skysight-inc/HackerNews huggingface dataset:
If all you had to do to get laid was obtain condoms my high school years would've gone quite differently
I liked/appreciated this link the first time, but the fact that it keeps getting a (barely) re-purposed title and submitted again? [1] [2]

I hope it works but it's annoying for us that actually hang out in /newest

[1] http://news.ycombinator.com/item?id=5135000

[2] http://news.ycombinator.com/item?id=5098734
It often takes more resources to build and maintain separate, fully-functional mobile and desktop sites--which is what a lot of the companies you list do. A well-done responsive design takes care of the desktop, mobile, and everything in between with only one codebase to manage.
I had the same problem with my blu-ray player. I had to go online and add it to my instant queue. Then I was able to access it on blu-ray player through my queue. I don't know why it doesn't show up on other interfaces besides web. Anyone else having this problem with other interfaces besides blu-ray and apple tv?
The exploit gist was actually pretty easy to modify in order to correctly identify if a Rails 2.3.x / Ruby 1.8.7 app was vulnerable. If you accept the fact that "payload being interpreted as object deserialized from YAML" is bad, then you don't necessarily need a malicious object to see if your app is vulnerable. If you have access to your Rails logs, then you just need to see a params value in your logs that's an object.

Here is my modified gist that can help you identify if your app is vulnerable, which works with Rails 2.3.x / Ruby 1.8.7 apps. If you run this and see in your Rails log something like "params = {#<ActionController... => {default => :action}...}", then your app is vulnerable:
https://gist.github.com/4694948/26d9b6d46c2c60aeb5abde9ca2c2...

We also have a couple apps we know of that are really old Rails 2.2.x apps. This doesn't work with them, because the passed YAML doesn't work in the old YAML parser. But then, if you just trust that deserializing an object from YAML in parameters is bad, then we can just make a super simple hash object and check our rails logs to see if the params contain an actual hash object. Here's an even-more-simplified-harmless proof-of-concept to test older Rails 2.2.x apps:
https://gist.github.com/4694948/1e8a94f7c768bf95863288005039...

I'm no security expert, but I was able to use these PoCs last night to verify that the patch for Rails 2.3.x worked, and also that my reverse-engineered-patch for Rails 2.2.x worked as well.

Edit: Just to clarify and reiterate, the above modified PoCs require access to the Rails app logs to check if they worked or not, since the older Rails apps could error out for YAML-parsing reasons (which are just as bad, because it just means an attacker needs to get more creative with their YAML payload), instead of being a result of rejecting the attack. That's why I don't think a web-based attack mechanism like this could really know 100% whether or not an app is vulnerable unless it really tried doing something semi-malicious, like obtaining secret information.
Pedestrian?
Lumi - Suggested pages based on your imported browsing history
At least in finland and with gliders (GPL) it belongs in the curriculum to practice spins.
Ratio of Bits to Decimal Digits
they actually ported it to linux, let me find it for you.

edit: here it is
http://lifehacker.com/5963726/netflix-finally-comes-to-ubunt...
I don't think so. Rails has to cover all cases, you just have to code the few cases that you actually use.

And even if you get it wrong, you get it wrong in a different way. That might mean that you are technically more at risk, but so long as the attack is focused on getting as many targets as possible, rather than you explicitly, then that is arguably a great strategy: the cost of adapting an already existing attack to target a novel target is going to be astronomically high, versus using an already existing vulnability. If you are refining neuclear material for Iran, you are going to need all the protection you can get; if you are just another start-up you just need not to be vulneable to the latest drive-by exploit.
Twisted-based IRC server example
I'll have to see if this is as good as the original british miniseries. Those btw, are excellent.
In my experience (and granted the Bay Area has a fairly healthy home schooling community) is that there are plenty of opportunities for socializing which are not necessarily 'school'. One of the things we found for our daughters was Reikes Nature studies [1] (can't say enough good things about that program), activities at our church (that happen for all kids, home schooled or not) and get togethers with other kids who were part of the community.

Generally we found filling in for the 'good' part of school socializing wasn't a problem and missing out on the 'bad' part of school socializing was a benefit.

[1] http://riekes.org/nature-awareness/
Stupid me. I meant to write whitelisting.

Yes, you are absolutely right.
It is interesting to see what people are working on after they leave Google.
Isn't it illegal to dress as a police officer, or are these real police that also deliver condoms....

I guess anything is possible in Dubai.
Any detailed explanation available about how this is implemented (other than by having to dig in the code...)?
Why is this the top-rated comment? I could literally use it as a generic I-know-more-than-the-author comment on any article about a problem (replacing the quote and author's name of course). It provides no more information than that the commenter thinks there's something wrong with the quote that's pulled out of the article.

A good comment would at least say why you think it's a difficult problem (that the author has supposedly missed).

As far as hiring or giving tenure based on merit instead of journal prestige, this is achievable. It's hard because traditionally journal names are extremely important. But it's doable. When I was a grad student, I was personally aware of the process of hiring people in my field. The problem right now is that one person could say, "X is good but candidate Y has two articles in Awesome Journal, so Y seems better." That statement implies Y has good work, but we need to make room for the reply, "Yes, but X has done better work and avoided Awesome J. because it's closed access." It's an attitude shift, which is hard, but doable.
JPA: Mapping a One-To-One Relationship
We also are seeing a small group of apps with vulnerable applications even after upgrading to Rails 3.2.11, possibly due to a rogue middleware or other library. Disabling XML parsing entirely is one approach (see http://news.ycombinator.com/item?id=5035389) but we'd love to track it down further for everyone's good. Feel free to join us at https://www.tinfoilsecurity.com/chat if you'd like.
Does anyone have experience with remote sales teams? Do they work?
Not all aircraft are built stoutly enough to resist a boot-heel of someone determined to get out. Most are, but not all.
Plus, Aptos and Capitola are crazy beautiful. :)
The OP specifically mentioned that a similar bug was found in Django, and had previously been found in another big java framework.

I understand the appeal of "magic" to solve issues when you are under a deadline. It is just that trusting it is dangerous.
I'm used to read Lisp indented:

(sort (map str
(set (concat (keys map1)
(keys map2)))))
You're completely right. We call out that it isn't 100% certain if we return a 'not vulnerable'. Our full scan will soon include some code execution modules for these vulnerabilities which will provide a more certain response.
> the old reliable pie chart.

? Weird.
In the past 35 years working in numerical analysis of multitudes of data sources from toilet flushes in a city of a million people to stock movements to multichannel radiometrics, to cloud data from LIDAR, to cot death incidences, etc. I've never once used a pie chart (or, in fact, worked with anyone that's used them).

I understand they are popular when lying with statistics and in power point displays to non technical suits, but they have pretty limited use in understanding data or presenting layered attributes.

Scatter plots are somewhat useful, when combined with a means of indicating densities, such as heatmapping; box and whisker plots that show central densities, means, medians and extents of ranges are useful.

But Pie Charts? Professionally they're the joke setting in Excel . . .
Mythbusters:

http://dsc.discovery.com/tv-shows/mythbusters/mythbusters-da...

Plausible: An instructor could talk you down. However, as other have pointed out, the controllers would just have someone instruct you to turn on the autopilot. http://1.bp.blogspot.com/-0J1RS8gDinQ/T1bYK4qr7QI/AAAAAAAAAQ...
Lilyhammer was actually Netflix's first original series.

http://en.wikipedia.org/wiki/Lilyhammer

http://www.imdb.com/title/tt1958961/
I don't think "Why doesn't Netflix pick a successful show?" quite captures what I'm getting at. If you want to boil it down to a simple question like that, a better one would be: "Given that network-making shows are almost invariably quirky series with clear hooks, why would Netflix choose to base its brand on a more reserved series without a clear hook?"

Yes, splashy shows sometimes bomb and more traditional series do often work. But my observation has been that shows that put networks on the map are almost always in the former category. I can't think of any network in the past three decades that has established itself without any splashy "hook" shows. House of Cards is not that kind of show; it presents itself in a much more subtle way than that. So I find it curious that Netflix, in trying to attract attention, would bet the farm on something that is possibly quite good but not at all flashy.
I haven't read the manual for the 747, but I'm fairly certain that autoland is not done by flipping a single switch.
Except for actually naming a source ("James Rickards") this seems like a really cheesy PR hit for beltway bandits and "defence" contractors. Cyber-this-real-world-horror, cyber-that-real-world-horror, blah blah, does this kind of fear-mongering work on anyone who isn't already looking for an excuse to transfer US Federal dollars into some black-world corporate welfare?
Where would you draw the line between "lobbying" and "talking to relevant parties to gather input on new legislation"?

What do you think "lobbying" is?
HBO saw a jump in subscriptions after Sopranos. Plus it gave them momentum for Curb, True Blood, Game of Thrones.

Netflix compared to HBO can introduce any number of original series and not hog up their programming schedule which I'd think makes it much cheaper for them. They could probably just sign deals on a royalty basis and have studios take on the investment risk.
I'm surprised they don't mention vanadium, with its 5 oxidation states. It's already used in commercially-available flow batteries for grid energy storage (http://www.prnewswire.com/news-releases/worlds-largest-vanad...).
Agree 100%. Do I need to buy something? I don't know. Can I just download the app and connect it to existing hardware in my house? If I need to buy a monitor first, why wouldn't I use the software that that comes with?
Let me just make it clear that the reason I'm using this tone is that I've had this discussion way too many times, and not once has there been a single person agreeing with me. It seems Americans grow up in this extremely America centric bubble, where after hearing a slightly different accent in Boston, and maybe eating a local dish, feel safe to say "yeah, you know what? I bet Washington and Massachusetts are just as different as Norway is to Poland, cause I've just experienced these massive differences in my country". Sorry but it comes off as very naive coming from people who at most have spent 2 weeks on vacation in Paris once.
I see a lot of people complaining about this and as a designer, I'd like to have a little more information as to how it detracts from your experiences.
> I'm one of those people that simply cannot solve complex problems while sitting at a desk.

My best ideas? In the shower.

Number of businesses I've worked at where it was possible to take a shower during the day at the office to solve hard problems? Zero.

Working remotely with washable crayons on a shelf in my shower means I get about 3x the concept creation time. I figure a number of businesses I've worked at (in the office) have lost out on more than a million dollars of creative output due to not having a shower available.
Dunk the eggs into cold water after they're done and still hot. I'm not exactly sure what the physics is, but this separated the shell from the egg white for me sufficiently.
I regularly get emailed asking if i can do another coding stream and regularly go over 50 viewers. If you don't like it, don't watch it.
My wife & I have five degrees between us (an Ivy League included), total cost under $100k. The amount of tuition money out there waiting for recipients is staggering, if you'll just look for it, study hard, and be flexible. And do realize there is a difference between education and certification.

If you're paying list price for an education, you're doing it wrong.
Graphene is fundamentally the same thing as the stuff in your pencil. If graphene is carcinogenic, we've already been exposing generations of people to it.
On the rise of Islamism in Africa
Steve Jobs on "The Hardest Thing About Effecting Change"
I'm sorry that she didn't say, "Ask for the process for configuring and engaging the autopilot," when she told the story. She probably thought, "Flip the switch" was sufficiently descriptive that I connect the dots myself. I guess she didn't expect to have the story picked apart by people looking for something to argue with.
A jQuery zoom-on-hover plugin for images
Thanks for the input! We're AJAXing in the product data, and then the browser fetches the images from CloudFront. I'll add a spinner asap.
Sweet CSS grid framework with fractional column widths
'bensedat seems to be hellbanned for some reason (Can a mod unhellban? He's definitely not a troll.) Anyway, echoing his comment:

We also are seeing a small group of apps with vulnerable applications even after upgrading to Rails 3.2.11, possibly due to a rogue middleware or other library. Disabling XML parsing entirely is one approach (see http://news.ycombinator.com/item?id=5035389) but we'd love to track it down further for everyone's good. Feel free to join us at https://www.tinfoilsecurity.com/chat if you'd like.
At the same time, couldn't you do your own research and come to your own conclusion like he has?
Interesting. We had no one on our tail at that particular time, so I can't testify to the effectiveness of that maneuver... ;-P
Introducing copper - Machine learning made easy for python
Foursquare Gives Business Owners a Management App
One person with WifiKill[0] is going to spoil it for everyone.

[0] http://forum.xda-developers.com/showthread.php?t=1282900
>That informant is always talking about drinking and telling you how you should drink

Without laboring the analogy too far (which was only a throwaway intended to show that you don't need to cause harm to commit crime), what would any reasonable person do in this situation, if we replace "drinking" with "blowing shit up"?

The reasonable response here is "Get away from me, you psycho moron."

If you collude with that? Willingly? To the point of setting up a "bomb" and blowing it up?

The informant didn't shove the detonator in the suspect's hands and press the button. The informant didn't set up the bomb.

>Oh, and they likely selected you based on your skin color and/or religious affiliation.

Huge citeplz here.

>While this is true, some of the cases to date the FBI has prosecuted are really likely to have never occurred if informants weren't being paid to intentionally push someone towards an illegal act.

Yours and my definition of "intentionally push" must be worlds apart. But then again, if your mindset is such that you can be convinced verbally to blow up a building that you and the person "pushing" you agree is full of innocent people that would "die".. well, let's say I don't have a lot of sympathy for that person.

Perhaps they should be involuntarily committed to a mental health institution instead of imprisoned, but this person is a danger to themselves and others.

>it is incredibly unethical for a policing organization to pay people to mislead people into breaking the law.

There's no misleading here. The people convicted so far were not "misled".
Specified "747" in the original question, and in my comment. I'm sure ATC could come up with someone who knew how to fly one.
It's just very different than what most GUI tools feel like. In some ways, it's more like a game engine loop than a UI toolkit's message pump. The lack of familiarity slows adoption, despite being, IMHO, vastly superior technology.

See my thoughts on why Angular's approach is attractive here: http://news.ycombinator.com/item?id=5063986
How often do lost tourists ring your doorbell at night? After it's happened a few times even a statistician might wonder what was going on.
There are probably many pilots on the frequency that would be happy to help. Also, it would probably be helpful to have a "wingman" who can tell you things like whether you are too high or low, fast or slow, directly.
I don't think netflix is going after people who'd typically download torrents... but instead they want the HBO and other premium channel subscribers.
Tim Ferris of 4hr body and 4hr work week fame has a nifty trick to doing this:

http://www.fourhourworkweek.com/blog/2008/07/02/how-to-peel-...
Thanks for the feedback. I agree with your point about "incredibly aware of your market".

"Customer-need oriented" I think is great for a sales person. For a great BD person maybe a similar axiom should be phrased as "understand the other sides objectives clearly" and really dig into what the other party wants (versus what it claims it wants).
Keeping our users secure
US Attorney Carmen Ortiz could end up with big legal bill from motel case
Notch: "I will never let Mojang be a place where we want to own people."
Are cost of living adjustments made to the compensation packages for remote workers, or does a developer in rural Iowa get the same six figure salary that seems like nothing in Silicon Valley?
That may hold true if you're the owner of the aircraft, but I'm not so sure for the hired pilot.
Sometimes good changes need a (possibly emotionally-inspired) boost to make them possible. A small-scale example is a kickstarter campaign. A larger example is support for a bill that's bad for corporations but good for individuals.

The case of academic publishing is particularly strange. The following parties want articles to be freely available: the authors, universities, funding agencies, and the taxpayers who pay for some funding agencies. The flow of money is so perverse, and the culture of tradition so strong, that no one has a good immediate incentive to switch to open access, though.

This is an important problem because 99% of the world has no access to research that essentially everyone involved, except the publisher, wanted to be free. Or, if you think money is more important than access to research, consider that in 2011, Reed Elsevier made more money than any of these: Verizon, Nike, Mastercard, FedEx, Bank of America, Delta, or Amazon.com. And their huge profit margins come from a strongly inelastic, broken system that funnels money from our universities and taxpayers.
Swedish Business Culture
Getting really sick of these expressions used clearly for mass-manipulation. "Cyber Pearl Harbor" , "cyber 9/11", "financial WMDs!". Give me a break.
> In actual practice, "unlimited vacation" seems to be a nice term for the company to minimize potential severance pay, bookkeeping, and potentially create a work environment that silently discourages taking vacation time while publicizing the opposite.

I too have been bitten by this - hearing "there is no vacation time limit", and then seeing your paycheck shrink and being told "You took too much vacation"... That's extremely negative for morale.

I wish that companies had a minimum vacation time, but no maximum besides "your work isn't getting done".
Depends on the age of the audience. I'm guessing it would be skewed to an older crowd, but I wouldn't put it past young people (under 30?) to want to connect to wifi and use their phone all through the game. I am continually amazed how many people use cell phones in situations where they shouldn't need them (movies, dates, etc).
The wine.com API does a lot of work for you, here. I don't really see what you're accomplishing by adding a social layer on top of it.

If the killer feature is the recommendation engine social or otherwise, I don't think that you're selling it well enough. I also don't think that you have a good enough feature set for a decent learning model to consistently offer up good wines.

I once attempted to play around with this kind of domain space in the past. I was really disappointed at how hard it was to get the actual descriptions and star ratings of the wines I was looking at. I think the descriptions would actually be what would be useful for discovering new, awesome wines. For example, "You consistently like wines that were described in terms like honey or berry, so we suggested this Chenin Blanc to you," or, "This 2002 Cabernet Franc was suggested because you consistently favorite aged reds that are described with terms like 'tobacco' and 'leather'." If you have that, then you've created an AI wine sommelier. Start pairing things with food, and you have an app that might go places. But the data you need to make that happen is really hard to come by.

Wine is also a messy topic because of the ridiculous amount of local producers, which means that in places where people actually enjoy wine, there's a good chance they're drinking something that isn't available on the API, at all. In fact, if you're a wine connoisseur, odds are you're trying to find progressively more obscure wines in the first place. In other words, why would I, as your target audience, want recommendations from anything unexhaustive?

This project shows a lot of skill integrating with APIs, though, and the design isn't bad. But it seems like more of a weekend hack project than a viable service. Still, from someone who once used a beer API to teach people about search engines, well done.
Not really sure about what is unfair about it. An iPad and iPhone is a luxury item.

It's actually startlingly easy for a worker in China to be able to afford something as amazing as a tablet computer.

There are certainly concerns about the factory "cities" that the workers have to live in and spend 95% of their annual income on.
Nice job for your first web app :)
SEEKING WORK - Upstate New York or Remote

Primarily make a living off WordPress right now, but also experienced with Python & Django. Competent at building sites top to bottom, converting PSD to a WordPress theme, plugin development or modification.

Also did SEO & AdWords management for several years and I keep up to date. Great at the technical stuff, planning, analyzing data and turning it into actions.

mwhager87[at]gmail . com
My point was, that the dependecies / coupling between the US are not the reason, why coping policies from countries like Sweden won't work. Sweden is part of the EU. Countries in the EU are not so interconnected as the US, but still are quite a lot - higways, power grid, money transfers, usually the same currency. There really aren't many policies, that are only feaible in smaller countries.
And Cobalt: http://playcobalt.com/
Last year, more active-duty soldiers killed themselves than died in combat.
Having been one of those factory workers -- it was not really something I lost sleep over.

I did get a laugh out of the thought, though.
This isn't correct. The DVD can only specify that fast-forward and other functions are to be disabled. It's up to the player firmware to enforce or ignore the DVD's user permission flags.