skysight-inc/HackerNews huggingface dataset:
> most programmers write code as in the language they first really used, regardless of the language they're actually using

I doubt that this is true. I can't quite remember, but I'm pretty sure the first language I ever used was Color Basic. I've forgotten quite a bit of it, and it has pretty much no influence on my programming.

The first real programming I did was with structured imperative languages (Game Maker was the first thing I used for anything real). The code I wrote bore almost no resemblance to Color Basic, and while I was using these languages, solutions to problems using the tools of structured imperative programming came to mind much more readily than solutions using the style of unstructured Basic.

Later, I learned Haskell and functional programming. For the first while, everything I wrote was like a puzzle. I had to think for a long time to do things the functional way. But after having used it enough, while I'm in Haskell, functional solutions come just as readily as imperative solutions come while I'm in those languages, perhaps even more.

Of course, people who are experienced with one language and inexperienced in another will try to apply the idioms from the first language in the second whether they're applicable or not, but programmers do not always write code as in the first language they really used.
John Locke is a Cargo Cult programmer. He parrots the code without understanding it.

In the context of the series, John ran on faith, Jack on science. John ended up dead, and used as a pawn, without ever really having understood anything.
Anyone else expecting the 17th century philosopher?
How many social smiles are actually genuine?
PHP has been known to provide convenient footguns in the past (e.g. register_globals, mercifully depreciated), so it's not surprising that security-minded people give it a hard time.

Think of it as the difference between the language keeping loaded footguns under its pillow with the safety off and keeping unloaded footguns in a locked gun safe. One is a lot less likely to get used than the other, even if either one will shoot your foot just as well.
http://news.ycombinator.com/item?id=2352211
Thanks for the hack. I'll try it out some time.

The thing is though, why do I need to jump through hoops to get meta-reviews?

The iTunes Store is displayed as web pages within a deficient browser (iTunes or the iOS app). It's the web stripped of its greatest utilities. Worldwide participation and annotation, extensibility, customizability etc.
oops, my mistake. Edited.
I picked 6 because it was closest to my cursor when the row of numbers popped up.
I think I once read a quote by Peter Lynch where he said something like, "I know things are looking good when I'm at a party and people ask me for investment advice. I know looking bad when I'm at a party when people are giving me investment advice."
I was hoping for it.
Adam's specific examples are really awful and full of stereotyping, but his general sentiment is fairly accurate.
At some point I think sitting back and letting things take their course is the best option. There isn't much debate to be had about the issue that hasn't been had before. Adams just managed to stir up two hornets nests at once by commenting on something that he wouldn't normally talk about. I don't know how many conversations concerning men's rights I've tried having with a person where it boiled down to some level of outrage, at some point it's easier to just drop the topic all together.

I wonder why/how a Men's rights group decided to rally for Adams to write about it?
> When the default expression is "gloom", it's impossible to separate "default gloom" from "actually unhappy."

What happened to neutral? Isn't it a false dichotomy to presuppose that you can only have one or the other.
Also Dilbert: http://dilbert.com/dyn/str_strip/000000000/00000000/0000000/...
If you know exactly when the bubble will burst yes. But betting on derivatives could be expensive if your predictions don't come out true.

IMHO, facebook can weather any bubble burst -- you might want to bet against smaller companies, but most of them are not publicly traded.
What about: How hard design is, and how you're hiring because you don't personally have time to be good at it.
A Girl’s Nude Photo, and Altered Lives: 8th graders charged with felony
Twilio Powered app umake.me sends free sms and lets you check status if read
http://umake.me is a twilio powered app that lets you send 100% anonymous flirtation txt msg's and lets you know if its read. check it out and let us know what you think.
You're incorrectly implying that Steve Jobs is technically proficient. He's an electronics technician and a cult leader, not a hacker.
Nokia vs. Apple: impact analysis, next steps, and an updated visualization
I am not sure. I tried email because I was new to Google App Engine and I was trying to learn how to send and receive email; and also email appeared to be easiest. I vaguely remember reading here that the younger generation do not use email anymore. An sms version will make this service much more fun to use, but that's something to consider later.
Please make the upvote-button a tad bigger
Evolution of Foursquare
Always worrying about my abilities
haha i think you missing the point. It's good software development practices. Not who I can extract an allegory from.
It's also wrong, human photoreceptors are more sensitive to green wavelengths than blue or red.

http://en.wikipedia.org/wiki/Green

"The sensitivity of the dark-adapted human eye is greatest at about 507 nm, a bluish-green color, while the light-adapted eye is most sensitive about 555 nm, a yellowish-green color"

It's why night-vision systems are geared to green, but displays that preserve dark-adapted vision are red.

http://en.wikipedia.org/wiki/Red

"Red light is also used to preserve night vision in low-light or night-time situations, as the rod cells in the human eye aren't sensitive to red."
What is Color, the $41M app?
I read that as "WheresYourDickBeen" and briefly thought that someone had cracked into the next-generation e-stalking scene.

Sadly, the actual product is a lot less scintillating.
Async URL Fetch for Google App Engine
You can find some buildings in the US with no 13th floor.
Rehashing old design floors is not an excuse to blame PHP for programmer error.
1k?! That's crazy talk. Totally agree with you. Side note: I'm looking for a designer now for a new web app I'm launching late Spring/Early summer. Well funded. If you're interested in learning more about the project shoot me an email at turnbullalexander at gmail dot com.

Cheers,

Alex Turnbull

about me: http://about.me/alexturnbull
Under conditions where you know there is a word for a thing but can't recall it or conditions where you don't know if there is a name for such a thing?
You will be able in a straight-forward way to extend this to allow any possible query.
Hey everyone I was just wondering if anyone else seems to be this way as well?

If so, how has it effected your professional life.
It's true that I don't find myself particularly inclined to post on lkml — even though people were polite to me there when I was being kind of an ignorant asshole, I feel a bit intimidated by the brusqueness of the inner circle.

But I don't think I'm really in a good position to advise Linus on how to manage an open-source development community. Linux seems to be running at a high level of average competency despite the occasional hostility. Who am I to say that the hostility is dispensable? I'd like to believe it is, but I want to see an existence proof.
just love how she sounds innocent and sort of a hippie but seems to actually be a shark deep inside :)
Clickable: http://www.moodalytics.com

OK - my $0.02 ...

What are the implications? If I login with Facebook, will you spam my friends? What will you do with my data? Is there more than there appears?

I'd like to know more.

Also, look at the icons, I really don't know which of those best fits, partly because I'm kinda just neutral, and partly because I don't know what most of them mean.

But looks reasonably slick. If I were a web coder with time I'd certainly be in touch. But I'm not. And I don't.

Good luck!
Try laugh yoga: https://www.youtube.com/watch?v=eXgdSOxaCGI

Your body sends out the same endorphins when fake laughing or laughing for real. You are right that there is a decent amount of research showing this.
> You don't need parameterized queries or stored procedures for protection against injection ... There's no need for the database's native wire protocol to explicitly support parameterization to implement this.

This means that every protocol client must implement their own query escaping, rather than relying on the database to provide a single, normative implementation of escaping.

> For example Ruby on Rails's ActiveRecord provides an API that looks a lot like it uses parameterization under the hood:

ActiveRecord's use of the non-parameterized APIs has led to a number of escaping/injection issues in the past eg, (http://www.ruby-forum.com/topic/152058, http://gsa.ca.com/vulninfo/vuln.aspx?id=36929, etc).

> If you think stored procedures protect you against SQL injection, consider the following code snippet ...

I believe the original poster was referring to the use of stored procedures as a mechanism for preventing or discouraging unintended direct modification of the database by applications, rather than SQL injection, specifically.
A few points about the “tech bubble” debate
I also live in Minneapolis, and I see a very different thing in the social media realm than the original author. It seems to me that when someone gets a smartphone, the first thing they do is install the facebook app and then start using facebook every moment they get a chance (even on blackberries from work).

The only time I see people really using location based services is when they're looking for directions (Garmin already made the inroads there). Personally, I use a lot of location based services, but I've also been working in the field for awhile.
It makes me really sad that for a lot of people John Locke == some dude from some shitty show.
Stalin smiled quite a bit, if memory serves.
Depends on which part of the US. In New York City, there are lots of people who don't own cars, and it's not considered strange at all. They take subways or buses to work, and rent a car on the occasional weekends when they want to get out of the city. Even if you can afford it, it's hard to justify owning a car and paying for the parking space if you're only going to use the car a few days a year. (Some NYC residents don't even have driver's licenses.)
Nvidia's proof
How can a polite "How are you?" seem dishonest to you?

When you've heard it from 50 cashiers over a week and 99% of them were perfunctory "I have to say these words in case a secret shopper marks me down" efforts, you can get a little cynical.

I appreciate genuine feeling in those short exchanges. If someone can't be genuine, I wish they wouldn't bother saying the words.
"Fly the Friendly Skies" -United Airlines motto until 1996

"Multiple regression revealed r_=.135 for ‘Q20 The crew gives real, friendly smiles’. This may indicate that whilst real, friendly smiles contribute to an overall positive perception of ‘Expressive Display’ they have a small, direct influence on overall satisfaction...

The findings have shown that it is possible to quantify the effects of 'real' smiles on service satisfaction, even though, in this case is, it is rather small. There is a strong relationship between 'real' smiles and the perception of genuine care for the consumer."

-Measuring the Value of a 'Real' Smile in Service Providers’ Expressive Display: Evidence from the Airline Industry
With respect to the high thread count thing - I recently went and bought some (previous sheets basically worn out) and I wouldn't say that it improves my sleep.

What it does do though, is it feels like a luxury good.

It is this mental thing/process of giving yourself a treat, or treating yourself like 'royalty' that gives you a little boost. And it didn't cost all that much either.

Similarly, with the last pairs of jeans that I bought, I paid to have the length adjusted. Previously I'd just rolled up the cuffs(?) and they get a bit daggy. Despite the adjustment costing almost as much as the jeans did, my guilty secret is that I get a ridiculous amount of pleasure from looking down and seeing perfect length jeans.

Treat yourself, you're worth it, and nobody else will do it for you...
Whenever I see these sorts of things I try to psych them out. In this case I deliberately thought of a number, discarded it, and repeated this process several times (rather than putting down 7, which was my first thought). So, unless you're trying to measure frequency of picked numbers when the pickers are trying to game the system, I don't think this will prove much. Nice interface though.
I have never heard someone say parameterized queries were "useless enterprise bloat". Their use in modern web apps is an industry best practice widely adopted across all the Internet apps Matasano gets to test. Your reaction here sounds hyperbolic, and the parent commenter is right: parameterized queries, while helpful, are neither required nor sufficient for defense against SQLI.
If the client were to require tor, or even integrate tor, shutting it down becomes exponentially more difficult.
Let's sum this up more clearly and succinctly.

People who win at high stakes poker count in wins/losses, not in value of money earned. Poker has become a lifestyle game. It's about the prestige, not the money.
As someone who actually won something from Swoopo (a firebreathing laptop worth ~ $1000), I eventually saw the light and quit while I was ahead. All told, I 'invested' ~ $400 into Swoopo (spent $250 during the auction for my laptop and $200 in other failed bids). Not too sad to see them go. Saving fools like me from themselves. :)
re: 1), I assume you mean by passing an array with $operators into code that gets executed naively? If so, that's not just a Ruby problem; it's possible in any language, especially if you're working with a framework that automatically parses query variables and you don't typecheck/typecast before passing user data to your database.
It's just impostor syndrome. Lots of people get it, and posts by people who have it crop up fairly regularly here. Admittedly, they tend to be by people who at least have some evidence for their worries, not by top-1.5% achievers who obsessively learn things whenever they think that someone else knows more than they do.
My guesses :

1: America is a nation of immigrants and the descendants of immigrants.
People who emigrate from their home country tend to be more likely to be of an optimistic nature (or manic depessive.)
2: Russia's unfortunate history must make for a traumatised psyche in the population as a whole. By contrast America's has been one success after another.
> I can't bring the Tsunami victims back alive. What could I possibly learn from the Tsunami story? That it could be dangerous to live too close to the sea, that's about it.

They can improve seawalls and such, actually. And we can improve search & rescue operations.

> If the radiation is just banana level, why do the workers there wear protection suits?

Those don't protect from radiation very well, they're to prevent contamination. It takes several inches of lead to block gamma rays (you'd have to be Superman to move in a suit that heavy) and neutrons can activate otherwise non-radioactive elements. Alpha & beta radiation are relatively easy to block, though, but normal clothing is almost enough.

Also, it's just good engineering to take precautions. Also, near the plant, there actually are hazardous levels of radiation, it's just once you get further away that they're mostly harmless.

> And by the way, so far I have not heard a figure > 20000 for the number of the Tsunami victims, so I think you exaggerate with "tens of thousands" (it's horrible, nevertheless - but don't play the same tricks you accuse the anti nuclear media of).

I have, but who knows with the news? I've heard radiation figures from "100x normal" to "1,000,000x normal" (the LA Times had a much larger multiplier than the other papers I compared it to).

Also, remember the tsunami in the Indian ocean? Last I heard, the deaths there were on the order of 100k, if memory serves. Japan did what? 1/10th or so of that (again, depending on which numbers you believe).

I do not and cannot blame you for the media's hysteria, I'm just trying to help you not get caught up in it and to understand the real dangers that people are underestimating. Granted, you may not live in a coastal area, so you may not even have heard of seawalls before, but non-newsworthy things like improving them can save a lot of people.

But those kinds of projects will get starved for funding. So we'll end up with a lot of panicked people in California who shoot down new nuke plants in favor of coal/natural gas (the coal miners who die are in China, so there are no political consequences) and underestimate things like seawalls. California is said to be overdue for a big quake, but I hope they're wrong about that.
What really pisses me off about this is that you had to register just to be able to download the files.

So they unnecessarily had a lot of people's username/passwords for absolutely no good reason.
At the fairly large (2000+ employees) software company I currently work for, we use the laptops to drill down bug defect lists, customer/partner requests, look at waterfall development schedules and gantt charts, random email responses, wiki pages with specs and reqs, and use collaborative notepad to write up status updates.

Some people are working (coding, testing, answering customers, etc.) while others are surfing/facebooking/tweeting; but the latter doesn't really last at this company. They flail pretty quickly, likely prior to their first major product release.
Outsourcing Offshore
There's a proverb in Russian: "laugh without a reason is a sign of foolishness". I don't know where this saying came from, but it's broadly accepted to tell it to anyone who smiles. I was always told this in school, since I smiled a lot. And I'm happy it hasn't had any affect on me :-)
Yeah. Lots of them have twelve floors or fewer.
I'm Russian-American and visit Russia every few years or so.

The first time I went back, I remember getting on the Aeroflot plane, and finding out a blanket was missing (on an 8 hour flight, a necessity). I called the stewardess over and said, with an ear-to-ear American smile "Hi, it looks like I don't have a blanket, could you please get me one?"

She gave me a nasty look, and said "No". Then she turned around and walked away.

And that's when I realized I'm back home already.
In a language like Ocaml or Haskell a SQL library can make it impossible to query the DB with unsanitized queries.
I can't deny the sound logic of your first statement. (see: tautology) Reasons include anecdotes, cuteness of the sentiment, and others. If you want to defend it, do. Don't strawman my arguments, though.

You live all of the future and the past. They all happen. You're mostly arguing semantics about the future, and you're ignoring the past almost entirely. My reasons for their importance stand, unaddressed.
Do you realize that official estimates in Europe hold chernobyl responsible for about 500000 deaths caused by secondary radiation effects? Do NOT play this down. Radiation kills!
The remark wasn't an important enough part of what he was saying to put it within the first ten paragraphs, and they knew it. Hence, they didn't put it anywhere in the first ten paragraphs. But they made it the headline, because it was the most sensationalist line they could find. Either it's important or it's not -- you can't announce to the reader that it's the most important part of Buffett's message and then backtrack once they've given you their ad impressions.
Was there some newsworthy reason this rather old video was resubmitted?
Thanks for the info! Reading about it now.

I think most of it for stems from the fact that I am not an Ivy League/ Harvard/ Standford/MIT student and it seems that many people that have success in the Internet industry seem to come from prestigious schools. I think its mostly whether I will be able to compete with those graduates once I enter the workplace with them.
What if all software and hardware are offshore (i.e. in Switzerland or something)?
A Picture Is Worth A Thousand Points: Topguest Hooks Up With Instagram
It is not unreasonable to assert that SQLI defense is a framework concern, not a database issue.

The examples you've provided of Rails SQLI issues are bad ones:

* The first is a discussion of SQLI in an interface designed to accept raw SQL; it's the ActiveRecord "back door" interface.

* The second is a discussion of SQLI in a context where parameterized queries don't work anyways (the MySQL protocol doesn't accept LIMIT and OFFSET arguments as anything but integer constants); it is also the simplest of the class of SQLI concern areas (you can solve it by blindly calling #to_i on your inputs), which also includes table names, sort orders, and column references.
Science thanks you.

There you go, another smile :)
Hacking Twitter's Javascript
Thanks, RofG. In the Facebook permissions, we do not request access to your friends -- so only the actual user can share out their mood. I like your suggestion of labeling the emoticons!
Update with part of the decompiled TrustDLL code:

http://pastebin.com/DBDqm6Km
Agreed. You only own ATI once.
There is an inverse relationship between the extent to which someone labels themself as an authority and the extent to which they actually are an authority.

Corollary: Be particularly wary of medical "experts".

Second, and self-referential, corollary: Be particularly wary of "bitter" people and comments.
I was not aware of that and I actually chose 7, which is also my favorite number.
New Yorkers don't smile! (unless nobody is looking)
Thanks. Living only for today is living For a fraction of your life.

This is what I've seen, too. Today's great, but tomorrow always can be better. I live every day, and I want to live for the rest of them.
I don't understand this (or, to be honest, the parent). MySQL has a binary protocol. The MySQL binary protocol does, in fact, allow you to parse a query template and use it in subsequent calls with bound variables; that's how "parameterized queries" work.
Is It a New Tech Bubble? Let's See if It Pops
Could you expand a bit on how parameterized queries are not sufficient for defense against SQL injection (assuming, of course, that developers use the escaping and do not concatenate unescaped data into queries)?

As for them being required -- you can obviously escape queries yourself, but the normative reference for escaping is the target database itself, and reproducing escaping locally in the client brings with it the likelihood of introducing an error in the custom implementation.
Perhaps, but you don't turn around and give the shampoo producer intimate details of your life. Instead, you probably forget that you have the sample and end up throwing it out 6 months later.

They're different businesses, I'm not sure that you're comparing apples to apples.
Prepared statements do not afford you a "clean conscience". You still need to be careful with your inputs in parameterized queries, because not every input to every query can be bound as a variable. Some operations do require dynamic query construction.
I submitted this for twilio's weekly contest. Let me know what you think
Is that any different from an unknown web startup?

Typically, you can't be "at least as good as a competitor" if you want adoption, you need to be 10x as good. I guess the difference is that with Google, people will pay attention to it but bash it, while at a startup, they'll just ignore it. Personally, I think Google gets the better end of the deal.