skysight-inc/HackerNews huggingface dataset:
The first amendment makes no distinction between someone who says "Hey your shitty website is broken. And I'm telling everybody." and someone who sends a private email, hat in hand, saying; "Excuse me kind sirs, but I can't help but notice that your security procedures are somewhat lacking."

And oddly, if one of those is a crime, so is the other.
I'm disappointed. They could have removed the if/else blocks by dynamically selecting the strategy and abstracted the loop. B-

;)

Tempted to send this to my Java colleagues.
10 Lessons from Spring Applied to Java Virtualization with vFabric
Part of it is "customers want it", part of it is because people are taught "abstraction is good", rather than "abstraction can be useful".

So folks abstract everything, because they don't stop to think about whether it makes sense.

You know, just in case the day comes when they need to send requests using carrier pigeons instead of TCP. They never stop to think whether "in a world where we need carrier pigeons, would this app be useful anyway?"
Not every task is the same, and, yes, you will have to deal with tasks you would rather be doing something else - no matter what career you pick - this is why discipline is usually more important than 'talent' (which is a scam, talent is just result of hard work, you always start at zero talent). Keep in mind that even programming that 'rocks' will get old and you will want to move to something else.

Be careful with the definition of 'difficult problem'. Building a HTTP server from scratch is not a difficult problem. Trying to understand a 30 page generalization of financial calculations and implement it on a programming language when you are not a mathematician is a difficult problem. Most programmers, specially 'juniors', have a very shallow understanding of what difficult means. Nothing you know how to do is difficult, it can just be lengthy, only new things / things you don't fully understand are difficult.

This is valid for pretty much every career, really.

The only advice I give to people entering this career is to get ready to deal with the complete, absurd social ineptitude of the majority of technically great professionals in the field. Which is not all bad, with a bit of social skills, you will lead.
When I go to that page, I only see Linux installers (a .run file). Where are the installers for Mac/Windows?
How  to Avoid Hidden Costs in Building a Private Cloud
Pretty neat, though it looks like the sentiment analysis could use some work. There are quite a lot of negative ones on the positive side.

EDIT: Might be useful to expand this into a generic service where people can enter their own search terms.
The option to enable/disable the nav bar seems ridiculous until a website disables it for you. The option is there to re-enable it.
Is it possible to update the title of this post to remove the "affecting JRuby users" portion? The current title will give non-JRuby users a false sense of security.
What an asshole of a name to give chat software, surely they'd heard of Jabber/XMPP?
What part of that seems crazy to you? It seems pretty clear, concise and true to me...
Yep I can only agree with you, and there is some communication issue for the matter of the image/vm downloads.

Some measures have been taken especially if you run from the commandline use the zeroconf scripts from http://files.pharo.org/scripts. However still some issue remain that are currently not nice!

- no full 64bit support (will be addressed but with a 32bit image format this isn't that straight forward)
- missing warning to install 32bit libs under linux (workaround on the way)
- proper packaging (rpm / deb) which installs the dependencies is missing (also, there are some attempts there)
- you have to explicitly tell the VM to run headless or not (I honestly don't know why! :D)

All in all you caught us, we mostly develop on mac, however our test infrastructure is running on linux hence imperatively Pharo has to run under linux. Yet there is some need for proper explanations, installation requirements!
>You wear the same clothing everyday so you are more recognisable?

>That's not normal

that's... kindof the point, no? I'm trying to be abnormally recognizable.

(I mean, to be clear, I'm not a stinky hipster who goes for months without washing his jeans; I have a whole bunch of these things, and I wash them. They are just all the same.)

But yeah, I was joking with someone else I met a bit ago. "Yeah, I wear the same thing every day. Got a whole closet full of these. You know, like Steve Jobs... but without the good taste."
That was probably me messing with you.
Does it speak jabber?
Really good work gkoberger!
As soon as I seen the factory pattern here I had a flashback.

Great parody.
I did wonder how long it would take after reading that comic to someone implementing it.

Congratulations!
Unfortunately, unless I'm missing something, Twilio still appears unable to handle inbound sip
We've been using errplane for a couple of weeks in our node.js app and it has worked out really well. The node.js agent has a more intuitive API than newrelic's beta agent, and the error reporting works great.
Show HN: World newspapers side-by-side, for understanding propaganda
"It Depends" (about the MongoDB Java driver)
Assuming he loses, yes, losing elsewhere and having a circuit split is probably the most likely route.

But who knows, maybe scotus would get bored enough to find it interesting.

I'm betting "no" in part because legislative fixes are being considered right now. If one passes, it would reduce the odds SCOTUS would ever take the case.
>If he'd gotten 3-6 month suspended sentence, even if you thought that was a bit much for essentially incrementing numbers, you'd probably not care much.

And to be fair, if he didn't do things like the AMA, he probably would have gotten the 3-6 month sentence.
Safety is a float - not a boolean.

A more appropriate question would have been:
'How safe is it to store passwords in memory?'
Thanks to our strict jaywalking laws, a notorious serial assaulter is finally behind bars.
"Boring" would be the last thing I'd call it, but you have to admit - it's a pretty short list.

It depends mostly on what I'm reading, if I'm reading a math textbook I usually do more "reflecting" than actual reading, I create small programs like imaginary number calculators, function plotters, etc. that let me play with the thing I'm reading about. With programming books I always try to write something, but make it something different than the examples in the book. Sometimes I wander off to Google and then find out the thing I needed was covered in the next chapter, but you get the idea :)

I usually read fiction only before I go to bed, so when I'm finished reading I have some quiet time. Your brain gets really weird right before you fall asleep, but I guess at least it's something.
He needs to win on appeal for this to go to SCOTUS.
You did forget to quote this part though:

> We’ve also moved to the latest generation of the enterprise-grade hard disk drives — doubling their cache, increasing their port speed, and decreasing latency and access time

It would be nice to have SSD as an (expensive) option for those that can absorb the cost.
Remove TLS version UI (Options > Advanced > Encryption > Protocols)
https://bugzilla.mozilla.org/show_bug.cgi?id=733632
I wonder too. I write a very atypical brand of Java (I like to think of it as "unencumbered Java"). I sometimes even use public fields instead of accessors (o, the heresy).

My best guess would be that you often need to refactor you code to include some of the patterns showcased in the repo (factories, for instance). So developers try to future-proof their project by using those patterns everywhere. This is obviously a terrible idea.

Now for the bitchy part, why does no one ever speaks about the good sides of Java?
Well, great, there's my day. Five minutes ago was an hour ago.
Your nick is apt. Calm down a bit, yeah? He's talking about removing useless configuration options from a prominent dialog, not placing you in a "set of handcuffs."

Except maybe for the cache control, the settings the author talks about are basically useless. Third-party plugins like NoScript are a much better solution. Be honest, do you use the "Disable JS" checkbox, or do you use NoScript?

"Disable Images" can be handy in certain, very specific settings, but it doesn't really deserve a slot in the main preferences dialog.

I don't think the author is advocating the complete removal of these options. I think he's objecting to how prominent they are in Firefox's UI. about:config is the perfect repository for all of these tweaks, and I expect the dialog is already just a frontend to about:config.

His point is they can make better use of that prominence than they currently are.
How do you read RSS feeds in Google+?
Well he was certainly a much more likeable character than Weev, but he also didn't believe that what he did was wrong.

And really, who did Weev harm with this?
Oh, I'm well aware it's leaked that far into real life: it's the well-known Single Party Rule, as seen in the former Soviet Bloc, and in most dictatorships, where there's only one candidate on the ballot. And it's justified in exactly the same way: people don't know what's best for them, so the Party must decide on their behalf. It may be good in theory, but it's a corruption magnet.
This vulnerability is only applicable to JRuby users who use the JDOM parser. JDOM is not usable on non-JRuby platforms.
XSS Vulnerability in the `sanitize` helper of Ruby on Rails
Oh, my, I won't have to go to the gym anymore... Just pay $69.95 and I get the privilege of waving my hands all day in front of my Mac. View my photos and I get a workout too! Wow!
This is a hard one. I'm a geek that loves to try new gadgets/websites and when I find one I like I use it a lot, like Google Reader for example. The problem with Google is I may get attached to one of their products and then a year or two down the road they pull the plug on it. It's happened enough times now that I don't even care to try Google products until it becomes as big as gmail and I'm sure it wont just vanish. Anyways plenty of other good services for taking notes that I can pay for and I'm sure they will be around for a long time.
When the author chooses the distribution channel, the channel is essentially part of the asking price. People are then free to gauge whether or not the asking price is too high, and opt not to buy. Ultimately, the choice of distribution channel becomes determined by both parties, the buyers and sellers, by agreeing on a price.

On the other hand, if the consumers collectively decide to subvert this process and set the price at zero, where does that leave the author? Their message is "I'm going to take your work and pay you nothing for it. Get back to us when you can offer us a better deal than something for nothing."

Which option seems like a better system to you? Technology has made taking content and paying nothing for it a frictionless transaction. Many people here seem to believe that since technology has enabled it, or made it so easy, or made it so difficult to regulate, it therefore must be a natural right that we've had all along, but can only now fully enjoy due to the miracles of modern technology.

If some group on the supply side gains a monopoly, the government in theory steps in and regulates to protect the consumer from price gouging. This notion appeals to us, that when one party in the holds all the cards, they shouldn't use exploit that power to price gouge. Yet when the consumers suddenly hold all the cards, we turn a blind eye to imbalance in power.

I'm not saying that movie studios and record labels should be protected so that they can cling to old distribution methods. But expecting authors, or anyone on the supply side, to offer a price as good as free is not a reasonable expectation.
The point is one should not be punished because he is unhelpful or stupid.
yes, very happy with more cores, and as usual extremely happy being a linode customer.

Would be even happier with more / cheaper memory.

also perhaps a more elastic storage option to stretch/shrink your linode disks, take snapshots (not assigned to a given linode) would be great.
KDE sets its sights on Wayland
Open Business 'Open House' with Balanced
Don't forget about the RESTful interface to the application.
LZ4 is a very fast lossless compression algorithm
Or allow page viewers to move something from one column to the other and have the back-end receive notification so that it modifies its sentiment algorithm automagically.
> Ah, I didn't know that MSN did that.

Yeah. And then MSFT shuttered it for Skype a little bit ago.

Ads: not actually a magical miracle money tube.
The difficulty is not in migrating to a new service when the old one dies; it's in transferring all your old data across to the new one and updating all your other tools that reference it.

With Reader, (apart from historical read/unread/starred/etc) this is as simple as downloading an OPML file and uploading it somewhere else.

With Gmail, it's more tricky. Migrating emails is fairly trivial, migrating the address itself though (unless you own the domain) involves updating all your contacts and changing your settings for every site you use on the internet (auto mail forwarding of course makes this easier).

With Notes, I'm not sure there's a standardised format for exporting/importing from one service to another. Certainly, with different features between each product a lot of information would be lost when doing so.

If you're fine with that and/or don't keep really important notes in the service then it's not really an issue. If you want to ensure they stick around as long as possible, then you need to pick a service that is committed, or one that you control yourself.
We've been trying this out at my company, it's pretty full-featured already. Now if I could just get all my colleague's on board with the idea of a private company chat.
Quick someone write a 'sort' that steals github session cookies. ;P
That is a brilliant story. Especially enjoyable because I don't live in SA anymore. Thanks for making me chuckle!
How you should be engaging mentors
It seems to pretty much always pick http://stackoverflow.com/questions/14761032/infinite-recursi...

Needs some randomization.
Just rebooted and made cat /proc/cpuinfo and the and its 2.27Ghz, so the last of the 8 CPUs is

processor : 7
vendor_id : GenuineIntel
cpu family : 6
model : 26
model name : Intel(R) Xeon(R) CPU L5520 @ 2.27GHz
stepping : 5
microcode : 0x11
cpu MHz : 2266.746
cache size : 8192 KB
physical id : 0
siblings : 8
core id : 0
cpu cores : 1
apicid : 0
initial apicid : 1
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 11
wp : yes
flags : fpu de tsc msr pae cx8 cmov pat clflush mmx fxsr sse sse2 ss ht nx constant_tsc nonstop_tsc pni ssse3 sse4_1 sse4_2 popcnt hypervisor
bogomips : 4533.49
clflush size : 64
cache_alignment : 64
address sizes : 40 bits physical, 48 bits virtual
power management:
offer this man a job NOW!
In my opinion, this is HUGE for IFTTT. I think this may attract more "non-tech" users for their user base, if they can leverage the marketing right for the addition. I've been using SIRI for a lot of my sport scores (since it was added), but I could see this come in handy for text messages updates, or just a summary email after the game. I'm really happy to see them adding this channel to their already huge list of channels!
Sharepoint integration or it's ilk pretty much creates necessity for layers. Hide bad code behind layers is the enterprise motto.
So if I make a post on stackoverflow with the tags "javascript" and "sort", and put some dirty JS in there, could it take down people's browsers?
This is a good start for sure, but as the previous readers mentioned it could use some work. Might consider looking for a series of keywords and adding removing positivity points based on their existance?
That's exactly the point. You didn't pay for it until you gave them their 12/24 months of service fees (or early-termination fee).
I only search answers posted before the comic was released for this reason :) (Also, I block any code that uses the word "cookie")

Plus, I'm assuming that since they let anyone run arbitrary code on subdomains, they've thought this through.
Wow, first time in my life i was able to found a link to the company.com at the header of blog.company.com! Good Linode.
Thanks for posting this. I like your use of make as the CLI. Very simple, and a good starting point for anyone aiming to build a quick Python CLI app.
Such things are hard to judge. I have a feeling that a lot of people (a lot more than usual anyway) have recently transferred their email from an @gmail.com address to a Google hosted custom domain.
From the provided patch: the HTML sanitizer vulnerability appears to be a bug separate from the past YAML deserialization security problems (and somewhat less severe).

The sole change seems to be in the regex that was used to match the protocol separator (i.e. the colon). The change is from this:

/:|(&#0*58)|(&#x70)|(%|&#37;)3A/

to this:

/:|(&#0*58)|(&#x70)|(&#x0*3a)|(%|&#37;)3A/i

Presumably the previous regex allowed an attacker to insert a variation of "javascript:foo()" and get past a HTML sanitize call.
> Powering our NextGen hosts are two Intel Sandy Bridge E5-2670 processors. The E5-2670 is at the high end of the power-price-performance ratio. Each E5-2670 enjoys 20 MB of cache and has 8 cores running at 2.6 Ghz.

http://www.linode.com/faq.cfm#how-do-i-get-my-fair-share-of-...

> We limit the number of Linodes placed on each host machine. We also only place one plan type on each host. In the worst-case scenario, you're splitting CPU time evenly with your fellow Linoders, but are still able to use the full potential of the host if others are idle.
document.location is deprecated^Wcannot be assigned to in Internet Explorer.

javascript:void location='http://5minfork.com'+location.pathname
Supposedly the one in Homewood, not the origional location, but the origional town and ovens is still good. I enjoy it at least, but I grew up on it.
I had a bunch of fun coming up with terrible ways to write FizzBuzz a little while back. My favorites, in Python https://gist.github.com/daeken/1e3c680c20da98c680c4 and C https://gist.github.com/daeken/15769d83b66974335f78
I see some positive ones on the negative side too:

"Batman no!! You can't lose your faith in humanity!"

"You must not lose faith in humanity. [...] - Gandhi"

I don't know how the sentiment analysis is being done (naive Bayes?), but perhaps it could be tweaked to handle this case.
Is this news? Just asking because I have had Pharo 2.0 installed for many months, but it was probably a beta - it would be good to have dates on download files and bundles.

I ask because I tried running "System update" and that errored off. If I am using an old version of "2" then I will go to the trouble of re-installing and reloading my little project.
first of all restful and json are not really welcome. do your JAX-WS first and then we can talk about these new silly things.
On the other hand, with Google Apps you can actually be a paying customer. Maybe the fear factor just isn't there.
I got a sunburn from that page. High contrast legacy monitors do not fare well in that kind of environment. My eyes were going back and forth. The white on red induced some weird ADD.
Poking around the wiki I noticed that work is beginning on GCLI, a gui command line. I'm not sure how it's going to get integrated into FF yet (I saw mention of an mdn command, though).

I love the demo: https://people.mozilla.com/~jwalker/gcli/
What you are suggesting will quickly devolve into barbarism.

Contrary to what? You really think a bunch of people owning most of the land makes us more civilized? That this is not barbarism? HEH.

Oh, and I also mentioned people owning their time and work, so maybe I should have added "dignity" to that and it would have nipped your strawman right in the bud. I just thought it obvious that I am suggesting something less selfish, not more selfish. I suggest shared ownership of shared resources, born out of taking selfish human delusions less seriously. I suggest a bigger focus on stewardship and less delusions of ownership.

But you have a point; this suggestion is not intended for barbarians who think leashes make people better or viable in the first place, just because it's true for them. I simply have no plan for those yet, sorry.
U.S. Patent System Under First to File – BIG Changes for Entrepreneurs
What do you think of the new patent system - good or bad for entrepreneurs?
That is the old 4 core cpu they have been using. We will probably have to wait some weeks before this all takes effect.
Marketing the wrong way
Wow.. beautiful!

I know this is only for fun, but it can start something bigger. Basically, given an input and output we could search for an algorithm that works. It reminds me a talk that PG gave in which he states people making bots to optimize code and then an intelligent compiler could be done. It sounded very futuristic, but maybe it is not that futuristic after all...
This also annoys me.
I almost feel like, as a programmer, you can get "calibrated" to a certain level of architecture or designed-in flexibility, and then any time you have to code something "lesser", you end up adding architecture and boilerplate until it looks like the things you're familiar with.

Look at the HTML5 IndexedDB API, for example: obviously designed by someone "calibrated" to coding web browsers, not someone calibrated to doing web scripting.
CVE-2013-1855 & CVE-2013-1857 are applicable to ALL Ruby users, not just JRuby.
Edit: Sorry - I posted too soon. The installers for Windows and OS X are still in the works, but will be available soon.
New Rails releases with more security fixes
Actually, that looks more like Firefox is finding bugs in those websites. Google should be using a standard text box.
Amateur hour. Serious Business this is not. Where are the tests? The Inversion of Control? The logging? The analytics system? Documentation? Architecture diagrams? Someone should either fire or promote this engineer immediately.
CADScan Desktop 3D Scanner Gets Successful Funding on Kickstarter
That's like saying just showing remote root exploit with "id" command is a small security hole, but copying the whole file server is a big one. Any journalist knowing anything about security knows that access matters, not how much is physically copied. And any that doesn't know it but has a functioning brain can understand it in under 30 seconds. I don't buy it, journalists are more than capable to make big conclusions from small evidence, they don't need much help in that.
However the workflow issues you break are sometimes something like this: http://xkcd.com/1172/ -- that may be a problem with software you paid $1 for 3 years ago and expected forever to work exactly as you need it.
Intel 8080 CPU emulation in JavaScript
Quick, someone edit your code that has "javascript" and "sort" as keywords so it steals session cookies!