skysight-inc/HackerNews huggingface dataset:
I never understand why people feel the need to spend time trying to advertise what they want out of and Apple product. The company doesn't care what the customer wants. They simply make things that sell and discontinue those that don't. The iPad 3 will probably outsell 1 and 2 combined, and they know this already. And they know that as long as they keep making improvements to iOS, every other platform/manufacturer is simply copying them and are one or two generations behind with no insight as to where Apple is headed.

Also, one would be surprised at the number of people out there taking pictures with an iPad. It looks weird but you'll get used to it eventually.
Why are people so angry? It seems like these guys are mostly just acting silly. I don't think it's particularly interesting or funny or whatever, but that's no reason to be mad at them.
Is there really a problem with nerds being groomed well and fashionably dressed? The people they describe are off-putting because of their attitude, not because their appearance clashes with the archetypal image of a nerd.
Reminds me of all the PHP tutorials floating around that only treat security as a side note. Essentially, the default configuration with Rails seems to be that users can set the data for any database column. It's almost as bad as register_globals...
Best explanation of public key encryption ever
The vulnerability is that Rails is insecure by default. That used to be the case for a lot of things, then finally people noticed how the real world works, and started fixing them. Apparently the Rails developers have actively resisted the lesson everyone else already learned.
And he's just demonstrated why this is not a responsible approach from the Rails team.
The watered-down implementation, though, may not stand up; as mentioned in the article, it will do little about prices besides force provider disclosure (itself an important step, as markets operate more efficiently when it's known what things cost, but not really enough).
Here, here. Kids are a great market for iPads. When we bought our first I thought it would be nothing more than a toy, but to see the interaction our 2 and now 3 year old has with it is amazing.

The gesture interface is an excellent method for kids to learn and feel comfortable.
Dont quite think this is what I'd call "responsible disclosure", and not exactly sure this is "disclosure" either.
SQL Databases are quite a lot like front-wheel drive cars on icy roads, you don't get a lot of warning before everything goes bad. The biggest problem is a query that finally exceeds what can be cached. You can go from less than a second to multiple minutes per query. It is much like the problem of doing high performance calculations where you want to use the CPU cache very efficiently and not have a cache miss.

Worse is when some optimizers suddenly switch plans to something that is inefficient. Sybase had a really bad habit of this with big datasets.

Sadly, a lot of the problem comes down to schema design. A lot of designs are just fine retrieving one item and its attributes from the database, but get into trouble when you try to retrieve a group of items with the same attribute from a database. Status reports (e.g. how many unpaid invoices do we have?) tend to sniff these problems out. I generally follow the rule "if a single attribute on an item is important to know, then knowing all of the items with that attribute is going to come up and should be designed for".
I actually have "Polyglot Brogrammer" as my headline on LinkedIn in the hope that recruiters leave me alone. It hasn't worked.
Which one did you get and have there been any surprises with it?
Google Analytics, and Reinvigorate for real-time info.
Pretty sure the entire brogrammer meme was meant tongue-in-cheek, and humor aimed directly at developers. Besides, anyone who might actually carry on in brogrammer style would soon learn the acronym CLM -- career limiting maneuver.
I think the point of contention is the necessity of tablets. As ultrabooks get lighter and more power efficient they muscle their way into the 3rd device slot that tablets are meat to fill, all the while holding on to the 2nd and even 1st device slots.
You are rarely a complete consume. Like here: we are being tiny producers here writing comments.But even this part is not very convenient on a iPad. If you have tried the split/thumb keyboard on Windows 8, you'll know what I mean.
Yes, I often use clojure.set's relational operators. (select, project, join, etc.) Because it's common to deal with sequences of tuple-ish data.

It's natural, once you lose this limiting notion of "objects" which aren't represented in a generic way.
*facepalm* Guardian mix up 'Java' and 'Javascript'
Windows 8 has a similar experience built in whith the advantage that you have a full OS with you at all times if you need it.
Developer Efficiency - Iphone vs Android vs Windows Phone (video)
I try to explain that to my co-workers every day!
Traveling over the last few months I've been shocked by the numbers of people using iPads as their primary camera when sightseeing, especially in China.
I wonder if it has occured to anyone of the discovers that there might be a market for seeds and seedlings. I suppose that it would take a few years to develop, but I'd love to have one on my front porch :) I've already got a competitor waiting to be carved: http://www.finewoodworking.com/Materials/MaterialsArticle.as... It hasn't told me what it wants to look like yet, so for the time being it waits in storage. The UPS guy keeps asking when I'll get started and I keep telling him 'not yet'!
This was more aimed toward the CS majors who graduated, but didn't have the skills necessary to land a programming job. It wasn't written with the intention of calling out all CS majors. The CS majors in my class don't know anything about their trade, which saddens me because they should want to know it. When asked "why" they were majoring in CS (first day of class), most of them said because they heard it paid well. I just find it inspiring that I met people who learned this all on their own.

Hiring a philosopher was an idea that I got from @mattt. He suggested majoring in Philosophy, if I wasn't happy with the CS curriculum. That if you set your mind to it, you can learn it anyways. With so many free books out there, it's almost scary what you can learn today.

For those wanting to know, I attend Austin Community College.
This also makes it all the more serious. As the PHP developers found out the hard way:

When you make it really easy to get started, a lot of people won't learn the system in depth enough to understand all the issues because they don't need to in order to make it work "well enough" for most cases.

By making Rails so easy to get started, they pretty much guarantee that there's going to be a ton of developers that don't pick up on, or forget, that they need to deal with issues like this.

That even a site like Github was vulnerable to this demonstrates just how seriously wrong it is to pick a default like this..
Not every idea from Merb made it into Rails. Especially when an idea would cause significant backwards-compatibility breakage (return string from action vs. implicit rendering), we stuck with the Rails approach.

I always felt that "it's up to the developer to do the right thing" violates the normal Rails convention over configuration principles, but I also weigh breaking a large % of existing Rails apps in a way that is not easy to quickly fix heavily.

That said, this problem is almost identical to XSS protection. We were able to find a solution that mostly "just works" for new developers, with some caveats, but it broke nearly all existing apps in a way that required significant effort to fix.

Like mass assignment, previous vulnerabilities were caused by Rails defaults that caused most users to make mistakes (nearly everyone had at least a few cases where `h` was required but wasn't done).

Like XSS protection, we have a solution here that will mostly just work for the happy path. The end result is a Rails default that will be only marginal harder to use than what we have now, but secure by default.
MBA 11" is actually 1366x768, but I'd prefer the 16:10 screen of the Asus over the 16:9 MBA. Also, unless the panel has changed, the Transformer has a beautiful IPS screen. The colors and viewing angle on my MBA suck compared to an iPad or Transformer.
This is usually true of language or framework-specific books, but not of more general books like The Pragmatic Programmer.
If you're looking to write books that will be read years from now, you need to focus on wider or more fundamental issues. The caveat here is that primers for long-lived languages like C++ have remained relevant for decades.
How about price?
I don't believe that is the case. Otherwise, we would see a shortage of care provided. Since everyone gets care, the competition with the super rich- if any- is vote driving prices
OTOH he didn't cause any real harm and disclosed the bug almost immediately. Don't be too harsh on the guy.
Tablets are for consumers, and laptops are for consumers, workers, and creators.
So? I posted that from a brand new MacBook Pro. Doesn't mean I've lost my ability to reason objectively or that I need to trash the opinion (passive-aggressively, of course!) of those who like Microsoft or Lenovo or whatever. OP made a valid point about Windows 8 and (you're right, what do I expect; it's Hacker News) it got downvoted for that simple reason. I think it got downvoted because it was a cogent point. Bullshit.
I use it all the time with the people I know who have it.

That said, my positive experience with FaceTime has actually induced me to also start using Skype, so that I can reach more people.
The linked post says "Why I do this? Since guys in rails issues ingored me".

Sounds like this was already a known problem that has led developers to shoot themselves in the foot.
He made an attempt to patch upstream, was shot down, and then proved his point without hurting anyone. Maybe not the best way to get the issue out, but we are talking about it and it wasn't especially harmful. Mission accomplished?

I don't know how else he could have done this. He was being ingored!
I thought so too, but the word I hear from people I know at Facebook (where the term originated) indicate that the people who started this are pretty dead serious about the concept.

Thankfully I work with no brogrammers - this might actually start being a hiring disadvantage if companies are known to be brogrammer-heavy.
I can't take this rant seriously when it dismisses the importance of fast startup. "You shouldn't care if your system starts up slowly" is just untenable.
Really? do you want mine? I got a netbook and it was the WORST money I ever spent. Looks like very similar specs, but my experience was that it was slow. Too slow to run more than a half dozen tabs in Chrome, too slow to play flash videos smoothly, and a dinky little keyboard that my fingers would be all cramped together and I'd fat-finger everything.

Maybe if I had Linux, things would have turned out better. On the upside, it's still kicking around. The odd time I need to use IE, it's got my back.
As a paying customer, whose sole reason in paying you is to keep his data secure, I expect a bit more than "we fixed it" ... details please.
In the traffic graph there seems to be a distinct correlation between the changed privacy policy and the start of the rapid growth. Did Google not announce it in early or mid January?

Myself I have long thought of switching from Google due to their annoying UI changes and their lack of regard of user privacy, but this change privacy policy was the thing that finally motivated me to switch.
I'd be very sad if that loud minority made it so that non-technical people associate "programmer" with the image of a drunk frat boy.
That's not going to happen, of course, but I think people judge that this sort of guys give a bad image of the programmers, as a community.
http://builditwith.me

also if you wanna shoot me your project ideas I wouldn't mind listenin' ;)
Agree. I don't see how you could take "brogramming" seriously, it's just a meme. At my company it's a running joke.

That said, if you do happen to meet someone who takes it seriously and lives that "life", then they're dumber than you think they are.
It really matters for servers how long they take to boot, particularly when you look at virtual machines / clouds, where they are thrown up and torn down rapidly.
Hey now. Metal music and martial arts are time-honored hobbies for nerds.
>The context is purely the model of provision; level of care isn't addressed.

Exactly. The level of care is not addressed, therefore you can call the US a backwater and hence receive upvotes.
Only Flash and StarCraft II heat up my Air, otherwise the fan stays off and it's completely cool and quiet.
For what it's worth, we'd like it if security vulnerabilities in Rails were disclosed to http://rubyonrails.org/security.

Obviously this situation is a bit more complicated, as a ticket was opened up, and a lot of community discussion occurred. In general, emails to the security list are taken extremely seriously.
Show HN: Book Discussion Proposals And Schedules
www.bookipede.com

Bookipede is a platform for online book discussions and a community for readers. It allows users to find, propose, schedule, and manage discussions.

We've just launched in the last couple of days, and are working hard to build a community. We're grateful for feedback on any aspect of the site. Here are a few specific questions.

1.) Is it clear enough what the purpose of the site is and how it works? Is there any confusion about what a proposal is vs. a group and how a proposal becomes a group or is that clear enough? Any ideas for making it more clear if not?

2.) Is the process of creating a proposal smooth and intuitive enough? Is it confusing or difficult at any point?

3.) Are our calls to action, copy, and design motivating and simple enough to get users creating and participating in proposals/groups?

Thanks!
Pre Order BSNL Penta T-Pad WS802C Android Tablet For 13500 INR
Don't take this the wrong way, but a laptop can still suit your needs just like a desktop. For various reasons, I have an 27" iMac and a 15" MBP, and from work, a MBA, full loaded, with a 27" Monitor. Obviously, an iPad 2 as well. So, I've used numerous configurations. Having the portability of a laptop with the "ergonomics of a desktop". I use a normal keyboard and mouse. While you would work from the one on the laptop, it wouldn't make much sense, imo.

Not trying to say you are wrong, just something to consider. As someone who very much enjoys desktops, the laptop + external monitor setup is quite enjoyable.
This is clearly a problem: with Rails' approach being 'right from the start', having no protection by default is not the right way to do it. This issue may be well known among the type of people that use github and read HN, but if someone had read about Rails being an awesome framework to make db-driven websites, they might not be aware of such a thing as a "mass assignment vulnerability."

If by adding a line or 2 to the code for generators can stop this, even if it includes a comment saying "Removing this line will do x y z", then I think the rails team could've treated the bug with a little more respect.

As @ericb said, if strong devs make this mistake, there's something wrong with the code.

I think it should also be noted that he didn't do anything malicious like trash repos, and even says on his blog:

"Then I could wipe any post in any project. That wasn't that funny but pretty
dangereous[sic]. It got more curious."

All he did was add a 3 line file to the master repo of a project that he was frustrated with. It generated all this attention, and will probably make them rethink the approach...

Finally: big props to the GitHub team for patching their vulnerability in <1hr on a Sunday...
Explained: How to create Pinterest Clone Using WordPress
Lean muscles workouts
Fastfatloss4life.com provides the information related with exercises that burn belly fat. You Choose and Boost Your Metabolism with Food. You can get the information which is very simple and explain how you can go out there today and begin your weight loss journey. For more information please visit: - http://fastfatloss4life.com/fat-loss-videos/
He tried to warn rails about it, and they closed the issue. Then he reopened it using the bug to show that it was an actual vulnerability, and they closed it again. https://github.com/rails/rails/issues/5228
À la LinkedIn.
Show HN: Google Search Stories, Facinating Videos About Google Users
I think it was just a way of categorizing the non gaming non- awkward subculture of programmers. I played sports most of my life and i dont play rpg or any game other than sport games with friends. i would say i was the typical developer. Its just a way of identifying men than aren't a typical programmer i would think that women would welcome the change in a very stagnant geeky comp sci culture.
Problem is , if this catches on with recruiters who will use it very non ironically like "rockstar".

How long until we see "Brogrammer needed" ads
Apple’s secret iPhone lock-in feature?
I've been thinking about this quite a bit recently because I'm about to buy a car. Mini Coopers are another make with a ton of built-in computers. However, every time I do a search on reliability I find people talking casually about gigantic maintenance costs. I saw a used 1999 Mercedes SUV for $5K, googled it, and saw reviews where people were spending $4000 per year to maintain it -- and that was back in 1999 when it was new! Why spend $4000 yearly to maintain a $5000 vehicle? Might as well just buy a new one every year.

Similarly, you can usually pick up a Porsche Boxster for only around $10K once they hit the 50K miles mark, because Porsche recommends an expensive scheduled servicing at the 60K miles mark. I think it's about $12K. (In actuality the car doesn't need all the things they do in that service, just some subset.)

But still. It just offends me as an engineer that "better" cars have higher maintenance costs. If Mercedes is so much better at making cars than Honda, why can't it make cars that don't break? Honda makes cars that don't break. Why is the "best" car company out there unable to solve a technical problem that the "crappy" company solved twenty years ago?

Not trying to troll the Merc fanboys, it just gets my goat. I had basically given up on ever owning a nice car, because of sheer nerdrage, but I found out Honda's S2000 has a fantastic reputation for reliability. So that's my plan.

Please excuse the threadjack.
Don't go to the convention center or any panels, but RSVP to the parties and go to the unofficial events. You should be fine.
From the article: "The focus on college education has distracted government and students from apprenticeship opportunities. Why should a major in English literature be subsidized with room and board on a beautiful campus with Olympic-size swimming pools and state-of-the-art athletic facilities when apprentices in nursing, electrical work, and new high-tech fields like mechatronics are typically unsubsidized (or less subsidized)? College students even get discounts at the movie theater; when was the last time you saw a discount for an electrical apprentice?"

That's a really good question. Back when I pursued my undergraduate degree (majoring in a modern foreign language), the state university's budget and sources of revenue were such that students paid about one-third of the cost of their educations through tuition payments. (That percentage has since increased for undergraduates at my alma mater, and of course this leaves aside the issue of who is subsidizing the students' tuition payments.) State appropriations funded by all taxpayers in my state paid for about another third of the university's undergraduate education expenses. (This percentage has decreased since I graduated.) Federal and private grants and all other sources of university income paid for the other third. (The university has since become better at private fund-raising--I get fund-raising telephone calls all the time as an alumnus--and a little better at licensing inventions and the like, but I think has a lower percentage of direct federal grants than it did when I was a student.) If a college education returns economic benefits to a student, and that is the usual claim, why doesn't the student just time-shift those economic returns by attending college with student loans? What is the rationale for public subsidies for university studies, and does that rationale suggest that other forms of studying should also be subsidized? Does that rationale suggest that different college major subjects ought to be subsidized at different levels of subsidy?
And we're back here: http://news.ycombinator.org/item?id=3659864
If that was the best social solution they could find, do you really want them near your codebase in any case?
: P
It's a pretty insane leap of logic to maliciously attack the Github website to prove your point regarding a framework hosted on that website. Politely contacting people about the vulnerability, rather than pulling that crap in an extremely public venue seems like the more mature, and less incredibly illegal way to go about things.
You make good points, but I'm not entirely sure that the possibility of someday needing to do analytics on the data precludes one from using NoSQL now. I've heard/read about a good deal of large scale sites running on NoSQL alongside a relational database setup for reporting. Seems like it's not that big a deal to move some of that data into a SQL store if/when it becomes necessary? If NoSQL gets you the simplicity and performance characteristics you want, maybe it's a premature optimization to limit your options based on hypothetical future scenarios. I could see it from either perspective.
Thanks for the link.
Sadly, that's the kind of style I'd like to avoid. Big square prints, horrible color combinations :(
FWIW, only 17 people turned up in a people search for "brogrammer" in LinkedIn:

http://www.linkedin.com/search/fpsearch?type=people&keyw...

That compares with more than 914,000 results for a people search of "programmer"