skysight-inc/HackerNews huggingface dataset:
> What percentage of employee-days at Google actually involve a nap? 1%? 0.01%? Is it any higher than the traditional comic practice of "curl up under your desk"?

Complete anecdata but: I've seen people curled up on couches in the middle of the day plenty of times. I think the point is that, at Google, you won't be frowned upon for this. (Whereas it may be much more likely at other companies.) Not that you're mandated to nap after lunch or anything.
Then what is stopping browser vendors from implementing canvas directly in gl directly, making canvas more or less a wrapper?
> You seem unfamiliar with the specific case. It wasn't the user database that was compromised.

Which isn't really relevant. A password leak is a password leak, whatever its source is.

> It was plainly obvious to any user of IEEE that they were storing your password in clear text

And nobody every took issue with that?

> And the mail would have live hyperlinks to access your account, which generally means GET requests.

That doesn't mean anything, the hyperlink could have contained a nonce allowing log-in.
Always-on assertions are a good thing. They help stop bugs before they become exploitable security vulnerabilities, for example. I would much rather have my web app crash on bad input than proceed to execute a malicious SQL query.
Alex, I have lived in more than one country, so I have made specific observations of precisely how little influence the FDA has on the drug regulations of other countries.

That's beside the point.

The same trials that are used as the basis for product license applications to the FDA are used for license applications to the UK's MHRA.

The process of generating an approval and granting a product license is different, but the same data feeds into the process, giving rise to similar outcomes.

(Also: please do not confuse controlled substances with prescription-only medicines. Two different sets of law apply, one superimposed on top of the other, just to add to the confusion.)

At risk of resorting to an appeal from authority, I speak as a retired pharmacist: the process of obtaining product licenses for pharmaceuticals isn't so much broken as it's irrelevant, because as long as the submission relies on data that can be massaged by the applicant (who stands to profit from it), the outcome will reflect the inputs. (In other words: garbage studies go in, questionable product licenses come out.)
Why I am Starting a Hybrid Development Accelerator
I love that MongoDb allows me to get stuff done without much fuss even when I have not figured out the final data requirements.
I have been using RDBMS + ORM ( Hibernate) for a very long time; however I found this to be very "rigid" in a start up environment where the requirements are far from frozen. MongoDB is much more flexible and forgiving than traditional RDBMS in that respect.
Entrepreneurial opportunity!
"So in theory a startup might be able to get that 20 million figure down to 5 million if they're lean?"

Not likely, MAPS is already as lean as you can get. And they have a big advantage since there have already been dozens or hundreds of previous studies done on MDMA to establish safety.
Improve your first throw-away design
The context on the 'maybe you shouldn't be doing it' quote is that Google is not going to disobey court orders to protect your privacy. It was never Google's responsibility. Please let's move on from this particular dead horse.
Your Target Market Isn't What it Used to Be
I'm also in your target user group (corporate and freelance user researcher, with lots of usability testing). Without a discussion about security, I couldn't use this for my day job, but depending on how customizable the project pages are, this might be a perfect fit for my freelance work.

Can the videos be incorporated into a deck/presentation easily through the project page?
>> But forcing pharma and regulators to publish all trials, and fund independant on-the-job training will not lead to order of magnitude changes.

No, but it will allow people to make more informed decisions about what medicine they should take, and give a more realistic picture about its effectiveness. There is no justifiable reason to withhold trial data...
I would agree, except that this is the title of his post. You have to read a bit into the post to realize that what he's talking about has very little to do with what his title states. A very generic term was used when the intention was for one very small niche of "education". After reading the article the title suggests that because it might be difficult to write a graphics driver for a somewhat undocumented chipset then the whole thing is unsuitable for teaching a kid something like, let's use Python since someone else mentioned it.

If it's not wrong then it's misleading.
And Jelly Bean really is a game changer. The difference between ICS and Jelly Bean is profound. The difference between the 2.x series and 4.1 is night and day, they aren't even comparable platforms.
Is that the situation here with the 32-bit silent fail default? That it is a sensible default, but could be changed if it's shown that competent devs will nonetheless screw it up?

It's kind of sad that we'd need an example to show that it really could happen in every single specific case. It should be common knowledge by now that competent devs screw things up all the time.

For example, I'm sure the MongoDB devs are extremely competent. But all the same, having a database management system default to letting writes fail silently is a pretty spectacular screw-up. I can't really blame other competent devs for taking it for granted that a DBMS wouldn't do something like that.
Anyone have the file?
I would like to claim poetic license, plus, lets face it,
we labelled out of control bacterial growth as many different diseases till we had a single medicinal approach.

As a tentative example, Mina Bissell's theory on micro-environment supporting cancer growth indicates a penicillin style solution would fit her category of cancer.

Please don't take this as "all cancer researchers are fools looking in the wrong direction, I know better, join Scientologists" but my utterly uninformed gut reaction is that the different cancers all have such common and overlapping indicators (uncontrolled cell growth, basically) that there being multiple different root causes that all trigger the same feature seems, unlikely without other factors.

We may spend a long time treating the different cancers differently according to which is most effective. But saying that such commonality does not or even cannot have a common cause seems too early.

I will of course defer to anyone who knows of better (hell, any) evidence to tear down my layperson POV.
I could skip steps 1 & 2 and just talk to you like a human! BOOM 300% more efficiency right there, probably. And that's just one of thousands of Productivity Hacks™ that I will share with you, if -- or face it, WHEN -- you hire me, which is after I talk to you like a human.
If the app is available and apple hasn't approved it there are two ways to install it.

1. Have the developer set you up for an ad hoc install(free).
2. If you have the source, create a developer account and install it yourself(costs money).
I use my NFC almost everyday. I use it to pay with my phone at those wireless credit card scanners.
Probably the same way they know which sites are likely to contain malware or be involved in phishing scams: user reports.
I think it looks promising - it's not a panacea, there are things SQL works better for and there are things I can see Mongodb would really rock with.

With anything there are gotchas so you have to live and learn with em.

When I was researching Mongodb before going into it I saw forums talking about the 2gb limit on 32 bit systems; I would say the author of that article didn't see the posting - which could either be a case of not due diligence on the ins and out of the system or lack of diligence on the reference material he had originally been using to build his system.
Not a big fan of the skeuomorphic design... I think it needlessly distracts from the content.
Google Brings Its Indoor Maps To France
> I hope I never have to go back to modifying schemas again

Honest question. Do you actually leverage the schemaless nature of MongoDB? Not 'worrying' about managing schemas is one thing, but actually leveraging the fact that your objects can have different fields is another. I have worked on projects that did need to store objects with different fields together but it seems to be a rare case.

From what I've seen, most projects actually have pretty standard objects with specific fields. People just don't like feeling constrained but in the end I don't think managing a schema is difficult at all. I actually like the safety and performance you get when you put in the effort.

I think the single most useful thing to see when starting a new dev job somewhere are the database schemas. If done properly, it will essentially tell you the story of that company and their data. You can think up questions and get answers such as "Is it possible for a Customer to have multiple Orders? Can a product have more than one Review?" (Stupid examples but they illustrate the kinds of relationships which are asked about all the time).
Let's not conflate "hating" (which is always pointless) with pointing out flaws in a design.

"Mongo sucks f*cking balls" is hating it.
"Mongo silently does not store data in some situations" is pointing out a flaw.

It is easy to dismiss valid criticism as hate.
It is also unfortunately true that some topics degenerate to flamewars on HN. Why Mongo is such catalyst is a phenomenon in itself. One that I find fascinating.
I strongly agree.

Your blog post has been in my bookmarks for 6 months, working with a lot of WPs I'm referring to it several times a month ! Great ressource, thank you !
They don't all hate MongoDB, they're just singling themselves out as people we shouldn't work with. Ranting about a product without knowing much about it or even reading the documentation simply points out what type of engineer you wouldn't want to deal with.
My problems were to do with data-loss and unrecoverable corruption. I didn't write a blog-rant, but maybe I should have.

I have since learned that I could have changed some configuration options to make MongoDB less likely to corrupt and/or lose data. I'm still wary though - the fact that the default configuration was prone to unrecoverable data loss suggests that any time I use MongoDB, I must carefully research the feature I'm using to make sure I don't do it in a way that causes data loss.

I believe dangerous configurations should never be the default, and dangerous features should be clearly labeled. The default method for writing data should not fail silently, for example. The fast, fire-and-forget write should be called something like "unchecked_write".
I fail to see the reason in that statement, why is it so brilliant?
For anyone wondering what jlgreco is referring to, it's the CueCat:

http://en.wikipedia.org/wiki/CueCat
Yes, if you look at http://gs.statcounter.com/ and select individual countries you can see that Opera is strong in Eastern Europe and parts of Asia. There are historical reasons for that (just my opinion, see bellow) and also the fact that Opera had/has Turbo - which really helps on slow connections (mobile).

So if you run US-focused site, there isn't really reason to care about Opera, and test for it. Blocking it (or any other browser) is bad though.

The "historical reasons": Opera was by any means the best (serious) browser out there, but it was paid. People in these countries weren't paying for software anyway, because their income was well bellow western standards while prices were same, and as a bonus, there was no one who would care. So while someone on the west would rather use something free (like IE), people in (for example) Ukraine picked the best. That's why first decent browser (Firefox) took over the west so fast.
> Maps are just maps.

Highly disagree. Maps are not just maps. It's one of the core solutions of the platform and I would argue one of the main reasons people buy smartphones over "dumb" phones.

Have you ever listened to someone complain about Blackberry's? For me, that conversation usually starts with "I can't use google maps on my Blackberry".
>I'm reading all this and I still have no idea what Edge is or why I should care.

Neither do the people who wrote it, I can assure you :)
In the ePub version I have (from the iTunes store), there are a decent number of references in the back of the book, as well as some pointers to further reading.

I would assume they are also contained in the print version.
How does it sacrifice reliability? Are try/catch blocks not also their own flavor of boilerplate? All error codes do is put the error handling you ought to be doing in the first place near the area an error could occur.

See also Raymond Chen's posts about good vs bad exception handling (H/t Russ Cox on G+):

http://blogs.msdn.com/b/oldnewthing/archive/2004/04/22/11816...
http://blogs.msdn.com/b/oldnewthing/archive/2005/01/14/35294...
I'm testing Chrome (Same build on the same OS) and I see video. Must be an issue with the flash detection. I'll dig deeper... thanks!
This is a terrible suggestion. The age of crippled, stripped down mobile sites is long gone, and smartphone users expect full functionality on their phones. If that functionality can be provided with a responsive design, that's great. If they have to use the regular website and do some zooming and panning, that's a nuisance, but one with which users are familiar. It's certainly better than not having the feature available at all, or having to hunt for a link to disable the mobile layout.
I so miss EOF http://en.wikipedia.org/wiki/Enterprise_Objects_Framework
Mobile-friendly sites turn visitors into customers - Google Mobile Ads Blog
As some will point out, SMS is generally insecure because of the possibility of snooping vulnerabilities.

An even more secure way to implement one-time passwords is through an HTOP[1] smartphone app. The crypto is seeded once and then never has to communicate over the network to generate an OTP. Only the person with physical access to your phone can generate a password. I know when I was with USAA, they allowed you to generate one-time passwords using this method.

[1] http://en.wikipedia.org/wiki/Time-based_One-time_Password_Al...
Doesn't work on my Galaxy Nexus, stock 4.1...
Raspberry Pi's Secret: 'Sell Out a Little to Sell a Lot'
Clay Shirky: How the Internet will (one day) transform government
Square releases Tape - collection of queue-related classes for Android and Java
I quite agree and beleive that we should have all trials published openly. I think Goldacreas book is a good salient point in a tidal change coming. I am hopeful.

However my point was that the hyperbole was a little too much - Goldacre has a difficult tightrope to walk - to stir people up enough that he (sells books and) convinces them action is necessary, and yet does not actually go over the top and accuse a generally beneficial-to-society pharma industry of being one step above arms dealers.

I think he will pull it off and look forward to putting it on my Xmas reading list.
Not because of that but because of the speculation that Google may have chosen not to renew the license for Google maps on the iPhone.

It could be a strategic decision to help Android, could've asked for much more licensing revenue, or refused key features like 3D, turn by turn etc. Maybe even demand G+ integration like the FB and Twitter integration.

Or it could be that Apple wanted to do Maps for strategic reasons. Or a combination of all of the above. But Schmidt's quote seem to put the ball in Apple's court.
Honestly, a lot of the points you make about SBM (the blog) are quite disturbing to me, as it is one of my primary resources as a lay-person to keep up with developments in woo, quackery and general commentary on popular medical reporting.

I hope you don't see these questions as confrontational because I genuinely would like to be pointed in the right direction for the some of these claims. (speaking as a relatively liberal person who recently joined a host of strongly conservative forums to get a picture of "the other side"...)

> Ever look up how respected skepticism is within the larger philosophical community?

I gather this means that it's not respected? Why is that? I find it hard to believe that scientific skepticism (and not the truther/birther/moon-landing-was-a-hoax kind) can find widespread opposition in any sort of critical thinking community.

> Instead they just spin it in order to trick people who are predisposed to have faith in modern medicine.

Are there any examples of this from the blog? I was (and am) under the impression that a lot of writing is backed up by fairly solid reasoning, references and such.

> What science-based medicine does (again, the blog, not the concept) is really no different than what the evangelical megachurches do, it's just dressed up in different language.

How so? This analogy sounds suspiciously like fundamentalists' claims of "scientism" and "science is just another religion!". If you mean something else, then do elaborate.
Stealth mode and other brilliant strategies
This is actually the workflow I use every single time I log in to HN. I haven't the faintest idea what my password is.
Which isn't really relevant.

Then please don't bring it up, i.e., say things like "if the user database is compromised, you can safely assume all of the site is".

And nobody every took issue with that?

Maybe they did, maybe they didn't. IEEE members are probably slightly more informed than your random AOL user. There are plenty of mail managers out there that mail you your password automatically every month.
Using a corporate password for any other site is a firable misconduct.
Project Austin. C++ Open source notes application.
Toys R Us sued over Tabeo tablet computer by Fuhu
It's not an eye for an eye. But it is actions and consequences.

If you take an extreme crime (like murder), I don't think you'll find many people who would say "there should be no consequences to that as long as the person is truly sorry for what they did". There must be some level of punishment, and there will be disagreement about what the appropriate level is.

Now this was not murder, but it was true terror over a period of 4 years. Do those actions have consequences? Or just give him a hug?

This 17 year old has problem, and he needs intensive psychological counselling at the very least. He didn't know why he did it? It was just a game? Those are scary answers and the problem needs to be fixed.

At least having him in the police database, fingerprints, IP address records, reports from his counselling sessions - would make it easier for someone else to catch him next time he does this. The next person he does this to will be starting from scratch trying to find out who this was, like the author was 4 years ago.
It's as big of an issue on my OSX touchpad devices, as I can scroll sideways with the same gesture I use to scroll vertically. But on any device where my primary HCI device is a mouse, it requires finding the horizontal scrollbar and click-dragging it. It's also not typically what people expect out of a website outside of the touch realm, which breaks a pretty primary rule in UI design (don't present the user with something they don't expect).
Seriously? You're posting the DESTRUCTIVE version of the exploit instead of a safe test version? Shame on you.
> SMS and e-mail are sent unauthenticated and unencrypted and can be intercepted in many different ways

My SMS are encrypted with A5, and my email (gmail's inbound smtpd) is (usually) encrypted with TLS.

Of course, I always check with TLS as well.

It's not quite as bad as you seem to make it out.
+1 to share your experience. Kiip and other companies do that, and if you need to decide on a certain technology for your upcoming development, these are really exciting and far-from-boring posts.
And yet so many sites are still not mobile friendly and even some of the ones that are do it all wrong.

- Please don't ask me to install your every time I visit your site on mobile (Yelp's experience on this is actually much better than average).

- Please do not automatically redirect me to the App Store.

- Please do provide all the content available on the desktop version otherwise I'm just going to have to go there anyway.

- When I click a Goole result for a page, I expect to land on that page or a mobile version of that page. Please do not send me to a mobile landing page where I can't get the info I originally wanted.
Hmm The lowest end Model S vs. Fritchle Victoria Phaeton

* Similar cost, adjusted for inflation (49k vs 48k)

* 1.6x range compared to Fritchle (160mi vs 100)

* At more than 2x the speed (25max vs 55(speed for quoted range))

* With climate control
I must have missed the part where he stated that 10" tablets should never get made.

I believe a more likely comparison would be why does Publisher A, who only prints hardcover, complain/mock/denounce the thought of Publisher B offering paperback as an option?
Could you make the app ask you to supply your own API key? It's very inconvenient but I doubt your individual usage will ever hit their limits.
If users could be trusted to maintain a key pair (PGP), then we wouldn't need to use email to do authentication.
Well, I can see people assuming Tesla's plan was to get bought by some major car company within a few years. Those people are probably realizing that isn't the plan about now, and getting out.
its not the entire set (use Redis then), it is the working set: data being accessed.
In general, you may expect that even if GETs are fully logged, POSTs are not. You can check this on your own when you renew.
Bad solution, email is slow and unsecure. I also have always hated identities linked to email in anyway. It's wrong way and that's it. Also allowing password recovery via email is dangerous, because email isn't secure either. Email is secure if you use GPG, and in that case it would be better to login by signing nonce with your private key and returning signature to site, which can verify it against your public key.
1. Ad-hoc installs don't require Apple approval. This isn't a barrier for hackers.

2. iOS was supposed to be an HTML5 app device. Those install and run w/o Apple involvement at all.

3. Many of the neat tricks on Android require a rooted phone. Many neat tricks on iPhone require a jailbroken phone. Same idea. Again, not a barrier for hackers.

4. Computing succeeds when people can use it without stress, like they use their fridge or lately their car. iOS is closer to that today. I believe in a future where everyone can have the knowledge of the world in their hand -- and use it. And that, right there, is why I evangelize non-hackers to get an Apple for personal use. They quit just carrying a smartphone, and start using one.
Again, I'd have to disagree with you.

$8K of the $10K is not money used to grease the wheels to get studies done. Think about it: you're treating a patient for a whole year with a new drug. You're dosing the drug, taking blood samples, monitoring the patient closely, running tests to determine endpoints, collecting and processing data. You think that would only cost $2K/yr/pt?

Pharma companies may incentivize physicians to participate in clinical trials, but that $10K-$20K is the cost of running the actual trial. Doctors, physicians, technicians, data analysts don't come cheap.

And no, the majority of drug approval studies don't have only a couple hundred patients. If you're doing research for an orphan drug or an extremely rare cancer, that might be true, but those hardly make up a majority of the drug trials that happen.

A great example, Contrave an obesity drug went in front of the FDA. The FDA wanted more data (on top of the phase III studies that were already done). How many patients for the additional trial? 10,000.