skysight-inc/HackerNews huggingface dataset:
daeken is arguing, based on quite a bit of experience, that PHP applications (even those written with frameworks) tend to have more security vulnerabilities than Rails apps. I happen to agree with him.

One very illustrative example: arbitrary code execution. I've lost count of the number of arbitrary code execution vulnerabilities I've found in PHP applications. In contrast, I recall very vividly the last arbitrary code execution vulnerability I found in a Python application: I uploaded a PHP script to the server, which was also running mod_php. ;-)

The problem here is simple: most web servers that run PHP are configured with a rule that says "If a file ends in .php, execute it as PHP." This is useful for new users: it allows them to run and execute separate PHP scripts very easily. But it's also a potential security vulnerability if an attacker can upload a PHP file to your server.

If you're using a framework, you typically have a fixed number of scripts that should be executable and you can configure your web server appropriately. However, that requires a VPS or dedicated server.

Edit: If you're interested in an actual language-level difference between PHP and Ruby/Python that affects security, PHP scripts accepted null bytes as part of filesystem paths until recently (PHP 5.3.4, which added protection against it, was released at the end of 2010).
STAREX for SALE in LOW PRICE
Heck, you can locally heat up a cube just by compiling and keeping Flash videos running constantly.
That's annoying. Well, you can just go straight to the source instead http://www.gusta.com/ :)
I'll look into it. Not sure how tightly coupled it is with some Facebook specific stuff.

http://phabricator.org/ has a very similar system if you are curious. epriestley made some nice updates to it in there as well.
Try compiling any _large_ project on your machine. Say, Webkit. Come back and tell me how much fun that was :)

Kidding aside, if you have to dig into large-scale projects or heavy computational stuff, a laptop is underpowered. Thankfully, not everybody needs to do that.

But even for day-to-day work - how can you live with 15" of screen real estate? Without an ergo keyboard?
Sifteo launches intelligent blocks as a new form of entertainment
How does Facebook use Autoload? Does it help in this situation?
He explained it on the site - if you are trying to use grep to trim contents from a file and output them to the same file, you will end up with an empty file.

Seriously though - everyone knows this. Just use a temp file.

He says sponge "keeps the results in memory" - that's a problem if the file is huge.

Plus there are other tools to do in-place replacement.
The developers want something that works.. and is fast. No waiting for builds!
WRT 1. you're saying that

>"He and his mumblings should be should be flushed down the toilet bowl //

So arguably you're making the case to ignore his [implied] argument based on, in the antecedent sentence, his character. Sounds ad hominem to me.

Just saying.
Actually, the British Royal Navy used oaks that had been planted some 200 years earlier specifically for the navy.

From http://www.centauri-dreams.org/?p=11894 which talks about long term thinking for interstellar flight:

The British oak used in the ships that fought the
Napoleonic wars was planted during the reign of the
Stuarts some 200 years earlier and allocated for future
use in the Royal Navy. Knowing this, Collingwood went on
to encourage the planting of oaks that would be made
ready for future Royal Navy ships, oaks that matured long
after the heyday of sailing ships.
It's actually #7 right now, ahead of Tiny Wings and one of the Angry Birds variations.
I'm in your boat. I was stress testing it earlier (probably Chrome 11, under Linux) and I could put 100 tabs with actual content up without too much trouble. Switching tabs was slower, but not unusable (~700 ms to switch).
This is essentially a "Tu Quoque" -- other cities have bad parts, so how can we point fingers at Detroit?

Looks to me like it's questioning the process by which we here conclude that Detroit is a hellhole.
My pal has this usage pattern, as well. Seems nutty to me, but it goes to show everyone has their best way of working.
Showing a person's argument to be fallacious doesn't show there position is wrong. Many it seems fail to grasp this point.
here we go again people complaining about the boilerplate having too much stuff. I would rather have this than <!DOCTYPE html> which I already know by memory.

You can always remove stuff as you please.
Can you guys accept it as a cool project that saves you time? or does the name "boilerplate" bother you that much.
C ISO/IEC 9899 - 1999 Standard is my favourite piece of documentation.
I'm really interested in your next post about "real cost of private offices"; please do this post before I pick our offices.

I strongly prefer private offices, but it looks like the only cost effective way to get this is to rent a 10BR house for $10k/mo and have enough space for ~20-30 developers in a mix of private and semi-private (shared) offices, conference rooms, etc.
Well, sure, I agree that they need to focus on their core service; in this case - delivering "lunch" -- which by my comment could be inclusive of accompanying floral arrangements.

I.E. you order a zerocatered meal for a team/exec briefing/whatever - and choose to add some arrangement along with it.

Personally - I have been wanting the netflix of floral delivery for some time at my home. There are already services that do whole corporate plant service, but this is a much broader scope (e.g. showing up regularly to service said plants). Adding simple floral arrangements to an already delivered product is not such a far reach from their core service - there would be no service - just delivery.
PHP sucks as a language, but honestly, it's a LOT less painful to develop a working web app in PHP than Java, Python, and just about everything else.

Why? There's no deployment issues. There's no waiting for my app server to restart, no delay while a change is detected, etc. You edit a file, click refresh.

Flame away.
Hacker Triggers Halt on Hong Kong Exchange
The Java standard library docs are very good, and the language spec is quite clear and precisely defined.

Another language with brutally specific docs is Common Lisp. Even though I have really only dabbled in it, the Hyperspec is really pretty impressive.

At least one common factor between them is Guy Steele, I don't think that's a coincidence.

Edited to add that I'm pretty sure my comment was motivated by this comment by mahmud: http://news.ycombinator.com/item?id=1661254
Awesome advice, I thank you!
Why epidemiology refuses to reduce a ~80% false positive rate
I will definitely look into this. Thanks!
Agree with the lack of interesting uses for an exploited/modded Wii. I went the route of physical mod, really just as a side project to see if I could do it. Added an external hdd formatted to wbfs for storing games, installed a bunch of emulators and other software. Honestly, the only thing I still use is the hdd since it lets me keep the disks in the closet and to occasionally copy a friend's game. After about 2-3 weeks of messing around with some of the new stuff, the Wii has returned to it's original function: coming home from the bar and gambling on games of virtual golf.

Most of the Wii-based media "solutions" are more easily (and better) handled with an old laptop (or cheap new one) and a bluetooth dongle.
> "If your provider doesn't support Ruby, you need to get yourself a $20/month Linode box. If Linode and a $20/month price point isn't mainstream, I don't know what is."

True. And if nothing else, you can run Python on Google App Engine for free.
> Rails is a framework. PHP is a language.

Rails is a DSL based on Ruby to build web applications that has hooks into a rich library that helps with that. PHP is a language designed to build web applications (although it can be abused to write any type of application)
Exactly my thoughts. My hunch is these guys are surviving solely from the saturation of startups in San Francisco and the surrounding area.

I'm curious what happens when they venture out into "the real world". Seems to me like a company that survives only in the bubble of the valley. Cool idea nonetheless.
Wiley and Elsevier PR spin for how their business model adds value
you would be forgiven for thinking that these companies have an army of 'peer reviewers' on staff and don't outsource that labour to the researchers as well. as for maintaining that e-distro's need to subsidise their printing presses... yeesh.
Thanks to all for responding. Haskell it is for now.
This is... not useful. Perl doesn't have a (weak) functional-programming gap that needs fixing that badly in the first place. The big clue should have been when map had to be defined in terms of... map. Perl's map can be used directly to do the vast bulk of things in that file:

# reducing; folding is obvious from here
my $accum = 0;
map { $accum += $_ } @nums;

# filter
map { $_ ? ($_) : () } @list;
# also grep, of course, but if you want to filter and
# do other things it's useful

# flattening
map { @$_ } @arrayrefs;

For the rest, just look at the source code and observe, for instance, the pointless wrapping of List::Utils::uniq for unique. Far more idiomatic or established ways of doing all (or almost all, with the remainder being easily fixed up from CPAN) these things exist in the core shipped modules. The actual use of this library is almost certain to be both klunkier and less idiomatic and readable than what Perl ships with out of the box.

Underscore is not the sine qua non of weak functional programming.
Apple closes as most valuable company
Was I incorrect that he was talking about small sites, or do people just believe that every site regardless of size should use a deploy script and the other trappings of large application/high volume production development? Because the latter is silly.
I heard similar stories at a US financial company; lads would work for 6 months, get trained and up to speed, then they would either get head-hunted or look for a better paying job and leave. New people would have to be hired and then be trained and then leave etc

The US based staff would get grief if the projects weren't completed on time or had issues.

I don't blame the Indian lads, they were getting paid crap. Also, many of them weren't great, as the pay was crap and good programmers in India wouldn't work for the company.
It's just one of those things that people say it's not a good idea then get used to it. However, it does provide a great way for spammers to get into your activity stream. It also gets in the way of twitter's casual model of following and un-following when you raise the visibility a notch.
Don't know why more research hasn't been done on Boron fusion. Since it gives off an electron you don't need any turbines or heavy equipment just a transformer. Instead we spend billions on H2 H3 fusion. Makes no sense to me.
As far as I know Hydra can't run on 1.9 ( https://github.com/ngauthier/hydra/issues/29 )

Alternatively, you have parallel_tests ( https://github.com/grosser/parallel_tests ) which can run on multiple cores. That's great if you use a mac pro, or some behemoth machine.

Little known there's testbot ( https://github.com/joakimk/testbot ) which can run tests across machines & cores. They've even worked in a bootstrapping process https://github.com/joakimk/testbot_cloud

From ( https://github.com/joakimk/testbot/wiki/How-testbot-is-used ) "... 60 minutes of tests to run in 10 minutes using 16 medium EC2 instances (32 cores), read the blog post." reports thoughtbot!

Code softly hackers.
It's pretty clear you don't know "all about" Detroit, it's nice that you quote a few articles though (especially one from 2009).

The opportunity that I mentioned is not in residential (yet) although I would be a buyer of raw land near downtown.

There are some truly awful areas, but there are also some really great areas of Detroit -- especially Midtown -- where there are very low vacancy rates and an influx of college grads who want to live in a vibrant urban environment.

Billionaires are buying (with both hands) commercial buildings for pennies on the dollar. I'm going to bet they know a bit more about "opportunity" than the authors of your articles.
The natural ligand for cannabinoid receptors, anandamide, is stimulated by exercise, particularly distance running. "Runner's High" is just that.
Mbt shoes review
Awesome, thanks so much for the input.

- Flood control is already baked in. 4 messages every 10 seconds is the limit.

- Pasting images gets ugly (eg porn). We'll think of a good way to do this soon.

- JS editor is a sweet idea!

- Personal ban list / spam reporting are on their way.

Thanks again.
It's not really apples and oranges - writing a website in raw Ruby is not a very feasible or popular option, whereas writing a website in raw PHP is. It is valid to compare writing a site in PHP and writing a website in Rails. It is also valid to compare writing one in Cake vs. RoR, as well as Cake vs. raw PHP (or a custom PHP framework, which is what raw PHP inevitably becomes in a sufficiently large project).
In addition to documentation, I find a language specification useful. Golang has an excellent one http://golang.org/doc/go_spec.html My original Stroustrup C++book included a language specification which was nice.
Mobile is a growing market, so we'll need to grow with demand even in bad economic times. I'm happy we had such good timing, because now we can focus on our technology and our customers.
More coverage: http://multiplayerblog.mtv.com/2011/07/21/radical-fishing-an...

Quote: Moral of the story: If you want to support creative, independent developers, avoid "Ninja Fishing" and wait for "Ridiculous Fishing." The only way to discourage this sort of action is to hurt copycats in the wallet, so make your voice heard.
It doesn't matter what we call that but Google sees that as a black hat technique
Galaxy Tab 10.1 gets first major update (cool stuff)
America's Unknown World of Secrets
I think it saves some people some time. This looks like too much stuff for me. I was really complaining more about the usage of "HTML5". It feels buzzwordy. Maybe I've just been away from serious web development for too long, but this entire site feels like too much stuff.
The advice i got from some barcamp peeps was "do not bring anything to DEFCON that you cant afford to get hacked". One fellow is a security consultant and the other manages networks for a financial institution. They could have been being dramatic for effect, but why risk it? I know enough about programming to know that I cannot secure my devices against a determined foe (unless you count the power button - but hey there's conspiracy theories there too right?).

So the advice was: disposable pay-as-you-go phone and craigslist it afterwards. Same for laptop. Don't bring them home.
I'm not disputing any of that. I just get annoyed when people compare languages with frameworks. Ruby and Python have many advantages compared to PHP, but out-of-the-box XSS prevention is not one of them.
Yes, but you do need some protein. Not to say you have to eat bugs to get it, but it's a step up from beef or pork.

One other thought- you assume you can or would eat bug feed.

Locusts, for example, eat: leaves, flowers, bark, stems, fruit, and seeds. While it is true humans can eat all of these things, it is typically only from select plants. When was the last time you ate a rice plant, or bark that wasn't Cinnamon?
This is kind of O.T but I've never really understood this:

"Don't wait too late in your rounds fund raise before you apply"

When you "do a round" is there some sort of legally binding time and funding limit? Or is this just some kind of self imposed thing (like when you're selling vacuum cleaners door to door and say to the customer "Better get in quick! We only have 5 vacuum cleaners left and they're selling fast!").
Connected States of America shows communities via mobile phone data
Gene Therapy on T-Cells Successfully Fights Leukemia (N=3)
Or $6.7 million, but I guess he rounded up.

http://www.appleinsider.com/articles/11/08/10/rendering_show...
Potential cure for many viral infections
except for D/T (and D/D), most of other fusion reactions which don't involve exotic components (like He3) don't seem to be confine-able by the mainstream magnetic confinement (tokamak). The inertial confinement is starting to come back and with it the promise of the other reactions.
Munch On Me (YC S11) Helps You Discover Tasty Dishes
This sounds like the first couple chapters of Petzold's "Code" (which I finally got around to reading recently and thought was fantastic).
Hacker Plot to 'Kill Facebook' Is All a Terrible Misunderstanding
Thanks, excellent idea! I think I'll try outsourcing this project first to one of those crowd-sourcing sites.
While randomized trials are a good thing (they help separate causation from correlation), correlations can be valuable too. Especially since we cannot always run randomized trials.

For instance, the first studies on cigarette smoking and cancer were done in 1930's and they showed a relationship between the two. They were purely correlational. They could of been spurious. Even if we could do a randomized trial, it probably wouldn't be ethical. However, these initial studies paved the way for more research. Now we know with a high probability that the two are related. If we followed the author's advice where would we be?

There are also parallels to start ups. If we always followed the "hard evidence" how many new innovations and insights might we have missed?
At least here there is a plan and commitment from both sides of politics to put the budget back into the black in the next 2 years. The US seems a fair way further from that.
I thought it might be hiding things in plain sight.
Since the key benefit for Apple of this arrangement is weakening Kindle's influence on iOS, it seems likely that Apple's further restrictive practices with respect to ebook readers / other third-party content applications will come up at some point. I'll bet a deposition on that subject would be very, very interesting...

On another note, it is impressive to see an antitrust complaint that benefits the market player with a dominant share.
I think the only piece that's missing for me is a way to bring chat logs into my application so people can review them later. My usage will be for users to answer questions so the content will be highly relevant to users who come along when a chat isn't active.
Amazon's acquired land was defensible, so to speak. Once it acquired a customer, that customer was likely to stick around

Why?
A nice site on Linux - Contains other stuff too. You might like it.
At the end of the day this really isn't much better. I would prefer FTP to be recognised as the bad practice/evil it is.

1FTP looks like it has a nice interface though.
Getting refunds on open-source projects
Before patent trolls, old school video game edition
The efficient market hypothesis has at its basis the assumption that relevant information is readily available and disseminated to all parties.

Up until recently, information on traffic has not been readily available, nor has it been disseminated to drivers in real-time.

People can only make decisions based upon the data that they have.

I can imagine that centralized planning could be valuable in a situation like this, where it's not possible for individuals to react in real-time to changing circumstances; though I'm sure that will be possible in the not-too-distant future.
HTC to acquire majority stake in Dr. Dre's Beats
Digg/Delicious Traffic Down 40%. Social Bookmarking Fragmentation
Herve leger
As a programmer who deals with wordpress on a daily basis I feel like I have a different view to it's inner workings. The simple functions for the_loop(), the_title(), and the_content() are things i rarely touch, as they are more template functions for displaying templates. There is a reply to The post that describes using "do_action" which depending on what you want would be a better option for achieving the formatted post content.

However, I have a real love/hate relationship with wordpress plugins. Writing plugins is very easy, and there is sufficient documentation within wordpress itself to describe most functions. However, there are a LOT of plugins I've come across that are written terribly. I would love to express my dislike of them, however I've taken on the "If you cant write better, then don't criticize" mentality.

Maybe one day I'll feel confident enough in my skills as a coder to name and shame these scripts, but for now I'm concentrating on becoming a better developer, and writing good PHP.
Radii THRILLER-womens black rose radii shoes
I'm not convinced that a web-based solution can "not suck" more than Transmit already doesn't (does?). Transmit mounts a drive on my desktop and I just use it like a drive. It stores my accounts in the keychain, which I much prefer to storing them in a decryptable format somewhere in "The Cloud". The experience is native and I don't believe a browser based experience is going to come close.

...except for the fact that I can access it anywhere if it's in a browser, I guess. Personally, I use Transmit with S3, so that's not an issue, but I suppose it could be for a privately owned server.
This seems like a perfect company for the culture of SF. I'm not sure how well it will scale to other cities though.
Hackers crack crypto for GPRS mobile networks
A cryptographer has devised a way to monitor cellphone conversations by exploiting security weaknesses in the technology that forms the backbone used by most mobile operators.
I am constantly unimpressed with the quality of writing on Forbes. Its like The Economist written by highschoolers.
Exercise does cause damage to your body, both structural and oxidative. Fortunately, that damage triggers repair mechanisms which make you stronger than before. See http://en.wikipedia.org/wiki/Hormesis#Physical_exercise

An aside: Reading this article made me wonder why I tasted blood after particularly hard workouts. Apparently the heart can pump with enough pressure to rupture some of the capillaries in your lungs. A tiny amount of blood leaks out and gets aerosolized. At least, so says this paper: http://abughrai.be/Vulnerability%20of%20pulmonary%20capillar...
The above poster is - as I understand it - pointing out that this study does not necessarily contradict the hypothesis you mentioned. A small amount of exercise is shown to be beneficial, but it is entirely possible that larger amounts of exercise are detrimental.

Do you know if any research has been done into that hypothesis? Because - failing a confirming study - it does not seem to fit with anything I've heard. I mean, maybe some organs can get overwhelmed if metabolism is pushed too high too quickly, but in general I doubt that a fast metabolism even correlates with lower life expectancy.
Really. I'm half tempted to start a startup just to be able to use a service that is that responsive. Anyone want to push forward with the Trails version of Google Street with me? :-)
also the PEPs for Python: http://www.python.org/dev/peps/
To be fair, Groupon calls them "Subscribers" and "Customers", defining both, in the report. It's not terribly misleading.
Primer Grito de Independencia del Ecuador
Primer Grito de Independencia del Ecuador , Primer Grito de
Independencia del Ecuador , Primer Grito de Independencia del
Ecuador , http://www.psdmate.com/index.php/2011/08/11/primer-
grito-de-independencia-del-ecuador/
How much traffic did Humble Bundle send us?
SFTP? SCP? SSH?
I can second this. The person who orders food at my company reports it's a huge time sink. We're 50 people and it was taking her hours a day with everything that can go wrong.
It is a tough problem, I'm pretty aggressive about using the 'block and report as spam' option on TweetDeck, but every so often an account that I've thought was trustworthy will start spewing links that "Make Money Fast".

Why just this afternoon, an iPhone dev who works for a YC funded company...