skysight-inc/HackerNews huggingface dataset:
Some good points all around -- I've made edits trying to better frame the scenario.

>Generalist audience point

That actually was a rephrasing of my original description.

The point about malicious sites -- phishing sites -- is that those are the sites (or compromised sites) that will serve links with the bad redirects.

Co-existing with an XSS flaw not-withstanding (which has happened before and is realistically the best vector to get to alter the links), I don't think it's unfair to frame this as something that happens as a result of clicking on a bad link from a site that is either malicious or has been hacked.

Obviously, there are exceptions -- and I'll make that more clear -- but I'm seeing it framed as if "every Facebook login you click could be hijacked" -- and that's just not true.

>To the ESPN point

Right -- if ESPN gets hacked or an XSS flaw takes place to append their links and redirects happens -- that's definitely a real problem. That's why some of the onus is on ESPN, to make sure they define their URI redirects in OAuth 2.0. It's also why Facebook should make it an absolute requirement for using Facebook login.

Not to mitigate the fact that this is a real flaw at all - but I think we can all agree this isn't some new discovery. It's a well-known problem. Calling this the new Heartbleed won't make it any better.
The reasons for not using a blacklist in Privacy Badger were philosophical, not technical. I agree it would be more convenient to ship with a blacklist but hopefully the learning algorithm works well enough to be almost-equivalent.

> Btw. what is the point of Privacy Badger without the Do Not Track header?

Not sure I understand. Privacy Badger Alpha currently sets the Do Not Track header on all requests.
Who cares what the public thinks? They'll worry over how their party and the opposing party will react to it. There's probably a reason it hasn't been done in almost 100 years. It would be political suicide because they would likely be shunned amongst their own peers.

When you're in theater, you don't kick the other actors off the stage. The others might do the same to you.

Never mind the press going crazy over the silly headlines they'll be able to craft regardless of the actual situation.
Drive Twitter and Facebook share button traffic into your app
Mm, I think I went too far there. I was thinking "confession of a Haskell hacker" but got that conflated with "if it types, it's right".
I'vea heard that its on the cards for 9/10, isn't it? (reified generics)
Am I right in thinking MapReduce seems to be going out of fashion somewhat as even Google themselves have moved towards using something they term Millwheel.

Which is a stream based processing system.

I have seen one paper on a streaming MapReduce solution though.
7 of the 10 most polluted cities in the U.S. are in California
ElasticDot PaaS private beta for Symfony
Totally hear the sentiment in the comment. For our V1 release we wanted to have good social and community features, because that really how you win over super-users for this kind of an app.

So we wanted to make sure everyone using the app was able to get that full experience. There's lots of room for experimenting with other approaches, but so far users seem to be really like that side of the experience too.
I always explain it to people like this:

It's as close as I can get in the real world to being a wizard. I will never be able to shoot fireballs from my hands or cause a couch to fly across the room with my mind. But with programming you can cause things to happen with only thoughts and words.
Whoops, deleted the post by mistake, not sure it can still be upvoted.

Happy to answer any questions publicly or privately.
Egyptians may have moved massive pyramid stones on wet sand
I'm not very familiar with this product, but wouldn't the predictive analytics features help with inventory management?
Two admin interfaces with different appearances and UI conventions isn't a terribly optimal user experience.

If Wagtail even attempted to smooth the differences between the two (i.e. a custom skin and some customizations to the default admin to make them more similar) then it might be a bearable compromise.
DNSSEC's explicit reliance on government is dependent on ICANN's MoU. The role of government is a lot different when using ISC's DLV. Is pinning gmail's cert any different than using a google supplied DLV key?
I'am also on 2nd floor next to window. I read this comment first and then went to play the test file. And I still moved my head to the right to see who's knocking.
When to Fight
Where are you finding that 73B gallons/year figure? That's more than 4x the number I found at http://www.transtats.bts.gov/fuel.asp
[Show NH] Weber-0.1.1 – ror like web framework for ElixirLang
Unless the article has been edited, it doesn't say that[1].

What the article calls "constant time in practice" is necessary, but not sufficient.

As you say, it's not correct to say that CTIP means that you're fast - after all, you could make a HTTP request per array access and maintain constant time.

But you can say that taking advantage of CTIP allows you to achieve speed.

In my opinion, it takes quite an uncharitable reading of the article for it to seem like they mean the former.

[1] (The closest section to your quote) "Elm now has fast immutable arrays. How can that be? Is there such a thing? Thanks to Christian Widera, the new Array library uses some very clever data structures that make common operations like get and set constant time in practice! We will get into the details later in this post, but the big takeaway is that you can have immutability and speed. "
I believe I know exactly how he did it - the Richard Feynman Problem Solving Algorithm:

* Write down the problem.
* Think very hard.
* Write down the solution.
Here is an interesting TED Video, "How to spot a liar."

http://www.ted.com/talks/pamela_meyer_how_to_spot_a_liar
Mirage OS – OCaml's killer app
I noticed that as well... it's pretty visually awkward, going from no button-like affordances to suddenly having them appear during the click event.
Location: Baltimore, MD area or remote, full-time or contract

Stack: Scala, Java, Groovy, bash, etc...

Resume: On request

Contact: In profile

Looking to join a great team working on big challenges. Especially interested in Scala projects, web-applications or back-end systems, and complex distributed systems. Experience in architecture and leading development teams, but open to other interesting roles.
The community response seems to be mostly from people who like to talk about programming language features all day without actually using it for real projects.
Out of curiosity, which HL7 CDAs (and which levels) do you support, and how much lift is it to set up import/export for a new provider or institution?

I'm pessimistic that we'll be able to achieve true level 3 interoperability, even though the basic ontologies (e.g., SNOMED, LOINC, etc) are in place. I'd love to hear that you're having a good experience, though.
The actual land would likely be distributed. Arizona, New Mexico, and Texas would probably build plants, as would Australia, Saudi Arabia, Algeria, Egypt, Mali, South Africa, Namibia and countries in other major deserts. In fact, African production developed by Chinese companies may be a major competitor.

http://en.wikipedia.org/wiki/List_of_deserts_by_area
The article's OK, but it doesn't actually deliver on the headline by illustrating the "tells" of a lie. This book is much more practical.

http://www.amazon.com/Spy-Lie-Former-Officers-Deception/dp/1...

One of the most interesting ideas is that no single tells indicates a lie, but clusters of them together are strong signals. A few would be: 1) pausing before you answer (lies take longer to compose than truths); 2) touching your face with your hand (blood rushes from your face when the fight-or-flight response kicks in, prompting an itching sensation); 3) fidgeting at the place where your body rests on something more solid (floor, chair, armrest); 4) vacillating between an appeasing and angry tone; 5) leaning away and closing your body language.
Basically. If you want to implement generics you basically have the choice of 1) boxing (Java approach), 2) instantiating a different type for each generic parameter (C++ approach), and 3) doing something in the runtime to enable a relatively transparent hybrid (C# approach). They each have their own tradeoffs in terms of flexibility, memory consumption, runtime complexity, and compilation / linking time.
They'll always have a problem until they find a way to scale customer service.
I'm not sure you took my meaning. Even if what you say is true, a regulating body must view everyone with skepticism. They have to walk into an audit/filing review with a "prove it to me" attitude else risk doing real harm to people.
The only aspect I'll take issue with is that in many (granted not all, but many) OAuth use-cases, the user is required to re-login to a site -- even if it was already authorized. The length of the cookie/token for an OAuth login varies, but more and more, I see very few services that don't require me to login again -- or at least manually click the "login" button.

So for step 3 to happen, Mallory needs to try to target a site that Bob is currently logged into or that has a session life that is still active. Otherwise, Bob still sees his Twitter login logo and he has to make a choice to click or retreat.
That was one of my most used features. This stinks!
It also works with most comments here!

Whoever thought this up is a genius. Thanks for brightening my day.
It's an interesting question but I want to make a meta point.

I came here to read people's thoughts on the article but the top comment shifts the debate onto a wider topic.

This happens all the time on HN and is something I find slightly irritating if I'm actually interested in the topic itself. It's like that person at a dinner party who always changes the subject onto what THEY want to talk about.

I'm not blaming you - it's the fact that your post is the top one and the one most commented on that derails the original topic - which is a group decision.

Oh well. Democracy in action I suppose.
I came here to vouch for the v6 as well. With the Beyer Dynamics velour pads, they're just incredible. Comfortable, great all around sound and doesn't break the bank.

(source: I was an audio engineer in a previous life. I also own 3 pairs)
Temperature is only half the picture. Total energy transfer is the other half.

Consider heating a teaspoon of water vs heating a pot of water.
Here's a quick summary: Rust is adding a new capability, `box`, which is a superset of the existing pointer functionality.[1] Therefore, this special case is being removed, and, if it turns out that `~` is missed, sugar can be re-introduced to bring it back.

That said, I don't think it will be. It's only really useful in function signatures, since types are inferred everywhere else, and `~` is harder to search for, as well as not on all keyboards. Plus, in Rust, you should always use stack allocation unless you absolutely have to, and so making heap allocation a little more weighty syntax-wise fits with the goals of the language. `~` -> `box` isn't that much heavier, either.

1: One way it's a superset: previously, only `~` supported 'placement new', and now, all pointers can with `box`. `box` also allows you to specify which allocator you'd like to use.
Stored procedures are a fucking pain. Now you've managed to split your logic in two completely different locations, and you get to enjoy rolling out new versions of the procedures in their own migration. Not to mention you're tied to your database.

On the other hand, ORMs can be a huge source of inefficiency if you don't look at the generated SQL and use lazy collection thoughtlessly, though they avoid a lot of boilerplate when saving a complex object graph.

A happy(?) medium is probably something with a powerful data retrieval API, which makes for composable queries (SQL query strings compose very badly).
They don't need to do the calculation because their intuition already leads them to the right decision. This is just economics. What is the payoff for the evildoer hacking a pacemaker? Oh right, he's a contract killer? Too many movies for you. It's just more profitable to replace the payment processing app with your own payment skimming app at some big store.
The feature isn't going away, just the syntax.
It's great to see additional attention on privacy while browsing from the desktop. It does feel, however, a little like we're fighting yesterday's war. With so much browsing / internet usage taking place on mobiles it would seem to be much more important (or at least _as_ important) to provide privacy to mobile browsers. Given the limited ability to impact the way mobile browsers work (especially on iOS) I wonder if we'll see any real solution here?
Fairly popular tiling window manager: http://en.wikipedia.org/wiki/Xmonad
"It’s impossible to run a Haskell program with a type error"

Unless you ask for it!
Location: Madison, WI | Remote, Local, or Relocation [prefer remaining in United States] | Full Time, Part Time [depending on opportunity), Contract (depending on opportunity)

Stack: Java, Objective-C

Resume: https://www.dropbox.com/s/gm46etnn60dl4cv/AP_Resume.pdf

Contact: see resume

I have spent considerable time in college trying various courses and major programs to figure out what I want to do with my life. I have learned my passions though, mainly technology and politics. I love to help people, and want to do that through creating new ideas that will drive us all forward. I have optimistic goals and a desire to learn that are not being challenged by my education. While being a full-time student I have also worked various IT positions across campus. This is where I learned Active Directory, some HTML skills, how to use UNIX based systems, Objective-C, File Maker, Creative Suite, and the list goes on. I have a lot of untapped potential and a pent-up desire to let loose on a project if someone is willing to give me the opportunity.

I would appreciate any constructive criticism and advice as well.
The post links to this page http://www.haskell.org/haskellwiki/Heterogenous_collections and one of other solutions is to use existential types to do it. But the author even said:

However, I don’t think this is a good use case. We can get around this problem in a cleaner and safer way by using the type system rather than subverting it.
Go Guerrillas! 7 Guerrilla Marketing Campaigns For Friday
Age of Twitpocalypse: The Four Horsemen of Twitter’s Impending Doom… or Not
Have you looked at the Haskell QML bindings? They generally work for cross platform requirements.

http://hackage.haskell.org/package/hsqml-0.1.1/docs/Graphics...
interesting -- i wonder if they could have a 2 lens system where your overall system would look like:

sun / outer lens / pressurized gas / quartz lens from diagram / reactor

you could adjust the pressurized gas chamber pressure to match that of the reactor so that you're subjecting the quartz lens to a net zero bending moment/tension. ideally you could then make the outer lens out of something tougher than quartz and it wouldn't need as much high temperature strength since it's farther away from the reactor.
Amsterdam, NL, Full-time, Improve Digital

We are an ad tech company looking for a Software Engineer and a BI developer (internship) to join our growing Data Team in the Amsterdam office.

Software Engineer - Data Systems

Skills we are looking for include: Hadoop, AWS, experience with managing (and mining) large datasets, JVM languages (scala).

http://www.improvedigital.com/en/about/careers/software-deve...

BI developer (Internship)

Design, implement and publish reports and dashboards by blending together heterogeneous sources.

Prototype and productionize the delivery of data according to analytics use cases

Keyword/skills include: R, stats, analytics, visualization

http://www.improvedigital.com/en/about/careers/business-inte...
The matrix visual is genius! I'll be using your extension going forward. Thanks for the great work. You may want to consider setting up a Gittip account or something similar so people have the option of supporting your work.
"Just like steve jobs was able to call the founder of HP in highschool and ended up getting a job there for the summer."

There is nothing that unusual about that now except with tech companies or any other company that is the current "belle of the ball" or super large and well known.

The idea is to learn and gain experience not to get some buzz because you have achieved some popular culture dream of working for the same place that millions of others would like to. Sure we'd all like to work at those places. That's the problem.

If you pick any company that is generally off the public radar (and not being fawned over in the press with a celebrity CEO) it is quite possible to send a postal letter to the CEO and have a fair shot of getting a summer job. Or even an email but my feeling is a letter would get more attention and seem more genuine.

Not all the value lies in the usual suspects that have more applicants than they can handle.

A corollary to this goes with low paid jobs. Our offices used to be located near a Walmart. Yet not one time in 9 years to anyone ever come through the door looking for an office or admin or warehouse job. Yet everyday people showed up at the Walmart and got a much lower paying job and (from our pov) much worse working conditions. It's important to put effort in, be creative, and not do what everyone else is doing.
How to make a fractal shape
Nielsen on: Designing Mobile Usability
San Francisco Bay Area CA, Full-Time, H-1B welcome

Threadflip is changing how women shop, sell and discover fashion. We are early stage and seeing strong traction and growth, including revenue, from day one. We are well-funded by top investors, including First Round Capital, Shasta Ventures, Baseline Ventures, and Slow Ventures.

We are looking for full stack engineers who will enjoy solving technically challenging problems as we looking to scale and grow our marketplace.

Apply here http://www.threadflip.com/jobs
or
email ai@threadflip.com
So find, upvote, and participate in — or, if necessary, create — a thread that offers the kind of discussion you're hoping to see. Coming into a thread that's not the discussion you wanted, and being all, "But guys! We should be talking about $other_thing!" is an even more annoying dinner party guest, IMO.
Barcode Scanning on Google Glass [video]
This reminds me of an experiment my music teacher did with my class in grade school. I'd completely forgot about it until just now, and thinking back, it may have been one of the things that influenced me to become a programmer.

He was trying to teach us the idea of explaining yourself more clearly (he was one of those teachers that went off on tangents totally unrelated to music when he felt there was an important life-lesson other classes might not cover). He stood at the board and told us that he would draw whatever we said, and the goal was to have him write out a musical staff and certain notes on the chalkboard with no physical gestures, just talking. As if we were having a conversation over the phone. He went around the room giving every child a turn at a time.

So it starts off "Ok, draw 5 lines."

And he gets a piece of paper and drew 5 horizontal lines.

"No! No! On the board!", said the next one.

So he goes to the chalkboard and draws 5 lines in random places.

"No! No! make them horizontal!"

And he drew 5 horizontal lines that squiggled around and were of random lengths.

And this went on and on until you we ended up with something like "On the chalkboard draw 5 straight horizontal lines, about 1 inch apart, and all 2 feet long." And then we still had to figure out how to explain drawing in notes on the correct line, whether the circle was filled or un-filled (quarter note, half note, etc).

We never actually finished, most of the kids got too bored. But I thought that was such a fun lesson. Almost 15 years later I can still recall it as clearly as if it were last week. I've had a few intro programming or algorithms teachers explain a similar concept. A robot baking cakes is a common one, or that programmer joke ("buy butter and if they have eggs then buy a dozen."), but actually shouting commands someone as inept as a computer really made it sink in.
Ask HN: Are you planning on selling your Twitter shares?
The Twitter lock-up period ends on May 5th. If you have shares are you planning on selling them or holding on? If so, for how long?
Miami, FL. Full time developer as well as Sr positions available at a major travel company.

Currently transitioning from JAVA/PHP to Scala/play/Akka. Mobile dev experience is a plus. Local only, relocation assistance provided for the right candidates.

Contact at: ZmlwZXJleiBhdCBuY2wuY29t
What's their differentiator now?

Of course current users might say "great, another feature i want!", but, wont this just muddy their market position?
Don't have time to wade through 100+ Webby Award Winners? Check out these 5
But this is attractive from the point of offsetting global warming. I should do the calculations for how effective it really is i.e. how big a plant do I need to offset all the carbon dioxide I produce.

If it is, there would be a public incentive to fund development and plants of such a nature vs funding carbon neutral or carbon positive energy ventures.
World Health Organization warns of “post-antibiotic” era
Milwaukee, WI, Local/Remote, Full Time/Contract/Part Time

Stack: HTML, CSS, SASS, JavaScript, jQuery, EnyoJS, PHP, WordPress, Objective-C, Git, Blender, Autodesk Inventor

Resume: http://davisr.me/dropbox/resume.pdf

Contact: d@visr.me

I'm a young web developer, eager to get into the industry. Currently, I run a custom bow tie business (http://drbowtie.com) that I built from scratch, but am looking for an internship or junior developer position. Some of my other projects are listed at http://apps.davisr.me.

Ideally, I could work from West Bend, WI, but can come on-site anywhere near Milwaukee. I have 5+ years of administering web services, and 2+ years of running an online business. Please don't hesitate to contact me; if you're reading this, I'd love to get a coffee with you!
> If we’re careful in our module exports, a change like this can be done in a backward-compatible way. Such an approach is outlined here (http://www.yesodweb.com/blog/2011/10/settings-types).

The problem with this import solution is that almost nobody actually does it! Nearly every module you will ever import exposes most of the constructors of the ADTs they define - because Haskell encourages it - it's much simpler and cleaner to pattern match over constructors than the functions you use in place of them in order to encapsulate the constructors - which you need to use guards to match over instead.
Comparison: http://www.head-fi.org/t/539506/sony-mdr-v6-vs-mdr-7506-ther...
I've been working with Django for 5 years. In my experience, Django's ORM is pretty good for the common cases (specially when your query maps one-to-one to a single model), but for anything that you need a bit more flexibility (dealing with scalars, GROUP BY, a custom JOIN) you're on your own with raw SQL, which gets unmaintainable quickly since you can't chain it with QuerySet and suddenly you're not compatible with the rest of the codebase.

SQLAlchemy is more interesting in that it doesn't hide SQL away, just provides an API for it. Underneath everything you're still dealing with strings (you can just print most objects, like queries, columns, expressions, SQL functions, etc), so you're less likely to be suddenly incompatible with the rest of the API when doing something that deviates a little more from the common cases.
Oh? Odd. My workflow is almost entirely keyboard-driven, and I have no such problem (the laptop is about a year old).
Collateral damage from a poorly designed worm would be one thing I'd worry about. We've seen multiple vector attacks, I could imagine one gaining a foothold within the network and another component of the attack interfering with medical devices.