skysight-inc/HackerNews huggingface dataset:
A signed access token is how identity is provided in a stateless environment.

Take Facebook OAuth for example. A user logs in, is provided with a signed access token by FB, and then uses that token to prove to an application that the owner of the secret key has granted them permission. The owner in this case was Facebook itself.

This can be verified by the server by comparing the:

var expectedSignature = crypto.createHmac('sha256', FACEBOOK_OAUTH_CLIENT_SECRET).update(encodedData[1]).digest('base64').replace(/\+/g,'-').replace(/\//g,'_').replace('=','');

with the signed request signature:

var signature = signedRequest.split('.',2)[0];

and making sure that they're the same.

This way the server never needs to maintain sessions, cookies, or a whole bunch of other crappy, centralized, coupled, insecure methods for building networked software. The server only needs the secret keys of whatever access tokens users might be providing. The access token contains the userId or any other relevant information. If the server needs more information about the user, it can provide the access token to another API that returns more information about the user, again, based solely on the access token, just by passing state INTO whatever system/function/service needs it.

If this server is sitting in front of a database all that the server cares about is what the access permissions are of whatever incoming request it is dealing with. It still doesn't need to maintain state. The database is maintaining state, but the server is just verifying that the request can make the changes to the state of the database.

All with the wonders of functions, modules, and APIs that try to operate without managing their own internal state, which again, is the main feature of functional programming languages.
Which is deliciously ironic considering the first 8 paragraphs are exponentially more hyperbolic and sensational than anything in the original post.
What the facts say about Berlin’s “pressure” to have exits | berlinvc
Http://pdf.yt
"Why does PDFy exist? I got sick of documents getting locked up behind login walls of services like Scribd. PDFy exists to offer a place where anybody can instantly upload and share a PDF, much like Imgur does for images. PDFy is free, ad-free, and non-commercial."
Let’s Talk About Exits, Berlin
At the time of writing this, the top answer has exactly 1337 upvotes.
I use autossh[1] to keep a tunnel open in the background to $PUBLIC which lets me connect faster to $INTERNAL.

[1] http://www.harding.motd.ca/autossh/
Optimise TV Ad campaigns using web analytics
I've been thinking about this a bit lately. I came to the conclusion that brain could basically be a process to simulate evolution (not computational, but analogous mimicry). If something seemingly 'intelligent' can exist because of evolutive process ('emergence'), brain should mimic the process to arrive at the same solution, faster. For example, when I'm thinking about this comment I'm unknowingly eliminating all the pathways that lead to bad comments and this is the only one that survives ('emerges').
We've been working on this problem for a while - and have a pretty solid solution.

Check us out https://www.repustate.com

We also do this for Arabic, which is equally challenging.
Those are Unlabelled Accuracy score results, but Redshift is quietly computing the dependency labels, while parser.py does not. Running Redshift in unlabelled mode gives very fast parse times, but about 1% less accuracy. The labels are really good, both as features and as a way to divide the problem space.

The data sets are the _Stanford_ labels, where the main results in Zhang and Nivre refer to MALT labels. Z&N do provide a single Stanford accuracy in their results, of 93.5% UAS.

Sentences per second should be just over 100. I use k=8 with some extra features referring to words further down the stack, where Z&N use k=64. Right at the bottom of the post, you can find the commit SHA and the commands for the experiment.
Not exactly. Classic stack-based buffer overruns are generally mitigated by the /GS flag in visual studio and heap overruns are usually caught by heap hardening.

There are normally a ton of memory corruption vulnerabilities in every browser, but given modern memory protections the gaps are in "use after free" bugs, mostly.

UAFs where an object is allocated, then freed somehow, but (ideally) through Javascript you can somehow get a handle to the object, or put something in memory where that object used to be, such that a method gets called on it. Since you control that part of memory, you can control where the method invocation goes.

Typically browsers have additional sandboxing to make UAFs and general memory corruption hard to exploit.

See say: https://technet.microsoft.com/library/security/ms13-may

Search for "use after free" and see how many there were.

P.S: the fact that EMET mitigates this means it's likely the exploit uses a heap spray.
Last time I tried TeX was in the early 2000s, but I suspect it hasn't changed that much. At the time metafont pushed people into bitmap fonts, and using scalable formats was quite difficult.
What I really want from a dynamic .ssh/config file is a way to specify conditional options.

For example, today my .ssh/config is a symlink to either .ssh/config-home or .ssh/config-out on my laptop. If I'm out I use the config-out file but if I'm on my home VPN or at home I use config-home.

Also I have a ProxyCommand for many work servers so I proxy through my work laptop that is always on and this command is not needed if I'm in my work network.

So in two ways the only thing I ever needed from a dynamic ssh configuration is conditional options based on my network location. Today I change this manually with a script and symlinks, but have to maintain two different configurations.

Edit: I just realized while typing this that one solution would be to use a jinja2 template for my ssh_config instead of maintaining two different files.
Doesn't honestly surprise me. When you email support at a larger company your response will be answered automatically. A large number of companies don't expose bug reporting services, or don't have them in place. Also 'support' =/= technical support.

Honestly twitter as a bug reporting service feels like its catching on. Faster, even custom responses I know it wasn't made for that but its an interesting use case.
Yeah, and for that matter "fundamentalism" has been associated with certain elements of the Christian right (like biblical literalism) at least since the 90's.
The Rise of the Sports Management Movie
Since port numbers are a very tiny space, that would amount to an infinitesimal increase in security, right? Essentially, 'hiding' the port is 'security through obscurity' which is a thoroughly discredited idea.
If you don't know what to do with it, and you bought it below market, just sale it for market price, book the easy profit and move on.
Agreed; REST clients/frameworks should have ways of handling all six of these problems--none of them are specific to a particular API.

If the client lib has an API-specific way of handling "caching", say, then the number of ways of handling "caching" is O(n) in the number of APIs you consume. If you use the REST APIs directly, then the HTTP's standard, debugged, documented caching mechanism is the only one you ever need to know.
You don't know the joys of CNC until you break tungsten bits, about 10€ a pop, like candy. It hurts, figuratively or literally.
Interested in meetifyr.com - please drop me a line, you can see my email address in my profile

thx
Recently I've been thinking we need a "Device Driver Linux" distribution which can sit off to the side in systems like this or Xen, and just provide access to devices through careful external channels (although there's things like NFS you might want to use...).

The attack surface will still be huge, but perhaps by such hiding you can make it too hard for an attacker to actually get to it.
For a media center, Raspberry Pi is great since it has hardware video decoding in GPU. The menus in XBMC use the CPU, so they are a bit sloppy, but overclocking it a bit is reported to help. Mali (A20's GPU) has no driver for hardware-accelerated decoding, so it's going to decode video on CPU, and will likely be even slower than RPi. Other boards, I'm not really know but XBMC site has a list of recommended hardware.

On x86 front, if size matters, you can take a look at this: http://www.newegg.com/Product/Product.aspx?Item=N82E16813135... ($32 after rebate). It needs a stick of alaptop RAM and a laptop power brick. You can load XBMC from a USB stick.

If size doesn't matter, look for AM1 CPU/motherboard. CPU will run you $31 (http://www.amazon.com/AMD-Sempron-2650-1-45Ghz-AD2650JAHMBOX...) and motherboard, $34 (http://www.newegg.com/Product/Product.aspx?Item=N82E16813157...).
I have had this problem, although fairly rarely. I have the following in my ~/.ssh/config:

ControlPath /tmp/ssh_mux_%h_%p_%r

This sets the path of the control file used to share the connection. If it ever hangs, I can just delete the file. But in practice I found this doesn't happen often and I appreciate the speed boost I get from connection sharing.
My thoughts ...

Having it in Earth orbit is no great challenge - better to have it further out of the gravity well to be a better staging post, and there's more to be learned from having to go back and forth to it further out.

Look at the Mercury, Gemini, and Apollo missions. Each one was specifically designed to learn something new that was essential for the Moon landing. This seems designed for maximum learning and not just for the individual challenge.
This is hardly city driving. Try driving in a European city. (I love this project and can't wait to buy or rent a self-driving car)
The trillions in metals mined from an asteroid for an investment of billions, all while avoiding ecological disruption.
I'm not misleading, it's an accusation of incompetence, every single one of those kind of phrases is attempting to convey just one thing:

hurr, durr, [attack_target]'s too stoopid/misleading you so everything he says is wrong.
as a theoretical problem highway should be much easier because few types of "street agents" can access them (i.e. no bicycles, no pedestrians, no traffic lights)
Thanks, two way to handle payments.
1. You can click buy in bulk - from there you can buy any number of cards.
2. Or is you just send a note. Then we start writing the card and reply with a request for payment. We send the card when you pay.

Give it a try. Thanks for the question.
A few things off the top of my head which are different across many RESTful APIs which prevent a unified client from being possible:

- Referring to other data paths in the API in a standard format

- Authentication. Shy of OAuth, it is totally different on each API. Most APIs avoid OAuth because its a PITA

- Partial PUTs vs PATCH vs sub-resources

All sorts of minor things are different across rest APIs, and that results in client libraries needing to be widely different.

We are in need of a standardized API format which we can build compatible server & client libraries against. Something like SOAP for the JSON era. There are a few out there, but none have really gone anywhere. Are any of these extended-REST wrappers in production by any big companies? I'd love to be corrected.

If not, maybe a high-profile company with a really nice API design could publish a standard on their API structure and refactor out their transport code to provide us with these libraries. If successful, they could be known for introducing a widely-used transport layer for the web industry.
I was surprised at DHH's love for capybara. I've always thought the capybara tests as the most cumbersome, unreliable and generally superfluous tests in our suites. They are at best slow and hard to maintain.

Together with our move from big backend rails apps to big client side apps I think we should also be moving our integration tests to the client side.

There's some great testing runners in javascript, you almost don't notice it's not rspec, and I think it could be much more intuitive then the in my opinion awkward Capybara.

No bad feelings towards the Capybara people by the way, it's great software that ostensibly has taken a lot of effort to develop. I just hope we can move to a different solution.
The Paradox of Software Craftsmanship
Doing it at all is so near impossible at current technology levels as to be a pipe dream. To dream of putting further obstacles in our path is pointless.

You want to practice remote mining, do it on the moon, or at the bottom of the sea, or in a deep-core mineshaft here on earth. All simpler than going to the asteroid and bringing back gigatons of rock.
Testing is just another tool, and should be used when appropriate. I don't have a lot of automated tests for my application, but it is an in house app, so I get immediate feedback from users if something isn't working. I do have a set of tests for certain parts where it seemed to be appropriate and saved me a lot of time when refactoring.

I was keen to put in a lot of automated tests a couple of years back, but it was proving extremely time consuming to generate fixtures that made the tests meaningful (and management decided there were more urgent tasks). Looking back on it, it would have caught a few bugs, BUT not that many considering the effort generating all the fixtures and tests would have taken.
I'll call you uncomfortable with the idea that the critical element of test driven development is making the programmer's life easier rather than producing software user's can trust. The correlation may be the reason for using TDD, but the goal is software that doesn't harm users. Making the programmer's life easier is only a potential side effect.
The thing is .. what happens if a cyclist falls in front of a car with a human driver? Probably the car drives over him and the cyclist dies. The challenge is to do better than that, which is a rather low bar.
Honest question, why are the computers connected with Ethernet as apposed to PCIe wouldn't that allow faster communication between cores?
I think the day when a computer is more reliable than the median licensed driver will quickly come. A big piece of that is because the software will be aware of and respect traffic law.
Why do you need root access for scp? Just scp the file as a regular user and then use sudo to copy it into place.
somehow the current scuffle between uber and regular cabs seems to miss the joke. we're going to need a plan for the eventual unemployment of a lot of cab drivers, regardless of how the cab is hailed.
It won't be able to drive around New York if it follows the rules so strictly. It will never be able to turn. They'll have to add a setting for aggression...
I think some of us may really like to hear specifics regarding these stunning differences. I grew up in NY and as far as I can tell both NY and SV are high tax areas with extremely high costs of living.
I just used SOAP on a architecture prototype earlier this year. It is pretty much alive in the classic enterprise world.
Serial busses are fault-tolerant without cross-traffic disruption. One controller on a shared bus going bad ruins the party for everybody.
It can be done by robot, it several new abilities, it acts as a staging post for deep space missions, it lets NASA examine an asteroid close up and repeatedly, and it can be mined, again demonstrating abilities needed for deep space missions and for long-term possibilities for resource acquisition and management.

Also, why not?
I saw an interesting comment on the blog post. Is anyone keeping tab on the project knows if Google in working on some sort of communication between vehicles on road. That will make the self driving cars much more accurate. Lot of 'sudden' circumstances will be predictable by the car.
I think it's dangerous to rely solely on a unit test suite to guarantee the correctness of your program. Each unit-tested component may pass its own tests, but that doesn't guarantee that by interacting with other (present and future) components it won't exhibit any bug.
I guess immutability would go a long way forward in realizing this guarantee, but I've never had the pleasure of working on a software where each component was truly immutable and independent of each other.
I flagged your comment because it contains an ad hominem attack on the submitter.
"
Everybody is aware of the classic—and revered—image of the hardheaded decision maker, who cuts through nonessentials and goes after cold facts. But researchers are finding the truth is much more complex: The best leaders seem to lean on their emotions much more than logic.
"

Did anybody read Kahnemann: Thinking fast and Slow?

Kahnemann shows how easy it is to trick our emotions and opts for cool reasoning and statical thinking. He proves that this leads to better decisions compared to allowing emotions to help in decision making. This is especially true in pressure situations. He won the Nobel Prize for this research.

That said, the key topic of the article (stress and deadlines lead to bad decisions) chimes in fine with Kahnemanns results.
Emotions may help talking with the team, but certainly not with making the best decisions.
6 apps to supercharge your prototyping 
Being a user centered designer means a significant portion of my responsibility involves prototyping concepts to gain feedback for various designs that solve actual business problemsMy goal is to ultimately mesh user goals with business goals for a win-win situation that is mutually beneficial from both perspectives.If what I’ve said so far begins to resonate, you may be interested in the following prototyping tools that can assist you in walking your stakeholders through your vision on the way to your final product.
Wow. You are giving waaaayyy to much credit to the responsiveness of humans. Roughly 1 in 4 drivers have a statistically significant amount of alcohol in their blood system. Lets also not forget distractions like cell phones, finding/selecting music, passengers, OTC and prescription drugs, et al.

From my perspective, I'm the only good driver on the road and everyone else needs to go back to driving school or have their license revoked. :)
As I understand it, the computer has enough sensors (LIDAR, etc) that it has far better vision coverage than a human. That is, I believe it can see in all directions at once.
Definitely good points. Your first is one of those really small, but also really annoying things about Erlang. I spend a lot more time with Elixir than Erlang, and while the first one is addressed, and the the second one is mostly covered, printing is still a pain point for people new to the language. Once you understand the caveats, it becomes a non-issue, but it's certainly frustrating for new users of both languages.
Curious to know what you see the future for 3D printing to be?

I was flipping through Thingiverse and came across this RC car http://www.thingiverse.com/thing:83024

As a kid I used to build RC car model kits but they were very expensive so I only ever got to make one a year. If I could have downloaded one every few weeks (about the time it took me to construct one) I'd have built and learnt so much more. So I see 3D printers as having an amazing application as a learning tool/toy for kids.

Beyond that I could see it taking a secondary role as a support tool around the house allowing you to print out odds and ends.

But I don't see the big problems that 3D printing will hit the ground solving that will change the world? I can see them doing so in a latent way - by having an enormous impact on our children - but I don't see the immediate active applications?
It's a shame that the first half of this article detracts so much from what is otherwise an interesting and well argued point in the second half of the article.

I have mixed feelings about Robert Martin. On the one hand I admire him a lot for coining the SOLID principles. And I think he is probably right about many things. On the other hand, I also think he goes overboard sometimes (especially when it comes to the S in SOLID: The Single Responsibility Principle), and I don't think it's wrong to call him a fundamentalist.

One thing I really admire about DHH, is his "show me the code"-attitude. For all the people who criticise Rails for not following the "correct" architecture principles, I have yet to see someone put their money where their mouth is at, and show us a what correctly architected web framework looks like.

It's probably not entirely fair, but Robert Martin makes me think of the adage: "Those who can, do. Those who can't, teach".
Limits of social learning in situations that require analytical thinking
On the other hand it might be a lot better to detect other kinds of hazards.
his time.

I'm not defending the position, but I have done the same thing with things. Sometimes a string of bad luck can really disenchant a person.
Context is important when you see that many weasel words. "We do not yet feel comfortable saying that." Means there still undecided as does 'may' in 'may be impossible'.
As a city cyclist, the Google solution looks way safer than the current status quo...
The car has many fewer limitations on its peripheral vision when checking hazards because it has dozens of sensors all over the car, as opposed to the humans' very limited eyesight.
There are over 30,0000 deaths in the US alone every year, which is actually near historical lows. I believe there are several million accidents and hundreds of thousands of injuries.

Now the computer might not be perfect but if it's 10x better, wouldn't that be acceptable?
> I think modern usage of the term dates to Aristotle's books: Physics & Metaphysics. 'Physics' is about nature and feels like a direct ancestor to modern science. 'Metaphysics' is pretty close to what we still call metaphysics. Most people think of these things (logic, ethics, epistemology as science).

Tangential to all this, but a fun apropos: it's interesting that the original title of Aristotle's (multiple 'books' collectively known as) 'Metaphysics' is (widely believed to be) a matter of noting down the arrangement/order of his treatises: τὰ μετὰ τὰ φυσικά (ta meta ta fysika) - '[writings] after the Physics' (Physics being another arrangement of prior treatises of his.)

'What comes after Physics' can of course be evaluated conceptually, but many scholars think that 'τὰ μετὰ τὰ φυσικά' here means 'writings that come after the Physics'.

Which is a somewhat humbling (if that's the word) idea, and which might be able to reduce the aura of drama and mystique oft associated with the word of 'metaphysics'. :)