skysight-inc/HackerNews huggingface dataset:
While I usually agree with your advice, I think this approach, while theoretically correct, is actually damaging to the majority of your audience here. The closest analogy I can think of is that it's like requiring users to change passwords every 30 days: great in theory, but in practice it's a disaster.

The problem is that it is simply untenable for all but the highest-profile sites. Finding good ops people, even in the bay area, is extremely hard. Most sites are only going to realize that a security update has been released when their package manager tells them it has, and updating that package is usually a 30s process.

The companies I've seen have a hard enough time keeping track of security updates with package management. For a small to medium team with two, one, or even zero dedicated ops people, asking them to custom-compile (for example) a webserver, ruby implementation, and other critical libraries (openssl, glibc, etc.), subscribe to the relevant security mailing lists, and follow along with updates and security patches is tantamount to having them leave unpatched vulnerabilities on their systems for months or even years.

If you ask your users to change passwords every 30 days, there are inevitably going to be a few who take it seriously and generate and remember secure passwords every single time. But the vast majority are going to use weaker passwords than they otherwise would have, and duplicate those passwords across accounts as much as they can figure out how. Likewise, if you ask already overworked ops guys to manually compile and keep track of security vulnerabilities for their webserver and dozens of libraries, a few are inevitably going to keep on top of things and release fixes minutes after vulnerabilities are announced. But the vast majority are going to simply give up after a month or two and be significantly worse off than if they just use Ubuntu's automatic security package updates.
The entire executive team at Adbrite is rotten to the core. Hardeep Bindra, John Supan and John Underwood from Adbrite lied to everyone repeatedly over the past 6 months about Adbrite. Unethical to the core. The most obvious lie is that they put out a press release 2 months prior claiming they will relaunch, and today, the Indian goon tells Kara Swisher their plan was to sell the company all along - per AllThingsD! Whitewashing history! They are terrible human beings. These guys are goons and they screwed over everyone including employees, creditors and publishers.
3 Questions then:

A) Do you disagree with my position on effort?

B) How else is one going to encounter this phenomenon in real life?

C) How should I correctly test the hypothesis?
Why is it only Rails issues seem to be so popular on HN?

Is it the lovers wanting to spread the word for their rails colleagues using it.

Or is it the haters enjoying the schadenfreude.

No other framework seems to get as much publicity on HN whenever something goes wrong.
Sure, but making that argument is entering a mined field. You could as well say that skin color is correlated with intelligence because (I'm just making this up) living in Africa was easier than in harsher climates so their brains got smarter.

Btw, it's easy to see if your hypothesis is correct. Just check the heights of graduate males of tough university programs such as medical research, physics, mathematics etc. I belive that the distribution of their heights will be closer to the population average than the heights of CEO:s, top politicians and other "high-status" jobs. I belive it is because those positions isn't selected to solely on merit, but also on charisma or vaguely defined "leadership qualities."

In my experience, with lots of developers and engineers I've worked with, there is no height bias among them. Tall and short engineers and everyone in between. However, upper management and the sales guys are generally tall guys. Now, assuming that height is positively correlated with intelligence, and assuming that engineers are smarter than management and sales people, that observation makes no sense. :) You would expect to see extra tall engineers (because they need the extra brainpower) and shorter management and sales people.
We're sticking our neck out and predicting that eventually they will be.
Economic shortage is a term describing a disparity between the amount demanded for a product or service and the amount supplied in a market. (http://en.wikipedia.org/wiki/Economic_shortage) Note, that says noting about price. The reason why there is no shortage of engineers is there are surplus 'Unemployed' engineers on the market that move into other industries not because they are cheap. One of the first effects of a shortage is an increase in price, however wages have stagnated again suggesting a surplus.

PS: Rayiner's argument is despite a surplus of engineers people still want to increase the H1B cap and they want to do that to save money.
So your problem is not immigration, but rather talent-identification at your compensation level.

Increase your compensation level and the talent will find you.
So who is hosting the rails security update party this time?

Is there some magic command I am missing to update all rails projects I've ever worked on automatically?

"gem super-update-everything"
Or botnet, or terrorist organization goes about flagging the 1 million most popular sites?
It would seem the guru market is crashing pretty hard after solid growth. Might be smart to do some job retraining to become a ninja
According to this Indeed graph most jobs are seeing a decline in new postings: http://www.indeed.com/jobtrends/industry

I'd be more inclined to hypothesize that companies are slowing down hiring after bringing on lots of people post-recession. It would be more concerning if numbers such as unemployment were creeping up.
No, it would bring supply and demand into equilibrium, and ensure that resources are utilized where they have the most economic value. Econ 101 tells us that in free markets, price is variable that moves to equate supply and demand, resulting in neither shortage nor surplus.
THE END OF COINREAD
> I'm slightly apprehensive (terrified) about commenting on this topic or any relating to gender/race because it seems like the bar for public crucifixion is somewhat low

This is very true. I sometimes like to play devil's advocate, take up an unpopular side of an argument just to see how people react to an intelligent opponent.

I highly suggest trying this. It sharpens your perspectives; helps you think about your own biases, dogmas and blind spots. (I personally recommend trying to be somewhat anonymous, i.e. this account is my only HN username, so I'm not anonymous as far as people knowing that this current comment and all of my past comments have been made by the same real person. But this username isn't linked to my other online presences or real-life identity. Saying controversial things can be bad for your reputation.)

Taking unpopular positions -- most of the time things I don't believe, but sometimes things I do -- also opens your eyes to precisely how much we rely on name-calling -- racist, sexist, homophobe, terrorist -- to selectively frame issues and shut down discussion.
Wouldn't Tor be better? With a VPN, consecutive requests will still come from the same address, making it possible for a malicious network to track that address across sites. Tor can be configured to use a different exit node per host, or even per request.
TestFlight should be on Twitter's short list, too.
These are security holes patched in 6.1. I almost first read it as these are issues existent in 6.1. They need to better title the article.
I remember there being a thread about Coin Read a few months ago, so thought this might be relevant.
You're barking up the wrong tree if you think sex selection for height and attractiveness are anything but biological in origin.
The number n has O(log(n)) digits, but that has nothing to do with the subject at hand. The nth fibonacci number has O(n) digits.

And nothing in my comment relates to "number of transistor switches or CPU cycles required for a single multiplication".
Justin Bieber With His 'Homies' In An Airbnb Mansion
So, now you can flag your stupid ex-boyfriend or your unwary buddy as terrorist and have some laughs with only a simple clic, wow...

No need to search for a phone box anymore! Brilliant!
And Taren's.
Wireless fee, contract guidelines proposed by CRTC
That's the fun part. Anybody can come up with whatever reason they want!
I've only ever lived in North America, but I did have a good Scottish friend with whom I used to discuss linguistic differences between cultures and languages.

To my ear, Scottish people would pronounce the 'a' in Karl as /ɑ/; an open back unrounded vowel: http://en.wikipedia.org/wiki/Open_back_unrounded_vowel

But I'm not sure, since in Canadian English, the 'a' in Karl would be pronounced as /ɑ/ and the one in Carol would be an open-mid front unrounded vowel (/ɛ/).
Burstly acquired TestFlight in Q4 2011.
Watches as wearable computing
Building a (Cloud Status) Command Line Utility with Node
Apart from the fancy graphics, any reason to use Crashlytics instead of the open-source QuincyKit?
To be fair, as one commentator notes, “this document—in this phase— [is] nothing more than a status report without strong countermeasures against terrorism.”

They propose a potential method to combat terrorism online, as they were chartered to do, but note how difficult such a task would be and also how ineffective it is likely to be.

Some points from the document, quoted in the article:

• The Internet is not a single virtual society governed by one system of rule of law.

• It is often difficult to determine which content on the Internet is illegal, also because  illegality depends on the context in which it is presented and can differ worldwide and  even between EU Member States.

• EU and Member States legislation and jurisdiction covers only a part of the Internet.

• Illegal content itself does not always lead to radicalization and terrorist acts, while  content that does contribute to radicalization is not always illegal.

• Many activities of (potential) terrorists start in ordinary, easy accessible parts of the  Internet and are not illegal.

I don't think it is wrong to investigate how to mitigate organised crime and terrorism on the internet; the real concern is the cost in doing so, and what comes from such investigation. From how it stands now I doubt the proposal to implement a 'report terrorism' button will precipitate.
After being banned from Google Adsense (I still don't know the reason why) I have used Adbrite as an alternative. It's no surprise they are shutting down. The ads they deliver are borderline suspicious and they don't make publishers any money at all. I have earned $0.07 with Adbrite whereas I could have earned $60 in the same time frame with Google Adsense.

Does anyone know good alternatives?
I hold my phone with hand X, then tap with hand Y
I'm still waiting for 3D printing to achieve the quality necessary to print high-quality parts for something like a watch. I don't believe such quality is impossible, but I will be restraining my "the world will never be the same!!!" until we at least get close.
On the Internet, nobody knows you're a dog—or at least, they didn't until Facebook came along.

http://upload.wikimedia.org/wikipedia/en/f/f8/Internet_dog.j...
What version of their Rails app was compromised?
Apologies for off-topic, but how does one post code, or do quoted text on HN? I've seen it done here and a few other places, but haven't been able to find documentation on how.
And when they said they're moving towards knowledge graph like instant results, latency not gonna be pretty, lots of small fetchings after general queries from core search servers.
"Our work is driven by a belief that software should be free and accessible to all." We can um and ah about what free and accessible means, but Mark Shuttleworth continues to push the goodwill of the community, testing where its breaking point might lie (see the new secret features development system, and Amazon ads/spyware built into Ubuntu 12.10). Hence, this "Bug #1" is just empty posturing that attempts to ride on the rapidly evaporating goodwill of the community.
Solving the Facebook Hacker Cup in Clojure
Oh I understand the difference. But I thought there was still some hypocrisy in your "it's not hypocritical" post.

As for the moniker, it's a Calvin & Hobbes reference.
The same search on DDG gives a less "newsy" and more useful and explorable result, like a software encyclopedia. It looks like a Facebook profile (because it's taken from the Wikipedia page, which reads that way). I think that's the right approach.

https://duckduckgo.com/?q=barak%20obama&kp=-1&k1=-1

Now, if Google can pull off something similar with heuristics alone they may have an advantage, because those little boxes are run by code covering a whole bunch of special cases, and that could be a bottleneck.

But I love the exploration options of the instant answers.. What Google is doing is definitely more time-sensitive (they're justifiably tooting their own horn a bit with it), but it doesn't feel as useful in the typical case (does anyone really use Google like a newspaper?). If you search something like "barak obama news" on DDG, you get basically the same result as the Google headline summary, and it didn't get in the way of the list on the "barak obama" results page. It feels more natural, to me at least.

"I came for the privacy, but I stayed for the features..."
Interesting. My grandfather immigrated to Canada from Devon, around Barnstaple during WW2 around the age of 30. As a kid, he had only a bit of an accent to my Canadian ears, especially compared to other people I've known who immigrated as adults from other parts of the British Isles (the speech of one of my best friend's mother from the Rhondda Valley was pretty much not understandable to the eight year old me).
Perhaps I'm not being clear enough; I'm aware that wasn't what was being argued,but it did very little to dispel that narrative, which it plays into. Still, looking back, it seems to be a somewhat overblown critique.

I didn't feel that it explicitly addressed how an individual should be running their promotion process, but I could have missed something.
Unless you are a prodigy, you simply haven't had the time yet to become really good at anything. Supposedly it takes 10.000 hours or so of exercise, which would be 9 years at 3 hours daily.

I'm not trying to push you down, and anyone not paying you what your work is worth is definitely taking advantage of you.
This is slightly off topic, but here is a map of American and Canadian English dialects and accents: http://aschmann.net/AmEng/

There are few major pronunciation differences, yet many subtle differences!
I think people are looking for candidates in alternative places, via Github, SE careers 2.0, coderwall, twitter, IRC, linkedin (direct connections), meetups, hacker news, and less via major job listing sites that indeed crawls. But it's a good question. Anyone feeling all of a sudden that it's easier to fill an engineer's position?

EDIT: the absolute graph is described as "percentage of matching job postings" so it's absolute (total number of jobs), but still "relative" to "other" job titles. so theoretically, one explanation could be that the economy was recovering faster on the tech industry, but now other sectors are catching up... (just a thought, not sure I'm even convinced, but still worth checking).

EDIT2: Seems that a clearly defined crash is not what most recruiters think about for 2013: http://media.dice.com/report/december-2012-special-edition-h...
When I saw Vine I instantly thought of Cinegram [1]. Basically it's like Vine but it allows you to selectively animate portions of the video. This leads to lots of hilarious gif-like clips which IMO are much more shareable (and addictive) than Vine.

[1] http://cinemagr.am/
Look, I don't really care if you like backbone or not, but try to actually object to it with facts, not projections based on word semantics. All of your objections are made on incorrect assumptions of what information is provided, and what actually happens.

1) the add event isn't lost. It just doesn't fire until a success. Want to add a spinner, have it fire in the appropriate view as a response to the "submit form" event.

2) That isn't how sync is defined, and sure there may be a better name for it, but this isn't what it means. Lots of information is passed into the callback. Useful information, stuff that contradicts your objections.

3) Not the same as JQuery - you can reason about what comes out the other end, because the information is actually in the collection, with an api for getting it. The events have a great set of arguments for them.

Muddling the conversation with such incorrect assertions (aka FUD) is counter-productive.
Ever expanding bureaucracy is a problem, and the EU has a track record of turning several truly idiotic ideas into law. But people discussing EU regulations should be aware that the level of bullshit and outright lies coming out of the UK press in this regard is staggering.

Some nice examples: https://www.youtube.com/watch?v=oqVJEZnYiZo
Pure speculation: This fits in well with other sdk platforms that complete the loop for advertising companies focused on mobile. Burstly (mobile ads) bought TestFlight (beta app distribution sdk). Flurry (mobile ads) gives away a free analytics sdk (Flurry Analytics). Now Twitter (ad company) has Crashlytics (crash reporting sdk). In each case, the free offering is a trojan horse to get insight into tons of aggregate data in order to power the advertising/recommendation engines of the parent company.

The only way I can see that this makes sense is if Twitter is going to become a web/mobile-wide ad company and start offering ad units across the web and/or other apps (like AdSense but with tweets as the ad unit).

There could be dozens of different/better reasons that this makes sense, but I can't see them at the moment.
A VPN that shares IPs between many users won't have that issue. You'll have hundreds of users using an IP at the same time as well as thousands over the period of a day.
Ah, Australian "English"... :)

I'd say (in Australia), our English was influenced to an extent by the local population (ie: Aboriginal Australians) to a degree in addition to British English.

Here's a few references:
* "history & accent change" - http://clas.mq.edu.au/australian-voices/history-accent-chang...
* "australian accent" - http://clas.mq.edu.au/voices/australian-accent
* http://en.wikipedia.org/wiki/Australian_English

Might also be a good idea (if you're curious) to contrast/compare Australian English with New Zealand English. Subtle differences, but they are there.

It's a mighty big topic if you really want to delve into it in any detail.
Vulnerability counts are misleading metric for security. They do not include the vulnerabilities which have not yet been discovered or created.
It's funny how exact opposite Australia is. You can travel from Perth to Brisbane - 4 times the length of the UK - and even locals can't tell the accent apart from their own. There are differences, but they're not based on region.
I believe yegg has a pretty awesome internet connection in his basement: http://www.gabrielweinberg.com/blog/2011/12/duckduckgo-used-...
Here you go: https://gist.github.com/4660248
If you want to debug the metrics they're using, you're more than welcome to do it. I've got plenty of direct experience to question the results shown by a random webpage on the internet, and not much incentive to figure out why this particular set of benchmarks looks wrong.

A quick inspection of the tests suggests a high enough bogon count that it already begins to confirm my suspicions: there's a "fasta-redux" test for Perl which dramatically outperforms the "fasta" test that's implemented cross-language. Also, many of these tests are written in least-common-denominator style, which doesn't reflect the way the languages are actually used.
You for got to add... "Boom".
http://www.macmillandictionary.com/pronunciation/british/car...

vs.

http://www.macmillandictionary.com/pronunciation/american/ca...

So probably for a brit's ear the difference is mostly in the schwa

(disclaimer, I'm not a native speaker. Living in Ireland though)
You are very off track.

All the evidence I've ever come across points to the opposite conclusion: there is a positive correlation between beauty and intelligence.

A few seconds of googling turned this up: http://www.psychologytoday.com/blog/the-scientific-fundament...

I've seen actual journal articles on the matter as well. Facial symmetry is influenced by genetics, the oxygenation of the womb, as well as other factors. A lot has to go right for a person to have a beautiful face and a lot has to go right for someone to have a high IQ. It shouldn't be remotely surprising that they are correlated.

Judging by your incredibly stereotyped conceptions of "disco" girls the limited dating experience you had was probably a few decades ago. Judging by your silly, evidence free post you might not be particularly smart or attractive.

Better put in some effort on both.
Intuit Acquires Technology Patents from Payvment that is Closing Down
Sure, but I still believe it's far closer to the ideal parallel hardware than this n-core-shared-memory business that is really hard to program well.
To be honest I did not know that. However, I do wish (quite often) that Apple would acquire TestFlight and make the service more stable. Can't live without it. But I suppose now Burstly must be on Twitter's radar, too.
Do you work for google or something?

Google, Microsoft, Apple, etc.. have illegally agreed to not poach each other potential engineer therefore keeping their wage down.

http://news.cnet.com/8301-13578_3-57565425-38/apple-google-a...

They can pay more, they just don't want to, because why pay more when you can pay less to get the same value?
"You'd pretty never hear this from anyone in a public company, it just wouldn't be possible"
I think it is more like that it is not common yet.
> 4. Just as a minor point, can you imagine the feeling of being kicked out of the US after earning your Ph.D. here? I imagine it might breed a tinge of America hatred when they get back home.

Erm...so? No offense, but someone could trip and get hit by an American made automobile and develop a hatred for America. Not that you don't make other valid points but this is not something that motivates anyone to support immigration.
>>> Christensen broke down the costs of adopting robotics for a typical SME:

Basic robot system: 20 to 30 percent of cost
Auxiliary hardware (cabling, wires, etc): 20 to 30 percent
Software: 40 to 60 percent of cost

Even though a low-end robot may be about the price of a new car, they wont make it into your typical small machine shop until the "programming" component disappears.
There are 1,933,000 people over the age of 25 who work at a minimum wage job. There are 279,000 people of all ages who have a bachelor's degree or higher. Any data linking the two has to be speculative (like the numbers I provided in my previous post).
And you're proposing to get a less misleading metric for undiscovered or uncreated (!?) vulnerabilities how, exactly?
> Similar projects with a similar user base, like Django, don't have vulnerabilities of this severity with this frequency.

Not all Django vulnerabilities have been discovered or reported yet. Just because no one has found or reported a vulnerability, doesn't mean that it it doesn't exist.
Stepping Through CPython
Thanks. I've meaning to put the links back for a while and never have done it.
Best of luck to the adbrite team. Unfortunately, this happens. Also, if any adbrite developers are interested in coming to Minneapolis, we'll expedite interviews :-)

Contact info in my profile.