skysight-inc/HackerNews huggingface dataset:
Author here. It's funny, I actually didn't even know about HoneySQL when I made this. It was only after that someone pointed it out to me that I saw how similar our libraries are.

It believe it says something really good about this approach that we both came to such a similar conclusion independently.

I think OJ takes a slightly more minimalistic approach. I would say that my specification is a little more precise as well. Maybe in the future the author of HoneySQL and I can collaborate.
Let's bear in mind that someone is being locked inside a building for a while, just because he once ran a website that became unpopular with the authorities. Debating whether or not he should be fed a vegan diet on the inside is prematurely surrendering the debate that questions whether he should be losing the freedom to control his own diet for that supposed offense.

It is not a binary choice between just loss of freedom and loss of freedom plus compromise of one's dietary practices.

It seems odd that we would be assigning the same punishment regimes to people so pacifist that they won't even eat plankton as we assign to people who destroy human lives with nary an inkling of remorse.

Veganism is something I can understand and respect. The morality of state justice, on the other hand, is far less defensible when you look past its well-groomed public image. Depending on your locale, the prisoners in your nearest prison may be treated with less respect than the animals in your closest slaughterhouse. In that light, making morality-based appeals to the prison kitchen seems almost pointless.
Commerce - the activity of buying and selling, especially on a large scale. Tinder is not involved in it. Doesn't mean they will never be.
I think Delegative Democracy has lots of promise, and if done right may the the ideal form.

But it is very much still pervertable, and the devil is in the details as always.

It would be nice to see a thorough analysis of the ways DD can fail, and mitigations. Andrew hinted as some (including privacy and coercion) but most discussions are this are light on critique.

http://en.wikipedia.org/wiki/Delegative_democracy
Dissociation isn't just some feeling that you feel "separate" from everyone else. Rather, it's a very alien, unsettling mental state. If you want to see what it feels like, one way I know of that sometimes induces it is to stare at yourself in a mirror for a really long time. The effect is only temporary, but in some people it becomes permanent (in which case it becomes a psychological disorder).
You're right, it was intended to be read humorously.

The argument I alluded to is that there is an internally consistent viewpoint in which the government action at hand is genuinely corrupt and supporting crony capitalism. In this worldview, one that I think there's a strong chance that Sunde adheres to, he's not being whiney, he's taking rational actions.
This sounds like it will create a marketplace for votes. But I might be OK with that, as long as bureaucracies can't buy themselves more power, which happens from time to time with the current system via campaign contributions.

Besides, people already vote with their dollars in the private sector, which should be the first place to attempt to solve problems.
> Having the ability to control some of the content that is returned by the server in the response body is crucial for an RFD exploit to be successful.

This sounds like an XSS attack against downloaded files as opposed to rendered HTML.
There is a tension between needing to know who has votes, and needing to hide who an individual voted for.

A technical solution might help. Andrew describes one. I think modern cryptography may have better solutions for this problem.
These Brothers Built a New Berlin Wall Out of 8,000 Balloons
Well, it is. Just like Meteor. There are dozens of possibilities how you could do it nowadays. You can even use your own Node.js server with WebSockets, use CouchDB, etc.

But nothing comes close to the first experience and ease of development you have with Firebase. And I'd love to build my products around Firebase and embrace their service if there was not that risk of them shutting down some day.

An API that works as a drop-in replacement would let us developers sleep much better, wouldn't it?

So I'd like to know: Which open-source product would you consider best as the foundation for something like that?

Couchbase? hood.ie? Meteor? CouchDB?

I'd love to work on such an open-source "clone", and maybe we'll even find some more collaborators.
The following statement is not meant to be snarky.

Do you think that feeling of difference in interaction and being detached from "default" world has anything to do with the drugs? Either yourself taking them or just the masses of people around you?

I ask, because I noticed that same sense of difference and detachment myself while I lived in a lovely commune after college, but attributed it mostly to heavy drug use.
during the RFD research I discovered that all [Windows security] warnings are dismissed if one of the following strings appear in the filename:

- Install

- Setup

- Update

- Uninst

That's pretty amazing – is this still the case? It's obviously a deliberate decision, and seems to totally negate the value of those warnings.
Your marketing strategy should address (1) the pain points your service is designed to address, and (2) how your solution is the most desirable solution to the identified pain points.

You identify the pain as people "shouldering any weight their (sic) not obligated to shoulder." Specifically, you point to early termination fees for cell contracts.

You're on the right track, but you aren't there yet. A person becomes obligated to pay an early termination fee if they contractually agree to pay such a fee. The problem you identify is illusory, since anyone who agrees to the provisions of their cell phone contract, ARE OBLIGATED to such. The problem is that people generally lack the interest and the education to READ the terms and conditions of the contract.

Unless you have a solution that will invalidate early termination fee provisions, your approach appears to be futile. Any other solution will require cooperation from cell companies. Given your choice of "cellbreaker" for a name, you aren't thiking about gaining their cooperation. You're thinking as an antagonist.

I've spent the past couple of years clarifying the issues that you are beginning to identify and if you have a technical background (i.e. development) I'd be interested in talk with you.
The bit about the semicolon separator was new to me. Are there many web services using the semicolon to send parameters?

In any case, it seems that the real bug is that browsers don't properly recognize `;` as a separator and can derive the resource name from what comes after. That's definitely a problem; it would be crazy if, for example, you could craft a querystring ending with "&/file.bat" and the browser would parse it as a file download.
Try again now, it should be back up. We just started a bigger server to let more people on at once.
David Chang Will Launch His Own Food-Delivery Start-up
Thanks for the link as the linked article is paywalled.

The 500$ cartridges are the ET carts. All the other ones are about 50$

I think the ET carts are the most expensive since that's why they started to dig in the first place.
Female cows only produce milk to feed their young.

Thus, cows are constantly bred. Any male calves are sold off for meat (usually veal which in some countries consists of considerably cruel rearing practices -- if not used for veal they're just shot) and the female calves are used to continue the milk herd.

And that's just considering the dairy products from good farms.
Your Food Is Always Outside of You
Distilled water is corrosive to an engine. Otherwise an interesting idea.
For me one big lesson from metafilter, similarly to HN, is that you cannot create a truly amazing community from self policing and algorithms alone. At least not yet. To build a strong community, incentivizing people to submit and curate good content via upvotes and downvotes is not enough. Hands-on moderation is critical to cultivating a truly great community, because you need truly dedicated users and mods to set the tone, and to quickly step in when a post or comment is really inappropriate. Setting that tone from the very beginning was something metafilter did better than almost any other site. You also need to attract and keep the attention of the top-tier users, those who contribute high-quality content on a frequent basis. And once a few windows are broken, and users start to feel like nobody up top is paying attention, the whole thing starts to break down. Of course, the $5 paywall cannot not be ignored. It's a route I haven't seen many other sites take, and I'm not sure how much revenue it actually generated, but it definitely helped to keep the quality of discourse high. Also, I can hope that someday it turns into a great investment for me when I sell my 4 digit user number.
It's so funny, I just saw some TED talk on that yesterday.

I came across it because for the past couple of months I've been thinking and writing down some thoughts on building an application that applied "Delegative Democracy" towards the goal of allowing large groups of people to make important decisions. I didn't realize there was even a term for this concept until this blog post.
If I'm on the fence about whether a webapp/product is right for me, and I look for a demo button, and I find a demo button, and it says "Start Verbing" (for appropriate value of "Verb"), and I click that button, and I get a signup page ...

... then I know I'm going to hate this company, because they're more concerned with their conversions than on providing user value, and I close the browser tab.

If your button is going to a Sign Up page, then you should label it Sign Up.

However, I think gk1 does some of his examples a grave disservice, especially Gliffy's "Start Drawing" button. This is not a disguised SignUp button, because when I click that button, I can actually start drawing, and I am not called upon to sign up! So, good job gliffy, way to show me the user value.

If you make me sign up one instant earlier than is necessary in order for your product or business model to work, then I know you're a spammer.
I copy this into the boring terminal and run it: https://gist.github.com/AlexanderSelzer/ba487126454672a6596d

There's no zsh or iTerm2, but it is much easier to read. I guess it would be possible to make something that downloads the binaries, sets them up temporarily and opens them.
I went to look at some of the amazing zsh plugins, and found this endorsement flashing in front of me: "I just can't imagine not using oh-my-zsh. I can believe I won't have to mess around with .bashrc again."

And then I wondered: what on earth are you doing in the command line if you don't want to "mess around with .bashrc"?

I guess the point is to turn the CLI into a mouse-less GUI?
Cocoon Is Protecting Your Whole Home by Sensing Activity Through Walls and Doors
Please do not pipe code from random downloads into your shell!
very cool!

original source doc:
http://www.pnas.org/content/early/2014/10/29/1406023111
Careful. Aid to students isn't something we can turn around and spend on something else when prices go up. That is a very different dynamic than "dollars I can spend like anything else". People bidding on status symbols with someone else's money, versus people trading off their various wants against each other from their increased-but-still-limited pool of resources.

I think you would still see some inflation as typical demand for the marginal dollar falls, even if you don't increase the total number of dollars, but it wouldn't look like student aid.

For the record, I support a low (certainly <$15k, probably closer to half that) Basic Income.
I found this presentation a bit more helpful to understand the concept

https://www.blackhat.com/docs/eu-14/materials/eu-14-Hafif-Re...
I've heard of most of those things (except "CS:GO"). I have directly experienced some of them. My parents

I don't think "famous" is the same as "mainstream". For one thing, anything captured in digital form can break out to "famous" from any niche, using Internet's multiplicative effect. Is Psy mainstream because one of his hundreds of songs got a billion views on YouTube? Or is "Gangnam Style" mainstream, while Psy is niche?
Or the fact that it asks you to install iTerm. My favorite thing about Terminal.app is that it's already there, just a spotlite command away, and you can theme it as well.
The Shrinking Earth
We Told You It’s Always Been About the User (and the Applications)
Well, there was that time a tor developer claimed the NSA was leaking him fixes... https://news.ycombinator.com/item?id=8210319
Scientists progress toward plasma acceleration
I think the author is claiming that clicking on https://www.google.com/s;/ChromeSetup.bat;/ChromeSetup.bat?g...
results in a file ChromeSetup.bat being downloaded, but in chrome and firefox the file downloaded is f.txt.

Has anyone tried this on other browsers?

EDIT:

Here is the portion of the paper explaining why this no longer works:

"However, a common implementation error could result in Reflected File Download from the worst kind. Content-Disposition headers SHOULD include a "filename" parameter, to avoid having the browser parse the filename from the URL.

This is the exact problem that multiple Google APIs suffered from until I reported it to the Google security team, leading to a massive fix in core Google components."
I've tried using the example URL on his blog with one of my documents, just to see exactly how the information is stored, and I could never get it to send me an actual response with any of my documents. Has anyone had any luck?
That was my first thought too, but as long as your actual votes are somehow kept private, there's no more risk of vote-buying than in a representative democracy, is there?
"The user executes the file which contains shell commands that gain complete control over the computer."

Perhaps someone could verify the following.

If a user is logged in without privileges (not the admin user for example on Mac but a "standard user") then there is no (is there?) way to "gain complete control over the computer" without entering an admin user and password later in the process.

Typically I operate two (or more) logins under OSX. One is "standard" user and one is "admin" user. I only browse under "standard" user never under "admin" user. To me "admin" user really serves no purpose but needs to be there for obvious reasons.

This way I always have to enter the name of an admin user in order to install or make any system changes.

Further, from the command line I would need to do:

su <admin user name>
[password]

and then

sudo -s
[password]
Yeah, we'll do our best to scale this out a bit more. We prepped for 512 concurrent users, got plenty more.
I'm not sure what you're arguing here exactly. If you're white you're in the racial majority. If you think having darker skin means someone is "100% quirks and doodads" then obviously I wouldn't want to have to "sell" myself to someone like you because the effort would be futile.
Say what you will about the whole post, but the z script is very neat - https://github.com/rupa/z
I'm not sure I understand how this is "worm"-able - it still requires the user to manually execute the downloaded file? How is this any different from pasting a link to a "lol.jpg.exe" malware?
I contributed to a Rails app a few years ago through RMU that was trying to get Spain to use this model... https://github.com/PartidoDeInternet/AgoraOnRails and http://agoraonrails.com/
HTML/AngularJS: Project: Building a Calculator with Ng-show and Ng-click
Not the OP, but I'd be happy to do this over a beer if you're in the Bay Area (or plan to visit soon).
I didn't want to round down and appear to be over-hyping.

Well done.
This is one of the reasons why it's great that the source code of web pages/apps is (relatively, compared to binaries) easy to reverse-engineer - because of their environment inside a browser, web apps have such a low barrier to "phoning home" and making requests that privacy-sensitive information being leaked may otherwise be difficult to notice. Imagine if they were all encrypted/obfuscated binaries...

I don't use Google Docs (and probably never will), but if I did, all those requests - "these /save calls every time I typed something" - would be enough for me to investigate why it's generating so much traffic. I'm using an OS that still has a useful network activity indicator icon, so I easily know when there's data being transmitted/received when there shouldn't be.

There's a line of thought that says those sorts of indicators are unnecessary and a distraction, and that maybe valid justification for removing them, but I can't help feeling like their removal is making users more unaware of what their machines are doing - and thus easier for companies to do things like this to them.
Yes. Things should not be customized because not everything is customized. Personally, when I drive a car I never adjust the seat or mirror positions. I also never store anyone's contact info in my phone because then I wouldn't know what to do if I lost my phone.

Seriously though, having aliases, scripts, or complex programs to help doesn't cripple you unless those things themselves force you into a state you are unable to reach out of.

I've never found myself on a new machine feeling helpless because I didn't have a shell with all the customizations I'm used to; I only felt some annoyance. Said annoyance was far less than the cumulative annoyance I felt before making those changes--and the amount they have saved me since.
Yet my wife reads only on her phone, because she can get books on tape and plug a headset in. The Kindle used to have a "read to me" feature but Fire dropped it sadly.
So much work has already been done on this and here I thought I was alone and breaking some new ground.

I have lots of reading material for tonight it seems.
Mark Zuckerberg didn't need HN to make a billion dollar company. But lesser mortals like me needed it. HN is a start. It helped me think better in terms of market. Once I am inspired, Its a good thing to visit only occasionally or for market research. I think you should also do the same

And yes, no one should aim to read all of HN..thats a time sink
Not unless you were trying to pass something so wildly unpopular that literally everyone would've voted against it otherwise. Most issues have at least a few people voting for each side, so you just need to add enough to get tip it in your favor. Sometimes just 20k votes would do it - that much would've probably swung the Colorado gubernatorial election this week.
Considering the glut of C build systems (often built on top of GNU Makefiles) as proof that this is a complicated field, this is a surprisingly undiscussed aspect of programming. Thanks for this link!
Reminds me of some old relics of the Internet that are still around (and active apparently) like http://www.i-am-bored.com/
It's a library that you can integrate into your application rather than passing requests via an intermediary (so performance would improve). It's not necessarily a better solution unless you're optimizing for performance. It probably isn't if you're going for ease of development and maintainability.
I've also recently desired faster tests with django, so I've switched to the 'nose' test runner, which allows DB reuse between runs:

https://github.com/django-nose/django-nose

It takes testing down from dozens of seconds to minutes in my case to a few seconds or even less.

You just need to remember to run 'clean' (no REUSE_DB flag) once, and also remember that if you change your DB/have new migrations, run them and re-run the tests clean. Then you can can go back to reusing the DB again:

Prime it: ./manage.py test mystuff --failfast -s -v0

Run it: REUSE_DB=1 ./manage.py test mystuff --failfast -s -v0

Ran 22 tests in 1.475s
In my next job, I'm going to be very careful to work somewhere that shares my style. In many cultures (e.g. the NY hipster culture) I would be better off hiding the real me.

I hope that in future generations, public behavior that requires people to "hide the real" self will be regarded in the same light that toxic overtly racist speech is held in today. Usually, when people feel they need to "hide the real me" it's because they are afraid of the occurrence of a toxic mob situation with ingroup/outgroup psychology as its foundation.
An attacker can use a privilege escalation attack to execute as superuser, so even though there should be no way to "gain control of the entire computer" without the admin password, in practice this isn't the case.
I didn't mean the template part in particular, rather think directive arguments, scoping behaviour (the dreaded "wrap your value in an object if you want data-binding").

Sure, not rendering a null value is, while I disagree, a possible choice and certainly useful in certain contexts. However the point about objects not ready should IMO be rather fixed by delaying until the object is ready and I'm actually horsing that if possible so that no uninitialised state is visible at any point.

And again, for production mode you mostly don't want exceptions to pop up, but a strict mode for development is useful. Otherwise someone (who? the customers won't notice this way) has to tell me that some values don't show up (yes, modulo testing).

Replacing those handlers is actually a very interesting idea, I'll try and see how that goes.
I can confirm that on Safari, the file downloaded is f.txt
By contrast, the Plan 9 C compiler does use the header when linking. Header files contain a prama statement with library name, removing the need for linker flags.

See: http://plan9.bell-labs.com/sys/doc/comp.html
I've had a bunch, especially with JIRA.
-Theres no way to cluster servers or have a failover machine
-Want to upgrade? Better hope your plugins will upgrade too or you'll lose data or complete issues
-Want to import a JIRA project from an older version of the app? Get set to spin up VMs.
-Want to upgrade JIRA? Take the server down and reinstall it
-Want to enable some type of logging? Take the server down and edit the shell script they start the application with (same with increasing JVM heap size).
One thing I like about zsh that doesn't seem to get that much attention (and seems to be overlooked here) is path expansion.

If you're typing a path (let's say to ~/Dropbox/Public/...) you can say "cd ~/d/p" and hit tab to fill in even the intermediate parts. Given that the only path that matches "~/d./p." is ~/Dropbox/Public/, zsh will fill that in. If it hits an ambiguity down the proverbial road, it'll expand until it hits the ambiguity and list potential matches.

It's really convenient knowing that I can say something like "cd ~/d/c/s/c" and it'll fill in the rest.

edit: I tried to indicate a basic regex pattern but I think HN is reading it as trying to italicize "/p." instead. I later tried escaping it with backslash, but no luck. Sorry if that's really confusing.
I've been pretty down on DNSSEC due to the "baroque" nature of the whole thing (which this blog post shows); also, giving extra power to country-level ccTLDs vs. the slightly-more-independent SSL/x509 CAs.

However, DANE makes DNSSEC make sense in some cases, especially when you start using it for things other than web traffic. DNSSEC/DANE for STARTTLS SMTP would be a good improvement over the "no cert checking at all, and even cert failures are ignored" model today.
It is true that small amounts of pot has been legal in Alaska, but my concern is geared towards greater accessibility. Now that it is legal and will be sold commercially it will be much easier for young adults to attain. Usually the youth will steal from their guardians, just like alcohol.

I've been teaching 21 years and I can tell when a student has started smoking pot. When a young person begins smoking their grades usually drop and they do not seem to care. This may not be the case with adults, but it is VERY obvious when working with youth.