skysight-inc/HackerNews huggingface dataset:
This could also be because the social pressure to stay together on people in arranged marriages is immense, and divorce still seen as a mortal sin that would probably result in social ostracism (at the least).
It's a loophole of sorts. They cannot legally post a sign saying "Credit card transactions will have a 5% fee added" but it's perfectly fine to say "Cash purchases receive 5% discount."
And this has nothing to do with cultural biases against divorce, and subjugation of women, right?

There was a far lower attrition with slave labor as well.
Qrush, one of the guys behind Rubygems tweeted that the credentials of every yml file ended up on pastie: https://twitter.com/qrush/status/296638346283868160

> Someone posted http://rubygems.org 's config/*.yml to pastie. Didn't include the S3 bucket secret key, but going to reset everything anyway.
It is just baffling to me how they were able to pull that off for 40 years and raise infant kids as well with practically no experience or training and no way out, after they had to leave so suddenly - when in comparison, Christopher McCandless (alex supertramp) barely made it four months with arguably better equipment, shelter and under overall better weather conditions. And considerably VERY nearby ways out.
Did you just imagine doing something other than what AL did? Seems like "I can't imagine Adrian or someone else in his position not doing exactly the same thing" didn't last long :)
The story that I shared is kind of incomplete at the moment, I haven't finished all the parts in the series.

The reason that I posted this was that I wanted to show the end result which wasn't linked/mentioned in the story.

Not aiming to break any rules or so here, just wanted to show off the result (fast forward from the blog series)
There is a subtle line there between what you actually love, and what is practical to be worked on. I am not saying they cannot coincide, but they are rarely so.

What one can try to achieve is a transition from one to another. That's why hackers are in big advantage these days. They can build stuff which can make money to fund the stuff they love doing... Struggling is always bad, but struggling on stuff you love would make it even worse. Don't let that happen...
It's like a YTMND for the new age.
Show HN: VineFlow - Realtime Vine videos on Android (Code on GitHub)
You may want to make the minibar less intrusive, like Office. Right now, as I select lines as I read them, I end up formatting when I did not intend to. Office solves this by making the formatting bar appear up and to the left of the selection, and is transparent until you move into it.
There's a "Look inside" feature available on Amazon ( http://www.amazon.com/C-Smorgasbord-Filip-Ekberg/dp/14681521... ). It will let you read a part of a Chapter.
It seems to me the relevant advice buried in this is: most people need to try before they know. So get a job to pay the bills, so you can afford to try out your passions part time and have some professional experience to help you along/fall back on. Then pursue whatever sticks.

Because expecting people to be able to accurately weigh which of their passions is the "relevant" one, before they have any experience at anything is going to fail just as much as telling them to pick a passion at random.

Unless you're just saying "relevant" as code for "pick a white collar career path that -- if you squint real hard -- looks kinda/sorta like your passion."
Did you catch where was this payload injected? Did they have write access to the rubygems.org source? It would seem if they did, they didn't need to write this script at all and could simply read the configuration files directly.
Americans demand re-legalization of cell phone unlocking
Ah, so were were supposed to look at the .yml files included in your exploit gem? Which contained some injected code that would then run on the rubygems server?
Even if I stipulated your point, which I don't, all Life is not economic transactions, either.

And I don't think you established a connection to addictiveness either. (Your attempt requires me to agree with allowing you to decide what is "(un)necessary" for me and everybody else, which I do not concede.) Food, shelter, water, clothing, furniture, and the other human needs are not addictive. Even sex is generally not addictive.
Wired says:Multi-drug resistant bacteria are present in chicken
Show HN: API for Rendering and Sending Transactional Email Templates
This is a surprise to me; how do you instance the reference, then, so it isn't changed? I thought "new" did just that.
I am experimenting with a standup desk these days. It seems like i move more, leave my desk have a couple of steps every now and then. And this helps me think. Like think out of the box, the context or the distractions attached to it.

That's the biggest advantage of not sitting. I highly doubt that a threadmill can provide me this huge productivity boost...
In these sort of parables I tend to agree with W Edwards Deming in that the root of most problems is the managers. The goal should be to reduce variability in the process. Not being able to see any data I would guess that most of the variability in the data would be with the shunting.
Even then would work (on youtube, for instance) if the owner was entertaining enough, while eating delicious chocolate.
And that is why I fear the Raspberry Pi chaps missed the whole point, if they expect the Pi to be the next BBC Micro. Programming back in the day was simple. From that simple beginning you could easily and naturally progress. The problem now is that the entry bar is so damned high.

I mean, I'm 40, been in to computing since I was 8 ish. I even built my own from components on bread boards. Yesterday, I looked at the Torque Engine, I gave up. I couldn't even set it up to use. And I've got a damn degree in Computer Science!!!!!

Heh, I almost think any kid who gets in to development of any kind right now deserves some sort of award.

But, I do think that on the other hand, people should lay off this idea that "everyone" should know it all, and stop giving mere users a hard time for not knowing or wanting to know all the insane abstracts we know.
The difference between simplicity and minimalism
Are Placebos Really Sugar Pills?
India’s Little Known Billion Dollar Firm
A programmer trained in classical (as opposed to prototypal) languages. Languages like C++, Java, and PHP are classical. JavaScript and Self are prototypal.
Anyone using a standing desk: are you using comfort matting designed for people who stand for long times? Or just regular flooring?
No, it would have cost the same. That was, to me, the point of the parable. The initial cost savings was absorbed by the cost of purchasing the additional cars necessary to implement the N/2 fix.
> -- Have you updated the package in Anaconda?

While I agree that anaconda may be an inappropriate name, since it has been the Redhat, Fedora, RHEL installer for, I don't know, maybe 13 years, this isn't really a concern. You don't "update a package in Anaconda". You don't even interact with it ever again once installation is completed, and most lay-users would never know what anaconda is unless they pay attention to the fine print during install.
"it's a longing for BASIC as a metaphor; longing for the simplicity of the past."

Totally spot on. And I feel the same way, but, its never coming back. It was a golden age for us at the time. Heh, its was our version of the 60's !!!!!!!!
I completely agree with you except for one thing. Tor isn't necessarily for privacy. It has more to do with anonymity by taking steps so people can't see who you are. By using Tormail there is still a chance that you can leak information about yourself and your contacts. Same goes for logging in to sites that carry your personal information.

If someone wants privacy then I would suggest using gpg/openpgp encryption for email/documents/etc., make sure https everywhere plugin is installed on your browser, noscript, adblock, etc. I suppose you get the same type of protection using the Tor Browser, also.

The problem is encryption. For the average user it's a bit a pain to understand and use. Then again, I'm sure if people want it enough they will learn.
Think preventive medicine will save money? Think again
Aka https://s3.amazonaws.com/uploads.hipchat.com/12763/40986/n5j...
I've wanted something like this to exist! Thanks!
2012 Open Source Rookies of the Year
What percentage of video game players make a living from it? Skateboarders? Gardeners? Musicians? Poker players? Actresses? Hobbies are rarely viable career paths.

What separates SOME hobbies (computer programming, for instance) is that they're still relatively obscure. Out of 1,000 random people, maybe 3 can program, and all of them likely suck. So if you're passionate about programming, it's not difficult to make a career out of it.

This article doesn't seem to be targeted at STEM-type careers. It's more targeted at the lofty ideas. Roughly 6 degree programs account for over 50% of the Bachelor degrees earned these days. These students are creating an extremely competitive environment for themselves by chasing their very popular ideal careers.

If you're able to get a good-paying job doing what you enjoyed as a hobby, you're lucky. Not everyone has such obscure hobbies as you and I.
It's a lot like coding... YAGNI and KISS are the first things i teach new coders. Otherwise the burden they carry gets heavier and heavier as they add new languages or technologies to their arsenal. You wouldn't believe how many people lack this very simplistic understanding!
After reading through the github.com issue posted in the comments, I get the impression this was targeted attack at rubygems.org (and not the user install base). There has been a tweet, also posted in the comments, suggesting that this was successful.
Is there anything gem authors should be doing?
This probably would be the first time in the past 5 years there was a non-spamtrap email address in whois
can someone explain what happened here to those like me who are a little late. seems like the issue is resolved already or at least temporarily fixed.
All I can figure out from the url and the comments here is that there was a gem called exploit and that somehow the config files where posted to pasties.org
Unsolicited Redesigns of Popular Sites
My MVP: Any feedback good/bad welcome
"No need to reboot your phone to install an app". Oh. Wow.
ya but that's nowhere linked on the homepage. kudos for being a puerto rico startup!
We all know most changes result in assumed consequences and unforeseen consequences. Especially if you mess with the most basic human functions ; )

The planner in me therefore would have liked to see a bit more planning upfront, less knee jerk reaction to each issue, and more consideration to the costs to the org as a whole of each change...
As petercooper has already mentioned there at things like Scratch and something why released for Ruby (Hackety Hack?) that are just as simple yet better. I still have no nostalgia for basic whatsoever.
RIM's Z10 and BlackBerry 10 feel a generation late
It's a good book for any .NET developer. Introduced a few things I didn't know about, well done fekberg.
those points do not change anything.

1) those who refused to resell were implicitly saying their shares were worth more than the buyback price. Else they would have sold.

It does not change the fact that they could have received what would have been equal to a dividend if they would have sold a portion of their shares equal to the portion dell wanted to buy back.

2) the performance of Dell in the future is a separate issue from share buybacks. Those who refused to sell their shares thought Dell was worth more than the buyback price -- indicating they expected strong growth in the future. That was a bad investment decision on their part.
I hope the plastic bags came pre-stamped, and with the railway's complaint department address printed on them.
I am looking into getting one of these. Do you have any recommendations?
Well, I've yet to hear of any Haskell programmers being picked up , but Moxie Marlinspike and Jacob Applebalm have both been harassed repeatedly despite no evidence of any wrongdoing on either of their parts.
I feel like they are focusing too much on the fact that they finally have these features that have been available for years on other platforms, and not enough on their unique feature.
If https://twitter.com/qrush/status/296638346283868160 is accurate (qrush is one of the rubygems maintainers), it worked.
Not exactly equivalent - if you actually made each car twice as long, I think it would reduce the the turning radius of the train.
REST API bound simplistic and stateless frontends are easier said than done. Does anyone know a DRY way of achieving this. I like the AngularJS approach of keeping state(of DOM - a.k.a what the user sees) and let it flow. But still, as a Javascript noob, every library seems messy and unworkable :(

Any advice on this?
to see if they had been backdoored but they were clean

You can never be too sure. There's a whole contest (http://underhanded.xcott.com/) whose goal is "make something that looks legit, but actually does something evil / has an exploit).

Nuke from orbit.
Made me remember this: http://lifehacker.com/281626/jerry-seinfelds-productivity-se...
In theory Raspberry PI solves some of the problems that youngsters face.

Without RPI:

You don't know anything. You go to a tutorial. You have to download some stuff. There are win32, x64, OS X, linux, etc versions. There's python 2.x, 3.x, etc versions. There is pygame etc. And editors. (All of this is sort of fixed by Learn X the hard way).

With RPI:

Hopefully it's all included in a distro.

You can go to the tutorial and just start.

What would be useful is some python version of the type-it-in and run it listings that appeared in magazines. I found these particularly useful for learning - especially bugfix afterwards. And then tinkering the software to produce different effects. Starting with something and modifying it was a much easier introduction that just creating it all from scratch.
Angie’s List merchants can now accept payments with Square
I was still using a Blackberry at this time last year. Just a little inside tip: if RIM, I mean Blackberry, changes where their headquarters is stationed, it means they are gearing up for a bankruptcy.
Chopping the Head Off of Your Behat Test Monster With PhantomJS
‘Flat Design’ or Swiss Design?
> English is the working language for most developers all over the world, but not every culture is overly sensitive to swearing.

I'm not an American, but it's interesting to see how strongly people from the States react to swearing. I know that for every 10 guys thinking that the usage of the word "fuck" is unprofessional there is at least one George Carlin (https://www.youtube.com/watch?v=AsZwRirDOYQ), Lenny Bruce or Bill Gates (http://philip.greenspun.com/bg/), it just seems that this "puritanical" point of view has gotten stronger and stronger lately. I'd be curious about the underlying reasons.
not my exploit gem. the code was in the metadata part and I believe someone else has posted it in this thread.
I just stand on the regular flooring (which is carpet in my case). My shoes have a relatively soft insole though.
Could you add in sys admins and devops?
I'm hoping above is an isolated case? Otherwise creating any content that can easily be made fun of is really bad for the launch as it will create noise and distract from the good.
apply this test: Will people pay you for it? Will they pay you a lot for it?

I answered "yes." I'm off to be happily self employed doing what I love....great article, btw, but the logic needs some work and the wetware could use a tuneup.
A Brave New World of Prenatal DNA Sequencing
Four Strategies for Modernizing Mainframe Applications to the Cloud
The exploit was written by @postmodern_mod3: https://twitter.com/judofyr/status/296649167189725184

Edit: At least a PoC. How someone other than him (since hes denying compromising rubygems) found his PoC and wrote the actual payload and pushed the exploit gem is unclear.
Sign your gems before pushing them: http://docs.rubygems.org/read/chapter/21
Yeah, well, read the article - the guy is mentioning the Git has a steeper learning curve than most tools. Terminology is pointlessly complex. That its unnecessary. Seeing some skin?
OAuth with NancyFX and WorldDomination.Web.Authentication
what level of programmer is this aimed at?
I just use regular flooring (carpet). However, after reading this comment I'm thinking I should get some sort of matting! Haha To be honest, I just hadn't thought of doing that.
Lex Luthor really needs to step down. It would be one thing for him to be dismissive in public in order to bolster his company's competing products. But time and time again, the company's actions indicate that he is predisposed to believing that genuine competitors pose little risk ("Challenge Microsoft? Inconceivable!").

For the first time in decades, I'm hoping that Microsoft can figure out a sustainable strategy for maintaining relevance. Maybe I just want to pull for the underdog--it just makes it hard when the underdog isn't particularly plucky and carries on with unwarranted swagger.
It was in the gem metadata, which is YAML: https://gist.github.com/d891e876c53e55bf0920
Having developed for BB before, I cannot tell how bad their toolchain and libraries and HW/SW protocol layers are. I highly doubt that they can fix all these in one big fat major release. Considering the fact that RIM is bleeding, this may be their one and only chance though. Good luck RIM, it is always good to have more options in the market...
Hi everyone -

A full post-mortem is coming, but here's what happened from my perspective. I got mentioned on twitter about this thread while I was on the bus. I asked @evanphx to put the site into maintenance mode immediately.

Once I got on wifi, I downloaded the "exploit" gems and found that they used the Psych hack to post config/initializers/* and config/*.yml to Pastie. Luckily, none of our API keys were actually in those files - our config is a bit different since you can still run RubyGems.org on Heroku, which needs to put secret keys in the ENV.

I deleted the exploit gems permanently along with the throwaway account that posted them...that's why this post's URL is a 404.

I've reset our S3 keys just to be sure and any other keys we had on our production site. From what we know right now, no other changes on our S3 bucket have taken place, and we're going to check the logs to make sure. Once we get a real fix for this issue out, pushing gems will be enabled again.

Just a general PSA -

Please, if you find an issue like this, be nice. Tell the maintainers privately. Don't post to Reddit, HN, or a public Gist. RubyGems.org is completely volunteer run. No one gets paid to work on it. Thanks for your patience everyone.
Presentation wise, I found the Alicia Keys gym analogy and some other things to be cringe-worthy as well.
This sort of integration has been happening more and more with the data format as well for me. After around the third mobile client for a server I'm tired of native data models and just want the closest thing to the server's (and the DB's in the case on Mongo) JSON. I don't need it repeated in SQL DML, JSON, Java, Objective-C, C#...
"You should try Angular"
It all goes under the column labelled "Lore of the Jungle". Other tools have regular terminology; GIT seems to have grown its own language.
Don't sweat it. Getting the word as best you could was a good thing to do.
Try the Criticism section of the Unsafe At Any Speed article, i.e. the link you read well enough to translate into a snarky one-liner.
i diffed the rack gem and active_resource gem from the versions built from git. i'm fairly sure the versions i downloaded were not compromised.
Because they're not as smart as Google. Most hardware vendors budget as little as possible for firmware, and the result is predictable.
Research In Motion changes its name to BlackBerry
> If you want money, go work in finance.

This (and its converse) are exactly the advice I give to undergrads who, here at the University of Chicago, are heavily recruited by both local and NY finance firms. I like to point out that if you love money, you will be among others who do and will probably enjoy your job and especially the pay. And if you don't, hearing about a trader's addition to his Rolex collection or figuring out "opportunities" in an exchange's rules or implementation will destroy your soul.

BTW, I don't give this advice in a loaded way - my wife and many of my friends work in finance.
There were many other cases. One of the money quotes: "Typing on a glass screen with one thumb. Magic." Hah. BB10 may be a very nice OS, but the company attitude is absolutely miserable. They're still pretending that they're innovating at the very cutting edges of the market while introducing features almost 6 or 7 years old. It's silly.
There's no need to reverse these paired cars; they're bidirectional.
I've had both beginners and very advanced programmers read it and both found things that they liked.

When I wrote it I had someone that knew a bit about C# in mind and wanted to explore C# and get a gasp on when to use async/dynamic/roslyn/plinq/etc.

Check out the forewords over at http://books.filipekberg.se and check the "Look inside" on Amazon to get a better understanding of what you will get from the book.
Hopefully they use S3 bucket versioning. Rolling back would be pretty easy then.
I was thinking about making one with a magnetic (manual) treadmill, so I can amble instead of being paced by machine... has anyone tried this? Amazon has a decent selection: http://www.amazon.com/s/ref=nb_sb_ss_i_1_10?url=search-alias...
It's not "iOS devices". It's the default browser, Safari.

If you use, say, iCab, HTML5 video stays embedded in the page -- to a fault. Often you won't be able to full screen the video, you end up having to zoom the page.
The Impact Of Bring-Your-Own-Device (BYOD) on IPv6
How brain science can make you a better writer
I'm not, but I have an adjustable one. I spend about 50% of my time standing and 50% sitting - standing the whole day is also associated with health problems.
Short timeline:

- 1 week ago: blambeau reported the issue to the rubygems people: https://github.com/tenderlove/psych/issues/119#issuecomment-...

- Postmodern wrote a PoC - https://gist.github.com/4674219

- Postmodern: "I posted it in a private chat room. Guess someone took it for a ride." - https://twitter.com/postmodern_mod3/status/29665192240284057...

- A gem called `exploit-36.44.16` was pushed to RubyGems. This contains a payload that only sends `uname -r` to pastie.

- A gem called `exploit-22.31.31` was pushed to RubyGems. This contains a payload that posted the config/database.yml to pastie. This gem was removed by the rubygems admins when they discovered it - http://news.ycombinator.com/item?id=5140109 & https://gist.github.com/d891e876c53e55bf0920 (that's the payload)

Other exploit-gems that was pushed (but we don't know what did):

- 16.17.49 - https://twitter.com/rubygems/status/296618422702309377

- 20.22.1 - https://twitter.com/rubygems/status/296617610622144512

- 12.5.4 - https://twitter.com/rubygems/status/296540884781109248

- 7.27.42 - https://twitter.com/rubygems/status/296537952320884736

My conclusion based on the current facts:

1 week is too long for such a severe security issue. A proof-of-concept gem seems to be a logical step to "force" rubygems.org to fix this issue. However, publishing database.yml on pastie is TOTALLY 100% NOT COOL, and turns this from "whitehat who wants to help" to "blackhat that wants to destroy (or doesn't understand social norms)".
Alicia Keys is the new BlackBerry Global Creative Director. No, Really.
Eh, I can't imagine either Prof Sadoway or Musk is only familiar with batteries at room temperature at sea level.
It looks like Ctrl+b and Ctrl+i work for bolding and italicizing.