skysight-inc/HackerNews huggingface dataset:
> Being able to trust the tool to have made the change correctly is invaluable in this process; it avoids a full unit test suite run after each step, and significantly speeds up major refactoring work.

If your unit tests aren't fast enough to run the relevant set after each change, you're most likely writing poor unit tests. And if you need to re-run the whole test suite after making a localised change that doesn't alter behaviour, then either your code is too tightly coupled, or your tests aren't really unit tests, they're integration tests. Maybe both.

I also have to wonder at the sort of attitude that prefers to have faith in Visual Studio or Eclipse, rather than in tests that specify the code's behaviour. And how do you know you didn't mess up using the refactoring tool? Faith in your IDE's correct operation is no substitute whatsoever for checking your code's correct operation.

This whole argument is ludicrous, anyway. A text editor that's been enhanced with powerful plugins is, as far as I can see, an IDE. My Vim setup has project navigation, method completion, build integration, you name it. I could even have automated refactoring if I felt the need:

https://github.com/ecomba/vim-ruby-refactoring

In the end we all use editors with high levels of language-awareness, and varying levels of project- and build-awareness. Some of us put them together ourselves, some of us installed a complete package. Judaean People's Front, anyone?
I can't believe you don't look for a long-trend indicators, let alone (again) when you feel entitled to throw around terms like "stupid". Default didn't yield social chaos; rather, it was seen by most political factions as the only way to end it.

You see, Argentina's unemployment [1] and poverty [2] rates soared during Menem's worship-the-system 90's. These rates happened to peak, respectively, in 2001 and 2002, basically around the time Argentina defaulted, among many other measures.

Now, with a discipline as complex as economics, given all the variables floating around, it is hard to conclude rigorously that defaulting contributed to reversing this trend, but it sure is harder to claim the opposite!

[1] http://www.wolframalpha.com/input/?i=argentina+unemployment+...

[2] http://www.wolframalpha.com/input/?i=argentina+poverty+rate+...
Honourable cyber squatting? What is the world coming to?
Google's solution for Chrome on Debian and Ubuntu is to distribute a .deb package that installs not only Chrome, but also installs a reference to their own package repository. When the user updates packages on their system, it updates Chrome from Google's repository. Chrome does not update itself, nor can it, since the package installs it to /usr/bin, which would require a su/sudo prompt to get access to.
Crash WebKit r96455 when clicking 'Get Image'
Actually YC partner Harj said at the HN London meetup last Thursday that traction is less important than the team. I was surprised by that, as it seems to be against "make something people want". As a single unknown founder, traction was my only bet. If my personality matters more, then it's down to whether they like what I say about myself.
Watch Argentina vs  Georgia :Argentina vs  Georgia live stream TV.
Argentina vs Georgia streaming game.

Match Schedule

Competition: Rugby World Cup-2011.

Argentina vs Georgia Rugby World Cup:
Rugby World Cup 2011
Date: 2nd October 2011Time: 13.00 Local.00:00 GMT
Venue:FMG Stadium, Palmerston North
The issue is not whether you or any number of people can 'handle' X (whatever X is), the issue is, Is X, when it and its consequences are considered in their entirety, a net positive or not?
Also, stating that alcohol has a pernicious effect on society doesn't imply that one is demonising drinkers at all. Some might do that, but it is not implied in the statement.

In the UK something like 90% of crime is alcohol related, most A&E admissions are alcohol related, etc. As someone who used to drink (i.e. take alcohol) and now doesn't, I feel qualified to agree with armandososa that for many it's not until you stop drinking that you really become sensitive to many of its negative effects such as those he/she mentioned.

Edit: in case it's not absolutely clear, I am sure you are a good person whether you drink or not. That does not mean that widespread use of alcohol is good for society.
Homeless guy Gets Paid with Square
Very interesting although all what shows for me is Logos because I cannot draw anything but stick figures on a mac touchpad.
Babamın Penguenleri İzle – İndir ( Mr. Popper’s Penguins )
Mixi (Japanese SNS) spokesman talks Facebook, Twitter
Ensure the "tweet this" or "like this" button does not generate a request to the 3rd party site simply by loading the Mozilla webpage the button is on (e.g. no requests to third party site without user's intent via clicking on the button).

Thank you for this.
Mm, it seems to require high noise levels to not look visibly stripey. Is it actually dithering the colors, or just overlaying noise on top of it?
> the disconnected dumb home microcomputer of 1985 to the globally connected iPad of today

But the microcomputer of 1985 was globally connected too! And that did seem like quite a technological advance: here in one's own home, a machine that, via phone lines, can exchange messages worldwide!

I agree that the number of people globally connected has increased, but it seems more incremental; a matter of economics and incremental improvements, bringing down the prices and upping the speeds, so now many more people can experience that magic of global connectivity in your own home.
Black Decker NS118B
Neat.

You could avoid having to create a per-schema id function by passing the shard id and the sequence oid as params to the function, so you'd have
default public.next_id(5,'insta5.table_id_seq'::regclass)
and if you disabled javascript, it can't be accessed at all.
Why would he stop writing code? I can understand he might be too busy (and it might be getting too advanced?) but I code because I like it, not because it one day might allow me to make money. I do not plan on stopping whatever happens.
EyePhone: brain training iPhone app to do away with glasses
No, it's just that I'm likely to finish a short article before I've noticed that there's no content.
Serious question: Why are you still using Chrome 13? Did you prevent it from updating on purpose?
I just download NetBeans with Ruby/Rails integration and be done with it.
Invalid login attempts (for any reason) should return the generic error message:
The username or password you entered is not valid

In practice, on any non-trivial website, it doesn't make a difference for security.

Registration form will show a specific error when you try to register username that is already taken. Password reminder form will show error when you request reminder for an unknown e-mail. Some websites even have AJAX APIs for checking validity of usernames/emails!

Because of that it's easy for an attacker to check whether username or password is invalid. Vague error messages make it only hard for the user.
I just tried that - the 90s said "Great, they finally made the Newton useable. Good to see Moore's Law has kept up the pace."
I have an online business selling globally operating out of the EU and I now know more about VAT than I care too. I agree that the rules can get quite complex but as far as I can tell the payment processor does not need to be able to do anything special other than the ability to store/display the required information with each transaction (date, sequential invoice number, and VAT number in the case of a B2B transaction). You can just put that in a free format field (in PayPal for example), that's all they would need to add I think.

Sure it would be nice if they stored tax (multiple rates possible on one invoice!) and VAT numbers in a separate field, it would be even nicer if they validated the VAT numbers for you, or the buyers location, but it can all be done outside the payment processor.
A library of everything about everything available to anyone has been one of the human dreams, from the Library of Alexandria to the Hitch Hikers Guide to the Galaxy.
For what it's worth, I liked the article and the idea of client-side real time balancing presented in the article when you submitted it.

Something similar happened when I launched http://hnnotify.com -- got 24 up votes and then it crawled into oblivion <shrug>
depends on what you read. I would prefer to read an excerpt before reading political articles or stuff on Techcrunch :-)
Map Reduce in Python - transparently done over a network
Do you have additional datacenter environments for staging and development?
Most GET requests to third part sites are fine, you need to be more precise.
When telepresence will finally be viable
Agreed, < 125ms is typically an OK range (for most things) but < 300ms is really nebulous. There are apps I would stop using fairly quickly if 300ms was the norm.

Thanks for the tip on Tokyo data center for EC2, I've seen a lot of complaints for the Singapore data center in general with terrible times into China and Tokyo before and wasn't sure how the people actually in those regions felt about the response times.
Zynga open sources panning and zooming library for HTML and Canvas
sorry, but that's stupid.

a correct site - and I have corrected dozen of them, and they work just fine does not give a specific error msg for password reminders either, or any other function.

so the generic message should be returned from every such function, and i'm pretty sure they talk about password recovery as well. (and again ANY such function should return a generic message)

mind you, its much easier to compromise a site when you can check the username and just have to crack the password.
you can automate it easily as well.

ps: oh, look,next paragraph after what you pasted:
"The following message should be returned to the user regardless if the username or email address is valid:" for recovery. Pretty sure you've seen it and voluntarily ignored it :-( mean mean mean.
This also keeps out non-latin alphabet users. Like half the world's population.
>>you need to run your compiler in one window

Uh, no. [edit: It is not only compiler/tests.]

I also have half a dozen tabs of shell, where I also keep documentation (perldoc, pydoc, etc). (Real Emacs users use emacs buffers for all their shell needs and documentation. I'm a wimp.)

>>comparing lines of code on the screen is meaningless

I have used IDEs (not exactly lately) and have seen people use them quite a bit.

Personally, I don't make non-intuitive claims, and argue that others just don't know what they talk about, without good references.

>>presented differently, and the flow is different,

Obviously the work model is different. But...

You are arguing that all the screen area left to buttons etc is paid for by the IDE's popup functionality.

Screen estate has simple and obvious advantages, since when I write the code, I can see the documentation and/or the functions it calls at the same time.

You need references for your claim.

That said, with a language which gives Cobol fingers (Java, etc) and/or use half a sentence to write a library call, I do see a case for an IDE.
theres more than just python you know. you have to take care of this regardless of the engine behind.

beside, even parametrized, you have to be careful. I'll remind you of the 2004 Safari handler exploit.
Apple fixed the first exploit by using parametrized argument list. Woot.
Next day, exploited again because some programs call execve on their argument list, for example ssh -o'ProxyCommand=exploit here' which is 2 arguments (-o and the complete proxycommand line including the exploit line).

This is valid for websites as well.
This costs such much that most will decide that it is not cost effective to do so.

Well, why do their representatives insist it's a "top priority" then?
This is a tricky issue, for the exact reasons you mention: already taken usernames will cause an inadvertent verification of its existence, as can password reminders that use e-mail addresses as input. The latter can be handled by giving an ambiguous response, which comes with a slight (but negligible) cost of annoyance for forgetful users. The only method that comes to mind for avoiding username mining is forcing the user to pick from a fixed number of available usernames based on f.e. a part of the supplied e-mail address. This is a bit of "userland villainry", though.
I'm not sure you can do this without voiding the agreement with twitter/facebook unfortunately.

I'd suggest the use of Ghostery (works on all major browsers) on the client side, and on the server site, well, you know, not use any like button :>
It's difficult to accept non-latin characters in usernames without making username spoofing trivial. For example, I could sign up for an account as `аw3c2', pretending to be you. What looks like `a' there is actually `а', a Cyrillic letter with its own Unicode code point. Assuming a website where user impersonation is an issue (say, an auction site where a homoglyph attack could be used to scam a seller into sending the goods to a different address), one would need to blacklist all likely homoglyphs and duplicate characters, or just stick to ASCII. (I'm sure users are accustomed to using ASCII usernames, though it's not ideal.)
You have heard of debuggers, right? Just because every IDE includes one doesn't mean they don't exist outside of IDEs. (For that matter, when I used to develop on Windows, I pulled up Microsoft IDE for debugging only.)

Honestly, though, probably 80-90% of the time I do prefer printfs for debugging. A debugger is great if you can easily get to the problem area. If you're just trying to figure out what is going wrong with complex code, dumping a lot of information in a format you can easily look over with a text editor is generally a superior approach.
gdb? ddd?

I don't compile my code inside vim, so why should I expect to be able to debug it there?

Learning that the tools don't have to be integrated with each other to be useful was a major eye-opener for me, after using MSVC for many years.
The example is there for the guideline about "only filter known good"

That said, it could confuse people. I'd suggest to fill a bug at bugzilla.mozilla.org to put a broader example, or to specify that you might want different characters in the known good list, specially for non-latin writing people, cause yeah, many would just copy paste it without thinking further.
Lemon Juice for Age Spots
Decoding Twitter Chatter on Wall Street
Only when the writer isn't teaching me an appropriately larger volume of material.
How many workers died during the original construction?
China of course has a few trillion in US Treasury bills burning a hole in its pocket (they dont belong to Alibaba but they presumably have RMB to change for them). The only sane solution for China is to start buying real assets in the US. One official recently suggested they buy Intel, Apple and Boeing. But hey why not Yahoo too. There will be a lot of these purchases coming up.
Works fine for me on chrome 14.0.835.186 on OS X 10.7
Quick Sale Of House, Sell Your Home Online and Sell My Property Quickly
We offer a professional service to the house owners, who need to sell their home at a short time. Sell your property quickly under the roof Putanoffer.co.uk
22yr student adapts hybrid car technology to a bicycle
The basis of the technology is using a flywheel to store energy -
That isn't strange. The GDP per capita of Ireland is higher than that of Germany (http://en.wikipedia.org/wiki/Economy_of_the_European_Union#E...)
Heise Online worked out a solution[0]: a two-click Like button. The first click replaces a placeholder with the official Facebook Like button. Facebook objected at first, but only because Heise tried to make their placeholder look official. A quick design change allowed them to keep it.

[0]: http://news.ycombinator.com/item?id=2957119
JustClean Life-Style Program is now available for Florida resident
How to Tell if Your Mac Needs More RAM
A Catalog of Stream Processing Optimizations
Passwords must be 8 characters or greater

Half of the top 50 cracked Gawker passwords were 8 characters (and longer passwords were not exposed, due to the nature of the vulnerability). Since 8 character passwords are vulnerable to a known common weakness (in DES), this should be revised to:

Passwords must be 9 characters or greater

This will prevent your users from using passwords that are vulnerable to the DES attack if they reuse them on other sites.
Introduction to Web Intents
I'm spending about $500/day and making $300-$1000/day profit running affiliate offers. I'm using Facebook ads to bootstrap my development. I vote "Yes", it works, unless you are bad at it.
Yeah that's why I'm not sure. It could be attacked depending on the country I guess, and if you don't use a facebook-like icon, its hard to tell what you're going to like. Debatable I guess
I'm not a huge fan of IDE's in general, but Eclipse w/emacs+ keybindings is actually a pretty good compromise on larger projects. It gives you the nicer feel of navigating the code emacs-style, but you still get all the advanced features like code completion and refactoring that Eclipse provides.

Also, for Java projects Eclipse w/emacs+ is way nicer than vanilla emacs(at least for me)
"Earlier this year, I carried out an fMRI experiment to find out whether iPhones were really, truly addictive, no less so than alcohol, cocaine, shopping or video games. In conjunction with the San Diego-based firm MindSign Neuromarketing, I enlisted eight men and eight women between the ages of 18 and 25. Our 16 subjects were exposed separately to audio and to video of a ringing and vibrating iPhone.

...

In short, the subjects didn’t demonstrate the classic brain-based signs of addiction. Instead, they loved their iPhones."

Fanboism to a whole new level. I really like my iPhone a lot, but I'm not sure if I "like like" my iPhone.
Extremely few C64s and Amstrad CPC 464s were globally connected; that's the class of machine I had in mind. If you think this is just incremental, then I'd say that putting a man on the moon is just an incremental improvement in bomb-making, the culmination of the controlled release of chemical energy; a matter of slow refinement over centuries.
What are the geo static and performance load balancers?

I can only look up mixed definitions.
twitter allows custom links/ buttons. These don't require on-loading JavaScript or any calls to their services.
I have just disassembled a piece of furniture, so I might be a bit biased, but what went through my head is "my screwdriver does not need personality". I don't even care if the screwdriver is rather boring.

Probably it is true for some products, but I think if you offer a great service or tool, people won't shun it just because it is boring. For example the tax industry is huge (in Germany anyway), software companies selling tax accounting software rake in the money. I don't think little artificial pets would help with their products.
Something something stewing in their own juices for too long something something.
I can see Apple being on that list, but Intel and Boeing are of strategic importance to the US and I don't think congress would agree with such sales just like that.
Kittens Activate Vacuum Monster
Yep, I don't allow the google background processes which run the updater.
How would you deal with a registration form that takes a username as a parameter, without leaking whether or not a username is already taken?
Alibaba is very keen to acquire Yahoo
Why? You have This write a new standard library no matter what language you choose. Js not having a stdlib doesn't save you work.
I would say there are two components to it. Language and project size. Java and C# where designed with IDE use in mind. I am not sure I would want to work in either without an IDE. For smaller languages like C and Python an IDE wouldn't be my first choice of tooling, the cost of using the tool just isn't worth the benefit provided. I could see switching to an IDE if the project got a little too large.
Some things take a lot of space to explain. But as a general rule, if you can trim it without losing content you should. That's a golden rule of good writing.

If you get paid by the word you might disagree with that.
>Fanboism to a whole new level. I really like my iPhone a lot, but I'm not sure if I "like like" my iPhone.

The article is a bit confusing as it goes in many directions. It starts with the 'cult of Apple', then goes into how Apple is indoctrinating the youth into touch (which is natural for a 14 month old) and concludes with how all people are emotionally attached to their phone, regardless of the brand.

The iPhone is always the easy target but it shouldn't have been the focus of the article.

Edit: I've never thought fanboyism is particularly wrong. There's nothing wrong with being a fan of sports team, musician, actor or brand. The problem is when they become irrational and angry.
I agree in principle, but it seems funny to me to read an article like this after watching a video of a surgical robot peeling a grape! Maybe the space program was the "big idea" of the 60s, but there are still some pretty fantastic innovations being developed, even if they are closer to home. But i agree that energy innovation is going to be the most important subject of the next decade.

I guess the reality is that things like globalization is making it impossible to ignore down-to-earth political-economic problems that we simply need solutions for, right now, more than we need other things. I have confidence that we are in a highly transitionary period of history, and eventually the pendulum will swing back te other way.
Lets think about that for a minute. DES truncates at 8 characters, so you're right that if a database with DES-encrypted passwords leaks and is brute forced an attacker will only get the first 8 characters of a password.

But what if my password is the word "biological"? By knowing the first 8 characters, the attacker has drastically reduced the number of guesses that need to be made (assuming a priori knowledge that the password is shared between sites).

Also consider MD5(PASSWORD) and SHA1(PASSWORD). Those are both fairly common constructions for "secure password hashing" [note: they're not really secure] in web applications and both of those would yield up the entire plaintext password if an attacker used a brute-force or rainbow table attack.

If you're designing a secure web application, you can't make your goal to secure all the other websites on the Internet. Bumping the minimum number of characters to 9 wouldn't significantly impact the security of your users. If you're really worried about a situation where a user's password is disclosed, you should consider offering two-factor authentication options for your users.