skysight-inc/HackerNews huggingface dataset:
The blogger makes a few good points. I think part of the problem is that he seemed to expect TortoiseHg to hold his hand a little bit more while he was learning to use mercurial. Instead TortoiseHg expects you to have a basic understanding of the main mercurial concepts (i.e. clone vs push, etc). If you do I think the experience is much smoother, since we have been careful to follow mercurial's naming convenctions and workflow when possible.

In addition TortoiseHg has a pretty good (IMHO) online help that goes through some of these concepts and perhaps going through it would have helped him... Regardless I agree that the initial "new user" experience could be better and that expecting a user to RTFM is probably naive these days...

Out of the issues that are raised in that blog post I think the "No URL" one is the most serious. TortoiseHg should make it easy for you to understand and fix the problem. I am looking into it and hopefully it will be better handled on the next version of TortoiseHg (2.4).

What I plan to do, other than improving the error message itself, is to show the "Sync widget" whenever a user tries to push without having configured a remote repository first.

Please let me know of any other problems or improvements that you'd like to see, and I'll see if we can do something about them.
Ah... but I'm trying to lure them into the fold, so they will become... programmers?
:)
Yes, one of Egor's comments in the github bugtracker had a small (but presumably not exhaustive) list of other vulnerable sites. It included Posterous.
From a cursory google image search it looks like you're right, I suppose my routine skews towards merchants that don't have one of those.
Tenant screening
We provide solutions for property managers by offering tenant screening services. If you are a property manager in need of tenant screening services.
Shadowcasting: a tutorial
A very approachable tutorial in C# on the principles of shadowcasting.
I wonder what Jack Dorsey is thinking, while reading of all these. I seriously doubt he worries about "...one retailer and they weren't using the device because the square was too wonky ..." It just sounds like a problem too easy to fix, and I am sure they've got bigger fish to fry.
We intended this to target commercial real estate agents, but you bring a good point in that by asking for a user's industry, the app can be applicable to almost any professional field.
JIT for Dummies: JIT Compiling RPN in Python
I don’t think you should try to rephrase my words in your words, because in doing so you are completely misrepresenting what I said. So please, stick to just reading my words, and if you want to disagree with what I actually write, do that. What I said was:

If you want to say that you disagree with the choice as it was originally made, I agree with that too. Meaning, I disagree with the design. At no time did I say that this or any design was “justified.” That’s your word, not mine. So I think you should stick to espousing your opinions, not disagreeing with things I didn’t say.

I’m very clear that I don’t like the design and don’t use the feature myself. But as I posted elsewhere, I just think that it’s not correct to say that Rails has a security vulnerability and especially that Rails is vulnerable by default. Both of these expressions carry the false connotation that all rails apps are vulnerable and that the fix for the vulnerability lies in patching Rails, when in actuality Rails has a questionable design problem, and every developer has the power in their own hands to secure their application.

My issue is entirely with the nomenclature, not with whether I like or dislike mass assignment.
The Big Three – Scala, Clojure and Groovy
I wouldn't say you were totally wrong -- the core checkin model hasn't changed, but it's just like twitter (as you point out) where the use case and userbase is what evolves and eventually hits critical mass.

That kind of thing is why I like to do pure-tech startups vs. social startups; it's a lot harder to predict success with the consumer things. When they do take off, though, they turn into Facebook -- and Foursquare definitely has done well for itself ($600mm valuation last year, so presumably over a billion now, a few years after founding) on the business metrics, and seems to have good user metrics too.
"Houses aren't very secure, here's a video of me picking the lock on my own front door."

"I demonstrated how insecure your house is by picking the front door lock and leaving a note on your bed."

Sometimes it can be difficult to have the empathy and perspective to see how frightening and unconscionable the 2nd action can be, but it very much is.
Twitter releases data to Law Enforcements for criminal inquiry
For people who say "C strings are null-terminated and you don't pass their length, get used to it", let me point out https://www.securecoding.cert.org/confluence/display/seccode..., which is part of the "CERT C Secure Coding Standard", and the new bounds-checking features in C11 (which I haven't actually seen yet).
Love to discuss if anyone has an opinion on this.
Yeah, except for the fact that both Jack Dorsey and Keith Rabois are both already horrendously wealthy and almost certainly have no interest in being acquired.
I've seen this a handled a few ways, depending on the merchant.

1. They show me the price before submitting it. I ask for a receipt sent to my email, which they need to type in, but I get it on my own phone immediately. The clerks I've seen do this HATE having to type in my email address because they invariably type it incorrectly.

2. The ipad swivel. I sign with a stylus, type in my own email address and choose to send the receipt that way. The whole time I'm talked through it all by the merchant. I prefer this method.

3. The clerk just rings me up and never bothers to offer the receipt, but I ask anyway, because, like the grandparent post, I don't quite trust these things for some reason yet. The clerk has no idea how to do it, so I end up showing her and then tell her about the swivel mounts and the stylus.
Mind Over Mountain?
Lloyd Dobler Wisdom
Related HN discussion: https://news.ycombinator.com/item?id=3665576
Seeing which email addresses leak is just an interesting reflection on the company. For example, the supposedly non-visible address I gave to facebook gets spam.
I think we’re in agreement. I don’t like the design, I don’t use it myself. I just think that it’s not correct to say that Rails has a security vulnerability and especially that Rails is vulnerable by default. Both of these expressions carry the false connotation that all rails apps are vulnerable and that the fix for the vulnerability lies in patching Rails, when in actuality Rails has a questionable design problem, and every developer has the power in their own hands to secure their application.
You should still implement non-js solution in Mozilla immediately to demonstrate how it's going to work once accepted.

js-based auth doesn't work for the whole web. Even for other browsers you have to make a solution where everything server can get the e-mail address without javascript on the client.

And you should definitely explain protocol as simple as possible for everybody who implements it to understand what's going on and how your services can be replaced by something else. That is, if you're serious about having a real cross-browser solution.
Univ. of Illinois Researcher to Present 350W/kg Cold Fusion Device on March 23
Furious-gold updates inside here:::...
Square and Apple seems like a great cultural fit. But I don't think there is a snowball's chance in hell Apple is even mildly interested in acquiring them, as it would make zero business sense to do so. And the feeling is probably mutual.
This has been Rails behavior from day 1. Rails seems to assume that people will make some level of effort to secure their application before deploying to production. There are many ways and places to protect models, and mass assignment protection is a blunt tool that would not have worked for github, so the default behavior is not the issue.

This bug could occur in any framework where someone assumed all attributes submitted are writable by the current user. Rails has no internal concept of users or roles, so building that by default into a model makes no sense.

This is a github bug, not a Rails issue. One could argue it's a questionable, but defensible, decision in the Rails framework, to have such an easy way to take every submitted field and apply it to a model. I'd argue that using such a feature in a production app is a fault of the developer for failing to read their own code, because it's rather obvious and clear what the code does:

@product.update_attributes(params[:product])

Does exactly what you'd expect it to do.
Same for Sunnyvale/Mountain View area.

I was thinking of getting together at least weekly at Hacker Dojo to talk about the course. Hit me up, my email is in my profile.
Ask HN: Unprecedented Coverage for One Topic?
As of 11:32PM PST, 9 of the top 30 headlines on HN are related to the Github/Rails hack. Has this every happened before on HN?
Mainly because they have an electronics lab where we can try some of this stuff out with physical pieces and it's just a cool place to get together.
Did anybody go through the verification process when ordering the device? After I input some basic info (like my birthday and last 4 digits of my SSN), I was asked to answer questions I have no idea how they even came up with.

One example is, "What hospital did you live near when you were on RandomName St.?"

How did they immediately know what street I lived on some years back, and also that it was near a major hospital?

The authentication was all pretty impressive, but kind of creepy too.
An Introduction to HTML 5 Web Workers
This is just me, but I don't think this is a viable business (just my personal opinion). Location based connections always sounded like a good idea back in the days without the Internet, and with factors as outlined in the article, it doesn't seem to far fetched to make the jump in 2012.

However, in the end, they are nice things to try out, but its really hard to get some long-term participation from users. That's what happened to the original Likealittle and following products: I'm not going to be on the hunt for new people 24/7, and if I am, there are plenty opportunities for me to do so.

Yes, I agree that technology will have some deep changes to our social life and behavior, so don't take this like a "never ever". But I'm skeptical.
Shopping in Hong Kong, find the best in fashion 
Hong Kong is one of the most developed and well known cities of the Republic of China apart from Macau. The province once ruled by the British Empire and a poorly maintained province is perhaps one of the best cites in the world.
I'm not interested in your sophistry. You're saying it is not a vulnerability in rails, on the basis that it can be fixed by users. That's tantamount to justifying it, regardless of the degree. Rails is dead wrong here and I'm not interested in playing the "try to be right on the Internet" game with you.
"for all intensive purposes"

If you're going to talk in cliches, try "for all intents and purposes".
For me the sad part is that there is an almost even split between people arguing the right way to bring this issue to every ones notice. I think this is the perfect way to show how serious the issue is and to get more sites to adopt the fix.

Exploits like this are worth a lot on black market. They are worth even more if you provide a precious and vulnerable target to go along (github).
http://xkcd.com/955/
Obat Liver Herbal
Solusi aman dan tepat untuk mengobati sakit liver dan empedu dengan obat liver empedu herbal... kandungan obat liver empedu XAMthone Plus...
Thanks for the feedback from everyone. Some of these things we've been aware of and are working on, others are news to us. We really appreciate it and will be working hard to improve the system. Please keep the feedback coming, whether here or through our feedback form (footer of page once you log in).
Got it! Thanks a lot.
The app is downloaded via the App Store - according to the terms of the app store, aren't Apple entitled to claim 30% of transactions through the app?

edit: Or, at the very least, entitled to 30% of the fees charged by Square to the merchant?
Mutual Fund & Management
I repeated the same experiment with different results. Searching "World Trade Center" in either personal or general results show no thumbnail links to the image search. There was one thumbnail linking to the news search, but it was a memorial picture. Searching "Oklahoma City" did list the image search thumbnails. The thumbnails were followed after six entries, if you include the Google Maps link. Only one of the four was related to the bombing, and that one picture was a distance shot of the build, not of human remains.
How do I make it so that users can copy text on a dialog box to the clipboard?
The irony of this all is that github isn't using attr_accessible at all in their application, but rather their own custom solution:

http://news.ycombinator.com/item?id=3664999
Pretty sure Apple and Square have a special agreement in place. At a talk I went to by Jack Dorsey he said they met with Apple before launching Square.
By the way, this is the perfect example of modernistic trash-thought that focuses on details and not behaving usefully. You navel gaze over the "correct" usage and nitpick my argument instead of getting behind the position that is going to prevent harmful behaviour.
It's a lesson our ancestors learned a long time ago and which some people are trying to remove from the pages of history.

It's called the free market.
Frightening? Of all the cabalistic groups in the world, the scene groups are not among the ones I am frightened by...
How to Use Magnetic Hair Rollers
Newb to coding seeks advice
I am new to coding and I am considering attending the Code Academy program in Chicago. I'm wondering if any of you would suggest better ways of learning how to code. I want to learn Ruby on Rails. Anyone have any advice? Is Code Academy worth the $6K price tag? Google "Code Academy Chicago" to see the program in question. Any advice welcome.
Pay Raises Won’t End Chinese Factory Abuses
Smart think to do would be to make it two pieces. Take the existing card reader but have an additional attachment that does exactly what you said, add stability by holding onto the corners. If a customer wants something small, they have that. Or they can get something for the load. Best part is that it would make manufacturing a breeze still all you would be creating would be a few versions of an injection mold.
That doesn't seem like a useful security question at all. Anyone can trivially find out the answer via online maps, and meanwhile the actual person who lived at that location might not necessarily know the answer themselves without looking it up. At most, if you use it as a trick question ("Hah, caught you, the person you wanted to authenticate as never lived on RandomName St!"), you get one bit of information, which you could get much more straightforwardly by asking "Have you ever lived on RandomName St?".
I don't know about that yet. Mobile payments is a hot category. While some are looking at it from the perspective of using your cell phone to make purchases, square is looking at it in the reverse. It's probably the best positioned POS system ever for the long tail that doesn't have or want a traditional POS terminal. To Apple is could be a resource to entering the iPad as the defacto kiosk to all things touch market.
HTML5 Cheat Sheet Infographic Released by InMotion Hosting
It's going _just fine_.
raganwald likes to put all the blame on "novices" and tell people to "RTFM" then take umbrage to the suggestion that he's defending the existence of bad design based on an idiotic, legalistic approach to conversation.
Cheap Nike Dunks, Air Jordans, Nike Air Max And Other Basketball Shoes For Sale
Downvoted once again by people who have no reply.
Building Ideas in Rails – thoughts from a non-developer
You might want to revisit the decision to work on yet another useless social media app.
Actually, a lot of those techniques still depends on having great content. From experience, many will be reluctant to link to a site that doesn't look the part, even if they get paid for it.

The thing is: who you link to also matters and can harm your website if not done correctly. Linking to a site that is full of scraped content, AdSense and with a poor design is a bad idea, for instance. When you place a link to a site, you become associated with that site.

Regardless of your tactic, you still need to put the work in to build a good looking site with great content or you won't get far. In fact, if your prospective target is willing to link to a shoddy site, I would treat this as very suspect. Chances are the link won't be worth anything.

As an example the easiest way to get paid links is through directory sites (the cheap ones) and you have to be careful there, a lot will not benefit you at all if not to a detriment.

To be honest, just having worthy content is almost cliche. I prefer to think of it as a foundation to build on with a variety of strategies and tactics. For example, you write a great blog post (the foundation) and then go and post it on your twitter, HN and/or reddit (your additional link and traffic building strategies). Without the additional work, it becomes much like a "build it and they will come" mentality and the only time this could actually work is if you were already at the top of your game.
if you split the iPhone and the iPod touch browser into two things, that is…
Scanning through the page, I noticed one oddity in the screenshots: the "Add an Optional Tip" page showed various fixed-size tips, but no way to enter an arbitrary amount. In previous versions of the interface, I thought the UI had an option to enter an arbitrary tip amount.
Anita Dongre Summer/Resort 2012, Lakmé Fashion Week
Thats worth quite a bit. As a result of this I am going to have to seriously reconsider my position. I'll try using pinfo for a while (Since it DOES use a curses library.) and see if it's what I had in mind. If so, and it does suck, I'll drop large portions of the idea. The main change I'm interested in is the "networked man pages" concept anyway.
IANAL but the issue simplified -> You own IP if:

(Developed while not employed) ||
(Developed in (California||Delaware||Illinois||Minnesota||North Carolina||Washington) && Developed on your own time using your own hardware) || (Your employment agreement/contract specifically assigns you IP rights)
I recently heard that grape seed extract and vitamin C can be an effective alternative to Ritalin. I haven't researched it yet, though.
Twitter s’emballe : Justin Bieber a eu 18 ans le 1er mars 
Adieu février et bonjour mars, qui a vu naître Justin Bieber ! Le chanteur canadien fête son anniversaire. Hier, les microbloggueurs ont évoqué Saint David et l’architecture, entre autres, sur Twitter.
Simple Made Easy - Rich Hickey
Second it. The subtitles on the right side is very good, but having a traditional overlay will make it perfect.
I suspect they request your credit report with your personal info (if you are a business requesting the report on someone else, you don't need the full SSN) and pull the information from there. Finding a hospital near your address just requires knowing where hospitals are, and those are in public directories.
I have been working with Mezzanine for close to a year and a half now and it has been great. The community is awesome and Steve (and others) are very responsive and helpful on the mailing list. I really like page_processors (http://mezzanine.jupo.org/docs/content-architecture.html#pag...) which allow you to easily add additional functionality on a per slug or per model basis. You can also specify templates on a per slug or per model basis. The simplicity, ease of getting started and ease of modifying Mezzanine push it beyond the competition IMHO. It takes care of plenty of things for you and gets out of your way and lets you develop when you need it to.

Note: I don't actually have much/any experience with Django-CMS so I can't make a fair comparison.
GlobalFoundries Granted Independence, Acquires Remaining Stake from AMD
Not sure about where you're at
Anonymous isnt a hacking group, and DDoS isnt hacking. Sure they get their do the odd hack here and there, but it seems to be isolated to a few key members. The vast majority is organising DDoS - the project management of hacking if you will. Raising awareness of security issues is certainly a good thing to bring to the corporate and public eye - but public awareness of teenage-angst masquerading as 'hacking' isn't the best way to go about it..
When you hit 34, you are a product of your actions.
Mari0=Mario + Portal ..Open source game
Bathroom renovation ideas
Small bathroom ideas - make the most of your bathroom with these tips and ideas for small bathroom
Why I love the NBA
Stubborn Computer Issues and PC Repair Tools 
In early days, you used to get PC repaired by local technicians at home or office or by driving way to PC repair shop.
Well, expecting popular blog with open anon access not to have trolls is rather naive. The reality is, however sad it seems, that there are thousands of people out there that enjoy this exactly type of behavior. And some of them, oh horror, may know how to program and read the same blogs normal people do. And until technology allows to find and punch somebody in the face by IP, they'll be around. They don't represent any community, no more that a bird crapping on your car represents the local community.
I used to work at a retail outfit that used the really old-fashioned credit card system involving carbon paper slips and handwritten amounts, which would be entered into a credit card processing system at another location at a later time. We could have essentially charged whatever amount we wanted, and this was fairly apparent to anyone who paid via credit card. And yet, out of every thousand people who go to pay with a credit card, I could probably count on one hand the people who express any serious concern about this fact.

Businesses have an incentive in maintaining their reputation and not getting into trouble with payment processors, and I generally think people assume any business approved by a payment processor is probably sufficiently low-risk to give a credit card.
Interesting data. Closure, Scala and Groovy all seeing an uptake. Clojure favoured by hackers and Scala, Groovy popular with Java devs.
More "an innocent kid was the only one not afraid to say that emperor is actually naked."

Please read this post written by meric, then give the counterarguments if you have them:

http://news.ycombinator.com/item?id=3665083

"I don't believe it is the stunt that costed github five to six figures. The loss of wealth was already there from day 1 when Github developers did not read Rails documentation and/or when Rails decided to make attributes publicly accessible by default. Today it is merely a "correction" where instead of Github's customer losing confidential company information without knowing it is now Github bearing the costs upfront, as it should be. In the "emperor has no clothes" story would you say it was the kid who pointed out the emperor had no clothes caused the emperor's embarrassment?"

You can also compare the whole context with the misfeature of PHP:

http://www.php.net/manual/en/security.globals.php
Mezzanine provides a platform that allows you to do a lot more than just CMS stuff, so some projects aren't completely CMS-based. The mezzanine-project command just creates a django project that has some settings already configured (installed_apps, middleware, urls, etc...) so you definitely could integrate Mezzanine into an existing project. In reality Mezzanine is a Django reusable app.
Http://www.addthis.com/bookmark.php?v=250&username=st3v3ndi3