skysight-inc/HackerNews huggingface dataset:
He recommends HMAC-SHA256 in this paper, but I think that AES-GCM is a better construction, as long as you understand the requirements for IV uniqueness. It offers significant improvements on top of the standard HMAC (privacy and additional out-of-band data) without adding much in terms of size.
No, I don't think it would be. For a company to announce that they were forgoing tracking would be a brave step. I understand that analytics is a really really useful thing for a company.

But, as a corrolary, what if Google Analytics alters the content in a way that makes it less useful? The obvious example here is clickbait articles (See, Clickhole), but I think there's other more subtle problems here. Isn't the job of a reporter to report what _they_ think is news, rather than what people want to read?

Beyond that, I am troubled by the spying on people. It occurs to me that even if I remove Google Analytics from my website, anyone coming to or going from my website will be subject to monitoring by Google. It's not exactly opt out.

Microtransactions are hard, though, that problem still hasn't been solved.
This is awesome. Great job.
Personal blog, slow your roll. Author said they were a professional software developer, not a professional writer.
Not in the near future. AngularJS is taking up most of my free time.
I appreciate the sentiment, and no disrespect for the guy either, but it makes this site a little less like 'Hacker News' and more like the front page of Wikipedia.
I have to sleep a little more (paradoxically for a stimulant, but this is how it works). Occasionally I feel more irritated (when I do, it's better to use half-dose or skip the meds the next day). But the benefits are much more numerous.
I'm sure this is would be pretty cool, but I can't help but instinctively close it because the layout, colors, etc. look so much like that of a turn-of-the-millennium site to buy fake "male enhancement" pills from some guy's basement in Kazakhstan.
Uh, that can be set by users as a perk for having enough karma. I think we usually do black bars on the top.
Show HN: I Made a simple Node.js weather app using Koa
The site is hosted on S3 and cloudfront right now. The poor performance might be because the page transaction and animations.
My initial vision is display the album similar to a photo book, now seems nature scrolling might be more acceptable.
Unfortunately, my appetite wasn't affected (I hoped). :)
Twilio adds support for SMS on toll-free numbers
Sam Altman | Funding the Next Visionaries – Dorm Room Tycoon
How Quartz managed to triumph in an experiment doomed to fail
But when you add a new address to your account, shipping to that new address could cost you money. When Amazon ships a replacement to a new address, it could cost them money. The risk profile is very different, so the implementation is different.

For the record, I don't understand why Amazon keeps allowing this. It seems like it could be fixed without much of a hit on customer experience, and the fraud ultimately does cost all of us more, as they have to cover those costs through higher prices.
Show HN: Visual Web history (Chrome extension)
I was one of the users who went to your website the first time it was posted, saw that you had to register to see anything at all, and left. +1 for the changes!
This is a logistics issue: shipping to an unverified address before receiving back the original product. Amazon should be solely responsible for it.
> What bothered me was the fact that they show usage of CVS as an alert for deprecation.

CVS still works just as well as it ever did, but it is super crusty at this point. If an open source project hasn't transitioned off of it, that's a sign to me that the maintainer either doesn't know any modern DVCSes, or doesn't care about the project enough to transition to them.

It's not a guarantee that the project is dead or outdated, but it's a smell.

Of course, I consider still being hosted on Sourceforge to also be a smell.
Your response to someone making an amazing optimization is if you need optimizations your app is done wrong... seriously?

You're seriously underestimating the difference this makes. If this is rendr for angular it is a breakthrough for the angular community.
This is what gives away the fact that it's a parody
The comments say that there's an Ogg download but I can't find it. Any pointers?
Ali Rowghani out as Twitter chief operating officer
Time machine backup then reinstall OSX. Then be wary about what applications and utilities you reinstall.

I would wipe the router and reinstall that just in case.
Doesn't need to be a special way.

1 medallion per car per shift [iirc] + the per-trip tax.

It is just they need to pass the laws to do that and haven't yet. Of course, I think Uber is lobbying against being taxed given that they've tried to evade paying taxi-like taxes so far.
Dr. Oz to testify about weight loss scams in front of the Senate.
On the other hand: What if bit.ly shut down operations / went bankrupt / lost all their data? Would that change anything for you?

This is like bit.ly shutting down. Except! If you pay a fee, they won't shut down after all.

But I do agree that hiding pricing in small print is uncool.
Is it ever a good time to buy a house in San Francisco? It's cheaper to buy a house in Sacramento instead and pay for the gas and/or transit fares required to commute.
What problem occurs as an application grows? I've used both Flask and Django, but have never built a large enough project to have problems with routing.
I'm with you. Prime was great for "free" delivery for the physical items I purchased from Amazon.

However, Prime Video is not something I can use. In short, does it work on Linux? No. Therefore, the price increase for no apparent benefit has now priced me out of this product.
Insurgents Surround Iraq's Largest Refinery In Baiji
Uhh. Drake? Kendrick Lamar? Wtf are you talking about? You obviously do not listen to any rap.
> Also His 1977 Apple ][ is running Apple Dos 3.3 (circa 1983)?

- 3.3 was originally released in 1980, it was in 1983 that 3.3 received its last bugfix release.

- Sure, why not! Apple DOS wasn't installed anywhere, it had to be loaded from a floppy at boot. Upgrading wasn't a big re-installation or migration. Running DOS 3.3 isn't any weirder than it playing Donkey Kong (1984).
Ember's examples on their site are always the simplest use-case. For example, find me an example on their site of saving a complex relationship that was newly created by your application. Let's take the example of an invoice. Let's say you have an Invoice model, and an InvoiceLineItem model in a one-to-many relationship.

How do I save the creation of a new invoice (with line items) as a single transaction? As far as I can tell, you can't without breaking from Ember Data's very strict 'this is the way things should be done' model.

You have to create a new Invoice, then create the InvoiceLineItems doing something like this:

var self = this;
self.get('store').createRecord('invoice', {
.. attributes ..
}).save().then(function (invoice) {
return Ember.RSVP.all(self.get('lineItems').map(function (item) {
return self.get('store').createRecord('invoiceLineItem', {
invoice: invoice,
.. attributes ..
}).save();
});
}).then(function (invoiceLineItems) {
// do something
}).then(null, function (error) {
console.error(error);
});

Note that this isn't even taking into account how to rollback INSERTs if, for instance a single invoiceLineItem fails to be created.

The 'other' way to do it is to create just an Invoice model, and have a lineItems attribute of type 'raw' and just create a RawTransform that's just as pass-through of whatever the JSON has for that attribute. It works, but at the same time, feels like it's going against the Ember Data Way, especially if you have a need for an InvoiceLineItem to be its own model (i.e. to be able to maintain relationships to other things and look one up by ID via the API).

Then you might have something like:

- Invoice and InvoiceLineItem models

- A RawTransform:

App.RawTransform = DS.Transform.extend({
deserialize: function (data) { return data; },
serialize: function (data) { return data; },
});

- An attribute like so (on Invoice model):

lineItems: DS.attr('raw'),

- Code that looks like this:

var self = this;
self.get('store').find('invoice', invoiceId).then(function (invoice) {
self.get('store').pushPayload('invoiceLineItem', { invoiceLineItems: invoice.get('lineItems') });
});
How did Angular become synonymous with frontend JS apps? It's one of the clumsier frameworks out there.
There are no pills to auto-magically make those traits a reality

it will take EFFORT

In some ways, that's like telling a person suffering from a growth problem to just make the effort to be taller rather than taking growth hormones. Maybe someone with a spinal injury should just make an effort to heal. Maybe someone with Parkinson's should make more of an effort not to stutter and twitch.

The reality is that many of the behaviors you'd like to believe are strictly efforts of will are composed of complex chemical interactions in the brain that can be hampered or helped with the addition of other chemicals.

Some things can be altered through effort, but completely dismissing the proven medical condition some people suffer from is inappropriate when discussing matters of the brain.
What is the rationale? It isn't obvious to me that it's better either way.
> Usage of unencrypted Google Analytics + Google cookies means that you don't need to eavesdrop on individual connections, just one small set: the endpoints to the Google Analytics servers.

Admittedly, it is a smaller number of endpoints than monitoring every site in the world (that much is obvious), but it's not one or two -- they're all over the place.

But even ignoring that, it really comes down to one thing: Google Analytics can't possibly make an HTTP site any less secure or less private -- you're sending a postcard with your personal details on it a million times a second! It may in some situations make it slightly (very slightly) easier for someone to snoop on a tiny bit of info about your traffic, but the fix for this isn't to make that harder, it's to make it harder to snoop on your traffic entirely. We already have a solution for this: ubiquitous TLS.

IMO, this is slapping a band-aid where your arm used to be; trying to increase the privacy of HTTP sites is a fool's errand and a complete and utter waste of time.
The monochrome icon could be any drink. I guess the problem is a lot of people have never seen a straw.
How to create a data cluster and live through it
Its unreadable with that shade. I use #cccccc.
I wish they would quit rolling all of this shit into a giant monoproduct. I just want to prepay for postage.

edit: Is this why they raised the prices for Prime? If so, the fact that I will never use it means they're saying that they don't want me as a customer.
But wouldn't something like a share button in that case be something better suited to the browser rather than links on whatever page you are visiting, at the very least? And even then it should be for whatever service I actually use.
What about bounds checking and stuff? Sorry for my ignorance on the matter.
How to Prepare Your UI Vs. API Load Test (JMeter)
Not really. The day my `cat` pauses to GC is the day I leave this field...
The new Oculus and the consumer version are high enough resolution for text rendering. Though obviously artifacts of rendering them in 3D if anything but screen aligned and pixel snapped.

Additionally there are already plans for a front facing camera (that could do pass throug), because of the being blind part and the potential for hand/peripheral tracking in addition to augmented reality.

Bonus: I hope they just go all out and make/purchase custom hardware tech for structure.io/project tango structured light real time 3d scanning. Would be so cool!
Name.com just released the .FUTBOL domain name
Just fucking stop.
is it spinning waiting for script from cloudfront? i have noscript set to deny external scripts by default and the tab becomes unresponsive at 100% cpu while apparently doing nothing.
Very nice UI. Hope you add some old school stuff in there! I went ok on the Kendrick Lamarr test, but would rock with A Tribe Called Quest.
Maybe stub out the backend with an Express app? Express seems simple enough that even if you're not familiar with it, you can still understand what it's trying to do.
That's very interesting. I wonder if this is a regional issue. I've heard before that Netflix is much less awesome in a lot of countries than it is here in the US, but I'd never heard about how Amazon was doing overseas. I suppose since Amazon bought a UK-based Netflix competitor, it makes sense for them to support the UK better.
I'm sure that really depends on where in the world you live, where I live it's basically routine. I've had one for that exact reason.
Edit: sorry $20, not $40 (I was remembering the initial rumors of the price going up to $120)
I've also just been diagnosed at age 30 (constantly been labeled "lazy" / "dreaming" when I was younger - you believe it after a while - ADHD diagnosis still seems to be something novel here in Austria as well).

What you write really gives me hope, for now my neurologist put me on Wellbutrin mainly to treat my depression but he said he really wants me to try Ritalin soon.

I'm one of those people who rather meditates and works out regularly than to take any drugs - I don't like to mess with my brain - but I'm so fed up with my ADHD and the Wellbutrin alone already helps not only with overcoming my fail(ed-potential) derived neurosis but also a little with focus.

Do you feel as if Ritalin might help with getting to where the ADHD recovery group managed to get themselves even when not on Ritalin? "Plasticity of the brain" yadda yadda...
I quite like Twitter's approach: https://twitter.com/signup

4 Fields, all relevant.
Unlike software, it's time-consuming and expensive to test people. Most speculative studies on humans seem to start with a small group, and if they think they found something they move up to larger groups.

35 isn't all that terrible, either. An estimated 10 million adults have ADHD (although that sounds bogus to me), and plugging that into a calculator with a 95% confidence, that gives a confidence interval of 16.5. Not sufficient for definitive proof of anything, but still meaningful.
> Considering that even my desktop computer with a quad-core processor and top of the line graphics card can't render common HTML5 web apps at a smooth 60 frames per second, how is a $25 smartphone going to be up to the task?

Of course you wont play crysis on these phones. these phones are not tailored for those triple-A games full of 3D stuff but they are pretty good for 2D casual gaming if the developer knows what it is doing.

HTML5 is not a magic bullet. It doesn't solve everything. Of course there are domains that are better suited for other languages. The fact is that HTML5 is the only toolkit that gets us from computers to mobile platforms, smarttvs, videogames, smartwatches and more. Basically its the most common runtime everywhere and its also the easiest. Don't think of Firefox OS as "just a mobile platform" like Android. Think of it as a champion or an extension of the world wide web ecosystem. Its picking what we like from the web and evolving it until it is great on mobile devices as well but without losing the objective of keeping it interoperable with other platforms just like you can open HN on Firefox on Mac OS X or on Midori on Debian/ARM, the interoperable part is key.

The phone with the weakest spec I have here is the Alcatel OT Fire. It has 256mb of RAM, 1x Core and yet I can play games at 60 frame a second in it. This, of course, just work if the developer knows how to code for a hardware with such constraints. If a developer code his app on his i7 with 32gb of RAM and dual graphic card without ever thinking of lower hardware then he or she will probably face difficulties when porting to entry level mobile phones.

HTML5 mobile gaming is still evolving a lot. Check out http://phaser.io for a powerful FOSS framework that is able to deliver great performance on entry level phones.

Achieving 60fps is not possible in all occasions but achieving interoperability is better. I'd rather have a poor person pick a smartphone for the first time, learn just enough HTML to build a little app that helps his community and start changing things then having the same person get into debt to buy the latest iOS thing and then be unable to deliver the app for his community because Apple didn't like it.
The "sign up for free" link on the home page is for individual users, not for companies/brands. If you click the "Learn More" button in the "Bitly Brand Tools" section (which is far more prominent than the sign up link) the following pages do have a "Pricing" link in the top navigation bar (and that's presumably the signup they would need to use to make use of the "brand tools" features).

And yes most people do not read "every single terms of service" - but a business would be foolish to have so much of their business rely on another without reading the other's ToS. A look at Swayy's home page says "By connecting, you are agreeing to the Terms of Service and Privacy Policy." - funny they expect their users to agree to their ToS but can't be bothered to read ones for services they use.

As for bit.ly holding them "hostage" that's something Swayy should have considered before choosing them (or anyone else). What was Swayy's plan if bit.ly went out of business?
Try "or something". Re-read the piece. I never called them dum-dum, I said I was disappointed that they assumed that because I am female, that's a topic I would want to talk about. If you were going to bring in a keynote speaker, wouldn't you check that they are an expert - or have at least presented about - a topic before you schedule them? They didn't, and assumed that just because I'm female, I obviously must present on women in technology. I had no problem with their WIT keynote theme. I was aggravated because they seemed to assume that any chick would do.
I've never said that freedom is about consistency. Opinions should be consistent if they are to be taken seriously.

This guy wants to intentionally leave software exploitable, ready to be unknowingly hacked by criminals or governments, and call it freedom. And he gets upvoted for it!
I think you should invest some time into checking out "good kid, m.A.A.d city" then, really fantastic album.
I was talking more about video encoding/decoding in real time as Skype uses a proprietary protocol and encoding scheme IIRC.
Do you even know what that word means?
So you got into Y Combinator, now what?
Aural style sheets? Do they work?
I think this method of measuring the performance of retargeting is wrong. When your visitors later see your ads and convert, the value may not all be attributable to the ad. I would expect some visitors would have later converted even if they hadn't seen the retargeted ad.

A better approach would be a controlled experiment. Divide your non-converting visitors into two groups, and run ads for only one. Then compare the results.
HackerRankX Wants To Kill The Resume
So you didn't get into Y Combinator, now what?
For small apps, urls should definitely be defined near views. For larger apps, I would have to disagree. Here's why:
Django's url routing system might be cumbersome when you just want to get going with a few routes. However, it acts as an "index" for all your app's urls when you've got tens (or hundreds) of route definitions. So, instead of opening every view file, you can "tree search" for a specific url path. It is very flexible (which can be a plus and a minus).
What I meant is that getting the toolbar to show up when you aren't serving from localhost isn't as trivial as setting DEBUG=True. It requires other settings (https://github.com/django-debug-toolbar/django-debug-toolbar...) which can be annoying to configure.
Here's a provocative gem:

> The purpose of cryptography is to force the US government
to torture you.
> In which area exactly?

This question really gets to the heart of what it means to be a major power. If you have to narrow the examination to focus on somethings and exclude others you are not dealing with a major power. Major powers are major players in military, economic, diplomatic, and cultural spheres (it is important to note that these are big spheres too, like global sized spheres). I have never heard anyone say that Brazil is anything other than a regional power.

If you are interested in learning more about power in international relations here are some wikipedia entries that might be a good start:

https://en.wikipedia.org/wiki/Power_%28international_relatio...

https://en.wikipedia.org/wiki/Great_power

https://en.wikipedia.org/wiki/Regional_power

Addendum: It seems that you are from Brazil. Please do not take this personally or interpret it as a dismissal of Brazil.
LinkedIn’s Workforce Diversity
I honestly don't understand how 10 people is a large enough sample to make broad conclusions about health and medicine for 7 billion people. Can you please explain the statistics behind that?
IOS 8 Touch ID in PhoneGap/Cordova Apps – Now Open To Developers
A few more details:

I don't have any cracked software installed. I also keep browser extensions to a minimum: AdBlock, EFF extensions, Mozilla approved extensions and that's pretty much it.

I installed Little Snitch again and I don't see anything unusual in the network activity.

My security settings only allow "Mac App Store and identified developers" applications to run.

My router is an Airport Express. I will reset it, change the username and password, but there's not much I can do with it.

Many years ago when I used Windows I had a few antivirus and other software that I relied on to check my computer for virus, malware etc. I was wondering if there's anything similar that you trust for OS X.
Always nice to see more tools, and the X- headers idea is pretty neat. I've been using a mix of django-debug-toolbar (mentioned repeatedly in this thread), and django-devserver[1], which is more useful when writing non-html serving APIs and suchlike where a toolbar doesn't make sense.

[1] https://github.com/dcramer/django-devserver
Try #BFBF9B.
DDoS on Feedly
When I was a teen[1] there was this bar where they would give a free pint to everyone who could guess who was performing a given song. They gave out about one pint per hour. I wish I could find another place that did that. This website made me reminisce…

[1] Legal drinking age is not really enforced in Italy.
I tried to navigate away from the page in the middle of the song in Chrome and got a warning popup about leaving the page that was completely uncloseable by clicking on either option. I had to kill Chrome processes one by one until I randomly hit that tab :(
I am amazed that you're downvoted, and so many replies are from people who don't think 2 steps ahead and who understand the consequences of their actions in aggregate! The compsci comprehension level around here appears to have gone down from competent programmer/tech savvy to...I don't want to say...
I just lost 15 minutes of my life becoming a God of Eminem.

Really nice UI, was really smooth, no complaints, nice work.
This is also a huge concept in Mindstorms, a book sharing many of the same goals as Victor, a stated influence. Here the idea is to expose children to tools for thought ambivalent to their form. Papert's experience is part visual and part formal linguistic—he built LOGO.
1. Are you using Ember.computed's array methods? I tend to go with intermediately calculated arrays which I then union/diff/whatever is necessary for filters. It is also significantly faster than function-defined computed properties. The only bug I know of for this functionality was fixed in the 1.5 branch by @hjdivad.

2. The typical pattern is lots of computed properties. They're lazily calculated, so that makes them pretty cheap.