skysight-inc/HackerNews huggingface dataset:
My impression is that it's mostly a matter of inertia. On the technical side I don't think any individual part is unsolved or even hard but technologies and their applications keep changing (e.g., mobile) so it's not possible to create one unified, elegant framework without it being obsolete immediately; the alternative is that we incrementally evolve the existing mess ... Furthermore, perhaps there's also an element of companies making their competitors' lives more difficult by not embracing standards introduced by others.
Oily Shirted Filch Linguist
"* Node ADDS those, immediately making Javascript-on-Node as dangerous as anything. "

You could do the same thing with python except "REMOVE those"*.

This discussion is a complete non-issue. No one is suggesting to put a full-fledged python interpreter into the browser and allow remote websites to execute arbitrary code on it. Of course it will be "sandboxed" and gimped to prevent malicious code from executing on the client machine.
You minimise the damage reported to keep your job. You maximise the damage reported to get the bosses job.

Geeks have been doing this for yours; i.e.. "the security breach was minimal" vs. "you should hire me, your security are ineffective."
When the liability shift happens, what will change is that if there is an incidence of card fraud, whichever party has the lesser technology will bear the liability. So if a merchant is still using the old system, they can still run a transaction with a swipe and a signature. But they will be liable for any fraudulent transactions if the customer has a chip card. And the same goes the other way – if the merchant has a new terminal, but the bank hasn’t issued a chip and PIN card to the customer, the bank would be liable.

http://blogs.wsj.com/corporate-intelligence/2014/02/06/octob...
Tekken: Kazuya's Revenge 2014 Full Movies HD [Official]
Interesting to consider in tandem with AmazonSupply - a much bigger play for businesses, and one you hear very very little about. You can (and I'm sure they'd prefer that you do) use your Amazon Local Register proceeds to buy most of what you need to run your business. (Leaving aside restaurants/cafes – outside of AmazonFresh delivery markets anyway.)

http://www.amazonsupply.com/

Forbes had a pretty extensive look a couple months back, the only big public airing it's gotten - http://www.forbes.com/sites/clareoconnor/2014/05/07/amazons-...
Why Silicon Valley is suddenly in love with Slack
I don't think it's an "unrestricted" API if it uses https and you have to intercept and extract an auth token from a valid session. But I get what you mean -- it is fun to look under the covers and see how the big companies do things.
C++ is used in many environments where "restart" is not a viable option.
It's fucking crazy. It means that the US could instigate either a "cyber-war" or a real war between two separate nations with no one being the wiser.

Truly terrifying, and probably the largest revelation in the article. This is was the major news outlets should be covering, right now.
Would this would turn Amazon into a bank?
Ask the hiring manager (or HR contact) if he can put you in touch with other FBers who also have young families for networking & advice.

Don't worry about having to keep up with young single, hang-out after work crowd. You'll likely come in earlier, focus better, and bang-out the work quicker. The older managers will appreciate family is a priority.
Dart is good at large applications, like 50,000+ lines of code. After 50,000 lines of JavaScript, you really start to miss static typing and hate the type system that JavaScript uses.
> I'm not saying that's never been the case, but now we know the US can have more control on global internet infrastructure than we knew possible.

About ten years ago we learned that a teacher at my faculty (maths and CS), a world class specialist in graphs theory and finding critical nodes at small world networks, was contacted by a US three letter agency. I've assumed since then that the US government could shut down the internet any time if they really, really wanted to do it.

I didn't consider that they would shut down whole countries as a result of bricking routers from unintended hacking errors, though. Reality keeps outdoing the wildest figments of imagination.
Newry says 'YES' to Carnbane Way development according to survey
Florida man accused of killing his roommate asked Siri
Hey, everyone has to start with something, right?
The title of this submission is misleading and isn't supported by the linked article. No one is suggesting that this work will lead to meaningful predictions. Correlations are not cause-effect relationships.
I wasn't interested in the first place, because I don't want to replace JS with a different new browser-centric language; I want to replace it with an existing good general-purpose language that just happens to run in a browser.
Yeah, I could not imagine a Japanese symbol like 近く which according to Google Translate means "close" taking over.
Yipgo – Another life management app., but with a bit of a twist
Even root or intermediate certificates can be misconfigured without notice, it doesn't need to be allways the expired date case.
> # For a competitor to become popular it’d have to persuade every browser manufacturer to implement it

IMHO this is a misconception. Dart compiles to JavaScript with decent performance of the generated code. In some cases even faster than comparable hand-written JavaScript (see: http://dartlang.org/performance).

JavaScript engines getting faster also means that Dart code compiled to JavaScript is getting faster. It is a win-win scenario.

Even if other browser vendors won't ship a Dart VM tomorrow the situations is pretty awesome performance wise.

Once Chrome ships a Dart VM a huge user base gets even better and more predictable performance characteristics than would be possible in JavaScript which is incredible but I don't see the browser vendor support/performance angle as a real show-stopper for Dart.

You don't give anything up when you use Dart, you can still call JavaScript libs if you need to (e.g. we do use PubNub.js at https://www.blossom.io and we use it from Dart without any problems).
Stripe Supercharged
Groceries are not the same as food service, and is hardly a small or niche market.
Kenny Tilton's "Cells" project (Common Lisp) implements CLOS slots that are linked to other slots and automatically update. I believe this precedes the reactive programming fad by many years.
I should clarify that statement. Evidence points to the fact that it does reduce vitamin D production, but it does not stop it entirely.

If you apply and then spend a lot of time in the sun, your vitamin production will be decreased, but not entirely. People who routinely apply sunblock spend more time in the sun, so they will end-up producing more than those who spend no time in the sun at all.

It's the cost of weighing burns against vitamin D production. The skin cancer worry (legitimate) due to sun damage vs. decreased vitamin D production is probably a good bet to make.
Very nice.

That being said - is CREATING invoices really the problem in the invoicing world? I can google for "free invoice generator" and get 800 different webapps that do the same thing (Granted, this is the nicest one I've seen).

To me, the bigger problem is always remembering to send them, then managing the accounts receivable system, and knowing/finding out when the client is late in paying.
Show HN: Generating random Lipsum text in two clicks
> You could do the same thing with python except "REMOVE those"*.

You could -- as the java plugin does, but the problem is someone can inject a runtime, part of a runtime, or hook into a system runtime, or into another installed application's runtime, etc.

That is the core of the issue. If the language is capable in any sense of system level calls -- then it's dangerous to run in the browser -- someone can escape browser sandboxing, or language sanboxing and make direct system calls.

Any language that is not designed from the ground-up to be a web language is inherently going to be insecure. It's a lot like trying to bolt on threading into a language that was not designed to be threaded (look at php's struggles). It becomes almost impossible to make it work as intended.

Javascript was designed from the very beginning to be a web language -- it was designed from the very beginning to not be capable of certain things a web browser should not be capable of doing.

There's no debate here. ECMA Script's designers were very public about their logic in the design process, and the reasons stated here are exactly why they made the choices they did.
It always seems ridiculous to me that people are coming up with ways to cope with universal CAs (Tack, Convergence, CRLSets, etc.), but can't imagine how to apply those same ideas with a hierarchical system.

CAs are a problem that DNSSEC doesn't solve, but DNSSEC solves tons of other problems without making the CA problem harder.
But it doesn't work the way you seem to imply. It's like saying that in entire 70 years of their history nuclear weapons have killed less people than die in a car crash in a single quarter of any given year. Yes, cars are more deadly at the moment, but that doesn't make nuclear weapons any less dangerous.
Data-focused Docker clustering – ClusterHQ
Process
- Know where your key is
- Know how to generate a new CSR from that key

It's adviced to use a NEW private key, in case there was a private key compromise you didn't know about.

Also see https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Pr... (point 1.2).

BTW there is NO reason to regenerate the CSR if you reuse the private key.
Only $ ?
Please add edit field on currency also.
Dart is an awesome general purpose language with great performance for the browser as well as stand-alone.

You can use Dart to write server-side or command line applications:

* Soon: Dart support for App Engine http://dartlang.org/cloud
* Documentation: Dart command-line/server: https://www.dartlang.org/docs/serverguide.html
A non-issue... All of those things/features you mention as problems could simply be removed from the python interpreter included with the browser.

Will some of it leak through? Possibly. Does that mean we should do it or try? Of course not.
https://gist.github.com/staltz/868e7e9bc2a7b8c1f754 is an excellent introduction to reactive programming.
Interesting idea. Speaking as someone who manages a bunch of folks I don't find assigning action items w/o due dates very helpful. Is there a facility to specify a date?
"Amazon is the biggest competitor brick-and-mortar shops have ever seen"

Is it? The sorts of brick and mortar shop Amazon is a competitor to are things like Walmart or Best Buy, or other shops that compete on price or range of stock. But these big stores already have payment systems in place, and obviously aren't the target for this. If your shop hasn't already been put out of business by Walmart, I don't see why it would be put of business by Amazon, either.
I find it interesting that they're manually approving the hits, because, as they indicate, most hits are (nearly) identical.

It shouldn't be too difficult to solve this automatically though. Identical hits can be discarded very easily. The ones that only have a few words or letters reversed can be detected with some kind of similarity algorithm.
That's a nice site with some interesting graphs. They are a bit higher level than the simplest level of surveillance systems so I wouldn't start at an inappropriately higher level to see if there even is a problem. One lower level simple technique to determine or isolate if a problem even exists is to monitor TCP port 179 traffic rate (aka BGP) between your BGP speakers and your peers / customers. If the routers have nothing to talk about between each other, then there IS nothing to talk about, at least WRT routing problems. Or if one of "my" routers was having an intense discussion with another router, I knew something was up in that general direction. And it can be basically completely passive and completely isolated from the routing systems, which is cool. Just sniff -n- graph TCP 179 bandwidth over time. You'd like to see a nice horizontal low line of keepalives. Reboots or restarts make a nasty spike, never got much agreement but log-y-axis is probably for the best.

Obviously this only finds routing level problems. We can send a /17 to you just fine, but if you're having an IGP problem and sending every byte of it to null, well, from the BGP perspective that's just fine. Much as if you insist on sending us RFC1918 traffic we'll drop that route and traffic for you just fine, just like we had to eat your 0/0 route you're trying to get us to advertise to the entire internet. I think my head still has a flat spot from hitting it on the desk arguing with people.

Its been a decade since I did that stuff professionally at a regional ISP and I really don't miss it. Not much, anyway.
The landing page is fantastic. I know exactly what this product does, and I can see where it would fit into our organizational needs, all without any effort on my part (I didn't even need to scroll, although there is more detail when I did).
And if they do manage to undercut your barber aren't you interested to find out how.

Hair cutting drone perhaps?
How an arbitrary number broke the Internet yesterday
Is there something like this, but for CVs?
Ah, that makes total sense. I'll update the post and the script.

Thanks!

Edit: updated
Q and A: Puppet Labs CTO Nigel Kersten
> I have no problem with the NSA spying on foreign communications or disrupting them. After all, that's their job. What else would we use the NSA for?

Really? You don't have an issue with a foreign intelligence agency disrupting core infrastructure for a nation in the midst of a civil war? Especially against a nation we are not even at war with?

What if the Chinese (or anyone else) did something similar? Would that not be considered an outright act of war?

We are not at war with Syria, we should not be disrupting anything. There could have easily have been numerous deaths directly resulting from that outage.
PhantomJS can generate PDFs. It's pretty easy to use. http://phantomjs.org/
I have a friend who's about to start selling CC processing to local merchants at 1.29%. (His commission is 1/3 of that I think, so in theory the processor can go below 1%)
This story tells us that privacy may not be dead, but common sense certainly is.
Network Engineers as Programmers? Not so fast
By the same reason why Rust hasn't became mainstream yet - just too young.
Here is the article on Readability:
https://www.readability.com/articles/42wfcyub
Famo.us raises $25M to double down on its innovative JavaScript framework
They are "losing money" because they keep reinvesting all of their profits to facilitate all of these new products they keep turning out, and the market doesn't like it.
Here is the article on Readability: https://www.readability.com/articles/42wfcyub
I used to have a very simple HTML email that would cause Outlook 97 to corrupt its PST and need manual rebuilding.
Correct on the commands while editing a document, but I was specifically referring to the WordStar start screen before one begins editing a document (check the flickr link) where it has "X EXIT to system" (the all caps is also in the screen shot).

On WordStar 7.0a for dos, the main start screen menu selection is "X exit WordStar".
Yeah, I agree. MITM attacking your own auth token is not a great example of an "unrestricted" API. I'm thinking more POST requests to games where you can edit resources, change high score, etc. The kind of stuff you used to see all the time on web games, before popularity increased to the point where the developers had to take care of it.

I'd just imagine developers are a lot less wary about security holes because they assume that their client is "just" a smartphone and not a rooted packet sniffer.
Brazil presidential candidate Campos killed 'in plane crash'
Dad Took Sons to Syria to Show Them the Difference Between War and Video Games
>Wast majority of people who spied for China have had Chinese heritage.

Though I also believe this to be true, what we know for sure are that most of the people CAUGHT spying for China had Chinese heritage.
DOM as a first class citizen is a non-feature. Dart didn't address that feature because they went out of their way to distance the language from the DOM, and instead provide a clean API on top of the DOM.
No, you can't put your own startup at the top of a listicle.
The US didn't declare war on Syria.

> I have no problem with the NSA spying on foreign communications or disrupting them.

Should the rest of countries just assume that the US is a permanent military enemy? You don't seem to have a problem with treating them as such.
Strange Beings #2 – Nate Kontny
I guess it depends on the ratio. Does sunscreen suppress D production more or less than it reduces harmful radiation? Or are they the same thing?

Sunscreen is for one thing - so you can spend more time in the sun. If you'd burn after 15 minutes, then SPF 20 means you can spend about 5 hours with sunscreen. No SPF will entirely eliminate the sun - that'd be SPF infinity, right? SPF is a ratio.
It is actually a very interesting point you raise from a legal perspective. Kind of on par with Google's ability to unfairly utilize their internet search data which would have crushed the competition is spaces such as hotel/airline booking, local review websites, ect...

For example, Google is under significant regulations as a result of the DOJ settlement[1], "To prevent abuse of commercially sensitive information, Google will be required to implement firewall restrictions within the company that prevent unauthorized use of competitively sensitive information and data gathered from [flight booking] customers."

While I think jack-r-abbit is accurate about many business not competing with Amazon, if Amazon begins using financial data to unfairly stifle retailer competition, then they are playing with fire, Anti-Trust lawsuits are not cheap.

[1] http://www.justice.gov/opa/pr/2011/April/11-at-445.html
Seems pretty neat, like what you're doing here, NubeDeArroz!

I like how simple you've kept it. I built a similar service a few years ago to send invoices to clients directly: http://betterinvoices.com – we were one of the first partners with Stripe. You can hook up your stripe account and accept credit cards – free :)

Looks like one of the philosophies that we both share is not needing to log in before doing anything. I think this is very powerful – especially for people who just want to get things done. But if you're a bit OCD, you can still log in and get more.

Keep up the good work!
Everything You Need to Know About Ghost 0.5
They're not that similar, aside from common UI elements seen all over the web, and showing the device and app. Honestly, the Square page looks like a typical theme you can buy on ThemeForest for less than $20
Because it has too few good libraries and frameworks. For example I am waiting for a good Postgresql driver. The existing drivers have _async_ API.
What attracts the fish to the tube? The ladders work by providing some water that is going down stream slowly it is an obvious path. If there is no water to swim upstream against I don't understand why a fish would enter a random tube.
Because that's not how long it takes for money to really clear a credit card when banks are involved.
Seems like quite a low rate. I hope they have a good team/plan for anti-fraud, because merchant fraud is a different beast from e-tail fraud...
Can someone remind me why Snowden became a public figure in the first place? The second leaker is anonymous and practically invisible, and here Snowden is, constantly getting more press. It's like he wants to be as visible as possible while other leakers want the opposite.

Edit: Can somebody tell me what was downvote-worthy about this comment? This is getting ridiculous.
Asking where to hide a dead body was mentioned in articles about Siri since the beginning: http://blog.laptopmag.com/10-most-controversial-siri-respons...

> Apple endowed Siri with a mischievous temper and a few Easter eggs–for instance, ask her where you can hide a dead body and she happily complies with a helpful list of hard-to-find locations.

It was only a matter of time until statistically you have a murder suspect that knew about / used that easter egg.
Three Ways HTAP Boosts the Bottom Line
Looking at SpoonRocket, Sprig, and ZeroCater makes me wonder how "obvious" this is.
Snowden: NSA accidentally caused Syria's Internet blackout in 2012
A company with that size won't be able to having support that can actually assist you without going back to the technical team. You have to think of that... its not just press 1 button finished...
Oh wow. I was in the early stages of creating something exactly like this this myself - looks good guys!
Here is a cached version since the response time seems quite high to me:
http://webcache.googleusercontent.com/search?q=cache:EqfLajb...
AdStage Raises $6.3M to Put Digital Ad Management on Auto-Pilot
You keep repeating stuff along the lines of "language is capable of system level calls". Define what you mean, otherwise it's hockus pockus argumentation that no one can rebut. It's like arguing with Peter Joseph.
This product looks pretty cool. I think i'd want a way to then take this an export the todos into an already existing workflow. Say into Trello or Outlook etc.
Mouse-wheel to scroll (to intro).
I want to second the sentiment that national investment supports achievement like this. IMPA has been very important for Brazilian mathematics, bringing people from across the world to Brazil to do high-level research. This means that some Brazilians who don't have have the opportunity or desire to move to Germany or California or Korea can work with and learn from amazing mathematicians who come to them, in Brazil.

Since 1990, at least one Fields Medal winner has worked in France -- until this year. France has a culture of supporting mathematics and mathematicians. It has its quirks and difficulties, but national support for research has played an important role.
Considering that consumers have months to make a chargeback, this is a relatively new thing in the payments industry (last few years). I suspect it'll make the horror stories that much worse when a small business owner has already spent the money that someone wants refunded.
I, for one, welcome our new javascript-killing overlords.
What All This Bad News Is Doing to Us
Theme park ride in 2018. Just you watch.
The inner part shows scrollbars. MS Edit has alerts and buttons and scrollbars.