skysight-inc/HackerNews huggingface dataset:
Not so. What if something fails database validation so you want to display it in the form with an error? This can lead to attacks where a malicious user gives the victim a specially crafted URL that inserts a script into their page, then when they access the URL the script executes inside their browser with their session.

For this reason any user input needs to be escaped whenever it is rendered in HTML as well. If you got it from the DB it should be safe, but if you got it from the url parameters it isn't.
Twelve Factors of Web Application Development
North vs South again - Do Southerners eat more Thanksgiving Calories?
Probably about as much as the Segway changed urban US travel.
What worries me here, is a cargo-cult following of this advice.

Ephemeral Diffie-Helman adds an order of magnitude to the session initiation overhead (nginx got a bad rap a little while back, becuase it has kEDH enabled by default). I don't want to see people slide back into the "SSL is too expensive" mindset, because they don't understand the SSL options they are using.
Four HTML5 and JavaScript frameworks to jump start your app development
This makes me hopeful that us Nexus One owners will soon be able to experience the Ice Cream Sandwich tastiness even though our phones are crippled with only 512MB of core flash.

it's worth noting that google has dropped support for the nexus one as of android 4.0, so there will be no official build or drivers for the nexus one. i'm sure 3rd party rom developers will hack together something eventually, though.
The stability comes from the core, but the problems arise from the extensions. I have pushed LuaTeX to some limits and seen lots of segfaults and other errors.
Would anyone liberate the research behind this? It's obviously publicly-funded research, and I'd like to know more about what the authors mean by modularity. Also, I'm curious what they mean by the predator/prey analogy, when the populations are a binary rather than an arbitrary number of instances.

[ETA] Found it: http://www.box.com/s/m0nkpxszhnccls210coe
I think this is a reasonable concern about DHE, but this blog post was specifically intended to rebut the concern: they optimized DHE and use EC (faster, smaller keys), and managed to get it deployed across all of Google. The subtext is that one reason DHE isn't widely deployed is poor implementation, and they've taken a step towards correcting it.
Thanks!

Please email me if you can't find something you search for so I can try to improve SymbolHound's search results!
I haven't a clue there. Personally, I'd be willing to try it out.
To me a big part of user-friendliness includes being able to install programs easily without having to wade through dependency problems.

This is a big problem with Linux , debian based distros in particular. There is always a sense of "If you want A you should use distro X , if you want B you should use distro Y". When A and B are often just sides of the same coin and should not be mutually exclusive.
Was this really a surprise for anyone? The IPO has been a trainwreck since Groupon decided to start making up financial metrics.
I think the author is also forgetting that any programming work done for the government/state is always contractually bound by a multi-year code guarantee. This means that if any bugs are uncovered within that time period, the vendor must at no cost to the government fix them. That leads to drawn out negotiations over if something is a bug or enhancement. These code guarantees typically range between 2 - 5 years during which you can't charge a dime for anything related to fixing actual bugs.
I don't know about the legal jihad... It's uncharacteristic for a corporation to wage "ideological" wars. At the same time, I don't think Universal is naive enough to think that the millions of Grooveshark members will suddenly start buying music just because Grooveshark is gone. I think they just want to batter Grooveshark into something more like Spotify/Pandora (i.e. bound by licensing agreement and such). Of course Grooveshark doesn't seem like it wants to bend, so it may go down. Nonetheless, I don't think that's the main goal...
What exactly was the argument against NTP?
On your last question -- and first I want to say I'm not implying anything negative about Alex, he could totally kickass -- I suspect traditional book publishers are getting increasingly desperate and/or talent-seeking due to the state of affairs of the Internet. It's never been easier for a talented writer to write and control and market and sell their own work, without a traditional publisher being in the loop. Even the old argument about, "Well, write a book for us on the cheap and you win because of increased eyeballs and prestige," doesn't have as much weight if you look at the alternative paths authors can choose, such as what Zed Shaw is doing. Speaking in general, publishers are just not needed anymore for writers to find readers and make money.
Investor Marketing Program – for listed and unlisted companies
I agree. I'm a paying customer, I love Grooveshark (and the jailbreak-only iPhone app that I've missed since switching to the 4S), but it's always been obvious that it's just a matter of time before they get shut down. I'm surprised they've lasted this long.
Yea, there was a period of time where it sucked (I remembered it too), but now it is much better.
... no emacs, no compilers, no interpreters, no shell, no browser other than the company mandated one...
Gasofa, buzzie, iRae
This was only a matter of time.

I've been using Grooveshark for a couple of years now and I didn't even know they were illegal (I figured they had deals with all of the record companies) until I saw info posted about it here on HN.
Don't get in the way of Programming, Motherfucker
World can beat AIDS but funding must increase, U.N. says
LoveCodify - Wrapper run Codify scripts on Linux/OSX/Windows
I really see this as more of an attempt to kill GS than to extract any value from them. The music industry is not going to just lie down and accept their irrelevance; they'll take out as many people as possible with them.
Actually, the US trademark was being held by the former owners of LibLime (Metavore, Inc) in trust for the community. It was used as a bargaining chip against the wishes of the community in the acquisition of LibLime by PTFS in 2010.

The community really got riled up about this in 2010, and all other community trademarks and IP were transitioned to HLT ownership as stewards of the community IP. They own the current domain (http://koha-community.org) and the French trademark (the French company, Biblibre, was holding the French trademark in safekeeping for the community, and paid to have the trademark transferred to HLT's control). There were talks in 2010 of PTFS "allowing" the community to "use" the koha.org domain under their supervision, but it was clear that they wanted editorial control over the site and so it was decided to abandon koha.org.

The NZ trademark fracas has been going on for a solid year now, Metavore (LibLime) had filed for the trademark in NZ not more than a few weeks before they sold themselves to PTFS. PTFS could have chosen to withdraw the application, but chose not to. Joann Ransom, director of HLT explains it all on Radio NZ quite clearly: http://ur1.ca/5zz67

The line PTFS gives is that the trademarks were purchased from LibLime who bought them fair and square from Katipo - which is fair, they did. But they were allowed to register trademarks with the understanding from the community that the assets would be held in good faith, and they have not been - they have been hijacked.

Koha is a gift that HLT gave libraries the world around, and PTFS/LibLime has taken undue advantage of that gift, abusing the community they purport to be a part of.
Google's love/hate approach to JavaScript
I'm getting lots of "503 Service Unavailable".
At last someone mentioned the error reporting - the cause of so much joy during my grad student days!
It shouldn't scare you. They'll be using milliwatts of RF, nowhere near enough to heat your lenses.
Awesome post. And you can kind of do this even working for Megacorps - in fact if you are working for a Megacorp, have a desire to see more of the world, and are _not_ taking full advantage of the ability to internally xfr to another country while remaining in full employment... well you're missing a trick.

And it's never too late - I did the above from Sydney to London at the ripe old age of 33, and have seen tons of Europe and the Nordics over the past few years - with 5 weeks corp leave, 2 weeks public holidays and weekends, you can do lots of travel if you plan it a little. Sure it's not quite the same, but it's a bloody good compromise if you're more tied down / risk averse than an intrepid 21yo ;)
My Agel Review
Thanks for the reply.

Did you notice my choice to use the words "can produce" (as in "sometimes") not the word "produce" (as in "always")? I would never make the later statement: open projects always produce higher quality software than proprietary ones. That's not my belief.

As such, you are asking me in your last sentence if I have evidence to support a statement I would never make. Of course, the answer is no, because I would not bother to look for it.

But I would be interested to know why you would like to see such evidence if it exists? I could take a guess as to the reason(s) but I do not want to make assumptions.
There's no trick to technical publishing. If you write a solid proposal and sample chapter and there's a market for the book, you'll get an offer.

Edit: If you're actually interested in writing, let me know. In a past life I worked for a publisher distributed by O'Reilly. Happy to point you in the right direction.
I think you could go a little further and say that it implies dependency injection. You want to be able to declaratively tell the program which implementation to use in difference places. This would be a little more familiar to the OO paradigms than pure/deterministic functions. However, I still argue that pure and deterministic functions have many desirable properties.
Automatic photogrey eyes! Telescopic vision! Zoom!
Linux also has append-only files, although as usual root can override it.
I'm not in the US, is there any way to take the deal?
They aren't technically illegal, as they (in theory) comply with takedown requests. Now, if GS staff are uploading songs themselves, then the safe harbor provision of the DMCA doesn't apply and they're in a world of legal hurt. IIRC, Universal's claim that staff are uploading the songs comes from an anonymous posting on a message board, so I doubt that claim will hold up if that's all it's based on.
"UMG is seeking maximum damages of up to $150,000 per infringement from Grooveshark, which could mean more than a $15 billion payout if the lawsuit is successful."

Those numbers seem ridiculous. I imagine the only real purpose they serve is to create fear in similar / emerging ventures and to set an upper bound that guarantees bankruptcy.

It seems as pointless as condemning somebody to 1000 death sentences.
Codea-controllers
We were talking about some temperature app, not a new operating system. I did not suggest such a competition would be a good idea for every kind of project.

It's true that there would be overhead for running the competition and judging the entries, too.
How many people are using just TeX, and how many just qmail in production systems (i.e., not on their local workstation)? Very few.
I think they're proposing to remove all the others.
Mocha - the fun, simple, flexible JavaScript test framework
Cell death: you're fired, pack your stuff, it's too risky for you to stay

Cell senescence: stay, but your contract won't be renewed

I wonder if it's possible to reactivate a senescent cell by repairing the damage that triggered it in the first place: repair and rejuvenation.

Add: possibly no: "repair to DNA normally take place during DNA replication when cells are dividing, but post-mitotic cells do not divide. The main concern in this instance is not whether there is a decrease in the ability of cells to repair DNA with age, but instead whether post-mitotic cells can themselves repair DNA, if at all they need to"

http://ageing-research.blogspot.com/2008/01/post-mitotic-tis...

Also, is it possible to replace a cell that has already suicided by causing an improvement in conditions that'd ensure a replacement cell isn't tagged with the same fate: reconditioning and recruitment.
HTC pushes kernel source for Rezound, Jetstream tablet, Sensation, and more
The term "MVP" has expanded to cover things that are not strictly products. E.g., Eric Ries refers to a demo video as the "Dropbox MVP" because of the way Dropbox used it successfully to generate demand: http://techcrunch.com/2011/10/19/dropbox-minimal-viable-prod...

Rather than reject techniques like this because they're not technically products, I think we should expand the concept of MVP to include things like this because they serve the same purpose: learning about your market, reducing risk, validating ideas.
I would like to point out that SAIC more or less stole VisTA source code from the VA under FOIA and then sold the same code to the Department of Defense for billions. We still can't get the source code they've modified. Why is it that if a government employee writes the software, it's FOIA'ble, but if the government pays someone else for it, it's not? The government is just stuck with some crappy binaries?
http://aws.amazon.com/rds/

I believe Heroku used EC2 under the hood before the Salesforce acquisition.

Whether postgres (vs MySQL), the polish and better ui/workflow of heroku is worth the premium over RDS depends on you.
If there was a way to do this from Minnesota, I might be interested.
The Lua Crash Course
Awesome! You might consider putting a paid version up, even with the same functionality, for people who want to express gratitude for your work.
I hope more people see this post. It's a valuable message. Christmas is, for some, about Jesus and, for others, about family (and, for most, I think, about both). But no one ever says Christmas is about gifts! ...But based on what I'm seeing, it seems Christmas really is about buying.

My dad used to ask us, every Christmas, what the meaning of Christmas was. As a Christian family, we would each answer, "to remember Jesus's birth". But one year, one of my sisters - to be different - said, "To get gifts". She was then schooled on the meaning of Christmas. :)

If we don't let kids get away with believing Christmas is all about gift-giving... then why do we let ourselves? Why do we let cold, disconnected retailers tell us it's about gifts?---that we should show our love with gifts?
Sounds great. I have a previous background in programming, so is there some "accelerated" route I can take?
The Underachiever
Depends on what do you mean by that. Eventlog has both good and bad parts. If they integrate only the good ones, I call it improvement, not "more windoze-like".
They weren't sure it was good enough, or good any more, and they were trying to figure out ways of maintaining a timebase completely within the application, from server to server. These were developers, both salary and contract, in their 30s. As a former sysadmin, now programmer, it was surreal.
If only it were so easy given that they are already short on resources (not only money but time)...

Please do your research. Only 25% of poor adults work full time (compared to 65% in the population at large). I cite official statistics here: http://crazybear.posterous.com/why-the-poor-dont-work

According to your own link, 66% of the homeless are drug addicts or crazy, and 38% are drunks (I'm not sure if being a drunk is included in the 66%).
There are obvious advantages to having it be a full-blown tool your startup can implement instead of a Safari plugin, but this reminds me of Coda Notes (http://www.panic.com/blog/2010/06/coda-notes-previe/).
This comment is basically trollish but anyway...

You can scroll on the parts of the page... that scroll. The side bar and app bar are fixed (just like in GMail and a bunch of other Google properties now) so naturally the mouse wheel won't scroll them or the page.
I speak fluent PHP but would love to learn RoR. I'm not in the US either though.
Call for jQuery 1.8 Ideas
On HN, you don't RTFA, you RTFC.
Australian PGA Championship live stream golf online coverage 2011.
What the heck is OSR and why is it Bad (or Good)?
Even better, there is a major effort underway to legalize investing in startups by anyone. A bill (HR 2390 ) has already passed the House, and there's draft resolution in the Senate that would do the same thing. The main limitation will be that people won't be able to invest more than 1% of their net worth in any given startup, and that startups can't raise more than $1 million through it.

http://crowdfundinglaw.com/ has some more information.
The Economics of Used Apple Products
H.R. 2930 won’t kill the professional angel community
Doesn't work in Firefox or Chrome for me.
Sounds interesting. How much is tuition? What are the companies that will reimburse tuition?
Seems high compared to what?
I found the article that I was referring too. It's not required but there will be prompt for it.

http://techcrunch.com/2011/11/17/ice-cream-sandwich-prompts-...
I'm not sure if this is intended as a joke but I don't really get the "achievements" part, examples include getting a nobel prize , winning pwn2own, presiding over celebrity trials etc.

These sorts of things can only ever be won by a fixed number of people , so no matter how many hours you put into astrophysics the odds are that you will never win a Nobel prize.

The majority of people who are highly skilled and successful in their fields will never win any kind of gold star.
You should make clearer: if someone doesn't get hired, who ends up holding the bag? And how large a bag?

I'll forward this to someone I know.
Nevermind the fact that a simple Firefox plugin lets you download the MP3 for each song that you listen to for free...

Well, you could've also done that in combination with Youtube instead of GS (s/grooveshark/youtube).
and 43 Things (not to mention the unrelated 43 Folders)
What is probable is more than possible
I think the 'Google Groups' name refers more to being a Google search engine that searches groups (similar to 'Google Photos' or 'Google Videos').

Google Groups isn't just Usenet either -- they also allow creating private and public groups similar to Yahoo Groups.
Great initiative! I reckon the demand will boost shortly...

Where do you want to get to after 8 weeks? Would the "students" be ready to take junior RoR jobs straight after 8 weeks in your vision OR do you expect it will take longer?
I've seen a lot of "Cloud" database services lately, and while I love the general idea, from what I've seen in real life, for any serious db use, the impact of network latency is a HUGE problem. So unless this service happens to be residing in the same data center as your application it doesn't seem like a viable option.

The difference between a local DB with <2 ms latency to a remote DB with ~50 ms latency is huge. I've seen application start times go from 1-2 minutes to 20-30 minutes by pointing at a remote DB.

So if your app is even somewhat DB intensive, you really need <2 ms latency to your DB, and if it's not DB intensive, you probably don't need all the scaling and other infrastructure strengths these services bring to the table.
It will not become a universal currency for me, because I will never use Facebook Credits. I refuse to do anything actively to monetize Facebook. I'm happy to interact with my friends there, and that helps keep my friends on Facebook's social graph, but that is the most I will do for Facebook. Either Facebook will monetize through other users and keep going, or it will fizzle out like AOL and MySpace. Either way, I know how to keep up with my friends.
No fun!
When you say get it in writing, you mean like this?

http://koha.1045719.n5.nabble.com/PTFS-Koha-Community-Suppor...
HP's doomed tablet outsold Samsung's offerings
I'd love to have documentation for this kind of frameworks available in a downloadable PDF. I know it is probably often updated, but so can a PDF be. The reason for me wanting this, is that I usually get into the proper focus on places without a good internet connection, like when I'm travelling (airports, flights, trains, etc).
Programming, Motherfucker Do you speak it?
Great FOIA work. Putting all the re-blogging "journalists" to shame.
So, Unbundle sounds like Vim's ftplugins. Are there global plugins out there that work for a single filetype and interfere with other filetypes?
Go upstream and send it to Drudge. This has sensationalist anti-gov headline written all over it.
Not that I use Google Groups / Usenet from a browser often, but here it goes...

#1 and #2 Google should consider the scroll from any UI component; however, I have to wonder where you have drawn such a conclusion to 1999 UI/UX. You are seriously against fixed-position controls?

#3 You must have an axe to grind with Google and/or Gmail. At Gmail, the label-less buttons were daunting for all of one minute. In the case of Google Groups, the buttons are quite obvious and ubiquitous with their other properties. Again, if you at all use Google Apps, the buttons are a non-issue; are we going to complain about the obvious purpose of the "home" button on an iPhone?
Nor a new approach.
>It's uncharacteristic for a corporation to wage "ideological" wars

I thoroughly disagree with this. Corporations often wage "ideological" "wars". That's what lobbying is all about -- a corporation has decided Public Policy X will either help or harm their corporate interests, so they pay lobbyists to advocate for or against it.

Media companies like Universal, Disney, et al guard copyright very closely. They want to advocate the belief that intellectual property is identical to physical property and that the only rights anyone has to an idea are the rights that the idea's copyright owner decides they should have (usually granted when the petitioners include a large check with their request for rights).

Copyright is the most vital issue to media companies and they treat it as such. If they find what they believe to be gross infringement, they are not kind to its purveyors -- I think we've had enough history in filesharing to know that.

Grooveshark is just another way to skin the cat. Its extensive (and some would say "egregious") use of DMCA safe harbor provisions I think probably is one of the major inspirations for SOPA and PROTECT-IP. Cases against Kazaa, Grokster, and others did not come attached with new legislation because they didn't really have a plausible case under the DMCA. Grooveshark's service-oriented approach makes them a clear safe harbor, and unless Grooveshark quickly sees legitimization as a marketing channel and gets "white-knighted" a la YouTube and Google, they will remain rogue and the media companies will keep hounding until they get at the jugular. Since Grooveshark is using DMCA as a cover, the media companies just want complete control over "the internet" (i.e., the internet as most people know it, DNS) so they can send the Federal Bureau of Cybercrime Protection a notice and have Grooveshark or other services with a plausible legal defense blacklisted just like that -- no need for pesky "trials" when records companies are losing hypothetical money!

It should be common knowledge by now that old media will keep at this game until it ruins them. They are absolutely committed to it, and they will fight to death -- either theirs or ours -- to get copyright the way they want it, so that they can gain more cash from the so-called "lost sales" perpetrated by anyone listening to major label music or watching major studio movies but not buying at retail or iTunes.
I think you are correct.

I'd guess that the major target of this would be applications already running on AWS (which would put them mostly in the same datacenter). Obviously, a bunch of caveats about availability zones, etc.