skysight-inc/HackerNews huggingface dataset:
How/why is that?

Let's say that the legal entity is registered in Switzerland or China or Russia for that matter.

This company sells some goods [virtual/physical] through a web site [for example using Amazon 1-Click patent] to a person, who happens to be an American citizen, with payment made by credit card.

How this company will become "subject to these rules and ridiculous software patents"? In which court will this case be processed? How the court decision will be enforced?
54 really isn't that old, in fact back in the day (say the 90s) a typical entrepreneur would be at least a fortysomething who had cut their teeth at a previous company.
You might be subject, but you won't have a judgement enforced against you.
Wow, Bill Gates thinks his portrayal in Pirates of Silicon Valley was very accurate (http://www.reddit.com/r/IAmA/comments/18bhme/im_bill_gates_c...).

Even Woz had said that the film accurately portrayed all the personalities.

However, we should appreciate Bill for his honesty. He is not shown in good light in that movie.
For your point #4, I don't think the prosecutors were specifically trying to go after another _hacking_ conviction (to expand the statutes), but they were reaching for any law that could apply, since what the woman did (emotionally harassing a minor until driving her to suicide [allegedly]) was considered to be abhorrent but not in itself illegal -- just like the prosecutor's conduct with Arron. And in our society, any time something tragic happens people feel that someone has to be held accountable.
Indie Game Devs Delight Pirate Bay and Reddit With Disappearing Torrent
And what's nice about this is that if someone else uses your project and doesn't have their own mirrors for the repositories, he can use 'go get' to download the imports. And that's without making any changes to the codebase or build scripts.
It looks like this is specific to active_model.

https://rubyonrails-security.googlegroups.com/attach/bb44b98...
He's promoted it on his verified Twitter account and his blog as well; I'd say it's the real deal.
its not that people are anti-SEO, its what you so-called "seo experts" think SEO is. As far as I'm concerned, optimizing for search engines means using best practices in designing the website. That includes, rich content, proper title and description meta, link text and title that describes the destination properly, alt/title for image and proper use of headings. SEO and accessibility go hand in hand. The marketing aspect of SEO, is integrating social media and targeted advertisement. If what your content is worth it, link building should come naturally.
If you go beyond these practices and try all these scams to build fake reputation for your worthless website then you truly do not deserve to be on the internet. Trying to scam your way up the SERPs is an awful thing to do and it just ends up pushing better qualified website down, eventually, ruining the online experience for millions of people who now have to take more time out of their lives to find the relevant information they need.
SEO is a must for every website, but if you try to scam your way up the ladder, you deserve to be thrown off it.
If you're facebook and provide a Like Button, that makes "total sense".
I'm not saying SEO is not effective, it certainly works, but it shouldn't, and it is Google job to make it happen.

On a high level good sites don't benefit from SEO, because it wastes time and money on something that should be granted: good sites should be ranked high, crap sites should be ranked low. SEO is a cargo cult (http://en.wikipedia.org/wiki/Cargo_cult_science) with no benefits to society.
http://www.reddit.com/r/IAmA/comments/18bhme/im_bill_gates_c...
We don't know.

It's certainly possible. Maybe, maybe not.

The recent spate of Rails vulnerabilities - the really scary ones at least - all stemmed from the same root cause: folks were a little too lenient with how they handled YAML parsing.

Once that was discovered, a lot more attention has been directed to how Rails handles different kinds of parsing.

It's possible! that other frameworks have had similar cascading mistakes, but we won't know until more code reviews occur. Maybe in this particular case Rails-core was especially lenient, but (as far as I remember) dedicated security people have only taken a keener interest in the past year or so.
The most challenging part was perfecting the level generation while maintaining generation speed on the slower devices. I ended up generating precompiled level seeds. Each level seed is then randomly shuffled 20,000 times on the device.
> Sending somebody to jail unfairly is a crime, and should be treated as such.

Very interesting take on things. I'm not sure if it would create a huge legal mess when a federal prosecutor is doing his or her job at prosecuting someone who's probably innocent.
Right, the problem is most people who claim to do so NEVER ask for forgiveness...

OTOH I don't accept he sentence but that is a different question.
I think my meaning of unconstitutional carries all the weight it needs. A government not serving its people, especially knowingly, is not a valid government, and isn't making valid laws.
Mathemusician Vi Hart Explains Space-Time with a Music Box and a Möbius Strip
Our Weirdness is free
The corporate "buckets of money" problem
We have new emails to rubyonrails-security triggering PagerDuty alarms as well.
True, but the opportunity still exists at this point.
Ah that's it. I'm going through mhartl's Ruby on Rails Tutorial and he has us specify a Rails version to maintain consistency btw the tutorial and our code.

Thanks!
> This isn't about the complexity of the game or how much battery it drains while playing. This is about you setting your tablet down for half an hour with the game paused, then coming back to find it has drained half your battery unnecessarily. Or you switch out to check your email, get distracted, and find that the running game has drained half your battery unnecessarily.

If that is the issue, there is no indication whatsoever of it in the list. What it says is "When running, this app keeps the device from going into sleep mode." Not "this application keeps running in the background". If these applications keep running in the background and you have evidence of that I'd be happy to note it and their misbehavior, but the page you linked is — as I noted — completely worthless. Because that's not what it says, whether it's due to terrible copywriting or because that's not the issue.

> If your game gets shoved out of the foreground, it should have the good graces to save its state and allow the device to sleep, like every other app on the system.

Sure, if that's what happens I'd be happy to concede the point, but that is not the way I read the page, considering the way these blurbs are written I interpret them as "we opened the application in the foreground and put down the device". Especially given they specifically note when applications misbehave in the background, in both cases of network misbehaviors.
Terra Terminal Emulator
This is a great question, and I agree with you about the value of palliative care. But it is a question of Medicare policy, not government vs. private insurance.

Extending Medicare to cover everyone (one model for how the U.S. could move to single-payer), would not solve this problem.
Please also note from the blog post that CVE-2013-0269 refers to the "json" gem, which may not get upgraded with the rails gem updates. You may need to add it as a separate dependency to your Gemfile to make sure you are using json version 1.7.7, 1.6.8, or 1.5.5.
I feel a bit dumb, but I never would have thought about this one. So, is this best practice for any kind of validation regex?
Updated the Gemfile and ran this command. Worked. Thanks!
That's good. The RoR community is very conservative about these things and makes sure to only release after thorough testing.
Those are nice, I've bookmarked the protovis ones. Re-running my experiment, I seem to get two nearly identical magentas or two nearly identical greens every time I re-roll. It is entirely possible its my monitor though.
But this is really the nub of the problem. By default (and most of the time), Excel hides the formulae and comments - requiring clicking into cells to figure out what's going on. By only exposing a glimpse of the whole model at a time, it's very difficult to get an overview of how the model interacts.
Classic drepper.

Theres a syscall here that maybe the layer between OS and program should expose

- Never
Have you tried uninstalling the earlier versions before downloading the new one?
ok, thanks for the answer. btw, which kernel development book are you currently suggesting??
Interesting point. Though, some of the colors in OPs preset examples seemed very similar, even with only 7 colors. For generating graphs, maximally distinct colors seems the primary goal, even if they compete for attention, perhaps because of it.
Il Papa si dimette: “Sento il peso dell’incarico”. …E se la causa fosse diversa?
"Please don't post on HN to ask or tell us something (e.g. to ask us questions about Y Combinator, or to ask or complain about moderation). If you want to say something to us, please send it to info@ycombinator.com."

http://ycombinator.com/newsguidelines.html
If you have the freedom to make decisions, you also have the responsibility of being correct.

I'm not sure of the full intentions of the article nor your comment, but I think you may have missed a major point here. The article does not seem to argue that insanely smart people know all the right answers; instead it argues that insanely smart people have a pretty good idea when something is a bad idea, and will be the type of person who works out the right answer prior to pushing it live. That said, the other cases is covered as well...

Actually, mistakes are fine. They’re something you trade off for other variables like speed of iteration.
Looking closer, it uses the Lab colorspace. Here is what I was using:
http://www.mathworks.us/matlabcentral/fileexchange/29702
I'm not surprised with US starting trade wars all over the place, and signing "free trade" agreements that make that sort of trade less free and with higher restrictions/taxes.
Anyone else sick of the "%s on Raspberry Pi" Howtos. In the vast majority of them, there is nothing specific to the Raspberry Pi, they're simply "How to do %s with a linux box".
That's probably because he's one of the more computer-savvy people to do an AMA.
Ah, sorry. Should be fixed now. Thanks for the heads-up.
Double Mapper
More detail: http://www.japantimes.co.jp/news/2013/01/08/news/razing-skys...
That second one seems like an easy mistake to make. If you're thinking of ethernet or WiFi, then a few bytes every couple of minutes is no big deal. But on 3G, every time you activate the radio when it's not being used, it's a few seconds of fairly intensive setup, then your communication, then a few seconds before it times out to a lower-power state, then a few more seconds before it goes fully back to sleep. It'll be something like 10-20 seconds total, so your quick blip every 2 minutes ends up keeping the radio on a 10-15% duty cycle!
Thanks for reposting. I saw this but wasn't sure if sarcastic or not. That page is one of the one that got ... less attention during the redesign. :-)
We just started using Titan in production last week for shift.com, on a 3 node cassandra cluster. We open sourced our Object Graph Mapper library for Python here:

https://github.com/StartTheShift/thunderdome

There's a few caveats that come with working with distributed databases, so it's important to know what you're getting into. Neo4j might be easier out of the box (since more people are using it), but if you want a robust solution that'll work for 50 or 50,000 users, Titan feels like the way to go.
Editorially - Write, collaborate on, and talk about a text.
What is an empty XML element?
I would agree with you entirely if I had more reasons to transitively trust the root certificates authorities than to trust the people I believe are building the website, because in reality I don't know any of them. Certificate authority getting hacked and issuing trusted certificates to not trust worthy people have happened already. You may say that you still put more confidence in a certificate that is transitively trusted by those your browser and / or OS vendor chose for you, but why? The SSL certificate system as it is now is highly unsatisfactory to me. I would prefer something decentralized like the GPG trust network.
Linux Device Drivers, of course!

Love's "Linux Kernel Development" is less obsolete currently, but I do still think that LDD has a lot of useful information not found elsewhere. Available in all the usual places or downloadable from http://lwn.net/Kernel/LDD3/
Ristrettolo.gy, CoffeeScript Ristretto Online
Huh? Your wording suggests that these two things are somehow contrary to each other, but in fact they're both perfectly aligned with the goal of reducing network utilization.

Hate on them if you want, but this isn't the least bit inconsistent.
Very good explanation - thanks.
I want to send a big thank you to everyone looking closely at Rails right now. I really appreciate all the work that's being done. I can't tell you how happy it makes me to know that Rails becomes more secure every day because of efforts by teams like yours.
Ask HN: How much traffic is generated by upvotes on HN?
Just wondering if anyone has explored this question. I know it's not going to be an exact relationship and it will probably produce an exponential effect, but has there been any data gathered about this? the value of an upvote on HN?
See computerbasedmath.org
Thanks for the suggestion. I'll add more explanation for that.
I'm going to take this opportunity to complain about Google Navigation app, on every device I've owned.

Their directions really should say "ETA: 3 Hours from now. ETToBatteryDrained: 1.5 hours from now. Shoulda remembered your car charger, dumbass". 'Cause I do forget to pack it every goddamned time.

I don't know if this is really possible, but they really should have a "low-accuracy" mode, where if you're on a freeway with no turns for an hour, they should turn off the GPS, and just use inertial or cell-phone navigation mostly. Then only periodically check the GPS. If you are going to turn soon, or appear to have deviated, they can go back into active GPS mode, but the goal is to avoid wasting battery when you're probably just following the road.
Does anyone have a copy of the CVEs that's not on Google Groups? Something in the js or cookie-handling is broken for me and the page includes no text.
Kicksend (YC S11) is looking for an Android lead
At Kicksend (YC S11), we help people stay in touch with the ones they love through carefully designed and crafted mobile, web, and desktop products.

We've already been featured by Google once for our stellar Android app, which is used by a highly passionate, rapidly growing, global user base of hundreds of thousands of people.

We're looking for the right person to own the development of our Android app and help with the design & UX (we design as a team). Android is massively important to us here at Kicksend, so you will be making a serious impact. We ship on Android multiple times a week, and do most of our mobile experiments on that platform.

Our apps are designed to be incredibly easy to use, which means there is a lot of complexity and interesting problems under the hood on both the user-interface side and the architecture side -- not for the faint of heart.

If you're very experienced with Android, can learn super fast, and can code circles around most, please send an email to brendan [at] kicksend and say hi.

We're looking worldwide, and are willing to sponsor/relocate anyone we really love to work with us in our offices on Castro St. in beautiful Mountain View, in the heart of the Bay Area.

- Great salary

- Top-notch medical benefits

- Equity (of course)

- Killer team members to work with and learn from

- How we work: http://blog.kicksend.com/you-should-work-at-kicksend

---------

Here are a couple of press articles about our recent launch:

The Industry - http://theindustry.cc/2012/12/06/kicksend-3-0-sets-itself-apart-in-photo-sharing/

VentureBeat - http://venturebeat.com/2012/12/04/kicksend-print/#s:4-choose_photos

Kicksend 3.0 Announcement - http://blog.kicksend.com/kicksend-3-0-the-only-app-youll-need-to-keep-in-touch/
HN =? Bugtraq
I enjoy the philosophy behind Esperanto -- a fully regular, easy-to-learn second language for everyone. It's often poo-poo'ed as not being "international enough" due to Zamenhof's inspiration and vocabulary coming primarily from European languages. It's also dismissed as having missed its window since its decline following France's refusal to allow it to supplant French as the official language of the League of Nations in the 1920s.

Is there an Internaional Auxiliary Language in the works that might have a shot at succeeding where Esperanto has not?
> The point of the article is health insurance, and no one chooses to break their leg, get burned in a fire, or develop cancer.

I'm not sure if you're kidding. People do indeed choose to go rock climbing, smoke in bed, and smoke, period. These things are statistically very related to choosing to have accidents and get cancer. One would expect that removing some financial costs of these activities would cause some increase in those participating.

You might say that you'd be fine with higher rates of accidents and cancer as long as the risk is spread, but it's not a straw man.
I seem to remember a blog post about this regex issue here on HN a few months ago. It definitely surprised me to learn that Ruby doesn't treat $ as end-of-string by default.
Do you plan to open source Gemcanary. Like Rubygems and Rubygems.org?
The surest way to kill this bill is to require it change the entire judicial system.
nice find. there is sql injection in 2.3.x and it effects all adapters and not just postgresql.

i just tried quoted_id and it works against mysql on 3.2.x as well. quoted_id is defined in abstract/quoting.rb and any adapter that forwards quotes to the superclass will use it.
Your snark isn't very helpful. Every major release goes through a few release candidates. For example, 3.0.0 had 4 beta and 2 RC releases before final. 3.2.0 had two RCs.
I remember writing to the GitHub guys (and girls?) ages ago about considering leveraging their Issues/Pull Request system to create an interesting alternative to Stack Overflow.

They basically told me to fuck off in polite canned-response manner, but it looks like they are a step closer to what I wanted way back.

If they're smart, they could add a button to each hit allowing you to say "This was relevant to my interests", which could order them based on relevance similar to SO's system.
That's pretty much my understanding of it, too. :^)
Umm, I hate airport security as much as the next guy, but isn't it a bad idea to make this data public?
The color section (after creating a palette) looks very similar to http://www.colourlovers.com/colors
What, then we'll have to work for a living? Good thing I hadn't had anything planned this evening. :P
Supply and demand doesn't work out too well when the consumer has no bargaining power.

If I'm buying a car, I can walk away if I don't agree with the terms. How does the guy with the broken back do that?

If I am an unconscious or legally incompetent person in the ICU make a rational economic decision about their course of treatment?
> Network traffic, in aggregate, was very small, but it just killed the batteries.

And as most developers here would know, radios are an expensive piece to wake and won't go to sleep immediately, so doing more smaller network interactions is usually going to be much more expensive (power-wise) than doing fewer big ones (or using notification systems piggybacking on other stuff and bundling req/rep for all applications, e.g. what I hope GCM does)
One of the core issues here was a serialization library that was too convenient, with the ability to deserialize into arbitrary classes and end up executing code from them. In the Python world, this vulnerability has been a bit better known for a while (which is not to say that they are immune, but it's at least been common community knowledge for a very long time now, at least a decade). Pickle is well-known to have it, but it's frequently pointed out in the docs that it is possible and that you shouldn't unpickle things from users. But other libraries may have this too, and if Django uses them, have a poke around. JSON libraries would be one obvious point. There's probably some extant Perl vulnerabilities in this area too. PHP wouldn't surprise me (though it would be a particular framework and probably not the language as a whole).
it has been pretty clearly demonstrated

What has been clearly demonstrated is that free markets don't always reach the optimal solution. That is not the same as saying that governments can do better. In cases where there are market failures and/or externalities, very often there is no way to get to the optimal solution.

The real question is, which has worse failure modes, free markets or governments? I'm going to go with governments on that one.
>But the reality is that very few companies actually follow through.
Because asking your customers to pay you for a product/service when you also expect them to be your testers is going to lose you a lot of customers long-term in most markets. If something doesn't work consistently, or they are constantly finding new issues they will simply find another company to work with. Not to mention, by letting people push whatever they want to production and waiting for a customer to report issues you are counting on people to actually submit bug reports & not just ignore/abandon the issue.
My only problem with Java and C# as beginner languages that starting off takes so much understanding or glossing over of details. In Java, it's a class with "public static main void" before anything will work.

PHP or Python are a better way to start because "hello world" is literally a line or two of code.

That said, I always recommend Python over PHP because it enforces good a habits from day one. Once you learn the skills and concepts, working in the much looser PHP environment is safer.