skysight-inc/HackerNews huggingface dataset:
The whole issue is that Rails has tried to package what's 'probably a good idea' into the framework by default for quite a while. Unless every guide ever tells you to subscribe to the rails-security group, only those 'in the know' will know to do so. What's better, to have access to these updates by default, or having half the Rails apps out there potentially being compromised?
As an anecdote: I'm 5'6", and I don't think this has been a barrier to anything.

I've had to be more careful about my appearance, of course. My clothes fit well, I'm lean, and I work out.

Despite my diminutive stature, men get out of my way, because I look strong and I walk confidently. Men didn't do this until I got strong.

I get looks from girls all the time. They don't seem to care that I'm in about the 2nd percentile, height wise.

Attitude about height is often more important than actual height for a man. Things would probably be easier if I were taller, but being short is far from the insurmountable obstacle it's made out to be.
Scientists create 'designer snowflakes'
wow, who would ever use that for their email? I'd want a filter to send all of them to the trash "just in case"
A site that trends millions of comments in real time, what do you think?
I'd like to think that if a company doesn't have the resources to properly maintain security patches on their deployed applications, they would use some app hosting platform (like Heroku), but I suspect that there are indeed many companies who are set up like you describe.

That doesn't change the fact that relying on your OS package maintainers to properly update packages results in the same "having them leave unpatched vulnerabilities on their systems for months or even years" (at least the "months" part if Ubuntu is any indication).

This would seem to be a "damned if you do, damned if you don't" scenario.

Also, the 30 day password change thing isn't even something that's "technically correct". It's a "why do we cut the ends of the roast off" vestige from old DoD recommendations.
Interesting to see a lot of Google contributors to the WebKit memory corruption issue. Does Google or Apple push more commits to WebKit these days, or is it about even?
While handy for use in civil areas, or low intensity conflicts, this will be useless in what we consider a "traditional" high intensity war. The airspace in such a war is non-permissive. Any loitering drones will be easily shot down, or jammed so that they have to return to base. GPS will be jammed, and any AD system worth its salt will be able to down these with ease. And if the enemy has fighter aircraft, it'll be a turkey shoot.
In relative percentage AND in the job offers that indeed.com have.
Maybe job's offers for dev is done by another way than indeed.com.
Maybe, as you suggest, there is a massive look for gardeners jobs.
Maybe, the dev's keywords are more specific (It seems not: other keywords like "javascript" or "ios" show the same graph).
Maybe there is effectively less demands than before.
This simple command line tool to execute arbitrary code on your server works, kids. I'm also north of 90% probable that I could weaponize it to turn any image tag on the Internet into "roots your local machine", and 100% certain I could do so for any page I could coerce to execute JavaScript.

You need to patch. Now.
Your data is less free on someone else's disk than on your own disk. That's really what you're getting at. But that isn't OS-dependent. You can just as well manage to Facebook yourself all up using Windows. Meanwhile you can use Chrome OS to access network services on your own personal server and not use any cloud vendor at all.

What you're really complaining about is the lack of good, easy to use personal servers, which makes the unavailability of client-local storage encourage you to be dependent on cloud vendors. But that's a separate issue from an OS that somewhat sensibly discourages you from keeping important and possibly sensitive files on a non-redundant portable device which is easily damaged or stolen and has no automatic backups.
Perhaps if you can't afford to build a safe system, you should reconsider if you should be in the business of building unsafe ones?
Late last year, an artist by the name of Captain Murphy dropped a mix tape, "Duality". Duality had phenomenal production quality and very talented rapping. Everyone from "future beats"-type listeners to gangsta-rap afficionados wanted to know who Captain Murphy was.

Turns out, the biggest name in all of modern experimental hip hop, Flying Lotus, was behind the project, along with a wealth of his friends. When asked why he didn't release the music as Flying Lotus, he replied (paraphrased) that he didn't want people to say, "Oh, he's rapping now", and he wanted to be respected more for his talent than for his legacy, or who people thought he was.
What if I told you that there is a new web framework similar to Rails, called Fortran on Fails. It has zero vulnerabilities reported against it, ergo it must be 100% secure.
Not on topic, but HOLY CRAP that is an annoying website. Slyly "inserting" pages in your browser's navigation history as you scroll down is clever, but it's a sure-fire way to piss off a reader! I thought I had just blanked out for some period when I clicked the back button expecting to come back to HN and saw a whole history of pages I had supposedly visited.

Never mind the horrible user-experience when the site takes a few seconds to load the next page and halts your scrolling...

/rant
Twitter May Get Tax Break for Giving Away Promoted Tweets
How To Build a jQuery Tabs Widget with Ajax Content
It is recursive but currently that is my #1 problem with it. I know I am not alone in that either. Back then yeah Ubuntu was awesome but if this keeps up then even less people will adopt it. Canonical needs to get it together.
Why the Future of App Design is Minimalist
A mini helper that helps you to read tabular data (tabularize.py)
That's a nice idea,
YAML does not allow execution of arbitrary Ruby code. Some YAML types allow specifying a custom class, which the Psych YAML parser (default in Ruby 1.9) will call the initialize or []= methods. If you can find a class that eventually evals() input passed to initialize or []=, then you win.
http://ronin-ruby.github.com/blog/2013/01/09/rails-pocs.html
I think what laumars was referring to was the pronunciation of the first vowel in Karl and Carol.

In other words, both dialects have a schwa inserted (even in NA English), but the difference is that Scottish people do not differentiate between the 'a' in both Karl and Carol.

Put differently, Scottish people pronounce Karl and Carol the same way to an English speaker (from England).

What I'm saying is that to my Canadian ear, I could hear a difference between the few Scottish people I've spoken to in Canada. But come to think of it, they were probably Canadianised.
Their system centered around APIs, hashmap and msg encode/decode are CPU bound.
It's really not about just capturing what's in front of you. That's easy, you can do that with the built in Camera. The only thing this app adds is some sugar around that experience.

The crux of why video isn't like photo is that editing it is so bloody difficult... and the only way you create compelling video is through editing. This app does nothing to help that.
Hot-off-the-presses updates often contain serious bugs themselves as well. I lost count of the number of Drupal patches-to-patches-to-updates I've had to deploy, each coming within days or sometimes hours of the prior one. It got to the point where unless it was a critical remote vulnerability I would never apply a fix that had not been out for at least a week with no subsequent serious bug reports.
Great point. :) I admit, I was having trouble adding something visually interesting, which probably means I should have just avoided it completely.
Yeah it is an interesting choice. I may be wrong, but when I saw the first Vines shared by Kevin Rose on twitter they were without sound. I think it was a conscious effort to differentiate themselves from gifs, and all the internet baggage that come with them
Debugging Travis builds
I would love apple to acquire test flight. I think it sucks and not user friendly at all. However, I cant live without it
That's exactly what I'm saying. The carrying of a firearm should not be considered evidence of a crime in progress in and of itself. Nowhere else in America, save for NJ, IL, and DC, is it unusual for someone walking down the streets to be in possession of a firearm. Lawful firearm owners should not be harassed to prove their lawful status at every turn. The police can ask questions when they have reasonable suspicion.
All the same, you should be careful about using deductive reasoning in this way. You're assuming that the only criteria upon which you were measured were formal education and experience with big clients, but what about how you struck them emotionally? Did you have that trustworthy/hardworking/whatever air about you that perhaps some of your colleagues had? Did your mode of dress impress them as much as for other candidates? Had the interviewer seen one-too-many people with the exact same qualifications as you, and thus was looking for a little something more that he didn't search for with the other hires before he got desensitized?

I'm not saying that it WASN'T height discrimination; I'm just saying that you should be careful about concluding such things so easily.
That's an interesting project, but it doesn't qualify as portable yet since it's currently entirely dependent on gcc inline assembly syntax and doesn't support a number of important architectures, including ARM. Thanks for sharing though, I'll keep an eye on it.
7,257 out of 381,948... wow. With a success rate as abysmal as that, it is a wonder that we still take a police officers "gut instinct" as seriously as we do.
Slideshow: The Fab Way - Company Culture At A Fast Growing Design Company
Of course it will. And let me guarantee you this: the city will not start by defending the merits of the scanners, but by doing everything it can to get my case dismissed before it has to do so.
Show HN: Pandora for Porn - Fapulike.com (NSFW)
http://www.fapulike.com (NSFW!)

Almost 2 years ago, when I was working on building collaborative filtering recommendation systems for my day job, I had some ideas that I wanted to test out on my own. I wanted to see if I could build a recommendation engine based purely on content-based filtering, but I wanted to test what would be the least amount of information needed for it to be useful. Well, it turns out, pictures in general have very little to almost no useful metadata that could help content-based systems. Except for one particular type of picture - an adult porn picture. Most of these are shared willy nilly but many sites categorize them loosely in to groups. Also with the advent of nsfw reddits, there's always some metadata that can be extracted from the subreddit these pictures are shared to.

Anyway, long story short, I started down the road and have made considerable progress. I launched Fapulike.com almost a year ago and it was received well (I get about 3K uniques/day and 15K pageviews/day). In order to achieve my original goal of an effective recommendation system, my aim is to increase the pages/visit count from 3 to 15. Currently, it's at 5-6 pages/visit but I hope my latest redesign bumps that considerably.

I know a lot of people don't like to talk about porn projects openly, but I wanted to share my story of how I introduced some science in to the online porn sphere. Comments/suggestions/criticisms always welcome.
> Do you think English speakers never made spelling mistakes before spellcheck?

English speakers make more spelling mistakes when typing into a spell-checked document because they know they no longer need to spell correctly.
If all occupations cooperate and allow greater competition in their respective fields, then the net wealth effects on the economy are positive. If one occupation blocks competition, its members may benefit relative to other occupations, but there is no reason to assume that only one occupation will be able to defect, and encourage a policy decision that benefits its members.

One of the ways to counter the inevitability of actors making rational decisions that end up making everyone worse off is through the setting of effective public policy with an eye to aggregate benefits.

I think it is very safe to assume that the point of funding engineering education was that engineers' work is valuable to society, not that people who can make it through intrinsically merit certain salaries. If acquisition of talent through immigration is another channel, so be it.

The idea of education subsidies is also interesting to consider. On one hand more people are able to choose the career, so the skills are less scarce, and salaries are lower. On the other hand the increase growth in the community of trained people allows for greater sophistication, cooperation and specialization, which leads to more valuable output, and higher salaries.
You're correct. Should've paid more attention.
Foreign companies in India
The DNC's voter registration app is now free and open-source software
You get better (short, sane and email-friendly) URLs if you access google searches via DDG bang. !gm = google maps, !g = google search, !gi = google images, etc.
Making Hadoop Amazing
How to Find and Delete Orphaned Records with Ruby on Rails
I bought a very nice mechanical watch today (in-house movement, 3 complications, pink gold).

There was something immensely good about buying a pure mechanical device in this crazy 0's and 1's world. Even if it was build thanks to amazing technologies, including computers and advanced software, the end product is still 100% mechanical.

And this timeless masterpiece should still be working perfectly long after all the electronic junk I'm using today shall be forgotten ; )
you can also just add &t=2m50s to the query string
I suspect he wasn't skilled in overcoming his appearance and projecting himself yet.

I had a similar experience to yours, perhaps, but in engineering. Most of my coworkers were at least 25 years older (and one good friend calls me grandson). It took a while to learn to project "I know what I'm talking about and can prove it" without coming off as pretentious. And I've had people note the change.

Perhaps like your experience, I've learned to establish myself quickly, and if I lose face it's certainly not because of my age.

... The first time. I've been very careful to be cautious, since it can easily _become_ a problem. In a management group, it's easy to lose face fast if someone doesn't follow a nuanced argument (which is admittedly a rookie mistake in such a setting). Then you're scrambling to correct the spoken typo and your already lost. I'm usually bull-headed enough that's not a problem, but meekness can be a stumbling block, and I suspect that may have tripped up the author (or perhaps perceived meekness of eager youth?), and that fear alone can pressure a person into feeling unfairly judged.

Just my $2.00 on playing devil's advocate.
I'm always fascinated by the general obliviousness displayed by questions like these. I realize the headline is just a simplified way to introduce the topic, but there really are a lot of people out there who think that we all spoke like the Brits at some point before, and Americans "lost" the accent. The number of people who don't realize that there's no such thing as "no accent" always astounds me.
Thanks for this, very interesting. For more background: https://en.wikipedia.org/wiki/Great_Vowel_Shift
this is why I don't work for mega software corps

i bet all these poor bastard devs had to do 'team building exercises', file endless TPS reports, and forced to enjoy TGIF jeans day to indoctrinate you into the company cult then it's layoff time.
>

Where are you getting that from? To my ear, I find it to be excessively 'flat' (e.g: http://www.youtube.com/watch?v=FxtBqN48TMc).

I don't think any geographic area can authentically boast an 'accentless' accent to a plurality of the country[0].

[0] Well, except for the most populous region, of course - but that would be a bit tautological.
They acquired Vine and just yesterday let them launch their product under Vine and stay in New York.

They acquired TweetDeck and changed it a little but the team and registered company still resides in England.

and as you said Posterous is the other example, although I wouldn't say that's really a Twitter product. They're just letting people leave that at their own will and eventually they'll just turn it off.
"On the Internet, nobody knows you're a dog" is an adage which began as the caption of a cartoon by Peter Steiner published by The New Yorker on July 5, 1993. (From Wikipedia.)

At least they ought to give credit.
This is unfortunate, but often happens in startups. I can't speak to whether or not there was dishonesty or a lack of character, but I feel for everyone receiving this unexpected email.

Is Adbrite's leadership doing anything to help find employment for everyone about to be displaced? 'Cause that would be a great way to show that you care and appreciate all the hard work that was done on behalf of the founders' and their vision.

If not, my email address is in my profile. And eventhough my company is in Minneapolis, I'll expedite any resumes for any developers / designers that are interested.
I mostly worked with small companies in India (only a few projects) before I was 14. And, I am working nowhere close to the amount which even comes close to max. hours.
Blending features in Canvas
and small companies don't fire people?
A Simple Protocol For "You Are Not Your Code"
> By this metric if you can't find my life's story on Google, I must be fake

Thank you. By writing this comment you just proved the statement I made above.

Did I say I couldn't find details about her on Google? On the contrary, I found enough evidence while doing a simple Google search to come to a reasonable conclusion. If I can't find your story I would reserve my judgement.

> Companies with single shareholders
> Cal Poly and Caltech
> Shitty websites for companies supplying important formulations to the likes of Estee Lauder
and many more..

Please avoid using the word 'Troll' casually without concrete evidence.
Immigration reform: US senators in bipartisan deal
My understanding is that YAML is supposed to be highly general-purpose and is not supposed to be resilient to malicious input. These aren't YAML parser bugs, these are framework bugs that pass malicious data to the YAML parser when that parser should never be exposed to it. And that in turn appears to be entirely due to an extremely overly-helpful and magical nature of the framework.
Have you used crashlytics before?

I use it in production with an app that has >50K users. It shows you the exact lines, and break down where it happens. What you showed isn't even important.
Very true. But, I don't think that applies to everything. I don't think it takes 10,000 hours of practice to design a decent Wordpress theme. In fact, I would say that most college graduates (even from top universities) would still be quite far away from 10,000 hours in a specific domain of CS/SE, yet, companies do hire them.
I started out as a 13-year-old entrepreneur selling stuff on eBay (which was pretty new at the time). There was a loophole when they first opened where you could sign up under someone else's name and switch all of the records over to your name; that way you didn't have to be 18 to register.

I first grew to love the Internet as the only real meritocracy I experienced in life. No one knew I was 13. When I talked to people in person I would get a pat on the head and a "you'll do great some day," but the little eBay company I had started was taken very seriously. It's still around today, and it makes just over $2 million/year in net profit (not on eBay any more).

While the Internet is no longer as anonymous, and I am no longer with the aforementioned company, I believe product still speaks for itself. While it's true that investors may be looking for a dropout Stanford grad student, if you create something people love you can grow a company regardless of what anyone thinks about you as a person. Hell, I raised half a million dollars as an 18-year-old kid, not because I looked or acted like the quintessential entrepreneur, but because I could show numbers. If you can show someone, "Here's a black box where you put in $1 and $10 comes out," finding money isn't hard. Even if you're 18.

You don't know who I am from this comment (unless you stalk my bio and find me on Twitter). If you like it you'll upvote it. That's exactly (one of the many reasons) why I love the Internet.
How Android devices are keeping webOS alive
Would your manager be more happy if you didn't use rails? Rails is a massive codebase with many vectors for attack and opportunites for performance issues. Does that mean your manager (or you) would rather code all this stuff from scratch?

Tell your manager to consider all the benefits your team has gotten from working with rails weighed against the trouble of a patch or version bump deploy.

Remind him/her that seeing these kinds of notices from the rails team is actually a good thing because it proves that there are eyes on the code base and a team of smart people reacting quickly when something gets noticed.
We hear about 100k+/year salaries for software engineers here on HN every day. Why would salaries be so high (almost 3x the median income) if there is no shortage of workers?
I'm going to hazard that they didn't pay you less because you were young- they paid you less knowing that, because you were young, that was your market value. In other words, they paid you a rate competitive with what they thought you could get elsewhere, which tends to be lower when you are younger.

I'm still debating this in my head, whether it is discrimination or not if they are saying "This guy is young, his market rate is lower". (Rather than "This guy is young, he must be no good") Because it generally is an accurate assessment.
Ad Exchange adBrite To Shut Down On Feb. 1
Yeah... but they weren't producing anything, which caused the crash.
Wow, good for CodeIgniter.
Well seeing as Chrome is also webkit based (and is used for the spider), you'd imagine google would make a lot of contributions it :p
There was also a great memorial hackathon around the world over the weekend.

Details:

https://www.noisebridge.net/wiki/Worldwide_Aaron_Swartz_Memo...

https://www.noisebridge.net/wiki/Aaron_Swartz_Memorial_Hacka...
"Are there languages/cultures where this isn't the case?"

Well when it's not obvious in french you'd typically add "du matin" or "ce matin" to mean it was in the morning. But if you meet someone at 5pm you typically would just say : "Je me suis reveille a 8 heures". No need to say "8 heures du matin" or "8 heures ce matin" because it's pretty darn obvious. However you can add "du matin" / "ce matin" : it's certainly not a fault and many people do it.

Now regarding the afternoon, you have the choice in french : either you use 12 or 24 hours. For 12 hours, it's the same as for the morning : 4 pm can be "4 heures de l'apres-midi" or "16 heures". 8 pm can be "8 heures du soir" or "20 heures".

I typically use the 24 hours system because there's no ambiguity.

Now I don't know the official rules and it's certainly often contextual. If someone asks you what time it is in a bar at night, it's pretty obvious when you answer "11 heures" that it's 11 pm but "23 heures" is good too. Same if you answer "2 heures", you then obviously mean 2 am, no need to say "2 heures du matin".
Nobody Expects the Spanish Inquisition, or INT_MIN to be Divided by -1
Dear Quartz Grumpy Writer: Jump up my butt. I will treat my phone as I please, and it pleases me to have very accurate time kept on it. I am not a slave to fashion or to Your Grumpiness, who isn't royalty, and thus cannot decree what I do with my possessions.
Hacking MAST for fun and profit: what astronomy has to learn from industry