skysight-inc/HackerNews huggingface dataset:
> So what's the difference between having cloud-based accounts and documents that sync between phone, tablet, and desktop?

No internet required.
>>Infrastructure is invisible, as long as it works.

This is exactly why it is so difficult to convince politicians and the general public that infrastructure spending is absolutely worthwhile. Even though it makes the entire economy more efficient and fail-proof, most people take it for granted until it fails.
True, but it will take a few more decades before the market gets as comfortable valuing web companies as they are at valuing rental car companies. A big part of the valuation is simply unknown upside of the web in general and business models that will emerge. We like to laugh at the excesses of the dotcom boom, but the uncertainties that drove the insane valuations are still at play on a smaller scale.
Apple’s suit over Amazon Appstore thrown out
Rails does escape inputs with its finder and scope methods. I think the problem is that the "magic" in these methods allow for some edge cases to be parsed in unexpected ways...for example, when params[:id] contains a nested hash instead of a string or integer.
I have a one-word legal name.

Some people have two, three or more names.

Now what?
Love the website design, works really well for your domain. Any junior data engineer positions going?

Just a heads up, the link for jobs in the footer (http://jobs.mediatonicgames.com/) seems to be pointing in the wrong direction as opposed to the navigation at the top (http://mediatonic.theresumator.com/)
Apple v. Samsung judge scolds parties on page limits, sealed docs
It would have been great if they released with a "Try it now on your rooted Android devices".
I come to HN mostly for the discussions. In fact in most cases I read the discussion first to decide whether the article posted is worth reading in the first place. So the purpose of my comment was to warn others who do the same not to waste their time. :)
It must be hit or miss. I'm actually returning my Lumia 822 tonight and getting an iPhone. Just way too many problems. However, at least WP8 has given me some fodder for my blog.
Yes, I could get a video of me doing a lot of these stunts. Great. Could I get all of them to happen in an afternoon of trying? Probably not. It would take a long time and a lot of luck to get any one of them.

An interesting, and far more skill showing (imo) version of this video would be to show how close they were on each of the tries - If for example he was within a couple of meters of collision each attempt, I would call that very high skill. But if the other attempts were dozens of meters apart, the skill would be much lower.
The grocery stores will run out of water in the first few hours. That is, every single grocery store. Now what was that again about worst-case?
This isn't a problem if you check the type of data you get from a user before you use it. You should be doing that anyway.

The article says a work-around is to use .to_s or .to_i on user input. My standard practice is to cast to int for all IDs I get externally (in PHP too). Some projects I work on go so far as to validate type and data ranges of every argument passed in. Those applications would therefore not be vulnerable even though Rails itself is.
The chart shows that you are both right. The marginal rate was 39.5%, then dropped as part of Clinton's deal with the House Republicans in his second term.
Pirate “Kopimism” Recognized as an Official Word By Sweden
The typical experience isn't that bad, let alone "The whole thing is"
Yeah, I love the idea of the show, but then I read about the execution ( http://www.cracked.com/blog/the-10-dumbest-things-tv-so-far-... ) and have nothing to do but sigh.
It works now. Soon after trying this, a few pages were crashing with Chrome, and I restarted it. Chrome was most likely in some error state.
Getting Your Pricing Right
This is how I understand the issue as well. Many people in this thread are commenting about massive dangers, but I don't think anyone has bothered to actually read the references in the CVE.

Also, even open source projects typically ensure or recommend that the secret token be regenerated when using in production environments.
FWIW I think you nailed the issue 100%.
It seems like this is being conflated with the session token issue? How do you submit params with symbolized keys? Hashes are easy enough, but it doesn't work with hashes that have strings as keys, only symbols.

EDIT:
Just to be clear, tenderlove (Ruby/Rails committer) confirms that you do not need to edit the session to exploit this (http://news.ycombinator.com/item?id=4999767). It's still unclear how it is possible otherwise though, I assume he's being purposefully vague.
On the same grounds that lawyers are sanctioned for bringing frivolous or extortionate lawsuits.

I think you bring a poor strawman to the debate, its not a question of whether or not the lawyer was successful, its a question of whether they were working toward the betterment of the system. For example. doctors may be sued for malpractice for performing surgeries that are unneeded even though the surgery is completely successful. They violate the terms of their licensing in the state where they practice by doing so.

My point is that there are many ways to mitigate the perils of the patent system without destroying it. One is to make abuse of it to have some cost.

So a proposal might be like this [1]:

To prosecute a patent (represent an inventor as their attorney in the application process) requires licensing by the patent licensing bar. That license states that willfully bringing a patent before the commission that is found later to be invalidated, and such invalidation shows negligence on the part of the prosecuting attorney, that attorney or their firm, is co-liable for any charges or court costs incurred by the folks who invalidated the patent.

It would also be interesting in public shaming of people who claim to have 'invented' such preposterous things. That is a much more social thing though.

[1] I'm not a lawyer, and I know it doesn't work like this today, its a proposal to make it 'painful' to try to game the system as a lawyer.
Here at hacker news your point is completely irrelevant. All we care about is the tone of your post and, of course, your grammar.

Solved the meaning of life but posted it with speeling errers? We do still keep a few roadside crosses and nails laying around from old Rome; you'll get your comeuppance.
So glad it was this because I was starting to wonder if my 18 month old son was playing a prank on me.
Sorry to shoehorn this in: a lot of people use Do Not Disturb mode because they miss calls because they forget to turn off mute.

iPhones need timed mute like Shush! on Android [1] - press mute: it asks "how long?"

Going into the cinema? Mute for two hours. Meeting? An hour.

1. https://play.google.com/store/apps/details?id=com.publicobje...
Top free resources of 2012
hehe, you owe me a new keyboard :) tx
> Rugland calculated in his head what a PhD in Physics worked out on paper.

Besides that the problem doesn't begin to approach PhD-level...

You could probably say the same thing of me when I'm running or cycling. But whatever calculations my brain performs, the results are not accessible to myself or to anyone else; and I can't tell my brain what calculations to perform, so I can't tell anyone else what angle to lean at, and if I go to the moon I will have to let it work out for itself that gravity is not a universal constant.

You could also say the same thing when a cat twists in midair to land on its feet, "using" the principles of angular momentum. (Scare quotes because the cat has no idea what angular momentum is.)

Rugland's feat is certainly impressive. (And in a different class to my examples, in that he doesn't get constant feedback; if my balance is wrong I can adjust, if he kicks wrong the ball misses. But you could describe my feedback-integration using complicated physics as well, so I don't think that invalidates my point. I'm pretty sure "knife throwing" and "blindfold juggling" would have been suitable examples, but I don't personally possess those skills.) And I'm certainly not saying he's stupid.

But to call this intelligence, seems to be extending the word far beyond its usual boundaries.
> Resist complaining about being downmodded. It never does any good, and it makes boring reading.
Different vuln; this one has nothing to do with session cookies.
That's a false dichotomy. I'd prefer to have people constantly test something for security vulnerabilities and find nothing because the code was thoroughly audited and shown to be secure before it was released.
Did you evaluate any other competitive platforms?
Well in that case, perhaps you are consuming a slightly larger helping of original thought.
TED - 12 talks to inspire New Year’s resolutions
by that logic php is rock solid
I use to think that you didn't need one, but I think in an age of Social Media and with Gen Y coming of age it may be expected (mind you as someone who prefers to be behind a camera I'm not a personal fan of this reality).
Effects of Fructose vs Glucose on Appetite and Reward Pathways [pdf]
Conclusion:

"Glucose but not fructose ingestion reduced the activation of the hypothalamus, insula, and striatum—brain regions that regulate appetite, motivation, and reward processing; glucose ingestion also increased functional connections between the hypothalamicstriatal network and increased satiety.

The disparate responses to fructose were associated with reduced systemic levels of the satiety-signaling hormone insulin and were not likely attributable to an inability of fructose to cross the blood-brain barrier into the hypothalamus or to a lack of hypothalamic expression of genes necessary for fructose metabolism."﻿
This would be great to tie into CouchDBs admin interface!
tenderlove mentions it has been assigned CVE-2012-5664. This is that CVE:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5664

It references two articles that require session secrets.
I guess this is exactly the point of moving some data out of the MySQL, right?

Different use-cases, different systems.
Lumber isn't 'weird' the sizes make perfect sense...

If you go to a home depot and ask for something 2x4x8ft, it will not be 2.00 by 4.00 inches or 8ft long, when measured with a caliper. Its weird in the sense that the stated sizes are only approximate, quite unlike hardware or fasteners, wrenches etc.
Conclusion:

"Glucose but not fructose ingestion reduced the activation of the hypothalamus, insula, and striatum—brain regions that regulate appetite, motivation, and reward processing; glucose ingestion also increased functional connections between the hypothalamicstriatal network and increased satiety.

The disparate responses to fructose were associated with reduced systemic levels of the satiety-signaling hormone insulin and were not likely attributable to an inability of fructose to cross the blood-brain barrier into the hypothalamus or to a lack of hypothalamic expression of genes necessary for fructose metabolism."﻿
Rootsy.com | Private Family Sharing
Would appreciate if someone could explain the issue in a little more detail for non RoR developers
History seems to keep reminding us that in-band signalling is a convenient idea fraught with danger.
As someone who has spent most of his career in report creation and management (specifically in financial asset management), I find the current state of enterprise reporting in flux. In finance, most documents are still laid out for print (PDFs, Word Docs, and even PowerPoints), but users are printing them less frequently and viewing them either online or on their tablets, and IMO the user experience leaves a lot to be desired.

At the same time, there is so much tooling and infrastructure out there for print, that change is slow. There is a whole layer of increasingly senior managers from my generation who grew up with Microsoft Office, and are slow moving toward new reporting technologies. As a technologist this can be frustrating (see: http://baus.net/documents-are-skeuomorphic), but change is inevitable.
Ending sexism in hacker culture: A work in progress
Good luck enumerating all the edge-case tests for date functions every single time you need a date.
Put the name you like in 'First' and anything remaining in 'Last', it'll work well enough.
Rails param parsing automatically converts all param keys to symbols.
There are a handful of uncut scenes in the video where he repeatedly hits his target.
Spend less time on social news sites.
My Lumia 920 is going back as soon as I find the charger it came with. It's a well-built phone with a great screen, but it's not polished enough to be the game-changer that Nokia/Microsoft need it to be. It's huge (60% heavier than an iPhone), and the battery life is very questionable (despite a battery 40% larger than the iPhone 5). If I leave it on standby for two hours, I can never tell whether it will have blown through 2% or 20% of the battery in the meantime.

WP8 is slick in some ways, but it's not polished enough for prime time. Take for example the text messages app. Who decided that the chrome should take up so much space that you could only see 1 message in portrait mode (or zero in landscape) with the keyboard open? On a 4.5" screen?! There is no good app for Google Talk; the few that do have it on the Microsoft Store have weird issues (flashing while redisplaying content, logging out/in every time you switch to another app). There are no apps to access OWA accounts (if your Exchange server has ActiveSync off, tough luck). Integrating the "back" feature on your apps and on your browser is an idea that wears poorly. The "people" app is kind of cute, but jumbling Facebook/Linked-In/etc together with your contacts is an idea that sucks more the more you use it. I'd much rather be able to see peoples' timelines than be able to post the same message on Facebook and Linked-In at the same time... The UI is slick but lacks landmarks to help you figure out what's going on on-screen. There are weird and questionable choices throughout the UI. Who decided "+" was the right icon for a new e-mail? Etc.
Have you looked at Yahoo! Query Language? http://developer.yahoo.com/yql/console/
I'm not going to communicate with you by pointing. Stop being a special snowflake and come up with a name, even if it's local to the service. No null values. Your name can be 'null value' though if you like, win yourself some geek points.
In Python, the parameter escaping is done at the level of the database driver not the ORM. Isn't this the case with Ruby?

Of course, you could use the driver incorrectly to risk SQL injection, but that is a very obvious mistake that no experienced developer would make.
I think the CVE description is inaccurate in this case. Check out the Rails security email list description, which never mentions sessions.

https://groups.google.com/forum/?fromgroups=#!topic/rubyonra...
Not to mention siggraph and...sosp/osdi.

Ad publishing isn't a panacea, there are many ways we should be communicating, if anything we publish too many papers as researchers.
Man And Van London Removal Service
I agree, the idea that Leonardo's works poofed into existence doesn't add up.
Stealth Mode: It's Suicide for Startups
HelloFax Partners with Other Web Services to Launch Paperless Office 2013
Many of these are excellent. Very in line with proven-to-work CBT strategies.
Would you guys please stop this?
http://railroads.unl.edu/views/sources/1850%20Expansion.jpg

http://www.latinamericanstudies.org/19-century/railroads-187...

Probably the railroads.
"Programmers should already handle that."

Except they don't. I have a one-word legal name and I have rarely found any online from that allowed me to have less than two names. I realize I'm an edge case, so I just make up something for the other field.

Ironically, I practically begged Google+ to allow me to use my real name, which they require for their "fine dining experience" (<cough>advertisers<cough>), but they refused because it was less than two names and looked fake. They may have finally worked that out by now, I left the building long ago.
Thanks, a fun new OS to look at too. I don't know any type theorists, and I'm afraid I'm not much of one myself (yet). I'm mostly just looking forward to something DRYer and safer than C for low-level programming. I'll do my best to grok the type class versus multimethod thing. That seems to be within reach.
No, it just means that any chef serving Fugu can cut it wrong.

So when someone offers to do something inherently dangerous on your behalf, you should be incredibly deliberate.

There's no shortage of frameworks, platforms and libraries that have been bit (repeatedly) by SQL injection.
Would Hertz Buy Uber?
Good answer, thanks.

I think looking at the technical side of things as an attraction for 'normal' consumers, is the wrong way of going about it, especially with consumer electronics. It's pretty evident by now that people want the latest (and perceived best) device, even if the technical differences aren't that massive. It's enough to be able to say to friends, "I got the iPhone 5".

I'd also assume the iPhone 4 being perpetually sold out is either a determined move by Apple to force sales on upper models, or is just a result of having production lines focused on the upper models. I don't doubt they'd sell either though.

Admittedly I used to be that person, as a teenager. Once I got full time employment, I definitely starting buying more things I would pirate, both for the reason that it was a pain getting updates to apps (Apple does well in this regard), and also because there was no financial reason for me not to if I had the money.

Thanks for your time, and thanks for Cydia :)
Twitter says SF, I believe :)
I usually use the same name in both fields. My question was more rhetorical to the person I responded to.
MS Says Google Is Preventing It From Building A YouTube App For Windows Phone
It's called Quora.
I think the main problem is that the site format is very focused on a single sort of interaction: questions with at most a few specific answers. This is what makes them great Q&A sites, but also makes them relatively ill-suited as discussion sites.

Creating a good site for discussion would be quite a bit of work, paramount to creating a different platform. I could perhaps see them expanding to that style of site and reusing the StackExchange brand in the future, but it would essentially be a separate sort of product. For now, it makes the most sense to focus on what they're already great at: Q&A sites.

These sort of questions are much better suited to places like HN and Reddit, although those also have their own problems. (Mostly, discussion tends to be short-lived: almost nobody looks at HN comments a day after they've left the front page, and Reddit isn't all that much better in that regard.)
Look no further than the deprecated 5ESS switches which used to give up free calls due to 2600hz tones being signaled inband.

Ask Steve Jobs and Woz about BlueBoxes; you need look no further to see the inherent dangers on inband signaling.

Slightly off-topic, but still relevant IMHO.
You should take a look at Zapier. They do most of what your getting at.
From AS3 to Haxe
It seems easy to blame the magic finders for this (because they seem magic), or ActiveRecord alone, but really the problem is that 'secure by default' can trick you into thinking the framework will do it all for you.

It probably will most, if not all, of the time for you. But the complexity of such things understandably means there will be obscure vulnerabilities that are hard to track down.

Sanitising -- and even validating -- your params at the controller level is a nice way to stop some of these problems before they reach your models.
Does something similar affect mongodb or am I OK?
If I submit a form where the param is "login[select]=* from users limit 1 --" when I inspect params[:login] I get {"select"=>"* from users limit 1 --"}. Is there a different way of submitting things that converts it to symbols? params[:login] works due to it being a HashWithIndifferentAccess
Essentially true.
Honestly, people will go where the apps are and buy what their friends have.

The apps are not on WP8, and I have yet to meet a person who has a Windows Phone as their main device.
Could you elaborate on why the wood grain background sucks?

I'm working on a project and I'm considering using a wood grain background for a specific UX, but I'm not a designer and have been postponing making any decisions about it.
Yeah, but what about stuff where the format really matters? Most people want numbers on receipts to line up vertically. There exist spreadsheet looking reports that are just big tables of numbers. There are, perhaps, ways of presenting that data in a more fluid layout friendly way, but that's not an easy thing to do.
I absolutely could not disagree with you more.

I've been a member for over 5 years. I live in a popular neighborhood in SF. It's to be expected that weekends or special events affect availability. But there are so many lots around its easy to walk an extra block.

I've been in 2 accidents in their cars. First time was pretty bad, 2nd one was minor. Each time the most I had to pay was a $500 deductible. That sucked, but was nothing compared to how much I had to pay for an accident many years ago in my own car. (This all makes me sound like a terrifyingly bad driver, but I'm not!)

Just in the last 2 days I used Zipcar. I was heading to Stinson Beach for New Years. To rent the car overnight was $101. It was 2 blocks away.

I called Enterprise downtown and got quoted a car at $28/day. Awesome, I think. Well, no. They closed at 3pm that day. And they're downtown. And although I only needed the car for 1 day, they were closed on Jan 1 and would have cost me $45 to drop the car off when the place is closed. So then I would have bad to worry about parking a car I didn't need. Also, since I refuse to carry a credit card, in order to use my standard bank card (the thing that has all the money I actually have, and not artificial debt like in a CC), they want paper copies of two bills to my house and my last pay stub. Seriously? I don't get paper anything anymore, much less a pay stub.

So in the end, I payed a little more for the Zipcar rental. I got the convenience of it being local, flexible, and less shit for me to worry about. That's why I like Zipcar.

I've had the occasional frustration with them. Dirty car, no gas, broken card. Little infrequent things that are frustrating at the time but are rare. You call and report the previous driver, they get fined and don't so it again. It's happened to me a couple times.

So I refute your claims about Zipcar being so bad. I've used them a lot longer and quite happily too. I'll continue as long as they don't become like other rental car companies.
It would be great if it started with a Regex example in the text box to instantly see what the tool is capable of, that or include a simple 'show me a demo' button, which adds a example regex and queries it.
Fiscal Cliff Bill Would Renew 100% Exclusion for QSB Stock Investments
14 Things Your Startup SHOULD Copy from Pinterest
Those specs don't speak to performance. Your 5 year old computer could easily run Windows 8 without a problem and the Nexus 4 can't.
Does anyone else wish that Redis had a disk-based version? Other key/value stores like Riak are nice, but I want the simplicity, commands, and raw data types of Redis in a version that could handle terabytes of data. But maybe I'm the only one that wants that.
Factors Affecting Workability
oh man. do I have to pick up another language for another platform????
Singly's working on this, especially as it applies to personal and social data: http://singly.com.

[Disclosure: I work at Singly]
SEEKING WORK

Full stack web developer. Very experienced with Backbone, jQuery, CSS & Sass, Python and Django.

I have a home office that I work from but enjoy travelling and interacting with people.

I'm currently helping to finish up Toyota.com, and may be looking for something once we launch.

Resume: http://kvnn.github.com/files/KevinRiggen-Resume.pdf