skysight-inc/HackerNews huggingface dataset:
I don't think that really works, though. It certainly doesn't for me. Much of the time, I like the lighter, smaller tablet form factor (even compared to the several netbooks I've owned). I definitely like being able to flip between horizontal and vertical screen aspects on a whim. Other times, I really need to have a keyboard, but I do have to increase weight and bulk for that. Therefore, my ideal would be a single device that does both without having to deal with syncing data between two devices. An "ultrabook" cannot do that, by definition; if it could, it would be a tablet with a dock. It's therefore not true that an ultrabook can fulfill the third-device role. Its far more likely that tablets will evolve to become adequate second (i.e. near-desktop) machines while retaining their third-machine attributes, but it's flatly impossible for ultrabooks to become adequate third machines. For many people it's not the tablet but the monolithic laptop that is likely to become superfluous in a two-machine instead of three-machine world.
"Want to bro down and crush code? Klout is hiring."

Honestly, who does this type of recruiting really appeal to? Phrases like "crush code" have about as much of a cringe-factor to me as "wanted: code ninja".
[Disclaimer: I used to work on the Windows team]

I use both a Windows 8 slate (Samsung series 7) and a Macbook Air on a daily basis. Windows 8 recently released their Consumer Preview [1] and I'm finding that I'm using it more and more as my primary device. There's something about growing accustomed to having touch as an interface option that makes it hard to go back to traditional laptops.

[1] http://msdn.microsoft.com/en-us/windows/apps/br229516.aspx
At 12. Using GW Basic on a 286.

10 PRINT "TEST"
20 GOTO 10

I hadn't mastered the concept of breaking out of the program so I reset the computer. And then stupidly entered the same program again to make sure it, you know, wasn't a bug or something.
I believe the author can just turn off iMessage on the iPhone and it'll solve the problem. In fact, simply turning off the WiFi is probably enough as well.

In other words, this issue only occurs when a user switches away from iPhone as their primary phone but continues to use the iPhone for other purposes.
Overlap Detection in strings, with code
If you are targeting geeks maybe consider a special focus on multi-monitor wallpapers? I'm sure there are other ways of honing your focus on geeks beyond just the subject matter of your imagery.
Agreed. I read this thread, he nicely tries to draw attention to the issue several times, and gets the usual "big corporation pushback": Go away, if it was so important, we'd already know.

Then he proves his point, without hurting anyone. In my book, that deserves an A.
Dude, you're a hero.

Others just don't realize it yet because they're going through the stages of grief (Denial, Anger, Bargaining, Depression, Acceptance).
https://en.wikipedia.org/wiki/K%C3%BCbler-Ross_model

If no one else says it, I will:

Thank You!
He didn't try to "patch" anything -- there was no code attached to the issue he filed -- and he wasn't ignored.

What _really_ happened is that he was told, "no, we think that this is the application developer's responsibility." He became frustrated that the response wasn't what he had anticipated, so instead of acting like a mature software developer he started acting like a petulant child.

The point is, this Github exploit could still exist even if some protections were set by the framework. Developers should take their app's security into their own hands (and I'm sure Github does) by employing a solution similar to attr_accessible.
Its not a non-female concept as the author misunderstands. Its called Proglamming.

Its called free choice. To each its own; don't nag somebody's way of life and correlate it to their talent. Don't hate what you do not understand.

Brogramming is state of mind. If you let yourself immerse in it, you will see.
Sweet! I was wondering if someone would point one out for me.
I don't dispute for a moment that some people wanted VLAs or that they're useful in some contexts. On the other hand, your cited field is relatively small, and the use case could have been satisfied with a mechanism much more in line with the existing language.

In fact, we've de-facto had such a mechanism for decades, but it hasn't been codified anywhere, actually for some of the same reasons people don't appreciate VLAs, but it at least rests much more comfortably with the rest of the language.

At some point, you go from enhancing C to breaking it in the interests of a small minority (who apparently don't want to use Fortran?). VLAs are, if not over the line, right on it.
Didn't you just describe 90% of regular ole management? Ineptitude certainly isn't exclusively to this particular label.
One of the links on his site goes to this online game:

http://hogwartslive.wizards.pro/

I hope he does not advertise himself as a UI designer.
Is it possible that they weren't trying to shed anything, nor were their interests "compensating"? CS had become one of the most lucrative careers, naturally drawing in a lot of people outside of the traditional (e.g. I entered this field because I loved doing this as a kid, and have loved it since. Many of my peers did their very first line of code in university).

I'm not justifying the "brogrammer" nonsense, but just arguing that it's a field that does more closely represent all parts of demographics, shedding its traditional nerdly people-like-me basis.
Try "Rockstar Cobol Hacker"; if the recruiters are paying attention, they'll either be unable to find anything that meets the intersection of those sets or they'll have something so interesting it'll be fun to read about even if you don't go with it.

Of course, there's nothing you can do about meat-zombies spamming crap to everyone.
How Tortoiseshell Cats Show the Limits of Cloning
I'm old school and it saddens me that MUL is almost as fast as SHL. DIV is still significantly slower than SHR.
If you're playing an FPS or running a coupla VMs, it gets warm, but not too warm to sit on your leg.
I call Poe's Law :).
I have had so much fun with the brogrammer stereotype - developer jocks do exist and are quite common. We considered changing the name of our local developer meetup group from "Nerdy Food Meetups" to something "cooler" like Hungry Hackers, but we decided against it, lest the name prove too inviting for brogrammers. So far: success. The group has been 100% self-selective for nerds.
On the Choice of Browser and Numerical Intelligence
If an app makes it possible to do SQL injections, whose fault is it?

What Rails have done is to have a particular default (whose correctness can be debated) and document how it can be exploited and how to safeguard from it.
Filenames and Pathnames in Shell: How to do it correctly
It's on our todo-list. It's just about #50.

HN is a side project. And what matters most about HN is content, not formatting. So this sort of thing is two steps removed from top priority.
I was also thinking of PHP's register_globals. I was tempted to make a snide remark, so I'll make it now. The difference here is that the PHP group realized register_globals was a bad idea, deprecated it in 5.3 and removed it in 5.4. Furthermore the default has been OFF since 4.2.0. The resistance to fixing the Rails problem just makes me ever less likely to give Rails a shot, it should be really bad PR when you ignore security issues.
>You cannot easily switch licenses because you use other GPLd code. The spirits that you called up will now not let you go.

Well if he uses someone else's GPL licenced code together with his code then his code will have to be GPL aswell, what external GPL code is he using?

If all the code is his then he can relicence it any way he wants, no matter if he has released it as GPL.
I was sure someone would mention virtualization.

I use virtualization all the time, I have to, I can't even chose not to. I am a kernel programmer, doing kernel work without virtual machines is very difficult, for one particular non-Unix operating system I develop for it's even impossible.

But my choice for Unix-based systems is not necessarily dictated by work. I use Unix tools all the time, for everything. Why would I run Windows as my host when my toolkit is available only in a virtual machine and I don't care at all about the tools Windows offers me? It doesn't make any sense, I'd have to run at least one more virtual machine and I'd have poor integration with applications running in the host.

By having Mac OS X or some Unix derivative, like Linux, as my host I have my toolkit where I need it most and I can still run my target VMs.
The author seemed to be talking about devices of such a form factor, presumably after discarding options like the Asus Transformer (+Prime +Infinity). Windows 8 is only one small part of the equation, and there have been zero compelling examples of it on a device such as what the author described. Not to mention that as an OS it certainly hasn't proven itself yet.
Selling seeds is surprisingly hard in some markets; harder if you're trying to sell overseas.

And people are (rightly) concerned about invasive species, so it'd be interesting to see what the reaction to these plants are.
I like the approach Yii (PHP framework) takes:

http://www.yiiframework.com/wiki/161/understanding-safe-vali...

If a field doesn't have any validation rules set it will be thrown out when you save the model. This way you won't mass-assign to a column that was never meant to be mutable. Its a little more work to get up and running, but I think its a good tradeoff.

(You do have the option of turning this off, but you'd have to do it intentionally).
How Thick Is Your Bubble?
Airship Tails
The article did make a very generalized statement that "nobody wants to learn programming, they want to learn how to make programs" when your curriculum is an exception. With your rhetoric, you were able to get people to learn by trotting on through concepts in their barest form.

Fundamentally, you're both teaching by example and the code is simple, so that the results have a clear correlation to it.

It seems to be an aesthetic choice as to whether you teach concepts outright and make it communicable with proper rhetoric or illustrate concepts by highlighting their use in a simple application. It's like two guitar instructors. One stresses etudes and practices alongside songs and another stresses songs alongside etudes and practices. I can't see either way hurting a student. Whatever the choice, you're packaging this information in a way that makes it digestible to those who want to learn how to program (either the way of rhetoric or application).

I would like to say this though, at least you guys are not teaching Java by programming within the Eclipse IDE, which isn't ment for beginners.
Note, that the connection to the megaupload case is 100% based on speculation by the Paidcontent author (unless he was tipped to the existence of the documents in the docket.. he doesn't say how he stumbled across them).

What we do know for sure is that Google received a 2703(d) order (for non-content and subscriber info) and a search warrant (which could reveal communications content). Google later asked the court to unseal the orders.

I'm not sure why the government would seek both a d order and a search warrant for the same account (since a warrant also allows you to get everything that a d order delivers).

One possible option might be that the warrant (probable cause standard) was for one particular target for which the gov had more evidence, whereas the d order was used for other targets in the same investigation for which the government could only meet the "relevance to an ongoing criminal investigation" standard.

The recent order related to the continued sealing of the 2703(d)order: http://ia700807.us.archive.org/32/items/gov.uscourts.vaed.27...

The related order regarding the continued sealing of the search warrant: http://ia600804.us.archive.org/18/items/gov.uscourts.vaed.27...
It really depends on what your end goal is. Building a quick prototype doesn't need documentation, but building a long-lasting app that's maintainable and scales well with a growing dev team, documentation is extremely important.
you're missing the point. If the good engineers at github are getting this wrong then chances are this is a common security flaw.

Hence a plea to the framework to make this a default.
The problem with "bro" culture is its narcissistic conformism. I guess they are really looking for an excuse to behave badly. They know they are being assholes, so they manufacture a social environment in which they are encouraged to be assholes.

So listen, bros:

If you want to get drunk, and hit on chicks, that's your choice. But don't give in to peer pressure, and don't pressure your mates. Just be yourself.
I don't want an iPad or a laptop. My ideal would be an all in one device: a smartphone that docks into a tablet that docks into a keyboard. Something like this http://www.youtube.com/watch?feature=player_embedded&v=R...

I know it will be awhile until the hardware in the phone can be powerful enough to compete with laptop performance, but I hope it comes soon. Also, while I like ASUS' concept, I think it really needs Apple's design thinking to take it from good to great.
I think it's a stretch to call a bug a "lock-in feature".
You didn't really answer my question. Rails has all the helpers in place to sanitize input for SQL injection. Why in that case do they apply the defaults and not do so in this case? They both amount to making unwanted DB modifications.
Tornado as big as Earth rages across Sun at 300K mph
Quickest way (without multiplication) is divide and conquer, just like the usual bit popcount:

static inline int f(const u64 m)
{
const u64 ones = 0x0101010101010101ULL;
const u64 b64 = m & ones;
const u32 b32 = b64 + (b64>>32);
const u16 b16 = b32 + (b32>>16);
const u8 b8 = b16 + (b16>> 8);
return b8;
}
You found a problem, tried to warn them. They didn't listen, so you showed it to them, without harming anything (aside from a few egos). That's doing the right thing.
It's what happens when you have people going to college to hang out in frat houses instead of actually learning.
Well, for the price of an iPad, you can get a high-end netbook. So, at some point, people have made the choice to get the iPad over the netbook, and cope with the disagreements.
A quad-core A5 might have the horsepower to function as both a Mac and an iPad.

Think iPad, but with some ports and an SSD in the 'base', and battery and screen and smarts in the touchscreen part.

I wonder how much compromise would be involved in such a device. It seems like it might be much less, now that we have two devices, MBA and iPad that seem to be converging together.
eclectic format reminds me of original Whole Earth Catalog - articles interspersed with cool stuff. fun to read - kind of like an exploration with new things around each corner.
I own this Social Engineering Specialist shirt:
http://www.jinx.com/p/social_engineering_t_shirt.html
Developer-related shirts that don't suck:

http://www.rubyrags.com/

http://www.unitedpixelworkers.com/

http://shop.github.com/

https://www.startupthreadsmonthly.com/

http://www.redbubble.com/people/cyruseftos/works/6962476-ham...

http://www.redbubble.com/people/dorkitude/works/6791703-mong...

http://www.redbubble.com/explore/nodejs
Show HN: Arabic to traditional Japanese Numeral Converter
Here is the talk she gave at TED2012. http://www.ted.com/talks/susan_cain_the_power_of_introverts....
Welcome to the new decade, where PHP has secure defaults and Rails apps get pwn'd left right and center.

But seriously, PHP still has lots of problems to fix.
> I'll bite. From a UX perspective, PHP occupies the same important niche as WYSIWYG word processors or spreadsheets. Which is to say, optimized for beginners and quick websites.

Sure, I have no issue with that, I have issues with the assertion that PHP is simple and logical. Neither the language nor the standard library are. I'd hope I would not have to demonstrate this on HN of all places.
Whether it was malicious depends on the motives, and it's very hard for me to see where the malice is. To me it looks more like he just wanted to bring attention to the issue in order to get it fixed.

I already agreed that GitHub were innocent bystanders and that the timing was unfortunate. But if getting publicity to the issue was the main point, it's also easy to see why GitHub was the perfect target. I also already explained why it could make perfect sense to demonstrate the vulnerability in a public manner rather than just disclose it to one of the many sites suffering from the problem. None of that is a sign of malice, it's at most bad judgement.

The ticket having been opened only three days ago would be a good point if it hadn't also been closed and declared to be working as intended with a pointer to a previously closed bug about the same issue.
Not installing compilers on production machines is a relic from 1990 that doesn't impact security in any meaningful way. If I have access to your machine I can upload a compiler and/or I can upload binaries generated by a compiler at my end of the pipe.
Specs don't capture everything. An iPad is way better for browsing/reading/watching movies. Instant on is awesome. And I have to charge my iPad once every two weeks or so. Laptops don't have much for standby time. The App store is way nicer for installing software.

Of course I spend much more time on my laptop. I'm sure not going to code on the iPad.
I've used VA health care. It is awful. AWFUL. Let me explain using an analogy. What do you think the quality of care would be like if doctors could not be held accountable for their actions in a meaningful way?
Wrong, GPL is protected by copyright just like all the other licences, so as long as the reproduction is not verbatim but instead your own implementation based on the information you gathered while examining the code then there's no copyright violation.
Reminds me that according this NYT infographic :

http://www.nytimes.com/packages/html/newsgraphics/2012/0115-...

about 20% of physicians are in the top one percent. This is the highest percentage of all occupations.
+1 for a hero. Чувак. Ты крут.
Same here; I think this is classic "I don't use this feature, therefore nobody uses this feature."

I probably use FaceTime 1-2 hours a day every day.
Disruptions: No More Innovation for the Fun of It
God says...
soul to take it.

24:12 The LORD judge between me and thee, and the LORD avenge me of
thee: but mine hand shall not be upon thee.

24:13 As saith the proverb of the ancients, Wickedness proceedeth from
the wicked: but mine hand shall not be upon thee.

24:14 After whom is the king of Israel come out? after whom dost thou
pursue? after a dead dog, after a flea.

24:15 The LORD therefore be judge, and judge between me and thee, and
see, and plead my cause, and deliver me out of thine hand.

----

God wants you to go microscopic, now.

God says...
Canticles accept fornicating ftp shameful sex INCIDENTAL
scourge assign dimensions oblation blush speechless shady
gladdens wretched proveth drop Egyptian adulterous Bridegroom
spirits tediousness proportion discoursed parents asked
replace Chatto Mother texts gnawing foot conscious public
inordinate vintage faster affection soughtest affirmed
cure stumble PUBLIC equipment confesses burn Heal expenses
attempted instruct playing shipwreck stretching cleaveth
unharmonising warned Divers C mind That discussion counselled
TM revolt vital fleshly rent contemporary findest momentous
inharmonious perish Volunteers carelessly masses Newsletters
inanimate Catiline fastings tumultuously unhesitatingly
opinion FOR impurity lesson digest evidently Passing an
number forbid slothful correspondence right becoming invest
Go exhorting Troy clear rapture engine proudly gaining
digest strictness production Nevertheless auditor maid
bewitched used gleams concupiscence any writing necessary
stung REMEDIES secret readier fighting acts neglecting
tree tribulation Whereupon done forth sinner salvation
I agree completely. The attr_accessible issue has been around for so long (I blogged about it in 2007: http://news.ycombinator.com/item?id=1031168), I'd assume it is by far one of the easiest things to exploit in a production Rails application. Personally, if I wanted to hack a Rails application, this is the first thing I'd try.

Your proposed controller technique is great. This technique coupled with some intelligent defaults seems like a good idea, with respect to both sides of the story (both a secure-by-default and frictionless convention). I'm excited to see this in the limelight, and your proposal is a fantastic start to this conversation. Thank you sir!
NASA: Not a Secure Administration
> PHP is a perfect beginner language.

I don't really agree although I don't really care either, but "simple" and "logical" it is not. In fact, all three rules I quoted from your text (and likely a bunch of others, those three just jumped at me) are repeatedly broken in PHP's standard library (and for no good reason besides historical).

> Ruby is similar - it's a well designed language

Ruby is not that well designed, but design-wise PHP is utter dreck. That is the issue I take with your introduction: PHP the language is not designed, is not logical and is not simple (although they've been trying to fix some of the most egregious issues in 5.x, 5.4 finally allowed `foo()[$index]` for instance); and PHP's standard library is a complete mess of inconsistencies and redundancies.
His statement is a little ham-handed. But I think all he's trying to say is that he'd hire programmers with non-CS degrees first.
They probably simply made user_id protected on whatever table controls commit permissions.
Designing game mechanics into calendars
Got to love a guy with a blog post about recursively deleting files.
what if women (concisely or subconsciously) find the bro sexually attractive. Could one of the reasons more women don't enter computer science be because of the perception of "slim social pickings?" I'm not suggesting I personally agree with the "bro" ideology but it's fair to consider those that do not choose to enter computer science (male or female) make that choice for reasons motivated by mate selection.
IPad + Linode =?
I completely agree. It's pretty obviously counterpoint to the usual image of the programmer as nerd. I could see taking it seriously if the OP had said "I met some of these guys and they're as douchey as the article makes them seem" but this completely reeks of recursive trolling. The whole "brogrammer" thing is just a troll at people who think programmers can't have lives, that trolling successfully duped some mainstream media ppl (who probably think "Hacker News" is about the latest on who broke into what and stole passwords from which company), they reported the trolling as fact, and now HN is full of people picking sides.

Notice also how there's like no "brogrammers" in here giving us their side of the story? Almost as if they don't really exist? Or if they do, it's not a life or death to them, like it appears to be to the OP?

Funny to me because I wrote a rant about how Rails was no longer fashionable and Node is more fashionable these days. A few people dissed me for paying attention to tech fashion in the first place, but now HN is all up in arms, ready to break out the pitchforks and torches, over whether or not you wear a polo shirt.