skysight-inc/HackerNews huggingface dataset:
I think we should be a little more amazed that this report is available at all---an through internal channels at that. While we're all bashing the CIA for what they've done (and are right to do so), we should also appreciate that this is also at some level an instance of government working "properly": one branch of government audited another branch, found that there had been misconduct, and was able to publish a report showing what had been done wrong. This is not the end of the road---we still need to fix the problems and prevent them from happening again---but publicly acknowledging the problems is a massive first step.

Before we all jump on the bandwagon to paint the USA as the next major authoritarian regime, ask yourselves the question: would this report ever get published in North Korea, China, or the former USSR? Frankly, I can't imagine it. This report proves that the USA might not be better than any of those countries with regard to these events... but at least it appears that the USA has the guts to acknowledge publicly its mistakes.
The classification is not secret, but the intelligence sources themselves likely remain classified, including the identification of the kind of sources supporting the information in the now-declassified executive summary.

Even vague descriptions of intelligence sources are often treated as more sensitive than the information derived from those sources.
That's nothing. Just today I had the equivalent of:

<user id="12345">
<name id="12345">Joe</name>
...
</user>

Let me count the ways that's underspecified in ways that can go wrong...

(The actual problem I tried to solve was unrelated to this. The fields are in latin1 while the document itself is in utf8, with attributes specifying content type. It all validates apparently.)
Entire fields of finance exist for this. Find the hole in the model, and stuff billions of bonds and derivs in it. This is especially an issue when the model sellers optimize off of it.

Also a reason why it's good to be leery when people say, "I don't need to know what's going on in the model, the results are good enough."
I work on an SOA platform for a very large software company. We offer both REST and SOAP versions of our RPCs. In my experience, SOAP services are okay plug-and-play if you own both the provider and the consumer. But consuming external APIs can be nightmarish, especially with SOAP 1.2. SOAP exists in our organization for legacy reasons but we recommend all new consumers use RESTful services.

Our mobile clients like REST because it's faster and easier to consume from outside the .NET platform than SOAP. Even within the .NET platform, a client can get up and running consuming a "RESTful" service in fewer lines of code than a SOAPy one. Not only SOAP tooling, but HTTP client tooling in general, is a lot easier to use these days.

WSDLs are cool because they are a fairly standard metadata format. Our clients like them because they can perform data validation with proxy/firewall systems before the request ever enters the corporate network. I've yet to see a concrete benefit from that kind of strictness, though. IMO, SOAP schema validation is so brittle that it causes more problems than it fixes.

Of course, you can also use non-SOAP document description formats like RAML for describing your RESTful services. It's not like SOAP offers anything you can't get for REST. But once you start adding all that on top of your REST API stack, you might as well use SOAP 1.1. (Never use SOAP 1.2).

I don't think the main problem with SOAP is that it's over-engineered, although it is. The issue is that the supposed benefit of "interoperability" was never really realized. It's supposedly protocol-agnostic, but nobody cares. It's supposedly interoperable, but everyone implements it differently.
> Back when the DMCA was penned, lawmakers had no idea that content—in the form of software and firmware—would find its way into almost every device we own.

It was 1997. I'm pretty sure software and firmware was already in almost every device we own. But it's probably true that lawmakers had no idea.
First, I love C/C++, but for web development I have one word why it isn't used: productivity.

It would take way to long to accomplish even basic updates and tasks. To me it just makes it the wrong tool for the job, like using a screwdriver to drive a nail into the wall. Just doesn't make sense when better tools exist.
Why I never used SOAP: Endian issues.
hmmm.. I'm not sure I would call android devices high availability - they're pretty good, but I suspect the 9s of availability is much less than the average system admin's notion of high availability.

/beingargumentative :)
On Wikipedia doesn't make it so. I'll give you that Chicago is a transportation hub, solely because of its geographic location with regards to air transport and rail. Other than that, its seriously deficient as a city.
I guess the question would be: Do you need to live in France to sell to that market? RedHat's doing fine, and they're based in Raleigh. Many of the companies listed in that report -- Mozilla, for example -- are not French or based in France...
My rule is that things are almost never attributes. :-)

There is less flexibility there. Escaping seems harder, and you can't have sub-elements or lists. Avoiding attributes makes things more verbose, but then that's XML for you.
I believe that the cart is tied down to the track - you can see it in the video, there are wheels on both sides of the board.
The other reason for a man to use ladies restroom is to help his small daughter use it.
I don't remember all the details, but it was more or less like this (with MFC)

I built the dialog using their tools, one for each "tab"

Then I attached that dialog on the space for it based on the selection, and the coordinate transformation (was a function in MFC)

Something like this http://stackoverflow.com/questions/2653130/how-to-get-size-a...

Hiding/showing might have been a good idea, but for more complex dialogs it wouldn't work
Can you really not make a distinction between cold shower and televised beheading/castration. I agree there is something very wrong with this country if that is the case. I've spent enough Karma today.
In that slide what financials did they need to send for a product/service sale? It seems like this is for investor negotiations.
Aerospike and Cassandra hit 1MM TPS on Google Compute Engine
You've clearly struck a vein among HNers, noting the 200+ comments.

I've found going off-grid for several days a huge help to clear thoughts, and reboot the mind. Bill Gates famously took twice a year solo-trips to a lake cabin, just to read and write in peaceful silence. People used to call that vacation.

But I find these individuals who boast they blissfully ignore news and current events all together depressing. As though we're regressing to our reptilian past.

Relative to your conundrum, I'm reminded of the quote by Oscar Wilde “Everything in moderation, including moderation.”
"Fate of the World" is on the list (though, the link is now dead).

By no means I am omniscient - thanks for letting me know about "Kerbal Space Program". Or even better - feel invited to add it to the list.
Hold on to this, "tldr: Simplicity and utility trump large corporate backing."

When your manager tells you that your API needs to handle something "just in case", when your customer asks, "But what if I want to use this API with mumblefratz?", and when you look at your code and say, "Gee, if I make this a variable I could handle any special edge case by encapsulating its specialness in the variable ..."
The fact that SOAP is not reasonably supported in a browser was a huge reason it fell down. When SOAP first came on the scene, complicated AJAX based applications were not typical. But as more and more JSON/HTTP APIs emerged in conjunction with browsers becoming more powerful and rich apps build built in them, the meaninglessness & complexity of SOAP grew.

Also, another major issue with SOAP is that most all of the popular tools would generate classes based on a WSDL. This creates a toolchain issue that is readily solved for someone experienced, but can really suck if you are new to the idea of generated code working it's way into your project.

Much worse was the scenario of WSDL versioning in conjunction with these tools that generated classes. If the API never broke backwards compatibility, you should be OK and can just use the newer class representations, counting on the service and tools to deal with null fields appropriately (not always true unfortunately). But if version bumps of an API/WSDL broke backwards compatibility... then you had to have separate class hierarchies for different versions of the WSDL; what an intense headache. Contrast that to web REST APIs; without a formal schema and a lack of class-centric tooling, client libraries would often let the author stuff in the params themselves and let the serializer stuff in the body based on the params; so yes your API is not as formal, but this isn't a big issue but offers infinite flexibility in dealing with one-off versioning issues or interop issues.

As someone else mentioned, some platforms couldn't interop with others (differences as it related to simply stuff like nullable fields or primitives existed all over; total nightmare), and some features of WSDLs didn't translate well to certain languages.

A great WSDL author would know to make their WSDL as simple as possible, because they had spent time working with various language toolchains and new the limitations out there, but that's asking way too much and not realistic for someone to have to spend all their time trying to understand all the ways someone in language XYZ might use their WSDL.
Revenge, for that is the best possible interpretation of MIT's deletion action, and is I assume related to your emotional desire, frequently makes poor policy. If it is motivating you, you should think really, really hard about it, preferably at a remove from what sparked it (and if you can't achieve that, e.g. victims and those close to them, then have some people you trust provide that).

Heck, his "Banned in Boston!" works might achieve greater fame, lure of the forbidden fruit, and plenty of us had never particularly heard of him before now....
It felt too heavyweight for that particular case. Moreover, it was 3 years ago, Cassandra wasn't a big thing than.
Anybody got any sources on either side of the points about the current administration?
I didn't mean to comment on whether the war was justified or not, but simply that it was USA that attacked (and so the war doesn't quite qualify as an attack against America).
...look at every car that I can see, using every gap, window, mirror etc to be aware of my surroundings. Look at people, bus stops, crossings, shops in towns etc.

In my experience a shortcut to this level of awareness is to regularly cycle in commuting traffic. Not only does one notice much more, but one also notices the classes of things that it's actually impossible to notice from an autocage. (Examples: what most drivers are doing in addition to driving, where pedestrians are hiding, how a line of traffic moves through signals in fits and starts, etc.)
I've had the "fortune" to work with SOAP as well (java implementation) and I never could shake the feeling that it was designed with the intention of being obscure. It seems you could employ an entire batch of consultants just to deal with defining, implementing and changing SOAP APIs (kind of a misnomer I know). The whole change from SOAP 1.1 using an ActionHeader to SOAP 1.2 using an action parameter seems downright misleading. Or downloading WSDL files to automatically create Java classes sounds great in theory but now your program has additional obscure classes with very weird syntax and you have to read through numerous reference guides just to know how you can modify the header of an outgoing request. Such a waste of time.
That promising that "Go strings allow you to index into them to retrieve runes" is overselling Go's string support, of course. That's why I led with that statement, since it is what I was trying to say.

It's best to be correct about how languages work, because when you interest someone in a language via a false statement, they do not end up thinking highly of either you or the language when they discover the falsity. While I'm not sure I'd call myself a Go "advocate", I do prefer that people like and/or dislike it for valid reasons rather than invalid ones.
It's far more complex than it needs to be. If you want a fast, high quality deterministic RNG, use something from the xorshift family.
I spent several years integrating Java/Linux/Unix/Microsoft/etc and I never ceased to be amazed at how many companies/programmers thought it required different code to make them interoperable. I had very few issues with SOAP interaction between systems because they are just text files.

For all intents and purposes, SOAP is a formatted pipe connection. The only issues I ever ran into were related to things like Java incorrectly implementing RSA encryption or Microsoft adding so much complexity that nobody used (and did not require).

There are still several major banks/insurance companies out there whose payroll transaction systems run on the SOAP implementations I put in place 10 or more years ago.

Now I see people claiming REST is better (and in many ways, they are correct), but I also see that large numbers of programmers don't really grasp REST any better than they did SOAP.
Would you define Illinois as a business friendly state? Of course not (compared to Texas). With that said, would you define it as a citizen friendly state? Again, clearly not! The only class of people Illinois is friendly to are politicians, the politically connected, and unionized labor in its death throes (note: I'm not against unions, but don't choke the golden goose to death. If you have to increase taxes to unsustainable levels to fund pensions to the point where people leave your state, you've already lost).
Motorcycles aren't called "donorcycles" for nothing. The risk level seems to be intrinsically high, though it seems to be held up by bikers not wearing helmets:

http://articles.sun-sentinel.com/2012-06-10/health/fl-motorc...

The documented risk of dying from a serious head wound while riding without a helmet is so high, bare-headed motorcyclists are considered ideal organ donors: They're typically young, otherwise healthy and at high risk of brain death from sudden trauma.
Insurance Company Pays People to Stay Fit
The Final Pinch
500,000 deaths from 1900-1914? How many from 1914-1928? WWI alone had about 10,000,000.
http://en.wikipedia.org/wiki/Ukraine%E2%80%93NATO_relations
It's not about politics. You're putting words in my mouth. Android is pretty much devoid of an update mechanism. You're left to to swapping out the entire OS image to update it. That won't work in the server space when you need a new ssl lib deployed now.

I think this snappy scheme of Ubuntu might actually be what Android should have had from the start. It seems like it work in the embedded space when you don't want a traditional package manager.
WCF is a mess and poorly documented. I have several significant implementations of WCF I support now and I really often wonder WTF Microsoft was thinking.
Just my Ubuntu Xmas wishlist: I'd like to see "snappy" or "Ubuntu Core" in the repos. So I can install UC on my existing systems to convert them to snappy systems - is it possible at all?
BTW having a VirtualBox image would be nice too.

But, should we really consider debian packages obsolete? IMHO apt-get begin-transaction,rollback,commit commands would be great to have too - I would love them even if I'm required to convert all filesystems to btrfs or ZFS, and keep one or more snapshots.
I am sure CIA torture report has definitely shaken average Americans.
A LEGO Watt Balance: An apparatus to demonstrate the definition of mass
MFC was much more of a thin wrapper than OWL was, IIRC.

Microsoft concentrated on bringing MVC-enabling classes for application development, and otherwise just basically wrapped the raw Windows API, whereas Borland actually created an honest-to-gosh object library to represent the GUI (and to an extent, provide a migration path from TurboVision, their DOS GUI library).

VCL was even thicker still, having come from Delphi's rather successful attempt to duplicate the Visual Basic VBX components in a highly-extensible and more native way.

Like you hint at, it was kind of a weird fit for C++Builder, since Object Pascal had somewhat different capabilities that they had to lay into CB making it a little bit of a bastardized spinoff of C/C++.

.NET/C# was ultimately what came out of that heritage, after MS poached Delphi's architect. I think it benefited from not claiming to be C++.
In my language, the equivalent of "race" is a word no one would ever use because it implies (in my language, I'm not saying that's what it sounds like in English, I'll leave that to native speakers) there are different "subraces" in the human race.

It seems to me that the use of this word facilitates the formation of ideas like "mixed-race couple" or "people of other races" which are not as easy to express in my language. It creates a (further) mental separation between groups of people by giving an official way of categorizing them which would be harder if there were no generic word for it.
I'm not saying making the word disappear would make the problem of racism disappear, but I really think the frequent use of this word increases psychological walls between communities.

Finally, there is no scientific basis for saying Obama is of the "African American" race because he is as "Caucasian" as he is the former, which shows that what it really conveys is more than harmless classification for statistical purposes.
Is it legal to make people pay for public domain art?
I went through this program's 2013 batch. Working directly with the smart folks at Lightspeed accelerated our learning process. Weekly meetings with the partners forced us to make the hard decisions quickly and got us to launch 10x faster. Also, all the alumni are amazing - one of the best founder networks in the valley.
The Netherlands banned the UberPop ride-sharing service too.

> "Drivers who transport people for payment without a licence are breaking the law," said the decision from the Hague-based Trade and Industry Appeals Tribunal.

This sounds like asking for a heap of trouble though:

> In a statement on Monday, Uber said it would continue to offer UberPop, despite the threat of a fine of up to €100,00 for itself, and one of up to €40,000 for drivers.
It's a step... It's worth something but it's not like there wasn't a ton of resistance to it.

The question on my mind, were their CIA operatives that refused to comply with orders? Take the various police brutality cases, what's lost in the echochamber about it all is that these guys volunteer to be police, nobody is forced to, some of them want to carry guns, that really changes the situation a bit when an unarmed person ends up dead. The CIA has the same problem here, I know there are people in the CIA that "want to kick some terrorist ass." I'd feel better if there were some outspoken CIA operatives who were coming out saying that they refused to take part. If not, it's not just an ugly stain but the whole organization is broken, they have no respect for law..
Control Flow Guard security feature
Enjoy it while you can. I don't see this being up for very long since this type of app is expressly forbidden in Spotify's Developer Terms of Use[1]:

> Integration with Third Party Services. You shall not create any product or service by integrating the Spotify Platform, Spotify Service, or Spotify Content with (i) any non-interactive internet webcasting service or (ii) with streams from another service.

[1]: https://developer.spotify.com/developer-terms-of-use/
I'm surprised that no-one is talking about accuracy here.

How, exactly, do they determine who is and isn't a bot?

> For the study, researchers put software into the actual ads of 36 members of the advertising association between Aug. 1 and Oct. 1. The software allowed them to tell if viewers of the ads were people or bots.
actually there's a YouWin[1] function.

[1] http://entire.spacebar.org/entire.js
> These same detainees were subsequently placed in rooms with temperatures ranging from 59 to 80 degrees Fahrenheit.

Oh the horror of room temperature.
Nice. Ya, updating the password would be great.

Avoids the awkward exchange at the register asking for a password.
I also get to deal with SOAP occasionally. I recently got the joy of dealing with it for a CA's API.

It's clearly the result of developers and managers more interested in what the technology CAN do than what it should do.
I think the tools for developing in C (and C++) for the web are still in the early stages. Emscripten doesn't have working source maps yet. It also doesn't have support for dynamic linking anymore (since they've changed their backend). Also browser's don't have that many tools for testing C/C++ compiled code so most of the testing has to be done native using Linux tools first.

It's also geared more towards porting existing code right now so the libraries are made to look like POSIX APIs (which are incomplete) rather than Web APIs. Also games seem to be the focus rather than websites.
Other languages are much easier to work with for the sorts of programming tasks useful in web development (e.g., string handling), and the things that C is good for (e.g., direct memory access, extreme optimization) are not terribly useful for web development. Getting every last bit of optimization out of a C web program isn't a practical advantage if there's a much larger time delay due to network access!

That plus it's much easier to make some really awful mistakes in C than it is in languages more often used for web development, so why risk using C if what it gains you isn't helpful?
Why can't it be productive with a framework? What's missing? Go is used for web development.

https://golang.org/doc/articles/wiki/

Go is not too far removed from C.
Yes, sometimes people use "her" to talk about a country. It is an unusual use though.
What did you win?
This is black and white, unless you have no morals. We tortured people and now some people are defending those actions.
LXC is "just" a wrapper around cgroups. There are plenty of alternatives, including systemd-nspawn, or just configuring cgroups directly.
While OVH don't change their deprecation policy I'll never use their services again.

Once I rented a server for 20€/month, few weeks later they launched a new equivalent server for only 4€ and they don't allows me to migrate.
It is starting to feel like Uber is becoming "Aereo" and not in a good way. Eventually you need to yield and follow laws and work through the process. Uber has lots of good potential but my feeling is that in the end Uber will be dead and existing taxis services will just have a Mobile App.
All the appeal of buying a car at a used car dealership brought to ecommerce.
I almost won but there are other players that keep getting in my way!
> takes seconds to appear on my rMBP

seconds is far too long... That you're even trying to argue that autocomplete is more powerful in XCode than AS shows you haven't used AS for more than maybe a minute. I've used both side by side for years (well, Eclipse and IntelliJ before AS), and it's honestly not even close. XCode takes longer and consistently suggests functions not available on my object, or classes I never use. XCode is great at plenty of things, but autocomplete is its #1 weakness.

> I can cntrl+click and see the full docs

And in AS I can Cmd+Click and see the source..

> debugging

debugging live running apps w/o having to launch from the IDE is awesome. And I don't think there's a single debugging feature that XCode has that AS doesn't. Seeing as Obj-C is a dynamic language, the console REPL is pretty nice, but that's a language feature more than an IDE feature.