skysight-inc/HackerNews huggingface dataset:
Look in linkedin for people working in security for that company, and invite them to connect. In the connection message state directly the problem.

Do this with technical people, but also with it managers from the company and its worth sending it to the CEO.

Explain what are the risks (is it persistent xss visible by other users in a forum etc)

These things are only important until some manager says they are important, so try to explain the business and public image risk of the exploit to a high level manager via linkedin in non technical terms, ideally with a demo. If they forward the email to the it department i bet that then they would act.

Last case if responsible disclosure doesnt work after 3 /6 months: public disclosure via some news site. All of the sudden it gets fixed in two days, they end users end up being better off in the long term.

Unpatched exploits that stay there for years are the bread and butter of hackers, and the short term risk introduced by the public disclosure is compensated by the fact the users get protected in the end.
Awesome post. Can't wait to try something similar.
wordpress.org
Yes, we do want to submit it to a SIAM journal. It does seem that we are already getting interesting feedback here. The BioJulia team will probably write a paper on Julia in Biology and publish in a related journal, just like Miles Lubin and Iain are doing with JuMP in the OR community.
Production Ready Image Carousel Web Component
True, it explains them in terms of electric fields, but we still don't know what those are.
How do I not know about this?!?!?! Thanks for sharing the link, do you have any experience to share? Does it work well?

EDIT: If this works as advertised here [1] then I am all in!

[1] -- http://www.skybert.net/emacs/java/
Can you provide any examples related to Reagan being a risk to start dropping nukes? Or where he ever said or gave the impression that his preference was to start dropping nukes?

I think you're extremely wrong in your character assessment. There are numerous books available on Reagan in relation to what he actually said and wrote about his time as President, none of it indicates he was eager to start a nuclear war.
Young folks today just don't believe how downright surreal (and scary) the cold war was to live through.

Look, just read this wikipedia entry about the British Blue Peacock nuclear device, and boggle:

http://en.wikipedia.org/wiki/Blue_Peacock

Yes. It's a chicken-heated atomic landmine. Not a joke: it was a Real Thing.

And so was this:

http://en.wikipedia.org/wiki/Davy_Crockett_%28nuclear_device...

The M-29 Davy Crockett tactical nuclear recoilless rifle. (Jeep-mounted, no PALs, the rocket's flight range was less than its lethal radius of effect: the crew were supposed to fire it over a hill then dive under their jeep for cover.)

People not only imagined these things, they built them and deployed them in the stone-cold expectation of using them in anger.
There is an opinion, shared by many marginals (Rob Pike, PG, Joe Armstrong, you name them) that Java, as they put it to remain polite and socially correct, has lots of serious issues, or, in my own wording - the biggest scam in the history of IT business (in terms of waste of paper, human and hardware resources) and the consequences are still to come.

But you are right, my example is a little bit irrelevant. SAP would be better one.
Regarding "ignoring the major difference", I explicitly tried to not compare them too much - because I know too little of both. Now I know more about Nim, but not Rust.

Regarding GC, its not fully "required" in Nim either, but yes, the GC is a big differentiator and probably one of the things making someone prefer one over the other.
Ysection
Team red for life
Thanks smt88, you've brought up several good points. At a large scale we wouldn't be able to monitor the conditions of the home kitchens. A solution for this is user ratings, if any given home chef/caterer receives even 1 poor rating we will limit their account activity until an inspection is performed. We'd have to perform an inspection to find out if the poor rating was well-founded. If so, the caterer's account would remain limited until the proper precautionary measures have been taken to avoid this from happening again. Many incidents of food poisoning happen after a perfectly enjoyable meal. We are aware of this possibility. A solution for this would be an liability-insurance policy. If any users should happen to get sick from the food, not only will the caterer be no longer able to serve food but the ill consumer's medical costs will be covered. I've just reached out to Torontos Municipal Licensing & Standards commite to inquire about the feasibility of such a business. As per Toronto Municipal Code Chapter 545, Licensing, a business licence is required for any business where food is stored, prepared, or sold for human consumption, such as:

coffee shops
burger shops
delicatessens
donut shops
fish and chips stores
pizza parlours
restaurants

The vendors may have to be licensed as you mentioned which has some initial costs for them, but the real question has to do with food safety etc... Waiting to hear back from them.
It was clearly more directed at the USSR and specifically Gorbachev. Khrushchev and Ulbricht had unwisely created the concrete, so to speak, symbol of the evil empire, a very visible wall dividing a historic, major city. Where families trying to cross it were shot at, often successfully.

It had to have been terribly embarrassing to Gorbachev to be called out like that, and it strongly cut against many of his and the USSR's themes, e.g. if it's so great, why do you need that wall keeping people inside of your socialist worker's paradise?

Getting back to the 1989 fall, something stayed the hands of the USSR, unlike Hungary in 1956 and Czechoslovakia in 1968. I believe it's impossible to make an honest case that Reagan had nothing to do with that.
I think the way to say it is that All is diamagnetic.
Trying out profession being a comedian
Has anyone compared to https://github.com/kstenerud/ObjectAL-for-iPhone ? "Mac & Audio Development, minus the headache"
Die Mauer: The Early Days of the Berlin Wall (1962)
> Studios should have some monetary incentive to make things that people actually want. I actually had a headache after Expendables 3.

You say that like it's simple to do. The first two Expendables movies apparently were good enough that the economics warranted a 3rd. Do you think the people at the studio were thinking "let's make this one The Unwatchables, instead?" Sometimes problems are obvious ahead of time, but more often only seem so with the benefit of hindsight.
That depends. Individuals generally need not pay tax for selling their private property.
Failure to repay is subtly different from going out and stealing in the traditional manner. If you fail to repay stock and get super lucky with the value I think you should be able to pay cash+interest+penalties* and walk away. (And play roulette next time, less likely to end in jail.)

They're not going to demand less money if the stock goes down, are they?

*penalties perhaps meaning you pay $30 plus interest
What font is that in the emacs screenshot?
One thing to note: lots of VCs basically require you to relocate to SV to do your startup. That's one reason there's so many startups in SV.
If that's not a slanderous statement of 300 million people I don't know what is. Which Americans are you referring to? And in what way do they have a worse understanding of history than billions of other people?
I can believe that flohofwoe honestly got that impression growing up behind the Iron Curtain (per his website, 12 in 1984). Heck, at the time most of the US Main Stream Media (MSM) portrayed Reagan as being like that. I'll bet that if he tuned into the BBC back then he'd had heard the same thing.
One should try towards having laws that aren't dangerous for society, then we'll talk about the implications of Google having access to information people give them.
Can anyone of you point me to something that can make me detect a CLAP? :D
Computer Scientists Ask Supreme Court to Rule APIs Can’t Be Copyrighted
Why? Any 'good' web project in any other language also involves a framework, does it not? Ruby has Rails, Python has Django, etc.

It should be no surprise that structured and organized PHP is better than raw PHP, and that examples of well written PHP would probably involve a framework.

Although I suppose it could be argued that since PHP is intended for the web, it shouldn't need a framework, and it should support more of the features a framework provides out of the box than it does. Nevertheless, the pattern of a framework is as useful in PHP for the same reasons as it is elsewhere, so I don't believe it says anything negative about the language per se.
- The way the page loads makes it feel like a modal (text for "Brand Identity" and "Who we are" is shown, then are pushed down once the imagery loads).

- Information density is low... results in a lot of scrolling for small amounts of information. Initial page load "above the fold" offers very little.

- Lose the mystery meat navigation for "Web design and UI" and "Web Development" (in the "Brand Identity" section) in favor of text labels, or simply blend that content into the rest of the page.

- While lots of padding/margin is a trend, everything feels so incredibly far apart that it's completely disconnected; maybe a symptom of my 1920x1080 resolution. It's impossible to find something specific (for example, social media links).

- You made me load ASCII art when the page loaded! It should be removed, however small the additional data transfer might seem. Also remove the other commented HTML such as the ids bannerVideo and our-work.

- It feels like "Who we are" is important and should go first, or alongside "Brand Identity".

- Enable compression!
I agree, and that was largely my point.

People discuss certain styles as being more natural, but in nearly every case (including this syntactical debate) I assert that it is solely due to what the most mainstream languages do and thus what people are more used to seeing.

That's not the same as being natural
Because there are a thousand other people saying "oooh, what a good scheme. Maybe I should try that."

Deterrence is a significant part of the justice system.
On that I fully agree. And going back to your statement that it isn't a very well-defined concept, I think that the two concepts aren't nearly as orthogonal as many would have you believe, it's just that the ways that the two communities have solved similar problems over the years appear to be alien to each other.
I wrote C++ code for about 10 years before moving over to C#. I still like C++, but posts like this make me remember why I don't miss it. It's so baroque.
What skill is best to master: Web, Android or iOS?
My company recently shifted me from a web developer role into an iOS development role (the whole mobile first thing). However, Android market share is growing fast. Am I investing my time in learning the right technology?
My father, for one.
You are right. I just watched it the other night and I was blown away by the accuracy at which the movie portrayed surveillance and even wondered if that movie was giving out more information than what the government wants out nowadays compared to back then. We were more skeptical that these things existed back then, but now that we know they do it makes that movie dead on.
TL;DR of my long-term weight loss and maintenance success
That reminds me of the pigeon-guided missile.

http://en.wikipedia.org/wiki/Project_Pigeon
From the article: " A pervasive idea that Julia wishes to shatter is that technical computing
languages are “prototyping” languages and one must switch to C or Fortran for performance. The
consequences to scientific computing have been more serious than many realize."

I think this provides a very succinct summary of the Julia paradigm at a very high level.
We should clean up all other laws before we consider regulating Google? I'd like that place in line, too. How much does it cost?

Don't look at what I do until the Ogallala Aquifer is properly protected!
I've spent about 3 hours reading it. I don't want to know how long it took the author to write that. But it is great to see the history of dvcs from Bazaars point of view for a change. Very interesting read.
Sorry, I just recoil against phrases like "x is not for you."

You seem to view this individual commenter as a sea of uncaring people, but it's just one person. Change their mind, and their contribution to the "BS" does end.

Even if a response like yours seems deserved, it's not very productive. It certainly doesn't help someone to care more.
If Java is the biggest scam in IT, I'd really like to hear what would you recommend over Java for a typical business applications that could be found in any enterprise?
We know:

http://en.wikipedia.org/wiki/Electric_field

http://en.wikipedia.org/wiki/Electric_charge

http://en.wikipedia.org/wiki/Quantum_electrodynamics

An electric field is generated by electric charge and time-varying magnetic fields

Charge is the fundamental property of forms of matter that exhibit electrostatic attraction or repulsion in the presence of other matter. Electric charge is a characteristic property of many subatomic particles.
I think it's a bit too early to say anything seven months out. If you have a good relationship with your manager it might be nice to let them know a couple months before - that gives them plenty of time (or at least much longer than the typical two weeks) to find a replacement.
Oh, I think that nuclear activity is at least as, if not moreso, likely than it was back then. But IMO it's much less likely for it to be a full scale, global thermonuclear war (to borrow a phrase).

I just don't see people living in fear that any day might be the day that the entire world ceases to exist as we know it. For instance, I'm guessing that grade schoolers don't have a nuclear attack drill (which were laughable, now that I think back).

Personally I fall into that camp, but if I woke up one morning to find out that some large city had a nuclear device go off in it via a terrorist attack, or (purely an example) Israel dropped a bomb somewhere in Iran, I wouldn't be surprised at all.
It's empty, dark/suicidal, weakly branded, already seen, too big, too much empty space, not enough colors, not enough information, portfolio/projects ?, not human, etc.
How does Rust's borrow checker cause a slowdown of sequential code? It's a purely compile-time construct and allows for the elimination of a GC, so it's actually a net win in code execution speed.
Web is always a sure bet.
Technology still didn't replace the policing part. The NSA may be recording everything we say, but you won't be taken during the night and disapeared to some cell because of it.

At least, yet.
And I forget, "fakia" too ! :)
You can rarely get away with Ponzi schemes. For an example of a less regulated country, check out the Albanian schemes [1] which reached 50% of GDP and then led to rioting, civil war, the fall of the government.

[1] http://www.imf.org/external/pubs/ft/fandd/2000/03/jarvis.htm
I think you'll have to do better than that to establish the existence of a "sect". I.e. you need to name some of its leaders, the ones making statements, speeches, etc. propagating this program.
Is that the one with

(: fun (natural natural -> real))

procedure signatures?
Because otherwise it would be irrational not to commit crimes?
I totally agree that the best programmer can make more of a difference in every way to the world than the best janitor.

HOWEVER- For hundreds (thousands?) of years, money and behaving in a way that is profit driven was reserved for the lowest of what was considered people in Japanese society. "Merchants" (a broader term than our interpretation of it) were seen as barely a step up from the lowest group that we would consider people, the eta "filthy mass" or hinen "non humans".

So that might explain some of why their culture still might not value money like we do.

Description of Chinese merchant class (does anyone have a link to a Japanese focused article?)
http://en.wikipedia.org/wiki/Four_occupations#The_shang_.28....

Non humans
http://thisjapaneselife.org/2013/07/03/burakumin-japan/
The Parody Twitter Illuminati
The Free Mac Developer Toolkit
I see several comments questioning the legitimate value of a peer-to-peer marketplace. Some cannot see any use other than illegal commerce (drugs, porn, etc).

It is true that such illicit trades will take advantage of that network but is it really impossible to envision legal business as the major activity? Yes, cars can be used as getaway vehicles from bank robberies and also smash terrorist bombs into government buildings. However, cars also have tons of other legitimate uses.

Consider that ebay has about 200 million users.[1] Their fees have been going up every year and they are now at 10% (which does not include the separate insertion fees.)[2]

If one can sell a legal item such as a $50 book on ebay, why not sell it on a p2p marketplace and avoid paying $5 of that sale to ebay? If not OpenBazaar or similar p2p architecture, what alternatives do folks propose?

Do 200 million ebay users have lawful reasons to avoid paying ebay commission fees?

At this point, I believe low-volume selling is too dependent on proprietary platforms such as ebay or amazonmarketplace. As an analogy using email, I'm glad that SMTP won over closed systems such as CompuServe, AOL, and Western Union's EasyLink. Even though SMTP email has many bad uses such as phishing, malware delivery, and spam, I'm still glad it won. The good uses outweigh the bad.

Can a more open platform for sellers without the stigma of illegal activity be realized?

[1]https://www.google.com/search?q=ebay+"200+million+users"

[2]https://www.google.com/search?q=ebay+raises+fees+10%25
When it comes to vulnerability reporting and/or disclosure, there are
two schools of thought; "responsible disclosure" and "full disclosure".
Unfortunately, what "full disclosure" and "responsible disclosure"
actually mean can vary a whole lot. For example, some define "full
disclosure" as immediately publishing/disclosing the vulnerability
and/or with working exploit code, but more level-headed folks define
"full disclosure" as trying to contact the vendor and giving them at
least 5 days to respond before publicly disclosing any information [1].

The safe and sane approach is to contact CERT [3,4] through their
vulnerability reporting page [5] and let them contact the vendor. If
you're curious, the CERT disclosure policy is good reading [6].

[1] http://www.wiretrip.net/p/libwhisker.html

[2] http://www.cert.org/vulnerability-analysis/vul-disclosure.cf...

[3] https://www.us-cert.gov

[4] https://www.cert.org

[5] http://www.kb.cert.org/vuls/html/report-a-vulnerability/

[6] https://www.cert.org/vulnerability-analysis/vul-disclosure.c...
Describe one

I've heard examples where there are fixed costs for the producer/seller. Suppose to produce something it costs $1000 plus $1 per unit. Suppose there is a buyer A that values it at $800 and 500 buyers (B) that value it at $2.

What price should the seller charge for it?

If the seller charges a fixed price of $2 (or less), then he can make and sell 500 of them, which would cost him $1500, and he would be paid $1000 (or less). He would lose $500, so he would not do it and no value would be created.

If the seller charges a fixed price between $2 and $800, then he can make and sell 1 of them, which would cost him $1001 to produce, and we would be paid $800 (or less). He would lose money, so he would not do it and no value would be created.

There is no single fixed price where any value is created at all.

However, suppose he could charge a different amount to different people. He charges A $700 and charges all the B customers $1.80. He makes and sells 501 of the good at a cost of $1501. He is paid $1600. He profits $99. A gets $100 of surplus value. B buyers gets $0.20 of surplus value each for a total of $100.

By charging different customers different prices we have created $299 of value where a fixed price would have created none at all!
Stream: Free live video from your phone to the world
JuliaBox – Run Julia from the browser
When OpenBazaar seems more mature I will definitely consider listing (my entirely legal) items on it first, at least to experiment. Lower fees + I'm happy with Bitcoin = Win.
Ensime[0] for scala.

[0]https://github.com/ensime/
Learn Web. Stuff like Cordova/Phonegap, Titanium and others already enable you to build mobile apps for like 95% of all usecases with web technologies.

If you do Meteor.js, you build cross platform apps web/android/ios with ease today.
Fugu Luggage – Expandable Suitcase
You should be posting with your main account, you know?
Thank you for your feedback and thanks for your time too . i don't know where did you read the word "Agency"!
Yeah, but it's weird. That awareness leads to a more humane society on the surface, which I think is a great thing. But the racism itself doesn't evaporate; it condenses into more subtle and coded forms. Racial issues continue to perpetuate a stark opportunity divide between minority groups and white folks, and as minorities, it's a constant struggle to convince society as a whole that there are real systemic problems unbalancing the playing field, requiring real systemic solutions to address them.
http://en.wikipedia.org/wiki/American_and_British_English_sp...
I know he didn't come up with this idea independently. I haven't paid enough attention to know precisely who it came from, but given his reading and listening habits, I'd expect the names to be found on a list of contributors to National Review and the list of top talk radio hosts.

You seem awfully defensive about this, given that I said nothing that indicates you are a member, or indeed that anyone in particular is a member until you asked. Are you that uncomfortable with the idea that there are crazy people in the world who hold some opinions similar to your own? That's true of all of us.
Your API Here
> Go is not the language for you if you care about mashing as much logic into a single line as you can.

The point here is that iterators can reduce bugs, independent of aesthetic concerns.

> Also, I can count the number of times in my 15 years of professional development experience that I've wanted to count down to zero using an unsigned int as the index... never.

I like to give that example because it was something I actually hit and a bug that I actually had to fix.

In fact I just hit that again yesterday when iterating over a list in reverse order (painting order for CSS box-shadow).
I've always found the SEO/SEM industry rather shady. It is full of consultants with relatively low technical knowledge, usually just following the herd. I'm pretty sure Google itself offers plenty of resources (analytics, webmaster tools, etc.).

Most of the advice I've read over the years seems pretty common sense, as long as you're offering a fair product for a fair price. If I were in your shoes, I would probably use what Google offers for free for a few months. After that, I'd sign up for moz.com's free 30 day trial ($99/mo afterward), and learn as much as possible from what their service offers. If I felt comfortable on my own after that, I'd cancel.

This is not my area of expertise, but I hope it helps.
Show HN: onPremisely – Reddit for Enterprise news / software