skysight-inc/HackerNews huggingface dataset:
As someone who's actively engaged in webappsec stuff, I concur with Thomas's observations.

XSS is far more prevalent, and I'm more likely to find PHP Object Injection via unserialize() protected by weak md5/sha1 auth (or outright naked) than I am to find SQLi in modern PHP apps.
Qualifying an argument weakens it. And makes it less concise. Note: I could have said "I think that usually qualifying an argument tends to weaken it in the eyes of the reader". Which is better in a text discussion?
Ex-Googler: 'Tons of Engineers' Want to Leave Google
So you think the US political system is doing fine?

Disenfranchising minorities is a bad way to run a democracy.
Well nothing beats the stability and storage density of hydrocarbons, so they will never go away.
An ex-Googler on Goog hiring practices
Yeah, the legacy project I'm working on isn't that modern... And even when rules are enforced, people sometimes work around them and leave a useless commit comment. Lax documentation, sometimes deliberately lax, is a person problem unfortuntely - one better solved in ways that HR would disaprove of then via technical blocks!
Decentralized solar might work in some places, but we have a long, long way to go before our existing grid can start to make use of it. We still need old school generating capacity (read: nuclear) to serve peak demand.

The other reason solar has become so attractive is because the spinup time is so much lower than for other traditional sources.
I have two at my house and absolutely love them for the simplest tasks: weather, time, timer & shopping list. It's other features are fun, but I haven't found more useful than grabbing my smartphone.

For me, it's a more useful Siri.
You can keep existing models/views from an existing project as long as they're not defined in RAML. We're planning (soon) on adding the ability to add resources in your RAML file that would be ignored by Ramses.

This is how Ramses starts: https://github.com/chrstphrhrt/ramses-tutorial/blob/master/p...
if I were upset about a site tracking me without consent, I cannot report it and no penalty will actually ever happen to people

Why can't you report it? In the UK, head to the IPO (https://ico.org.uk/concerns/), for example. Other countries have similar bodies.
North Dakota: National Hub for Drones?
> First, did I want him to play golf with both the judge and the prosecutor, or just the prosecutor. And, the second question was how many games of golf I wanted him to play with them.

Reminds me of the time I was learning to drive a stick shift in west texas. My dad was in the passenger seat, and was giving me tons of grief for rolling through a stop sign while paying too much attention to the clutch.

We stopped at a gas station, and a local cop pulled into the pump next to ours. My dad, to tease me, asked the cop how much a ticket for rolling through a stop sign would be.

The cop said "About $100. But let me give you some advice. If you offer the officer the $100 right then and there, you'll save a lot of time and paperwork, and your insurance won't have to find out about it, which can save you more in the long run. It really pays to keep some extra cash in your car."

My dad went poker-faced and said "Thank you for the advice", and then he drove us back home and said "Forget everything that man said.
It wasn't a straw man. I have no public opinion on Hillary as a candidate. I have a problem with arguments being made about candidates in the manner that the article made them.
Even without inlining? Since the compiler cannot know what instruction will be called, it cannot inline it in the loop.
The original requirement was for sites to obtain "prior informed consent", and this is essentially impossible - you cannot educate a user about the implications of cookies in a pop-up.

Further, the ICO here in the UK refused to provide meaningful advice as to what was actually required, so it's far from certain that these pop ups are a legal requirement anyway. We use them if the client wants them, but otherwise we simply make sure there is a "Cookies and Privacy" link in the footer that interested users can follow. I'm sure one day some jobsworth will tell me I need to join in this charade, but until that happens, no pop ups from me...
How you can rank on the first page of HackerNews and GrowthHackers
So nobody who has an app in an app store has to advertise anymore? I see advertisements for Wix all day long on Bloomberg TV, perhaps someone should tell them that they should have just put an app in Apple's store.
I had a similar experience with both Erlang and XSLT -- they don't look anything like a typical imperative language, so I wasn't tempted to think in imperative terms. I just had to do things "the Erlang way" and "the (crazy) XLST way."
Huh, so I never though about it this way. The reason you can use epicycles to draw anything is because the trig functions form a complete orthonormal system. Because you can write a Fourier series for any piecewise continuous function, you can also draw Homer Simpson:

https://www.youtube.com/watch?v=QVuU2YCwHjw
Very accurate. Honestly, reading Chomsky in a lot of places he says things like there's no way a baby could learn this, it must be hard coded in their brain! Then in baby studies done later we actually find babies do have a natural understanding of things like probability and can do the things he says are impossible.

There are many other flaws in his work. I tend to think of him as just an old man who wrote his stuff before we knew as much as we do about genetics, so was unfortunately really off base. It's nice that people who don't know the science were excited by him, I guess.
Well, record player companies made money off of Artists without paying them. This is a basic secondary market (hell, parking garages make money off Artists) and has nothing to do with the direct making of money on music such as a subscription service or actual record sales.

This argument has actually been used to tax blank CDs which is bull. Should we tax all parking lots when a game or Artists is playing near them? Taxing the ecosystem because some group determined their part of it is more important is foolish.
Critical thinking will never be out of style, no matter how much people try.
I'm mostly just making it up as I go along. It works out fine. :)

We did take a few classes, which was good for me. Probably stuff my wife already knew. (How to swaddle, how to change diapers, massage techniques to alleviate pain during contraction, and general what to expect stuff.)

Food for mommy - they decided my wife had gestational diabetes, so carb intake was regulated a bit. The numbers were borderline so I'm not sure it was an actual issue. But I got to play with the USDA nutrition database to work out numbers for my recipes.

The food for baby stuff comes later, but it was important to me to make our own food. I started with the River Cottage Baby Cookbook. It'll be mommy milk for a while, then simple purées, then more complex stuff. No salt for a while. I froze stuff in silicone ice cube trays, so we'd have easy portions to pull out of the freezer.

If you like to cook, read Hungry Monkey. It's a fun "foodie raising baby" anecdote.
Best Online Tools for Streamlining a Job Search
The most annoying part is that blocking first-party cookies (e.g. with µMatrix) causes this message to appear every time since you are not sending your "consent" back to the server.
The Pandora guy, Tom Conrad, retired from Pandora; though I'd guess he still holds shares, I wouldn't say he's "trying to make money too". He's ex-Apple, pro-Apple, and was CTO of a tenacious music streaming company - all very relevant experience to comment on this.

His point, which I share, is not to chastise Apple "for not being altruistic" - it was that Apple tried to play the game with very different rules than most companies do. It's worth calling them out about it, especially because they are the Goliath.
I think I've missed the point of your response (electrons?).
Just to clarify, Chomsky's theories setup a framework for artificial reduction of language which did nothing to help elucidate the true nature of language (which is obviously a product of the evolution of the brain).
The problem seems to be that Chomsky's influence sent a lot of grad students down a path that didn't really advance linguistics in terms of the human element. I don't even know if his theories really helped with computer analysis of language.
Notes on Clojure
Thanks, JSON exports make wikipedia data much more approachable.
OTS is almost certainly the same as chronic fatigue syndrome. The only difference is that in OTS the stressors are usually mostly physical, where in CFS they are (usually) mostly mental. In many cases there is also an apparent flu-like illness at onset, although it isn't clear whether this is an actual illness or just a symptom of the immune system going haywire.

It seems that at some point after prolonged, chronic stress the brain just says "that's enough", and further stressors result in a reduced stress response from the brain, rather than the usual increase in stress response (cortisol, etc.) Essentially it's a form of burnout.
Firefox had site-specific settings...

http://www-archive.mozilla.org/projects/security/components/...

...and there was even a bug to create a nice UI for it...

https://bugzilla.mozilla.org/show_bug.cgi?id=38966

...but look at the last comment on that bug. :(

Interestingly enough, IE11 still contains much the same UI for white/black/default-listing sites in different zones with configurable options that has been there since at least IE4:

https://support.microsoft.com/en-us/kb/174360
US immigration rules would be much saner if people born here had to jump through the same hoops, wait in the same lines, fill out the same forms, and go through the same process for citizenship, as people not born here.
That much is obvious. It's a shame the lawmakers didn't go in that direction.
Cookies are internet infrastructure. Identity/state management is just a natural part of the way the internet works. This sort of thing would be better solved through regulation on the network side rather than just browsers doing whatever they want.
I would like to know the ways in which people who already have an Echo use it. I have had one for months now and all I use it for is listening to music while I prepare dinner. Lately, the music has begun to stutter and that irritates me so much that I say "Alexa goodbye" and pull the plug out of the wall.
Even though location is embedded in EXIF, you can disable geolocation feature in Flickr's privacy setting, so that it won't be in the photo that is displayed on flickr. But yes, it does keep EXIF info in its database. For those who are paranoid, either run exiftool or imagemagick to strip off all EXIF before uploading.
(Periscope co-founder here.)

There needs to be a route from the internet to your DB, yes. Sometimes this works because the DB is in the cloud, or sometimes a port or SSH tunnel is opened into a local network.
Ask HN: How to get started with your idea?
How do you guys get started with your ideas? I have an idea that I believe might have a potential in the country I live in. But I'm afraid at the same time that it will not work because there are few companies that is well established and does the same.

But my idea is somewhat different and better, while the old well established ones are old, not innovative and has been the same since they have started with very bad user experiences.

Their success is dependent on the fact that they have contacts and access to companies and organizations which I do not have access to because they have been in the game for a long time.

Should I press on with my idea? or should I just leave it alone? According to my co-founder/friend my idea will never work because the users will never leave the well established ones for something new no matter how much it suck
A friend of mine works in shipping at a reputable and profitable firm. His roommate, a Greek national also engaged with the firm, was "deported". Twice. He wasn't literally thrown out of the country but it amounted to as much, having similar visa issues.

His employer, unlike the author, sponsored him. However, two separate lawyers were unable to secure him a place in the country. One made a costly mistake and was fired, however the damage was done. My friends roommate made it back to the company for a month or so, before having to permanently relocate to one of the other offices, again, this time permanently.

These stories are not unique. People who are well educated and top performers in their sector are being turned away. Look at many successful entrepreneurs, Levchin, Musk, Collison, etc. and it is obvious the US benefits extremely well from allowing well qualified individuals immigrate.
We are capturing value for those users. Those users have decided beforehand, though, that they don't want to pay up front for their apps to realize this value. So they have to pay in another way.
Without apps, Apple has nothing. Developers should get 30% of the profits from Apple's hardware business.
I don't quite get the logic here. Being "not news" doesn't make it any more acceptable to me. In fact, it's the other way around.
Ready to answer any question ;)
Just keep using Ruby or, if you must, Node. Rails 5 is going to fit those use cases just fine. Web programming is entirely too complicated to roll your own stack unless you absolutely need to.
The defaults are the issue, by going against the greater convention on something that only a few minority really have a big concern with. None of the other browsers do this and it hasn't really led to any privacy benefits, rather it's increased the level of tracking from something that was easily controlled and understood to now fingerprinting and even ISP level identification.
Sounds like the misguided P3P "standard" that IE implemented which AFAIK only resulted in web developers copypasting a HTTP header they don't understand just to get facebook widgets working.
How Ghost Spent the $300k It Raised
Google Photos and the unguessable URL
6 Benefits of Strength Training
In fact, it's downright oppressive that the government of the United States treats its own citizens differently than citizens of foreign countries.
Theoretically you could build firefox from source..

But yes, it's still an issue. Does anyone have a solution to trusting GPG keys on company websites? If their website gets hacked, the key could be replaced, the source-control could be replaced and you'd never know..
Smart tv's have already beaten this one to the punch by a few years now.
It'll be a while before it is cheaper than the hydro-electricity we generate here in Quebec.

But yeah, anywhere else it makes sense. Also wonder how cost effective it is in harsh climates where there is less sun.
It's not LITERALLY about the period. It's about how content that contains periods tends to be written a certain way that the author doesn't care for in commit messages.

Did you really not understand that?
Yes the immigration system is broken; it's difficult to obtain sponsorship from an employer. But I feel like the author gave up after asking the few places where he worked. Sometimes you need to try harder.
Right, and we can just take their word for it because.. Don't Be Evil?
Batteries (like Tesla's PowerWall) are an increasingly-relevant option for peak loads.

I was also under the impression that most peaker plants are likely to be natural gas fired and not nuclear -- as in, easier to build, and less of an investment to recoup if something better/cheaper comes along for peak loads.
> Apple didn't respond to a letter from Taylor swift in < 24 hours - this had been building for a week or two

Yet the reply was addressing Taylor Swift personally. The fact that Apple replied to a letter by Swift in 24 hours does not change.
Have you considered that less control for the user is more control for someone else?

The more we do on computers that are opaque to us, and yet interconnected on the Wild West of the Internet with OS's with known vulnerabilities (and potentially backdoors) and privacy-hostile apps, the deeper and more detailed our activity and communications can be tracked. Are those good conditions for a healthy balance of power? Perhaps citizens of developing countries will face less-tolerant political climates than we're fortunate to have.

The long-term consequences of a lack of control over our smartphones, which as per the presentation deck we tend to have with us all the time and use very frequently, and also have tremendous sensor capacity, seem to be worth some thought.
Sure. If you're an indie dev you get 70% of all purchases. No complicated contracts, no middle-men, no varying deals in different countries and distribution is as simple as uploading a file to Apple. With musicians they get almost the same % but it also has to go through a ton of middle men and the deals vary around the world. They're also locked in at a single price point (the streaming rate). Finally with brick and mortar stores the deals were much, much worse and if you couldn't get a deal you couldn't sell your software. With pure online distribution you had to build a website, payment system, update mechanism, manage DRM/serials and if you didn't market heavily you wouldn't make a penny because no one would know you exist.
He was a state senator for 7 years, and a US senator for 4.
Problem with imgur is that it compresses the image too much, and the degradation is noticeable. I don't recommend imgur for archival purpose.
How do sites know who is which client without cookies?
For an example of what mafibre is talking about: even proving that a BubbleSort implementation is correct is quite tricky.

First of all, you need to correctly define the specification. Saying "the returned list is sorted" isn't enough because that would also accept lists that have nothing to do with the input, like [1,2,3,4,5]. Also saying that the list only contains elements from the input is also not enough because that would accept a returned list with duplicated or missing elements. To really make a specification that models what you want you need to say that the returned list is a sorted permutation of the input list.

Then, once you manage to get a formal specification that is actually what you want prout invariantving it is also hard. In the bubble sort case you need to figure you need to write down the proofs in detail, down to the point when you use the fact that comparison is a transitive relation.
Use your Kindle as a portable typewriter
I would respectfully disagree. As liquid fuel prices climb higher alternative methods of producing liquid fuels become more and more attractive.

There is a lot of research going into ways to turn CO2 into various precursors to fuel or directly into things that are liquid fuels. And the last generation of concentrating solar plants have shown that you can gather the heat very effectively if you need that. Photovoltaics are cheap and getting cheaper if your process requires electrons instead of heat. This is likely the way things will go for airplanes.

https://www.google.com/webhp?hl=en#hl=en&q=making+liquid+fue...

There are also a number of companies working on harnessing the wind for ships. There's the SkySail system which I believe is being deployed commercially already that's a huge, automated kite-sail. There are also people working on rigid, self-adjusting wingsails (Saildrone). Finally the folks at Makani could probably put many, many kite plane generator systems on a boat and produce a substantial amount -- perhaps even all -- of the power needed to make a large boat go.

These might require that boats get redesigned to be slipperier but as fuel prices climb inefficient ships look less like assets and more like liabilities. Given the choice between holding less expensive assets with high operating costs and more expensive assets with low operating costs plenty of businesses can find the capital to upgrade if the economics are there. And as fuel prices climb, the economics are increasingly there.

So while I agree that in the short, short term none of this helps, in the long term things can get a lot better incrementally.
Amazon Echo: Always Ready, Connected, and Fast
That too is subject to the EU ePrivacy Directive, so the idea is you're supposed to be able to report someone who does this to your national ombudsman, like the ICO's office in the UK, and they'll fine the offender.

The language in the ePrivacy Directive always talks about tracking terminals (devices.) It's not just about cookies, or browsers. You need the user's consent to track their device, period. (However you don't need consent for e.g. basic cookies that are necessary for a site to function, and which aren't used for tracking.)
How would that be any different?
DigiCert Acquires Verizon Enterprise SSL Business
Are TV manufacturers continuing down this path of lunacy? I thought once they got caught they'd turn the damned thing off.
Teaching Civil Rights Without a Textbook
WikiLeaks – TPP Transparency for Healthcare Annex
CVS branded disposables are probably the best disposable triple blade on the market. I have thick hair and one of those lasts me an entire week. There are deals to be had, assuming people are willing to put in the legwork. I've gone two weeks with one out of sheer laziness before.

That said, stuff like bic is terrible.
I can't wait for the times when i would ask my wife "where are my sneakers?" and in 10 minutes amazon would send me email for buying brand new sneakers with drone delivery in 5 minutes.
> Mixed bands are quite fewer -- which obliterates the whole mixed counterexamples thing

Citation needed.
The ethics of AI: how to stop your robot cooking your cat
Put on github instead of passing it down? Might not work for non-comp-sci students that use LaTeX, but are not familiar with git.
Probably methanol. It's relatively energy efficient and it doesn't boil at room temperature like methane.

https://en.wikipedia.org/wiki/Carbon-neutral_fuel#Production
I don't understand how you could possibly tolerate messy commit messages. It's as if you've never had to do a code investigation/audit ever, heaven forbid you do.
From a "hacker" vibe, http://www.amazon.com/The-Baby-Owners-Manual-Trouble-Shootin... is cute; I can't judge the quality of the information it provides.
But the critical mass needed to get that kind of support is in the Quake 3 range... I seriously doubt many games are going to reach that threshold and prove that `à la linux' support can work. Especially on the long term (ie: further along the line than the game launch window).

I am of the opinion that Quake3 is an exception, not the rule.
Tallyman.io – Docker Image Inspection SaaS
19 years and 6 months with a statistically insignificant temperature trend. UAH 6.0 brings the UAH data inline with the RSS data. As the years go on, catastrophic warming seems less and less likely - or at least so the hard satellite data says.

http://images.remss.com/msu/msu_time_series.html
This article does a pretty good job of synthesizing why I'm fairly optimistic about climate change despite believing the scientific models. I think that there is an austerity/flagellant meme within environmental circles that states that we have sinned against the environment, and unless the solution involves a heroic self-sacrifice (a la Kyoto protocol) then we cannot be saved.

In reality, all power is solar power, and innovation and market forces will eventually make it more efficient to skip the fossil-fuel middleman. The process could be accelerated by a carbon tax, but it will happen either way.

Responding to the 'Climate is still screwed' point, once we're on track to stabilizing emissions, geo-engineering methods that were dismissed as stopgaps can always be used to hold the climate over for the next century.