skysight-inc/HackerNews huggingface dataset:
Let's get specific, because there's a point here that I think a lot of people are missing (including tptacek).

ActionDispatch::Routing::RouteSet::NamedRouteCollection.add calls 'eval' on the property name passed to it. This invites exploitation. It also fails 'static_typed's desideratum of each component having a single responsibility. And I don't think calling it "magic" is too strong.

I don't know to what extent the Ruby culture encourages calling 'eval' in random API routines like this, but when I previously argued here on HN that that had to be a bad idea, I got some pushback. I would certainly call this a dangerous anti-pattern.

EDITED to add: reference: http://rubysource.com/anatomy-of-an-exploit-an-in-depth-look...
I would also love to see this. I have found a few in the past, but they are very out-of-date tables.
At the University of Leuven (Belgium), from this year on, all first year engineering students learn how to program in Python. Not yet an official reference to it but professor Dutre who teaches the course mentions it already on twitter:
https://twitter.com/philipdutre/status/279716437982064640
https://twitter.com/philipdutre/status/301760614416674816
Let's be clear, this is a type conversion issue for seconds, Excel's not going to start adding up normal numbers strangely.

And the point of this article and the point he's trying to drive home is that it lets non-programmers actually use their computers for computing.

For most businesses a home-brewed excel spreadsheet vs a $50,000 custom program that any of us here wrote?

The harsh reality is that the Excel version written by Jane from accounting who's the Excel whizz or even the smart college temp will probably be better and cheaper than anything we could ever give them.
> It could just be that this is his big project and he is overly sensitive to (some of it admittedly unfair) criticism to the point where he'll see malice where there is none.

This is obviously the case. Musk overreacted and will end looking like a fool.

But he has a lot of goodwill; he can afford to spend a little.
The first thing you should do is talk to your boss about it. Tell him why you're unhappy and see if he can help. If he values you as an employee, he'll bend over backwards to make you happy and prevent you from leaving. If not... then it's time to leave anyway. Full-time freelancing might be an option, but it's harder than it looks. You may just want to look for another job.
Generating native code seems interesting, but the language choice is questionable in that scenario.
The districts don't have to be the same as the states.
It's true that the need for instruction scheduling is reduced in an OoO processor, but now you're comparing it to a processor that does not do OoO and hence needs to expose its entire register set as architectural registers. A compiler for an OoO processor still needs to be aware that under the hood there are 160 registers that can be used instead of 14 (at least if it wants to generate the most efficient code).
A Startup CTO
Concentrating on the other company: A Google search for [python hosting] doesn't even return them on the first page of hits; it returns a bunch of other companies offering hosting for python (the language) stuff or questions about hosting python (the language) based stuff.

You offered them the limited "python cloud hosting" and they refused? Baffling. Good Luck.
Why not simply doing a retest? Seems easy enough, it's still winterly cold …
I don't read the comment in question as picking on Rails either ("... frameworks like Rails", it says).

Please see my comment downthread.
The NYT upgraded their paywall this week, so there is a good chance that most of HN did not in fact read the NYT article before commenting on it.

Also, there is a disturbing amount of herd mentality in these comments; people are instinctively shielding/supporting Elon Musk, a fellow techie, rather than the "interloping" journalist, even though even a cursory Google search of other reviews of the Model S, the Roadster, and other manufacturers' EVs will show that they all suffer from the same battery charging/status problems.

It should also be noted that Elon Musk has made public misrepresentations in the recent past about competitors to SpaceX, in particular, about the cause of Boeing's battery problems, and he had a history of making similar remarks about credit card companies while he worked at Paypal.
Not really given Coinbase is YCW12 IIRC.

But still this is awesome, the word bitcoin is 1 click away on every comment. The community over in /r/bitcoin has been asking for this for what seems like forever.
You should begin to look for client.
If you find something cool, ask for a big salary rise and tell them you can find your own client and want a promotion.

If yes, big salary, you chose fun projects : WIN.

If no, you leave, make fun project and big salary if you can chose them : WIN

NOTHING CAN FAIL ON THE WEB
RANT you don't need to read, but I have to write.

I recently have the "opportunity" to use Windows and MS office products after 10year or more absence. And Holy Fuck does MS suck at making usable software products. Almost every single UI/UX choice they made is wrong. They ask for confirmation when it's uneeded, they blithely fuck shit up without confirmation when should ask. 4 bazillion tab bars filled with crap. Simple things are hard to find or do, every suggestion / guess is wrong. Things they should guess (such as ',' is the delmeter when importing a file ending with .csv and filled with csv data) they don't. On and on.

Really the most frustrating experience since trying to buy a Nexus 4.

The only reason most people don't suffer this is they've been slowly acclimated to this crap over many years of Office's evolution to below the bottom.

The other MS product I use regularly, xbox and mobile glass or whatever it's called, both also have fucking horrible UI. But half of that is them wanting to force thinly veiled ads and up sells at you.
100ms in table: PBKDF2-HMAC-SHA256 with an iteration count of
86,000; 5s: PBKDF2-HMAC-SHA256 with an iteration count of 4,300,000 (see page 13).

If you're using the slowest possible algorithm/biggest number of iterations, you're still vulnerable to parallel attacks: imagine a huge number of cheap chips bruteforcing passwords. Scrypt tries to maximize the cost of such chips by requiring large amounts of RAM for computation. Again, this is explained in the paper.
Costa Concordia ship wreck on Google Maps
In my own car during day to day driving? Of course not. If I was reviewing a car and was told that it was OK? Of course! Don't curious minds want to know if the missing miles will actually return on their own? It's not like his life was in any real danger, or that he was late for work or something.
It seems like Dropbox is using the native Chrome PDF viewer on Chrome and PDF.js on Firefox for PDF files.
"I do wonder if the postal system could step in by offering a service which you could walk in - show your passport or supporting ID and have them issue you with a rest code which you could use upon the site."

Was that a joke? You want to insert the government in the middle of every password reset? What about password resets on Sundays or after 8pm?
But small states aren't all rural, and even some of the ones that are elect fairly liberal Senators. Vermont is the classic case, but Democrats from the Dakotas have been almost legendarily liberal, too. Hell, Tom Daschle was Minority/Majority Leader.

And liberal Republicans get elected from small states, too. Remember Lincoln Chafee?
...or Unity or MonoGame (even better!).
Ask HN: What's up in SF?
Hey. First time here in SF (I am currently staying in the Castro area).

I am just visiting (kinda looking for a job, also meeting with some people I know, and just traveling - I just graduated uni and always wanted to come here. And will likely be here for a little bit longer) but am looking to meet some new people. I am planning to head down to Silicon Valley area / Palo Alto and what not one of these days.

So if anyone is free/bored and feels like grabbing some drinks I would be down. (Or go clubbing, coffee, roller skating, I am up for most things). Or if anyone else is new to the area I'd be up for doing some touristy stuff!

I am also interested in checking out some startups. So if anyone has hookups to see Google, FB, or really any company that would be neat!

Oh, this is me: http://www.linkedin.com/pub/jordan-howlett/59/37b/a42

Has links to some of my main projects and my github!

me@jonovono.com
When other people are looking after your affairs
"There is pretty standard protocol and work agreements for automotive repair. "

We don't know the specifics of the agreement in question, but there's a general overarching 'protocol' in the services economy - I do work for you and you pay me. If you don't pay me, and your 'protocol' is to ignore my invoices... you reap what you sow.
Elon's complaints have been silly from the get-go.

When a company reviews your car, they don't use the standards which you want them to use. They don't do things precisely as you want them to. Reviewers make mistakes, they are new to the equipment, they don't know everything about your car. And you know what?

That's a great thing.

Electric cars, specifically, are unique products. They are novel, new (well, technically they've been around for a hundred years, but haven't been common for the past eighty or so). People don't know what to think about them. Average Joe Sixpack from the NYT treating this car as a normal driver would, and providing us his opinion, is a godsend.
If his only defense is bad advice from a marketing person, then this reporter has not adequately protected himself in this situation. This was a product review, and if he had used the product in the same way that any other consumer would use it then his only misfortune would have been some extra charging time. It's possible that if he had spent the extra time charging and then reported that, then Tesla and its obstreperous leader would have responded, "don't pay attention to the gauge on the screen, just listen to our marketing dude!" But that wouldn't have reflected as poorly on Broder as the current situation does.

This is true even if you assume the best intentions from this reporter: he should know that Tesla is his adversary in his search for the truth and they will not suffer criticism passively. Many on HN and in the general public do not assume the best intentions of any reporter, and in light of that reporters should conduct themselves even more rigorously.
related, from the creator of Google Reader: https://avocado.io
Some states have official tolerances codified into law, usually 5-10 mph, depending on the posted speed, road, how the speed was measured, etc.

http://www.mit.edu/~jfc/laws.html
They're hoping to cash out in lawsuits.
In 50 years society will look back on this thing, much like we did with the computers of the 1950s and laugh.
It's definitely a mixed bag.

Rents here are now incredibly high. If you talk to residents who got here decades ago, people like this wouldn't have been sleeping on the streets back in the day. They would have clubbed together to get a crash pad. But that's implausible now.

Those high rents are being driven by the tech boom. There are a lot of startups in SF, and the various peninsula buses have made it much more plausible to live in SF but work in Mountain View. Building managers near GBus stops have flat-out told me that Google buses are a big driver in rising rents.
Shortcut. Shortcut. Shortcut. Shortcut. Shortcut. If you use cloud services to shortcut your infrastructure, you are not in control. Use another provider for your billing system, you are not in control. Same here. You are not in control so you have no reason to complain when they try to make money. If you want to do it right, just use some software that keeps the comments and all infrastructure on your site. Simple. Or better yet, write your own. It is not that hard at all.
Being able to read books, meet new people, and reflect all day, every day seems more mentally stimulating in certain ways than working in the same field for 5, 10, 20, 30 years.
I second PayPad - it covers pretty much every use case you'd have on the go.

Although the push notifications do get annoying, but I realize that's a good problem to have :)
It's not a generalization. He's saying that since he's American, he's "local" and can challenge it in American courts, while the firm who built this site is European and cannot (as easily). It's much more difficult for a European to sue an American company for failed payments.
The founders are farmers. Their families have ties to many other farmers in the Midwest. The company is based in Ann Harbor to leverage this legacy network. During YC, they made deals with farms in California and expanded their network.

It's 2013. Are 20 something year old farmers supposed to be wearing suspenders, sucking on wheat, and carrying pitch forks?

Let's be a little more supportive. Advice on how you think a young company can get around these legacy relationships would be more helpful.
The post office idea doesn't solve all that much. People tend to conflate two different problems:

* Is the person real with a legal presence somewhere?

* Is the user the same unique person who logged in last time?

Most websites need to establish uniqueness rather than real world identity. Giving websites data about real identity actually puts the user at greater risk. Do I have to enter a social security or driving licence number online so the post office can link the accounts?
I don't have strong feelings about people using Excel to get things done. It's a GUI for data processing that could otherwise be done in the shell. That's fair because I wouldn't expect normal people to learn the amount of programming you'd need to match what you can do in Excel.

The problem I have with it is the same for any data in a proprietary format: It needs to be exported to something else before it can be manipulated. LibreOffice seems to do a good job of decoding .xlsx files so it's usually not too much of an issue. When there's functionality in a spreadsheet that can't be interpreted by an open source equivalent, then it becomes a problem.
"Tesla Motors initially expected to sell at least 5,000 units in 2012 and set a sales target of 20,000." (1)

As of January 2013's run rate, it takes GM 72 hours to sell that many cars. (2)

How about a comparable luxury target?

MB did 305,072 vehicles in 2012, so they do Tesla's sales every 2-weeks. (3)

Perfect comps? No way, but still . . .

To call Tesla an "early adopters" brand where you're going to run into some bullshit, is an under-statement.

I was considering a Model S as my next vehicle, and even if the NYT article is accurate that dissuades me zero percent. I get that this vehicle is going to have some problems - BUT IT'S ELECTRIC AND BIG AND SEXY AND FAST AND NOBODY ELSE HAS ONE!

But watching Musk's response to going full-Nerd-Nuclear (without CONCLUSIVE data) to trash a journalist and the institution of the NYT actually does give me pause in wanting to support that brand.

In other words, in my personal case (of one person, one piece of data) Musk is damaging Tesla's goodwill more than he's helping it.

(1) http://en.wikipedia.org/wiki/Tesla_Model_S

(2) http://www.gm.com/content/gmcom/home/company/investors/sales...

(3) http://www.cleanmpg.com/forums/showthread.php?t=46221
In a perfect world, there would be clauses in the contract explaining what happens when there is a failure to pay.

Of course, we have no idea if there even is a contract.
You can turn the "feature" off... It's in settings.
Yes, that's correct. Art assets can be licensed however you like.
I was referring to the fact that the contract was international, not to the nationalities of either party.
There's plenty of reasons to choose local though:

1. Keep money in the local economy.
2. Build a local network.
3. Have face to face meetings to get your ideas across more quickly - whiteboarding, seeing facial reactions to comps, hands-on testing, etc.

I've done remote work, and I've done work with clients in my local area. There's reasons for both, but most clients I work with want local, or at least want the ability to meet face to face on occasion. The few that didn't want to (or even declined attempts to meet f2f) either skipped out on their bill, or were wanting extremely commodity services (install wordpress on my server, fix this javascript error, etc).
This looks pretty cool! I wonder if this gives you access to shaders, or if this is a planned feature? That's one of the things about AndEngine that I really like, and is one of the reasons I switched from HTML5/js engines for making mobile games.
Because of air drag which is proportional to the square of the velocity. At highway speeds, a large part of the energy consumed by the car to move at constant velocity is spent overcoming air drag. I think that's also why they are calling him out on going 60 mph on cruise control instead of stated 54 mph.
Might be mis-reading, but I took his comment to mean just that it would be harder for an international company to resolve this through the court system here in the US (and thus other approaches become more attractive).
>Governments do not take your money by force.

So everyone pays taxes voluntarily? Glad to hear we can get rid of the threatening language used in tax forms... clearly superfluous.

Back to reality, with a thought experiment: imagine that government subsisted exclusively on voluntary contributions. No threats of fines, interest charges, or arrest and jail time. In other words, like an actual charity. That is the difference between force/coercion, and voluntary action.
Analytics Academy Lesson 0: Think Differently About Analytics
You should add Canada
I had a similar experience, combining Excel (and VBA) with Perl and some other toolsets. I tend not to get too specific on here, but this allowed me to survive a major downsizing and extreme lack of budget while greatly improving accuracy and schedules, and to ride out a series of drastic changes to inputs that were "thrown over the wall" to my department. If I were to mention the dollar amounts being managed through those workbooks, people would shudder.

Excel has its cruft, and depending upon what you're doing you have to learn by experience some of its odder and dimmer (danker?) corners. But, that aside, IJFW. And quickly, and without choking.

That said, if you don't know what you're doing... Well, I had to "correct" a lot of people who assumed that because the machine showed them a number, it was right.

Excel will not enforce correct design, nor thinking.

Which reminds me of some crap dBASE programming I had to clean up, some years prior. And any number of other things.

It's not Excel. It's the people using it, and the people who assign them to use it without accounting for those people's limitations (and their own, apparently).
Of course it is. Stop at the gas station for five minutes, fill 'er up, and go on my way.
Thx for the advice. The problem is I do not think they will change what they do because the company is doing great and generates nice income and I have talked with my boss and most of the time he says he listens for advices but he doesn't.
I think you're reaching a bit here. When the Constitution was written there were thirteen states along the East coast. There was no California for an elector to travel from to go to D.C. to cast their vote. I have never heard of the travel time as a reason for the inclusion of the Electoral College in the Constitution. I seriously doubt that's a justifiable reason for such a thing.

I'm curious as to what problems the EC causes that you state were acceptable in the 1800s but are no longer acceptable today. From my perspective the problems would most likely be political in nature. So any problems that existed 200 years ago would much be the same today.

I'm not the biggest fan of the EC but I believe it more desirable than true Democracy, as that only leads to mob rule. In that case the states with the highest populations would be in a position to rule over the smaller, less populated states. This was part of the debate of the EC in the first place.
Did anyone else find the headline a bit confusing? I got the feeling that they had abandoned RoR for another framework and almost skipped the article itself
> I am considering of going full time freelancer, the only problem is I am afraid of not earning enough money to pay everything I can afford now.

Well, this may seem obvious, but you must either decrease your income expectations or your job-satisfaction expectations. Expressed algebraically:

JSE = 1/IE

Where:

JSE = Job satisfaction expectations

IE = Income expectations

Simple to express with an equation, but probably not very useful.
If your browser started storing everything on your harddrive your computer would likely come to a crawl. The problem is RAM space, not HD space.
Well I'll be damned; after some more research, it looks like it WAS ported (unofficially) to OSX. That said, I'm not sure it works with the original language anymore.
I hope you're familiar with the costs of battery attrition which accompany owning a pure electric car.
No, but that's just the point. It's smart enough to know that at key-on, it has very little information about the actual fuel level, so it allows the needle to move rapidly. As it continues to operate, it gradually (probably over a few seconds) filters the fuel level measurement more, so you don't get rapid fluctuations while driving.
The Super Bowl Ads, Always a Delight.
Thanks! It's still really early, so I'm not really sure what's going on and if Ryan still wants to do them or not. I don't know about any other sites that run liveblogs, but the residual traffic never really made up for the massive amount of engineering and ops work that needs to go into the events so I'm not sure.

They sure are a hell of a lot of fun though.
Sorry, Google tried to solve the problem of 'mismatched' titles in their own unique way. Since "Senior Engineer" at some persons previous job might not compare to what Google called a "Senior Engineer", Google delayed determining what your "pay grade" was until after you had done some work.

So Google would hire you, you would spend 6 months being useless trying to figure out what the heck was going on, then you'd get on a starter project or some first "real" project, and 12 to 18 months later your manager would put you in front of a committee of folks who would look at your work output, and then pick what "slot" you were.

If you were slotted "lower" than you had been hired at, they had a talk with you (and it meant you couldn't get a pay raise until you had been promoted twice). It also had an annoying tendency to slot people who had been "Principal Engineer" or "Distinguished Engineer" at a previous company into "Junior Engineer" at Google, which really pissed them off (and sometimes lead to "management action" in the form of a formalized "performance improvement plan").

Basically the more senior you were, the more likely you were to wash out. Since Jeff was a "Principle Engineer" at eBay prior to Google I'm guessing that this was his path as well. Probably got slotted as 'senior engineer' (which is three levels below Google's equivalent of Principal Engineer) and said "Screw this, I've paid my dues already, see ya!" But that is just speculation on my part.
Korea’s Black Day: When Sad, Single People Get Together
I can't see a community like this surviving if a lot more people join in. The article describes someone refraining from 'panhandling excessively', but if you have more people, there will always be those who think less for the benefit of others