skysight-inc/HackerNews huggingface dataset:
Because, currently, women are in the minority.

We're well aware the environment is hostile, that's why these articles are prevalent.

Fortunately, people keep raising awareness. Over time, it will require less and less strength to survive as a woman in our male dominated arena. Eventually the average woman will be happy working in a tech startup and we can all be happy that the world has grown up a little.
Please drop the stereotype of the social sciences.

Did you read the article? These researchers were legitimately frightened at how their work would be received and in my opinion it's only heretical in a minor way... AND THEY'RE SOCIAL SCIENTISTS!

I always find the hostility some HN members have towards the social sciences

Yeah, that's why my original post (that in a computer analysis context wouldn't have raised an eyebrow) is being moderated into the dirt.
This seems painfully sensationalized to me. Unrestricted OAuth redirect URIs paired with not requiring signed requests has been known to be dangerous. Google and Facebook both have configurable whitelists for OAuth redirect URIs.
The world is an exceedingly small place.

Hi from a fellow Marshallite
pretty much, he said Armadillo had drained all of his 'crazy money' at a QuakeCon a couple years ago
I'm deeply puzzled as to how you can say that my second paragraph is "of course correct" yet continue to argue that there's a difference.

No, the language of balanced parens is not regular and cannot be matched by a FSM no matter how much memory you have. That's completely true. However, it also cannot be matched by a Turing machine with finite memory, no matter how much memory you have. That is because, as I showed and as you agree is "of course correct", the two machines are equivalent in their capabilities.
It turns out, identity, authentication and security in general are hard.

In some context, it takes episodes like the NSA, heartbleed and this OAuth nonsense to remind us how important knowing who you're talking to is on the Internet. It's hard to determine authenticity heuristicly and even harder with faulty signals.

More transparent security seems like a positive thing and yet the market forces are strictly against such an idea for obvious reasons (witness do not track).

I don't know how this will shake out, but if history has told me anything, it's to be hopeful for a better tomorrow.
Compare this to the universal love and admiration for Obama in the US, and say, Stephen Harper in Canada... Because no one in the west is ever dissatisfied with anything politicians do.
I don't really understand in what way people working in government are not also fellow citizens.

You're dead wrong about the second amendment, or at least you are if you read it in its entirety.
Greenville/SF, Remote, Open To Discussion

Skills: Mainly a designer and front-end dev

Stack: Git, JS, Backbone, D3, some Ruby on Rails, HTML, SASS

Resume: Contact Me

I'd love to work remotely for a company either contract or as an employee and get to take on hard design challenges and get to help develop and implement the design on the front-end as well.
This article has some flaws. For instance, Carmack isn't getting sued, Oculus/Facebook is.

Also, I didn't get the impression that Carmack was "angry" when he tweeted that. I always get the impression that he is pretty calm about all of the things he's saying, and the two tweets being referenced are just statements about his perception on the case. Since anger is the tone of the entire "mistake" from the article's perspective, it seems the article author is the one jumping to conclusions and writing things on the internet before they're due.
SLC, UT, Relocation, Full Time
Stack: Sass, LESS, CSS, HTML, Haml, Javascript, jQuery, MeteorJS, ThreeJS, NodeJS, Gulp, Grunt, Handlebars, RequireJS, AJAX, JSON, MySQL, MSSQL Server, MongoDB, CMS (WordPress, Ghost, Jekyll), Git, Photoshop, Illustrator

Contact: http://seanevd.com

I'm focused mostly on front end development but have a history of design and have extensive database knowledge from school. I'm willing to move anywhere exciting and am looking to work with a start up or digital agency. I need to work somewhere where I can work with like-minded/passionate people.
The GP is not alone in thinking that the x86-64 ABI is "a total mishmash"; it feels to me like the designers were deliberately avoiding optimisation, when an ABI is really one thing where any optimisation wouldn't ever be "premature" - after all, it's something that's going to be used by millions if not more pieces of software, so little things really add up.

For example, it's not necessary that all the args passed in registers need be written back to the stack by va_start --- ignoring for the moment the complication of structures and SSE registers, a va_list could just contain one field, which would initially hold an index, the "current register number" where the desired argument is stored. Then va_arg (which is now implemented as a compiler primitive) could generate code that checks this index, and if the index is less than the maximum number of arguments that can be passed in registers, resolve to an access to the particular register (here's where a "register-indirect" addressing mode would be really useful, since it could just use that index). Otherwise that field becomes a pointer into the stack like the traditional implementation. In other words, depending on that index, reading a scalar va_arg turns into reading a register or reading from the stack.

It's not that hard to extend this to accommodate structures; and I don't see any limiting reason on why the ABI couldn't pass structures partially in registers and partially on the stack. We just have to define the rules that let us do so, as a structure is only a concept of grouping data together, an HLL construct. There's nothing that restricts a structure to being always a contiguous set of registers or memory locations. Having to "reassemble" a structure in memory is only necessary if its address is taken, and then only if operations other than accessing its members via that address are performed; otherwise its components can be operated on independently, regardless of whether they're in registers or memory. Since the compiler knows where va_arg is used with a structure type, it can decide whether it really needs to generate the code to reassemble the structure, or only a series of scalar accesses. (I touch on this point somewhat here too: https://news.ycombinator.com/item?id=7683823 )

Extending this to the SSE regs is simpler than for structures, since this is merely another bank of registers that arguments can be read from: another field in va_list to hold the SSE register index/pointer.

I find it a bit odd that the ABI would define an actual implementation of varargs rather than only where the arguments will be expected to be, since how they're actually accessed should be outside the scope of an ABI spec; now every compiler vendor is tempted to just copy this (IMHO sub-optimal) implementation instead of thinking about how it could be done, and possibly coming up with something better.
Ha! Double buffering. I knew it well.

The company was Telemed and it was located near Chicago. In fact, for a while it was in an office complex a few hundred yards directly east of runway 27 R at O'hare. Often fully-laden Europe-bound 747 would take of, aiming directly overhead. We would be silently chanting "up! up!" as it felt like they were pretty close.

I don't think we did the single card trick. I do remember writing a few utilities like an editor so we could store the programs on disk instead of feeding them in each time. And a crude document processor for internal documentation. And we had a pretty serious engineering effort saving the real-time data to tape. There was always the concern about being sure that we had saved the data by the time the system signaled the hospital technician that it was done so they could unhook the patient.

The extracurricular activity I spent the most time on was porting the XPL compiler from one done at University of Washington to run on our particular configuration. Involved converting from a 7-track tape to a 9-track tape, regenerating the operating system to reduce the start address of user programs, and a few other hoops. I had read A Compiler Generator and my career was off on another track.

And we did the evening thing as well. We had two systems for redundancy, but for a while production required both machines. One would do data collection, and the other would run the diagnostic program, which spit out paper tape that was carried over to the teletypes. Since traffic was light at night, we would come in at some ungodly hour for the better part of a year doing the work to combine these systems. If a call came in, we had about an hour to get off the system so they could bring up the diagnostic system to do the analysis and generate the paper tape.

I think I remember the cards--they were binary and half full of holes, as opposed to the others (EBCDIC, i believe).
There's nothing to indicate the "contact us" link will open up my e-mail client. I'd expect a mailto link to have the e-mail address as the link text. The link as presented I expected to lead to a page with your e-mail address, phone number, a contact form, and/or your postal address.
Ontario, Canada; Remote/Local; Contract | Full Time | Part Time

Stack: Python, C/C++, Lisp (Common Lisp, Scheme, Clojure, Hy), OpenStack

Resume: https://www.dropbox.com/s/9pazy0hnmqpj3ut/cv.pdf

Contact: in cv.pdf

10 years of experience as a software developer.

I want to try something challenging; possibly breaking into the sciences. I'm concerned about the post antibiotic future and coping with climate change (urban planning/architecture design for extreme weather conditions, food scarcity and agritech). I'm passionate about cellular automata, compilers/programming-languages, and computing environments that assist and extend our abilities and talents.

I'm presently investigating chemistry, biochem, a-chem, CA, and T.J. Hutton's work. Developing tools around iPython or extending the idea to enable re-producible, executable experiments. I'd be very interested in developing compilers for scientific DSLs that output vhdl to run simulations and experiments on FPGA hardware. Pushing the boundaries of CA, modelling reactions, trying to tackle retro-synthesis, and simulating life; using machine learning, sensors, and image recognition to optimize farming and reduce/remove the need for antibiotics. Sequencing. I'm wide open to ideas and am willing to jump in to an interesting project (want to co-found a startup?).
DNSSEC. Take everything you don't like about the CA system. Sign it over to the government, because everyone knows they'll never manipulate the DNS to accomplish a policy goal. Then bake it, along with 1990s-era RSA cryptography, into the core of the Internet.

Thanks, Fedora.
There is an episode in the series 'Air Disasters' currently available in Netflix about this.

Terrifying to say the least.
Agreed; I thought that the general consensus was that OAuth2 was severely flawed (and why many sites stuck with OAuth1). Been a few years since I worked with OAuth though, so I could be wrong.
So what you're saying is, resource depletion is a problem if it happens fast enough?

I don't see the practical difference between losing your land to invaders and losing your land to, say, sea level rise, in terms of one's ability to cope with it and survive.

In any case, this is a lot of argument over what was mostly a throwaway argument. The precise nature of the Easter Island collapse doesn't much matter since it's not an isolated example anyway.
The author seems to be suffering from a "there's no such thing as headphone break-in" bias. Their results show changes, but they deny it (while subsequently accepting it: "some changes seem more likely due to break-in"). Broader tests would be certainly be useful, but that test certainly doesn't prove that break-in is a myth, either.

Given that people accept break-in is required for, and changes the sound qualities of, larger speakers, it would seem that the benefit of doubt should go to the "headphones do break-in over time". After all, headphones are speakers, just smaller.

To quote John Grado: "All mechanical things need break-in."
Boston, Relocation, Full Time

Stack: Python, Javascript, MATLAB, SQL, MeteorJS, Git, Balsamiq, Illustrator

Resume: http://bit.ly/mikpanko-resume, https://github.com/mikpanko

Contact: mikpanko@gmail.com

Finishing PhD in computational neuroscience. Strong background in physics, mathematics, machine learning, neuroscience, and programming (but not in large-scale web-programming yet). Led several academic and client-facing software projects, such as a social network for Russian civil activists (http://elections.grakon.org) and a small tool to improve English writing style (http://www.expresso-app.org). Interested in technical product management and also data science and software engineering positions.
The Roads to Innovation in Cryptocurrencies
You're welcome. A direct link is here:

https://www.dephormation.org.uk/?page=81

Just bear in mind the default installation can break some pages (Soundcloud) or worsen your user experience (many web sites, Google, Wikipedia or Ars Technica among others, redirect you to the mobile version if you have a certain user agent).
Musk and Russia burnt bridges a long while back when they screwed him and made fun of him when he was trying to first start doing space. He got fed up and in sentiment along the lines of "fuck you, I'll do it myself" decided to go make his own rockets instead.

I strongly doubt he is interested in being polite to Russian rocket industry.
As part of my project, I like to benchmark regularly privacy enhancing extensions ("blockers") for Chromium-based browsers. So I took the opportunity to run one of my key benchmark this morning. [1]

The results are meant for a github page, but I decided to present them here, and I reformatted specifically to be HN friendly (hopefully).

In short, any of the following blockers help a lot against no blocker at all. Some are less likely to break web pages, while some other are more likely, and every users have their own requirements when it comes to striking balance between privacy and convenience. This is for information purpose only, not to make a statement that one is better than the other. With the proper information, people can make an informed choice according to their own prerogatives.

I ordered the list by the amount of distinct domains which are "touched". I figure the more distinct domains are touched, the more metadata is leaked to different parties. The format of the results is n / N, where n is the number of distinct 3rd-party domains, and N is the total number of distinct domains.

"3rd-party" is from a DB-less machine point of view, i.e. if a domain name differs from the one of the URL of the page, it is deemed 3rd-party. Despite this caveat, I think this still allows to compare blockers between themselves for the same benchmark ran inside the same narrow time frame.

Benefit to the users: It's nice to see privacy becoming more and more a top issue and more and more choice to address this particular problem.

So here:

No blocker

Domains: 420 / 421
Hosts: 641 / 720
Scripts: 518 / 641
Outbound cookies: 263 / 341
Net requests: 2,079 / 2,849

Privacy Badger 2014.5.1 (BETA)

Domains: 192 / 193
Hosts: 299 / 381
Scripts: 334 / 455
Outbound cookies: 52 / 115
Net requests: 1,340 / 2,176

Disconnect 5.17

Domains: 93 / 94
Hosts: 171 / 248
Scripts: 262 / 385
Outbound cookies: 19 / 83
Net requests: 1,124 / 1,936

HTTPSB 0.9 Allow-All/Block-Exceptionally

Domains: 54 / 55
Hosts: 101 / 153
Scripts: 169 / 265
Outbound cookies: 2 / 43
Net requests: 930 / 1,648

Adblock Plus 1.7.4

Domains: 54 / 55
Hosts: 97 / 149
Scripts: 177 / 272
Outbound cookies: 1 / 33
Net requests: 913 / 1,612

Ghostery 5.2.1

Domains: 52 / 53
Hosts: 99 / 160
Scripts: 173 / 286
Outbound cookies: 8 / 47
Net requests: 966 / 1,722

HTTPSB 0.9 Block-All/Allow-Exceptionally

Domains: 21 / 22
Hosts: 49 / 75
Scripts: 0 / 0
Outbound cookies: 0 / 0
Net requests: 680 / 1,199

[1] https://github.com/gorhill/httpswitchboard/wiki/Comparative-...
What's really going on in OneDrive for Business
Yeah, I was struggling to understand this, since I recently implemented a Facebook OAuth client and it prevented me from setting any redirection URL outside the configured domain, so I don't see how is Facebook vulnerable.

Frankly, much ado about nothing.
Even faster block-chains with DECOR protocol
I'm relatively familiar with oAuth 2, but I don't quite grok this.

So, normally: I, a site that uses oauth to authorize someone Google / Twitter etc account register a redirect URI where people, after authorizing / denying, are sent with a access key.

The vuln is that my redirect URI can be exploited someone to send users onto a different site, with their access key?

How could an attacker manipulate a URL to redirect somewhere else? Content injection? Like some users whose name is a script that changes window.location? Doesn't nearly every templating language explicitly require special stuff like {{{ }}} for unsafe content?

If that's correct, it seems a little overblown. But maybe I'm wrong.
Inside Amazon's Bizarre Corporate Culture
What about the creative app industry - ie things like photoshop, indesign etc.
This project really needs a different name... "web hook" already means something, e.g. https://help.github.com/articles/creating-webhooks
I think I'm in agreement with you here—we're slowly, as a community, discovering how to make non-leaky abstractions. They've been around for a while in places where "in practice" had a lot of legroom (pure mathematics). CS has a lot of legroom too, but it's taken a long time for us to think about it in such a way to know where we can place our weight.
Just Months After Turning Down $3 Billion Offer, Snapchat's Growth Is Exploding
Wow they even made a logo for this vulnerability of minor severity.
Did you read the article before you mangled the headline? They're arresting people soliciting prostitutes, not prostitues.
I think perhaps you've been consuming only media that mirrors your own viewpoint. Many people are upset that Snowden "violated his oath," that he took it upon himself to effectively dismantle programs he disagreed with (even if the program was indeed out of line), and that he fled from the consequences of his actions.

If you believe public opinion polling, a majority of Americans don't like what he did and think he should return to face trial: http://www.cbsnews.com/news/poll-most-think-edward-snowden-s...
The way language works, "stating a fact" is rarely just stating a fact. Pragmatics is interesting.
>If C# worked on iOS and Linux

https://xamarin.com/ imho a much better alternative to C++. I really like C# as a language, it's got that general purpose excellence, but when you get on with things like LINQ,Rx,TPL it's very hard to go back to a language without such first class citizen frameworks.
Correct me if I'm wrong but it seems that this isn't even old news. It's by design - something inherent to OAuth authentication scheme.

Also both CNet and the original are so light on details it's scary. I get the feeling though that we've entered an era for "vulnerability sites" - instead of CVEs we're now getting marketing.
Better or worse cultures: this is sensitive in the west but I do not see why it should be taboo. First it can be disconnected from racism, because one can equally respect all human beings while still having a preference for some cultural values that we cannot honestly declare equally present in all cultures. An example coming to mind is the place of women.

Then we can find some lines along which cultures might differ and be said better or worse. For example adaptability is likely an important feature. The physical health of people is also different, and there I think American have much to improve.

I don't know why I feel I need to stop here. It reminds me about pg's essay about things that can't be said. Sadly I'm not bold enough to walk through this minefield.
Awesome demo!

While playing around with this, I found an interesting (and perhaps unintentional) use case.

By hovering over different songs at appropriate times, it mimics a hard cut using a DJ mixer.

I'm not as technical as I'd like to be, but it seems like a neat bi-product of very low latency using HTML5 with your simultaneous auto-play.

Might be an interesting opportunity for a new type of cloud DJ platform :)
What to do when people make you angry online:

1. GET OFF SOCIAL MEDIA. Everything you say and do will make you a target. The only things you can say that might help you would be contrition, so if you're not willing to do that, get the hell off social media. This is also good because it removes you from having to read things about yourself that people are saying. People's talk will not harm you; your reaction to people's talk will harm you.

2. GET AN OFFLINE JOURNAL. If you have strong feelings, write them out. Write until you can't feel anymore. But don't put it online; keep it offline. The purpose is to have an exercise that gets your thoughts out, and to be able to read through your thoughts and clarify them later. Write letters to the people you're angry with, then review them and edit them many times, and never send them.

3. TALK TO FRIENDS. It's incredibly easy to let internalizing your feelings change how you think, change your memories, and turn you into a shell of your former self. You can even develop anxiety disorders or PTSD if this gets out of hand. Talk to people who understand and love you and let them keep you in check. You need positive outside influences to keep yourself sane. Talk to a good psychiatrist if you can.

4. KEEP THE BIG PICTURE IN MIND. It's easy to confuse yourself and wrestle over details. Start by considering the intent of your actions, and work from there to understand the whole chain of events, impartial and without emotion. It takes a while to get there. Be totally honest with yourself, but don't convince yourself of things that you didn't do.
Yes, in fact the poster gave me his email couple weeks ago. Too bad he never came back to me and I'm not in a habit of pestering people.
Taiwan/UK, Remote, Contract | Part Time

Stack: Rails, Js, C++, Go, Lua, Shell, Design, Audio, I love everything!

Resume:http://v-a-l.co.uk

Contact: arkhipov.valentin@gmail[com]

I am moving back to UK in a couple of months and looking for a new job, currently I have about 15 hours a week available but when I move back will be more. I love solving problems in creative ways, to me programming is an art form and I strive for perfection in function and form.
Agreed - at first, this seems frustrating, but don't let it be discouraging.

gorhill, there are very few people who are both interested in and qualified for building software of this sort. You've essentially just proven to the EFF that you're the exact person whose help they should want with this, so you have an opportunity to join forces with them and build not just an amazing product, but an amazing product that does exactly what you originally set out to do!

This is the same principle behind so-called talent acquisitions ("acquihires"); the difference here is that we're talking about a non-profit organization and two open-source projects, so there's even less friction in joining forces. And more importantly, you can always change your mind if you ever decide to. Nothing holding you back!
Any location, Relocation, Full Time

Stack: JS (node & client-side), Python, PHP, C# (.Net, Xamarin), ObjC, Java, Semantic Web - fullstack + mobile stuff, plus some experience in devops

Resume, Contact: http://codezen.ru

Would love to work on something new and awesome in a new and awesome country. Exact topic doesn't matter as much as the product / idea and team. I can offer 10+ years of experience in webdev and 4+ in mobile. Have experience of building stuff from idea to release (including 3 startups).