skysight-inc/HackerNews huggingface dataset:
I think token based authentication for API calls is great, but for browser based usage cookies are extensively studied and well understood mechanism that is IMO a much safer option.

You wrote that XSS is much less risky that CSRF, but 'based on our experience' argument is not really strong. For example OWASP study lists CSRF as easier to prevent than XSS: http://owasptop10.googlecode.com/files/OWASP%20Top%2010%20-%... To me this makes sense, XSS vulnerability can be introduced anywhere in your application code, CSRF can be dealt with in a single middleware, which greatly simplifies prevention.

How about https only cookies? Can you enforce that tokens won't ever be send over http? Can your enforcement work in a presence of XSS (as is the case with a combination of 'secure' and 'httponly' cookie flags).

With tokens it is easier to do authenticated cross origin requests. But a new mechanism may be vulnerable to a new class of vulnerability, where a web app will be tricked to make such requests to evil domains (it may sound unrealistic, but remember that CSRF was discovered many years after cookies were introduced).

Cookies can also require no server side state. You can put signed, encrypted content in them and many frameworks support this, which shrinks a list of token benefits a bit.

I do think that token based approach is more elegant from the architecture point of view, because you don't need to deal with two different authentication schemes to support browser traffic and API calls, but I'll still stay with cookies for browser auth.
I'm curious too. It wasn't really compelling copy (for me), but I don't see why Medium's would be better in this case.
It is the largest country that is entirely in Europe

http://simple.wikipedia.org/wiki/List_of_European_countries_...
If you read more closely, he mentions that he uses a Kinesis Advantage where his control key is quite convenient. The heatmap is just plotted on a standard keyboard.
This guy was nowhere near one of the top players in Eve. He was a pretty normal player.
>Consider them all schemes to lure money into the creator's wallets

Some launches, like Dogecoin's, are done ethically with no pre-mining. Look at the coin creator's launch plan and if they violate (as the recent Coinye coin did) take them to task for it (Coiye crashed and burned).
There are also other points that are completely wrong:

> in September the rightwing, anti-Islamist Progress party – of which Breivik had been an active member for many years – won 16.3% of the vote in the general election, enough to elevate it into coalition government for the first time in its history.

Although I feel weird as a norwegian and voter of a different party to come to the defense of FRP, the party was founded in 1973 on reducing taxes and reducing the states influence on the economy. And this still seem to be their primary goal and was all they talked about during elections when I still lived in Norway.

I have seen the statement repeated by others more familiar with Swedish and Danish politics that FRP is a racist party, but at least historically that has not been their call-to-action and I have not seen anyone make a convincing argument that this has changed.
Here's how I'd improve the security.

1) Forget USB drives, they are a nightmare. In fact, forget any writable medium. Get an old laptop and take out the HD. Boot it from a live CD. Use only this machine to edit your blog.

2) Make your passwords complex and write them down on a piece of paper hidden somewhere. Don't host them in any digital form anywhere. You're much more likely to screw up the digital stuff than get pipe-wrenched.

3) Forget bitcoin or any other funding mechanism. Just pay for your computer yourself and use a free blog hosting company. Don't buy a domain, just use domain.wordpress.com or whatever. Don't let money touch the blog at all ever.

4) Don't collect stats on your blog. What do you need them for?

5) Do all your posting from public WiFi points like coffee shops. (Buy your coffee with cash.)

To go deeper, consider the pattern of your traceable activities. Don't deny who you obviously are. For instance if you see one of your blog posts on Reddit, HN, Facebook, etc., click through and read it from your regular computer. After all it is probably a topic that you're demonstrably interested in, and the point is to pretend that you've never seen that post before.
So was the elitism just clever marketing?
I think it's because they are losing popularity thus want to gain some revenue. Nothing wrong with this.
The answer is not trying to protect ourselves. That's a losing and lost battle. We should try to tear down anonymity, hiding and protection of the powers that be.

..Make Obama, and any "Obama", wear a cam and mic, open all the time, connected to the inet. Make all bank accounts and transfers of everybody (corps included, of course), open to see to anyone.

..The above of course is extreme and won't happen. But that's the direction we should aim for. Not protect ourselves. We lost already. Open up the opponent.
yes - its fine now
Looked at versioning file systems? (http://en.wikipedia.org/wiki/Versioning_file_system#Linux). They've been around for awhile. Can't say why we don't have any mainstream system-level filesystem yet, though.

You may also want to check out FUSE (http://en.wikipedia.org/wiki/Filesystem_in_Userspace). Something on top of git may already exist. If not, it wouldn't be too difficult to create something like that.
St. Louis Hackathon to give away $50k
This weekend (1/31 - 2/2), a St. Louis-based group called GlobalHack is hosting a hackathon with a $50k first prize. The project will be to build an app on the Salesforce1 platform. It looks like the winning team will be offered $50,000 in exchange for their code created over the weekend - and they can choose to decline. So everyone owns their code. $2 per person to attend with meal and drinks included. More details at http://globalhack.org/
Ironically, like a float, I suspect the precision of your `99.999%` estimate is dubious.
I don't think they ever had an undo feature. I remember when the platform was first introduced... people complained about it then too. Plus I'm pretty sure it's only been around for ~<2 years.
I want that f--- filter back, it's the best thing about Google...
It looks like some explanation is in order. :)

1. I founded a company called Evernet in the 1980s, funded by Kleiner Perkins and others. Vinod negotiated against at least one founder, me, hard. Then KP made sad but traditional VC errors along the lines of changing the company's strategy from a good idea to a bad one, bringing in the wrong operating management and all that.

2. So I tracked news and anecdotes. Vinod prided himself on being a tough negotiator on behalf of his portfolio companies. But various other stories of negotiating hard against entrepreneurs were out there.

I should clarify that in the 1980s, even more than recently, there was a general screw-the-founder philosophy among VCs. I once asked a popular and likeable VC what some rules of thumb were for equity splits. After some back and forth, the VC said "You don't get it, Curt -- it's whatever we can get away with." But Vinod seemed like a particularly tough exemplar of the trend.

3. I advise 20-30+ tech companies at a time. Most are VC-backed startups. Khosla is the 2nd-worst target of negative VC anecdotes I hear, details of which must however remain confidential.
I have been to Sleep No More three times myself. While I enjoy it a great deal, I think it also lacks a strong storytelling component.

Part of this stems from the choices made in Sleep No More, such as the general lack of dialog, the size of the venue, etc.

The other part of it is the fundamental difficulty in creating a narrative when your audience is liable to walk off and explore empty rooms. The game "Gone Home" succeeds at this, creating a linear story via voiceover and restricting access. Yet, it feels a bit too limiting and stilted for it to be a primary medium for drama.
> counter this by running all my posts through Google Translate.

This is smart, except... Google presumably records your translations, likely linking them with your Google account (and - even if not - could easily look up which translations led to your blog).

So, textual analysis is not quite dead, and you may have given away your anonymity by taking this measure.
Problems versus Exercises
As noted in my add-on post above, that's part of it.
Why You (And Everyone Else) May Soon Be Taking 15 Photos Per Hour
The grating lexicon is what kept me from getting into Dogecoin until this year even though I first ran into it no later than a few days after the initial release. As kbouw says in a sibling comment if you actively engage in the community you'll get over it pretty quickly.
Four Dimensional Writing
Honestly, when Svbtle first came out, I thought it was really cool and I wanted to use it.

Now I use Medium and I have no interest in it — and most people I know (who blog) do the same these days.
> Have you ever tried searching a version history with thousands of commits to find a piece of code that you think you might have written awhile back, but you can't remember enough details about to come up with a good search term?

I find that a `author(..) and file(..)` (hg) query gets you at least 90% of the way there if you have things split into a reasonable number of files. From there, running through a few guesses about search terms or even scanning the commit messages is pretty feasible. Date ranging can help, too.

There's so much data in source control - don't navigate by just commit messages.
and Ghost which is self service and hosted.
Hey, I'm Erik, an Ember.js core team member.

I'd be happy to help you track down the issues you came across and explain to you what is going on.

You can reach out on Freenode or Twitter, I'm @ebryn. Otherwise, email me at erik.bryn -at- gmail.
A perfect fit? Care to expand on your idea? I'd like to see what you had in mind.
Don't blame svbtle. It's the monetization strategy of the Internet, and has been for 20 years.
How long did HTTP 0.9 last? How about 1.0? I guess you think that early http was one of those non-stable not-suitable-for-internet-wide release protocols.
In this case, the author didn't actually comment out the code; he left it in place, assuming it would not affect the app when in fact it did.
Ask HN: did you ever take the MAPP test?
If yes, why?
Were you required to by your employer?
What was the intended use of the test result?

[edit: the MAPP test --> http://www.assessment.com/TakeMAPP/]
Haskell Tips
That is a very broad statement. At the time there seemed like lots of people were very interested in 3D TV. I still know people who are interested in it.

The issue lies in that the vocal people here are a minority, just like before. If there's no mainstream adoption, then there's not much point in creating content. Without content, there's no chance of mainstream adoption. It's a catch-22.
Indian Institute of Technology and Carnegie Mellon.
If that counts as data loss, then a "normal shutdown" also causes data loss. When the journal write gets interrupted, the database client won't get a success return, so it should not delete the data it was trying to commit, and retry the transaction at a later time, so nothing is lost at all. When the client is some entity without reliable persistent state that can not store the data in order to commit it later, that entity will be unable to connect to the database once the "normal shutdown" is completed, and thus will face the exact same problem, as the journal entry is "lost" before the write even starts.
"I think one of the worst things for an artist is when they have an editor." - loved that quote
I agree. I wish there was something that was EVE-lite or something. If the realism was notched down 2-3 levels it would be much more enjoyable. You can't be a casual (here meaning play 2-3 hours a week) and still enjoy EVE.
I am completely on board with Bitcoin, but I'm a bit amazed (for lack of a better term really) on how wealthy current Bitcoin participants will become when Bitcoin becomes ubiquitous.

It seems that it would be more fair that everyone just transfer their current personal value into bitcoin value to avoid the inflation effect.

There is no doubt that the current participants are creating incredible value for the rest of the world, and should be rewarded, but it's truly scary how much money they will have. I'd be interested to see someone do the math on how rich they would become, but I think it would be scary.

I feel that democracy is to politics as what bitcoin is to the economy, but our founding fathers were not turned into trillionaires.

My understanding is certainly limited, but I think the reality is plausible.
Python (as most commonly implemented) is also compiled to bytecode that gets executed by a virtual machine. So it's at the same "level" as Java, really.
yes Apple invented marketing that uses positive words to describe a product
It definitely would be beneficial if it were on CPAN. However they would need to add tests to the repo first :)
I think here it's not a matter of "credit worthy", it is a matter of, "does this person exist?"
Or

:%yz
The Rackspace guys are some of the nicest people I know.
Speed Read Painlessly
The future of the Occulus Rift for me is going to be programming environments, and I think workspace environments for many more professions.

If you've ever worn an Occulus you'll know that at the moment its resolution is too low to read small text, but that won't be long. You'll also know that the space around you is immensely larger than any set of monitors could offer you. Think how your development environment is now, two small full 1920x1200 24" monitors likely, sitting about a meter from you.

When the Occulus sports 2 QHD screens, you will have that same DPI, but for your entire field of vision. And because of the sensors you can move your head around, meaning there can be windows, data, tools, information everywhere around you, literally just a glance away.

And then the icing of the cake: The Occulus lets you relax your eyes! No more eyestrain, I am not 100% certain but this might allow you to someday look 8 hours at a screen, and feel like it's been a day in the park for your eyes.
Wouldn't most modern writers have a Twitter account anyway? If you're publishing your piece online wouldn't you want everyone to see it?
"dredging"? It sounds like you aren't very familiar with your tools. Commit, delete the code, commit. Now you're a rollback/backout away from getting it back.
Looks interesting.

Any action videos or demo available?
Ember vs angular ,it's so 2013...
Facebook hits back – predicts Princeton won't exist by 2021
Bitcoin Foundation Response to Allegations Against Charlie Shrem
This looks to be very similar to Freenet[1] - basically a specialized, distributed network that runs on top of the internet but has its own server/client infrastructure.

Does Avatar serve pages over plain HTTP(S) like Freenet, or is there some other magic here?

[1] https://freenetproject.org/‎
Not yet but hopefully soon.
You seem like an expert on Indian philosophy and culture. Did you watch slum dog?
This is a hardware issue that only affects some of the phones. I did a factory reset and no additional apps installed and still the phone stopped to auto-rotate every day needing a reboot. RMA'd the phone, the new one does not have the accelerometer problem anymore. However, it has the focus problem in low light conditions which the first one didn't have. Not sure I will buy another LG phone in the future.
$25 gets, what 1 or 3 hours of unskilled labour? How good investigating can that get you?
Weilos (YC S13) Moves From Fitness Coaching To Weight-Loss Selfies
Correct me if I'm wrong: are you suggesting that instead of allowing a small number of early-ish adopters to get wealthy, you want to ensure that the small number of currently wealthy stay wealthy, for fairness' sake?
You're being way too kind to these chips.

Look at the datasheet for the BMP280 barometer chip, the AK8963 compass, and the MPU6500 accelerometer (close enough):

http://datasheet.octopart.com/BMP280-Bosch-datasheet-1369120...
http://www.akm.com/akm/en/file/datasheet/AK8963.pdf
http://dlnmh9ip6v2uc.cloudfront.net/datasheets/Components/Ge...

The compass (AK8963) has a reset line, the other two have no reset line at all. Your best bet is to drop VCC, but what are the chances the hardware guy just tied them to the power bus and left it at that?
Out Of Control Co-Workers
his name is lewisajackson... duh.
he manages the development and what is included or excluded from the main branch, while he is not writing all that code he does make a huge impact on linux
I guess I need to take more photos!
To me that still feels too general: "seasoned and experienced authors" could be a 45 year-old erotica writer who sells books on Amazon, or it could be a 23 year-old tech news blogger who's been posting since age 15.

For example, imagine if the blog post / homepage looked something like this:

"Blogging built for developers"

-"Having trouble building a technical audience?"

-"Want to properly format your posts with syntax highlighting?"

-"Need support for code snippets?"

"Then this platform is for you"
>Do you want to feel stressed
and perhaps evil for a tiny chance of
money or do you rather have a
constant flow of secure meatspace
money by working?

Ignoring the "evil" bit, this sounds like a false dilemma. Running a mining "rig" is not a full-time job; the people I've talked to who are into mining treat it as either a hobby or a passive income-type side project.
He has some good points, but it mostly just sounds like a pointless rant. And nitpicking every flaw with these nations just because he has gotten tired of the positivity surrounding their "success" comes off as just childish.
Good call! But you'll need a space:

:%y z
Click where you want it, it should appear in the upper left.
Charlie Shrem Resigns from the Bitcoin Foundation Board
Not that clever... svbtle is an anti-brand now, like Upworthy.
Svbtle has been around longer than Medium although you had to apply to use it (or there is a pretty popular wordpress knockoff theme).
I can and do blame them for (apparently) not having an export function.
While I believe that any presidential person in power including his staff is mainly interested in their own protection, they are also partially aligned with my protection.

The degree at which they oppose me or protect me is unknown by me, but for the most part I believe they are protecting me, not for me, but because I naturally align with them.

Now, if you are not an American, their interests are much less aligned with yours. In that case, I agree.

For example, I would appreciate if all foreign government officials had all their emails, phone calls etc. open, but would like to protect my officials.

Hypocritical? I don't think so, its basically a matter of wanting the people with alignment to me to continue having power.
USA Millionaires
What is the difference between bitcoin early adopters versus startup early investors in the unicorn club? Both sets of people would have "scary" amounts of money (presumably if both valuations increase rapidly).

An on-going and updated analysis of the estimated wealth distribution of bitcoins shows up on the Bitcointalk.org forum[1].

[1] https://bitcointalk.org/index.php?topic=316297.msg4779800#ms...
I am a dane and I have never heard that prejudice before (xenophobia) about Norwegians and when comparing immigration numbers with Sweden remember that there are only about half as many Norwegians as swedes.
Why should "transactional overhead" not eliminate it entirely?

And why "might be fine almost every time" instead of "will always be fine"?
Nyancoin
I remember trying it when it was popular and after mistakenly giving a kudo I could "undo" it by clicking the same icon.
Google getting too big
I believe the F# and TypeScript languages are both open source as well.

That said, most of their flagship stuff is closed, in many cases understandably so but in others, it doesn't make as much sense (to me), and seems not to benefit anyone.
A few of the very earliest participants in the bitcoin community (who got in before the first big peak at $32) have 100K BTC.

As a rough order of magnitude estimate, if Bitcoin gets to be as big a thing as gold, then it will be worth about $10 trillion. Since there will be about 20 million BTC by then, those individuals will be worth about $50 billion. This is a lot of money to be sure, but there won't be many of those people, and this is not out of line with the world's very highest net worth individuals.

The people who got in after that peak will probably be worth at least an order of magnitude less. And if Bitcoin turns out to be a smaller deal than gold, it might "only" create fortunes worth 9 figures of USD.
I don't think he's saying that there's anything fundamentally not neutral about IRC as a technical product. I think he's pointing out that the fact that it is gender neutral from a technical point of view does not mean that the experience is gender neutral in practice, because, as you've pointed out, people bring their own biases to the medium.

I believe his point is he realized that technology alone does not obviate sociological issues, after being confronted with his own bias in an unanticipated way.
HN doesn’t let you un-upvote something either, but you need to un-upvote something on HN far less often than on Svbtle. On Svbtle, it is very easy to accidentally “kudos” a post, because all you have to do is move your mouse over the kudos circle, and the site doesn’t warn you that doing so will trigger a kudos. On HN, at least you have to click a button-looking thing to trigger the non-undoable action of upvoting.
Ditto! I wonder is there any EU law on this...
Apple wins patent for solar-powered MacBook
RGB Lamp Controlled by RFID Tags Built As An Arduino Shield
Amazon is building the largest warehouse in Poland.
Most of this impression is usually caused by the combination of the following things:

* fast startup

* programs in C usually do much less with more code than high level languages

Once the project gets really big and complex, C starts to get slower and harder to optimize than some higher level languages (e.g. dynamic dispatch tends to be slower in C than in C++ or Java).
I'm not overlooking that at all. The point here is that it addresses a different and interesting use case and is ultimately a welcome addition to the market.
I did that once awhile back. I didn't know what the little bulls-eye was for. When I hovered over it, it said don't move. I was expecting some silly thing to happen (like when the bottom of a Kickstarter page gets cut off). There is no indication that what I was doing was "up-voting" a stupid blog post. Possibly one of the dumbest features ever.
Lamborghini Countch Hand Built In Man's Basement
Neuroscience's most famous brain is reconstructed
"the days of anonymity are over"

Are they over for the NSA? No. That's what should change.
If he is an asshole, no point blaming it on being Indian.