skysight-inc/HackerNews huggingface dataset:
I am currently maintaining an application originally developed with Bootstrap and it has cost us hundreds of hours in extra maintenance so far. I'll give two examples.

Any grid-based CSS framework breaks content/layout separation - one of the best features of HTML5/CSS. Instead of naming elements based on document role, they are labelled by row and column position. After the prototype was finished, the designer wanted to add a banner at the top of the page. With normal CSS/HTML this would have been an insignificant change, but because we were using a grid, all HTML had to be rewritten because row 1 now equaled row 2, etc.

#2, The CSS in Bootstrap changes the global defaults of all HTML attributes. I have probably written as much CSS to undo bootstrap styles than to add new. I hope you like writing "line-height: normal" over and over again.

I could conclude saying that bootstrap should only be used to build prototypes, then throw it all away before developing the production app, but I don't know why you need fancy formatting in a prototype app. I'd recommend you build the first version in black-and-while/wireframe style, then hire a professional designer for the final decoration. If you are not a graphic designer, focus on writing maintainable, compliant HTML and CSS.
Sometimes, that statement is fairly accurate, then in other times when google boosts its own commercial properties to increase their ad revenue, it wouldn't be.
They're called public libraries. Quiet encouraged. Most have WiFi.
The quality was always terrible, these are ancient bugs that are just being noticed now. Rails is designed with a 'convenience first, then use a couple regexes to "secure" it' mentality. Any software designed like that will be full of these sorts of holes.
But it was an article about the merits of one programming language, in which the author made erroneous and ignorant remarks about another programming language, and other ignorant remarks about programming language features (mild ones like associating static typing with verbosity). It's not as if they made some flawed remarks about mathematics or electrical engineering, which truly are different fields. For me, it detracted from the author's credibility, because they apparently don't have a breadth of experience with programming languages, so why should I take their opinions about this one particular language very seriously?
This is GitHub code search all over again...

https://github.com/search?q=state%3Aopen+sql+injection&t...
It isn't just extraction, but the entire process, from training a dictionary, to training it, etc. Have you tried training your own dictionary to extract custom entities? It is "non-trivial".
A Day in the Life at Dev Bootcamp
YouTube’s Newest Superstars Reveal How to Build an Online Blockbuster
Insurance is one strategy for managing risk, but it's not the only one. For many people, self-insuring is a much better approach to managing risk.

All this is quite true, but it doesn't refute what I was saying. I was saying that there can be circumstances where purchasing risk immunity (IMO a better term would be risk transfer) is a net gain for both parties, because the person purchasing it values it highly enough. You admit this is true since you admit people should purchase insurance on things they can't afford to lose.

A lot of the people you are arguing with in this thread are basically saying they can't afford to lose their house; or, equivalently, that purchasing the risk transfer is worth it to them. It's not responsive to just say "no it isn't"; in some cases it is.

Pricing risk immunity is not at all like pricing bread -- there are many more issues.

Then maybe we should focus discussion on those issues, instead of on blanket generalities. What are the issues?
One of the authors here: we wrote this during the Pragmatic Programmer's writing month in 2010 and some more in 2011. Then I got caught up writing my PhD thesis, and now a new job (as an NLP engineer, but in Java ;)).

So, the book is basically frozen. We hope to have more time in the future to continue the writing...
Show HN: Fundhawk - VC Analytics
Facebook does not consider this page to be inappropriate 
The facebook page:
https://www.facebook.com/pages/Niñas-de-12-a-17-años-cabronas-y-bonitas-en-busca-de-novio/223378684434425

Facebook's answer:
http://imm.io/VUfa
sharp?
10 people targeting the same keyword. Only 10 spots on page one of the SERPS, if the on site content and site is well built, then who gets the top spot?

The machine isn't clever enough yet to get the perfect answer, and till it is, humans and marketers will continue the manipulation of visibility in pursuit of traffic and revenue. It's sad, but it's a fact.
It didn't take much "ear to the ground" to tell that a lot of people had started very carefully sifting through Rails code.
I'd be surprised if there wasn't at least one reasonably major PHP framework with similar sorts of vulnerabilities: while PHP's JSON decoder should be safe (it can't create any objects other than stdClass objects, which are simple property buckets), the use of unserialize() in older frameworks was rife (mostly due to a lack of alternatives), and that's definitely not safe with arbitrary user data -- as we've seen with the RoR issues, it only takes one code path where user data unexpectedly gets in somewhere it shouldn't.
> He also had every right to access MIT's network, just like any other member of the general public does.

You're conflating two networks. He had every right to access the public wifi network at MIT, which has numerous security and bandwidth-control mechanisms in effect.

He did not have every right to connect directly to MIT's core network infrastructure, which bypasses most of the above.
Jelastic is now available commercially in Finland
What are the chances you would make this an app work for UX research usability testing?

With the following needs:

2 users:

UX researcher (myself)

UX study participant

Requirements:

- Easily send the app to a participant (via an email link) - (you do this?)

- Share my screen with the participant - (You do this)

- Give the participant access to mouse and keyboard - (You do this)

- Allow me to talk to the partipant and the participant to talk to me (like Skpye) - @todo

- Record the video of the session - @todo

- Record my voice and the participants voice - @todo

- Sharing is not laggy (like go to meeting)

Currently WebEx is the only app that can do all of the above (that I know of). I would love to stop using webEX. Participants find it impossible to get started.
Ha! I should have... Maybe in the next version...
Ask forgiveness, not permission

Dear Board of Directors,
During the past few weeks I have been engaging in unauthorized trading. I bet that the Euro would weaken drastically, hoping to make the company at least $4.6 Billion. Instead, we're 5 billion down, as the situation changed.

I was going to ask for permission to use all that cash to trade, but I read on a blog that I should ask for forgiveness, after the fact. So, forgive me.
Ah, Verge comments; always so insightful.. Everyone brings up Digg as a counter-example, but completely forget SomethingAwful as a strong and diverse community with radical degrees of separation between each sub while still being able to kick the dirt to the curb; doing so in a public manner that makes people think before they submit.

Reddit will continue to go downhill if they don't take moderation more seriously and allow it to be a safe-haven for discrimination; awareness that it's happening and that 'something' needs to be done doesn't do anything but make people feel like they're contributing to the greater good, but when no one runs the risk of taking responsibility, nothing will change. It's at the point now where admins need to do a better job policing the subreddit moderators themselves. Some of the most needlessly-prolific users (those with histories of online and offline abuse, those who intentionally game the system) moderate/make decisions for some of the largest communities and make decisions that affect thousands of users. That should never even be an option, as it just alienates the rest of the userbase and will make it hard for companies to justify spending marketing dollars advertising to audiences they don't want to be associated with.

I commend Shatner on making these points because they need to be made by someone with listeners inside and out of the community, rather than the minority who get downvoted and told to go somewhere else if they can't stand the heat. Even more that he told SRS to screw off for doing whatever they were trying to do with his likeness.
AFAIK, the only way this could be an issue with the language is if you use serialize/unserialize, which can be used on classes. It goes without saying that this can be useful in certain contexts - such as file-based caching - but should not be relied upon too heavily.

I cannot remember the last time I came across a php project that did something similar.
Saurik - so glad to have you here. Thank you for the very thoughtful post.

I've been trying to reach you via IRC for a few days now, find me on there if you have a minute (in the #iphone room).

You make a lot of very astute points, and I completely agree with most if not all of them. I deliberately kept the message in this post simple, to a degree due to pressure from the Atlantic (where the post was also replicated). But I very much agree with your analysis, and the fact that the larger issue is the anti-circumvention provision of the DMCA, and I would perhaps add, shrink wrap licensing.

I wrote the text of the petition very quickly after hearing the news about the unlocking exemption to capture some of the attention being given to it at the time. My immediate reaction was simply to protect unlocking given my own background with it, but after understanding the larger issues in more detail, I think the scope of the petition should have been written differently. That being said, I'd still like to get it to the full number of signatures, even if it doesn't deal with all the issues involved. In the very least, it shows that the public care about these sorts of policy decisions.

At this point, having been working on this in various forms (via writing, or promoting this petition), I'm now quite eager to figure out exactly what needs to change with the DMCA and to help promote a movement to change the law in a more meaningful way. Working more closely with the EFF, and perhaps Jennifer Granick at Stanford, seems like the best way to proceed. If you (or indeed anyone reading this) is interested in helping, please reach out. I'm in your IRC channel now, and accessible via email/GChat at sina.khanifar@gmail.com.
Unbelievable. They didn't even bother looking at the contents of the page.
I am an Indian born in East Africa ;)
http://www.reddit.com/user/thisisbillgates

Not the best interface, but it is what you asked for...
I blogged in http://advogato.org/person/fxn/diary/498.html some key differences between Perl and Ruby regexp flags (which includes this gotcha).
There is not enough context to judge each action (ie such moves could be bad in specific markets with lot of red tape)

However, by default I'd say there are great ideas, and if they got the boot for asking forgiveness, maybe it's a good thing for your friends - as it it's better to be working where one's value is recognized, than at a company digging its own grave in the midst of a lack of feature, lack of ambition and lack of insight.
I've been experimenting with text summarizers, but the content of email is so subjective that it is hard to make a meaningful summary. Anyone have experience/thoughtspace in this area?
I apologize for the ignorant question, but how does Ruby survive this in normal operation?

"Since Ruby symbols are not garbage collected, this can result in a denial of service attack."

If you have a long running Ruby app,and it does not garbage collect symbols, then those symbols are... constants I guess?That survive till the app stops operating? So I guess the assumption is that no app should use too many symbols (and they don't use much memory anyway?)
The sad aftermath of the story:
http://beaglenetworks.net/post/42828595476/what-i-learned-fr...

Somebody apparently found it necessary to DDOS this harmless internet curiosity so it does not exist anymore. A reminder that people can be wonderful, and people can be just evil, I guess.
That would be unusual, but 80% of a program's performance is generally tied up in 20% of its code. If you can replace the 20% with a couple widely-used C libraries, then you get vastly improved performance without actually having to write much C.

In most cases in Python, the part that one would consider the application proper is entirely written in Python, which use Python libraries that wrap around C libraries to do the intensive stuff.

Your comment was a non sequitur from what dnu said. Please refrain from attacking arguments with straw men - they add nothing to the discussion

Edited for tone:
s/Quit with the straw man arguments/Please refrain from attacking arguments with straw men/
Can you define Pirate party politics? When you think about it's not party, it's movement and because of that it should ugrently define coherent politics or it will be 'less elected'. Pirates don't have consistetnt politics! I had impression it's center to left, but talking to some member i got impression that spectrum is from total right to total left. Btw i'm (still) party memeber, but i don't freaking like when some conservative facebook hipsters (that, for example, don't know anything about GPL) talk about what it's all about. Sad stuff :-(
If you find this interesting, you might also find this article in Communications of the ACM interesting:

Michael Cornwell: Anatomy of a Solid-State Drive

Communications of the ACM, Vol. 55 No. 12, Pages 59-63

http://cacm.acm.org/magazines/2012/12/157869-anatomy-of-a-so...

Alternative link in case the first is paywalled for people not on a university campus: http://queue.acm.org/detail.cfm?id=2385276

It goes into quite some detail on how SSD storage works on a system level and how it differs from hard disks.
Gates has a long history with BASIC. It would, IMO, stand to reason that he would keep his hand in.
Crittercism's Mobile Developer Playbook [infographic]
I use exact gem versions because experience shows that even minor gem updates can break the tutorial. (RSpec is particularly guilty of this.) I generally recommend '~>' for more advanced users, but when getting your bearings I think it's best to use exact versions.

That said, I keep the Rails Tutorial and sample application as up-to-date as possible—and in fact both have already been updated with the latest version. :-)

http://ruby.railstutorial.org/ruby-on-rails-tutorial-book#se...

$ gem install rails -v 3.2.12

https://github.com/railstutorial/sample_app_2nd_ed/blob/mast...

gem 'rails', '3.2.12'
I found it while looking at a Buzzfeed article overlaying different countries on the US. David is a friend of mine, and I just found it very cool.
I did not know that. Do you have a source?

I'm not judging Ellison at all. Bill could have done the same, but I think it's cool that he is choosing to oversee how that money is spent while he's still alive.
Play GTA3 on a Nexus 7 sometime. Switch out to another task (or hit the Home button). Let it sit for half an hour, then check Settings -> Battery. You'll find that GTA3 is at the top of the list and is pegging the CPU.

Their workaround for not obeying the Activity lifecycle is to display a persistent notification that the game is running. This is is not a solution for their actual problem, which is that they have no way to serialize the game's running state, and thus will lose any unsaved game data if they do obey the lifecycle and let their app get culled. This is evidenced by the need to go to the ingame save points in order to save your game, like on a console.

Even if the game is open in the foreground, there is no reason why it can't give up its wakelock after a period of inactivity. Obviously this is a lesser issue as you have described, but it is still contrary to the UX of most Android apps.
Java 8: From PermGen to Metaspace
I wasn't sure of this, so I looked it up:

http://cms.givingpledge.org/#larry_ellison

The full letter is an interesting read
Sheesh, guys. If you take every single piece of advice you read on a blog as a black-and-white gospel that you should never, ever disobey, then I fear for your ability to create.

Ask for forgiveness is to prevent you getting stuck into analysis-paralysis (as much as it grosses me out using business-speak like that, the term fits).

The top comment here as of now, about exposing a firm to $5b worth of risk?

C'mon... Do really think anybody is actually advocating that?
Python's YAML library is also capable of serializing python objects[1]. My understanding is the YAML spec allows these extensions but does not require them.

If you are using PyYaml.Loader instead of PyYaml.SafeLoader for anything coming from a user, you are at risk of this problem.

http://pyyaml.org/wiki/PyYAMLDocumentation#YAMLtagsandPython...
You're first problem is actually caring. I walk into coffee shops all the time and stay for a few hours while working on the road.
Updating Rails (an article with details and advice):

http://railsapps.github.com/updating-rails.html

Let me know if I got anything wrong. It's for anyone who is not sure how to upgrade to a new Rails version.
So basically this attack relies on putting a not-blacklisted identifier on the first line?

How do you then get rails to assign it to the correct (blacklisted) identifier?
Paying Top Dollar for Condos, and Leaving Them Empty
If SEO is provably effective, it is by definition not a cargo cult. The defining feature of a cargo cult is that it's questionable at best whether their practices lead to the goal they want to achieve (e.g. making fake walkie talkies and yelling into them hoping that a plane will drop cargo because you saw someone with a real walkie talkie make that happen).
I think you just proved the point here: SEO can be very valuable. Any good SEO would point out to the BBC that having similar rules for User-agent: Googlebot-Mobile and User-agent: * is not very efficient.
There are units that aren't meant to turn an immediate profit - such as R&D labs. And Oracle people very well know that, as any competent corporate manager does. So yes, a rational corporate manager is very well willing to say "we don't have to turn a profit because we're part of the whole corporation and can contribute in other ways than selling our reputation for a handful of ad dollars".
And even for turning a profit, there are better ways than forcing crapware down users' throats. After all, they have enough sense not to put porn banners (which probably would pay handsomely) on their download pages - why wouldn't they not have enough sense to not stuff their product with unrelated crapware that nobody wants?
And the house would be the White House (in the sense that SEOs aren't just working against Google but against its billion users).
For all the complaints in the Python community that Django contains too much magic, Rails is far more magical; and that magic add complexity that allows these kinds of problems to show up.

That is not to say Django doesn't have issues; it undoubtably does. I just think the hidden surface area is smaller.
While, you are correct that a lot of innovation and "cool stuff" has come from government programs and funding, I would disagree that "most" of it is because of government funded research.

Can you prove to me they wouldn't exist otherwise? People like Tim Berners-Lee didn't come up with the ideas they came up with because they were government funded. They created things because they were innovative and smart.

The fact that YC exists is proof that government programs are not a prerequisite.
also if you have done require 'json/add/rails' you are in for fun (https://github.com/ruby/ruby/blob/v1_9_2_381/ext/json/lib/js...)

irb(main):001:0> require 'json/add/rails'
=> true
irb(main):002:0> class Foo
irb(main):003:1> end
=> nil
irb(main):004:0> Foo.json_create({"x" => "bar"})
=> #<Foo:0x007fc5f3149540>

https://github.com/search?q=require+%27json%2Fadd%2Frails%27...
Adaptu users saved - migrate to CalendarBudget
I used to agree with this, but lately I feel like any learnings are going to have a short shelf life. With the EMD updates and on-going refinements to Penguin, how long can any truly effective hack really be expected to work?

I'm glad Google is cleaning house b/c it became annoying trying to counsel people to not violate the Webmaster Guidelines when they could point to successful competitors or some backwater infomercial claiming they could shortcut their way by spamming.

The best strategy I've found is just to not shoot yourself in the foot in terms of site structure and IA, and invest in long-term value through link building with PR and content that naturally attracts links.
Engineers design new synthetic biology circuits that combine memory and logic
Bill Gurley: The sage of Silicon Valley
Wow, that's literally insane. Yes, let's see if we can undermine this elegant and stable natural process that has evolved over billions of years so that we can avoid the uncomfortable experience of reexamining the assumptions of our economic system.
I'm curious what someone's sex has to do with their ability to conduct an AMA...
The Man Who Killed Osama Bin Laden... is screwed
The initial quote is a good summary about the thing I find must annoying about Go. They constantly imply that programming research is useless in the real world or at least impractical, and use that to ignore the last several decades of progress. Then they try to turn ignoring research into a virtue!

It essentially presents a false dichotomy between programming research and programming practice. This is particularly unfortunate because the most practical and productive languages I know are the ones that embrace theory like OCaml and Haskell. After all, most programming research is all about being more productive in some way, and tends to approach the problem in a very organized and disciplined fashion, usually building on past results.
What's he using to buy all his boy's toys, like yachts and plans and sports cars? Or is that just a meaningless percentage of his wealth?
Interview: Six Year Old iOS Product Manager
Psicologia
Articulos de rafael santandreu
MDot acquired by GoDaddy
And without pretending that he can fix the world. Which is fatuous and provides a cover for business to continue as usual. Ellison is satisfied with being destructive in one domain of affairs. Gates isn't happy with just screwing up computing. He has to poop other people's parties, too.

Give me Ellison over Gates any day.
Recognize opens to the public
This is insane.

Awesome, useful, and cool, but insane.

I like it.
The same reason craigslist classified haven't been surpassed by a more modern system -- it is much easier for everyone to live with the shortcomings (which really aren't that bad) than it would be to recreate an equivalently large, diverse and vibrant community on another site.

Especially since any focused site that came up to do this would almost certainly put way more barriers to entry into the community than reddit (which still allows you to create a new account virtually instantly, with no email verification) has.
If you're "doing business" in the United States, you're subject to those laws. This is just how it works.

If you're sued and you don't defend yourself, you will probably lose by default, so you can have a judgement enforced against you. This might preclude you from travelling in to or even through the United States.
Tesla CEO Blasts New York Times —Says Car Review Was 'Fake'
The same problems will still exist.
Mecanica de motos
Curso completo de mecanica de moto
Elon Musk calls NYT review of the Tesla Model S ‘fake,’ citing vehicle log data
Q: "Anything left on your bucket list?"

A: "Don't die..."

He has some humor too :P
Lobbyist requests and committee member proposals (EU Data Protection Regulation)