skysight-inc/HackerNews huggingface dataset:
I've gone through the same experience and Microsoft has galp sold me Windows 8.

Having watched their keynote at MWC I am quiet impress at what has been done behind the scenes for Windows 8. Some influence from Plan 9/linux can be seen with the new hard drive space management. The new process management seems exciting if it works properly.

Microsoft seems to have put some serious engineers behind Windows 8. For that I tip them my hat.

I can't wait till I can get the Lenovo Yoga. I'm after a laptop with an IPS screen and I'm after a 13" tablet. I think my setup for next year will be desktop/server + Lenovo Yoga + 8" tablet + 4"+ phone.
If you're trying to get recruiters to leave you alone, why are you using LinkedIn?
Online essay
Closely submitted online essay is at the mainly reasonable price nonetheless use the great potluck to securely order it hotfoot.
> He made an attempt to patch upstream, was shot down, and then proved his point without hurting anyone.

Assuming no economic impact to github you mean. If paying users leave because they feel github is no longer safe for private repos because of this, that is harm.

I imagine a bank would be far more grouchy if someone exploited a vulnerability and deposited one cent into someone's account "just to show there was a vulnerability" then publicized it, without talking to them about it first. <sarcasm>No harm done right?</sarcasm>

Now, I am not saying that it is bad that this github vulnerability was found and fixed. I am very glad! But I think it could have been far more responsibly done.
Interesting. I wasn't referring specifically to Facebook, btw, and I've never seen Facebook mention "brogrammers" in their job postings.

Do they self-identify as "brogrammers?" If so, did they do so before joining Facebook or only after the fact?

The self-described bro in the linked article appears to only "program" in PHP according to his own website, so I think my assumption that he's just a monkey is fair.
Agreed. Especially because that would mean that implementing the algorithm at the same level (E.g. in C) would yield much better results than any of the cases.
Ask me anything: I'm a scientist in GMO / transgenic plant technology
Would that be some form of strategic onanism?
Approximating Earth as a sphere
The use of Iran as the enemy in a video game is not due to the fact that Dice is being manipulated behind the scenes by the government in an effort to breed a legion of living robots. This idea is in fact delusional.

When you look at the history of entertainment, from novels to video games, the most memorable content gives us something that is plausible and realistic, allowing us to relate better to the experience. This is why the political enemies of the United States are often featured in games, movies, novels, etc... Because they are currently extremely unfriendly to our country, it seems far more realistic that we may end up in a conflict with them in the future.

The most successful shooters are often the ones that follow this principle. The people who play them aren't a bunch of xenophobic, extremist, right-wing fascists, they are ordinary people who like the games for their realistic graphics and engaging stories.
If you run Linux on your netbook and don't turn it off (e.g. only go to sleep) then you can both have "instant-on" and an even better way to install software.
Amazon and How music should be sold
Chrome’s Actual Market Share May Be Slightly Less Than The Expected
I have no problem with people having a great time. I have no problem with people enjoying themselves. I have no problem with jokes, and laughs, and general messing about.

In some cases I just find myself feeling that people will probably be brilliant to work with in 10 years time when they grow up and mature a bit. Similarly, sometimes I cringe, or even step up and say that certain behavior is unacceptable, being rude, insulting, inappropriate, or offensive.

And it depends on the context. But to be blunt, when someone describes themselves as a brogrammer it just makes me expect the worst.

Impressions count.
I guess that is Norton of Conway and Norton Monstrous Moonshine fame:

http://en.wikipedia.org/wiki/Monstrous_moonshine

I'm glad someone wrote a book about him. Cambridge's loss will be someone else's gain.
As I understand it, for all you know, there were other intrusions anyway and you'd have to go looking for them and clean up after them anyway as soon as you learned that there was an exploit. Whether one dude actually posted something under someone else's name doesn't affect that there has been a huge hole in github for (apparently?) years.
For anybody who needs to get context, see:

https://github.com/rails/rails/issues/5228

Egor discovered that a lot of big sites which use Rails suffer from very serious security issues because the common Rails practices and defaults don't produce secure sites. It's so non-obvious that he was able to impersonate others, avoid most of the checks...

He was aware of consequences, but he got mostly ignored. So he decided he had to get enough attention and publicity. There are too many sites too vulnerable to just wait.
How does anyone know he hasn't placed a thousand backdoors elsewhere on GH? This could have been just the harmless shot across the bow. The real vulns being traded in the online underground market now (or in the near future)?
Nope, Diaspora also had this exact issue, which would let you use anything where a params hash updated a user model to e.g. overwrite their credentials or encryption keys. The specific exploitable example I found would have let you do it even if they had been checking authorization to update objects properly, because the attacker could reassign his own objects as the victim's objects with arbitrary attack payloads, one of which being sufficient to compromise the victim's account.

When I wrote a journal article about it my recommendation was that Rails ship with

ActiveRecord::Base.attr_accessible(nil)

by default, because otherwise vulnerabilities of that nature were virtually inevitable.
Rar has become one of my hot-buttons, so I'll respond as a consumer of compressed files in general:

Multi-file volumes are good and useful for many things, but last I checked, RAR doesn't offer a compelling advantage in performance, compression, or error correction vs. more readily available encodings, yet is encumbered to boot. (Feel free to correct me, if that is not factual).

Not that pirates probably care very much about that, and backwards-compatibility with old practices is always a consideration, but every time I see someone distributing software in a rar (not even pirated, mind you!) I always sigh deeply. It seldom happens, but...sometimes...
I can on my desktop, but I can't on my (Android) tablet.

On the tablet Google actually wants me to create a Google Profile before I can read the article.

I've never run into this before today. I wonder if its new.
It might just be that you're getting older but sticking to font sizes for teenagers, so you should simply increase your font size.

I'm 29 and I wear contacts, even though glasses are better for computer work. I have a slight astigmatism in my left eye; so slight that it can't be corrected by contacts. As such, it strains my eyes to read tiny text. So what did I do? I bumped up my font size.

Let's use HN as an example. I'm on a 13" MacBook Air with a screen resolution of 1440x900. In Chrome I hit Command-Shift-+ four to five times to make the text comfortably readable. In Terminal, I use Anonymous Pro at 16-22 pt. I often use OS X's Ctrl-Zoom feature to make things bigger.

I use F.lux to change the white point all the way to tungsten (2700K) at night. Since I was a kid I constantly focus through objects towards the horizon to relax my muscles.

I do all of these things to help my eyes, because I strain them all day long looking at screens. And I'm still in my twenties!

So do yourself and your eyes a favor and make your text gigantic.
Better control of HN possible?
Its up to 7, not trying to link others

Why are there 4 threads about the same thing on the main news page?

https://github.com/rails/rails/commit/b83965785db1eec019edf1fc272b1aa393e6dc57

http://homakov.blogspot.com/2012/03/im-disappoint-github.html

http://homakov.blogspot.com/2012/03/egor-stop-hacking-gh.html

https://github.com/blog/1068-public-key-security-vulnerability-and-mitigation

I have no idea if these will post properly.
tylermenezes: the first "closed/open" thing was done by accident, @homakove didn't reopen it. I closed the second bug as this was just kind of trolling to get attention, there was no point on keeping it open.
"They're not. Cappers and racers are different people. It used to be that racers weren't even affiliated with the release group, just people moving stuff between sites for upload credit."

Okay let me rephrase: "why do you think there are people called racers and/or what do you think pretime is all about?"

"The same person would have to do all the work involved in making a release. Usually, there's a division of labour: different person provides the source, someone else encodes it, someone else takes care of coordinating the release and so on."

For TV releases? Not a chance. Any decent private torrent site has the TV releases seeding within three minutes of the credits rolling. The capper is the encoder and the someone else taking care of distribution coordination is a bot...
"Buffer overflows are not a vulnerability in C. If you've ever used C, you'll probably be aware that has several features for preventing things like this from happening (strlen_s, memmove, etc.). Microsoft failed to use those methods, so it's a vulnerability in Microsoft. All apps powered by C are not necessarily vulnerable to this, only ones that have not been properly coded using the aforementioned security features."

And yet, people have stopped using C for a lot of things because of the security implications...

Look, when Rails is pushed as an out-of-the-box magic web stack--and it is--, and the out-of-the-box config has these problems available--which seems to be the case--maybe there is something to be said for the framework needing fixing.

Just because I can write code that prevents various exploits does not mean I expect the rest of the world to--and I sure as hell don't do so while brandishing about how even beginners can use my tools.
Install Ruby in Windows with Yari
> Calling it impossible is pure conjecture, but probably makes for a more link-baity article.

It's probably right though, and would be received with an incredulous "well duh" by most (if not all) biologists: we've known for quite some time that there's a certain amount of plasticity in development.
An alternative to attr_accessible to keep updates safe in rails
Talk about HN title link-bait. The article's actual title - 11 Google Analytics Tricks to Use for Your Website - is much more accurate (namely because the article has 1) nothing to do with startups and 2) nothing "advanced".)
I wonder why they have this rule for the Audio: "Nero and Apple encoders are recommended. FFmpeg is banned."

What's wrong with FFmpeg?
This is how we do it by the way http://news.ycombinator.com/item?id=3664365
Not bad. You won me over. :)
Hey, how come there are no comments by @dhh and @josevalim? Are we missing out on epicness of zedshaw-level?
very similar to uShip
Truthfully, I fucking hate this sort of shit. VC's and entrepreneurs are at opposite sides of the table. You can pretend it's a friendship, but it's not. Now, I don't extend this to angels. They are making a personal investment, or at least that's how I perceive it.

VC's represent a corporation with a corporate interest. I do not extend ethics to corporate entities. I will feel bad if something bad happens to a person, but not to a corporation. I will never allow myself pretend that corporations deserve anything close to a personal bond. And fucking shame on you for trying to make people think of that.

You are business partners. At the end of the day, it is money. You want to put a guilt trip on me? GTFO.
That's not the alternative to law, that's an alternative to humanity's current state itself.

The alternative to law is "I've got a bigger stick, you shut your face or I do it for you", where "stick" is not a metaphor for lawyers on retainer but an actual stick.
There are just 6 questions, I copied it from SO just to test it. :)
These sorts of tracking pixels or tracking items are long-standing methods of analytics gathering in the email marketing and delivery space. This is not an attack of privacy. They also know every click you make in that email as well. And of course they track the number of times you do these things. They also track that traffic anonymously if you forward the email to a third party who interacts with it.

This is the same practice as any tracking done on a web page even going back to the pixels that AWStats used to use.

I work for an ESP and we've been doing something similar since 2003.
It does smell a bit funny, but in a way what they do is not just copy an app but rather create an international / European knock-off. They identified a weakness in the way American startups operate - concentrating on the American and/or English-speaking market for very long while neglecting the rest of the world, and they're taking advantage of that. Their business model would become obsolete if startups became better at addressing international markets.
Just curious, who are you hosting it with?
I threw together a quick 'n dirty Rails generator that will generate the code for white/black listing all model attributes with attr_accessible/attr_protected.

Here's the file: https://gist.github.com/1975167, just add to lib/generators in your Rails 3 app, then do rails g mass_assignment_security -h

Hopefully others find this helpful
the after surgery eye drops are critical, make sure u religiously put them in after the surgery to prevent problems.
It's more of a legal grey area I think. If I climb through an unlocked window of a company to enter a restricted area for which I don't have access, and then write (or piss) on the wall, I think it still counts as breaking and entering. Or trespassing and vandalism at least.

I don't think I'm going to take this analogy any further though; things get dangerous when you base an argument entirely on analogy.
Did Obama really just say that Every Kid Should Go to College?
You rarely see scene related products (content/software) distributed in rar format? Really?
> The facts are: Egor has a way to cause damage to GH. I don't think GH would sit there wondering whether he would do the ethical thing.

Uh? It takes about 5mn to create a new GH account and push a new set of keys, it's not like killing his account does anything aside from annoying him.
I think systems that do not have a compiler will try hard to make it impossible for normal users to do chmod +x, too. Users likely will not have a login shell, and they will have a umask set to prevent creation of executable files.
Too broad, the article ignores the fact that companies like Zynga hire actual behavioral psychologists to create compulsive game mechanics that hook people in.

The consumers that do understand how addictive technology works don't use it because they know it's a zero-sum game that yields nothing, ergo not the target market for these strategies.

The fact of the matter is that addicted customers don't last nearly as long as loyal customers do.
How about a nested hash of attributes?

class PostsController
attr_accessible: :title, :body, :related_links => { :href, :title }
end

This would accept the attributes: post_title, post_body, post_related_links_0_href, post_related_links_0_title, posts_related_ink_1...

The names might not be right. I forget exactly how rails names fields. But you get the point, yes?
What do you think of doing it this way http://blog.ricodigo.com/blog/2012/03/04/an-alternative-to-a...?
Install Linux on the Samsung Slate then? Linux will be taking advantage of touch hardware built for Windows 8.

People have already got it running but with some missing pieces that will fall into place with newer versions of Linux/Ubuntu and with new hardware.
"Even if someone were to nab a cell from a developing embryo before the X-linked inactivation happened, the new cloned kitten would also randomly inactivate its X chromosomes, leaving two cloned siblings that don't have the exact same color pattern."

The different colour patterns part is true for any cloned cat's markings, not just clones of a tortoiseshell.

The cloned cat "Cc" who hit the news a decade ago was a tabby-and-white clone of a calico cat; calico patterns also result from having the black coat gene on one X chromosome and the ginger coat gene on the other, which is why calico and tortoiseshell cats are almost all female, and why ginger cats are three times more likely to be male than female. Trisomy does occur in cats but very rarely.
"This marketing spend is disproportionately targeted at the US, as it's one of the few countries which permits heavy marketing of prescription drugs directly to normal people."

By few, you mean two, soon to be one. The US and New Zealand, and New Zealand has passed legislation to phase it out.

The US will be the only country in the world where you can be advised of your potential need for a prescription drug not by a medical professional, but by an actor on a television screen.
> last I checked, RAR doesn't offer a compelling advantage in performance, compression, or error correction

May be time to check again:

http://www.quickpar.org.uk/AboutPAR2.htm
> with some fascinating features

If you come from PHP or Java anyway.
It's old. Google has god-awful mobile interfaces on most of their services that always either redirect you to something different or require you to log in and then redirect you to something different.

Sorry if I sound annoyed, but it's a pet peeve.
I really miss all those apps like Coda, Tower, SparrowMail or SourceTree on my Windows machine too :(
Ask HN: Reverse interview questions or how to avoid bad clients & employers
I've been a consultant for a few years now and have done alright in that role, but I very much miss being able to invest into a product or platform vs. being the rock star messiah and showing up to hopefully save the day.

Over the year's I've tried being an employee and don't mind most of what that entails. Crunch time's within reason are expected and pivoting in startup's is just the way things go. What I do have a problem with are companies that outright lie: "Oh yeah we have test coverage" from 3 years ago, "We are going to be the next Google!" but we have crippling technical debt, and other more bizarre incidents "We are fiscally sound and will last for a thousand years!" but we will start laying people off next month.

Somethings just cannot be foreseen or detected early, several years ago I was with a fairly successful startup that partially imploded because the partners could not handle the stress ( alcohol & substance abuse ). That said, besides obvious things like whiteboard interviews and out of domain technical questions (ex "How would you implement a B-tree?" for a webdev company ) is there any questions that might give a better insight to a company's soundness?
Yup, I was thinking that was the case, and that you didn't "act in bad faith", so to speak :) In other words, copying SO's content would actually be a good way to "preseed" the site with interesting q&a - if the attribution requirements are followed (some people get really angry when they see their own content misattributed).

Anyway, I was a bit confused about the +1/+share buttons; you might want to differentiate them a bit further. Apart from that, I like the site's extreme simplicity, both in look and operation.
GitHub and Rails: You have let us all down.
As someone that's never worked in rails before, the fact that rails allows you to take parameters from the url, and directly update a database object with them is shocking to me. That's like the first thing you learn about securing websites.
That would certainly be different, but by no means better.
Agreed. Immature - certainly. I don't think his actions were done with malicious intent. Maybe insolent, but that only counts in the military. If he wanted to he could have made his point in a far more malicious manner.

And the octocat tattoo... How can you not like a guy with an octocat tattoo!
Upskirt: pussy with the famous club in view photogallery
Obviously not beginner-level if more famous sites suffer from the same problem -- Egor mentions some in his posts and he is only one person -- imagine what all the black hats can do working in parallel.
I just wrote a longer than expected summary.

http://news.ycombinator.com/item?id=3664400
Finally, an actual case of music piracy/theft.
"The doctor flatly refused -- MRIs were only available after physical symptoms had developed. Of course, at that point, the available treatments for a flare-up of MS are less effective at preventing long-term neurological problems. (Happily, I am back in Japan now.)"

There's your mistake. You didn't see a doctor who owned (or who had bought a share in) an MRI machine. Those doctors are 4.2 times more likely to refer patients for MRI than doctors who don't.
http://speakerdeck.com/u/holman/p/ruby-patterns-from-githubs...

nuff said.
"Much more" is a drastic understatement. Pandoc is awesome.

The only "convert X.txt to Y.txt" task that pandoc can not handle is X=wikipedia
Save money on buying OS Mountain Lion X upgrade by using iTunes gift cards
> I would say that homakov's angry and not very mature reaction to his warning being ignored

Not just ignored but dismissed multiple times. It's not exactly surprising that he went and injected code into Rails's master.
I think I'd risk losing local credibility if I bail again, unless there's some highly visible progress being made with the startup.

Also, while I'm confident I can manage my ADHD to do one or the other, I'm just not sure if I can handle both. I suspect doin both could also be a hinderance to getting investors, but I'm not sure. I'll definitely be meeting with him after SXSW to examine the options & estimate how much time can be shaved off from the degree. I also want to explore what, if anything, he's willing to do on a larger scale.
Also, Asciidoc (used e.g. for the git documentation) has been supporting this for a long while.

http://www.methods.co.nz/asciidoc/userguide.html#_manpage
The law usually serves whomever has more money and power.

Having no law would be a form of anarchy. People with more money and power would still rule.

The groups that Anarchy would promote would be different than having law would promote. In the end, the masses are still powerless.
check out vanguard mutual finds, funds such as VSCGX, VASGX, VASIX, VSMGX are all very diversely balanced and their past performances weren't too shabby consider how low risk the funds are. if you were looking to take risks and actively buy/sell your positions, then those funds arent for you. but if you are looking to just grow your money conservatively because online savings are pay close to 0%, these funds are the right vehicles for your investment.
as with all investments, do your homework and research and never put down what you cannot lose.
How “Flight” Will Change PC Gaming
Personal choices aside (everyone has their own) from a professional standpoint you have to consider that even a mildly advanced Ruby programmer gets a bigger paycheck than an experienced PHP programmer does for the simple fact there are less Ruby programmers around and its currently on high demand.

So learning the hottest language can open doors for you, jobs-wise.
The 3 Holy Rules of High Conversion Landing Page Design
Google invested in Airship Ventures, the company that flies the airship: http://gawker.com/5069502/