skysight-inc/HackerNews huggingface dataset:
Is there any drawback to opening /etc/fstab and making it read-only as suggested in the article?

Why isn't this the default? (in other words: what does benefit from ro not being the default besides people trying to hack into the box?)
Not sure if serious, but your question is too vague. A space company can be someone who develops software for satellites. Maybe someone who develops a small satellite itself. There are many niches in space. The now what? depends on what you pick.

Now, if you want to build spaceships, then you might want to apply for a job at NASA, Lockheed, etc. See what it takes to go to space and learn from what they are doing.
School district builds own software to handle student data, defies doubters
True; but it's hard to support a fixed-length encoding when a message can contain nested collections of arbitrary length.
> [Postgres] just handles the pretty display for you

It's rather more than that, though I don't have the time to kill digging into it now.

And personally I mostly seem to end up doing more complicated date processing in code, not queries; but there everything needs to be a date immediately (not unix time or similar) for most purposes -- then I can use complicated libraries written by others to let me do "simple" things with dates, like rolling months.

Ah, also:
> you convert March 1st to a unix date
Then that's where the complicated logic goes. Basically, you need that somewhere, and it's non-trivial (leap year calc is the least of it).

My point isn't that unix dates aren't useful for storage, but that they aren't useful by themselves for calculation.
Your dead submission certainly isn't very good on its face. I might flag it if I saw it. And I have no difficulty believing that some people would always flag it.

However, the answers are certainly worthy of consideration.

http://edge.org/responses/q2013
Unless you can offer any real alternatives to Magento I have to call bullshit, yes the framework is far from perfect and PHP is not the prettiest language.

But calling Magento "Java written in PHP" without offering alternatives, specific criticism or any backing of the argument is just childish.
Good to know that I am not alone in the learning method for that subject.

I am from Brazil.
C64 my parents got me and my brothers. Then moved on to, uh, learning the intricacies of computer security. My school did not play a role at all. Only my parents, and my older brother (whose floppy disks I would erase in order to save my Print "Your feet stink" program).
LinkedIn: The patron saint of the Web 2.0 also-ran
Real time customer support and here's how we do it
Reflections.
The best mentor is having a daring attitude. Dare to do things and learn from them. No one can teach you what you get from that. If you want to learn a bit more about business (real stuff, not book fluff), I have a project on github that is focused on me sharing knowledge gained from more than 15 years of doing business and software/startups. Check out my profile for the link.
False positives are a problem, and it is impossible to have a 0% false positive rate.

So how does the company HANDLE false positives? Perhaps they send out a notice which includes contact information and requests specific information be provided for an "appeals" process of some sort (ideal). Perhaps they say "email us if you object" and then mostly maintain radio silence unless you happen to know somebody (Google). Perhaps they delete the data automatically so there is no possible way to recover (maybe Meetup?).

False positives are a problem and I'm not going to get overly upset with a company when a false positive is triggered. But if you pretend that your process is perfect and do not ALLOW for the possibility of false positives, then I have a problem working with you.
I certainly see nothing on any of their pages to suggest that they ban more formal conferences. All their language is very broad and vague. The fact that "Organizer" is an official class of user who have to pay is a pretty strong indicator that it's not exclusively some loose informal thing.

Even in their terms of service, there's nothing that comes close to banning conferences. The only thing remotely related is that they disallow advertising commercial services.
Adding client side validations offloads some work from your servers. It could reduce the number of total requests that hit your server and overall increase your speed.

This may be premature optimization for a lot of cases but for form heavy apps this could be a useful optimization.

Also saving a round trip to the server can make the UX seem snappier and overall give a better user experience.
Can you be less vague? If you're talking about SparrowOS/losethos, then you ought to try to learn about who that person is. Otherwise, I have showdead and I've seen ONE or maybe two troll posts every few weeks from people who are hellbanned and most of the time it's what I would lovingly call a reddit-style-comment rather than an outright troll.
'not for profit' don´t means don´t charing money, it means that money don´t goes to founders/owners

maybe the sponsored money goes to pay the rent, beers and food so the event can be free, and any money goes to founders/owners
H didn't imply that its dead, he was implying that its dying. Slowly. In my opinion, 30 years from now C will no longer be in the top 10. It'll still be around though, because there will still be uses for it. Just not as many uses as before.
The MAC address is a globally unique identifier of the network card in the computer - hence it's pretty useful to uniquely identify the machine/user. It's also very stable; unlike cookies or data stored in the registry it won't be changed by the user or removed by crapware removal programs.
This is a clean way to solve the low hanging fruit of form validation, stuff like isItAnEmailAddress().

What I always find messy in web frameworks is doing validations which are more complicated.

For example a radio button choice which hides another form element which would otherwise be mandatory but should now not be filled in at all. Or where supplying a value between certain dates changes another date field from optional to mandatory and also must check that these dates are between certain values dictated by the first date field.
Bill Gates has no use for money...wants to rid the world of polio.
+ compare kerning
You're not on a super-fast connection. You're on an asymetric connection: super-fast download, to fill your brain with standard formating data, and super-slow upload, to limit the influence you may have on the other people.

The internet has not be designed as an asymetrical or a star-topology network. What you are connecting with usual ISP, is not to the internet, but to the ISP network: a big star network, with the ISP computers and routers at the central point, controlling your packets, and you at the tip of the branches, able to download fast what they want to feed you. They don't let you send anything fast, providing just the bandwidth to send back the ack packets.

On the other hand, routing amongst billions of networks is not a solved problem yet, it would be quite difficult to implement a meshed network (where you'd connect not with an ISP, but with your neighbors), and where every LAN would be assigned an ASN...
It really doesn't matter, its permissions are 0664 and the uid/guid are 0/0 (root.root).

It may protect you in case of a mistake, your editor should warn you that the file is read-only.

I don't like the post, it's too complicated for small benefits (if any). Besides there's no "generic secure setup", I think it depends on what you want to do with that server (ie. making /dev/shm read only may have impact on some software).

EDIT: I think I misunderstood your comment.
I'm not sure that I understand all of the negativity around this. If Campbells had called this a contest instead of a hackathon, would it change your opinion on the details of the event? They seem to be pretty open about their intent and what happens if you win and/or make it to the finals.

Some positive things to keep in mind:

* submitting an idea costs you nothing except for your time to write up an idea

* the winner will receive $25,000 for a 3-week build prototype, NOT a market ready application

* there are no posted rules on the level of completeness required for your prototype. Can you win with a slide deck that shows how you use their API to execute your idea? maybe.)

* presenting your idea in the finals does not require you to travel to NY, they clearly state that you can video conference in for the event.

* if you do win you are then offered, not obligated to take, an additional $25k contract to complete it (likely not worth it)

For all of the folks that don't win, it's not an entire loss either:

* a well written idea is all that is needed to enter the contest, not much lost if you aren't selected as a finalist.

* if you make it to the finals, your only cost is 3 weeks of your time for a 1:30 chance of winning $25k or less for winning the $10k as a runner up.

* if you make it to the finals you walk away with something tangible to tack onto your resume. "Made it as a finalist in a nationally recognized brand's competition for my idea" sounds pretty good.
> A common exploit vector is going through shared memory (which can let you change the UID of running programs and other malicious actions).

What? Citation needed. /dev/shm is simply a mount point for a memory-backed filesystem, much like /tmp. There's absolutely nothing special you can do with it.

The POSIX shared memory (i.e. shm_open) implementation on Linux does put its files in /dev/shm. By making /dev/shm read-only you're effectively disabling POSIX shared memory. Maybe some applications have vulnerabilities because they use POSIX shared memory unsafely? In that case you probably want to identify and upgrade those applications instead of disabling something system-wide that may cause legitimate programs to break.
In this case, why free press exists at all? Government could come up and say: "it's absolutely appropriate for us to ban all press as they are known of twisting words and create conspiracy theories. If the issue as stake is significant, we as the Government will post appropriate information instead."

This is not China. I think you should have a freedom of posting from wherever you feel like, as every site will have their own POV on the case. Saying that if the issue is significant, you will hear it from other place, you would have never heard about Lewinsky scandal which was brought to daylight by Drudge where no-other newspaper had published it beforehand.

I will leave my opinion about the site to myself, as it would not bring any value to this conversation.
Pushing France onto the Digital Stage
I'm not an expert, but you can definitely restrict the documents which describe the standard. Now, if someone sits there and reverse-engineers the spec without ever seeing that doc, that might be tough to prevent. But generally you can apply a license to any creative work you want; this includes technical documents. A good (or bad, depending on how you view it) example is service manuals for laptops.
This strongly depends on the definition of poverty. If poverty is:

a) Objectively defined, such as "no person goes hungry"

... then I think this statement may be true.

However, if poverty is defined as:

b) Look at all these poor people! They can barely afford their cell phones!

... then it will never be eliminated, because there will always be a bottom 5%, even as the wealth of that bottom 5% continuously increases. The poor in the U.S., for example, have never been better off then they are today. And it may well turn out that living in an unequal society (U.S.) results in more wealth for the poorest even over living in a society where everyone is equal (Soviet Union)--but is equally poor.
I hope someone takes the time to transcribe it...at the end of an already emotionally draining service, Taren still managed to bring out a collective, audible weeping in the packed auditorium.

She was very aggressive on her calls to make sure the prosecuting attorneys face reproach. But interestingly, Carmen Ortiz was mostly mentioned in passing. Stephen Heymann by far was the target of Taren's anger.
My daughter, the schizophrenic
Hmm. I see a completely round O in "TOYOTA", but not in "THE NORTH FACE". Is it just me?
But in the Mattel example, Helvetica is the thinner font. Instead notice the varying letter width, the M being wider than the A with Helvetica in the Mattel example.
His first bullet point talks about how that is not possible. While that does offer some protection from spammers, two wrong policies don't make a right business model.
When is the last time that you have read a TOS? You are shifting blame to the user, and it should not rest there. This is bad UI, and laziness. Meetup's TOS reads like a boiler-plate legal document; no one will read it.
Hey omer - I'm Namecheap's community manager and just want to clarify some things:

I investigated this as soon as it was brought to our attention a few weeks ago. First, this is NOT Namecheap's control panel. This is Kayako, our support system, and only is created when one does not have a Namecheap account. Therefore, your account data on Namecheap is completely secure.

Second, as soon as we were alerted to this being an issue, I brought it to Kayako's attention. They replied and told us that the information is stored in a hash.

More info in these tweets:
https://twitter.com/Kayako/status/288304914151661568
https://twitter.com/Kayako/status/288305161737220096
https://twitter.com/Kayako/status/288306260644880384

We value customer privacy and security and hope that Kayako will resolve this as soon as possible.
I thought it was standard to have both. Server side validation to keep bad data out and client side validation to provide a nicer UX for the user than a complete page reload and them searching around for what went wrong.
A tutorial for the Census Data API
goddamn! how about raising your standards in terms of hygiene?
It'll be ready soon.
I don't think chroot does what you think it does.
You can take my passwords, out of my cold dead hands
My company uses Olark and loves the integration with gchat. As a developer, I like the Olark API: http://www.olark.com/documentation
Terrible test. I got 19/20 based entirely on knowing what the original logos looked like on a few of them (Agfa and DEC, mostly). I thought I'd fail because I've never paid attention to those fonts.

If it was done with novel text, the results would have been different.
And from what I see the profiles are public ? i.e. anyone on the Web can search the site without an account? Privacy please...
I was actually referring to the danger of allowing specific profile criteria in advertising campaigns not in public queries.

The advertiser will presumably never see the actual profiles of the fb users, but they will know too much about the visitor(s) arriving from that Ad.

The post I replied to implied allowing "creepy" levels of targeting for Ads was not such a risk.
To be honest, I don't know what the author means; but I've seen web exploits using /dev/shm as alternative location to dump scripts (the other usual suspects are /tmp and /var/tmp). The web server process can write there, spawn a new process, etc.

I think it's better to protect the entry point (ie. in PHP, use php.ini open_basedir).
The Prometheus Society - The Outsiders
Too bad this test isn't a higer DPI. It's easier to tell the differences, and see the subtleness of Helvetica at higher DPIs. Helvetica is a font designed for print, but it also looks good on HiDPI/Retina displays.

On my Retina MacBook Pro this whole test is a blurry mess. I had to bring it over to my non-Retina display to take it. But the differences between Arial and Helvetica pop a lot more on a better display.
> what does benefit from ro not being the default

/dev/shm is used by the POSIX shared memory implementation (i.e. shm_open) and can also be used as a general temporary directory (like /tmp) that's memory-backed. Legitimate applications use it and legitimate applications will break if you follow this advice.

There's nothing inherently unsafe with /dev/shm - it's very similar to /tmp. It's possible some applications use POSIX shared memory unsafely, but that's a problem with those applications. Doing something drastic like making /dev/shm read-only, if it even serves a legitimate security purpose, should only be done as a last resort.
Great. How about internationalization?
Do you allow to replace the english error messages with messages in other languages?
How marketing properly fits into the web design process
تحميل برنامج جافا 
يعتبر الجافا هو المشغل الرئيسي للعديد من التطبيقات والتي
تعتمد عليه بشكل اساسي منها الشات الشهير الدي جي شات وهناك ايضا العديد
من الالعاب علي الانترنت التي تستخدم الجافا
Frameworks come and go. Languages come and go (albeit at a slower pace). But the basics do not change.

Why be bitter about frameworks? Yesterday's succesful frameworks (Struts anyone?) are today's shame. And today's succesful frameworks are today's shame (including the ones plagued with countless security issues).

Frameworks and APIs are easy to learn. Learning the basics is hard.

Norvig's idea is that to be an expert in any domain you basically need to spend ten years learning it.

Why spend ten years learning frameworks? They'll be gone by the time you master them (ok, I'm exaggerating a bit).

Focus your time and energy on the invariants: learn the things that still shall be there and shall still be true in ten years.

I honestly have no fear and no bitterness about the ones amongst the youngsters who can only glue together frameworks and APIs without understanding what's going on behind the hood: they'll never be a match for the ones who understand the basics (both older programmers and youngster ones who realize there's much more to programming than being able to do API/framework plumbing).
In the Mattel example they both look kerned about the same to me (the A tucked under the T). Elsewhere in this thread it is pointed out that Helvetica uses varying letter widths and that's the only giveaway I see now in Mattel, though it's somewhat difficult to see due to the kerning. But the M is clearly wider than the A with Helvetica.
We still have >4K members, and still have to keep paying to keep them from getting spammed.
Yes. And you are prohibited to disclose (and that sucks):
>This problem statement is the exclusive and proprietary property of TopCoder, Inc. Any unauthorized use or reproduction of this information without the prior written consent of TopCoder, Inc. is strictly prohibited.
I can't reference any studies or anything, but my personal experience is that passion trumps all. The problem with passion is, you don't have much of a choice. One might have a passion for gardening, whereas another might have a passion for computers. The gardener has a lower chance of being "successful" and "making a difference" (in the standard capitalist/western sense).
Mega will only succeed if developers take the fall
For one of my new projects, that is precisely what I am doing - making it possible to define complicated validation rules in a simple manner (and lots more). Would there be interest if we open-source it?
It is a common hiding place once the box has been broken into, not necessarily something that would be attacked right away. If you look on google you can see plenty of evidence of people's boxes being compromised through insecure shared memory and you can find plenty of examples of shared memory being exploited for privilege escalation and hiding malicious files.
The MediaSource APIs will make this possible
Thanks, this is the key to finally help me spot it.
But it produces a protocol which is incapable of handling messages greater than a certain length. The marketplace is littered with such protocols, but they're all useless since they can no longer even transmit a single wordprocessing document now that a page of text takes up megabytes of overhead.
Function patching on iOS via libevil
Get better at planning your next development sprint.
Event seems to be up again: http://www.meetup.com/reversim-summit/
That is a great reason to say, "This one-time meet-up sounds like a better fit for $Competitor, as we are trying to foster recurring meetups", but NOT a great reason to irrevocably delete a group with no communication. TOS may be TOS, but few customers read them quite closely enough.

Is the recurring vs one-time distinction (and, more importantly, that one-time meetings are NOT welcome) made clearly? I realize that they say "Meetups are ...." on the help page, but it seems like this group really got screwed.

This meeting was for people who already followed a podcast, as part of a local software development community. There might have been later meet-ups. As long as it is clearly stated what the frequency is, does it matter if the meetups are once a month, once a year, or once a decade? You could still have a passionate community of people who want to use your system to help them organize in-person meetings.

On top of any policy / communication quirks, there should have been technical tools in place to ensure that the organizers' hard work was not lost.
a question ..maybe it is obvious.. in the past Mobile OEMS at times have paid a bandwidth fee to telecomms to balance end users having to update an OS on the device..

Are we sure that the event of Google paying Orange referenced in the article is not simply Google paying a small fee due to the bandwidth consumed by the end user when the Android OS is updated on the Orange networks?
side note, usually that download is nto counted towards user limits as usually its also sometimes a security update.
It doesn't necessarily take generations. Google projects like Al-Azhar park, Nizamuddin Basti and you would see that these renovation projects completely overturned the economic lives of the poor people who live around the area. The public private partnership between the government and the private agency went in to these areas to renovate the historical structure, but they ended up taking the poor out of poverty.
> the ISS is the most expensive thing ever built

A wall and some pointy-shaped buildings would like a word with you.
What makes /dev/shm a better hiding place than /tmp or /var/tmp?
"More than reasonable" = Very reasonable.
I would love to read a short history of how the current skeuomorphic interfaces came to be on iOS. There are a few good ones, but others are so amateurish in comparison that it's as if an entirely separate company pushed it out. I'm thinking of GameCenter, which even though I know is a major part of official iOS, I sometimes disable because my reflexive action is to disable spammy-looking apps.

I'm not against all skeuomorphic designs....in Game Center's, the design is just bizarrely tacky.
I've only really used jQuery Validation, hence it's intergration but there's no reason why different implementations cannot be added. What JS validation libraries would you want to see added?
The problem is that there was a lot more effort put into the originals than their knockoffs in Arial. The originals were produced with a designed typeface - and typefaces are tweeked for size. The Arial knockoffs obviously used scaled up versions in several cases. The knockoffs didn't get the same attention to kerning either.
Installing mod_security can have nasty side effects. For example, I lost many hours finding cause of my AJAX file uploads failing. It turned out to be caused by this module.
When I first visited it, it was a plain white text box at the end of the article.
Bastille linux hasn't been updated in close to 6 years. A year ago they announced that they were restarting development but there hasn't been a release since. Just saying I'd be a little nervous that it hasn't kept up with changes in Ubuntu.
Becuase the API is really a valid option for the average user...
I don't think so since Google isn't responsible for updating Android phones (except for the Nexus models). That's a job for the OEMs.
Are Babies Born Good?
Kinetic Sculptor Puts Cyber Dreams In Motion
Fold me to the Moon - a story of exponential growth