skysight-inc/HackerNews huggingface dataset:
There's probably a kernel of truth to your comment, but that last graf makes no sense. The "security specialists" aren't writing the code with vulnerable direct object references; the "average decent developers" are. It's true that there are consultants out there that don't improve the (poor) seaworthiness of typical developer output, but few of them are so bad as to make the situation worse.

And, the notion that "good" developers turn out uniformly secure code is delusive. We're lucky to have gotten to work with some of the best run, most carefully recruited teams in the industry. You find terrifying things on all these engagements.

My advice, again as a practitioner: if your security firm isn't finding terrifying things, at least on the first go-round with an app, ask very tough questions. Ask if they need an extra week or two to catch up and get real findings. Then ask which of the two of you should pay for those weeks.

We are still finding code execution on a good chunk of our web gigs, even at the "good" companies.
* The CEO's red porsche is paid for by the company

* The CEO, in addition to his regular pay, takes a commission cut on every sale the company makes

* The CIO's new BMW is also paid as an expense of the company

* The CEO shoots down your recommendation for a bonus to one of the best employees in your department and instead offers them a $200 gift card

* The CIO & CEO make uptime a priority objective for the service - but when a plan is presented that shows that in order to meet that goal, funding will be required to bolster infrastructure, they refuse to fund the plan

* The CIO regularly makes changes to the production systems outside of any change control process and brings down the service while muttering things like "Well that wasn't supposed to happen"

* The CEO and C-level execs tell the company the option price is $X - then proceed to sell the company and inform everyone that the option price is actually 20% of $X and that those who have been with the company less than a year get nothing

* There is a foosball table and this is described in any company descriptions as a part of the "Culture"
I wish I read these reviews before buying the game, because every last one of those reviews is well-deserved.

I know no game can ever be good enough to match the 13 years of false starts and anticipation inherent in DNF. If I waited 13 years for Half Life 3, even a Valve masterpiece would feel a little anticlimactic (BTW, pretty please, Valve, please don't make us wait 13 years for a Half Life sequel).

I expect some degree of toilet humor and raunchy jokes, because that's what Duke Nukem was all about. But DNF is fraught with slow loading times, tedious cutscenes you can't skip past, and in general from the hour or so I've played it, it just isn't that fun.
This article is short but nails the biggest bitcoin hurdle I can see at the moment.

The intrinsic value of currency is given by the services and tangible products it can buy.

With a USD (or EUR or GBP or whatever) you can buy virtually everything (except, maybe, love and happiness :)), while it it wasn't for the possibility to exchange bitcoins for "actual" money, the amount of things you could buy with them would be virtually nothing, as of today.

Want to buy an Ipod from an Apple store ? You can't.
Renew your WoW account ? You can't.
Buy at Amazon ? You can't.

The only way to do that is to either go through middlemen that offers the same, or similar, products/services secondhand or exchange bitcoins for cash. And both services will disappear in a blink, if they will find they can't exchange their bitcoins for cash.

The only way I can see bitcoins to take off indefinitely is that its economy of services/products you can buy with them will grow to a point that its intrinsic value will be enough for the people to stick with them, regardlessly of the possibilit to exchange them.

But we are talking years, I doubt they will be given such breathing space.
You can navigate using keyboard (j/k).
Just to play devil's advocate...

Surely the company isn't obligated to provide free software to every reviewer, right? Why should they subsidize a review that they know will likely not benefit them?

And I have no data to back this up, but I bet really BAD reviews get more traffic than reviews that fairly discuss the pros and cons of a mediocre game. I think there's at least a temptation for less scrupulous reviewers to really slam mediocre or overhyped games more than is deserved.
Show HN: A PHP script to combine Javascript/CSS files (separately, of course)
Lossless gigabit remote packet capture on Linux
Help Shape Steve Ballmer’s WPC 2011 Keynote Speech
DIY iPad photo booth captures the moments you might be too drunk to remember
Aren't you skydiving instead of driving when you are skydiving?
This PR firm was probably paid good money to make sure the reviews are good and that the game sells. I guess they just went a little far, but they did apologize in the end at least.

Negative reviews or no, it's just a review. The writers may be able to influence some portion of the game-buying populace but in order for it to work they have to be honest with their audience. It seems disengenious to try and manipulate that relationship in your favour.
Even more interesting: What Engineering Students Think of The Next Big Thing.

Do the comp sci students look for engineers to spend summers with them at Kill Devil Hill looking for the Next Big Thing in transportation?
Nice, and now the HN home page is likely three clicks away from child pornography.
Though there are no doubt very, very smart developers scattered across Citi, please bear in mind that the wiring-up-form-fields-using-J2EE jobs in large financials are among the least prestigious in our field. These are the types of apps that are among the first to get outsourced.

Your idea that the input and output paths through a typical banking J2EE app were carefully whiteboarded seems mythologized, based on what I've seen at fisrv companies.
I was impressed by the brevity of the C solution using OpenMP (comment #81), especially compared to significantly more verbose Erlang and Haskell examples. I kept reading it, thinking, "Where's the fork?" and seeing nothing but a simple for...and then remembered that # is a preprocessor directive, rather than a comment, in C, and then googled for "parallel omp for". So, I actually learned something today from that ridiculous thread: http://en.wikipedia.org/wiki/OpenMP

Also, the Perl 6 one-liner is sort of laughably cute . I'm not sure I believe it would actually work, but if it does, the conciseness of Perl 6 is even higher than I'd realized; dropping about 9 words from the Perl 5 one-liner (which is already very small). But, I learned about the hyper operators in Perl 6, which is also cool: http://perl6advent.wordpress.com/2009/12/06/day-6-going-into...

In short, that was awesome reading over my morning tea.
I think you're talking about Seldon for this one, and you're definitely right - the Mule was unforseen, and unforseeable, and he did have spiritual successors.

I don't think Sobol really did - definitely not in the Daemon novel, anyway, every operative was following the AI's instructions. The darknet became (or at least, was shown to be) more self-sufficient later on, when there was less focus on murdering people and more on building communities.

I just didn't think it was particularly realistic to skip from A to B without everything falling apart in between - especially considering that there wasn't anything like psychohistory in Suarez's book to wave your hands around.
Someone posted an "algorithm" for sorting integers in bash by calling a function f, which sleeps for n seconds and then prints n. Smaller numbers will cause f to wake up and print earlier than larger numbers, so the result is that you have a sorted list print back.

Unless you have small numbers, or negative numbers, or very closely grouped numbers, or...

It was a joke, I think. (I hope)
I guess that's what I am saying. I am surprised they haven't done both yet. Get the non-cable subscribers with a separate package...
It shouldn't matter to you who the external firm is. Stripping out their contact info, at least in the archives, is probably smart; it makes it easier for the company to keep multiple security firms working on their projects. Which, when you're a huge bank, is what you want to be doing.
The load times are a feature. I figured it out last night when I sat down to play it. It takes so long so you have time to go grab a beer, snack, etc.

The game got better the longer I played it for some reason...
The three extra physical buttons beyond Home are my favorite Android features!

- Menu: It's nice having a go-to place to find options or additional functions. With the iPhone, it's however the app author decided to design his software. With Android, hit menu, it's probably there.

- Search: Again, having a context-sensitive search button is a big win. It pulls up the URL Bar in the browser, the Search screen in the Market, and the voice commands on the home screen.

- Back: This is the really big win. Having a constant way to have the phone go back to wherever you were previously is huge, especially given Android's "intent" system. Twitter -> Browser -> Mail Client -> Incoming SMS, and to get back to Twitter I just hit the back button until I'm there.

I'm not sure I could even use an Android phone at this point that didn't have the hardware back button.
ORM is an anti-pattern
>If I may ask how does your family consume content?

If I may ask, what makes you assume they do? I haven't followed any shows since BSG ended, and my wife watches 2-4 hours a week of stuff she probably wouldn't miss all that much. Our daughter watches an hour of kid stuff (Dora, etc.) every day (1/2 hour during breakfast, another 1/2 hour while I cook dinner), but generally prefers to spend her time playing with my wife and I. If I were to sell the TV on craigslist tomorrow there would probably be some whining for a week or three, but eventually we'd settle down into a new routine and probably never miss it.

When I "consume content," it generally comes sandwiched between a couple of paper or cardboard covers.
maybe you're just always getting increased oxygen, making you a superhuman. :)

i wonder what it feels like to have no pulse.
It is currently SFW (it seems to have images disabled).

But, the post that started it all is:

Man, am I a genius. Check out this sorting algorithm I just invented.

#!/bin/bash
function f() {
sleep "$1"
echo "$1"
}
while [ -n "$1" ]
do
f "$1" &
shift
done
wait

example usage:
./sleepsort.bash 5 3 6 3 6 3 1 4 7
With most modern languages having the easy capability of writing an extension in C, this is poor advice. You can 100% quickly mock up whatever in ruby, python etc, and when you need to, write a module in C that is plug and play. I have done this several times for calculating metrics on geodata. I wrote a ruby class to do the work, used it in production until we got a good enough amount of users (load), then rewrote it in C. My main code wasn't even touched since I had already abstracted the calculations into their own class. All this requires is you think ahead and pull out any heavy-lifting code into its own class, and you can just swap that out down the road.
Ask HN: DVCS workflow for large organization?
Hi all,

Can anyone share their experiences (good or bad) with managing workflows with a DVCS (Git, Mercurial, whatever...) within a large organization, where multiple project teams with various dependencies on one another all had to collaborate towards developing a common build?
shift + arrow works like a mouse, and you are not stuck in counting vim land.
What's crazy is that Comcast is in a great postion to go head-to-head Netflix. They are positioned to go vertical in a way that Netflix can't even dream of.

* They have a relationship with a huge base of existing customers. They're one of the few players with a subscriber base close to Netflix (who just passed Comcast).

* They have a large network based on good technology. Sure, it's not fiber, but it's a lot better than what most of the RBOCs are sitting on, and Netflix has zero.

* As part of NBC, they have established relationships with all the major content providers.

* They own the distribution channel from content library, transport, and the end-user equipment.

The problem, from my experience, with Xfinity is that the "experience" sucks. Their cable box is a slow, buggy pile of crap. Browsing content on my cable box is only marginally better than the craptastic PPV movie systems in a cheap hotel. The new Xfinity apps for my iOS devices are a huge step up, but I'm not convinced that using my iOS device as a remote for my television is where I want to be. This is what the experience is like:

* Pick up my iPad and browser for "OnDemand" content
* Initiate playback from my iPad
* Switch to the Comcast remote to play/pause, ffwd/rwnd
* Experience huge lag in response to my control inputs from any of these devices

I've measured it, and it can take up to three full seconds for my cable box to respond to inputs. Three seconds is an eternity when you compare it to the Netflix app running on my PS3. Not to mention, with Netflix, I don't have to keep my iPad around. I can just use the PS3 remote to browse, select, play, and ffwd/rwnd content. And it's responsive.

Comcast has only themselves to blame for this situation. They're sitting on all the right pieces, and no individual component is a huge weakness if you believe that going vertical is the right approach.

Such a shame.
The latter:

https://secure.wikimedia.org/wiktionary/en/wiki/pessimal

The other time I've seen a similar derivation used is in "The Story of Mel"

'Mel called the maximum time-delay locations the "most pessimum". '
oh, I misunderstood your comment...

Yeah, CPR will not work if you have this machine instead of a heart, and it isn't working. But if you aren't breathing, it may work because CPR also activates the lungs and circulates air as you said.
Ask HN: Why should I switch to a Mac?
Over the last few years Macs seem to have gained a lot of popularity. I can't step foot on my university's campus without seeing one.

I've always thought that Macbooks looked great, they are thin, sleek, and clean looking. Aside from that, why should I switch to a Macbook?

Right now I'm using an HP DV6 laptop with Ubuntu 11.04. I've been working with a combination of HTML, CSS, JS, jQuery, Python, Flask, and SQLite3 recently and I'll be doing some work with Java and C (working with robots via Webots) later on this summer. I'm a CS/Applied Math major and I intend on becoming a software engineer after I graduate.

Why should I switch to a Macbook? Should I keep using Ubuntu?
Sadly the problem is at a higher level than that, and not restricted to security. Today software development might as well be magic. There are no reliable objective methods for determining developer or software quality. The only method that's proven to work well is the subjective judgment of another "magician". The same applies to software security as well.

This creates a boot strapping problem. If you're an organization of magicians then you have a comparatively easy time finding other good magicians. But if you don't have that hsitory and you still have the need you won't be able to know the quality of people you're hiring except on the least granular of scales (lots of failed and low quality projects). This is a big reason behind so much of the problems of software development in "the enterprise". Because people who know how to run a bank or a media company haven't the slightest clue how to run software development, and there generally aren't trusted 3rd parties that people can go to for help.

Worse yet, there are perverse incentives at play. If you can't tell the difference between a good security person and a stunningly mediocre one, you are going to go with the cheapest one who you think is good enough (generally: solid job history, resume fully buzzword compliant, etc.)
The key part is the next sentence: "This is a breath first type search". http://en.wikipedia.org/wiki/Breadth-first_search
Maybe it just seemed to get better as more and more braincells died?
Do you expect to make more money from advertisement or from entrance fees? In the former, make it free (more eyeballs, the better). In the latter, charge a few bucks.
I found it to be an absolutely fascinating thread. I don't care where it came from. I learned about OpenMP (concise parallelism in C) and the Perl 6 hyper operators by reading it. That's (much) more than I learn from most Hacker News posts these days.
That "story", if fit to call it that, completely breaks down by the second page into a ridiculously one-sided, poorly written, and rather immature take on the case at hand.

And frankly, I'm a bit concerned by this idea that a private organization has the resources to drown a regulatory body in red tape without flinching. As citizens who are subject to obscene amounts of neglect by private industry day in and day out, we should be more concerned by the power the private sector seems to be increasingly wielding.
Also, pattern recognition/machine learning.
As long as all the threads are running before the first one finishes... You would have to measure the speed of spawning new threads in your runtime, and adjust the linear timestep dt * x (where x is the element) for that, e.g. for 2 1 1 1 1 1 1 1 1 1 0 you would have to make the waiting time for 2 be 2 * dt + epsilon, where epsilon is a function of the elements position in the list to be sorted.

Even if you did that perfectly, it is still only a probabilistic sorting algorithm, with potential for error.
Menunggu Godot Samuel Beckett 
Samuel Becket (1906-1989), penulis lakon terkenal En Attendant Godot atau Menunggu Godot.
How about eye-tracking + keyboard?
So, is this actually a useful vehicle? Or is it just for circus stunts? The trouble with letting young bloods demo a new bike is, they don't ever use it normally.

For instance, can it accelerate without gerbiling?
I Assume Honeycomb is a template to where the phone is headed (given Google's announced intent to merge the two OS forks and the fact that Honeycomb was branded 3.0). If that's the case you'll have all the same buttons and they'll be ever present on the screen. They'll just be Hardware instead of software.

On my Xoom the Back, Home and Application List buttons are visible in every application (as is a search button in the menu bar)
[Android Game] Le Brickk Mania 1.0
Beautiful Golden Car Wallpapers, Golden Car Desktop pic
Get beautiful Golden Car Wallpapers for your Computer desktop. Here’s Amazing and fastest Golden car by brand in the world. Most of the Golden car producer in the world have their masterpiece that usually sold in very expensive price. Best collection of worlds famous and beautiful cars wallpapers. You can also see new Golden Cars Pictures, Golden Cars photos, fastest cars wallpapers,nice cars images & many more.
With how many times it seems to stop to load, I'll go black-out drunk if I went for a beer every time the game offered me the opportunity.

I'm playing the 360 version and haven't loaded it to the internal disk. Maybe that will help the load times.
Yeah, sorry, I was talking about the control plane stuff. Does Juniper use any of the original FreeBSD IP stack for its control plane or exception path stuff?
This list is taken from this article: http://www.carlkingcreative.com/10-myths-about-introverts
which is based on the guy reading this book:
http://www.amazon.com/Introvert-Advantage-Thrive-Extrovert-W...

I read the book myself recently, and I can highly recommend it if you feel that you sit anywhere on the introvert spectrum.

It covers the "science" behind introversion, how introverts vs. extroverts think and respond to stimuli and neurochemicals. (I put science in quotes as I don't know enough about the brain to know how scientific the discussion is but I found it useful and interesting nonetheless).

It then goes on to look at how this affects introverts' interactions with themselves, others, and in social situations - with some thoughts and guidance on how to better integrate into an "extroverted world" without just trying to be more extroverted.

I have definitely found it helpful and it's made me think a lot about who I am and how I react to life as an introvert.
You forgot: The CEO has a hot secretary and his marriage is having problems.
You hit the nail right on the head. I can buy some stuff on Newegg, and have someone in another country mail me gold. Or ship me oil. Or coal. That doesn't mean oil or coal is a currency, they're just a commodity. And I'm just engaged in trading.

Bitcoin is more like a currency than oil or coal, because it mechanically works a lot like one. But just because you say 'this is a currency', doesn't mean it actually is one. You are missing all of the higher level stuff. There is a reason a dollar backed by the US government is far more useful than a random coin 'backed' by a government of an island nobody recognizes.

My uncle is a mechanic, and has traded his time fixing commercial vangs for goods. We've had plenty of parties cartered in exchange for fixing the restaurent's delivery fan, or borrowed plenty of heavy equipment from contractors that need their truck fixed but don't have cash. Does that mean a tray of chicken marsala and a plate of bakery cookies are a currency? Of coruse not. Trade/bartering existed long before currency existed, and it still goes on today. Commodities existed long before currency existed. Being able to trade one commodity (bitcoin) for a good or service doesn't make it a currency.

We've learned this lesson over the last 200 years but a lot of people seem to ignore them. Most of the people pushing bitcoins harp on the fact that dollar keeps getting devalued, but they are ignoring the history showing that is a far better problem than a deflationary currency .
>I suspect we're in a situation where cost of being competent > probability of lulz * cost of remediation.

Yup, unfortunately this is true, and half-assing it because of this is what gets us onerous new internet legislation.
Why are they hacking? Probably because the economy sucks and they are unemployed and bored.

Also, no one is out-smarting anyone. These companies have insecure websites and they don't care.

Well, maybe now they have wised up! Secure your server noob.
Link was 404

http://www.nmm.ac.uk/gcse-astronomy/sun-and-moon/moon-moveme...
I have really problams believe that this could be true. Not even a first year student would be that stupid to expose any user id in the URL. And read from it without access right checking. For access to the related account data. How would they even get the idea to do such a thing?

And as for the "hackers", I guess legally this was not even a break-in. At least in Germany, for legally being a break-in, a computer system must be "specially secured with the intention of preventing access". Well, this system wasn't.

...still, I have a hard time believing that it could be true.
The problem with channels a la carte is if you have two competitors, one of whom bundles content and the other of whom competes a la carte, there is a strong tendency for them to get into a ruinous price war.

Since people already do bundle, that makes getting into an a la carte variation very dangerous.

See http://www.dtc.umn.edu/~odlyzko/doc/price.war.ps for details.
Constantly Create
Online bank websites are, at least in the UK, universally terrible. They seem to be just a very, very thin layer on top of the bank's back-end systems, giving such delightful results as being two different sorts of recurring payments and two types of non-recurring payments I can do from my online banking (actually, I can't set up or cancel every type from within online banking.)

Do banks make so little from checking/current accounts that it isn't worth spending a dollar per customer to build a decent solution?