skysight-inc/HackerNews huggingface dataset:
Phase 0 (Big Corporate IT): PM is given deadline by business, goes through song and dance of negotiating deliverables (without any analysis being performed or developers consulted for estimates), is forced to start work with a small team of internal people outside of the business area not resourced to any projects currently, but who've coded a few lines of VB so can probably do a web application scaling for 5,000 users. PM then hires outside contractors (probably with even less knowledge of the business) to fill in the resourcing gaps as the deadline looms and the demo still doesn't work.

No real objective measurements for project success are defined or put into place, but at least the executives can say they're "embarking on a technology-driven initiative to improve [area of the business they're responsible for]" and so they meet their bonus criteria for the year, and if they've done everything correctly, the executive's contract will end before the project goes red.

If all doesn't go well, well, that's why you have PMs! They're the "responsibility buffer" - the guys you get to blame and fire rather than the actual executive who initiated the project and failed to provide real support and leadership.
>the "nobody's ever going to need more than 640k of memory" mode

FTFY.
Web-5 Conference: New Web Technologies, Web,Beziers 4-5-6 April 2012
So what's your solution? Crack the whip and yell 'You /can/ learn! You /will/ be a creative knowledge worker!'? Inject everyone with nanites or genemods to make it so? Or dump them in their own restricted area and let them subsistence farm or fight it out?
This is genius. How do you vet your experts? When is this going to release? Please take my money.
I hope I can remember to use that one.
No, it wasn't. If you wanted to communicate a legitimate concern (which you don't seem to have, just idle speculation), you would have done so. Instead, you were an asshole, and made it worse by recognizing you were being an asshole, and doing it anyway.
Airbnb, other sites owe city hotel tax, S.F. says
I once found this in live code which was -- irony alert -- checking Authorization headers. Something of the flavor:

"select user.* from users where TO_BASE64(email + ':'+ password) = '" + headers["Authorization"] + "' limit 1";

(Can't quite remember -- that base 64 bit might have been pre-calculated in a column. It has been a few years.)

One would hope that in addition to fixing the SQL injection they fixed the use of HTTP basic auth over a non-encrypted connection but, well, some stories are probably better left untold.
Completely agreed. And actually, this is a large part of what Tinfoil is currently working on building. If you have suggestions, we're all ears.

It's all too common to hear people not caring until its too late. At least with all the skiddies running around nowadays it's harder for anybody rational to ignore.
Anti Theft for iPhone – Make Sure That You Get Adequate Protection
she has missed the main reason the app is creepy, which is that it panders to and encourages the woman-as-prey mentality.
I would suggest you attempt to solve the "Cult of the Bound Variable" programming problem[0]. The first stage of the problem requires you to write an emulator for an "ancient" computer that has a very easy to follow instruction set.

[0]: http://www.boundvariable.org/task.shtml
How ironic that this is on a page that is such a disaster, design wise.
Gave up trying to read that, after less than 30 seconds.
We don't need a website anymore
In defense of the author, his audience appears to be mostly people doing black-box security scans (and those writing security-scanning software). For those people, understanding additional attack vectors is useful.
Ask HN: what percentage of HN users browse the new posts pages?
How many in the community are actually involved in bringing posts to the main page? I've a feeling most users only view and vote previously chosen posts, but I might be wrong.
These meetups happened a year ago (note that date for blog post is 2011)
Background checks
All background checks and criminal record searches. Employee and tenant screening, assets searches, business background checks and due diligence reports.
Light years is a measure of distance NOT time, the cliche "years ahead of something" is TIME.

Sweet Jesus this annoys me
Amazon’s In-App Payments Beta - Developers Have Pricing Control
Good Friday Sms Messages, Share Your Feelings By These Text Sms
Watch Online Kuch Kuch Hota Hai 1998 Hindi Movie
Watch Online Kuch Kuch Hota Hai 1998 Hindi Movie,Watchvideo songs, Watch sequences,Watch Filmstars:Shahrukh Khan, Kajol, Rani Mukherjee, Salman Khan, Farida Jalal,
What does "add-relation" do, in terms of what happens on the machine? Do different charms need to be coded with explicit relation types?

Like could I simply switch postgres for mysql in your example and have it work, or does mediawiki specifically need a relation to a mysql?
Sustainability consulting
We are sustainability consultants to companies throughout the product supply chain. We specialize in creating and implementing sustainability-related strategies that help reduce a company's environmental footprint.
Think Quarterly by Google
Lose Weight Fast through the Right Eating Habits
An example of the attack Thomas is talking about: Rails and Django were both bitten earlier last year (?) because their session cookies used HMACs to avoid tampering. Those HMACs were compared against the expected ones using the == operator, which short circuits in Ruby/Python, causing the comparison to be timeable.

Over the Internet, this is a problem. Over the intranet, this is a You Can Own Someone's Admin Cookie In 30 Minutes With A Nearly Trivial Ruby Script, because the timing attack is orders of magnitude easier. (You get nanosecond precision in measurements using only thousands of probe requests.)

The cloud angle to this is that deploying on Heroku / Slicehost / EC2 / etc would let the attacker, for the price of a stolen credit card (or less!), trivially get a local network vantage point from which to attack your application.
"7 bits" versus "half of 8 bits" are two slightly different things. One has a padding, the other does not. So the file size for a 7 bit encoding would be slightly smaller than an 8 bit one.
I'm a music producer, and this is a constant problem for me that after many years still boggles my mind.

The root of the problem is that producing a modern style recording of music is resource expensive. Far more than anybody would like it to be.

The resources can be time/money/talent. So there is an intense bias on everyone involved in the project to under-estimate.

I usually work on low budget projects. You can actually accomplish a lot with a low budget. But as you start to climb the "quality" scale the costs increase much more quickly than the quality. To get a product that you might consider subjectively twice as good might cost ten times as much.

At core, I feel like there is a fundamental principal of information organization. It takes a certain amount of resources to undo entropy and organize information. When we experience a piece of work we can intuitively feel that entropy has been significantly reduced, we appreciate the accomplishment. (Even if we are not in the field of endeavor we still feel it though we don't know how it is done.)

One specific point of difficulty in estimating time in music production is that there is an x-factor. It derives from the need to create something exceptional, which has both subjective and objective elements.

With an experienced production team you can predict how long it will take to produce something competent. But usually there is a point where we have all done the things we know how to do: the song is arranged, the players are good, the production environment is good, the instruments are good. But the song is missing something. What is it? It is not known yet. So an iterative trial and error process begins. Let's try a different singer. Maybe we should borrow my friends guitar. Let's keep recording. Let's rewrite the song.

Hopefully a solution is arrived at, but since it is a trial and error process it is impossible to estimate how long it will take.
"Also significant is the fact that Ulrich left Red Hat in September, 2010; ...he is now VP, Technology Division at Goldman Sachs."

For me this is the punch line to the story. I wonder how he's liking wearing a shirt and tie to the office.
Even some one-line functions or macros would make that code much more compact and readable.
玫琳凯化妆品价格
I want a full electric like an affordable version of this http://www.commutercars.com/ Tango. Maybe a little lighter and shorter.

Or something like a Nissan Leaf except smaller, two person max, less expensive.
I think it includes anything involving new knowledge: e.g. law, science/mathematics, invention. Maybe also in the academic Arts (I don't know enough to be sure), and also in the creative arts - painting, sculpture, writing (there's exploration and massive overruns there). Also, exploration in prospecting, oil discovery - though that's not really open-ended.

OK, I think it's being able to open up/zoom into finer detail (like knowledge, recursive structures, fractal) + discovery.
This is an example of the "open minded" being closed to the ideas of a person who is "close minded" when being open about their own opinions.

Some one who was truly open minded could never directly disagree with another without immediately becoming closed minded by the definition of what an open minded person might be.
Hazelcast 2.0 Released
Debian testing.
That latter; they want to be able to build a large and complex web engine and have it be as safe as possible without sacrificing performance.
Combine the Humanities with the Sciences

This has become a cliché about Steve Jobs. Understandably so, because it's fundamental and worth repeating. But it makes me wonder: who out there in the tech world actually takes it seriously? I think the answer is "almost no one". As far as I can see, pretty much everyone, including pretty much everyone on Hacker News, thinks something between "Humanities, haha" and "Yeah, yeah."

Whatever Jobs actually meant by this is so far from having any place in normal tech culture that we all think it's obvious and ignore it.
Any way to sign up without using a Twitter account? Or is the service so tightly integrated with Twitter that it would be pointless to do so?
http://wry.me/sonnetron/ computes meter using cmudict. It worked fine there, I think, though the word salad it's running over is easier -- when phrases make actual sense you sometimes get a verb mispronounced as a noun, and so on.

The logic is simple: reject a word if it has both stressed and unstressed syllables, with a stressed one falling on an unstressed beat in the meter. Pass anything else.

Very neat project, BTW. I've been wanting a good solution to the unknown-word problem. Here's a post on my blank-verse detector before: http://darius.livejournal.com/48525.html
Jeff Dean - Achieving Rapid Response Times in Large Online Services
My editor (emacs) does a great job at formatting Python code. If your compiler and your eyes get enough information about how code is structures from indentation so should your editor.
Bucks county landscaping
Bucks County Nursery & Florist is a Pennsylvania
florist and installer of paver patios that can meet all your
Bucks County landscaping needs.
Leave Iowa.

I was born in Idaho. I've since lived in New York, Seattle, and San Francisco; have built a great network and resume and recently raised a round for my startup.

... but I didn't do it from Idaho and you won't from Iowa.
New Relic finally adds Rails 3 view instrumentation
Rapid but Reliable: Ada on Rails
The most concerning thing to me is that "tower dumps" are routine enough to have list pricing established. Any judge who would authorize that, in the absence of a reasonable scheme to protect those other than the intended target, has a different understanding of the Constitution than I do.

Presumably a tower dump is mainly to target the home/business premises of a target who routinely uses multiple phones (throwaway burners, etc.). That is maybe justifiable, but catching other people (who may or may not be related to the target) merely for network proximity is pretty unreasonable. I could totally see a fishing expedition where a crack spot is targeted.
Any chances of getting rid of the redirects in search results? It's so annoying that I can't simply copy the result link URL and paste without getting some crazy Google tracking URL instead. It's such an obvious fail that I can't see how it's possible to not have it fixed yesterday, it made me switch to a different search engine.
It's not exactly the same thing - these are decorative robots, not working robots - but My Robot Nation is a lot of fun. You design and decorate your robot and they print it and mail it to you.

Their online robot CAD program is worth checking out for design inspiration even if you don't order a robot:

http://www.myrobotnation.com/
A critical look at the SAAS / Cloud model. Will it end before it starts?
Free Convert Video For iPad download
Step by step guide Free Convert Video For iPad download.
> I'd prefer to use a programming language that was easy to read and write in just about any text editor.

Actually you can apply that argument for whitespace only languages, because they produce code that is more consistent. So because the code is more consistent it is also easier to read and write (as opposed to say, dealing with someone's eccentric formatting).

Vim or emacs (the one I use) is available for any modern OS out there. It is free and has outstanding syntax highlighting and works through a terminal as far as I know.

In general it seems like this is a tail wagging the dog problem -- picking a language to work with (what seems to be a broken) editor.
Interns or Free Labor?
We'll help you start your next start-up
500friends (w2010, Intel Capital, Crosslink Capital),is looking for entrepreneurial hackers that are about two years away from starting their own great start-up.

In addition to the usual promises: personal growth, competitive compensation, equity, benefits, and free food, we'll help you launch your next company (assuming you kick ass with us, of course ;).

This means everything from brainstorming, providing seed capital, helping craft your first decks, to making investor introductions. Could be the perfect opportunity if you were rejected from YC (hey, tons of smart people are these days) or if you're just not ready to be a "founder" this soon, etc.

Check us out at 500friends.com, and if you're interested, jobs(at)500friends.com.
I suggest linking to http://www.makecupcakewrappers.com/ when you mention your site--makes it easier to find. :)
The x-forwarded-for example is the perfect example to explain why you should just escape anything and never try to guess trust boundaries.

Sure. When you started with that query, that IP address likely was just REMOTE_ADDR (guaranteed to not contain "bad" characters), but then the app was put behind a reverse proxy and support for x-forwarded-for was added, suddenly changing the IP address to something user-modifyable.

It costs practically nothing to use your ORM or prepared statements in order to escape all values you put into a query. So just do it and don't try to guess whether you can trust a value or not, because, after all, the source of these values can change, sometimes even without you knowing.
Have you reached out to the folks at http://www.startupcitydsm.com/ that's a local resource you could tap. Feel free to contact me directly through my profile for an introduction.

re: "Frankly, we are a bunch of 'nobodies' in the middle of Iowa"

"Never say anything about yourself you do not want to come true." Brian Tracy
Perhaps, moving into a library means it must be a clean abstraction and reusable - there's some legitimacy to considering it no longer "part of your program", so your program's shorter. If it is in fact used by other programs, by distributing its length over them all, your first program literally is "shorter" even including the library cost.

The library/language distinction seems less important these days (e.g. standard libraries are often thought of as part of the language). There is (usually) a syntactic distinction, of whether it's a keyword (global availability and tightly limited), or namespaced in some fashion (local availability, and limitless/open-ended).

ans: 1. syntactic/expandability, 2. yes, 3. yes, 4. they count in the wider system (as OP, I just meant you don't have to write it)
Law, I'm not so sure. Any variations posed by new legal cases are still limited by the basics of human nature.

Oil discovery? Don't think so. People may look in different places but they don't invent new ways of doing each project.

The other examples are all art. (The practice of science itself is an art and not a science.) Is software an art?
The ABC of Social Media Security
The TSA: Perception and Reality (infographic)
I interpreted it as very far ahead distance-wise If this was a race Ubuntu would have a sizable lead, according to TechRepublic.
I finally got FB since that's where the party is, but I'm not over 45. Why should I get twitter?
If you an idea or expertise to do something like this I don't know why you need to wait for Y Combinator to pick you up before you get started.

Making something profitable from day 1 is difficult but profitable from day 30 is less so. Yes the profit may just about buy your team a round of coffee's but at least you got off your mark. Your ball is rolling.

Waiting for seed funding before building your product seems somewhat counter-intuitive to me.
> we deprecate the face icons in favor of a series of combining characters that allow to mix and match hairstyles, face colors, eyes, noses, etc., to create arbitrary faces, why not.

Encoding Mii's in Unicode, brilliant! Nintendo should really try to get a spot on the committee.
We should always deliver a physical copy, on paper, of everything written during a project together with the invoice. Every whiteboard brainstorm, every source code diff and every email sent and received. Should make a decent stack of paper to give the customer a sense of perspective!
>Improvements to handling of symbols for indexing. ...we’ve now started to index the following heavily used symbols: “%”, “$”, “\”, “.”, “@”, “#”, and “+”. We’ll continue to index more symbols as usage warrants.

That, and the new "Verbatim' option, are really good news. There are also some five (10% of the entire list) timely tweaks to synonyms.

All in all, it seems Google listens and tries to improve its service, which has become rather paternalistic lately ("you wrote X, but actually mean Y", no I don't!). Well done.
Willing testers for a site that guesses your age?
This site is still in alpha, but I need some people to simply try it out and make sure everything works.
Http://marunadanmalayalee.com/Dinousres-69210.html
I think QR codes and also any type of near field communication is just not going to catch on.

if I am in a store and I want to make a purchase on in some way connect to the store, wouldnt it just be easier to install that stores app, or visit nikemob.com and communicate and make purchased through the internet?

shouldn't the internet be the communication medium?

Apple is already doing this, you buy items on your phone, walk into a store and pick up the item and walk out. You can even purchase in the app while in store without talking to anyone. no need to scan a qr code, or connect with NFC.
Fantastic! This shows the possibilities of what can be created given the text on Gutenberg archives. Assuming all the fiction ever created is available on your laptop (quite feasible now, except of course, for the small matter copyright) what new expressions can be derived?

On a different note, I read the about section of the blog and saw that the OP, in addition to this great stuff, is a beekeeping, hacking attorney who also spins fire. Amazing!
Willing to give you access to my Facebook? ...no
Lets bring this issue to the front of Hacker news so everybody can decide. :)
I am (the man) from Nantucket. Any other Nantucketers on HN?
Have you ever worked in an environment at the scale of Amazon? Machines go down all the time. I used the "six months" example to illustrate that the shopping cart is persistent, but the machine crash could just as easily happen the moment before you push "checkout." Losing shopping cart data just because one machine crashed is totally unacceptable.

Programming distributed systems that must survive machine failure and network partitions is a completely different ball of wax compared to simple web programming. If you haven't done it before, you would not believe how much more complicated it is.

Here is an extremely simple example. Suppose you're a radio station that's taking phone calls from people and you want to give an award to the 5th caller. Implementing a program that does this for a single machine is easy, and could be accomplished with a program something like this:

import SocketServer

class MyHandler(SocketServer.BaseRequestHandler):
def handle(self):
self.server.caller += 1
if self.server.caller == 5:
self.request.sendall("Congratulations, you are the 5th caller!\n")
else:
self.request.sendall("Sorry, you're caller #%d\n" % (self.server.caller))

server = SocketServer.TCPServer(("localhost", 9999), MyHandler)
server.caller = 0
server.serve_forever()

Using this program, you can "call" the program by doing "telnet localhost 9999" and the program will tell you what caller you are. This took me about 5 minutes to write, and I'd never used this Python API before.

Now imagine that you want to implement this same logic, but using a cluster of machines that could go down at any time. You want the group of machines to form "consensus" about which number each caller is; consensus in this context just means that the group of machines arrives at a single answer, and any machine you ask will give you the same answer.

Finding an algorithm that can do this robustly is so difficult that it was a major breakthrough when one was discovered in 1988. It's called Paxos and you can read about it here: http://en.wikipedia.org/wiki/Paxos_(computer_science) Even though it has been known for over 20 years, it is still a complex topic that very few people understand the details of.

The point of all of this is just to say; you can't compare a single-process in-memory cache to a distributed and fault-tolerant system. They are completely different beasts, and many business problems do indeed need the latter.
Your suggestion that a library's complexity/cost be amortized over the programs that use it is an interesting one.

What I really want to know is when a program counts as independent of another program, so its length (and thus complexity) can be measured separately. Terms like "clean abstraction" don't clarify this for me.

Is it as simple as saying: if my program calls your program and your program knows nothing about mine, then yours is my "library" and I need not add its size to my total?

If I make a system and call parts of it a "library", is it less complex than if I call everything the same program?
To search for friends. You still have to trigger this step manually and it lets you know that you're about to send Instagram your contacts.
What would taking it seriously look like?
Obat penyakit diabates melitus
Virtualizing Web Development with Virtualbox
We don't really. Flash's RTMFP protocol is the closest but it wouldn't sufficient to implement Skype's proprietary protocol probably. Without interop with Skype it would be be a tough row to hoe. I suppose they could create some kind of gateway...

I'm also waiting for this though. Skype is one of the few native programs I run and their Linux version sucks.