skysight-inc/HackerNews huggingface dataset:
...which is often the right choice, because projects that pay attention to security from the get-go often lose out in the marketplace to ones who pay attention to other, more important factors. There's an opportunity cost to everything, and for many apps, security is not as important as convenience, ease-of-use, performance, or features.

Witness Dropbox vs. TarSnap. Dropbox has had multiple serious security vulnerabilities published. TarSnap is by the FreeBSD security officer. Yet Dropbox is the one with the million+ users and $B+ market cap, because grandma cares a lot more about being able to figure out how to use the product than about what happens when the product gets hacked.
When I was younger, I was mentored almost exclusively by the very knowledgeable people on Freenode IRC. It's not only possible, but it's much better to do this remotely.

I've found that when people receive criticism remotely, it tends to escalate into "I feel this way because I read this: <insert link here>". Then a debate proceeds about the merits of one approach or another. When people receive criticism IRL, it's much more common to be defensive, because the references are not immediately available and there's a desire to resolve the disparity immediately.

I google everything (at least, when I'm outside of the office), and if I have two minutes to google anything before responding, the quality of my discourse will always be higher.
What do you think would happen if the West adopted an isolationist policy and stayed out of Asian affairs?
there will be order pizza API in future

if( dateTime.Now == friday )
{
orderPizza(pizzaType, pizzaSize);
}
Actually, that's how security vulnerabilities are normally handled in the Ruby on Rails world.

What, you think I'm joking? Think again:
http://arstechnica.com/business/2012/03/hacker-commandeers-g...
Don't you think writing about it is a good to minimize the amount forgotten generation to generation? Even if they write something that is flat out wrong, someone will probably tell them and everyone might learn. Also I wouldn't be so quick to dismiss building websites on Django (or any other framework) as easy. I imagine many things are easier, but I bet many things are harder as well, I'd think you'd be surprised at how quickly "good" designs go to shit when business requirements change every two weeks and how this effects development.
I used to be in the office all the time. What ended up happening was that I ended up becoming a tutor and they weren't gaining the skills of an experienced programmer. The best thing you can do is force them to look up things. It's probably even a good idea that all questions go through Skype or email because you can answer them on your own schedule; meanwhile, you force them to work for the answers.

For example, I had to teach a fresh Comp Sci kid how to link to a C library several times. He had no idea how compilers or linkers worked aside from his school programming assignments. I taught him how to do this in VS and GCC Makefiles at least 3 times, and he still didn't learn it because he could turn around and ask me. I've learned you only force someone to learn when you don't provide them answers. You do yourself and that person a disservice by spoon feeding solutions.
People had great expectation about Hackdesign, but nobody can teach you design the way one can teach you programming (do this, not that etc.), you have to teach yourself, choose the way you want to see the world and try to design things in this way.
But there are a lot more people familiar with gas based cars than electric cars.
Not quite so recent (ended in the 1980s) - kidnapping Japanese citizens from within Japan, http://en.wikipedia.org/wiki/North_Korean_abductions_of_Japa...
According to a message he posted[0] on the erlang-questions mailing list, since 1967 he has written in Fortran, Lisp, Prolog, Smalltalk, Erlang, C, C++, Java, Python, Ruby, Lua, Javascript, Haskell, ML and OCaml.

I italicised all the object-oriented ones. Saying that Joe Armstrong doesn't have "extensive OO experience" is pretty comical!

[0] http://erlang.org/pipermail/erlang-questions/2013-January/07...
For newcomers I always suggest learning Python 2 first mostly because it is easier to find libraries and/or resources for Python 2. Also, I found it very easy to learn Python 3's differences after knowing the previous version.
"WHEN I heard the learn’d astronomer;
When the proofs, the figures, were ranged in columns before me;
When I was shown the charts and the diagrams, to add, divide, and measure them;
When I, sitting, heard the astronomer, where he lectured with much applause in the lecture-room,
How soon, unaccountable, I became tired and sick;
Till rising and gliding out, I wander’d off by myself,
In the mystical moist night-air, and from time to time,
Look’d up in perfect silence at the stars." - Walt Whitman
For interest, this has already been around: http://hackedgadgets.com/2008/06/09/order-dominos-pizza-via-...
> That's just totally ridiculous. You believe that this view of North Korean belligerence is due to propaganda.
That isn't what I said. I said that they are no MORE belligerent than the US, I wasn't saying they are not belligerent. Please reread.

> It is unstable not in the sense of "who is going to rule the country." It is unstable in the sense of they behave irrationally, have irrational beliefs and motivations.

Oh sure, if we redefine what "unstable" means in the context of government, then sure, you are completely correct.

> Wow, that is the dumbest thing I've ever heard.

Jerk.
My Prius (which is almost guaranteed the worst of both worlds as it's both gas and electric) has had a stellar maintenance record - and I'm a very lazy oil changer and neglectful owner.

Electric vehicles using software "clutches" are to ICE-powered cars as SSD is to HDDs - at first, there will be downsides and only the adventurous will get to showboat, but in several generations the only reason you don't get an electric car (SSD) is if you really need the range (storage space using our analogy) or can't afford the upgrade.
I see it as a conversation happening both ways. It just depends on who is the initiator of the conversation.

Consider for example the following two imagined scenarios:

In order to send a new tweet:

1) You click a button that says "Send My Tweet".

2) You click a button that says "Send Your Tweet".

In the first case, you are telling Twitter to send the tweet you just wrote. The power lies with Twitter to send it.

In the second case, Twitter is telling you to send the tweet. In this case, the user has all the power.

.

.

It's interesting to compare Facebook's approach with Twitter's:

Facebook is a bit of an oddball in addressing the user. Facebook usually addresses the user as "you", but it sometimes refers to the user in the third person. On the home screen, it asks "How's are you doing, Sean?" and displays the link to your profile as just your name. On your actual profile page, if you hover over the Activity Log button, it will say "See your activity on Facebook". But then when you go to privacy settings, it says "Who can see my stuff?". This makes a ton of sense. By using "my" instead of "your", Facebook is making the user feel like they have control of their stuff.

Twitter is pretty squarely in the "Me" camp, as evidenced by the link to your profile on the top of the page.

If the website has something informational to tell the user, like a notification, they will always refer to the user as "you".

For example:
"Bill just retweeted you", "Bill just liked your status", "Your page is undergoing maintenance".

When you're changing account settings, the website will invariably refer to the user as "you". You are the one who actually needs to perform an action.

For example:
"Change your password", "Update your email".
I wasn't suggesting that... Only that Vietnam and South Korean War were anything but "stabilising" and their approach could have been different.

But I like your attempt at hyperbole.
Have a look at: https://code.google.com/p/or-tools/
Maybe he just meant "an extension of my self."
Maybe something like this won't happen:

http://costsofwar.org

http://en.wikipedia.org/w/index.php?title=Vietnam_War_casual...
Behavior Trees as a way to do REST hypermedia. http://vimeo.com/50215125
We did it all the time in the early eighties, with machine language monitors.
Ask HN: Impact Investing
How would Elon Musk or Steve Jobs tackle the Impact Investment sector?
This is still susceptible to timing attacks, for example.
http://codahale.com/a-lesson-in-timing-attacks/
Oh, its now news that a "heavy consumption" of a product with a high Glycemic Index leads to health issues?
I'm a senior developer and I can assure you that stuff like "if I put a semicolon in the URL, how does it respond?" never works on my software. It doesn't because as a general rule I sanitize all input or rely on the stack to do it for me, but in general I know which parts of the stack are doing sanitization to lift that burden from me.

That doesn't mean my software is secure. Unfortunately some bugs are far more subtle, including the recent Rails exploit. So on one hand I trust Rails even more, precisely because such problems are found and fixed. But on the other hand this does open you up to mass exploits, which does give me the shivers.

So it really depends on how much effort you're spending on your app. If you actively maintain your app then you can take notice of zero day exploits and upgrade ASAP. But if you want a worry-less app that you don't want to maintain, a more custom stack is more suitable.

Case in point, Wordpress is the most popular blogging platform in the world. It's also the most targetted and shitty weekend blog implementations are far less likely to get hacked.
RIOT: The Big Data Social Tracking Tool From Hell
While it may be easy to transfer bitcoins anonymously, spending them anonymously on tangibles is just as hard as spending any other kind of money anonymously. Tax evaders are often caught because their lifestyle and assets are inconsistent with their reported income, and not necessarily because government is able to follow their money.

from https://en.bitcoin.it/wiki/Myths
You mean like Active Oberon?

http://www.ocp.inf.ethz.ch/wiki/

Not sure how workable this version is, but you can check on the forums,

ftp://ftp.lrz.de/transfer/BlueBottle-A2/ARMRelease.zip

You just need to enjoy using Pascal syntax languages for system programming.
I know what he was trying to say, but I don't think that's actually what he said.

What he should have said is that you should pick an interface that suits your computation. The problem was not that the interface was too simple, but that it didn't fit the computation. One can easily imagine an object-oriented interface for the same wrapper computation that also hides the true nature of the computation.
If there is no non-strict, purely functional programming language on platform X, nobody is apparently disappointed.

If there is one, and if it were very different from Haskell, people would complain: Couldn't you make it more like Haskell, so that people don't need to learn the many differences?

If there is one, and if it is not very different from Haskell (so much so, in fact, that many Haskell sources will just compile), people will be disappointed because it is not standard Haskell. In fact, the fewer differences there are, the more complaints.

If it were fully fledged Haskell-2010, people would complain: Where is GHC extension XY? How is Haskell-2010 any good these days?

You never can make everyone happy, no matter what you do.
sockpuppets.

I can't find a link, but Reddit started with the admins having sockpuppet accounts to make it seem more popular than it actually was at the very beginning.
being googleable and knowing what he is talking about doesnt mean that his this quote is relavant in this context. What he said is a good piece of advice, but only when looked through larger window of programming. When we are talking about only python and choices of coding style in python, his quote looks like santa on valentines day!
Complaining is the main source of progress. The British Museum wouldn't have done this without anyone complaining. The British Museum wouldn't even exist without anyone complaining "but we need to save all this knowledge ..." and so on. People always lament the complaining but never praise it as the source of progress it is.
Which he doesn't really address, nor do the two opinions necessarily clash (at least not totally). Diederich's talk is mostly about avoiding to write superfluous classes. Quite often a simple module with one or two function suffices. His examples look quite different from those in the blog post.

(Although I have to admit that I skimmed most of them, as I'm in serious eyeroll territory whenever I see the old Java IO API used as a bad example again.)
There's a fairly effective rule of thumb: classes--or more accurately objects--are a way to cleanly encapsulate state. If you rely on a mutating state, you probably want an object/class. If not, a function is often better.

Now you can bundle related functions together in a structure, but this structure is morally a module, not an object, let alone a class. Some languages will force you to encode those modules as classes / prototypes / singletons, but that's just a design pattern to circumvent a limitation of the language.
This would be very useful for marking up LaTeX sources - could have done with this for my thesis
"Java" is a bunch of different things that run in a bunch of different places. It's a language, a bytecode interpreter, and a virtual machine. The virtual machine may run on a server, or client side. Most of the more significant Java security issues of late have been on the client-side JVM plugin support for browsers, which affects the ability to run Java applets client-side.

For most contemporary Web development, "Java development" translates as "server-side Java programmer". Which isn't without its warts (trust me on this), but it's not the place that has seen a lot of heat, despite Oracle's best efforts to fuck everything up.

The recent situation with RoR has been vastly worse, and has been server-side.

As for that well-used platform and community with few security holes, I'd suggest you look up the OpenBSD folk, if you count an OS as a platform. They take a preemptively secure approach on all system code, to the point of rewriting major libraries. Yes, it's a bit less free-form than all the cool kids like to play these days, but damned if it's not a solid platform. And that "secure by default" mentality means they avoid much of the pain other OS developers (including Linux, which I much prefer to admin myself) encounter.

RoR and Ruby have, to my mind and experience, a cultural problem with regards to security. And they're becoming widely enough used that it's starting to show.
+1, one of the best points in the discussion so far. :)
I was living in hospital with my wife having a baby when the last one hit and, yep, I did it all tethered over a phone. First time I've done work in a room while someone was getting set up for a blood transfusion ;-)
One can write Python in a procedural manner, and even in a functional way, so one can use the same techniques as are used in those paradigms (OO is probably more natural for Python though).
I was considering putting up a one page app to SMS people when new patches dropped but this is not a good month for me to be adding more Rails apps to my stable...
Here is some interesting statistics on adoption and costs:

http://www.statisticbrain.com/adoption-statistics/
It is perfectly acceptable to design a library with a simplified, restricted interface that covers the majority of use cases, but not all. e.g. requests vs urllib2 For me, that's a win for common sense. I have never even considered streaming JSON.
The lack of streaming support should be a clue that the OP needs to look at whether what he's attempting is even sensible or could be better served by a different transport protocol with built in streaming support.
How "Bullet Time" Will Revolutionise Exascale Computing
Well, if you're feeling really sadistic

baremodule MyWay
ref(x::AbstractArray, i::Int) = Base.ref(x,i+1)
ref(args...) = Base.ref(args...)
end

is not that far away (I'm oversimplifying a little, but not much).
However, please don't do this as it breaks coherence within the community. I found 1-based indexes annoying at first, but have grown quite fond of them since.
No one killed Aaron Swartz. He killed himself. He could have become a political prisoner. He might have beat the charges. He would have gotten out eventually. The only cause he is a martyr to now is mental illness.
Thanks for upvote. Great way to get your application tested by 20 testers for $99
Why are you so dismissive of this in such a condescending manner? On hacker news of all places, a site where people go for discussion of articles?
Have you looked at the various statistics-related packages? We moved most of the statistics stuff (and may other areas as well) into packages.
If the book is good, it'll dedicate significant space to when not to hire remotely.
99tests is one of my fav company from Bangalore. Good luck team!
(too late to edit the parent) I didn't so much want to defend gasoline cars, as to observe that the externalities are much less of a burden nowadays than people might expect. I was surprised by this myself, but then vehicles in California are orders of magnitude cleaner than the cars I grew up with.
Run. Hide. Fight.
Did you read what I said? I said "this better not be we're not going to look into it further" and I concluded with "NASA hasn't actually come out and said they definitely will not be looking into this further."
It's not that amazing. Any decent $60 kettle in the UK will do 3000W these days http://www.amazon.co.uk/s/ref=nb_sb_noss_2?&field-keywor... (viz. the electrical consumption surges during TV ad breaks http://news.ycombinator.com/item?id=5018560 ).
The first draft is already 90% complete and the book has been sold to the publisher. The decision to write this book was taken months ago.
Some make &10,000 a DAY.

Ever looked at the payday SERP in the UK? Google can't control it. I know at least 3-4 people who make £100,000 a year with just basic level spamming.

If I scaled this technique http://explicitly.me/serp-sniffing-a-long-tail-keyword-strat... , I could make the same amount of money without breaking a sweat by dumping Adsense on there, and shopping affiliate links.

The point is I don't choose to.
Transit apps need to implement the concept of "Minimum Connection Time" that airlines use to determine legal connections at airports.
Making Flat Pixels
Minecraft Kings Landing (jpg)
Nice! Their pricing page text is almost unintelligible though, sort of unprofessional.
37signals has 36 employees, less than ten of them is likely to be in the office at any one day. Working remotely is not an all or nothing proposition. You can have some people in an office, others remotely. But of course you knew that and was just trolling, so don't let me disturb you.
You mean something like the church?
Not to mention that the Whitehouse is the world's great bastion of representative democracy. Like hell they don't owe their own citizens a response. That's why they setup the petitions system.

The first comment so totally missed the point that it curved around and nearly smacked the author on the head.
"Dreamfall Chapters: The Longest Journey" is on KickStarter
Extensive experience?

About Java: "I tried Java"

About C++: "I saw C++ coming and read the book - or at least tried to read the book - there's a dent in the wall behind my piano, where the book hit the wall"

About Smalltalk: "I learnt (with various degrees of proficiency) [...] smalltalk [...] and became proficient in Prolog (aggghhh - the beauty ....)"

About the others: " I also (later) tried Python (ok), Ruby (ok)".

We might vary in our perception, but I would not call this extensive experience, "trying" some languages and "trying" to read a book.

I would call "I've written some systems in Java for 10 years" extensive Java experience.
I think it's a great requirement. So many of the projects would turn into CRUD apps. It's Computer Science and there are a lot of other interesting things to do which students will never consider without making them stretch a bit. I think too many programmers are devoting their efforts to geo/social/commerce/blog apps and are losing sight of all other problems.

My senior project was on audio synthesis, granular synthesis in particular. I'd recommend any project in the generative art or audio space.
How to get 30,000 signups for your startup in 3 days
In networked realtime multiplayer games you will never see the exact state the game world currently is in, but you will see a very close (based on your latency) approximation of it. In reality, between the network packets you recieve you use alot of tricks like client side prediction and interpolation/extrapolation to make a very good guess at the current state of the game world.

If your latency and that of the other players is reasonable you dont feel the very minor corrections taking place all the time. Getting this right from an engineering point of view is easier said than done though :)
I've never been a player of minecraft but this game keeps amazing me on so many levels. Markus Persson really built a tool for fanatics...
"Cautious of privacy" is not really mean ;)
Batelco Subscribers: Continued Growth of Batelco Subscriber Base in 2012
Amazon Route 53 Introduces DNS failover
> but using Java APIs - it is disappointing that there can't be a cleaner join between the worlds.

Maybe it can. But does it make sense? For example, you'd need a library that emulates the C stdlib functionality that is used in Haskell.

There are more subtle points. For example, in Haskell, you can throw an exception in another thread. You can't do that with JVM threads. I am not sure what it would take to make a JVM runtime system that supports this.

But observe that the more runtime code you have that keeps up the illusion of running a Haskell-RTS, POSIX, C stdlib world, the less you will be able to interact with the rest of the JVM. For, your Strings are not Strings, but lists of characters, your Boolean is a sum type, your Filedescriptors are some abstractions nobody else understands, your threads are not JVM threads, but something that can be interrupted form other such somethings, ... and so on and on.
Soulver also has iPad and iPhone versions.
I think this article is great and the first point is absolutely spot on. What I dont’t really agree with is that teaching end-users and clients to report issues the way developers want is the solution.

I think the communication gap between developers and non-developers can better be resolved with intelligent software. Ideally I think this would be something along the lines of:
• automatically detect when an error happens,
• provide a list of all the actions leading up the error,
• capture all the information it can about the user that experienced the error,
• take a screenshot automatically
• provide a simple way for them to communicate with devs, and vice versa

There’s no reason why a customer should need to know about milestones, assignment, error verification, etc... They should instead get a chance to say they have a problem, and then be notified sometime later when that issue is resolved.

We’re working towards this with http://www.bugherd.com from the bottom point up to the first. For instance when an issue is reported in BugHerd we capture as much user data as you can throw at us, information about the page they’re on and optionally an automatic screenshot. Other startups like https://www.getsentry.com are tackling this same thing from the other end by focusing on the error detection side of things and working their way down.

All in all I think bug trackers that pay as much attention to end-users as they do devs are doing it right, because as you say those are the people that are going to be reporting the bulk of the issues and the ones devs ultimately care about.
Gulf Bank Growth in 2012: Net Profit of KD 30.9 Million in 2012