skysight-inc/HackerNews huggingface dataset:
Not really laughing. I don't really call myself a programmer, but I am always amazed at these kind of simple-but-dangerous mistakes. Accepting a user_id as a lookup value for a DB update? What for! Take the session_id and look up the user_id from the session table! If required, check if the authenticated user has admin level or "change any user account" rights and only then accept a user_id as a POSTed input.
Javascript Regular Expression Editor
2012 Prom Dresses Gowns
There's no better way to make your prom date say, Wow! than with classy, sassy 2012 prom dresses from blushprom.com. you want to look and feel your best. Our best prom dresses are not only gorgeous but they`re made in limited numbers and designed by our very own designer.Blushprom designers want to send you into your event looking like the hottest celeb walking down the Red Carpet.For more details visit our website.
Fresher's job Jaipur
Thoughtful Minds Web Services Pvt. Ltd. is proud to announce the best IT jobs for fresher's in Jaipur. If you are a fresher and wish to have a secured future then you must join us.
Dorsey is definitely reading, or I certainly hope he is!

Good information here. Lot's of valid points, complaints, arguments. There are many ways to improve Square, the UI, the hardware, the usability, training, etc. They have a solid product.
He was aware of the "other" public: his post with the picture of his cat got more "upvotes" than anything before:

https://plus.google.com/102150693225130002912/posts/Uk1YxfFD...
"Young man, do not take that flippant tone with me (raps ruler on desk). Those novice developers failed to RTFM."

I suppose that the github developers all failed to RTFM, too, right? So either they're all n00bs, or we can safely assume that everyone makes mistakes when the framework makes mistakes easy to make.

(Also, I suspect that you're joking about the "young man" thing, but it's probably worth pointing out that I've been coding for a long time. I may even be older than you. But I still make mistakes, and I definitely appreciate it when my frameworks make the Right Way the Only Way. It's not just about novices.)
Did your proxy check DNS requests? Anyone who runs their own DNS could easily assign a unique subdomain for each email, embed links to that subdomain within the body of the email, and see if they get any DNS requests for those domains.
Term life insurance
With so many resources available to you, perform the due diligence on life insurance companies before you choose one.
Square Register has all the features you need to run your business
and gives you the freedom to decide when to use them.
Posterous is down?
I usually use Opera Mobile, and have set the UA string to desktop, but I didn't know you could do this with the stock browser as well. Thanks, I'll try that out.

In Opera Mobile with the UA set to desktop, the experience on YouTube is suboptimal compared to a normal laptop, unfortunately.
Cosmetic Surgery Bonita Springs
The cosmetic Eye surgery Ft. Myers from azulbeauty.com.We pride ourselves in being the ultimate resource regarding the latest techniques and technologies in facial cosmetic surgery.For further details please visit our website.
Well - yes and no.

In many scenarios, there's no need for a completely different UI. Clicking links, buttons and input fields, for instance, doesn't require the UI to be that different. I don't disagree completely with you, of course. Things such as menus need to be very different.

Perhaps the problem isn't that they need to be different - obviously a touch based UI needs to be different from normal operating system UI as it is now, but perhaps UI on normal operating systems could be closer to what's needed by touch interfaces?
Adobe will Launch Creative Cloud
Well its not really tax evasion if I move to another country to live under a more advantageous tax scheme. Voting with your feet and all that.
2-for-1: Can Windows 8 satisfy both the desktop and the tablet?
Ask HN: Why PHP over Java?
Hi,
Why are most Webapps developed in PHP while enterprise apps use Java?
I am asking this because I want to build a team for our next web app. We were recruiting PHP guys but I realize that most PHP guys have only done work on customizing OSCommerce, Wordpress, Drupal or Joomla, etc.. no hard core programming. Java people seem to be more "hard core" programmers.
Can you tell me why I shouldnt use Java? Thanks
> or that it is technically true that Rails is insecure by default

PHP learned their lesson a while ago with register_globals: if you need to specifically disable people from attacking your site in many places, it's inevitable that you'll miss one or two.
I'm a just a fool with a simple Rails app and copy of _The Design of Everyday Things_, but this seems like a usability issue.

The default scaffolding doesn't contain an attr_accessible property, so it's not visible to the user that there's something missing. There's also no feedback from Rails that your attributes are insecure; only feedback if one tries to change an attribute explicitly made non-accessible. Figuring out which attributes must be private is a problem possibly beyond the scope of core Rails, though.

Perhaps a command like `rake routes` for publicly accessible model attributes might be of benefit.
Interesting to see how three JVM languages have emerged from the pack. Scala and Groovy proving popular amongst Java developers. Clojure also with a substantial following, but less commercial adoption.
Why you should learn HTTP?
Nothing worthwhile is ever easy. =)
The article is very good. I actually coded a project where my entire goal was to reach number one on google for the search term "male female translation." It took about a month but I eventually made it to the top following most of what was mentioned in the article. I just had to figure it all out via research, trial and error.
Adobe Launches LeanPrint to Cut Prining Costs and Improve Productivity
> To which, I add: The sulky, bratty Rails had a fourth thing it made fun of the Java old folks for: A culture built around the premise that the most important thing is to preventing developers from making mistakes.

But Rails has often tried to add security by default (SQL injections, XSS attacks, etc). So perhaps this claim isn't that correct.

> Either rethink it from the ground up, or leave it alone.

Or, you know, fix the problem at hand.
You're partially right. Log analysis will require some more tricks to get the relevant data, but there's still a LOT more that a log analyzer can do than AWStats or similar projects do. I believe it's perfectly possible create a log analyzer that can compete with GA.

(Then there's also another trick used by some log analyzers: Putting a bit of Javascript code on each page to request an empty image or AJAX call that generates a log entry with tracking info. But I'm sure that there's a lot that can be figured out even without something like that.)
The buttons look wrong on my Chrome 19.0.1055.1 dev-m.

http://i.imgur.com/E5mZT.png
Cheap Bathrooms Chester
Cheap Bathrooms Chester by chester electrical. Buy on line today at amazing prices and receive free delivery on all orders over 100.
Get the glamorous feel in the party
Dress is for the comfort of the body. The body looks attractive with the body clad with clothes. The party dresses look stunning and charming over the body. The styles, fabric and the design is the most important thing which will attract the people for these dresses. For more information visit at smccloset.com
The Return of "Best Viewed in..."
I've never tried code academy, so I can't comment there, but my guess is that it will be easier to learn with someone coaching you. You have to decide wether it's worth it or not though.

Regardless of that, I'd say the best way to learn rails is to do it. Build a simple web app or a personal blog or something small that meets your needs.

Books and tutorials are definately a less expensive way to get started and, depending on how you learn, possibly just as effective. http://www.humblelittlerubybook.com/book/html/index.html is a favorite of mine.
And don't include the iPad at all.
Getting links is still the most important part of SEO. She barely mentions this.
IPhone Lover Murdered a vendor in China After realizing He sold Fake iPhone.
It's developed in love2d(https://love2d.org/), a 2d game framework in lua.
The Collapse of Print Advertising in 1 Graph
Mass assignment in Rails applications (why GitHub was vulnerable)
Is it not more that compiling on a different machine should force you to test on that machine, thus uploading a known good binary to production?
Thats really handy, thanks.

Makes me think there might be a similar format that would work to encourage and make easier running workshops.

Really helpfull,

Thanks
It's also the part that is least relevant to the developers who are actually building sites, which is who this article is targeted at.
Apple Preps Up For The Launch Event Of iPad 3
Weight loss supplements
Our near endless variety of weight loss supplements range from those that reduce appetite to those that ramp up your metabolism and your workouts! Weight loss supplements don't just have to be strong stimulant based items though like those in the fat burner category but can be item like l-carnitine, CLA, green tea extract, Relora, and other effective weight loss supplements.
Any update on when this will be available in european countries?
Business turns to ants and algorithms in search for profit
July 17th is National Peach Ice Cream Day
customers were banks so they wanted the brand name
Laptop system board repair in chennai
Jay Jay Infosys Services :: We supply laptop repair parts and Laptop System Board Repair Chennai,Laptop Chip Level Service Chennai,Laptop Screen Replacement Chennai,Laptop System Board Repair in Chennai,Broken Laptop services chennai,Laptop Chip Level Service in Chennai, Laptop Screen Replacement in Chennai
I wish it was legal for me to put something like that joystick he devised on to a car. Then, at 29 I could finally learn to drive, which is something I repeatedly failed at; I can't map a wheel, a stick and three pedals (automatic is even more `magic`) to 'forward', 'back', and 'take this turn' in my head for the life of me.

I hear I'm not alone.
Is this gamification of the web?
Everything except "Building Links" I would call UX/Accessibility if only to avoid any semblance of the shadier parts of SEO.
Cleaning up after the breach constitutes of two parts:
1. Changing passwords, removing unauthorized changes/fraudulent transactions, etc. dealing with evil people accessing info that shouldn't be accessed.
2. Notifying clients of vulnerability existence, securing the system properly and changing procedures so that such kind of breach would have less chance of happening again.

In the white hat scenario, the first part does not exist and the white hat does not actually do anything harmful. The second part still exists and can cost tons of money, but this part is not the fault of the person who found the problem.

So while the costs _after_ a benign "intrusion" like was done to Github can be substantial - both in money and reputation, the costs _because_ of it are much less, since most of the costs weren't caused by it, it only exposed the pre-existing need of bear those costs. Like a doctor diagnosing somebody with serious illness - he's not at fault that the person now has to spend tons of money on drugs and medical procedures.
Does anyone have insight into whether the new Yahoo CEO is looking to cut Yahoo Labs / Yahoo Research? Their have traditionally been a strong information retrieval and data mining research powerhouse, but with the outsourcing of Yahoo Search's ranking algorithms to Bing, I would be worried about how Yahoo Labs can position themselves now.
Water heater problems
Water heater problems show up inall shapes and sizes. The temperature of water that goes inside your house depends on environmental factors – if it’s summer, expect to have a hotter water supply compared to the colder season. If you don’t want to take a shower or bath in ice cold water, having a water heater is a must.
They must be using KBA (knowledge based authentication) service for identity checks.
There are data aggregator companies (big ones are the credit bureaus but there are others as well) who compile all sorts of orthogonal data points about you (like the color of your first car, your mortgage amount) and in theory generate identity check questions that only the real you can answer all of them correctly.
Some more info: http://www.rsa.com/press_release.aspx?id=9459
Shop Buddha Statue China Sale Online
Ask HN: Application UI theming expert(s) wanted.
Hi, I'm the developer of Blossom (https://github.com/fohr/blossom), a candidate for SproutCore 3 and the first of a new breed of JavaScript application frameworks that use <canvas> for most UI drawing, plus native (non-WebView) runtimes when running outside the browser.

I'm looking for experts on "theming" – specifically, good approaches at the architectural level that would enable Blossom's built-in controls to be themed quickly and elegantly by designers. Every control in Blossom can be rewritten to accomodate theming.

I'm thinking mainly of the work that's been done modifying OS widgets on Mac OS X and Linux (and perhaps Windows too). Surely, good patterns have been developed for this.

If you know of any resources or people I can talk to, I'd really appreciate a comment here.

Thanks!
Teacher combining videogames and education to inspire children
It still auto-adds the attr_accessible list which is nearly as bad as allowing mass assignment in the first place. At most it should add an informative comment, and the error message about being unable to mass assign attributes should be made better, possibly with a URL to the existing mass assignment Rails guide.
It would be too hard to define what a "work" is. If I publish a collection of short stories does each story need a payment? Or just the book as a whole?

What about a collection of blog posts?
Best Website Fonts: Great Graphic Design Of Fonts (Free Download)
Kerala Honeymoon Tour Packages
Kerala Honeymoon Tour Packages offer Honeymoon tour packages in kerala, Kerala tour packages, Kerala honeymoon tour packages, Kerala honeymoon package, kerala backwater honeymoon packages, Honeymoon packages in Munnar, kerala tourism honeymoon package.
Poll: HN Meetup in Munich - date, agenda, etc. 
Based on the response to http://news.ycombinator.com/item?id=3656646 and the suggestion by kojote (http://news.ycombinator.com/item?id=3658023), I contacted the Couch Club (http://www.couch-club.org/).

I haven't been there myself yet but it is central, looks nice from the outside, plus they have a foosball table. Regular weekday hours are 2000-0100. The proprietor was open to welcoming our group an hour or two in advance if we agree to some "Mindestumsatz" (minimum consumption) as a group. She indicated 100-200 EUR but will come back with a definite number later. Their food offerings are sparse (pizza salami or vegetarian) but if we want, we can order more diverse pizze and other stuff and they'll coordinate with a partner. Internet access is not public but they will give us access if we need it for some presentation or so.

Which brings me to the next point: My own preference is that this not become too complicated. From my view, the primary goal is to meet new people with overlapping interests and let it roll from there. Talks and such, if demand and supply balance, can be organized later. Since we can have the place to ourselves for 1-2 hours, depending on what we decide, I suggest this "program":

1) meet and order food
2) while we wait for food, brief self-introductions
3) while we eat, max. 1-2 people can give a short talk
4) bar opens to the general public -> mingle/drink/foosball

Please indicate your preferred date below. If you send me an email at meetup@haija.net your voice counts twice. If there is a sponsor among you who, just in case, can underwrite the shortfall to the minimum consumption (if any), please send me a mail too.

For suggestions and discussion, please leave a comment.

Thx.
13 Mar 2012 (Tue)
14 Mar 2012 (Wed)
15 Mar 2012 (Thu)
Statcounter: Android web browser claims biggest user share
I'm hoping from the November press release they're moving international this year. They took on Branson as an investor too.
Interesting mashup. Rad advert. How long before it gets taken down by lawyers and will the programmer wind up working at Nintendo or Valve?
From Memached to Redis to Surpdb
Friction-less signup
WTF QR Codes
How do you know I'm not your grandma?
I want to check it out but don't intend to go through the whole course. Is there a way to take it for a test drive without formally registering for the course?

I know I can just stop participating and that would "drop" me from the course; but I hate to skew your analytics just to satisfy my curiosity.
This is why you're British
External card reader would be much more expensive because it has to (IIRC banks enforce it (probably thanks to insurance companies)) encrypt all communication with the "register" (in this case iPad). So it can't be just some dummy device.
While the brain is able to combine a lot of sources of perception and create complicated control outputs there are limits to this process. Coordinated turns and crosswind landings are mostly about matching the quite straightforward controls with the external situation and are not comparable to the three surface control problem.

The author spent some effort to build a joystick to demonstrate to us how the problem could be solved. I would think it appropriate you spend some time researching your point of view, maybe with a quick model in X-Plane. We will all be richer for what you find.
Sports Writer
You really have no idea what my standards are. All I did was say they didn't have to support VLAs to support other parts of C99. That tells you absolutely nothing, stop assuming so much.
this is gamification of life
I'm not sure if I'm missing something, but desensitising the general public to devices that their card is being scanned through (and occasions where that might be appropriate) will surely lead to to an increase in card fraud.

What's to stop someone jailbreaking an ipad, writing a custom fake ui, clipping in a square scanner, and writing off a days worth of cheap merchandise down at the park for a haul of card details?

If this becomes common, will credit card companies still offer the same guarantees on transactions?
Windows 8 available for Tablets now
Whoa, that's pretty cool and happens to be two of my favorite games :)
Hackers Winning Security War, Said Executives At RSA Conference 
SAN FRANCISCO (Reuters) - Technology security professionals seeking wisdom from industry leaders in San Francisco this week saw mor
In the legal sense, you don't need to literally break something for it to be breaking in entering.

From the legal-dictionary [1]:

breaking and entering v., n. entering a residence or other enclosed property through the slightest amount of force (even pushing open a door), without authorization. If there is intent to commit a crime, this is burglary. If there is no such intent, the breaking and entering alone is probably at least illegal trespass, which is a misdemeanor crime.

[1] http://legal-dictionary.thefreedictionary.com/breaking+and+e...
Ideally someone will create a FOSS tileset for it that transparently substitutes for the current Mario set. The gameplay itself seems fine; platformers seem perfectly safe as long as they don't use Mario graphics, and as for the portal mechanic, that has plenty of precedent: https://en.wikipedia.org/wiki/Portable_hole
As homakov suggested, you could at least define *_id attributes as "protected" by default. Only being able to change attributes on your own records probably causes a lot less grieve.
30 Free Photoshop Tutorials for Graphic Designers
There are lots of graphic design Photoshop tutorials on the internet through which one can easily learn about the techniques of graphic design or Photoshop.
Abercrombie & Fitch Promo Codes
Get Abercrombie & Fitch Promo Codes, abercrombieandfitch.com Coupons to avail discounts on all products and save money through online shopping at couponmind.com
Hehe, in Italy the "do not necessarily plan to declare" is unfortunately all too common. But I'm sure I required a fiscal receipt, so in this case that wasn't the origin of the price difference.
The algorithms used in this article are _extremely_ bad for the case! Realize that the guy is just trying to find the _longest overlap_ between two strings. This is, the longest part at the end of text1 that is repeated exactly at the beggining of text2.

With that in mind, it is _obvious_ that there is an algorithm linear in the size of the overlap to compute it. For instance:

def commonOverlapSanely(text1, text2):
right = len(text1)-1
left = 0
maxleft = len(text2)
while left < maxleft and right >= 0:
if text1[right] != text2[left]:
break
right -= 1
left += 1
return left

Instead of using this _very simple_ algorithm, the author employs three different approaches:

1. A "naive" version that keeps copying increasingly large portions of the original strings, and checking the whole portion each time. This obviously makes the algorithm quadratic in the size of the overlap, thus leading to very bad performance.

2. The KMP algorithm, that is designed to search for occurrences of a string within another one, disregarding where. This is a silly thing to do because the resulting algorithm is linear in the size of the longest input string, instead of on the size of the actual overlap.

3. An "indexOf" monstruosity, that is so wrong it is even hard to explain. Carefuly inspect the code and cry.

Now, please tell me if I missed something...
> What's to stop someone ... writing off a days worth of cheap merchandise down at the park for a haul of card details?

The fact that stolen credit card numbers, even with a full billing address and CVV2 code are still only worth a couple dollars on the black market. Your setup wouldn't even capture that, so your merchandise is probably worth more than the numbers. And you're putting yourself at pretty serious risk of getting caught by running this scam in person, when it's much easier to do some kind of phishing scam online anonymously, with more valuable results.

Stolen credit card numbers just aren't very valuable. If you're not living in a nation with an ineffective or corrupt legal system, what are you going to do with the numbers without a high risk of getting caught? Making your own plastic cards and magnetic tracks is expensive and you end up on security camera video using them. Ordering anything tangible online means linking your fraud to your physical location one way or another. You can order a bunch of porn or other intangibles, but that's a pretty low reward for all the risk.

In the end, it's a moot point anyway. Normal credit card terminals can be bought on eBay for less than an iPad and can be used for card theft just the same.
You can do better? As smart man as you are surely can figure out where to send the patches.
Dynamic Video Game Programming via REPL
Has anyone figured out how to throw fireballs yet?
Ok, probably the absolute value of the (very simple) repair doesn't make this a very significant example. But for sure it was a pretty big overhead.
Graphene Battery Turns Ambient Heat Into Electric Current
Mainly because unlike eating healthily it's actually a pretty broken concept.

Your search ranking is determined by your ability as a writer rather than the quality of your product.
La Romania Reale
First time a URL like:

https://squareup.com/register

Hasn't been about signing up for the web site.
Egor Homakov is classy. Damn classy.
Same on 17.0.963.56 m
A reply to: "I have an idea for a social iOS app, I just need funding"
This is an element of gamification. Gamification is the use of game thinking and game mechanics to solve problems and engage people. Within game mechanics there are six components. One component is achievement represented by badges.