skysight-inc/HackerNews huggingface dataset:
Just tried creating a Compass project with bootstrap-sass 3.3.0, ran into this problem:

https://github.com/twbs/bootstrap-sass/pull/757

Releasing the LESS and Sass versions at the same time is a bit premature. Looks like the Sass version wasn't tested as much.
Great stuff! I don't need them for any projects at the moment, but I'll probably wind up buying 'em for future use.
If you're interested in technology and/or entrepreneurship, go to one of the highly-rated schools you named. Stanford, CMU, MIT are all great choices if you're up to the rigor and competition. At the very least, it will get you out of your current backwater (I know the area, I grew up in Western PA and my mother lived in Buffalo for about a decade) and you'll make friends and connections that will last you for a long time.

You might be wrong about what precisely you want to do with your career, too. Maybe Javascript hacking is the most interesting thing you can do where you are, but will pale in comparison with the kinds of stuff you could do at a big research university.

The truth of the matter is if you go to a top tier school and major in cs or engineering, you will be fine money-wise. It's not engineers who are suffering after college. Grit your teeth and take out some loans, however scary that seems now.

Also, if you want to do startups there's a lot more access to capital when you go to the Stanford/MIT/CMUs of the world.

If you hate college after a year or two, then you can alway drop out and work. It's much harder to do it the other way around because the whole admissions system is built around receiving kids straight out of high school.
>Even in extreme situations where governments are overthrown, foreign intelligence agencies have perfected their ability to totally manipulated the chaos to their benefit.

If not simply orchestrate the whole thing themselves, as the US and the UK did in Iran in 1953.
I don't see the point of printing it in the middle, otherwise that is indeed a great potential use case
AudioJungle[0] probably has what you need. You can find some incredible stuff for less than $20.

[0] http://audiojungle.net/
The same question here. Anyone can develop and 3rd-party app to capture the PIN on the same screen from the payment app.
OK, well, that's... Actually worse.

Websites should not make changes to a user's settings based simply on a GET against an URL, because the user can click the URL from a random stranger not knowing it would have that effect -- as I did.

Aside from being a poor user experience, what has happened here is someone has deliberately coded a security vulnerability. Granted the impact here is basically trivial, but it's still a pretty classic no-no, and should have immediately set off flashing lights and klaxons in any security-conscious developer's mind.
> On the other hand, if you buy the license and then you work on a project like a web or mobile app and you want to add the sounds, go for it.

Those scenarios involve redistributing the audio files to a public audience, which the license loudly forbids in its current form.
I wonder how many people stopped half way and searched for "GORUCK GR1".

Now I wonder if I just read a cool blog post with product placement.
The BD Speed 30 would be more appropriate for this, and costs less than half of the GR1.
http://blackdiamondequipment.com/en/climbing-packs/speed-30-...
On writing code
The initial basis that electrons just instrinsically have charge isn't proven. Infact there is a proof of why electrons have quantized charge (by Dirac), but it requires that magnetic monopoles exist, which haven't been observed.
>Most do not care about their abstract rights, as the OP stated. Life is mostly okay, maybe not as easy as 2000-2008, but pretty easy. Therefore, they don't want to rock the boat.

I'm surprised that you've been downvoted for this, because it's absolutely true.

The complete inaction in reaction to the scandals that have broken over the past decade or so, and I'm not going to just confine this to the US as it has happened in Europe and elsewhere, showed that people feel disconnected and completely powerless to what has gone on.
There are some benchmarks in the following presentation: http://www.slideshare.net/8kdata/toro-db-pgconfeu2014 where ToroDB was presented (PostgreSQL Europe Conference, Madrid, 2014, 2014.pgconf.eu).
Visualizing hex bytes with Unicode emoji
Your proposed algorithm is a particularly poor solution in terms of correctness if nothing else. For text, DMP performs quite well- patches can typically be applied in arbitrary order with the same result. For complex data formats, you very quickly arrive at invalid (JSON).
Crikey! As an avid rock climber reading this, I'm terrified for the author's safety. :-)
And lets not forget the Black Diamond ATC Guide and the Petzl Tibloc!
It is true that PostgreSQL has such a high row overhead. But the storage savings are significant, in any way. Please see the presentation pointed out earlier.
The Perdew-Burke-Enzerhof functional, and the generalized gradient approximation, is a Big Honking Deal for accurate quantum-mechanical simulation of solids.

For more: http://en.wikipedia.org/wiki/Density_functional_theory

(I used to be a happy customer, back when I was a scientist.)
Yes. In fact, OpenXanadu was unveiled this year: http://xanadu.com/xanademos/MoeJusteOrigins.html

That said, it's mostly just a web reimplementation of the incomplete 1998 Udanax client.
Interesting that one of those presenters is named Howard Payne. Along with Payne being an elevator company, Howard Payne is the name of the antagonist in 'Speed', who hacks an elevator...
This reads as a fictional advert for a backpack.
That's a very good point. The post seemed to skip all the juicy actual security bits, but made sure to explain thoroughly how good the rucksack was, how everything fit into it nicely, and how it was waterproof.
Good old LiveJournal used to have mood tags for posts. Sounds like you may want to explore something similar. Good luck!
One part I didnt understand: if the rope is attached to a solid object on the 7th floor, how did s/he retrieve the rope once inside on the 5th floor?
Shameless plug for Randy Rackliff's packs out of North Conway, NH (the company is called Cold Cold World: http://www.coldcoldworldpacks.com/). They are hand-built, to custom order, in New Hampshire, weigh less than name brand packs, are made of tougher material, AND will only run you about $125.

What's the secret? Simple construction, no bells and whistles and unnecessary crap like water"proof"ing. Tougher, cheaper, lighter. Not made in China by a giant corporation. The ultimate hacker pack!
I'd deliver that gear to the roof by quadcopter the night before.
I believe they refer to the 'make package' support. It builds a .deb (for Ubuntu) or a .rpm (for CentOS). The code itself seems very Linux generic.
There are a lot of companies that claim to do industrial rope access outside the scope of the certification programs, but be skeptical of them at first. (That doesn't include companies in other rope disciplines that are different from rope access, like tree climbing and entertainment rigging. Those are different trades. RA takes most of its methods from caving, and some from rock climbing.) If you want to learn to do it right and have a good experience on the job, "go legit." But that means you'll have to get certified. Unless you have specific, in-demand skills (electrician, fiberglass technician, weld inspector), few companies will pay for your first course - you'll just have to pony up $1000+ on your own. However, once you get a job, they'll pay for your re-certifications, as well as follow-up courses that you take as you get more experience and climb up through the certification ranks.
Hiring engineers in Singapore – migme
Open positions at migme:
Senior Mobile Engineer, Senior Release Engineer, Senior Software Engineer, Web Software Engineer, Catalog Editor, Business Analyst (job listings on our facebook page: https://www.facebook.com/migmeHQ/app_404596412628)

The migme group is growing fast. Every month, over 7 million people use our flagship platform mig.me to chat, blog, and play, and our other businesses such as alivenotdead.com, a site with over 1,800 artists and celebrities, and lovebyte.us, a couples’ app and virtual goods business. At mig, you’ll get to work at the frontier of mobile and social networking in countries such as Indonesia, India, South Africa, and many more.

Based in Singapore with offices in Kuala Lumpur, Jakarta, Taipei, and Hong Kong, we’re listed on the Australian Securities Exchange, have great shareholders including FIH Mobile Ltd (Foxconn), and a growing list of partners in mobile, media, and payments.
Integrated Information Theory I think is a fad, and a bad one at that.

One could think of integration of information as a necessary but not sufficient condition for consciousness a la Scott Aaronson [1] who applies more rigorous mathematical examples of integrated systems - in fact ones close to maximal possible integrated information - that very clearly are unlikely have any measure of consciousness (like expander graphs and error correcting codes). What about ciphers, where small changes to a single bit in key, ciphertext or plaintext radically alters the evolution of the internals and output of the system?

But even that might be too strong a statement. Aren't minimally interacting systems such as Conway's Game of Life Turing Complete? There are tiny, tiny Universal Turing Machines, and UTMs are essentially free to encode/decode their tape inputs in any way they see fit.

Ultimately while IIT has a 'mathematical description' it mostly only serves to obfuscate a naive and trivial notion that 'the system has to be complicated and has to integrate and process local information in some holistic global way'.

No shit.

[1] http://www.scottaaronson.com/blog/?p=1799
I love the idea of using an array. Sounds like arrest addition to the spec.
We designed a solution to keep the switching logic between standard touch and PIN entry within PCI scope such that PIN entry is not even visible at the lowest levels of Android (and thus 3rd-party apps). Also, 3rd parties do not get to run on or take control of that screen.
Off the top of my head: the VM executes either HLT or MWAIT, and those instructions are generally programmed to cause a VM exit, so the hypervisor can take action. The hypervisor will deschedule the VM and possibly go idle itself.

TBH, I have no idea how MONITOR works in a VM. It might be quite messy.

Edit: Here's a really nice explanation: http://www.contrib.andrew.cmu.edu/~somlo/OSXKVM/mwait.html
Speed, and minimal dependencies.
Writing boot ROM code for the 68K

So this was for the Atari ST? I was at MWC when that came out and it was a hacker's delight.
This is a great complement to the PATCH HTTP verb for RESTful APIs. It's much better to have a standard way to describe how a resource should be changed and not some ad hoc, implementation-specific syntax. Coincidentally, I just implemented support for this in one of my projects today (https://pypi.python.org/pypi/elita).

Here's a link to the original RFC from 2013: https://tools.ietf.org/html/rfc6902

A cool thing is the "test" operation. JSON patches are atomic, so you can put in something like:

{ "op": "test", "path": "/foo/bar", "value": 32 }

...and if { foo: { bar: 75 }}, none of the patch will be applied.
A simple example: if the order of the keys is different, say because of a different json implementation, semantically the document is identical, but you can't apply the patch anymore.
Yes, I worked for his father for the better part of six years. I met Aaron when he was maybe two or three.

MWC was a seriously bright bunch of guys.
It sounds like he looped/threaded the midpoint of the rope around something and then rappelled on both strands. Once back in the building he could pull either end to retrieve the rope.
Unfortunately the OWASP website is a mess... took me a while to even find the relevant articles on web app security from the landing page.
This reminds me: if you're stuck on a Linux kernel before 3.9 and you're using Sandy Bridge hardware or newer, turn off C1E in BIOS. The "C1E" setting controls a misfeature in which the CPU will look at the OS's request for a light sleep and say "Ha! You must have asked for light sleep by accident! I'm going to go all the way to sleep instead!" This causes surprisingly severe performance problems (we've seen milliseconds of unexplained random hiccups).

Linux 3.9 and higher is immune: it just forcibly disables this feature.
Ask HN: What to implement in Python as a simple OpenSource project?
Main interests are Django, AI, Raspberry. It has a goal of practicing community building at the same time so contributing to an existing project is not feasible (but is on my bucket list:).
Hey. I'm the Andrew who runs the Churn Buster product mentioned by patio11.

Very clever of you to think to email customers before their credit card expires. :-) We had the same idea and it was a feature in the original release of our product, but after several months we actually found that only about 30% of cards set to expire actually started failing payments within two months of hitting the expiration date, and after two months failure rates just return to normal. So, even with a healthy 50% conversion rate on the email campaign, we were only retaining about 1.5 customers per 10 that we sent 3 emails to. Furthermore, the email notifications to the customers who very likely didn't need to receive the email were triggering cancelations from some customers as they re-evaluated their purchasing decision in front of a "you owe us money!" email instead of a sales page promoting the benefits they're receiving. :-) For that reason, we no longer send out these emails by default. There are still some businesses where this makes sense, but they're definitely the rare exception and not the rule.

Furthermore, we found that a very decent chunk of failed payments (maybe 15-30%?) will sort themselves out automatically with no intervention if you just try them a few times over a few days. Again, no need to email these customers and waste their time unless there is a time sensitive delivery that needs to go out or something similar.

So, for those two reasons we choose to wait until the third failed payment attempt before we start emailing the customer. But once we hit that third failed payment attempt, we really go to town trying to get in touch with the customer and get them current. We've got all sorts or tricks up our sleeves for this, including a real person with a great British accent who will call customers on the phone.

Happy to answer any questions you or anyone else may have about solving this problem. It really isn't something many subscription service providers think about when they're building their business. Feel free to reach out any time at andrew@churnbuster.io .
He states in his book that one's company does not have to exhibit all of the characteristics he mentions. I think Uber, FB, Twitter, AirBnB, and Dropbox do have a majority of them though. I think there are much better problems to solve in spaces other than email.
At this point they'd have to start worrying about bulky clothing as well. It was hot outside in this instance, but in cooler weather/climates you'd need to go full TSA-mode on everybody entering the building.

That's practical for some installations, but not many.
Possibly either loop the rope and descend on both ends - once inside retrieve by pulling on one end, alternately, use a knot that only holds under tension, once inside, shake rope to release knot, finally, it could be fantasy and the author didn't consider that detail.
UPDATE: video here https://www.youtube.com/watch?v=k-mAuNY9szI

Sound quality isn't great but hopefully it demonstrates what I'm talking about.
They're basically at parity now IMHO, but Bootstrap has the network effect advantage. It's got a huge community of people developing plugins, creating themes, and doing debugging on it. I've used them both in the past, but prefer Bootstrap for this reason.
A rogue app asking for PIN on the merchant facing screen ? not sure there's anything much we can do about that other than making sure we catch that during the review process. Whenever there is a need for the consumer PIN entry, it's driven by the second payment processor - not from the android side.
You are being tracked: Permanently - Permacookies
That, or rappelled on one strand and used a classic pull-through anchor: https://www.youtube.com/watch?v=SSGUPd6RKAM
What are you doing to market the product?

From the outside, it seems likely that you have the common developer mentality of "If I build it, the customers will come."

If a business does not have a reliable, repeatable way to acquire customers profitably then any success they may have is based on luck. It is much easier to just try to code that problem away, but likely you need to step away from the code and start talking to customers so you can find out what they really care about and where you can find more people like them.
I would love to have one to code a nice bitcoin payment gateway on it :) anyone interested to collaborate?
Seems like a good starting point, but it's a bit too simplistic for my taste.

"Add" seems like it's not idempotent as the existing value seems to change what it does.

Seems like a mistake to bundle array operations into "add" and "remove".

Array indexing is going to be useless for most applications because it makes assumptions about what's already there, and there is no way to specify fine-grained preconditions (or relativity such as "insert before the element 'b'").

No support for "increment", "decrement" or similar operations you'd want to make atomic.

No support for sets.

Unlike azinman2, I think paths as strings is fine. But why not support both? Let a path be either a string or an array.
I agree with you that it probably is not easy to pick up, but I have to admit, there is significantly less to deal with. Meteor is the fullstack, and it even has sockets built into it. You definitely have to buy into one ecosystem, and that's convenient because you don't have to know a serverside ecosystem (e.g. Rails) and a frontend ecosystem (e.g. Angular, React, and Ember).
I tried Stacey but had a hard time doing a few crucial things:

1) reordering posts -- posts are displayed in _alphabetical_ order, as are directories, so the suggested nomenclature is a numerical prefix before every file name. So if I wanted to rearrange things, I had to decide whether not a linear shift was worth the benefits of file name readability.

2) the order of posts is reversed! I want new blog posts to show up at the top of my feed, but Stacey puts higher numbers underneath. I didn't want to count backwards, so I looked around and found a php hack for reversing this.

This might be fun if you're hankering for some DIY PHP, but I wouldn't recommend it otherwise.
The blog has a whole section on 'gear' as well. Maybe it's the monetization strategy?
For the climbing aspect yes, but from the social engineering aspect, it looks less like something a geek would carry as a laptop bag.
The license works the same as any other license you probably have for fonts, images, sounds, etc. For example, if you load a web font in an app, you most likely have a single use license, but thousands of users may use the font when they use the app. They don't however have a right to use that font in other applications.

This is similar. However, I'm going to work on wording that makes the concerned users more comfortable. I understand that this is a tricky situation. And I'm much more interested design then legal matters. I hope I can ease the concerns.
A (not so) simple case: How many network interfaces do I have? WMIC gives one answer, Netsh gives another, ncpa.cpl - Network Control Panel gives another, hardware manager may give another. I'm impressed anything works.
The linked website was a guide on getting started with Red Teaming:

http://redteams.net/starthere

Also a surprisingly good reading list:

http://redteams.net/bookshelf
Counts sheep.
is the primary text input supposed to be a virtual touch keyboard?
Simple solution to a simple problem.
Russian rocket from the 60s part of nasa explosion
I am still using Grunt, and have been wondering how Gulp is. How do you like it? Why is it better?
Yeah, I don't know the right breakdown. I just know that your run-of-the-mill founding teams (not founders, the teams) are relatively shafted.
Nice idea. However, what if we based it on MongoDB's syntax, for compatibility?

[
{ "$set": { "baz": "boo" } },
{ "$unset": { "foo": 1 } }
]
There are a couple kids in my house who won't be told about this until they're done with their homework. ;-)
Well, thanks—but how? You're close to 5000 miles away, right?
First let me say that there is no support like Stripe support. :-) I'm always greatly relieved when onboarding with a customer and they both use Stripe and Stripe subscriptions. But to your point, I may know something about Churn Buster supporting folks not using Stripe subscriptions or even using other payment processors. Email me at andrew@churnbuster.io for more information. :-)
iOS 8.0.2 jailbreakiPhone jailbreak
Watch out! That technique is really sketchy, and won't work if the rope goes over an edge (like the edge of the building). You also have the problem of a falling metal object that can smash windows, your head, or itself.
Thanks as always, Patrick!
Real Programmers Use One-Way Hash Function
Well, you can compare it as a fullstack too. It is mainly compared with React, Angular, and Ember as a reactive framework which isn't an incorrect comparison and is very valid.
Drupal (in many/most setups) executes code out of its database. These machines could be told to hack internal networks and act as botnets as the result of a single POST. Definitely wormable.
Static File Cache Busting
That's an interesting point. I find two-way binding to be very convenient, but I wonder if the industry is moving towards a one-way bind solution (at least it seems like a common theme with most front-end frameworks).
Google has GRR and Mozilla has MIG (http://mig.mozilla.org/)

I think its interesting to see that MIG is in Go and thus cross platform "by default". It also seems to be more privacy-compliant.

osquery's SQL is sexy however.

That said I'm also wary of a single piece of software that basically give you control over absolutely everything (control everyones laptop, etc. silently and quickly. Thats the best rootkit ever. You wont even detect if its being compromised because its a trusted piece of the OS!)