skysight-inc/HackerNews huggingface dataset:
You can and should bind LIMIT and OFFSET with parameters on many if not most drivers (some can't handle it but most that I work with these days do, though I'm in Python, perhaps JDBC or other drivers are a different story). ASC and DESC are SQL keywords so assuming you're not a terrible programmer (which I know is what you're addressing) you wouldn't have those rendered from user input any more than the WHERE or ORDER BY keywords.

The lexical structure of the statement and the parameters themselves are two different things. You are correct that "parameterization can't save you from SQL injection", if you're such a bad programmer that you're feeding user input directly to produce lexical tokens. One example is a recent blog post talking about how to escape table names for apps that feed things like "customer_name" to serve as the table name (totally insane). Your example of feeding in "sort=xyz" to produce the column name in the ORDER BY is also a pretty awful practice - I haven't seen that one in like a decade, but sure.

So of course parameterization doesn't magically protect a system against all forms of attack - the programmer could be feeding user input directly into shell commands too. The recommendation for parameterization is addressing the bulk of the issue at least among the code that I regularly work with, maybe you deal with crappier programmers than I do on a regular basis.
I know it's a hot button topic, but my curiosity wants to apply this to higher education over the last 10-20 yrs. Do the assumptions of the problem allow for such an inference?
Sometimes they'll severely limit the supplies of the predecessor before it becomes generic, to "encourage" people to switch over to the new drug.
YouDropIn - Deliver videos from YouTube to Dropbox
Nothing. But why prescribe the generic Lowpainex when the new Nopainatall is proven to be 0.5% more effective? Plus the Nopainatall guy gave you some pens and pads and toothbrushes, and there are ads on every night telling people to talk to their doctor about the newest breakthrough that leaves old drugs behind.

Your patients don't want the old drug, do they? They don't want some pain, they want none.

Of course, Nopainatall is just Lowpainex combined with Tylenol... but that's inconvenient to take separately.
Color Palette The Right Way With a New Web Tool.
How is this different from AdWords?
This has to be one of the more ridiculous things I've read on HN recently. I (or any other developer) shouldn't be care about getting raises? Why exactly? There are lots of plenty of good places to work not called Valve that don't suffer over-politicalization
Parking is $8 - $10 a day in SOMA (where most tech startups are), and $200 - $300 a month[1]. Parking is considerably more on days the SF Giants have a home game during work hours.

1. http://sanfrancisco.bestparking.com/index.php
Lenned- The best fake and funny tech news
Microsoft researcher admits he guessed at the "Android botnet" source
Fail + learn = #flearn: Tweet it, post it and most importantly, share it
Http://www.copygate.co.cc/2012/07/top-10-richest-countries_05.html
婚活パーティー群馬口コミランキング！！
Dark matter filament found
Ask HN: Where can you find good remote work?
I am looking to switch jobs. Remote work sounds appealing, and I think I might be able to find a better and potentially more interesting job if I expand my search nationwide. Does anyone have any tips for finding remote work?
I'm betting that in many worlds your "pretty much any programmer may implement" goes for nearly all MechE patents too, civil maybe as well, and plenty of EE patents I'm sure.

In reality, nearly all patents are just ::at best:: a year or two of an engineering team crunching on a problem using existing methods - usually far less. It's difficult to say which are which though - so maybe patents are really what we want at all for nearly all things?
I never said what they did was important. I said it is the widest used, most distributed, and most encompassing software on the planet.

What it provides is trivial, how it does it is not.
FB Just Opened The Door To A Social Commerce Function That Could Be Massive
Free Rain Monsoon Season 2012 : Beautiful Desktop Wallpapers Background
Does it have to be blind or random though?

A path finding algorithm is clearly teleological, but also has false starts. That doesn't make it 'blind' or 'random'.
Mentoring is a funny one. It's much easier to mentor somebody who is local to the city, especially where the article implies a scenario where workers who telecommute are the exception rather than the rule.

However, I find that within field organizations (Sales, Services and Support), where working remotely is the norm, mentoring is easily achievable by spending quality, productive time in-your-virtual-face. Personal (i.e. non-intimate but beyond strictly professional) relationships can still be formed (and often do) but simply take longer.

Also, mentoring shouldn't be done over email, but over the phone and via WebEx/GoInstant. As you point out, email is the worst possible medium to mentor somebody. In our organization, if you attempt to pass off emails as 'mentoring' then you're in for bummer ratings during your quarterly calibration and review sessions.

To answer your original question, a few things that may be missed by team members who occasionally telecommute:

1) Sense of time and punctuality: The sense of time is important because people aren't generally wired to think about different timezones or lunchtimes when scheduling meetings or dialing out. And punctuality usually suffers when you don't make a conscious effort to always heed your 10-15 reminder warnings.

2) Picking up the phone: Onsite staff never seem to have a problem picking up the phone and talking to somebody (even for 10seconds). Maybe it's the close proximity and the option of being able to saunter over in case the phone call doesn't work out. Or the proximity of the lunch room or water cooler. But once these occasional telecommuters are home, it's as if they go into hermit mode and default to pure email. The irony should be obvious -- when you're working remotely, you should usually rely MORE on ad hoc phone calls vs. IM/emails to maintain the sense your sense of connectedness.

3) Productivity: This is the least reliable and is more tightly correlated with how social somebody's job needs to be in the office, but I often find that productivity drops for occasional telecommuters because they haven't been conditioned to fight against the usual distractions at home, such as losing track of time while in the zone (#1), napping & surfing (tied at #2), television/movies (#3), chores (#4), etc. You'd think that somebody would be MORE productive when they're in the zone and not answering IM/email/phone, and I'd answer that for a narrow subset of jobs this is true; but the majority of tasks often involve interaction with other parts of the organization or with customers, in which case all-day zone marathons are a net productivity killer when more than 2 people wasted their time waiting/pinging/fretting/bottlenecked by you.

The above 3 problems typically only happen to staff that only occasionally work from home. Regular remote workers typically don't exhibit the behaviours above because these slip-ups are more noticeable to other staff (both remote and onsite) when they happen on a regular basis.

EDIT: grammar
Work on open source software, Its not a coincidence most of the most successful companies that have remote employees revolve around open source software
In most data analysis work, we assume that the data resides in some database and that you have the luxury of iterating over that data as many times as you like to get to a final result.

The challenge with stream analysis is that you are dealing with a continuous stream of data where you can see each element of the stream only one time and must still be able to cluster/classify/analyze it. There are still few algorithms and tools designed explicitly for that purpose.
If by conception you mean looking at "you get a monopoly to make X related product" without looking past to "meaning someone else can't make Y related product"
A happier version of the same kind of argument: http://mashable.com/2012/02/14/drake-stacy-infographic/
I played online in college (like 5-6 years ago) back when it wasn't so shady, haven't played since. I really didn't have much prep other than a bit of coaching from a few friends who've played a lot. Vegas has tons of lower entry tournaments to practice on too.
How many people do multi threading in ruby? I'm assuming this is mostly for jruby?
Compulsory licensing may help in some areas, but the way things are going in the computer industry I don't think it would be enough. Even if you only charge $0.05 per unit, that can still be a big problem.

How many ridiculous software patents do you think something like a common smartphone must infringe on. If you infringe on 100 patents ("ability to tap on icon", "drag gesture to move things", "method for turning down volume", etc.) that's a $5.00 cost per phone. A low end phone may only cost $200 unsubsidized. If you only make $30 per phone, that's over 15% of your profits.

The core issue still exists. None of this would be as much of a problem if software patents were required to be much better defined and extraordinary, were granted faster, could be invalidated with prior art or independent invention, didn't last as long, and there was some sort of damage limit.

Right now, if the iPhone infringes on some patent that objectively covers 0.02% of the software on the phone, the patent holder can still go after tons of money. The damages aren't tied to the utility.

If Apple won the slide to unlock patent, and (due to the scope) could only win $0.001 per Android device sold... would they have still done it? What if (again, due to scope) they couldn't get an injunction on something so small?
Finally some data on LCD pricing and how fast it is dropping
> Once I made the stupidly embarrassing mistake of attempting to exit my vehicle during a stop

Yah, don't do that! Best thing is to do after pulling over is turn on the interior lights, roll down the window, turn off the radio, and then wait.

Doing that will calm the cop since he can see you easily, which can only work in your favor.

Some cops will ask you to turn of the engine, or leave the car, but most won't.
The thing is, if the information is released publicly, it is possible to verify some of the things and cross-reference them against things known to be factual. So they would not only have to fake information, but figure out a way to make it so that people checking it up to see if it's true get confirmation.. It's a nice conspiracy theory, but seems too hard to pull off.
Or not as much:
http://aws.amazon.com/directconnect/
Matt Cutts: Don’t Write The Epitaph For Links Yet [SMX Advanced 2012 Video]
Absolutely right. There are plenty of ways of making the same point without invoking a very serious condition that makes a lot of peoples' lives extremely difficult.
You raise an important point: the patent system absolutely must only award patents to significant, legitimate innovation.
Why is Hacker News so slow?
Why is Hacker News so slow lately? loading the thread index or a comment can take over 5 seconds.
What school even just mentions Bayes' theorem in Philosophy 101?
If these tactics work, you are working for a shitty company and need to find a better employer.
Agreed so far.

What's wrong with working from home?

When the CEO brings guests to the office so that they can "meet the team", you're never there. When the guests ask about your project, someone else on your team will represent you.

When your manager is muttering jokes to the team during the design meeting, you won't hear those jokes. Some of the jokes may involve the projects that are already being discussed in other parts of the company but which haven't yet officially arrived on your team's radar: You will tend to be the last to find out about those projects.

When one of your direct reports is fighting back tears, you won't see those tears.

When the VIP, whose schedule is booked so tightly that you can't get a meeting, is hanging out in the kitchen at the end of the day, you're not there to talk to her for five minutes.

Every time you present something, you'll be unable to see your audience's reactions in real-time, you won't see their raised hands, the remote slideshow software will take five minutes to launch, and the high-latency phone connection will drop at least once.

Now, I've worked at a company with a lot of remote employees, and a good company and a good manager who are conscious of these difficulties can compensate for a lot of this. But you're still playing at a higher difficulty level than everyone else.
I agree. The Logitech Squeezebox does the same thing. It's wrong. And playlists are essential but underexposed on the Squeezebox.

Speaking of Logitech, I wonder if Google collaborated with them for the Q. They did for Google TV.
wrt to his nutritional /supplemental writings in his latest books Kurzweil provides evidence in form of studies etc, or if not available or study was limited in relevance etc, he plainly acknowledges this. I thought it was obvious he was trying to fill gaps with what was available. He also acknowledges he is choosing to reinterpret some findings, and gives his rationale for this too. He also rejects a raft of homeopathic and modern medical treatment with same rationalization. He never claims to be a scientist, rather he says he is just a guy doing his best to leverage science from an engineer and inventor perspective for his own personal health benefit, and sharing it with the rest of us.
Seeing as it's now many years on, I'd like to see a follow up on this. Is the guy now happily married?
Agree. Whenever I hear the words better/worse used without an obvious axis of measurement, I am suspicious of the speaker.
Not yet! Jellybean only, I think.
I wonder whether it's not about patriotism, but control.

Perhaps Google don't really trust the Chinese etc for hardware.

Trustworthiness is an important factor for something that is always on, in your living room.

(cue 1984 references here)
How to Determine the Program or Process That Owns an Error
Great point on using shortcuts on web apps. After a while I forget they on the web and start using shortcuts. This support is welcome.

Great app, project page and effort.
The way it generally works is that Big Pharma releases a new "2.0" version (often a cis-isomer or the same molecule with a non-functional dangly bit on it), then hands out a bunch of money to get a portion of doctors to quit prescribing the old one, and floods the market with advertising about how amazing the new one is, without letting anyone in on the fact that it's actually functionally identical (or, as Cushman points out, sometimes marginally less effective).
The part that bothers me about the first case linked is that the officers were submitted to an internal investigation. They should have been arrested as soon as the video evidence came to light. There is far too little willingless to arrest and imprison officers that betray public trust. I know it's also this way in the US; it's incredibly rare to see an officer fired, much less imprisoned.
I agree with your basic premise that it's harder to objectively measure other departments as easily as sales quotas and top-line revenues.

However, I'd like to provide some additional metrics that I know other field organizations [have] use[d] (including ours):

Services - Professional Services (PS) margin, bookings, customer satisfaction scores, normalized mean project completions, budget ($ or hrs) actuals vs. estimates

Support - mean time ticket resolution, ticket volume, Maintenance & Support (M&S) margin, cust sat scores, # feature enhancements

You and every other HN reader know that all metrics are flawed in some way, but I'd still like to point out that although Sales quotas are easily judged, many organizations struggle to quickly/easily quantify the frequency with which sales people sacrifice longer-term sales for short-term quarterly wins.
LeanMarket's value proposition is probably not very clear to anyone who isn't familiar with real-time bidding. This Google whitepaper goes over the industry at a high level: http://static.googleusercontent.com/external_content/untrust...

One core component of RTB is the separation of supply and demand. This is different than the ad network model where a central hub connects the buyers and sellers who all work with the network. This "central hub" approach is true of AdWords; you can buy traffic from AdSense publishers through AdWords and no one else.

Through LeanMarket, you can buy impressions from publishers who sell through Google, Microsoft, Admeld, Rubicon, or PubMatic--none of whom LeanMarket has a direct relationship with.
I will work at Prismatic.
Klitschko vs Thompson Live Boxing Match Results 7 July 2012
On my Firefox, Ctrl-K puts the cursor in the search box. (And on Chromium it puts it in the omnibar with a ? prefilled.)
Yeah, I was thinking the same thing.

It's convenient that I agree with his opinion, but I'm a little uncomfortable with the way he's going about things.
If this line of reasoning were correct in general, then we would expect to see an astonishingly low number of people in any kind of relationship. The simple observation that people all over the world pair up quite readily suggests that this whole thing is wrong.

In fact, since the author puts the odds of a given mate being in a relationship at 50% we can conclude that either:

1) The author thinks there is a fundamental difference in the process of seeking a woman compared to the process of seeking a man;

2) The author thinks that, while his standards are completely rational, the vast majority of people simply settle for someone convenient;

or 3) the argument itself is self-contradictory.
Depends on your definition of 'know'. There is an entire subfield of philosophy devoted to this question.
I hope it'll get an Ubuntu for Android port.
"... I am an absolute fan of all weekly emails. ..."

Out of curiosity, what is it about regular emails that you find appealing?
Let me explain this to you in simple terms.

If your manager appreciates 'blow your trumpet' culture where 'making noise' is more important than work, then Working from home might be disastrous to you. But if your manager understands the wastage of time during travel/commute. The troubles faced by programmers due to frequent meetings and interruptions, the need for solitary isolation to think and work on tough problems. He won't have problems, and will rather appreciate you for taking more time to be productive and get work done.

People who stay late are thought to be productive, and doing more work. Unfortunately this is the problem with our Industry. And unless your manager has done some real work himself he won't understand most of this. And trust me expecting a technically sound manager is asking for too much.

Your ordinary corporate middle level manager, is totally incapable of understanding this. Because he despises any form of extreme nerd/tech/geek culture. He perceives that as a threat to his own kingdom, he is afraid that your success will overshadow his noise making. He will do everything in his power to keep people mediocre, to make himself look good to his bosses. In all of this a ferevrishly hacking geek churning features, coding by the minute, his way of work, culture and cult is a threat/disease that can destroy the managers career.

Working from home, will not work with those kind of managers.
Minor comment. With javascript not enabled for this site, it returns an error from mailchimp but still registers you.
If you then turn on javascript and register, it gives an error for too many subscriptions for the email address.

Might be confusing for some users.
Travel by bus
Experience Southeast Asia from the many roads journeys available it’s a great budget travel by bus option, eco friendly and local friendly too. What are you waiting for visit us now!
Wolfram may be betting on the Nightmare Scenario, which is that the Higgs turns out to be exactly the standard model Higgs, and nothing else is learned.
http://www.tonidoplug.com/ anyone?
I've been working on something that is very similar to this. http://askbox.me will be released (mobile version being worked on as we speak).

Our product AskBox and QuicklyChat are very similar in essence, but ours is not a desktop application at all- it's browser/mobile based.
Or a Microsoft Zune
I guess working from home, you miss the 'Human Network'.

Painters, mathematicians, writers, programmers all need the 'Human Network'. But when they actually work on their 'real work', they crave and long for isolation. Undisturbed time(Tuits: Uninterrupted stretches of time), devoid of any distractions, disturbance- time all alone for themselves to produce something awesome.
I don't remember having to chop off my legs to use Tiger Woods' golf clubs.
Been waiting for something like this to come out for a while. I honestly think this will be the future of startups. Sure it's mostly dumb money, but imagine if you can do something as simple as putting up an idea and having passionate evangelists validate and fund that idea from day 1.

Does anyone know if there's a version outside the UK?
Sure, take it all out of context and it sounds like I am making a point for FOSS solving this issue. That is not the case. There are practical hardware and business issues that touch a hardware business that simply create a problem for FOSS.

Again, the problem --Cisco wanting access to your data-- does not have a direct causation link to the fact that their software is closed. No such connection exists.
I think I made it very clear why you shouldn't care. If developers don't have any power in deciding who gets raises, developers are not likely to get raises. Are you going to work 80 hour a week in the office hoping for a promotion like an idiot year after year so you can get 3% instead of 1%? No, you're going to go across town and get 15%. If you disagree that's fine, but by and large this is my experience.
Nexium is a patent extension of Prilosec. In order to patent Nexium, they had to alter the chemical structure and run clinical trials to show that Nexium was an improvement over Prilosec. Some critics argued that the trials inflated the differences. IIRC, when some generic drug makers tried to sell generic versions of Nexium, AstraZeneca sued them and won.

Malcolm Gladwell, covered this and other issues affecting pharmaceutical pricing in a 2004 article. It's an even-handed article, worth reading the entire piece -

http://www.gladwell.com/2004/2004_10_25_a_drugs.html
First iOS Malware Discovered in Apple App Store
Posting an explanation for a down-vote is very rare. It should be a requirement for the privilege of down-voting on HN. It is also, in my opinion, good manners.
Great question. It's starting to gain a more mainstream following. Here are a few resources:

* https://github.com/celluloid/celluloid

* https://github.com/mperham/sidekiq (built on Celluloid)

* https://github.com/puma/puma

* http://tenderlovemaking.com/2012/06/18/removing-config-threa...