skysight-inc/HackerNews huggingface dataset:
Updating to 3.2.11 is sufficient.
I <3 Alameda and wish I could afford to move there.

Lucky 13 + Scolari's is Alameda's Toronado + Rosamund's (though the beer selection isn't up to par)

Ark (on Park St) is one of my favorite Chinese restaurants in the bay area: hand-pulled noodles, braised egg tofu, and good green onion pancakes.

Park St feels somewhat like a "small down" downtown, similar to San Luis Obispo's but without all the college bars.

There are lots of beautiful Victorian-style houses, and there are some good school districts. Much of the island is on bad liquefaction zones, but there are nice parts that aren't.
SlashGear: Hands on with the Pebble Watch
Congrats - do tell us tomorrow what it actually is. But congrats!
Sweet, what are we shipping?

Seriously though, you're on the front page of HN, seems like a good opportunity to promote your product.
Place $100K (let's leave it at $25k /a year) in an investment account when you're 18-22 and take it out 40 years later. Add the fact that you are not working for 4 years and it's even more.

I am not dissing college, bu let's compare fairly: college isn't free, it requires lots of time and money.
What happens with this fix is scary at first, but is actually OK.

If you patched as described, and run the exploit code on your local server, the exploit code will return a 200 response. As in:

[-] POSTing puts 'boom' to http://localhost:3000 ...
[-] Success!

This doesn't mean your site is vulnerable. Rails is entirely disregarding the parameters as specified by your initializer code.

Testing locally, watch your server when the request comes through and ensure there are no parameters being registered. You don't want to see something like this:

Started POST "/" for 127.0.0.1 at 2013-01-09 21:00:04 -0800
Processing by StartController#index as */*
Parameters: {"secret"=>"--- !ruby/hash:ActionDispatch::Routing::RouteSet::NamedRouteCollection\n? {}\n: !ruby/object:OpenStruct\n table:\n :defaults:\n :action: create\n :controller: foos\n :required_parts: []\n :requirements:\n :action: create\n :controller: foos\n :segment_keys:\n - :format\n modifiable: true"}
Speaking of ferry commutes, I wish there were way more ferries doing service from all points in the East and South bay to/from the peninsula. If they did, it might be feasible to do a bike commute from the East bay to more parts of the peninsula.
Perl does maintain a strong niche but if the Perl 6 announcement in 2000(!) had been that all focus was shifting to web development Perl would today be king of the heap. It was web development that pushed PHP and Ruby into the spotlight over the last decade, and the 2000ish Java focus on web frameworks also helped keep it popular.
Ask HN: Can anyone recommend a reliable PSD to HTML service?
I don't mind where in the world they are, but I'm looking for an HNer to recommend a reliable, good quality PSD to HTML person / team to whom we can provide ongoing work.

If you are or have worked with anyone fitting this description, please let me know!

(my email is in my profile)
I don't think defensive programming would have based on the current situation across a number of languages. Basically no serializer in any language PHP, Python, Rails, etc is completely safe. There are known exploits for all of them.

There is lots of magic in rails, but I bet there are a number of popular PHP and Python libraries/frameworks that are unserializing in an unsafe way.
Given the nature of this exploit it's unlikely to weed out anything at all, unless they've pushed something out to look specifically for this case.
One satisfied customer is enough to offset roughly 0.0000000001% of a public tweet from the official company Twitter account calling another customer a "silicon valley douche".
முஸ்லிம்களுக்கு எதிரான திட்டமிட்ட இனச்சுத்திகரிப்பு ஆரம்பம்  - Ceylon Moors
How horrid. "Unfortunately, writing about being gay is still eye-catching." Shame on you.
I'm pretty gay, and fairly often I don't want to bother with it. "Tell me about your girlfriend?" can be answered to a cabbie with "Eh." and it's really not the end of the world for me.
I use PHP often for non-web things all the time… I write shell utilities all the time in PHP because it just makes sense: a simple interpreted language, with full access to my app's configuration, database access, dead simple file IO…

The one-liner's are quite nice too… Just today at work I needed to come up with a base64 encoded json string from a data set in an ini file to pass into my Java app via stdin. It was something like:

php -r 'echo base64_encode(json_encode(parse_ini_file("app.ini")));' | java -classpath Foo.jar com.example.foo.App

So… yeah. I don't think it's fair to say that "PHP is terrible at being a general purpose language". You just haven't done enough of it yet to appreciate it.
"There's a good chance these perceived slights are in Mr. Pallotta's head ..."

What? I understand the inference problem, and it's interesting to explain that as a possible solution, but do you honestly think that there's a "good chance" that the author—who experienced the situation first-hand; who had 3x more information [1] about the situation than you—was making it all up?

There's a much better chance that the author just didn't describe the situation with enough detail.

[1]: http://en.wikipedia.org/wiki/Nonverbal_communication
I don't want them to die off. I do want them to depend on welfare. Whether they layabout is up to them.

Historically, if you go way back, everyone grew/hunted their own food and built their own houses etc. This was a very brittle/brutal existence. Drought, disease, or a cold winter means I might die or my family might die.

So we learned to be efficient by dividing up tasks and specializing. This reduced the total amount of work that needed to be done to ensure our survival. Over time, technology (algorithms) continues to get more efficient thereby continuing to reduce the work necessary for survival.

Of course, this natural progression eventually leads us to point where the work necessary for our survival is completely automated. We're not there yet, but there will never again be enough jobs that everyone can have one.

That's a good thing. It frees people up to do what they want with their time.
The undefined behavior in the Common Lisp specification was a design choice. It has nothing to do with 'good' or 'bad' documentation. Common Lisp was designed from 1981 on. The Lisp community (here the successors of Maclisp) went to explore a lot of new ground: implementations on mini computers, mainframes, super computers, parallel machines, microprocessors, stack architectures, on top of other programming languages like C, etc. There were small and stupid compilers, optimizing compilers, whole-program compilers, ... It was a time of experimentation. At that time a lot of behavior was not defined to allow compiler writes to explorer different types of implementations. With the knowledge of a decade later some of that could have been defined more precisely, but then the standardization process ran out of steam due to lack of funding and interest.

Using SETQ on an undefined variable may be undefined in the Common Lisp standard, but every implementation deals with that and allows it. That's a non-issue. There are a lot of other things which isn't defined in the standard and which all implementations deal with. Garbage Collection. Also not in the standard, but every user expects garbge to be collected.

It would be nice to have less undefined behavior, but it has nothing to do with good or bad. It was useful in a time of experimenting.

Even worse for Common Lisp was that in 1981 there wasn't yet an OOP system for Lisp that was explored and accepted. This way CLtL1 was defined without an object system and it had later to be added (CLOS).
Did Aristophanes and Shakespeare need to spend $15,000 to $75,000 per year for 4 to 8 years to learn their craft?
{Java, Ruby} and {C, Ruby} both gave me the simultaneous "LOL" and "nailed it!" reaction. {Ruby, Java} and {Ruby, Haskell} were pretty funny too.
At least one study has shown that younger listeners prefer the 'sizzle' sound of MP3s over higher quality recordings, presumably because it's what they're used to.

http://radar.oreilly.com/2009/03/the-sizzling-sound-of-music...
BART reaches farther down the East bay though, all the way down to Fremont. Much lower crime down there, some good school districts. Complete suburbia, though.
The classic way of learning has evolved with history. Before having books, everything was memorized with a few exceptions. The Google era is just another step in this evolution. Why would we waste time memorizing stuff if we can just look it up? Might be argued that Googling takes time. Of course it does, but there will come the next era where our thought could prompt a query and get an answer without physically doing it. That will be the next step in human learning.

Sounds like sci-fi? So did the idea of having all the information available on the tip of your hands 30 years ago.
You don't understand what Patio11 is saying. He wants to know that your product can actually get people to pay up. It's the ultimate in product validation. Until people will pull out that wallet and sign on the dotted line, you don't know that your product solves a real problem.

That's what Patio11 wants. He doesn't want to get paid up front and he's not in "business mode". He's trying to validate his product in the best possible way.
Why does it matter who he is? Why not consider the merits of the ideas in their own right rather than relying on the authority of the author? One would think folks on HN would be inclined to treat ideas in a more meritocratically way.
It's wanghq@kippt. thanks.
Wow, first time I've ever submitted anything as well. I'm insanely happy but this wasn't an attempt at promoting it. I'm trying very hard to keep my blog and my business interests separate.
Chandrayaan-1 was a pretty successful mission 
Chandrayaan-1 was a pretty successful mission by all accounts though despite not lasting. It found evidence of water pretty much straight away, which was worth the budget all on its own.<p>P: Yes, Chandrayaan-1 was successful as it was seen an engineering mission vice science mission. It equals to the NASA apollo missions. To be accurate water on the moon was discovered by the US/NASA payload Moon Mineralogy Mapper that was aboard Ch-1.
Actually it depends on what your Gemfile looks like. If you've specified the exact version in your Gemfile you'll need to edit it before running `bundle update rails`. This means your Gemfile might look like:

gem 'rails', '3.2.10'

Running `bundle update rails` when you've absolutely specified the version number won't do anything. Your Gemfile.lock file (which is the file that bundler uses to determine which gems to require) won't be changed. Instead of absolutely specifying the version of Rails you want to use, considering using the '~>' specifier. My Gemfile at Airtasker looks like:

gem 'rails', '~> 3.2.8'

That means that when I run `bundle update rails` it will update the patch version of rails. Our Gemfile.lock has the following entry for rails:

rails (3.2.11)

By using the '~>' specifier it means that we can easily update our gems patch versions without worrying about API changes between major and minor versions.

You can read: http://gembundler.com/v1.2/gemfile.html to find out more.
Facts: you dont like him now, this was outside work and in that would be unfair to fire as not work related and also legal issues. You are splitting from your wife.

My solution would be make the divorce settlement to be mostly made up from the company. Offload what else you can onto the other chap with fiscal compensation. Then once that has setteled and be all friendly about it you then after a nice little holiday break set up a competeing company and do what you want to do with a clean slate with the knowledge of the buisness, list of employee's you wish to recruit from the old company and relationships with the customers. That is what I would do, only fair and works on many levels of karma as well as enabling you to completely in effect restructure the company in a way that enables you to do it with all that hindsite you have gained and is an emense advantage. Also get misconduct clauses in the contracts that can be leveridged in such matter. Though even if you did have that enabling you to dismiss him without fallback you still need to perhaps make people more dispensible in your company design.

But your company is your life and so is your wife and with that too lose one and have the other stabbed up is certainly a unplesant situation and with that; Don't get mad, get even. But it is had not to get mad so channel it and tap into that new resovoir of energy - some of us have to drink lots of coffee to obtain that level of energy.
Big fan of this article. The world asks us to sell out our integrity for such a pittance on almost a daily basis. "Convenience," "convention," "getting along." These are the meager rewards for our silent assent. It's great motivation to read someone standing up and saying "stop it. Your integrity is worth more." Need the reminder sometimes.
Right, I should have clarified it's used in conjunction with Nexpose (or other scanners) which does the automated scanning.
Only in Gemfile.lock. If you've hard-coded a version in Gemfile, you'll need to update it.

Eg. These will update fine:

gem "rails"
gem "rails", "~> 3.2"

This wont:

gem "rails", "= 3.2.10"
No, sharing negative experiences is ok. But reading the exchange between them I see some snarky comments back and forth. Its not the reporting that irks me but the choice of language.

"i'm annoyed"
"that's something you should think but probably not actually say"
"And BetaPunch, you’re welcome for the traffic… enjoy the SEO, too."

It feels a bit too vindictive and that isn't a flattering quality. Some people like that image and it works for them professionally. Personally, it turns me away.

I don't think its a stretch to say that it could have been handled more professionally. Dmor took an opportunity to showcase her professionalism and instead sunk to their level. That's my impression at least.
There's an enormous difference between serializers that make any effort at all to be safe, and those like Ruby's YAML library, which make no effort. Python's YAML, for example, exposes a safe_load() method.

It's really criminally negligent that no such method exists in Ruby's YAML library.
Joy in the task -- is capsule coffee displacing the barista?
The bug has been there for 6 years and is present in virtually ALL deployed versions of Rails. Bugs happen (and they are certainly more common in dynamic frameworks like Rails)
The Seven Coins of James Bond
FWIW, the modified title "Why Arc hasn’t taken off" was more informative than the original.
I couldn't disagree with this more. When people do something you find shady, you should complain! Loudly! This "keep your head down and don't stir up trouble" attitude is a huge part of why so many things never get fixed. And pointing out that a business has poor practices isn't drama; it's more like a review.
Doesn't SF allocate kids to public schools on some kind of hippie lottery system ? If so, we shouldn't expect correlation between a part of the city being "white or Asian" and having good or shitty schools.
The real concern is not whether college degree holders, as a class, do better, but whether a 17-19 year old would do better by entering that class. What those statistics don't include is something for recent grads. Ideally, you'd want to look at the unemployment rates for people approximately 24-30, stratified by college degree or not. And even then, it wouldn't necessarily give you a complete picture, due to all kinds of selection bias in the people who do or do not go to college. I would predict, however, that the unemployment rate for recent grads would be closer to the non-college graduate rate for the same age than to the all-ages college graduate rate.
You then end up with little to no incentive for "non-profit" producing things, like archeology. While it might work, it does detract from the purposes of a university, which is to educate, not vocational training.

Its a shame that not more people opt for vocational training instead of university, then expecting to get vocational training at a university, all the while complaining it costs so much more.
_Theater! Why that is a degree option at a university_

Maybe because theater is a big business. Disney makes Broadway shows and Cirque du Soleil is a billion dollar business.

But that's beside the point. High quality university education is not trade school. If you have a liberal education you should be ready for a wide range of tasks.
What's the easiest way to verify that "ActionDispatch::ParamsParser::DEFAULT_PARSERS.delete(Mime::XML)" is handling requests with xml parameters properly? Does one of you beautiful people know of a tool that I could use?
I've never been to NYC and am only vaguely aware that it is divided into some smallish number of boroughs (including one called "Queens", but I only know that because of Coming to America), so I have no idea what the implication is even supposed to be.
I suggest that you test it. You should get something like 'Disallowed type attribute' error if everything is installed correctly.
You can use Postman Chrome extension to quickly test if your server is ok.
I also found the description oddly compelling. There was a Terminator pinball game in the break room at Sun that we used to play, I felt it provided a good social nexus. There were also machines at Google but strangely if you played them you could feel like you were touching the exhibits at a museum which I found disconcerting. Mostly this came from the looks people would give you as they walked by. Sad really.
Android Developers: Behind The Scene (Infographic)
No, bundle update only updates the Gemfile.lock

If your gemfile looks like:

gem 'rails', '3.2.10'

Then `bundle update` does nothing.
His wife left him. Clearly she had ended the relationship with her husband/the boss-man. She moved on to a relationship with this employee.

Why is anyone 'at fault'? The marriage was clearly over (despite not being officially over). It would be great to see a post from the wife and employee's perspectives. I am sure it would be something like: "the marriage was over and we fell in love, everything is wonderful, I hope he keeps his job and my ex-husband/boss doesn't fire him/me out of spite". I also think it is telling that he is continuing to call her "his wife" still after she has left him.

As the boss I would wish them both the best and continue to judge the employee based on his merits at work.
The point is, and maybe I was vague about it, hence my downvotes:

If Netflix is offering a service and can't even get the largest, most common ISP that their customers use to agree to their "free" peering arrangements to offer even better content, then that appears a little ... disappointing, and not particularly hope-inducing to me.
Medieval Madness is my favorite machine, and I've bought it through Pinball Arcade on iOS and Android. If they would get Greenlit on Steam, I'll buy it again on PC!
I am a frontend freelancer who does PSD to HTML/WordPress, love to help out. I've checked out the slicing shops but have yet to find one that I like.

http://dylanhassinger.net
d@dylanized.com
So for old versions of rails 2, can someone tell me where to put this?

ActionController::Base.param_parsers.delete(Mime::XML)

if i just stick it at the bottom of environment.rb, will that work? i am not sure how to test to confirm that i've fixed it.
So does Perl
Just go see how it's done. Look for example at how `math.Exp` is declared:

http://golang.org/src/pkg/math/exp.go?s=368:395#L4

You'll notice that 'exp' is defined below, using Go.

However, 'Exp' is also defined in Assembly. For example, amd64:

http://golang.org/src/pkg/math/exp_amd64.s

This is all compatible with the `go` tool. You just drop in your Assembly, run `go build`, and the appropriate Assembly version is chosen based on your target architecture (or the Go code is used as a fallback if no Assembly for the target architecture exists).

I don't have much experience with inlining Assembly in C, but this is pretty damn easy.
No. It falls under gross misconduct, and he should show him the door.
It isn't some recent "devaluation" that the public universities are supposed to be about something other than purely vocational training. When Thomas Jefferson (successfully) advocated setting up the publicly funded University of Virginia, for example, his main aim was to produce a generally educated populace, which had sufficient grounding in all major areas of knowledge—philosophy, science, mathematics, political theory, etc.—to operate a democracy effectively.
Key quote: "If authoritarian governments were smarter and really did want to assert direct control over Internet operations, they would forget about the ITRs and push for passage and implementation of BGPSEC, and then make plans to assert legal control over the ROA certificates. Oddly, the only government that seems to be present in SIDR is the USG. Hmmm…"

Sounds a lot like actors within the US government want to maintain and extend their just-hidden-enough centralized control of internet information, just as the intelligence apparatus achieved for finance (via SWIFT and credit/debit card networks) and telecommunications (via global interception of conventional networks, and US-centric internet routing).

What I've always wondered is why China doesn't give fat pipes to Russia, East and Southeast Asia.
I would love to hear people's response to that situation at a startup.
I would ask him to resign, and if he doesn't he'd be fired. Clearly it won't be good for my business to have these 2 working together. The fact that he's clearly showing bad judgement means it's an easy decision as to which one should go.
Email doesn’t work because of context switching
I posted about this a little bit further up. Run the exploit code on your local server and ensure that no parameters are getting logged.

You can test by running this ruby file: https://gist.github.com/4499206

$ ruby rails_rce.rb http://localhost:3000 param "User.destroy_all"

Monitor your server and ensure it is disregarding the post parameters.
Airport cleaner turns in lost iPad with $13,000 in case, gives away reward
Hi Rich, I could certainly help with that. I'm going to be a little busy for the next 2 weeks as I'm moving to a new home and finishing up on another project, but if you'd like to send me an email I'm sure we can work something out!

You can view my portfolio at http://www.lemoncreative.net or get in touch by emailing hello@lemoncreative.net

Oh, and I'm based in Brisbane :)
Don't you just hate it when you notice something, talk about it amongst your peers and go on talking it then ten years later someone gives it a name after doing a study which wasn't really needed because its so visible.

I was interviewing people with a view that they didn't just rely on Google, but if they did need to use the google effect they could find answers very quickly. if the Internet wasn't available they could use whatever other resources to find the answer.
My parents have one sitting in their living room and queue video to it from their iPhone/RAZR from my upnp server and their desktop computer (win7 has a builtin upnp server).
International Space Station over Sunnyvale Skies
Time: Thu Jan 10 6:33 AM, Visible: 6 min, Max Height: 83 degrees, Appears: SW, Disappears: NE