skysight-inc/HackerNews huggingface dataset:
So far, people I've seen using it are "security-aware" developers who know there is always a remaining risk and who are just trying to reduce the surface attack a bit.

For the others, well, we'll have to educate them, or push a safe yaml default quickly into Ruby [1].

This is no holy grail for sure, and there are plenty of other topics to be addressed (eg: secret tokens stored in SCM, pushed to third-party CI services and shared with freelancers and remote employees using non-encrypted disk, shared as well between production and non-regularly updated staging servers etc!)

[1] https://github.com/tenderlove/psych/issues/119
Exactly. Most businesses built around Drupal as a technolgy are consultancies.
> ... ignores the reality of API design. Who would ever start with dangerous_load?

When I wrote the Texcaller library, which simplifies compiling (La)TeX code, I disabled dangerous features such as "write18" from the very beginning.

I you don't take basic elements such as "secure/unsecure" variants into account, you're no really doing API design. You then just have a historically grown API, which is not necessarily bad in itself, but doesn't qualify to be called API design.

> But that removes backwards compatibility. And people don't update legacy software. So then old software becomes vulnerable to who knows how many other security problems because of it's obsolescence.

In that case, at least only old hard-to-update legacy software is affected, and not all the other (good, mostly well-written) software that is written today and in the future.

Of course, don't forget to increase the major version number, as for every API change that breaks backward compatibility.
Also: KDE and OpenOffice (as StarOffice) started in Germany.
Why is it good? Only Christians should read it (to become atheists). For anyone else, I think it's a waste of time.
What does knowing this stuff at interview-time have to do with being able to implement it later? I certainly don't remember how b-trees work off the top of my head, but what I do know is how to find out the answer given a computer and an internet connection.
Anyone know why the STL doesn't use B trees? Are there use cases where Red-Black trees are better?
Should have changed his IMEI (International Mobile Equipment Identity Number) too.
When I worked on a student newspaper in Montreal, a photographer of ours was once detained by Metro (subway) cops and beaten in a back room.

I did the followup and a cop read the police report to me over the phone. It detailed how the photographer had aggressively interfered with the police in the performance of their duties, quoting the French profanities he had uttered.

Problem: the photographer was a unilingual English-speaker from Ontario.

When they told me that, I got a little too excited about getting them to give me these exact quotes from the report. The police officer suddenly said he'd call me back. Fifteen minutes later, he called me back, opening with "aaah, actually we don't know exactly what he said."

This isn't even the most interesting case of cops lying that I know of, but you always remember your first.
Wow. To paraphrase Team America: that guy was an asshole and a pussy.
Or maybe it's self-selection bias.
will definitely try thi over express for my next weekend project, an example in the doc on how to plug in socket.io into hapi would be nice.
Yes, XDA developers has a lot of info about this. Also search Google.
Although this might be a performance issue as well, I think the real problem is that some unlucky people had to write those 1100 lines of code in the first place.
Are you kidding me? I was copying his style, to show him how irrelevant and childish the statement was.

Also, it wasn't an ad hominem, since there wasn't any argument being debated. Get your fallacies straight.

I guess this is why you have 9999 submissions with 1 point. To be able to go around downvoting and incorrectly calling people out on a fallacy (the new trick you have learned).
In the end, its all business.
Agreed. When I was working on Google App Engine, the Quota team sat next to me. The Quota team are the service that just about every other service at Google calls to ensure a user isn't abusing "The Google". That means that they need to have insanely small response times to ensure that all the services run on time.

They hit an issue no-one really thinks about: resizing hash tables. No-one thinks about it, as it happens transparently under the surface, but for them, the few milliseconds it took to resize the hash tables would have enormously detrimental effects on just about every other Google service. The solutions they were talking about were really quite amazing. That's the insanity they face.

So, if anyone hasn't seen Google Sparsehash[1], check it out: it's another near drop-in improvement to the STL. Two bits per entry of overhead and insanely fast. I can't remember if the Quota team used it specifically, but I wouldn't be surprised if it's one of the results of their work.

[1]: http://code.google.com/p/sparsehash/
That site doesn't seem at all useful in Europe -- it does not include "discount" airlines like EasyJet or Norwegian which are half the price of a BA or SAS ticket.

Perhaps they're not paying Google enough to appear in the search results.

This sites does include them: http://www.momondo.dk/
No undermining, I just think you're lying about being popular and confident and good at sports.

It's ok if that upsets you.
These two statements are not mutually exclusive - the technique is basic and sometimes its drawbacks may outweight its benefits.
While applicability of the technique in a particular situation may be a matter of discussion, ignorance of its existence is shocking considering that the author has reportedly written a book on programming.
I have been developing PHP applications commercially since the start of 2008, using Symfony1 then Symfony2.

My current job is using Drupal 7 for the past year or so, and I have found it to be the biggest clusterfuck I have ever dealt with. Very steep learning curve, horrible admin interface (currently designing a new one for our clients), horrible bootstrap time.

There are a few saving graces for Drupal 7 such as Drush that make developing a bit easier... but I see Drupal 7 as a CMF as a horrible decision for almost any webapp/intranet app/anything.
Periodis Web – A Historical Atlas and Gazetteer of Europe from Year 1 to 2000
Reminded me of Soundclub DOS (1991) and then Windows (1996). Those came from Estonia. It was done by the team that later wrote Kazaa and Skype.
http://www.bluemoon.ee/history/scdos/index.html
http://www.bluemoon.ee/history/scwin/index.html
It takes advantage of PHP 5.3 (anonymous callback functions, namespacing, etc) whereas a lot of the other PHP frameworks feel like PHP 4+.

You can swap in components like Redis easily. Setting it to use mock versions of web-based APIs in the development environment. And the code just feels nice to work with.
doesn't qualify to be called API design.

True. I should have said the reality of the difficulty of API design.

In that case, at least only old hard-to-update legacy software is affected, and not all the other (good, mostly well-written) software that is written today and in the future.

I like the sentiment, but I can't agree with it. In an ideal world all critical systems would always be kept up the date, but that doesn't happen. Has Python 3 usage overtaken 2.x yet?
Planning To Attend a Major Sporting Event?
The image is a way for the user to "manually" authenticate the server. It's a weak authentication because an attacker could easily get a copy of this image once he knows the user identifier and forge a apparently valid page.

The most secure authentication is the one using security cards/key with a challenge code sent by the bank and the response returned by the key using bi-key cryptography. The one with usb connections would be most efficient, convenient and secure.

Nfc on phones may look more attractive, but phones are insecure.
I will admit that when I first saw these I had the same reaction as the author.

But then I thought about it longer and I realized that to acquire the image the phisher now has to go to the bank and ask for a specific users image.

The bank can now analyze the logs and determine that an account is likely being phished.

It's not as stupid as it seems. (At least I hope they're going that).
> ... the security picture was probably cheap to implement ...

Although the implementation might have been cheap, there's another factor to consider:

If a system provides a false sense of security, this almost certainly decreases the actual security of the system.

And putting effort (no matter how cheap) into something that decreases the overall security - that's not a good idea regarding risk management.
How can you save stories on HN?
I'm from California and currently work as a traveling circus monkey, otherwise known as a consultant. I've worked with startups in Europe, Japan, and the US, and while I don't consider myself an expert, I do at least have some idea of the differences between the various markets.

Europe is a big place, with lots of different countries, and much like states in the US, they work differently. True, the investment climate makes raising money much harder than for companies in the US, but on the other hand, there are sometimes fewer regulatory hurdles for companies looking into exploring new business concepts.

Take FundedByMe. They're fulfilling the promise of equity-based crowdfunding in Sweeden, and because they're not a US-based company, don't need to deal with the SEC and FINRA. The US has tried to set up something comparable via the Jobs act, but major players have kept all the regulatory hurdles in effect, and so for-profit crowdfunding is still a few years off, if it ever really happens at all.

Don't get me wrong -- we still have a big lead in the US, especially in the Valley, but don't get complacent about how quickly that lead can evaporate through the missteps of well-meaning regulators and politicians, or through the negative effects of software patent law.
This has been going on for years.

AT&T forces $25 dataplan on anysmartphone (even sans contract)
http://www.wirelessforums.org/alt-internet-wireless/how-spoo...

Just change your IMEI number. Yes it is still legal in the US (who knows for how long though).
Will any team outside Europe or South America ever win the World Cup? P1 Africa
The abstract archetype is a collective cultural event, expressed through various forms and media, but derived from a shared system of values and its corollaries (it's less a spontaneous eruption of the "collective conscience" than an emergent property of the value system).

Yes, the spiritual wanderer contemplating existence is a Western archetype of indeterminable root. Yet the Wanderer is a specific concrete precipitation which propagates forward in time but does not appear to have any precedent (to a certain, albeit arbitrary, level of pattern-matching strictness). Thus, while the Wanderer does not monopolise the archetype, it does lie at the root of a specific visual heritage of that archetype.
Meanwhile, SAP is (indirectly) funneling part of the revenue from clueless enterprise into... Hasso Plattner Institut! One of the world's hotbeds of computer science innovation (http://www.hpi.uni-potsdam.de/willkommen.html?L=1)

"Professor Hasso Plattner [co-founder of the global software company SAP and chairman of its supervisory board] has pledged the foundation from his private assets for the day-to-day running of the Institute over a period of more than 20 years. Due to his commitment, he is one of the most important private supporters of science in Germany."

Ironic? Visionary? Whatever it is, good work is being done, orthogonally to SAP's main venture.
Sorry, but "Origin of Species" is not a good beginner's book on evolution theory. There are much better modern books on the subject, for example Neil Shubin's or Jerry Coyne's books.
The relevant xkcd: http://xkcd.com/551/
مباراة كوت ديفوار ونيجيريا
Isn't drupal 8 a total rewrite using symfony components in the core?
Actually sparsehash is not optimized for speed, but reduces the usual hash map memory footprint. In practice it is on par or slower than STL unordered_map.
Having the details and characteristics of the b-trees(among other things) in memory allows you to consider them as possible solutions to a problem you are facing. If you dont know the details you would probably not know they are a good fit for a particular problem. The more detailed knowledge you have in your memory the bigger your possible solution set will be, thus, you will have a better chance at solving a particular problem.

I think Google is not looking for people that can follow specs(although thats valuable also) but people that can come up with brilliant solutions to hard problems.
> Also, it wasn't an ad hominem ...

I don't get it. What's the point of replying to a perceived false accusation of ad hominem with three more ad hominems?

"Get your fallacies straight", "I guess this is why you have ...", "(the new trick you have learned)"
Ask HN: Do you click on ads as a donation?
Sometimes I find myself clicking on ads on a site or a blog as a way to show my appreciation.

Am I the only one? Is this a widespread phenomena so that I can attribute clicks on my own site to this?
{The message I wanted to reply to, the single line quoted below, apparently was deleted while I typed it, so... sorry for the missing context and the long rambling rant. }

> SAP implements the workflow of their costumers (the process is called "tailoring"),

No. It implements workflows that one of the consultancy layers comes up with after having meetings with the wrong-inhouse people, because in big corporations there's politics involved about who gets to be responsible for the future processes to be implemented, by newly formed departments, with managers and budget and so on.

I'd be the first guy to endorse the point that a central accounting, order, inventory-managing, ... system is indispensable for any big shop, but the current way of getting this kind of "mission critical" software into big corporations is just a huge clusterfuck. Office politics more or less guarantee that the system will sabotage the work of the majority of employees, and I cannot even blame SAP for that ;-).

I worked in a >10'000 people engineering company (huge industrial plants) for three years which matches roughly the timeframe that SAP was introduced. I've witnessed pretty hillarious in-house advertising campaigns (video clips, posters, giveaways, mascots) to raise acceptance of the new software and meaningless presentations justifying millions of wasted $ (€) offset by future increase of efficiency. There were funny titles given to specially trained ("power user", I'm not kidding you) colleagues and in the end, complete confusion about how to work with what was given and a inhouse support staff no longer able to cope with all the problems after the hive of consultants, trainers and specialists went to assault the next company.

We had it all: Three digit months-entry fields, to be able to cope with future expansions (not kidding), thousands of people trained in creating multi-billion-dollar-project structures inside SAP, yet unable to order a €10 part. Billable-hour forms with a complicated permission hierarchy, that nevertheless did not detect people charge other random accounts, sometimes by accident.

In the end people developed mitigation strategies, so work can continue with only minor handicaps, inhouse departments get praised for "successful" implementation of the systems, rewards are paid out, but a lot of the promised advantages fail to materialize.
Someone's going to make a service that will make us forget about Dropbox overnight.

You can quote me on that whenever it eventually happens.
size of code != performance problem in most cases, plus drupal give you an extremely lightweight api method "url() or l()" to render links, its up to you to choose .
Not a rewrite from ground up, no, but a very serious refactor, yes.
I've been developing PHP for many years, and the best frameworks are always the lightweight ones.

Good Drupal developers, who actually understand the framework, are rare. If you can hire one, finding a second one of the same level is like winning a lottery. When I worked on a fairly large Drupal website our Drupal devs would disagree on how to develop some pretty straightforward things. It's a huge clusterfuck of a framework.
This will remove any messages from your iMessage database that contain %File:% (% is a wildcard):

sqlite3 ~/Library/Messages/chat.db "delete from message where text like "%File:%"
Count yourself lucky for living in a country where your national ID number isn't assumed to be some kind of non-revokable terrible 9-digit pencil-and-paper OAuth token that's shared with half the world. I'm told that Norway's tax IDs are considered no less secret than phone numbers.

Coming from the US, I mis-parsed your post as (Social Security number) (equivalent for username) on first read and thought "That's so backwards! They're treating SSNs as less important than passwords". It's probably better to say "national ID number" or "national tax ID" rather than "Social security number equivalent".
I don't really think it is possible to say one is better than another without a specific application in mind. Probably just chose whatever one they wanted at the time.
XDCR Enable Couchbase Recipe
Indeed. Reading the Wikipedia entry on Cassagnes I wonder: 'idea' or 'discovery'?

"Cassagnes, an electrician at the Lincrusta Company, was performing a routine installation of a factory light switch plate wrapped in a translucent decal covering. During the installation, he removed the decal and wrote on it with a pencil, noticing that image transferred to the opposite face. Cassagnes tinkered with his discovery, which led to the world's first prototype of the Etch A Sketch."

I love these stories of something chanced upon by accident being turned into a product. It wouldn't surprise me if most successful ideas come about this way, rather than from a 'visionary' entrepreneur brainstorming the 'next big thing'.
Will handheld gaming ever die out in favor of mobile platforms?
What made me think: http://portablegamingregion.com/the-future-of-mobile-and-handheld-gaming/

Basically, Vita is half-dead after only a year on the market, manufacturers are becoming more interested in creating gaming tablets and mobile accessories, in spite of the optimization issues, the framework for mobile development is MUCH better... Thoughts?
"he appears to be a bona fide inventor"

Not sure what constitutes a bona fida inventor but the first post on his blog is how he has just taken out a patent on another invention.

It seems he just invents stuff to then patent it. To me an inventor builds things. This is more akin to coming up with an idea and then cutting off anybody from every executing that idea without even having executed it yourself.
Dismissrr
Cats kill more than one billion birds each year
Isn't everthing about improving other elses idea? Every startup aims to improve an existing idea, that's the target. Don't feel guilty about it.
Learn from example
Although I've never gone to the effort of actually calling somebody up to thank them, I have gone out of my way to thank colleagues whose code I've been maintaining if I have found it easy to work with.

Code that is:
consistent in style and approach (even if it's different to mine)
easy to to reason about
has clear comments detailing why something was done the way it was

is hard to do consistently, and very often stands out from the spaghetti code
that's present in other parts of the system.

The reason I do this is firstly to let the person know I appreciate the effort they have gone to, and secondly to signal to the other developers on the project that this is something worth trying to attain, and at least one person values these things.
Tweetping: beautiful visualisation of Twitter activity in realtime
I have been developing web systems since 2000, I believe I have made at least $150k out of developing Drupal websites, most my clients are small to mid-size companies who only use a few pages and have a few hundred visits/day.

hence, I think it is a pretty good system.
Isn't gnome in serious trouble right now, losing developers, users and distributions? Even leaving aside my personal views on the software, "the GNOME project is clearly a successful community, and we all should learn from it" is at odds with the impression I've got from e.g. http://blogs.gnome.org/otte/2012/07/27/staring-into-the-abys...
NSLogger viewer architecture
One really annoying thing is that I ran thru the whole story and added my habits... then wanted to save by creating a profile. Typed in my email address and preferred password.
And then it stopped working. Both the buttons didn't work, clicking on the greyed-out area didn't work either.
You had a great app there buddy, but just lost me and potentially many others.

(For bug tracking, I'm running Chrome 25.0.1364.58
Also 6.1 on iPad 4th gen.
It says in the article that B-trees are advantageous when the cost of cache-misses would be worse than the cost of comparisons; e.g., in the case of integers. In comparison, a Red-Black tree would do less comparisons, and hash-table is faster on average but is unordered (more differences?).
But isn't that a problem where no good solutions exist? We share code to reuse code. If we insist to allow only one level of dependencies, then we restrict code reuse which is bad in other ways: you promote reimplementation of functionality, more often bad than good.
should've made it 9 books

Voltaire's Bastards: The Dictatorship of Reason in the West by John Ralston Saul a critical essay of how the age of reason was distorted to trample all over modern democracy
Aaron Swartz Died For Piers Morgan's Sins
HUckster Morgan gets into the USA on a 'genius' exemption. By contrast, Aaron Swartz gets persecuted.
Yes, that's sort of the point. It looks like the MVC frameworks you'll see in Python and Ruby, with allowances for and enhancements where they make sense with PHP as a language.

I would call Symfony2 "PHP for adults".
I would think a person who can specialise, learn and memorise the details and characteristics of a particular domain quickly, say b-trees, when he is working on relevant problem, would be more important than knowing about all things computer science related at the same, and lesser, detail.

Wouldn't it be more important to have people to come up with brilliant solutions on problems they are working on, rather than hard problems in general that have already been solved?
No one thinks about resizing hash tables...except for any high-frequency trading firm worth its salt. And probably several game companies. I'm sure there are others.

It gets weirder when we talk about C++ in particular: did you know that thanks to a standards committee decision, erase by iterator in a typical C++ TR1 hash set or map is O(n)? Erase by key actually has better performance despite the extra lookup. People do think about these things, in a few places, but it can be hard to get ideal performance standardized...even in C++.
One of the things privileged members of society have a hard time understanding is the cynical viewpoint of the underprivileged. What does one think when the "justice" system commits fraud and one grows up realizing that you're too poor to afford facts being facts and the truth being the truth? It's George Orwell's "ultimate insult," writ savage.

> Research shows that ordinary human beings lie a lot — multiple times a day — even when there’s no clear benefit to lying.

Years ago, I mentioned the notion of never lying in front of my girlfriend's mom, and she laughed out loud. I was shocked. Is this what most people are really like? I'm beginning to think that I don't like most people.
MHacks Expo Info (Largest student hackathon ever)