skysight-inc/HackerNews huggingface dataset:
I'd like to see a website where I can enter my home address and work address and it will generate a chart of leave and arrival times for each day of the week based on prevailing and constantly measured and updated typical traffic patterns with accident-jams removed. In my experience traffic patterns, even without accidents, are highly non-linear and leaving 10 minutes early or later can drastically reduce your drive time. You could even have it rank different routes so that on any given day of the week you might take a different route and leave at a different time to minimize your drive time and increase the probability of arriving on time.

Metering lights have their use but are limited in how long they can hold up a car whereas if I am at home or work its no problem to adjust my schedule +/- 10 minutes or more to avoid a jam. As more people signed up for such a site it would also become more efficient since it could take into account where and when people actually want to go in its planning calcs.
(Survata co-founder here)

Garry's explanation is a good one. The data for this survey was collected via surveywalls (example at [1]), which let visitors access premium content online for free in exchange for answering a few questions.
All respondents here have US IP addresses and self-report age in the 13-25yr range. We generally see honesty rates of 90% or higher to questions for which we can verify the answer (e.g. "Which OS are you currently using?" or "Who is the President of the US?").

1. Example surveywall: http://www.hyperink.com/So-You-Want-To-Be-A-Programmer-b1559...)
Extracing such a list from the generated index only takes a small script and a few hours to download the 200+ GB index file. Which is a lot less than the slightly bigger script and the months/years to download and process 80+ TB of arc files that it previously would have taken to extract all domains.

Anyways, if you want a copy of domains from the index file just send me a mail to the address in my profile.
I'm not 100% positive, but I don't think strong_parameters would do anything to protect you here.
> The whole selling point is that it is curated by him.

I disagree. I doubt Subtle is getting funded because of Dustin Curtis' audience. For funding, the conversation of "market" had to come up and if the answer to "market" was "Dustin Curtis' fanbase", the investors would have had to be nuts to proceed. How big is the "Dustin Curtis" following? Hundred? Several hundred? A few thousand?

I don't think so.
> The code produced simply doesn't matter. Bitrot is accepted. Nobody cares.

It's a real bug-bear of mine that, in the profession as a whole, this attitude is rarely criticised, and sometimes even praised (especially on HN with the JUST SHIP IT startup mentality).

A lot of people are fine with this and can probably offer a lot of reasons pertaining to business interests, which is fine. Those can be measured, deliberate compromises backed by sound reasoning and opportunity cost. But there's this other school of thought that just thinks, "fuck it, it's just code innit."

And it seems that newcomers to programming (in PHP/on the web) are still being taught at that school.
My new BMW has a Yelp app, which might be the kind of thing they're talking about. I'm pretty sure your car isn't going to advertise to you without you asking for it; that sounds like a regulation nightmare.
MRI has tainting through SAFE, but its generally considered problematic and might give a false sense of security. MRI and Rubinius don't implement it.
Do you think not selling guns on an open market stops criminals from obtaining them as well?
Real World Haskell is a great intro Haskell book published just a few years ago, and it has exercises: http://book.realworldhaskell.org/
Github.com (built on Rails) is currently having issues. If I had a tin foil hat, I'd put it on. Hopefully their issues are not related to this vulnerability.
For all its reputation as overly strict and pedantic, one of the good things Java did was make sure that if something looked like a string it was going to be a string...
Although I disagree with pg's usage of 'hater'(it's arrogantly dismissive in this context) I thought I would provide the surprisingly poignant urbandictionary.com definition:

"
A person that simply cannot be happy for another person's success. So rather than be happy they make a point of exposing a flaw in that person.

Hating, the result of being a hater, is not exactly jealousy. The hater doesnt really want to be the person he or she hates, rather the hater wants to knock somelse down a notch."
It's been a long time since I read an article I agree with so much.
Kickass Bijections in Scala (from Twitter)
>why isn't there more of a focus on security here?

Because this is ruby we're talking about. A "Fun" language that has 100000 ways todo the same thing, so newbs find it fun and easy. You can almost guess how the language works and almost always be right. Thats cool, great for learning, makes you feel like a superstar when you're just getting started with programming... but its really not such a good thing when it comes to maintainability, and security.

This breads a community of people who arent very mindful of anything but having fun coding. (not always a bad thing, but certainly not conducive to good security)

The second you talk about "Multi-platform" or "security" to your average ruby user, their eyes glaze over. They just want to make cool stuff on their Mac, not worry about Security and best practices.

You could say the same thing about a lot of interpreted languages, but Ruby is especially bad.
Presentations have been around for quite a while:

http://en.wikipedia.org/wiki/File:VCN_Slide1.jpg
Its a worthy crusade and one which has such sweet irony. Standards organizations who spend thousands to get their standard incorporated into the law so that they can sell millions of dollars worth of documents to municipalities and other organizations that have to comply.

Only to have all of their efforts become the biggest information give away in decades! Priceless.
+1
We live in a consumption economy, this is hardly a groundbreaking realisation.
All good things started as pet projects...as long as you maintain an interest in building the community you should do fine. Sponsorships and ad sells will come naturally when you establish an engaged audience. Work on building up the content that you curate, and like someone else mentioned maybe use any video editing and recording skills that you may have to create your own video content and commentary, that will give people a reason to come back on a regular basis. Also you should have an email newsletter signup to interact with users when they're not actively looking for new info.
I think it has to do more that how can anyone make an informed decision on investment if private companies are not required to release financial data.
I am a mediocre-at-best Java developer, but somewhat better at writing. I'd like to learn Clojure and contribute to the community while doing so. Is the Clojure Doc project the best opportunity for someone like me?
Just playing devil's advocate here: a truly evil attacker could use the access logs from all the apps phoning home to build a list of vulnerable targets! :)
I am incredibly privileged. Both my parents are EECS professors, which means there were a lot of computers, a lot of computer knowledge, and a lot of computer books around the house when I was growing up; we had plenty of funding for me to go to a good college; and the university where my dad taught gave an incredibly deep discount on me taking classes there (three CS classes and one math class) my senior year of high school.

I've never seen this as an accusation. I don't even feel particularly guilty about it by itself -- but I do feel guilty when I see myself acting as if I have more aptitude or inherent capability than other folks who probably do but didn't have those opportunities. I think that's all anyone's asking for.
Same problem here, Chrome Version 23.0.1271.97 m + Windows 7 64bit.

Edit: Had to enable flash in order to make it work
"Major service outage"
(Survata co-founder here)

Survata has a DIY survey creation tool, but we review and suggest wording changes to avoid biased questions. We also advise on how to arrange (and randomize) answer choices to allow us to calculate and compensate for answer biases like always clicking the first or last option.

Responses are gathered on surveywalls across the web, where visitors answer short surveys in exchange for free access to premium content (e.g. ebook or video).
It's greedy because no other industry expects a 50 year product life cycle. And what's more, manages to get consumers to pay repeatedly for the same product every 10 years.

You buy an album on vinyl, then cassette, than CD, then MP3 - that's 4 separate times you'd have paid for the exact same album if you were to do things entirely legal (in the UK, it's still technically illegal to rip your own CDs).

The whole thing is mental and it's at least part of the reason why piracy is so prevalent - users have gotten so fed up of paying through the nose and not owning the content, being subjected to unskippable anti-piracy adverts and DRM, that they've turned to a subculture which can give them the content they want in a format they want and without any anti-usage policies.

Going back to your start up comparison, free markets are driven by companies constantly seeking customers by either the best, the cheapest or by offering a unique element. This means that companies are constantly trying to out do each other, and those that are the most expensive and provide the worst service go out of business. Yet in the content industry, the big corporations are the most expensive, and provide the worse service. And we're not just talking about a bad service, we're talking so appallingly bad that they deliberately set out to make the product crap (like I said, DRM, anti-piracy ads, etc). In any other industry, those businesses would have gone under.
No, it just gives me this screen:

http://www.techjawa.com/wp-content/uploads/2011/02/chromeos_...
I'd like to contrast this: if your application is heavily dependent on state, especially state which is shared between threads, Clojure offers a concise, safe, and uniform way to understand and organize state transformations--at the cost of performance. Where fast mutability is required, it's easy to drop down to explicit locks, atomics, java.util.concurrent collections, et al.

I find the majority of my time in writing stateful programs goes towards reasoning about safety, and having access to STM lets me write correct code with less thinking. Then I focus on optimizing the parts where performance is critical.
Free Adobe CS2 suite dl. Straight from adobe.com. Link in text.
Straight from the adobe website itself complete with serial numbers for install. ms or mac dls as well.<p>http://www.adobe.com/downloads/cs2_downloads/index.html<p>Can this day get any better?
Functional SQL Library for Clojure, Haskell, etc.
Completely over the moon with ScalaQuery (now Slick at http://slick.typesafe.com); is there an equivalent in Clojure, Haskell, or other functional language?

Not at all over the moon with Scala compile times, however, thus the question.
You have to use the java interop facilities if you want your own types to implement these abstractions though right?

I recall some debate about changing this so you can implement them using the native abstraction facilities in clojure (protocols), at which point I'd probably withdraw my point.

But yeah elegance is subjective. I use Clojure and broadly like it, JVM interop is really useful, but the lack of a crisp separation between clojure semantics and JVM semantics does still irk the purist in me a bit.

I guess I'd see Clojure and ClojureScript not as one language on two host platforms, but as one JVM language and another similar but not really source-compatible language on another platform which is influenced by it. Part of the philosophy seems to be to make pragmatic decisions which blur the boundary with the host platform, rather than try to abstract over the differences in APIs and runtime semantics.
I just read this today and it is clever and horrific at the same time: http://websec.wordpress.com/2012/01/04/multiple-vulnerabilit...
From ARPANET to Facebook: The history of the Internet
The title of the submission is deeply misleading, though it follows some rather ridiculous claims in the article-

Instead, they come from a few outlying neighborhoods and travel long distances together in the same direction like schools of fish -- clogging up not only the roads they drive on, but also everyone else's.

The notion that they are to blame is asinine. A highway is being utilized beyond capacity, but picking out any group on the highway adds dramatic narrative yet little insight. The suggestion that you remove "just 1%" is surprisingly naive as well, reminding me a bit of this Onion piece - http://www.theonion.com/articles/report-98-percent-of-us-com...

If the highway had less utilization, it would cause many who use mass transit (like light rail) to choose the highway. Rinse repeat. It is how highways in virtually every metropolitan area eventually reach a point of saturation, that new point becoming the natural balance.
Gems are unsigned. Patching from a different source is idiotic. Do not use: you have no clue who is the owner.
It would not have helped with this vulnerability, no. But it is a better way of handling filtering appropriate parameters.
wiki.python.org Compromised
Author of the SQL injection exploit blog post last week. This vulnerability is definitely not out of proportion: it is extremely critical and can be exploited without any conditions. Everyone should immediately upgrade.
Is this case the rule or the exception? How would we know?
I am shocked that it's considered a smart idea to make it possible to execute code from XML files (and that this is the default setting)!?
How many businesses with investors fail? Who cares if they deliver or not, the point is "kickstarting" something, not pre-ordering something.
Yes, you're right. There have never been any security problems with "serious" "nonfun" languages like C, or Java, or the .NET stack. :-/

This has nothing to do with the Ruby language, by the way, any more than a hole in IIS is a problem with .NET.

If you're going to talk smack, at least learn what you're talking about.
27 yrs since the world experienced a month that was colder than average
Bit.ly social data APIs
Of course it's not considered a smart idea. That's why this was fixed. It was a (critical) bug.
Many people are being drawn to a particular project on kickstarter rather than the brand as a whole. Given that it doesn't seem unusual.
As long as games released for this console would be regular Linux games runnable on the PC as well, it wouldn't be too bad. But in general old beaten console vs PC gaming arguments stay in place. Console market degrades games quality (interfaces and performance wise), which backfires to PC gaming scene with crippled console versions being adapted for PC by developers with minimal changes, instead of creating normal and rich PC interfaces for games from the beginning.
I really hope this isn't the sentiment of the RoR community. There has to be a place for critique when it's warranted. At this scale it's not a joke any more, you ask for what you need and otherwise you do less.
We have those quite a lot in the UK (along various motorways), although they're typically only turned on when congestion starts to build up.
If you want to get into silly analogies, compare the US to Australia. Tight firearms restrictions in AU makes it significantly harder for criminals to obtain guns.
Same here, I don't trust the clip it's flimsy. I opted for getting this to use while exercising instead: http://www.amazon.co.uk/gp/product/B008M6PA4A/

For day to day I just leave it in my pocket. Haven't lost it in the last few months.
I found it irritating and hard to follow. Had to close it after the fourth click. To each his own.
You should support Web Fonts and progressively enhance using local fonts if Flash is enabled. Also, add something for those of us that can't stand to use the web without Click-to-Enable feature in Chrome/Firefox.
Fractal San Francisco
Github is great, they're working on some serious problems, and every service has downtime.

But this is getting pretty serious.

This is the 3rd time in these last few weeks there has been a "significant service outage"

So much of a typical dev workflow is based around github, but more importantly a lot of new package managers use github as a base. Not being able to pull dependencies is a fairly big problem.

I will continue to use github, because they're awesome. At the same time, we're going to have to start building around it to ensure our uptime isn't reliant on their (less than optimal) uptime.
Tenderlove Keeps Us Feeling Secure: How Assembla Applies Rails Patch Fast
It was only an example. Your commend ignores a programming fundamental: "premature optimization is the root of all evil". Clarity and simplicity for the programmer trump performance every time. Only in extreme cases, worry about it later, and don't use that as an excuse to break things for the rest of us.
Spengler's Ominous Prophecy
Sincerely amazing. It's just unbeleivable. For me, Kickstarter is the startup of the year 2012. They did amazingly well as a company and by the way make possible so much good things for people and creators.

Thanks so much Kickstarter.
This is a great post. My only disagreement is with the insinuation that the lack of universal healthcare in the US is there to intentionally trap people in unfulfilling jobs. While I agree that it sometimes has this affect, I think universal healthcare may actually make people even more dependent on the system the author is writing against, all while decreasing the quality of the health care we receive.

Great article though.

--Written from my budget apartment, while working on stuff I love
Someone should change the title of this post. I didn't read it for a good 3 hours because I didn't realize it was related to Rails.
For those of you who want to read a bit more about the twin cities traffic metering program there's an entertaining chapter in Numbers Rule Your World that goes through the history and (very lightly) the stats behind it. http://junkcharts.typepad.com/numbersruleyourworld/
If the runtime overhead is low, then shouldn't tainting be used in addition to other techniques? ala Defense in depth?
> dash of conspiracy theories.

It doesn't matter if it's a conspiracy or not, the fact is it's a reality of the world we live in.

Acknowledgement of a problem is the first step to fixing it, or at the very least minimizing it's impact.
The best way to find freelance work is to not use websites. My best clients have come from:

1) renting/sharing an office or coworking space with other freelancers. Spent a few thousand on this one year even though I could have just worked at home, but it resulted in connections to some great people and good projects. Has paid for itself many times over.

2) having drinks with new people. Just going to a lot of meet ups, being social, putting yourself out there and letting people know what you do over and over again. Lots of times nothing happens or something falls through, but sometimes you end up in the right place at the right time.

3) talking to former clients or coworkers from a previous job and letting them know I am available for freelance work.

4) referrals from clients gained from 1, 2, and 3

Others I have seen be successful just focus hard on a particular open source project. I've seen a group of guys go from not knowing PHP to focusing on Drupal, contributing source code, becoming recognized experts, then speaking at conferences and getting huge clients in only a few years.
Awful design. It would be much more digestible as a single page of data that didn't screw up your back button.
While there may not be individuals out here masterminding the system the way the author describes, there are definitely people that know they are benefiting from our collective addition to consumption.
Linguistics identifies anonymous users
We don't know what Svbtle's game plan is. We don't even know the set of all possible Svbtle business models (as some people are criticizing), because there are business models that haven't been invented yet.
This video explains better IMO: http://cnettv.cnet.com/ford-touts-car-app-development/9742-1...
I've backed several projects on Kickstarter and Indiegogo over the last 1 year and am happy with them. Most of the projects were successfully funded and I have received the products. Sometimes I wish there was more.
Apple Quality and Customer Service Fail
I recently cracked the screen of my iPad 3. Made a genius bar reservation, showed up at an Apple Store, waited 30 minutes, then was told it'd be $300 for a replacement iPad of the same type. A few internet discussions said I might be able to get a replacement iPad for free, but the only free replacements seemed to be reported by women. So I took the deal and paid $50 extra for better support.

The replacement iPad was flaky right off the bat -- flickering screen even with auto-brightness off. I returned it to a local Apple Store and waited while the 2nd replacement was being charged. After 45 minutes of waiting, the genius helping me finally agreed that something was wrong.

Unfortunately, there were no other iPad 3's in the store. I asked if I could just get any iPad they had in the store. The genius told me the Apple system didn't even allow them to change the replacement iPad model. Think about that. Apple built a system that makes it impossible for the people on the ground to do right by a customer.

I waited another 15 minutes for the manager, and then she came and explained my options. I could drive to other Apple stores and pickup an iPad. Or I could wait until that store got a new shipment and come back in. She agreed with the genius that I couldn't get another iPad in the store. Basically, all my options, even with a valid Apple care replacement service contract, was to spend more of my time and effort due to two bad replacement iPads. I told her I'd agree to have the iPad shipped to me.

I'm pretty sure if I went to an Apple store a few years ago (and certainly 5 years ago), I'd be walking out with an iPad even if the manager had to "upgrade" me to whatever they were selling at the time. Now, it's about rules, not about making the customer happy. Welcome to the new Apple as they try to wring the last dollar from your hand. While I wait for my replacement iPad, I'll be playing with my new Kindle Fire HD.
Nothing gives me confidence in a platform like "almost nobody is even paid to work on Rails."
I don't know, I find it hard to believe that Apple would try to compete by lowering the quality of the product, that's never been their thing. Their products have always been more expensive, and it was always because they built a nice solid product (i.e. made of durable metals, glass, etc.). Give me a hunk of metal over a piece of plastic any day of the week.
it would never cross my engineering mind to develop app like Snapchat. If you pitch it to anyone who played with iOS for a moment, they will laugh at you and say: no fun, I can hold two buttons and take print screen and the purpose of your app - dissapearing photo - is gone. But yet SC managed to raise $8MM. How on Earth is that?? Is it possible that those who took photos have no idea holding power button and clicking menu button with take a print screen??
Qualcomm demonstrates how NOT to do a keynote
From my experience living and working in multiple countries, some with and some without universal healthcare - I'm shocked that a person's health can be tied to their employment. It's a disgrace, and it absolutely, 100% has the impact of trapping people to their job.

After 7 years in a country where health care is tied to employer, my brother moved to the other side of the world to a country with universal healthcare and within 3 days said "the biggest cultural difference I've noticed is how employees are treated... so much better here"