skysight-inc/HackerNews huggingface dataset:
MAC schemes like JWT provide message integrity and a form of authentication that can't always be provided by TLS/HTTPS.

The simplest way of describing it is that with HTTPS, when sending data to/from a server and a client (the client may even be another web server) you can be assured no one but the server or client can see or tamper with the data in transit.

But the client is still able to trick the server, or vice versa, at the application level. To prevent that you need a message signing scheme (aka a MAC), and this is an example of one.

For the case of password reset links from an email, generally speaking there's no point in using something like this; a one-time random token that you track and expire on the backend makes more sense. You'd only want to use a MAC if you need to freeze some kind of state in the URL and retain it, like perhaps a user's IP address. Then you can verify that the user's real IP address does indeed match the IP address in the URL; they can't tamper with the URL to change the IP address if a MAC is used.

I don't know why anyone would want such a feature for a password reset function, and you could also replicate that same behavior just by storing the IP on the backend as well (though while also perhaps making your application somewhat more complex in the process), but that would be one example of doing something like that in a secure manner while still letting the client keep track of the state instead of the server.

One common use of tokens like this is to defer state retention to all your clients so your server can do less work per request and store less data. Simply verifying that the MAC for a message is valid in every request is a lot faster than making a database/data store query to return session info for every request.
This is just a clickbait of the highest caliber. Not only the pivot didn't turn out to be a mistake after all, but the article is a blatant promo piece, and wasn't any mistakes anyway. Intentionally trying to implement new functionality is not a mistake, it's, well, an intentional action.
I can't claim a success yet. Only a better product than what I was doing before.
Because when I'm browsing Twitter my first thought is usually "Gee I wish I could buy some random thing."
Sun-powered desalination for villages in India
I saw something recently where British taxpayers have paid millions now in overtime because the government insists on 24/7 police surrounding the embassy where Assange has been living.
So that means people could eventually buy the ebooks I promote right from the tweet. Neat.
Xen and Docker: Made for Each Other
The 'game' is very rudimentary and not that fun. Take feedback from people who aren't your friends, friends lie.

You're using the tinder name a lot which is not cool stop parasiting off others success.

Don't quit your job for this! It's a fun side project and if it can get enough downloads (can it?) it might help round off your salaries.

Best of luck!
Beepl is concretely dead. I don't even monitor it anymore. So yeah.. its dead indeed.
Hmmm… I certainly do have the freedom to personally dislike a book design, whether the authorities say I should or not. And if that makes me typographically illiterate, then so be it ;-)

In fact, I find the line lengths in many properly typeset works too short for me to read comfortably. For me, longer lines make for easier reading!
I'm actually impressed they found a way to monetize their platform that doesn't involve obtrusive ads. This seems like a good source of income for them and their clients, and as long as they don't force you to follow commercial accounts, it will be almost invisible to anyone who doesn't want to see it.

I'm cautiously optimistic.
If you want a free closed-source app with optional upgrades, have a look at your phone.
Freaky Soft Robot Walks Through Fire and Ice
New Ebola Vaccine Is Tested in Humans, After Success in Monkeys
> I hope fighting that strawman you built was fun, but I really don't know where the BS snark came from.

The BS snark which started it was your still-unsupported assertion that “SSL is a security joke”.

> Well written code is always better than the crap that OpenSSL was (crap as admitted by most of security experts and groups working with it).

It's easy to criticize OpenSSL and, well, every other SSL library which has had problems. It's a lot harder to replace it and actual security experts have thus far chosen to overhaul OpenSSL rather than trying to replace it from scratch. I trust the judgment of the OpenBSD and Google security teams over your assertion that it's so easy to replace.
"Trusted by thousands of customers" quite a lot of big companies using your product. Cool. But it is real?
I would be surprised if anyone said they only used one language. Even in the olden times my typical day had Fortran, Python, Bash, and [La]TeX, + sometimes C. And the variations on these, including various libraries that amount to mini-languages in their own right. (This list doesn't include special purpose languages for job submission, etc.) Later, I added HTML, javascript, CSS, and SQL. Now I'm trying to add Clojure and Julia. Of course the cognitive burden has an effect on productivity, but I think we do this because we find that using languages well suited to the task gives us a net win.

EDIT: I see at least one example of someone who claims to use only javascript. I don't even see how this is possible. Not even a shell language? How do you deploy your javascript?
So, what's your feedback to make it more fun and less rudimentary? :)

Yes, I am using Tinder's name a lot. Its a trick to get downloads. Many people search for tinder, find about Swypeout and downloaded it. Some ever contacted us for support. (Not my friends)

I don't have a full time job.
Do you think a shawl with semen stains found on a murder scene would not be pretty heavy evidence today?
How much for a small business website in NYC? Research and conclusions
I grew up in Norway. The pivotal moments of the 80's for me were things like going to school in 1986 and exchange dark jokes about the radiation clouds heading our way from Chernobyl. Or waking up my parents to tell them about the assassination of the Swedish prime minister Olof Palme. And Tiananmen Square. Hardly uplifting moments. And an endless stream of civil wars where the insurgents and governments where alternately supported by the Soviet Union and the US.

It was reflected everywhere in popular culture too: One one hand you had the excesses, but on the other you had the post-apocalyptic movies as you point out, and comics. I remember in particular Watchmen, which to me in many ways captures that feeling amazingly well. (I didn't actually read the original when it was released; but I very much remember the discussions around it, and remember seeing the ominous front pages in the news stand as they were released)

Ironically, the Watchmen movie caught a lot of flack when it was released for the music choices, many of which seemed strange to those not growing up during that era, or perhaps not growing up in Europe during that era (though set largely in the US, Watchmen is very much British in sensibilities - not surprising given Alan Moore). But songs like Nena's 99 Luft Baloons captured the feeling perfectly for me. A lot of the music in Watchmen was what I listened to in the 80's when I was feeling in melancholic mood...

(And since I brought up comics, there's of course Frank Millers "The Dark Knight Returns")

A lot of the light-hearted music and movies from the 80's feel like shallow veneer over that darker undercurrent.
Stephen Hawking a Personal Journey PBS
See also: http://www.bbc.co.uk/news/uk-northern-ireland-28756531
A couple of months ago Amazon changed its own price tracker to make it much less useful than it was before. I'm talking about the "Important messages about items in your Cart" that appears at the top of your cart when any prices have changed since the last time you viewed it.

They've had this feature for many years, of course. It used to be an incredibly verbose list with a bunch of boilerplate text repeated for every item, and the items were in apparently random order.

With only a few items in your cart this wouldn't matter much, but I use the Saved Items for a list of things I might want to pick up sometime but don't need right now. So I may have as many as a hundred items or more there. With Amazon prices fluctuating as much as they do - often by only a few pennies - it was hard to spot the more interesting price changes.

A couple of years ago they made some nice improvements to this feature on both the desktop and mobile sites. All the boilerplate was pulled out making the list much easier to scan, and the list was sorted in descending order by price change. So the items with the most interesting price changes were right at the top.

But a couple of months ago this list took a big step downhill. On mobile, the item names are no longer tappable links, and on both desktop and mobile the sorting was taken out! The list is still nicely formatted, but it's back in random order again, so the items with significant price changes are hard to find among all the two-or-three-penny changes.

I thought this was probably just a bug, but now I wonder if it was a deliberate move on Amazon's part. It seems they not only want to shut down third party price trackers, they don't want their own tracker to be very easy to use either.
Nice service! $117/wk for organic paleo meals is a really good price.

Suggestions:

1) What is your service area? Right now, it's unclear where you deliver to.
2) Have a native English speaker read through the website and clean up grammar and spelling. There are a handful of errors and it's distracting -- though by no means unintelligible. Just could use a little polishing.
3) When you click on a recipe, the photo doesn't expand the entire width and there's a little white line on the right side
Not sure how happy I'll be with the pairing of this and Twitter's supposed new "Facebook"-style timeline. Time will tell.
Because buying a product based on a 140 character description is a thing that should be encouraged.
Does your hand-written parser handle all the corner cases getopt does? Ending option processing with "--"? Interleaving options in any order (ls foo -l)? Stacking short options (ls -la) or writing them separately (ls -l -a)?
I am an amateurish Linux user and my setup is very similar to you, and I am just starting to lisp (Arch Linux, lots of stuff in Emacs, and SBCL/CCL/ECL; I am trying them all).

It is very encouraging to see you work and I really need to get up to speed on the Lisp.

Also, I am a Recoll fan too. Great stuff!
How Test Automation Makes Mobile Game Devs Lives Easier
Why You Shouldn't Ask Us to Sign Your NDA
There are no such plans, at least for the time being.
GNUzilla is the GNU version of the Mozilla suite, and GNU IceCat is the GNU version of the Firefox browser. Its main advantage is an ethical one: it is entirely free software. While the Firefox source code from the Mozilla project is free software, they distribute and recommend non-free software as plug-ins and addons.

In addition, GNU IceCat includes some privacy protection features, included in a separate addon:
1. Some sites refer to zero-size images on other hosts to keep track of cookies. When IceCat detects this mechanism it blocks cookies from the site hosting the zero-length image file. (It is possible to re-enable such a site by removing it from the blocked hosts list.)
2. Other sites rewrite the host name in links redirecting the user to another site, mainly to "spy" on clicks. When this behavior is detected, IceCat shows a message alerting the user.
YC's Kevin Hale thinks 'Silicon Valley style' is overrated
Compared to VAX, R# is aiming at 100% code fidelity. This means not skipping on macros and the like when performing analysis.
The problem is not whether HoTT is easier than ZF. The problem is that ZF is impossible to be used in a proof assistant because it uses classical logic. HoTT uses intuitionistic logic where all proofs are constructive.
I don't get it. How can a "Buy" button bother anyone? You're following a company that sells something you're interested in, they have a promotion or something on Twitter, you buy it with one click. Am I missing something?

Or is it just super cool to hate anything that could potentially generate some profit for Twitter?
Yep, you can sign up for a free account and try it out for yourself :-)
We're hiring based on the fact that the week before it was 10 download per day.
As I say in the article, its based on incremental improvements. I've never built for mobile before so still figuring out non-ad-based methods of getting traction.

One such option is multiplayer. (But i'm always concerned when a new feature is the solution, cuz, feature creeping is the best product killer)
Regrettably, fact of the matter is that fonts look bad on Java, particularly on Windows where Java-enabled programs are unable (for whatever reason) to leverage ClearType and thus get the antialiasing done just right.
How secure are JSON Web Tokens? I understand the basics of JWT, but I'm not an encryption expert.

- What is the most secure algorithm to use when creating the signature?

- Should you do anything else on the server side besides verifying the signature? IE: tracking tokens, rotating keys, etc.

Without knowing much about encryption it seems risky to simply trust a JWT based on signature alone. How hard would it be to actually spoof a JWT with the most secure encryption algorithm?
8 Leadership Traits for Software Development Leaders
Try these one-click installers; the experience is much better.

mingw-builds to install gcc:

http://sourceforge.net/projects/mingwbuilds/

msys2 to install the rest of the build environment:

http://msys2.github.io/

(as well as a growing number of packages, managed with a port of pacman from Arch)
I don´t know if it makes much sense comparing a smartwatch with a traditional watch.

They share only the form factor. I would go as far as saying they do not even share the functionality of keeping track of time: nowadays traditional watches are basically used only as fashion accessories (as the article points out), since for most people that function has been carried out by mobile phones since the first Nokias.

A Smartwatch is more like a lightweight (in every sense) smartphone, with the significant drawback of having much less space available for a battery, but I agree completely that having to charge it twice a day is a deal breaker, and not acceptable from a user standpoint, regardless of the feat of engineering the watch actually is.
The form factor may not be for you however I find my smart watch to be an amazing time saver. That's the joy of diversity... the ability to have products that match our preferences. I never ever wear headphones with play/skip buttons but I understand their appeal for people they work for.

I get the same benefits noted above from my smartwatch, first the Pebble and now the LG. They have become a priceless part of my daily routine.
What Fantasy Football Teaches Us About Startup Hiring
You might have seen me follow up comments about your work. It is very interesting. I am just starting to get into Lisp and I want to make it the first language I really get it into (in college, as a non-major, I did coursework in C++, Perl, and Python). CL is the language I want to dive deep into and get expert it.

Keep up your stuff. After stumling on your work on that strictly-typed LLVM lisp and your cmacro system, I find your work very inspiring and make me want to focus. You and Fukamachi (did I get his name right? the guy working on cl21 and the Caveman web framework) are doing really cool stuff for the CL FOSS community right now.
My primary goal when starting any business is to create a sustainable, reliable income.

Also, I like to focus on businesses that, once I set my vision in place for satisfying customers, I can guarantee that the service will be there for my customers.
even 0.5m would make it stainable business.
I wholeheartedly agree, and I'm honestly surprised nobody has done this already. I often find that grep is ridiculously fast compared to less. It seems like a huge shame that a tool uses by so many people on such a regular basis is so slow at such a simple, commonplace task.

Honestly I'd take a stab at myself if I had the time. Maybe I should start a kickstarter or something like that.
By the looks of it, clicking on the link brings you to a page with a lengthier description.
Cool. Gamify and increase engagement with customer, not sure it is similar service with https://www.punchtab.com/
Yes, that is it! Thanks.
How would you handle malicious actors in such a situation?
People who aren't Java developers hate it because the JRE install is irritating as FUCK. The JDK is smooth sailing. Install, add JAVA_HOME, done. The JRE, on the other hand, pesters people to update once a week, adds a little tray icon, and installs the ASK toolbar by default. I'd always used the JDK, so I never noticed how gross it was until I installed the JRE for someone.

"This looks really different. Oh man it's asking you to auto-update. That's frustrating."
agreed. This is really cool (and simple too)

Also, how hard would it be to set an initial state of our current solar system? Teachers could set up scenarios for students to interact with, and allow students to collaborate.

Maybe as simple as an output/input of textual data for saving & restoring state? i'd love to try model our current solar system, and see if i can get something to mars with just an initial trajectory.

see:

http://en.wikipedia.org/wiki/Interplanetary_Transport_Networ...
It's funny how people who kept warning that Reagan was going to start a nuclear war have never gotten over being completely wrong. They really seem disappointed that it never happened.
A minor-ish clarification on terms: a MAC algorithm (e.g., hmac-sha1) should not be conflated with a digital signing algorithm (e.g., rsa-sha1), as the MAC requires knowing the secret in order to validate. MACs are fine for checking that data haven't been tampered with, but do not have the properties of an actual signature that you can verify without being able to reproduce.
He can also fly Aeroflot. Highly unlikely to be ordered down by anyone.
Tahoe-Reno Will Be the World’s Battery Capital
I'm not sure if it's a problem with my browser/connection or a bug on your side, but I cannot create an account (using the sign-up form, not using an external service). After I click "Create Account", it seems that there is an 500 error in the POST request.
That's Windows specific, I understand the frustation and I am sorry you have to live with that. Every time I boot back into Windows I get harassed by updates and reboots. I don't miss it.
Its a shame that a simple button label would be the cause of an education tool to be rejected... sissy-state for the win!
in addition to aardvark179's tip of installing the JDK to not get the sponsor message, there's also a well hidden option in Java's Control Panel to prevent them from asking you to install the sponsor:

http://i.imgur.com/buSi4lx.png
Can someone tell me why they're using a full Android stack for Android Wear??
To me its doing nothing that small (read very power efficient) micro such as an STM32 or an MSP430 could do with much more efficiency.

There is no reason whatsoever to run Linux/Android/Dalvik/etc on a device that just needs to run a Bluetooth stack & LCD.
Doing this using an STM32 would give you an order of magnitude (guess) improvement in power efficiency with no difference to the user.
Living in the Fantasy Land by Yukihiro “Matz” Matsumoto
How to Get Almost Lucky
That's a good question, and it makes me think that for that reason, Google probably won't actually be able to implement what the above post is suggesting.

The most that can happen is each car will probably end up sending Google certain diagnostic information, but actual environmental sensing will have to be done by the car itself, with maybe some help from aerial cameras or satellites that Google controls.
Assuming the reddit posters are correct. This means the PHP app knew the public IP. Isn't the only way to know about it to enter it into the web server configuration?
I don't see why not. Pulsed transmitters are fairly ubiquitous nowadays. A bit more complicated and expensive than CW transmitters, but easy nonetheless.
Give Russia some time; they're working on reducing the number of countries between them and Switzerland.
Got the data layer as well, generally it's hopping in and out of app/business/data layers and switching languages as the environment does. Like you said, I doubt there will be too many 1 languagers, we're all polyglots to some extent.
Interesting to see that the (scathing) TNR article didn't make it to the front page, while the founder's blog post received 645+ upvotes.
Charting Culture [video]
Is Lidar really required? I assume Google uses it only because it does not care about cost at this point of the development.

German car makes (Mercedes, Audi, BMW,...) think they can create a driverless car without the need for expensive Lidar, see for example http://spectrum.ieee.org/cars-that-think/transportation/self...
Golapa v2: Dockerized Launch Page Written in Go
Not counting Javascript, I flip between Ruby & Golang pretty regularly, and before Golang it would have been Ruby & C.
Oh I'm sure it would, but without multiple pieces of evidence linking him to multiple scenes, it wouldn't be enough. Even if multiples were found, it wouldn't be enough if he had any alibis. Finding a piece of clothing with semen stains on a prostitute isn't exactly surprising, after all.
> IDE's miss the point.

No, because IDE are more than just coding.

They offer an integration of services that one usually requires in large scale projects.

I want:

- semantic refactoring

- background compilation as I type

- static analysis

- integration with bug tracking software and source control

- visual debugging of data structures, threads

- ability to change code during debbuging sessions

- navigation of binary artifacts

- debugging unit tests

- semantic code navigation

- GUI designers

- XML build tools

- visual navigation of databases

- UML dual way generation

- ...

And above all, avoid trying to make Emacs or VIM do half of these features, every time I install them.
What riding my bike has taught me about white privilege
Driverless is not new, e.g. http://en.wikipedia.org/wiki/Google_driverless_car
what does this mean for Debian's icedove?
Could it just be replaced by IceCat?
ActionScript - (Client ) Application
C# - Unity - (Client ) Application
Java - (Server) google cloude
JavaScript - the host.

if I stack with C# Stile it's OK but if I do same Objective C or PHP. it's .... ;-(
Unless it's not from a company I'm following. Inevitably this will show up in the ads I'm shown on the site, which are things I do not follow.
Go and bash. Occasional Python, C, C++, and Javascript.

Python and bash are the most productive, but quickly become troublesome as program size grows, at which point I switch to Go. C and C++ are necessary to interact with system, third-party libraries, and extreme performance on occasion. Javascript is just an unfortunate necessity for the web.
Web developers do it daily if we assume that html, css and javascript is also programming. As for me, I do html, css, javascript, php, python, objective-c. Not all days are the same but these ones overlaps very often.
TiVo unveils 24TB DVR
Python, Javascript and SQL pretty regularly with some BASH here and there
+1 for Practical Common Lisp, great book, not as dry and academic as other Lisp books. For comparison, ANSI Common Lisp uses ray tracing as an example, whereas Practical Common Lisp uses an mp3 database.
Ruby and Erlang, these days. Plus a bit of other things like SQL and Javascript.