skysight-inc/HackerNews huggingface dataset:
I usually get mine from:

* http://www.threadless.com/catalog/type,guys/view,25/category...

* http://www.thinkgeek.com/tshirts-apparel/

Good luck!
The difference is that heavy metal was never "cool", metalheads were always misfits just like nerds. OK, maybe with the exception of hair metal, but we don't talk about that.
I m gonna bring back punk into programming.It needs more of it.
6dollarshirts (http://www.6dollarshirts.com/t-shirts/) is a pretty nerdy brand, and has some good designs.
Dependable Systems and Networks 2011 conference
I 'm not that douche you want to show me. But it seems so, sorry.
He did the same with Tower: https://github.com/rails/rails/commit/b83965785db1eec019edf1...
One year before the first iPad was released, there was a small laptop with a detachable touch screen that I drooled over, the Touch Book: http://techcrunch.com/2009/03/02/touch-book-tablet-netbook-w...

The only thing I found lacking was the screen size, which was too small for me (8.9"). And it had an ARM CPU, which at the time (before iOS and Android) was a poor choice for most people, although I could probably manage just fine.
Jeez. How about just being a normal person? Y'know, like the vast majority of programmers out there.
Regarding your point 2, you can switch at least the stock browser to use a desktop User-agent in the settings menu.
Serious question: how is that any different than leaving SQL injection points in place and then just documenting it?
The Readability Fallacy
Just to be clear, he did not reopen the issue.
Agreed. It's true that math and programming intersect insofar as one is trying to prove the consistency of imperative commands (either by proving isomorphism with the lambda calculus or Hoare triples or something) but even writing something boring like WordPress invokes algorithmic thinking. You have thousands, possibly millions, of connections coming in a minute and don't want to thrash the database and want to ensure eventual response to all. Sounds like some pretty intense algorithmic thinking to me.
As a student, the compromises people are willing to make in order to own an iPad are amazing to witness. While this is anecdotal evidence, iPads are becoming notetaking devices, with such cases being pretty common. In other cases, people are struggling and bringing Apple Wireless keyboards, and pairing them with their iPad via bluetooth. In these situations, it doesn't matter how appropriate the device is. These users have an "iPad or nothing" attitude.
Printers are evil (and how to make them less evil)
That's a good start and i like the UI. I had some issues on the iPad 2 where transitions weren't really smooth but kind of laggy. The comments could be better arranged (some kind of tree were not only the top-level comments are different). Ashamedlion does have a point about the weird colours and the few refinements. Still the best hacker news app i have tried and will be looking forward for updates. Keep up the good work!
Show HN: Geek Wallpapers.com
Are you sure it's not that they don't own laptops, and don't want to spend the money, rather than an attitude?
Yes, it's basically trying cargo cult "coolness" , of course that isn't a 100% bad thing if it helps encourage people to get out and try something new.

If you take up a hobby just to appear cool then there's every chance you won't stick with it very long.

I'm sure there are many people who have taken up certain hobbies just to impress people and then found them legitimately enjoyable and fulfilling and they would continue to do them even if they became the most uncool thing.

Also since nerds have a tendency to hyper-focus on things in depth they will likely bring their nerd skills to something non nerdy and outdo the non nerds at it.
Sorta. You can blacklist instead of whitelist. The blacklist could make you secure, while still resulting is this 500.
I built this site last year and have let it sit for ages. I just relaunched it with a new design and I have a load of wallpapers stacked up ready to go.

I know it's nothing particularly interesting but I thought some of you might like it. Enjoy!
URDU SEX STORIES: Aunty Ne Number Manga
SourceTree is a free Mac client for Git, Mercurial and Subversion
I've had the same reaction to tablets. They're kid of a "tweener" device for me. If I want to, I can surf the web on my phone (Android), but I'm certainly not going to develop anything on a tablet.

I take a 15-20 minute ride into the city every morning and I've built a few apps on the way. I really couldn't see myself trying to type on a smaller device, with a smaller screen and a condensed keyboard.

I have yet to find a really good use for a tablet yet. I have an older 14.5" laptop which runs Linux Mint 11, and with only 1GB of ram, it's a lot faster than you think. It accomplishes the tasks of simple browsing, hammering out some quick code and other remedial tasks - and oh yeah, it only cost $150.
+1. Good read, thanks. I actually wonder if we would ever make that contact (whether we or they) I wonder if they would be more advanced or less. Lets assume more - then it would be interesting to see if it took them more time to come up with solutions to certain problems we facing, and R&D of hard stuff like anti-gravity, etc. And then, even more interesting, how fast would our world change and what kind of implication on an average Joe would it had, if they would agree on sharing all those "secrets". It would be like putting entire human kind on fast forward into year 2,500. Imagine someone handing you a recipe book: Chapter 1. how to travel faster than light; Chapter 2. how to teleport goods and living organisms; 3. how to grow safe food loaded five times more with nutritions; Chapter 4. how to generate electricity without harming environment; Chapter 5. how to extend human life up to 250 years. Chapter 6. how to peacefully transform world into more friendly place :)
The main advantages of a desktop over a laptop for me are that the desktop has far more storage and PCI expandability, is suitable for gaming, and since I don't need to work in multiple locations, I see no benefit in being able to disconnect my CPU and use it elsewhere. This frees up precious desktop surface space as the CPU is under the desk, and I don't have to deal with an extra monitor at a weird height and uselessly small size in relation to my main screen, or closing the clamshell to sleep, but then waking it up with external inputs and using it with the lid closed, which is very harmful due to improper ventilation, and I don't want to have to disconnect a bunch of cables when I want to go mobile, or reconnect them each time I want to use my workstation. There are a million small inconveniences to using a laptop as a component to a workstation, to the point that I'd simply rather not deal with it. Plus, desktops are cheaper; I can assemble a nice gaming rig/media workstation desktop plus buy an iPad for the same cost as a nice laptop.
This is clearly what the author of the blog post suggests, why do you assume the vulnerability is in GH's code ?
Unfortunately more than half of the 'programmers' are in my professional network, and that's not including shared groups.

If we include groups, 2/3 of them are.
sometimes it's better to do bold moves when some nastiy thing needs attention and noone is really hurt.
Oh the irony.

--
Service Temporarily Unavailable

The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

Apache Server at 2011.dsn.org Port 80
Hopefully they had the proper audit logs already in place.
i sent state=open and that worked. technically i opened it without being detected in activity. Typical mass-as-ent bug behavior
"There's a rising group of developers who are much more sociable and like to go out and have fun, and I think brogramming speaks to that audience," said Gagan Biyani,

Oh my, stereotypes FTW...
In the case of Diaspora it was a less subtle and more obvious issue. They just weren't checking for authorization, as in:

def destroy
@album = Album.find_by_id params[:id]
@album.destroy
[...]
end

when the second line should have been something like:

user.albums.find_by_id params[:id]

But, well, they're both pretty bad mistakes.
Absolutely. But there's a difference between subconsciously creating labels in your head and writing blog posts about subcultures.
20 Free and Premium Resume/CV HTML Website Templates and Layouts
And the idea of premium resume/CV HTML website templates and layouts is the best to create an individual identity amongst a throng of job seekers.
check out snorg tees (http://www.snorgtees.com/t-shirts/geek-nerd)
Thank you commenter "holman" on this third party discussion site, but as a paying customer could github please post something official somewhere like now
I don't think that these guys will be what give programmers a bad image. If anything, it's the fact that we're completely unwelcoming to anybody who doesn't fit the nerd stereotype in some way. The only exceptions is our openness to all women, and the article's main point was that he doesn't like these guys because they potentially scare off women. Women aren't all delicate little flowers that cry whenever a "brogrammer" is around. Hell, loads of women like these guys, just like loads of guys like "sexy" women who act cold and distant.

Most of those "drunk frat boys" someday grow up and get jobs somewhere. They're always the rare guy that everybody at their workplace hates, so I don't think anybody will ever legitimately associate programmers with party dudes. If anything, we're all lumped together as smug assholes who love to complain about other men's lifestyles.

I don't really care what someone does in their free time. If they can code well and they don't get in the way of my job, then they're fine. If their idea of a good weekend is going to a party with naked women, then I don't care. Claiming they're sexist is putting women on a pedestal, because some women chose to go to a party to meet such guys, and they're going to go back to their workplace and brag about the hot guys they saw at the party.

I'm not even a "brogrammer" by any means, but I hate how much male programmers go out of their way to claim to be morally superior.
> if I think if we were to take a look around at heavy web frameworks today, we would see a very similar approach of "let the developer decide" when dealing with Model security and serialization of fields

What everyone else is doing isn't a great justification--if decisions in Rails were based on what everyone else was doing, it would have been written in Java. In terms of Rails opinions, sensible defaults would be one that would suggest this should be rethought. In terms of rewrite-work, the Rails team didn't shy away from that with Rails 3, but I think the cross site scripting protection was worth the work. And even if the default is changed, nothing stops it from being a single line of code to turn it off.
http://www.redbubble.com/people/tguru/works/6433716-what-cd?...

what.cd is one of the nerdier yet awesome things out there.
When I read "this vulnerability affects tons of Rails apps," I read that as a security vulnerability in Rails. I'm not a user of the framework, but I've heard "convention over configuration" often enough to think that if this was brought up in the Rails issues tracker, it should be prevented by convention.
Google sued over picture of a Frenchman urinating in his front yard
http://www.quora.com/Why-dont-we-train-more-doctors
Which conversely means that as long a "brogrammer" isn't negatively effecting the working environment, then you should judge him solely on his work too.
Perhaps it's a way of asserting some sort of superiority if you discover that you are really just a mediocre programmer.

Like saying "I don't understand haskell but that's cool because I can totally bong a bear unlike you losers"
Like the article says, it's really off putting to women programmers. I would never consider applying for a job at a company that was proud of its 'brogramming' culture. We don't need more sexist workplaces.
Unity3d and Flash : a sneak peek.
Tried Virtualbox?
Yeah, I hear you. Still, for Persona / BrowserID to be successful, it has to support users regardless of browser. Choosing JavaScript means that we can build a solution that works for the whole web.
This clearly was malicious:

* it provides a how to for other individuals to repeat the attack, in a public forum.

* it was made against an innocent third-party.

* I doubt steps were taken to contact the third-party.

* it was made on a Sunday morning. making it difficult to scramble and get a fix out the door.

"Clearly the Rails core team were not willing to consider any kind of changes to improve the situation"

The ticket was opened three days ago. Are you advocating that if an issue isn't resolved in an open-source project, in under a week, the individual raising the issue should be able to publicly attack anyone using the project?

Also, I'll put this gem of a quote out there:

"not only github is vulnerable this way - I found a lots of rails apps that are waiting for my hack! Yeah, it is only start" (mwahahahaha).
Now hold on there. Make-believe is an important component! While you certainly don't want the kid to spend their entire life in a fantasy world, it's been demonstrated that make-believe basically improves your creative abilities later in life.
"It isn't a joke, either"

My predecessor at the current job fits the description - he was renowned for his sexist remarks and attitude. Don't know if he regards himself a "brogrammer".

Turns out a guy who doesn't give a shit what people think of his personality also doesn't give a shit about his code...

I would apply the term "brogrammer" to him in a strictly pejorative sense.
That's true but I think it was more that people thought it was better to be seen as an "edgy misfit" rather than an out and out nerd.
It's a very useful indicator that the company is looking to hire barely-sentient PHP monkeys rather than actual programmers to solve interesting problems.
You did that with https://github.com/rails/rails/issues/5239 and not https://github.com/rails/rails/issues/5228 as far as I can tell. I was responding to the comment that made it look like the Rails team closed your issue 5228 and you had to re-open it.
Android has a very nice, native YouTube app with a smooth interface. It can view about 50% of videos, though, since many users lock mobile users out (why?!). So opening the browser, using a development debug setting, running Flash and having awkward touch controls is quite the pain point for just wanting to see a video.
I don't know that I'd call Catan an example of complex strategies. It's far more complicated than chutes and ladders, but there is still a big chance element, and most of the technique is dynamic and social. (concealing your goals, misdirection, negotiation)

Chess is the classic example, in my opinion.
Can someone explain why there are large sections of the universe that are unmapped?
I like iMessage, but it can be confusing. I send a message from my Mac or iPad and replies show up in my iPhone, iPad, and Mac. If I left the sound on for all my devices it becomes caucauphonus.
i love webcomic shirts. they don't appear particularly nerdy to random people you meet, but they'll identify you to other internet people, and you get to support the authors of indie web comics. it's win-win-win.

examples:
http://www.topatoco.com/merchant.mvc?Screen=PROD&Store_C...

http://smbc.myshopify.com/collections/shirts/products/the-mo...
So does that mean femininity does not entail belief in one's self and doing what feels right?
a job ad that implies that nerdy programmers may not be welcome really restricts the size of the candidate pool.

that's what I find funny about the whole thing. "we're hiring programmers! no nerds." that's an unlikely strategy for success even when programmers are easy to hire -- which they are currently not.
This was not a case of "Rails is insecure by default".

There's very popular idiom in Rails development of updating model data from a form POST/PUT in one line of code in a controller:

my_object.update_attributes(params[:object])

Because many users follow this approach, it made this hack widely exploitable. You can either assign parameters piecemeal in the controller or explicitly set the attr_accessible attributes in the model. There's nothing inherent in Rails that caused this vulnerability, rather it was programming practices by developers.
First, let's be clear that the term "brogrammer", tongue-in-cheek or not, is downright misogynistic.

But equally problematic are the common beliefs that spawned the term in the first place; that programmers must always be obsessed with technology above all else, and to appreciate things like sports, fashion, or fast cars is somehow "bad" or "uncommon" for programmers.

There are a whole host of programmers who despise guys like DHH for enjoying fashion and cars. They seem to believe that somehow, those traits detract from his skill or significance as a programmer. That Rails is a "bad" or "fashionable" framework because of those things and is thus to be avoided. This kind of thinking is just plain ridiculous.

The spectrum on programming ranges from a hobby, to a career, even to the lengths of an obsession. But no one should be expected to act like the "norm". A programmer that cares more about the latest Ferrari than the latest web framework is not necessarily an undesirable programmer. They're just a programmer with different interests, and no one should be treating them differently because of that.
The problem is that it is a trend to the detriment of our profession. You don't have any other half way respectable profession with a sector of it trying to emulate being frat boys. Its embarrassing really.

Its a surprising slice of programming culture in that most who get into programming tend to be the polar opposite of frat boys. Maybe this is a side effect of The Social Network movie.
The multi-second difference in software start time, after waiting 5+ minutes for my RAID to initialize and all the onboard crap to check out is really negligible.
I have a Xoom with a wireless keyboard and I love the setup. It's important to push the hardware boundaries and blur the lines so you can see what users will want in the future. The iPad is too locked to allow for the developers to build real keyboard apps. But the Android tablet ecosystem is different, and it allows for more traditional-desktop-OS styled apps.

Development should be a smooth experience sometime soon, I hope. The author doesn't want an iPad but he might want some kind of Android device in two or three years.
There's a section about integrating into existing projects in the README, which forms the overview section of the docs, as well as the front page of the GitHub repo:

http://mezzanine.jupo.org/docs/overview.html#integrating-an-...

You basically just need to add the relevant settings and urlpatterns.
Should we consider this a 0-day on Rails?
Morning nazis must die!
No, a douche would have sold this exploit to an underground group. You just drew attention by show-hacking a big player, preventing other people finding the exploit while this goes unwatched - that's honorable in my opinion.
There has always been a problem in STEM jobs where people try to use social manipulation rather than technical achievement to get ahead. With brogrammer, people are trying to convince employers to exclude certain classes of employees such as women or non-social people. Then it becomes a race to the bottom of who fits the stereotype the best rather than rhe most qualified, and technical people end up taking orders from popped-collar types with no technical skills. This is not a joke, and there is a very real reason people are doing this.
Non-CS Bachelor's Degree now vs waiting longer to finish CS-related degree?
I'm wondering if anyone can give any advice on this as I am in a situation where I took a meandering path through college (going part-time for the last few years, was kind of aimless for a while) and I nearly have enough units to have a Bachelor's in Liberal Studies. It looks like it would take another year and a half to finish a degree instead in a Business / CS hybrid major which would be better, obviously, but I've already been working as a programmer for a couple years so I have experience and not sure if it would be beneficial to just have the Bachelor's in anything vs waiting a while longer
I think he was suggesting that people who get a detachable keyboard are actually after a laptop, not all ipad users.

I think he misses the point as to the limited software. iPad software is cheap, and you do not need to worry about viruses, crashes, losing the hdd, etc...
One more reason to purchased an unlockable device from a HW manufacturer like htc or samsung. These limitations are bad for consumers and bad for innovation.
Different strokes.

Having lived in both countries, my experience in the U.S. was less than ideal. About the same amount of wait times as in Canada, and the doctors I saw gave me very little options as to how I could treat one of my chronic injuries. Never suggested a follow up appointment, physio, or even x-rays/MRI's to get a better look. In Canada, they recommended me a specialist, and I have a nurse at a clinic who has built a great relationship with me to assess my needs when I need help, as well as x-rays/MRI's done within a week.

My experience isn't like all in Canada or the U.S. but after touting how much better I thought the U.S. would be because of my great insurance and living in one of the top cities in the country, I wasn't impressed at all.
This reminds me of how PHP used to turn HTTP request variables directly into global programming variables by default. Now it only happens when you enable the register_globals option. I don't think I've ever met anyone who didn't consider it a huge security issue.

This rails behavior is actually even more powerful than the old PHP one for hackers because with this you get directly into the model and then the DB when everything is still left as generated, not just the temporary variables. It's actually pretty surprising how much resistance there is to fixing the issue.

It could be that the proposed whitelisting isn't the only solution. It does require annoying configuration. With PHP, nowadays, most people just access a particular array when they want their request variables. Similarly, maybe Rails could have a request model object and a DB model object with simple methods for copying state between the two. Maybe combine it into some sort of validation logic with user friendly error messages being specified. I guess it is still more work that default overwriting of the DB with request variables, though.
I can't take you seriously when you don't justify your claims. Sure, it may be that fast startup is important for you, but it's not important for me as a desktop user, and it's not important for me as a server administrator. I reboot every couple of months at best when there's some kernel update, I suspend my desktops to RAM instead of shutting them down.

Two minutes of downtime per server is also irrelevant to its two month uptime, especially when you have clusters of servers so your service doesn't experience downtime at all.
This is a long-known problem.
Yes, I can totally see how paying for SMS is better than using iMessage for consumers and innovation.

Not to mention that the whole "iMessages go the the old iPhone device" which he mentions is a bug that will addressed, and also happens when moving from older to newer iPhones.
I like this proposed solution quite a bit.

Currently, I like to use a hack that automatically makes all models use attr_accessible with no allowed attributes. Until you override it with attr_accessible in your model, nothing is allowed, so you have to think hard about what should and shouldn't be accessible.

However, it causes real annoyance when not dealing with web input. Applying it to an existing project and fixing everything it breaks is super-annoying.
The only mention of programming on that site is PHP. How surprising!
No kidding. He probably could have sold this kind of bug for big $.