skysight-inc/HackerNews huggingface dataset:
If you actually learn Rails and aren't just piecing things together until it works

This kind of defensive attitude isn't helpful, I'm quite familiar with Rails since 1.x thanks and want to see it improve, particularly on security issues. I use it every day. I've only quickly looked at this page but as it contains many common antipatterns, and some straight up vulnerabilities, I think it'd be worth fixing everything on it if possible. Having read the above list I'm starting to think I'd be best to convert all params explicitly to the expected type before use, as Rails accepts many varying types for params and this has increased the attack surface. I'm actually pleased there is a spotlight on Rails security right now though as things will improve - much better than no-one but blackhats being interested.

I highlighted two vulns from the list, one in Model.exists? which is expected to take an id param straight from user input, and one in Model.sum,count etc which is more serious but less likely to be encountered as it requires using a column name straight from user input (not advisable). Neither of them take sql as the first argument, one is intended to be an id, and the second a column name. While the above example is a misuse of sum in my opinion, I think Rails should still be a good citizen and deal with it, given the common pattern of Model.query(params[:xxx]) which can be very useful and which many people will pattern their other usage on - any method which takes params directly and not raw sql (i.e. not the ones you list) should I feel be protected against sqli, even or especially if it is not a commonly used one.

Taking security seriously (even if it means inconvenience or working around common user errors) is not FUD, it's a worthwhile process and one which Rails should continue with.
He likes the application and has gone through a lot of beta testing with friends. The problem seemed to be that he was not willing to put more effort into pushing the project.
Carefully applied violence is often useful and even socially accepted. It's both sad and interesting.
Project Andiamo
Ask HN: Continues documentation for Github?
I'm an open-source developers on Github. I have many small and big repositories from one to one-hundred contributors in each project.

My main problem is with contributors and the projects is that when a new contributor come and ask me about the project, I have to describe whole project, methods, functions and... to him/her. That just waste my time.

I need a system that read my code from repository and build my code documentation (using document generating tools, Doxygen etc.) after each commit, so I have my updated document always and I can refer all new contributors to this document...

Does anyone know a system/solution like that?
First Rolling Release ISOs Available for PC-BSD
Digital Salt: What app makers can learn from snack makers
Yes sorry about this. The site - GetInspired365 has two parts to it. One part which is a daily dose of inspiration, and another which is where users can submit inspiring things they've found - a user has posted this video on to the site and not included the source and as such may be a bit frustrating. The original source is here - http://www.youtube.com/watch?v=ltun92DfnPY
Yes it will be possible to have a user with a feature phone to auto check-in but that will be from an application level. My company http://www.saya.im has a chat application tailored to feature phone and one of the features is a geo-location chatroom. We are able to do this using cell-tower id's and triangulations and augment that with the phones IP address. There are open-source cell-tower id databases like http://www.opencellid.org/ which can be of help. Also you may want to think of a Java ME app to implement this.
I'm an atheist. I don't have a "favorite theology" but I understand some religions better than others, the original point of this discussion was a supposed inconsistency in one of them, and I find the subject interesting as an intellectual exercise. Now will you stop being needlessly confrontational?
You bring up attempt, but we both know perfectly well he did not attempt to distribute papers. It's clear at this point you are arguing in bad faith and making specious arguments.
Growing the Next Generation of Hackers
I don't think anything has touched me this deeply for years. I even got a little teary (which is rare for me).

A lot of this I can relate to. School was hell for me, and I still struggle to forgive the adults around me during that period who, despite knowing what I (and others) faced, failed us utterly. Of course, school is rough and tumble - but when things went too far they sympathised, and in some rare cases talked to the bullies parents. I don't ever remember anyone being excluded or punished properly, though.

One thing I am never, ever, going to tell my kids is the stupid "sticks and stones" rhyme. That's just to make you feel better, not them. I'd get depressed, or upset, and get hugs and sympathy, but no solutions.

The first guy he describes in this video I can relate to. I became withdrawn, anti-social, believing that solace was in books and learning rather than other people. Fortunately I ran into some people at university who slowly dragged me out of myself. And, eventually, I met a girl who tore apart my world and helped me rebuild it (although, maybe she didn't realise at the time, I'd got so good at hiding everything away).

One particular idiot at school loved to taunt me, hold my upside down by my ankles. One day I snapped, and as he ran at me I picked up a chair and swung it. So. Much. Trouble. I was very nearly expelled... The same guy was a consummate bully, big, loud and evil to anyone weaker than him. There was another kid in our class, a bit large but it was more muscle than fat. He was lovely, quiet and very very odd (I think he came from a bad family). One day the bully was shaking down some younger kids in the playground and, I remember this vividly, this guy just decided enough was enough. He calmly walked across the playground and threw bully against the wall. Pounded him in the face a few times and told him to stop. It worked, so so well (he was excluded of course, but there you go...), and we rarely suffered again.

What does this teach kids? That there is no justice in the world except that which you take by violence?

I am certain that school ripped up several years of my life, and still adversely affects me to this day. But what can we do? Kids will be kids, eh?
It is actually really a blast, enough so to cause these sort of really frustrated "it's awesome but it's awful" threads. It is a weird combination of open world architecture combined with really stupid minions. What is in reality probably an AI mistake really feels like massive stupidity the twentieth time your mason seals himself on the wrong side of a floodgate. You spend hours getting things set up just so and then a megabeast comes and seals you in your fortress and your dwarves go mad and start murdering each other for lack of a sock. Or you decide what the world really needs is pressurized magma cannon and spend a couple of real life weeks and countless in-game years and dwarf lives getting the pump stack to work, only to find out the first time you try and use it that the pressure system doesn't work and what is supposed to be a raging torrent of molten rock is actually sort of a sprinkler system. Of molten rock. And you haven't devised a purge system yet, so your half working masterpiece is going to have to be taken apart very, very carefully by a bunch of idiots. (This is not hypothetical; it happened to a succession fort that went by "FailCannon")

Not for nothing is the community devoted to megaprojects. Not only are they cool they offer countless ways to introduce Fun into your boring, dreary existence. And sometimes they even work; the "minecart shotgun loaded with gold bars (because, why not?) complete with optional F.R.O.G.G.E.R. system is just a gorgeous thing to watch happen, and it's viscerally satisfying to watch some goblin take a gold bar going a good 30, 40 mph to the face.
Because if they did, they wouldn't be current Google employes anymore?
> it should not get more complicated as more is discovered

But it does for the simple reason, that you need to read more and more papers just to know whether or not someone didn't already do your research, or if there isn't already a growing body of evidence against the theory you're trying to develop.

http://lesswrong.com/lw/kj/no_one_knows_what_science_doesnt_...

Scientific progress is about to hit a self-complexity boundary due to the amount of knowledge we amassed - we have a huge overhead on adding any single new piece to a puzzle. Our brains are not good enough for handling it anymore, we need computers to help.

EDIT

And also because of that, I believe there's a huge amount of undiscovered facts lurking in all the discoveries we already had described, that no one noticed before because it requires correlating different papers from different disciplines (think about the more messy fields, like biology/medicine). Finding a way for computers to effectively do that work for us will likely result in some amazing progress.
Most of the innovative products are designed and developed in silicon valley. And most of them prefer Mac over PC. Because MAC is beautifully build, it creates some innovation in the field of personal computers. So the they uses the mac in their demos. And rest of the world follows the trend.
And also because Apple is also treated as luxurious brand compared to PC
Starfish: A children's book about the fate of technological civilizations
Interesting article, but I think that the humans will probaly evolve in ways that will extend their capacity of understanding.
It may start by people living longer and then someday they will have memory implants and maybe even processing power implants.
Here's a reason to use the :before + attr() combo: Combine it with media queries to progressively display more flair content when more space is available. Check this CSS Tricks article to see what I mean: http://css-tricks.com/css-media-queries/

Really cool stuff.
Why? People are still perfectly willing to buy. Just not willing to sell. That will just lead to higher prices, not collapse.
> my teacher turned around, saw what happened and turned away.

I want to hope that we'll reach some point where this won't happen anymore.
Which languages do you use?
There's a wide variety of options: Doxygen for C, PHPDocumentor for PHP, literate tools for Ruby and Coffee, etc.
If you describe your software using email, why can't you write the same docs on github using Markdown?
So I wanted to put together some rudimentary search abilities to our application and I installed solr and all that. I wanted to use dynamic queries and found a way to get dynamic queries working. All thanks to Google. This perhaps took less than a day.

However, the search results were not what I was expecting. Searching 'fname + lname' would return all records with the lname field. No amount of Googling helped and I'm still stuck.
I started googling by using phrases such as 'dynamic query not returning results in solr'. When the results didn't solve my problem I got more specific. 'Dynamic query solr with relative boosts not returning results'. No luck. I am learning all about Solr, the schema, eDisMax query processor and all the other good stuff but am not finding any resolutions. Also this process is very exhausting.

I have found this kind of learning to be not stick in memory. Meaning - nothing sits in memory. So tomorrow if an interviewer asks anything about Solr setup - I'll have no answers, or if I have to setup Solr again - I'll have to follow the Google route or follow a manual. Not sure if this is effective but I'd be comfortable having stuff in my memory rather than depend on Google for a majority of my tasks.
The Brilliant Phone Idea Samsung Or Apple Didn't Dream Up
Very impressive animation and the way the youtube video is embedded to the site.
Agree with this, the MYO will find it's best use in combination with other types of interactive hardware.
If you don't want it, ship it to Melbourne! We've been gagging for a light rail link to the airport, which is about that distance away. Unfortunately the too-powerful taxi cartel and the Melb airport corporation keep blocking it because they're making too much moolah.
Firstly, that is not what "efficient" means in the economic sense. Efficiency deals with prices (lowest costs, price = marginal cost). Yes, supply and demand affects prices. But supply and demand in of itself does not deal with efficiency.

I would also say it's a stretch to call this "pent up money." Equity crowdfunding is merely an alternative outlet for your money (the usual outlets being currency, bonds, public equities, etc.). You can think of in terms of substitute goods.

Not to mention that most people have absolutely no business investing in startups. All the best deals are going to go to the established, connected VCs and angel investors who can add value in addition to the money invested.
I can't remember where I read it (There were links I remember from 2 different places, one post was on HN about this but it was all hear say and rumors to grain of salt) that they want or are building a system like Watson to monitor internet traffic because currently they have so much information that its impossible to sift though it all.

Couldn't find it with a google, can't really remember any good key words, so the site may have been a bad source (probably) I don't remember. What I do remember about the article is how it was mentioned that it was a revival of a plan they tried to implement back after September 11, but the plan was leaked and there was enough public out rage the US congress squashed the plan. THAT I remember had reputable sources, I remember checking that out on google. Unfortunately I can't remember the name of the project to get you an article.

Maybe someone who knows what I'm talking about (mainly the later) could link it?

Anyway we won't know what if anything extra they're doing until someone leaves and blabs about it in 20-30 years time.

While I wasn't sure how true that was, I did throw it in the realm of possibility because it sounded feasible.

But I wouldn't blame anyone for considering this more hear say and rumors. :)
Likewise. I remember being backed against a wall, lads a lot bigger around me. I was lifted up the wall punched in the stomach, looked up and saw the teacher almost with fear in her face, too scared to stand up for a student.

Not all of my teachers were like that thankfully, but that is the root of the problem. Teachers are too scared to deal with incidents like mine.
Its the level of management and attention to detail your organization can afford.

At some point people will probably need to fully fund and empower an independent audit organization staffed with the kind of detail oriented savants that will start cutting through a lot of fat.

As has been mentioned above, there are many times that people end up doing work only because they are wired to try and do it cheaply/well.

The rest of the time no one is at the helm.
Nuitka 0.4.0 released - Python to C++ converter
This is outrageous. Borderline corruption (especially the people in-charge of the tendering processing basically getting kickbacks)

Aren't there any avenues to get people fired over this? Talk to a investigative journalist maybe?
Let's go back to the scenario:

> The parrot sees a green key, and a green cup, and answers "color" to "what's same?" and "shape" to "what's different".

For all I know, the parrot recognizes both objects having the same color, and I assume that "shape" means nothing more than "equality" and does not imply attribution of concept or quality, until the parrot can also tell the difference between for example something wet and something dry. In my skepticism, the only meaningful ability of the parrot is to say out loud if the color matches.

Which, IMHO, does not imply as much as you say. There must definitely be some internal model of the world for this to happen. You might be right when you say that there is attribution of quality, concepts, objects, and they share qualities - but I remain skeptic. For instance, an ant will recognize a sugar and react to it, and react differently to for ex. something noxious, but we know that ants are not capable of any complex internal models.

All in all, TY for the reply!
I can't think of an off the shelf RDBMS which can't handle queries on 3 billion rows.

SQL Server can

Oracle can

Postgres can

Even MySQL can (!)

The limitations are almost always in the hardware, not the software.

If you're looking at column based systems, you can look at Greenplum (does both row and column-based storage), InfiniDB (MySQL based), and all sorts of expensive but very fast appliance options like Netezza, Teradata, etc.
At age 9 people used to take my stuff and occasionally bully me in a sort of low-grade way. Until I beat the tar out of the main offender. You get a reputation as the smart/nerdy guy that once smashed the jock's head into a wall and nobody really bothers you again.

Bullying should absolutely be stopped by other means, but when it comes down to it these are animal level dominance games amongst young apes and violence does often solve them. I'm not saying it should, but it does.

If/when I have kids they'll be told to defend themselves and that their parents will back them up even if the school doesn't.
I would go further with your argument (which is perfectly valid for me) for the sake of completeness: it helps them to have a foot in web standardization and, more importantly, to offer a viable alternative solution, fully integrated and "in control". Secured. I don't think it is only a matter of "speed". :-)

Before Chrome they were to the "mercy" of the leader in the market place: IE - with its OS companion MS-Windows, the first "barrier" to the the web. Which is the main playground of Google. IE was not really moving the web forward, and known for a lot of issues. I remember people reluctant to use they credit card on the web, because of their unconscious feelings of MS-Windows/MS-IE insecurities. Stuff evolved A LOT from there. Microsoft IE is now much more respectful of the w3c standard AFAIK, more stable, etc. And as you see, from that stability emerged a lot of business. I could not envisaged so much possibilities if the status-quo was still holding today as in 1998. I would make a bold statement, saying that thanks to FireFox, Chrome, Hackers, we are now seeing all those startups...

It was a very important challenge for Google (and it is not finished) because they have incentive in people using the "open" web more and more, as you told. The more user on the internet, the more time they spend on it, as you said, the more they watch ads/spend money/consume. And I still know people frightened by this "Tool" that they don't understand. Viruses, Credit card number steal, etc. "Who are those guys, the Anonymous hackers?" I was asked not a long time ago. I was visiting friends owning a PS3 when the PS3 network have been closed down because of act of pirating, totally chocked by its useless video games. Etc, etc. Long list of example.

Google understood early that it was in their interest to work on that matter. Those topics will take more and more place in news in the near future, I guess. Google won't be able to sort everything out of course. But they were needing to push further the control of their own fortune. Chrome was a step forward going into the action.

They are still working on that full "Vertical" offer. Chrome was just ONE part of the full scheme. They've released Android, now they are releasing Google Pixel. Tomorrow, Google glass. That must be exciting times at Google because the work of so much year is taking forms, and I guess it will translates in even a better future. At least they are showing to me that they perfectly envision from a long time ago which the treats are and the challenges for their business. And how to tackle them. Facebook, native guis, any other kind of "closed" web (as opposed to open web) are another kind of threats, but that is another story, I guess... :-) .
That is also a valid point - if the way your system is set up, it would cost more than the difference to send someone out for the survey to verify a cheaper model is enough, just throw in the higher model. Though in this particular case, it's clearly not what happened.
> and that it's possible that there's science or mathematics that may be derived by computers that we may not fundamentally be able to understand

I think what the author meant is that us understanding this "new science" would be like trying to run StarCraft II on 386. It's not that it is not fundamentally possible, it's just that our wetware has nowhere near the required computational power.
Thanks for all the great input, especially the stock image and the bootstrap bits. That's since been fixed. It's tough to see this stuff yourself when you're staring at a problem for hours.
As a kid, figured out that by myself. In elementary school I was the typical victim. The words did not hurt me as the random people I don't care about are just that. Their opinion does not matter. However, that changed the moment it degenerated to physical violence. The problem fixed itself after punching the bully right in the nose the second time he tried the same treatment. That changed the parameters for the whole story. Went through the high school years almost without any physical violence. And by almost any I mean: got sucker punched in the 10th grade. Responded with a hook. That was an instant "calm the fuck down" for the aggressor. That was the last time I punched somebody.
The muscles that control your fingers are way back there up your forearm, and transmit the force to the fingers by tendons that go through the wrist. Try grabbing your forearm where their band sits and making and releasing a fist.
For short flights, a heavy jet wouldn't be cheaper. But when you start looking into singles, twin engines or turboprops the prices for a short flight can become very competitive and affordable... especially when time is factored in.
I saw it differently.

To me this looks like a situation where something was said verbally, and then no confirmation or follow up was given.

Wanting to get the quote out, Cisco just made it and sent it. They assumed that it, and any other issues, would get sorted out when the quote got reviewed.

The client slept. Cisco said "Good job sales team".

It is always the job of the buyer to know what he is getting, for what he is paying.
As far as I am concerned you can have it for £1 billion plus shipping costs....

[NB We will have a spare aircraft carrier going "cheap" as well...]
Took that down.
> What does this teach kids? That there is no justice in the world except that which you take by violence?
It teaches me, at least, that bullies get away with what they do because they don't get reprimanded enough. Physical pain is still the best thing to associate with negative or undesirable behavior.
I see a distinct trend when it comes to bullying:
1. Kid gets bullied 2. Kid snaps, stands up for himself, beats up bully 3. Kid does not get bullied anymore
I don't think physical violence is inherently wrong. Excess and systematic violence - as employed by a certain category of bullies - is, but some pain to associate bad behavior with is, I think, a critical part of upbringing and steering behavior.

On systematic physical abuse, this is what happens when you get away with it. See also comment #2 (http://news.ycombinator.com/item?id=5284818); it stopped the moment the bullied stood up for himself and showed the bully, via a serving of physical violence, that his behavior is unacceptable and not without consequence.

Spoiled kids that misbehave at school often are exemplary students at school, simply because teachers are able to get them to realize their behavior is unacceptable. That 'toggle' should also be done to bullies though, and I for one can't understand why not more is done about it in schools besides the rather static and easily ignored 'awareness' lessons.