everything & it too is easily manipulated by selfish and external influences. I too am impressionable and find much of marketing insulting, sometimes assaulting. That's why I do not watch commercial television and browse the Tubez w/ AdBlock & NoScript...I am startled sometimes when I browse without them, it's a completely different experience.

edit: reworded last two sentences
3.99 One-Day shipping no longer mentioned in Amazon Prime
> I think, names like "patriotism", "freedom", "homeland" or even "solidarity" are grandly misused by politicians today.

I feel you hit the nail on the head right here.

While you state you're not from the United States, you have a clear understanding that a ridiculously large (and embarrassingly so) percent of our population doesn't possess. Not that it surprises me: My mum isn't from here, though she's now a naturalized citizen, and she has a far greater understanding of US politics than the natives!

But then, I also think there's a certain amount of similarity among politicians the world over, or as you stated "the real class in power."

To illustrate one particular sore point that meshes well with your description, many bills drafted by the US Congress are seldom these days drafted by politicians and are instead written by their staffers or, through lobbyists, by other entities that have a keen interest on influencing the bill's content. When former House Speaker Nancy Pelosi stated regarding the ACA that "We have to pass it before we can know what's in it," she wasn't joking. Many of us laughed, more still called her stupid, but she--perhaps unwittingly--provided an insight into Congress few of us are fortunate enough to experience. After all, of those who do read the bills or are instrumental in their construction, they effectively have free reign to inject what they wish. With partisan politics being such as it is, mobilizing your compatriots to vote on a bill isn't especially difficult.

I don't know what the solution is, because when you have laws fabricated by organizations with deep pockets who, by virtue of their expenditure can effectively select those who win elections, any attempt to effect change will be toothless.

Anyway, I deeply appreciate this conversation and would like to thank you for the exchange we've had. It certainly made my morning. :)
>> Imagine how much LOVE MS Office would get if it went back to something like the early days of File menus and small-icon tool bars that you could enable/disable, etc? Well, I think it would be a win.

All you're saying is people hate change. Conversely, imagine if Office has always had the ribbon and then they switched to the toolbar menu UI.

Do you honestly think people would like it better? The obvious answer is that, no, of course they wouldn't because the ribbon UI is actually a better UI as it improves discoverability of features (and Office has hundreds if not thousands of features).

I for one make better documents with the ribbon. I think even my dad at this point has learned to be as efficient with the ribbon as he was in the old world. Realistically speaking though it didn't actually take him 7 years.

The world isn't going to improve if we optimize for older generations of people who are used to a certain way of doing things and dislike change. And that statement goes beyond software.
This is something Zalewski has written about: http://lcamtuf.blogspot.com/2010/10/http-cookies-or-how-not-... --- if this kind of thing is interesting to you, his latest book, _The Tangled Web_, is excellent.
Why you're likely vulnerable to open redirect.
They didn't used to teach scheme because of employability, but for it will make you a better programmer til the end of your days.
> Robert discovered buffer overflow, which helped bring the internet into the mainstream press.

That might be a bit of an understatement :)
If you just want a job - any job - maybe. The vast majority of Java/C# jobs though are poor quality as far as dev jobs go, since the vast majority are enterprise-y positions. Most of them treat software as a cost center instead of a competitive advantage.

I would personally argue for mobile (iOS/ObjC and/or Android/Java) and/or Ruby/Rails and/or Javascript. Plenty of demand, better paying, higher quality.

Some would argue the average enterprise job is more stable - as someone who started out in C# in big corps, that was not my experience. What I would agree with is that enterprise jobs are generally less demanding, and that enterprise jobs are available in more places.
The appeal of Chromebooks is their price.
> panopticon, total surveillance, militarization of police, massive concentration of wealth and power, detention of authors and critics, etc.

The items you have listed are what paranoid "conspiracy loons" have been predicting, in the US, for the past two hundred+ years. The difference now is how it no longer requires a "large" government to do it.
> the top link for a Google search for Firefox is a Google ad for an advertiser that will deliver Firefox via a downloader along with 8 different spyware/adware apps

Is it? I get http://www.mozilla.org/en-US/firefox/new/
I read that post before, maybe I missed, but where he says about DoS possibilities of cookie tossing?
No. The problem is that for a very large range of applications 1+2+3+4+...=infinity. That’s the standard definition and the result is quite intuitive, even for a layman (infinity = verrry biiig).

For other applications, it’s sensible to define 1+2+3+4+...=-1/12(R) with an (R) to denote that you are not using the standard definition, but the Ramanujan definition. (You can drop the (R) one you are sure all the public has enough technical background.) The problem is that the Ramanujan definition doesn’t have many of the intituive properties of the standard definition. For example, in this article, eq. (8) and eq.(9) say that 0+2+3+4+... != 2+3+4+5+...

This is not similar to not discussing Lagrangian mechanics in a secondary school book. It’s more similar to mix Newtonian mechanics with the properties of the Higgs boson, and mix the density of water and the fact that electron really don’t have mass, and even say that the R and L electrons are different particle in spite the gravity force cancels the centrifugal force of the Moon (in a no Newtonian reference frame). It’s confusing, and mixing the theories can produce a paradox and be unintelligible.

If you mix them correctly and use just a little of the properties of theory inside the other, you can produce a convincing almost intelligible explanation that produce a paradox. The important point is to hide the technical problems in seemingly obvious properties, like in magic. The standard examples are mixing results of special relativity and Newtonian mechanics, or Quantum mechanics and Newtonian mechanics.

For the layman, I prefer an explanation that start saying that 1+2+3+4+...=infinity, then explain that there are other definitions, then a Ramanujan photograph, then some magic and handwaving to show 1+2+3+4+...= -1/12 (R), then enumerate some applications of this new definition, then show that 1+2+3+4+... != 0+1+2+3+4+... , so you must be very careful with this new summation.

It’s impossible to explain all the technical details to a layman, but it’s important to explain that they are hidden there, and why sometime there is necessary to make definitions that are not intuitive.
Content created by a small team over the course of several weeks/months outperforms content created in half an hour by two people.
U.S. Supreme Court to weigh cell phone searches by police
I distinctly remember One-Day shipping at 3.99 when I signed up for Prime about 5 years ago, two days ago when I was about to purchase something FREE Two-Day was available but One-Day sipping was 11.96 on one item and 15.35 on another.
Gotta love exceeding your system resources in availability.
Java + Cookie Enhanced Mode
System Resources:314% Free

That's over 214% more system resources! :p
Simple Particle Physics for C# Games
The impact on CDN providers is kinda scary.

To take an example we all know and love, a malicious *.cloudfront.net distribution could be setting cookies against cloudfront, breaking all your fancy static asset serving from cloudfront.

Is there a mitigation other than _always_ having to use a myappname-static.com domain name?

Thinking about this at a higher level -- there are some interesting similarities to "shared hosting" resource contention, but this time with domain names on CDNs. If somebody executes a forkbomb on your shared host, you're hosed. If somebody executes a cookiebomb on your CDN provider SLD, you're hosed.

Browser vendors could prevent this with good second level domain support. Register cloudfront, akamai, etc domain names as only hosting user-created content on third level domains. Pin large examples to the browser distribution, and allow TXT records in DNS specifying this at the top level.
On the other hand you have Tokyo where buildings are built for a 25-year lifespan. I would not call Tokyo a boring city, it's just different. It has its own modern character. Also, Paris was planned post WWii, unlike London which is more haphazard in configuration. The Eiffel Tower was nearly demolished after the expo. It's only now that people think of that Iron monstrosity as emblematic of the city. Sometimes a blight does take on its own charm, such as the Eiffel tower, or Tokyo (radio) tower.
! I should actually read the content of articles. That's enough internet for today.
In any argument, there is an implicit "... and I'm not leaving anything out that will substantively change this analysis" which is accepted (or not) significantly on the basis of authority by anyone without deep knowledge in the area being discussed.
> The difference now is how it no longer requires a large government to do it.

That may be, but the US government certainly is large.
No, please. Bionic is not a replacement for (e)glibc, its a small subset of a libc for Android. Now Musl, thats a real usable implementation.
Search for "Does this matter from a security perspective".

Also: take a crack at the CTF we set up. I think (a) you'll do well at it and (b) it'll be fun to watch you. http://microcorruption.com.
Interesting. Just this week I had to investigate the exact same issue at my job. One user (of course it was the CEO...) had accumulated so many cookies that on some pages of our website he ran into the HTTP request header limit and would only get a 500 error page.

One risk factor is using JavaScript based third party services that use cookies with your host name. In our case, it was Optimizely that was storing pretty significant amounts of data in cookies. Not really sure how to tackle this issue.
Alexis Ohanian tells Charlie Rose: Snowden is a whistleblower, deserves amnesty.
From personal experience with a .me product, it is fine. There is like 1% who dont get it, but I also noticed they are the same people who mess up the non-TLD part of the address. (They just don't have great listening / reading skills)
All of them. Ok, that isn't a serious answer, but take the time to learn 2 or 3 and you'll start seeing the similarities and underlying structure needed for a web framework and the things the language will do to plug into it. And once you can see those connections, you can learn any language/web framework pretty quickly.
Another vote for The Tangled Web. It's a great read.
No. That doesn't work. There's a reason collective punishment is a war crime, you know.
Not only in Russia, but probably because these people can't pierce through the RH and "corporate" BS wall.

It is also much easy to be motivated to do something like this, than another business app in Java.
Why isn't the obvious fix discussed: Change browsers to not let subdomains set cookies for parent domains.

Probably this feature is of critical use. If so, would be grateful if someone explains it to me.
You know, I'm actually surprised we haven't solved this particular problem yet. We have autoconfiguration protocols for stupidly complex things, like UPNP. It's a wonder nobody has created either a daemon (to run on domain controllers), or a network appliance, which:

1. heuristically detects unconfigured/default-passworded L2/L3 hardware (e.g. routers) on the network;

2. generates and sets a strong password for that hardware itself;

3. proxies all further access to that hardware, keeping the password only between it and the captured devices (and hopefully delivered only over TLS, if that's possible);

and 4. has actually-sensible security itself (e.g. using SSH keys, HTTPS client certificates, or any other non-repudiatable token type.)

Effectively, it'd act as an automatic password vault and security gateway for all the devices too simple to have good security themselves.
TYYP: Protocol for government controlled information systems
Why there's no updated book out there (in the cold!) ?
There's a similar self-denial of service you can run into when you're injecting javascript and cookies into third-party pages.

Optimizely (YC W10) had this problem when they were setting cookies on a single domain across all of their customer sites. If you happened to be the kind of user that visited websites that had a high chance of using Optimizely, you quickly accumulated enough cookie to make their fronting proxy reject your request for their JS.
Show HN: Ken, Curation of best programming news on the Internet
Given nothing else: learn either Android or iOS Development.
This is why I cross-remap _ and = .
Yes, now I see. Weird it stayed not fixed, Public suffix list is not implemented in Chrome.

Anyway, the list is not even close to real solution (just had long discussion with @titanius on twitter why not). So many quirks and use cases of <sub>.domain.

> it'll be fun to watch you

uh. hmm, ok.
As with many standards, you can find an unofficial 'final committee draft' for free if you look around. It doesn't prescribe a layout for keys other than the cursor arrows.

ISO9995 has been responsible for a lot of nonsense from a programmer's point of view — for instance mandating Control in the lower left rather than beside A. Similarly its sister ISO9241, despite nominally being concerned with ergonomics, helped drive some of the best key switches off the market.
I think this touches upon an important point: "employability" will depend on which subsector of the so called "software industry" you're aiming for.

Enterprisey places will ask for Java. Startup'y places might ask for Python/Django or Ruby/Rails. Embedded software (microprocessor places) or Video game places will ask for C. Apple will ask for Objective C.

"Employability" without putting in some constraints really doesn't make much sesnse.
Not a counter to your comment, just a field report on Cincinnati, since you mentioned Ohio:

Supply of ruby developers is lagging demand, with two well-known and growing agile-development companies with a ruby bent (http://neo.com/ * & http://gaslight.co) & a host of funded ruby-based startups coming out of The Brandery http://www.brandery.org/ that are hiring at market rates.

It's an underrated city with great arts & entertainment, and an active community of developers.

* my employer