skysight-inc/HackerNews huggingface dataset:
> Recent resurgence of the "national pride" thing.

I agree with this.

> The forced reinterpretation of the Constitution.

I agree that this bothers me slightly, but concede that the Japanese government can and should be able to openly modify the constitution. Article 9 isn't and shouldn't be an absolute commandment (assuming that's what you're talking about).

> Unreasonable hatred towards neighboring countries (China and Korea in particular).

Outside of extremist groups, I haven't really seen this at all. It might be more accurate to say that the government, rather than the citizens, are drumming up an opposition to push things through politically.

If anything, it seems like more people from neighboring countries carry a grudge against Japan than vice versa -- without getting into a talk about whether it's justified or should be forgotten by now etc.

> worst of all, we aren't taught anything about these Japanese atrocities at school.

This may vary depending on your curriculum and your age, especially if you're in the ゆとり教育世代. [Edit to add: Just like American adults don't really go around talking about American atrocities in daily life, Japanese people don't do that either, in my experience. But when we have had occasions to talk about that kind of thing (say, discussions about recent history, politics, Korea, or China), people have seemed to be generally knowledgeable.] I was teaching and watching classes up til a few years ago and did hear some things about the atrocities in junior high and know that most people heard more in high school, which makes sense as part of age-appropriate curriculum creation to me.

I don't think Japan is anywhere near taking a step toward the Imperial Japan in the article. Vocal and consistent opposition to attempts to get around Article 9 and that people are trying to encourage Chinese tourism in fact make me believe the opposite; Japan is (very) slowly trying to move toward a more open and global state.
At least for those problems, I don't think it's about trying to slow down. It's about trying to poke holes in your answer and make sure it holds up to some testing.

The intuitive answer to the first problem is $.10 but if you take time to double check and add a dollar to that, you see it's wrong.

I don't think this is too different from programming... the time you take to re-read some code you just wrote and think like a compiler and mentally execute the edge cases, etc.
First time I came across this idea was in Ed DeBono's "DeBono's Thinking Course" which (paraphrasing) said "the sheer physical speed of the clever mind leads it to find an immediate solution. But not necessarily the correct, or best solution." The book is full of excellent methods of improving thinking, and I believe he's put out a few other books since then.
> Having studied some meteorology in college

Ah, in that case, here's my understanding, in brief. There are several components:

1. California has had multi-hundred-year drought cycles in the past, according to tree ring data, and the last several hundred years have been unusually wet by comparison. It's possible that we're re-entering a long period of overall drought. (e.g. http://www.nytimes.com/2015/04/14/science/californias-histor...)

2. The current drought has been exacerbated primarily by a pattern of high and low pressure systems over the arctic, the polar vortex system. The newer "curvy" shape of the polar vortex is leading to systems which are keeping cold fronts from descending into the west coast.

3. The current working theory is that the shape of the polar vortex is influenced mostly by the temperature of the arctic, so it's not likely to return to what we thought of as normal until the arctic starts to cool down again, which might not be happening anytime soon. (e.g. https://en.wikipedia.org/wiki/Polar_vortex#Climate_change -- sorry for Wikipedia link.)

4. There has been a gradual decrease in snowfall over the Rockies and, I think, the Cascades region. (e.g. https://www.ncdc.noaa.gov/sotc/drought/201502, http://usatoday30.usatoday.com/weather/news/2011-06-10-clima...) A lab in Berkeley is responsible for measuring snow pack in the Sierra, and they have some data going back to the late 19th century. Unfortunately, all I can find are graphs of their data, not their actual data, so I have to contact them and see if they're willing to share that so I can see how the average is changing. My hunch -- although it's only a hunch at this point -- is that I'll find a slight overall decline in average snowfall, same as there is in the Rockies and Cascades. Seeing if this data is available is part of what's holding up a more comprehensive reply.

I have links to articles for most (all?) of this, but ... it's a little bit discombobulated still. I think it really needs to be presented more coherently to look very convincing. Part of the reason that I'm reluctant to start sharing links right away is that some of the sources I have at the moment are crappy little blogs -- thank you very much Google -- and I have to take the graphs they've ripped off and try to locate the primary sources they ripped them off from and then read them and make sure the context is correct and all that.

I'm not a meteorologist or climate scientist, it's likely there are areas that I'm oversimplifying or misunderstanding. But, I am an avid reader, and I haven't come across much material that's painting an optimistic view of California's climate in the near future.
A barber I used to go to told me that he makes it a point to do nothing every Sunday. ( By nothing I mean only pleasurable activities, no appointments/chores)

His logic was, if I spend every Sunday as a holiday, that will be 52 days of mini holidays I get every year.

Since then, I have taken on his advice.
I try to spend every Sunday doing nothing. My version of nothing is geeking on fun projects, relaxing and binge watching TV shows I enjoy.

I've noticed that it allows my brain space to piece together all the information I read/gather during the week. The ideas and discrete information to solidify.

I find myself more relaxed and productive during the week.

It's not always possible to take sundays 100% off, but I try.

It's tempting to do chores, or schedule that appointment, but if I can push it off to the following week or schedule it before Sunday, I find my life feels more fuller, richer and more enjoyable.
I've had more success with 'intitle: Index of /.git'
I made a compiler, you fucken nigger. Do you speak English? It takes a dialect of C and makes x86_64 machine code.
The television series Perfect Strangers is probably never, ever going to be rereleased, and you can blame the Bibbi-Babka Ditty.

See, the series makes use of a few licensed popular songs -- not as background or incidental music, but as songs sung by the main characters, often in Balki's native language or as a part of his culture, making them central to the show's jokes. (The Bibbi-Babka Ditty was one such, a version of Chubby Checker's "Limbo Rock" that must be sung while baking delicious Myposian pastries known as Bibbi-Babkas.)

So editing them out or replacing them with generic music, as was done for example with the rerelease of Daria which had all its popular background music removed, isn't an option.

It's kind of sad because perhaps the purest exemplar of "80s sitcom" will be lost to history.
One derivation starts with E = mc^2, which is a special case of E^2 = m^2c^4 + p^2c^2 but with velocity set to zero. In the second equation if you instead set the mass to zero you get p = E/c (momentum equals energy divided by the speed of light) for massless particles.

The deeper reasons are above my pay-grade.
(2007) the practical problems of inheritance
> What's hard to answer is how do you stop the next Boston marathon bomber.

Not only how do you stop the next Boston marathon bomber—that's relatively simple. What's hard is stopping the next Boston marathon bomber without doing more damage to our country than the next Boston marathon bomber would do. And that's hard, because despite the loss of life, the Boston Marathon bomber didn't actually do much damage to our country.
Keep in mind, Greece is a lot smaller than California. :)
* Not being very careful with the lifecycle of a token.

* Encrypting tokens and expecting users to feed back the same encrypted token, and failing to authenticate.

* Simple parse errors and SQL injection on the tokens themselves.

* Exploitable generation (for instance, non-cryptographic RNGs) for the tokens themselves.

* Having multi-page flows starting from the receipt and validation of a reset token, and then having standard web flaws somewhere in that flow (for instance: userid is validated only at the start of the flow).

* Mishandling of cases where users have multiple outstanding reset requests.

* Accepting the email address to send token to from web user, validating the address, and then using the user input directly as the email address to send the token to; as in: systems that will send token to user@real.com;attacker@evil.com.

One bug everyone has in their password resets: they don't cancel outstanding tokens when users change their passwords, so that long after a user has reset their password, their email boxes still contain password-equivalent tokens. That's not a high-severity bug, but it's a meaningful one.
Building a More Inclusive Startup: Introducing the Diversity Dashboard
I spent a week consulting for a small education software start-up and was horrified when I saw that their password reset process was the following:

1. An anonymous person sends a message via Google Chat to the support Gmail address.

2. A staff member would ask the anonymous person for the username of the account for which to reset the password.

3. The anonymous person would present the username.

4. The staff member would reset the password and create a temporary password and would then give that anonymous person the password. The staff member would then explain how to change the password once the anonymous person had logged in with the temporary password.

I spent too long trying to explain to the staff and the CEO why it was a problem that any person could gain access to any account...
That's not accurate.

The Iraqi body count project concluded 174,000 Iraqis died due to the conflict (both the invasion and civil war), between 2003 and 2013 (with between 112,000 and 123,000 being civilians).

The Associated Press reached a similar number, based on the Iraqi Health Ministry.

The reports claiming upwards of a million died aren't even remotely credible, and were all based on extremely small household surveys.

https://en.wikipedia.org/wiki/Casualties_of_the_Iraq_War
This robot can make you an egg sandwich
The next wave replaces the current. How can I survive as web developer after 30
I just wish the code was in Ruby... but having the author released all this material free I don't feel like actually complaining :) it's more of a subtle hint than anything else.. ;)
The related element is this: if the team behind nginx somehow all get by the same bus, I am confident someone appropriate will pick up and maintain the product.

In the case of an ASM project, I would be very surprised if anyone came along with the appropriate knowledge to ever want to touch the codebase. LibreSSL is currently pulling bits of ASM out of the codebase just to remove that factor.

Like Jerf said, I want to be clear that I'm incredibly impressed you got this project over the line, and I can't make any complaint about how you've done things.
Is there any proof that they wouldn't?
Does anyone know why someone with sleep apnea cannot be a bone marrow donor? I've tried to sign up in the past but I was rejected for that reason.
Twitter.

I was in an Austin Ruby meetup when these guys came in who had a music startup (this was when everyone and his dog had a music startup). They were hiring for the startup, and they presented this side project they had. They described it as "basically your myspace status, only that's all there is".

Thought the music startup was dumb and Twitter made it look smart. They were hiring. I could have been a really early hire…
Plannr
* Accepting the email address to send token to from web user,
validating the address, and then using the user input directly
as the email address to send the token to; as in: systems that
will send token to user@real.com;attacker@evil.com.

Ouch, that's really devious and extremely clever.
I think there's a distinction that needs to be drawn between the need for some drastic measure to decouple the Greek economy from it's disastrous management by the Troika and the methods used to accomplish it.

What makes todays reports bombshells isn't the idea that Tsipras (more accurately, the Syriza Left Platform) had a Plan B involving the drachma. Approximately everyone who reported on the Greece/EU showdown noted that Plan B would somehow involve the restoration of the drachma.

The bombshell is that they had a plan to do it by fiat, extrajudicially, in the process seizing 10-15Bn EU from the Greek treasury in the hope that they could parcel the money --- which wasn't properly theirs --- to keep the government running during the transition.

The reports suggest Left Platform, Varoufakis, and Tsipras were planning on rewriting the entire Greek financial system, without any consultation with the Greek people beyond the agreement of the Left Platform faction.
> I won't rule out the possibility of some exotic build having multiple powers, but the ones you interact with on a normal basis don't.

Mine does, and it cost $120.

http://www.amazon.com/Panasonic-Countertop-Microwave-Technol...

(I don't find that it actually makes a difference when using it, though.)
Does anyone catalogue best practice for these sorts of functions anywhere?
Indeed. I'm white and male, and mouthing off to a cop once is the only time in my life I've been arrested.

Maybe I have a legal right to do so, but I'll never be doing it again.
You act like she's a martyr. I don't care if I'm just standing in my front yard, if the police decide to arrest me, I'm not going to fight and kick them. The police are just the errand boys of the law. Fighting and screaming like a caged animal is stupid, and in itself makes you a criminal.

'See what she got when she was in jail? They obviously killed her and staged a massive government cover up. You have to fight them to the death if you disagree with their judgement in any way. We just have to train the police to let people go if they disagree strongly enough.' Right?
> Hah, maybe if you're lucky enough to actually hit a human

To be fair, Valve is probably not fit to have proper consumer support since they are still a very small company (with a HUGE customer base). Unless they decide to invest in headcounts to have proper support, that is.
For me, I have connection criteria for a configuration database as environment variables... the config library will then connect to the configuration server with those credentials and get everything that application needs to connect to other services... I'd considered using etcd for this, but was unstable for me at that time... I keep settings cached for 5 minutes, then the library will re-fetch, in case they changed.
This is not unique to developers. I can say for my country (India) that every doctor "dreams" to start his own hospital. Every CA or lawyer wants to establish his/her own firm.
Nothing but love for these

http://www.soundmagic.com.cn/en/products/Details51c33p34.htm...

Incredible sound for $50, best earbuds I've ever had* and they block out outside noise well too.

*For reference, my other headphones are AIAIAI TMA-1 and Audio Technica M50x.
I wish it was only one to two weeks. It took me nine years to get my primary Steam account back after a billing error on Valve's end. Tickets would normally come back with, "It's banned and we won't tell you why." Not VAC banned, just banned from being used.

The days of caring never really existed in the first place.
What’s your alternative suggestion? I haven’t seen any plausible proposal for a way Greece could have gotten off the Euro on short notice without the ECB throwing a tantrum and a complete meltdown as a result. Which is probably why they decided not to do it, and are now stuck in permanent miserable limbo.
Absolutely could not agree more. The thing that even clearly named schemas, tables, columns, etc. miss are context and intent. If you have that context already you probably don't need much by way of documentation. But as someone that gets called into clients to work through their databases, I spend a lot of time trying to figure that context and intent. If it's documented, that learning curve is reduced greatly.

I usually do these comments on all objects regardless of how obvious the names and code may be. If even only for the reason of ensuring that doing this discipline remains second nature. I also like to remember that I'm not doing this for me, but rather for the client's team and others that come after me to work on things.
The Amazing Indie Dev Career Fortune Telling Machine 5000
sigh another angry gamer with no patience for theory. If you believe Sarkeesian (or anyone else for that matter) does indeed have an invalid argument, you've got to provide evidence to that effect, not just ad hominem blather. Mildly interesting point about these efforts possibly not doing much to get women into the industry today but overall this is whimpering not worthy of HN.
Ask HN: How can self hosted apps(browser) converse with no central medium?
I'm currently working on some open net tools. One last piece of the puzzle for me to bring my proof of concepts to life is to get social network apps hosted across multiple domains, to talk to each other.

The scenario is this:

Person A and Person B host their own versions of an open source version of twitter on persona.com and personb.com respectively. Each person is currently logged into their own app and are happily "tweeting". Person A discovers person B's site and sees a tweet they'd like to reshare. Upon clicking reshare, Person A's app should make a request to Person B's app saying "I'm resharing". Person B's app would respond saying "ok. here's the tweet you are resharing along with other meta info. I just increased my reshare count to 1". Obviously this would happen over an open standard API.

The kicker here though is, when person A clicks reshare on person B's site, how does the browser know that persona.com should initiate a request? How does it get the token from person A (so that no one can manually craft their own requests to get person A to reshare) and say "fine, it's person A who wants to do this reshare"?

Right now I'm stuck at the point where it feels like some central medium has to be watching over both sites so the intermediate request would go to central server saying "hey, this token (no idea who it is) just said it wants to reshare person B's tweet". The central server would match token to person A, and say "hey persona.com, you need to do a reshare on this tweet" from which point all would function as normal.

I desperately want to remove the central server but current protocols just don't seem to allow for it. Funnily enough, this would be simple on a mobile/desktop app. But on a browser app I'm completely stuck. Once person A leaves persona.com, the browser has no way of knowing that it should contact persona.com with a token when reshare is clicked.

Is a central server really the only way to go about this?
> * Accepting the email address to send token to from web user, validating the address, and then using the user input directly as the email address to send the token to; as in: systems that will send token to user@real.com;attacker@evil.com

If you do a "is this even a valid email?" check and a "exists user by email" check with that input (assuming no SQLi, of course), would this even be possible? I'm failing to see what the vulnerable code would look like in that scenario.

> One bug everyone has in their password resets: they don't cancel outstanding tokens when users change their passwords, so that long after a user has reset their password, their email boxes still contain password-equivalent tokens. That's not a high-severity bug, but it's a meaningful one.

This is solved by simply deleting the tokens after reset, correct?
Hell, I recently saw an application where there was unchecked input for being able to download files outside the application... if you passed it a path of, for example `../../somefoo-file` would take you out of that application's path.
Due to the 2000 character limit I couldn't add the following:

I'm sorry if this comes across as a question that belongs on Stack Exchange. It's a genuine problem that I've been putting off for the last two years, and I finally need to address it. IRC's and other resources have all eventually pointed me in the direction of central servers. I even tried using custom url prefixes like "reshare://" but the experience is terrible since any site can attempt to set the protocol handler for reshare://. Imagine browsing to a random site (like a torrent seeder) that tries to hijack the reshare:// protocol. So currently stuck. Would appreciate any feedback and thoughts on this.

Thanks :)
To be fair, last I checked valve is a multi-billion dollar company, not some small-scale startup. They could easily build out a quality support infrastructure but choose not to.
Not my opinion, but what I think lukasm was getting at is that a majority of players in the startup game aren't VCs or founders, but suckers taking low wages and/or options and/or insane hours on the promise of a big future payout that never comes.
Because photons travel at the speed of light, we need to consider relativistic effects. Under special relativity, classical momentum (mass * velocity) is not actually conserved. To achieve conservation of mass, we consider the "inertial mass" of an object instead of the classical mass, where the intertial mass is given by:

m'=ym
y=1/sqrt(1-(v/c)^2)

As you can see, y>1 and y approaches infinity as you speed approaches the speed of light. This is why we say that the mass of an object increases with its velocity, and that any object with mass traveling at the speed of light will have infinite mass.

Now consider the momentum, p, of a photon. We have:

p=m*y*v
m=0
y=infinity
v=c

this gives us p=0*infinity, which is indeterminate, so we cannot use this equation to determine the momentum of a photon.

Instead, we can use the engery-momentum relationship, which states:

E^2 = (mc^2)^2 + (pc)^2

(This is a generalization of the famous E=mc^2 equation to also consider the momentum). In this equation m refers to the rest mass, not inertial mass. Because we are dealing with a photon, we have m=0, which gives us:

E^2=(pc)^2
p=E/c

Indicating that the momentum of a massless object is proportional to its energy.
> There have been countless detailed refutations that dismantle pretty much every argument Anita Sarkeesian has put forth

Does anyone have a link to such a refutation? I've always found Anita's videos to be strikingly articulate, well-cited, and seemingly watertight in their reasoning.

If there's an equally intellectually rigorous rebuttal, I'm interested to watch it. But so far, the rebuttals I've seen have been lazy in their logic, or went after strawmen, or were splitting hairs over a one-time poor choice of words (the example embedded in the link above).
The fact that posts like these get upvotes makes me want to delete my hn account/bookmark
The first thing that came to mind when I read this headline was Valve's famous structureless work environment. If there's no structure, who handles all the grunt work noboday wants to do... like security?

Even if somebody is explicitly assigned to security, I'm not very confident they'd have the authority to make all these freewheeling ad hoc teams adhere to good practices.