skysight-inc/HackerNews huggingface dataset:
> The default Django CSRF protection is based on a hidden field, not cookies.

This is not true. The default Django CSRF protection uses cookies for the session store[1]

> What I don't get is how is it possible to do CSRF with cookies?

The same as any other CSRF mechanism :)

1. You provide the user a (preferably per-request vs. BREACH) token, often in a hidden form field. The field being hidden is primarily for UX reasons.

2. You store a copy of that token in a session store. This is often a cookie due to the convenience of cookies (no server state required), but can be in a server-side store (memory, Redis, RDBMS, et. al).

3. Upon any non-idempotent HTTP method (anything that's not GET/HEAD/OPTIONS) you compare the token in the submitted form to the value stored in the session.

The benefits are that you don't have to maintain server state. The downside is that you're transmitting your token over a channel at risk of MITM. Using authenticated cookies helps as any attempt to modify both the form value AND cookie value (i.e. so they match) should fail when you verify the MAC on form submission.

By default, Django's cookies are authenticated.

[1] https://github.com/django/django/blob/master/django/middlewa...
Yes, I don't dispute the fact that there are some innate trait, more fitting brain structure, differences in sensory sensitivity (stupid example: perfect ear) that lead to better 'performance'. But a lot of said impossible tasks are named so because of a lack of understanding and thus a difficulty in teaching.

So far music school way of teaching is by sitting you on exercises while someone verify the output. That is not teaching per se, it's a black box system that has seen somehow regular results. Kinda like making glass, there's a procedure for that, but what really happen at the molecular level is still blurry.

With time the student's body and mind change and he gets skilled at it. How does he explain it ? does he have words to communicate his feeling to a newbie ? Never seen so so far. Recently some violin teacher was praised because he discovered non-linearity (the fact that inertia in normal speed gestures is not the same, thus learning technique requires you to fake inertia by allowing acceleration at slow speed, which means exaggerated movements). Still a shallow discovery to be honest. It doesn't really describe how to create and sustain this kind of inertia between multilimb chains and how to attempt it pleasurably.

Back to code, similar issue is present when one of the most effective (and pleasurable) way to learn the art is by pair programming (with a mentor or even a same level pair). It shows that some notions are still not taught properly in schools. Maybe the system is already at peak and there's nothing to change that would lead to better progress.
I'm curious how the "drug" category breaks down in terms of dealing vs. possession/use. I support legalization, but I also think that if we nullify the black market for drugs, we'd better be ready with alternative non-criminal opportunities for those who currently are involved that trade.
New Zealand is the same. Police are not routinely equipped with firearms, shootings are very rare, but they shoot for the biggest target (the body) and I'm very comfortable with the policy.

The important point is that they don't shoot at people very often. The idea that the police would e.g. shoot a running, unarmed suspect, or follow you (in a car) to your home and shoot you through the window is the stuff of a dystopian nightmare.
Because methylcysteine and methyladenine aren't really fundamentally different from their unmethylated counterparts. In terms of the first order information content, they're identical. There differences are as regulatory annotations, but in terms of base pairing they're the same.

I kind of cringed when I read that they are "fifth" and "sixth" base pairs because of the significant functional overlap with two of the existing ones.
Change a habit for good using bet-stacking system
This article is missing a critical criteria: racism. It's quite obvious that police officers (worldwide, but particularly in the United States) are more likely to shoot black suspects than white ones. This is not a training problem.
Techniques for Building Quick Rapport with Anyone
I may have not stated it well, i did not mean an idea to the exclusion of others but rather that they but that they didn't stop working on every single idea they took upon for a long long time. From the list you give, there arent any scientists who put their research on a subject "to bed" , unless it proved a failure.
Total separation of those who investigate complaints against the police from the police themselves, with separate organisations, recruiting, promotion and the chief of said investigations reporting directly to whoever the relevant chief of police reports to. Otherwise the incentives just lead to Internal Affairs acting as a cover up job to protect the good name of the police force in general.

http://www.overcomingbias.com/2010/04/why-rules-bend.html
> An obvious enabler of police corruption is the fact that internal affairs units, tasked with exposing corruption, usually report to the same police chief that would be embarrassed by such exposure, and who may also be corrupt. An obvious solution is to make internal affairs more independent, e.g., reporting directly to a city council or even a governor. In the US the FBI sometimes serves in this role, though rarely at the request of local governments, and within the FBI its internal affairs still reports to FBI’s chief. Why don’t more governments create independent agencies to investigate corruption, to assure citizens that corruption is not tolerated?
Mildly off topic: It's strange how they've chosen a naming scheme that's minimally coherent and not future-proof. Even the biggest, most well resourced companies don't seem to be able to get this right. Think of Apple and the iPad. The iPad, the iPad 2 the new iPad, the iPad air etc. At this point as a casual observer I am completely confused about iPad naming.
If the population is armed the police should be armed. Simple as that. Good luck getting the population disarmed in less than a century, and thats if you get them to pass the constitutional amendment first.
Anyone else notice the source they provide seems a bit light on functional code in multiple areas? Lots of stubs, empty methods, commented-out blocks and such throughout.

Did they neuter it by stripping out core functionality prior to releasing as open source? Sort of disappointing if so.

Almost seems useless in its current state given the degree of missing code (caveat: I have not run it yet, only read through the code in the GitHub repo).
This is factually and legally incorrect. The President cannot use any federal funds to modify the prison at Gitmo, or to transfer prisoners. This was part of the budget in I believe 2012, and has been every year since. (Should you need citations I will find them when I return home later.)

Point is that shutting down Gitmo was something the Administration attempted to do and that Congress forcefully blocked.
I think you can't divide if you have 16 cells.

If you have 16 cells, your big ones can also eat the green things and grow, instead of getting split up.
The question here is what did the police aim for not what did they hit.
You needed to be able to find a way to relate the machine model to him. There must be some kind of everyday task that could be used as an analogy. Also, because code looks kind of like maths this person was engaging a math mental model. Therefore you needed to say, (1) it's not like math, stop thinking like that and (2) it's like a recipe for a cake where each step must go in a particular order (or whatever analogy works! Maybe multiple analogies!

That said, I was asked to give computer grinds to a friend and the guy could just not grok it. But then again he had zero motivation and interest. Lots of people who say that they are bad at math/programming have no interest in making the effort to becoming even a little bit proficient.

I really really would like to know if there are people out there who want or would like to code but for the life of them they cannot wrap their brains around it. I think this is a very important question because I can imagine future social arrangements and scenarios where not knowing how to code will be highly socially disadvantageous.
And according to the mentioned site, it is impossible to have a website without google-analytics.
First off, awesome work. This is absolutely insane. Can't wait for the previews. I want to design my next game with all fractal art, and this might just be the golden tool.
I am wondering the same actually. I wonder if he could paste his comments as replies and then a moderator could make dead the ones left as main comments. As it is the threads are quite hard to follow.
no, this is courtesy: https://www.youtube.com/watch?v=RR5rIv4Qros

If you're not willing to empathize enough to do this for another human being, then you're a terrible person who needs to work to be better.
I don't have a portfolio, but I'd be happy to work on your prototype. As long as the instructions are clear and expectations are real, I see no problem in me getting the work done.
TL;DR; All previous data loss scenarios still exist, however the window during which data can be lost is much smaller.
Finger?

https://en.wikipedia.org/wiki/Finger_protocol
Let me tell you a story..Mr Lincoln did not free the slaves...Congress did by enforcing martial law until the South Legislatures passed new state Constitutions and allowed Blacks to vote..time taken ten years after CW ended.

Gitmo does not get closed by one lone person..it takes Congress
> Total separation of those who investigate complaints against the police from the police themselves, with separate organisations, recruiting, promotion and the chief of said investigations reporting directly to whoever the relevant chief of police reports to.

I'd argue that it would be even better if they reported to a separate authority in most cases (obviously, for some agencies this is impractical at some level, but I think the norm for, e.g., local agencies should be for a state oversight body to oversee police misconduct rather than a local agency parallel and subject to the same local government.)

Where this isn't practical (state and federal law enforcement agencies of general jurisdiction), a parallel and organizationally co-equal agency doing misconduct investigation makes sense.

> In the US the FBI sometimes serves in this role, though rarely at the request of local governments

The FBI doesn't actually serve this role except insofar as the primary authority for investigating most federal laws, when alleged police misconduct happens to involve violating federal laws (often, civil rights laws), the FBI ends up investigating, not as part of a "oversee the police" role, but as part of its general "enforce federal law" role.
What if you're mediocre at both!
I think that in Britain, if they shoot, they kill. Guns are extremely ineffective at "set phasers to stun". Blowing someone's hip apart is quite enough to kill them.
Bottom up. Which is why local (1) entities and jurisdictions are going to increase in favor, once again.

Akin: Employment. Personally, I am finished watching my local labor force hollowed out because some version of... "labor arbitrage", I guess, can save a buck an hour moving the work over a border. (And, as often as not, that saving is being indirectly paid for by me, anyway: Outsized military to secure energy interests used for attendant goods transportation. Inflated retail prices feeding telecom oligopolies whose networks, while I like the connectivity, similarly afford displacement of intellectual labor.)

Is such localization perfect? No. But, you asked what/how things might change.

People will start tending to their own communities, as a priority, if and when they want them to get better.

There will be significant downsides to this, as well (e.g. the potential for increased prejudice, perhaps). But, as one old supervisor used to like to state, "everything is a pendulum." I'm not sure I entirely agree with that, but as I get older and my perspective... "matures?", there does seem to be a lot of it around.

--

1. For various and significantly differing values of "local".
A bit off-topic, but I wonder if in the future we should focus on reducing the car price or increasing personal wealth.

Tesla should be considered more renewable (since it doesn't consume gas) and thus a benefit for society and the nature.

Maybe we should think how to raise the GDP enough so that everyone can afford the clean (and luxurious) car.
The worst part of the whiteboard in my opinion is not that it's a poor tool for the job, which it is, but that it adds both unnecessary social pressure and the need to constantly explain what's going on (presumably because the interviewers are bored so for their amusement) while simultaneously trying to think, write, and edit out a solution. The fact that you can't run or even edit code very efficiently on a whiteboard (or paper) alone makes it a terrible tool to judge anything about a candidate, but combined, the two make the whole exercise pointless and quite frustrating for the interviewee.
Difference is, in LA I have a small house and a back yard. There are olive trees with a hammock strung between them and my rent is 1850 a month. I'm pretty sure that would get me a small closet in Manhattan.
I'm pretty sure it's a timer. Cells cannot merge for X seconds after splitting, but after that any two cells that have passed the threshold can be merged.
"You’d have to start by coming up with ~$220k in savings for the down payment + closing costs, and then take out a mortgage for the remaining $800k"

For most folks, the down payment is the hard part and this doesn't seem to be addressed often enough.

If you are making $100k, how long is a reasonable amount of time for you to save up that $200k?
Wow! The demo video[1] is really impressive. How are those effects created, I wonder? Do the fractals get their own depth maps? How do you arrive at algorithms that look so darn beautiful, especially those metal and plastic shaders? Is there prior art for this?

[1]: http://fract.al
Which is of course a misunderstanding of my point.

The question is going to be will you start telling me what my point is? because I'm not going to waste my time on you.

No reasonable person who has been online for any length of time is going to really argue with what I just said. There is no way you sit and really contemplate and try to communicate as best you can with everyone you come across online, you would never make it out of a single youtube video.

There's how you view yourself and then there's the way you really are. You pick and choose just as readily as I do, the only difference is I'm pretty open about it.
And all known defects are now documented.
http://www.elastic.co/guide/en/elasticsearch/resiliency/curr...
The perfect is the enemy of the good.

The question is simply "what do we know about this problem" not "what is the absolute unquestionable universal answer."

Also your comment has some interesting points but starting off by comparing statistics and citations to bible quotes and racial stereotypes isn't going to win you much support.
There's no bad interview question, but there are certainly bad interview _processes_. We use a whiteboard session as the last step in the technical interview, and we're really not looking for someone to write functioning code, we're looking for the candidate's thought process as they lay out a design for a simple OO program.

For the type of programming I'm involved in hiring (iOS/Android) it's silly to expect someone not to lean on frameworks/IDEs. It's also unrealistic to expect that every single candidate has a laptop fully set up with their preferred environment. That's what take-home questions are for.
How can a senior engineer maximize compensation without becoming “management”?
Good friend of mine is on the job hunt, but has come to the realization that he doesn't want to be a VP/engineering manager, he just wants to code. His concern is getting stuck at lower salary ceilings. Any advice I can share back?
> He's literally the leader of the armed forces, he has all the power he needs to shut that place down any time he wants.

Actually, the Congress governs the armed forces; the Constitutional designation of the President as Commander-in-Chief simply means limits the Congress, in adopting rules governing the military, from appointing someone else as supreme commander of the military within those rules.

The President isn't the King of the military, or anything else.
and lo, there was much rejoicing throughout the land.

Whiteboard coding is a terrible practice that should have died 15 years ago. 1 hour of pair programming on a real computer (even locked down with no network access) should tell you all you need to know about a person's skills.
There aren't enough positive comments here. Damn this is so cool, technically rendering-wise, UX-wise, a great showcase... I love the video! Really hope the author releases the app, even if it isn't open sourced.
As of just now, zindex and zq now support field-based indexing. Hope this helps your use case!
Failed Christian shoe promoter makes anti-gay first-person shooter
My understanding is this was developed internally inside their security team, so it likely isn't a reflection of their standard development process.

I'm glad to see this become open source. I became aware of this when they integrated with my API a few months ago [1].

https://github.com/Netflix/Fido/blob/master/Main/Detectors/D...
Perpetual Motion at last!

The Phone transmits radio energy which is converted back into DC power which the phone then uses to transmit radio energy.

Of course harvesting the radiated power blocks the ability of the phone to communicate, but still...
^^ This. Dogs are just love with legs. Some people rescue dogs; my dog rescued me.
for what it worth, when i was taking concealed handgun course, i been told never do "warning shot" in the air (can kill bystander), never try to shot legs/arm/hands/etc (you will miss, even if you will not miss, it still often fatal, and if not fatal, often not enough to stop person with blood full of adrenaline). On top of it chance of hitting someone behind leg/arm is high.

What been taught is to only use deadly force to stop imminent danger. And to stop someone means to shoot into center of the mass (so aiming at head is not advised too.)

Now, how you decide if using deadly force is necessary - is totally different area from how to properly use deadly force to stop attacker when you already decided you have to do it.
Real life is not like the movies. People don't go down after the first shot unless you hit something critical. Shooting center mass provides the best odds for disabling that person and the best odds to hit your target.

Shooting a moving target is already hard enough, trying to shoot at the legs of a moving target is even harder.

You also have to consider than an officer is responsible for every round that leaves the barrel. If you miss, thats just one more chance for that round to hit an innocent bystander and increases the odds that that guy with the knife is going to reach you before you can take him down.
I've used Santa Clara University Library robots, (listed in this article), but I don't think these are a good idea at all.

You go to the library computer, look up the book you want, and press 'retrieve', and go to the desk. A minute or so later, the book shows up.

When I go to any other library, I browse the books on the shelves, maybe 20 or 30. I can quickly shuffle through them, maybe looking at just their spines to see what I want.

These robots just kill browsing completely. I think they are fine for some purposes - archives, but not for university general libraries where browsing should be encouraged.
I strongly disagree. You don't have to go into detail about them, but knowing the fact of their existence is fundamental. If you think there are only 4 bases and then later find out that there are others, the first reaction t that is to feel short-changed about your previous education and stupid about all the new stuff you have to absorb. If you are told there's 4 bases that seem to deliver 99.9% of the action and another 20 or so which hardly get a look in, then you have a basic overview of the field.

It'd be kind of like teaching string theory at the same time as F=MA.*

So what? 'All matter is made up of very tiny things called atoms. There are 118 different types of atoms that that we know about, which have many interesting and surprising characteristics. Many atoms can be combined with each other to form molecules. All atoms seem to be made out of different combinations of subatomic particles, which are the very smallest things we have managed to measure, but which we only partially understand. Some scientists think subatomic particles are made out of even tinier structures called strings, but nobody has managed to prove that one way or the other.'

You don't have to give a big long-winded explanation, but there's nothing wrong with sketching out in very general terms where the frontiers of our scientific knowledge lie. Likewise you don't have to teach small children comparative linguistics, but it's a good thing to make them aware early on that there are many different languages that originate in different countries. Not talking about the existence of things when trying to introduce a field really stifles curiosity, by obscuring the fact that that there are many interesting avenues of inquiry that have yet to be explored.
There's definitely a legal way to do it. You just tie federal dollars that flow down to local police to requirements for police training. It's the same way federal highway dollars are tied to standards for state driver's licenses.

Of course states and cities will be free to turn down the dollars if they want, but the incentives will be strong for them to comply.
> Not that this isn't a nasty security hole, but I should hope that this sort of equipment is firewalled at least.

Won't do you much good if an attacker makes an open Wifi point with the same SSID as the hospital's network.
> As Jobs said, "Customers don't know what they want"

I see (and somewhat agree with) your point, but you're quoting/linking an article titled "Five Dangerous Lessons to Learn From Steve Jobs" that states just before the first bullet "here are some of the worst lessons to learn from Steve Jobs"

A better quote may be PG's "Make something people want"[1] - and if ~90% of the people you sell to are saying they want on-prem I'm not sure how (without clairvoyance or hubris) you can say for sure "nah, they're all wrong."

Amazon, Microsoft, and Google are much larger than VMware and can afford to put a lot more resources behind things that may never bear fruit - VMW had $1.8B in revenue in 2008[2], MSFT had $60B[3].

[1] http://paulgraham.com/good.html

[2] http://ir.vmware.com/secfiling.cfm?filingID=1193125-09-38030...

[3] https://www.microsoft.com/Investor/EarningsAndFinancials/Tre...
Ask HN: What are computers not good at?
Many things can be automated with computers. What are the things that they do not do well and still need that human touch?

Bonus. How long before they don't suck at said things?
Introducing Win2D: DirectX-Powered drawing in c#
I think that's the spirit of what he proposes. A possible way to organize the fluid current knowledge would be as a network of scientific questions, which depend on one another (like a bugzilla for science). Having a list of articles that answer positively vs negatively to every question would give an immediate view of the scientific consensus, would allow everyone to make their own judgement about the quality of research and importantly, would pinpoint gaps in knowledge thus pointing out possible research directions.
check out this video, it's ironic too: https://www.youtube.com/watch?v=Jne9t8sHpUc
Yup. Anyone who has a decent amount of experience with guns / carries knows this. Shooting for the legs/arms is not practical and poses more danger to bystanders than it's worth.