skysight-inc/HackerNews huggingface dataset:
The #1 problem with public schools today are parents. Specifically, American parents (point made to differentiate immigrant families).

Even the most challenged or unmotivated kids can be turned into achievers.

But the kids that never respond to education are the ones who have parents that don't care if they don't.

Throw all the money you want at Newark public schools. Their output will be little different a couple decades from now.
I've always wondered about this (not being a code-monkey-ninja-wizard, myself)...

If you open source something, unless it's perfectly written, wouldn't the hacking potential be... near 100%? If everyone can see how you do everything it seems like even a minor slip up will potentially surrender your site.

Could someone explain this (I'm probably missing a piece of the puzzle I can't place)?
I've read Managing Humans (his first book). If you like the writing style from his blog posts, then you can expect more of the same. It's a good read, though perhaps a little abstract. If you're looking for a step-by-step guide for managing software teams then Managing Humans probably isn't for you. However, if you want ideas and concepts that you can play with, then it's worth your time.
John Forester's "Effective Cycling" is the textbook on riding safely in traffic.

His book has many diagrams explaining many common riding in traffic scenarios.

http://en.wikipedia.org/wiki/Effective_Cycling

> Forester summarizes the rules of the road for vehicle operation in five principles:

Use the correct half of the road, and not the sidewalk.

Yield to other traffic as required.

Yield when moving laterally across the road.

Choose the correct lane and position within the lane at intersections and their approaches, based on your destination. For example, a cyclist planning to go straight through an intersection should avoid getting stuck in a right-turn-only lane, where it is easy to get clobbered by a right-turning car; a cyclist in a through-traffic lane may get a few surprised looks but will probably not get hit. Choosing the correct lane and position often involves taking the lane when the lane is not wide enough for a car and a bike side by side.
Between intersections move away from the curb based on speed relative to other traffic and effective lane width.
Ah yep, I guess it'd be good to have a pure PHP fallback for HTTP parsing.

Also, I've pretty much developed my own PHP style. I don't follow PEAR conventions.. I go with what looks clearest to me. So obviously you'll want to take my advice with a grain of salt.
I'm not a big Apple fan, but I think Jobs gives his users exactly what they want. That probably isn't what is right or what we want, but we're not the users he wants.
You forgot that the Mayor of D.C. and his School Czar, after spending years actually making progress in improving D.C.'s school and cutting costs, just lost the election to a new guy who swears he's going to fire the school Czar because she's mean.
Curious to see this research. Are you arguing that there's no correlation between school budgets and outcomes?
In my few months with Couch I've found it to live up to its "relax" motto, at least until I hit pagination. What you have to go through will seem grotesque to anyone coming from SQL.
I loved it. I actually got to try the alpha, and see what it contained. Major sales point, though I haven't nabbed it yet (for fear of it consuming time I should be spending on my capstone essay).

Would love to see Mac performance improve, though. It suffers quite a bit. Methinks Notch is not a graphics wiz, though maybe a closet genius in emergent gameplay. I suppose I can hope, one day, for an OpenGL (ES?) implementation.
Nearly the same thing happened to me back in May (hit by an oncoming left turn, ambulance ride, broken bone, etc., and just a few miles away from the OA's accident) and my phone got the whole thing.

The recording is an interesting souvenir. I was in a strange mood for the first few days (suddenly confined to my apartment with very limited mobility) and got a kick out of showing the recorded track to anyone that came to visit, watching their horrified reactions to "Here's where I got hit, and over there is where I landed..." Thanks to a little Python script I'd written a while back, I had the track colored according to speed, and that made it even more "fun" to look at.

It's weird to think that stuff like that -- and with that level of detail -- will be around for future generations to look at.
Unable to play? Or unable to find things to do? (serious question)
And this matters because?? I've heard Larry Ellison is the most illiquid billionaire, as he finances everything with loans against his massive equity in Oracle. He's still in the top 5 richest people. Zuckerberg is no different.
Ask HN: Review my startup - thewillcreator.com
Please help me review my minimum viable product. I'm looking for some feedback on the design and workflow. This is a site to create a legal will by answering a series of questions.

Http://thewillcreator.com
I really hope the fellow behind Dwarf Fortress sees this success and starts charging a small amount for his releases.

I think the following DF has (despite its rough state) would provide impressive revenue and allow him to bring on employees to help build his game while earning him a comfortable living.
I can probably go all night on this, but a couple things from a quick read of this (very good) post:

First, mass assignment.

The answer to mass-assignment bugs is "attr_accessible". Accessible attributes can be set via update/build/new; nothing else can. Every Rails AR model should have an "attr_accessible" line in it.

I've met smart dev teams working under the misconception that attr_accessible means "these are the attributes that can be changed based on user requests", and so virtually everything is made accessible. No! If something's not attr_accessible, you just set it manually (user.foo = params[:user][:foo]). It's not painful and the extra line expresses something important ("this is a sensitive attribute"). Attributes are inaccessible until they prove themselves mass-assignment-worthy.

Second, the string interpolation in the regex.

Real quick: don't ever let users interpolate arbitrary strings into regular expressions. Regular expression libraries are terribly complicated and not very well tested. To illustrate (but not fully explain) the danger here, run this line of code:

ruby -e "'=XX===============================' =~
/X(.+)+X/"

There are worse things that can happen to you with regex injection than a trivial DoS, but that should be enough motivation.

Oh, one more thing: I appreciate Patrick's take on systems failures breaking Rails apps before underlying crypto flaws will, but even if they had protected their keys, their crypto wouldn't have worked. Don't build things that require crypto. You aren't going to get it right.
Why does he remind me of Beeker in that photo?
He might want to adjust the grammer of the title so that it is past-tense

Or he could leave it and I am sure a screenshot of it will pop during a flame war about rails :) (or somebody will respond 'Try PHP, David')
On about 80% of our projects we'll never see source code. Not having source code is a speed bump for a professional appsec tester. The problem with Diaspora isn't that it's open source; it's that they launched their open source project when it wasn't ready for that.
Not to be totally nitpicky but if they're using any recent version of Rails (I haven't looked at the source yet), the DESTROY action doesn't respond to GET by default. That doesn't change the fact that they don't scope deletes to the logged-in user's assets.
Just about the only thing you need to know - careercup.com. No I'm not spamming, that has questions from all sorts of companies, Google included. Not as a way to memorize answers, just to let you know & help get you up on, the kind of things you'll get asked.

Here's another good post on the whole thing, the comments are good, too:

http://steve-yegge.blogspot.com/2008/03/get-that-job-at-goog...

He's verbose, but skip to where he's talking about what you're after.
Having source code makes both attacks and defenses easier. It isn't automatic that a bug present in source code will be caught, either by attackers or defenders -- "a million eyes make all bugs shallow" is basically horsepuckey. The bugs in the PNG processing routines, for example, took something like a decade for someone to find and exploit. All Java implementations of OpenID are OSS. All are vulnerable to timing attacks, at least as of a month or so ago. I implemented one of them and passed my implementation past our resident God King of Engineers and he didn't see that fault, either.

Now, if you're a highly anticipated project and you're making errors covered in every Security 101 article which happen to be very visible, then OSSing your code makes it highly likely that people will see those, for good and ill. What scares me for Diaspora's future isn't those errors -- it is the part of the iceberg below the waterline. I mean, if you're steaming at full speed towards a gigantic "I'M GONNA RIP UP YOUR BOAT!" sign, there is probably something underwater and I doubt any qualified security guy (I am so not one) will donate you a few tens of thousands of dollars to tell you how screwed you are right now.
The latter. It's totally possible I'm missing something, but I checked the site's wiki and can only seem to pick up flowers, beat cows to get meat, and pick up tiny little trees.

How does one actually PLAY?
The idea is that people can help you eliminate insecure methods--if the code available. "Security through obscurity" leaves you with no assistance and engenders a false sense of security where determined attackers are concerned.

That said, MPWILGSIANSE (my password is LadyGaga so I am no security expert)
Awesome Ruby Regular Expression Web App
That's why you don't run pre-alpha code on a production server. The advantage of publishing code this early is that people like the author can point out flaws and help secure the software.
POST vs. GET is a little bit of a red herring anyways, since either method works for CSRF. (I'm adding to your comment, not amending it).
The Secret Lives of Big Pharma's 'Thought Leaders'
Wrong again (as you've been this whole thread): we use meter in that sense all the time: "gas meter" (both the name of the thing that measures the natural gas usage by a household and the thing that measures the remaining gasoline in a car) uses "meter" in that sense.
Grab a copy of Equality and Achievement by Riordan. It's the best introduction to education research there is. The cites on financial issues are in the chapter on between school effects.
Every Rails AR model should have an "attr_accessible" line in it.

I'd do you one better: use an initializer to monkeypatch ActiveRecord::Base and fire "attr_accessible nil", which will cause mass assignment to fail on any object you create from a class which doesn't make the assignment explicit.
I completely agree that you should not ride on the sidewalk. It's much safer to ride where cars are looking: the road. Wave, use your lights, anything to get people's attention, and assume the cars do not see you.

However. If it's night time, and i'm riding up a busy 45mph street with no bike lane, you bet your ass i'm riding the sidewalk. I'll be paranoid and stop at every single vehicle or pedestrian crossing, but i'll ride the sidewalk. I know the kinds of people that drive these streets, and I know it only takes one asshole veering 12 inches into the side of the road to send me flying at a pole and potentially back into traffic.

Drunk drivers, drivers on cellphones, people not watching the road, people looking for loose change in the glove box, or just freak accidents. Any single event could kill you on a bike. Where I live we don't have the luxury of taking up a whole lane of traffic to bike safely - if you do, the least you get is harassed (horns, trash thrown at you, threats). If they're driving an expensive car you're more likely to get run out of the lane because they know they own all the lanes.
No idea why anyone would have downvoted you: http://www.youtube.com/watch?v=sp7yv67B5Sc
Yes, really. The original sentence was this:

"Stressing scalability so much put somewhat in shadow what in the 80's was one of the most interesting meters of software coolness [...]"

This parses perfectly fine with this meaning:

"The stress people put on scalability now has shadowed one of the most interesting measurements of software coolness in the 80's."

I'm not saying that the sentence can't be improved, but that you're wrong when you say that it's nonsensical.
"Specifically, American parents (point made to differentiate immigrant families)."

Well, mostly involuntary minorities and low-SES groups. (To use John Ogbu's words.)
OK, my mistake. I assumed Sun were still great at building processors (and they got killed only because they were disrupted, in the Christensen sense, like Digital were.)

I now make a further assumption that the remaining echo $((`wc -w`-6)) 315 words about the importance of technical talent are OK. :-)
Incorporate Web APIs to spark computer programming exercises
Samsung Tab priced at $999 in Australian money, ships November
This "Why Iran" stuff boils down to one SCADA security guy saying "the larger number of systems infected in Iran suggests that Iran's nuclear program is a likely target". I've paraphrased, but not by much.

As for your circumstantial evidence... what is it? I think you've conflated supposition with evidence.
I'm certainly not qualified to argue with you on anything security related (nor would I want to). I'm simply clarifying Rails default handling of destructive actions which is probably semi-offtopic.
One thing you will surely regret at the age of 80 is if you will still have to work part time, not having saved enough for retirement. Starting a startup that fails costs you several hundred grand (which I know from a friend who started a startup that failed). For many people, although certainly not for Jeff Bezos, several hundred grand is a significant chunk of their total retirement savings.
I imagine somewhere between 100 and 6000 million dollars the value of money becomes such an abstract concept that it really doesn't matter at all.
Meth is a terrible drug. <j/k>
Newark spends about $22,000 a year on each of its 40,000 pupils, but only about half of its students graduate.

That's over $260,000 per student over 12 years!

It's great that Zuckerberg is donating about $100 million to the worthy cause of education, but in this instance I find it hard to believe that lack of money is the problem.
Thanks for the comments. I appreciate everyones incites.
They're taking a page from T-Shirt Hell PR book - those guys even made it to the Techcrunch post.

Good move in any case. Will attract new people who would never known about them before.
That's clever. Want a job? =)
You have only this many five-years projects left to complete in this life. If you really prefer learning a foreign language to learning quantum mechanics, or computer programming, or how to play a piano, by all means don't let me stop you.
Preventing users from downloading the games they paid for, and bringing down all the user-generated content in the forums, was not good buzz. Seriously, you should never take down other people's content (the forums) without warning.
Creditable - Personalized Credit Goals Without Getting Personal
I built a magento ecommerce site about 1 year ago. Here's a quick summary of my experience:

Pros
- Beautiful themes out of the box
- Easy to setup initially (i.e. payment plug-ins,etc)

Cons
- Extremely slow on a shared host (i.e. netfirms)
- If your host is slow, using the admin panel to manage the content is painful

The performance issue killed it for me. Unless you can spend some more money on a good hosting service, I'd stay away from it. Otherwise, it's pretty awesome out of the box.
I like it, reminds me of Songza. The interface is nearly there too, in my opinion, just needs to be cleaned up (and colors changed please). Are you guys pulling songs from YouTube like Songza or some other source? Great work for two freshmen, keep it up!
Play Floss Floss Dance and Toss online from y3 Games club
Dance Dance Revolution similar game with live action dancers.
Cringe moment. Package being opened followed by a scream "oh my god, it's a bomb!"
I've played with this and the performance improvement is trivial with modern browsers/servers.

Way more hype than reality.

Before messing with cookies, when it takes over a second to receive the core webpage (before the other objects, stylesheets, scripts, images) in Chrome no less, you need to take serious look at how you are rendering the page on the server, ie. WordPress. You get enough cache misses with WordPress+plugins and your servers are going to be crying.

The article is also missing some important info for analysis, how large was each of the transmitted parts? How large was the base webpage? Was gzip compression used on the server?

Why not use localhost to eliminate transmission variances and prove with 10000 cacheless page fetches if cookie-less really helps or not more than a few percentage points?
Great! I did a couple obscure searches and it worked. Two questions?

a) It's an html5 version of the player possible?
b) Aren't you afraid of RIAA and such?
But I hate it when old people try to tell me how to live!
Fantastic Fest curates the YouTube homepage
The goal is simplicity. The new design will definitely be better on the eyes, but the simplicity will remain. Songza lost the battle against saying "no." We'll try to succeed.
"For example, if you were logged in to a Diaspora seed and knew the ID of any photo on the server, changing the URL of any destroy action from the ID of a photo you own to an ID of any other photo would let you delete that second photo."

When I was working as a pen tester I would completely scold developers for letting this happen - telling them that with everything we know today about security and good programming practices there is no way you should allow that to happen. Off by-one bugs, timing attacks etc. are more excusable, but this, this is just amateur hour.

That was 11 years ago.
One problem I'm having so far is that volume seems to vary from song to song - I'm not sure if this is something that can be fixed but it can be pretty annoying at times.
simplicity.classexception.com
HTML5 may happen in the future, we're definitely taking a hard look at it. The RIAA isn't a concern right now, as none of the content is hosted ourselves, but it's still in the back of our minds.
An utterly massive part of the game is through crafting: http://minecraftwiki.net/wiki/Crafting

You can't get anywhere without it, and yes, it's very boring if you're not a total-sandbox-fan playing multiplayer. And the game does utterly squat to inform you that it exists. It took me an hour of poking around before I found that page, and then it all clicked.

So maybe I should warn you: it gets way more interesting when you start crafting. You start planning. Exploring. Fighting back against the zombies. Some caves are massive - light them up and find veins. Earning the ability to build your floating fortress is strangely rewarding.

It's also an oddly beautiful game in its simplicity - your lit caves are visible from a long way off with a soft glow, and you'll quickly find that light means safety... until the spider-riding skeletons start chasing you when you venture too far. And it's kind of creepy how quickly you start to feel ownership over what you've made.
I think this advantage is further leveraged by the constant stream of updates he's putting out.. every week there are substantial updates to the game that have users finding better and better value for their money.
Would love to know why this is downvoted. Thought I was asking a legitimate question ?
CarWoo! is also in need of an awesome RoR systems engineer:
http://carwoo.com/jobs
Punch a tree trunk into logs, then craft a wooden pickaxe. Then go dig some coal and rock.

http://minecraftwiki.net/wiki/Crafting

This took me a while to figure out, since the pickaxe is the key to starting up all the crafting chains, and making the first axe head out of wood isn't very intuitive.
You two, get a (conference) room :-p
Dude, a friend of mine is in D.C. right now with top clearance. Rails and Java developer. Would love to get him out of the crappy contracting gig he is in. Shoot me an email and I will have him at your office in 2 days.

Cheers!
Yeah, I found that page.

The problem is, I don't see any zombies. All I see is terrain and flowers. And the occasional cow/sheep.

Do I just need to keep looking? What am I looking for? How do I get the different types of blocks? I found some by hitting the sheep (or whatever they are) but the same thing didn't seem to work on trees or terrain.

Gah. I do enjoy the freedom of the game. But I need to do something soon or I just lose interest and quit.
His regular "secret Friday" updates make noticeable spikes in server usage. Hopefully he gets back on that schedule.
http://www.youtube.com/watch?v=0VWnQHS-ffs

http://minecraftwiki.net/viewtopic.php?f=35&t=35905&...
Would appreciate if more articles like this are posted on HN, useful and practical!
Playing... infdev? or alpha? I think only Alpha has enemies. Or whatever the free weekend played.

edit: With only exploration I didn't get any real interest. Personally, I'll probably get hooked when larger mobs come out, and when you start having to defend during the night from mobs which damage your fortress. Otherwise your investment is always secure, and there's no real threat that can't be solved by boxing yourself in and getting a sandwich.
"NoSQL Doesn’t Mean No SQL Injection"

I lol'd. Mind if I use that?

MongoDB is harder to secure and filter because you have all of Javascript to worry about, rather than just SQL (and where most servers can escape arguments themselves through prepared statements etc.).

SQL databases are also well understood (for eg. in MS-SQL I can stop the remainder of the statement from executing with '--'). MongoDB with its JS engine is still a big unknown.
Mark Zuckerberg To Give $100 Million To Newark Schools
Aspergers is a symptom, I did not mean it to be taken as a slur. In fact, one difficulty with it is that people who have it are often only marginally aware of having it. That is why they find it difficult to even seek help with the finer nuances of social interactions.
It's a style, not a technology anymore ;)
MBT Chapa,MBT Anti Shoes,Discount MBT Shoes
And in 8 hours time, I will have forgotten them, instead of picking up an old classic that caught my eye right now.
This is just Larry "consolidating." (Larryspeak) http://goo.gl/fb/gNsvQ
The initial game with the day cycle and the monsters coming out at night is genius. Really taps into a primal light-and-shelter instinct. Also the light management with cave exploration is great.

However, once I figured out a wooden shack with a door built in a couple of minutes completely thwarts the AI enemies, I lost most interest. The setup is player against the world, but the world doesn't know how to do anything you'd need a huge stone castle or a massive trapped dungeon to fight against, so the great build system feels a bit pointless now.

Got to hand it to the author for making excellent core mechanics from a very simple set of ingredients. I hope he can keep up working on the style and figure out enemy mechanics you actually need serious constructions to fight against.