skysight-inc/HackerNews huggingface dataset:
OVH just confirmed, they were compromised.

http://forum.ovh.com/showthread.php?t=88277 (in french).

Nutshell:
- attacker brute forced the unique ID used in the reset URL
- they could do it because the unique ID was not random enough
- they analysed 3 years worth of logs (still ongoing to 10) and concluded that only 3 clients (all bitcoin related) were affected.
It'll still mess up CI, sadly.
Peter Norvig and eight others are Hacker School residents
More than 20,000 people apply for one-way ticket to Mars
Please do not generalize.

One, I wished he had said right of the bat that "I am the Google lawyer responsible for...." and two, not twist words making online posting of the code a heroic act.
IMO that should be a method on a Logger object. Personally I have a method that does a similar thing called 'inspect'.

Even better: you should write to a log file instead of to the screen (at debug level) for such things so you don't have to remove your (useful) debug statements before committing.
#3 should be #3 :)

> mysql_query cannot be removed soon enough.

I agree. Bring on 5.5
Quick! Was it ($haystack, $needle) or ($needle, $haystack) ?
Interview With Jason Fried: The Real Story Behind 37signals
Hacker’s conviction fuels critics’ claims of government overreach
Maybe if it's used solely for debugging, but there are cases where simple functions aren't easy to place. Consider implementing the array_column function for pre-5.4 PHP. Or things like method pull, index grouping, or array_select_keys functions.

What helper library should a function like the following exist in?

function array_select_keys(array $dict, array $keys)
{
$result = array();
foreach ($keys as $key) {
if (array_key_exists($key, $dict)) {
$result[$key] = $dict[$key];
}
}
return $result;
}
I just mean users without JS usually aren't ones who are downloading files. Lynx is possibly an exception, though, since it's sometimes used by server admins like myself to grab packages.
Light Table 0.4 released
Looks great! Many of the uni students that I know have Android devices though. Any plans to make this cross plat?
Love using Trello at work, and this makes it even better.

My one gripe (that many people have) is the lack of built-in metrics/analytics on progress. You can hack it together with a combination of the Trello Scrum extension and their API, but it would be great to have it built-in (and something I would pay for).
Apple has a Software Problem — Why I’ll be Switching to Android
Startup Manufacturing in an Automotive World
Embedding Canvas and SVG charts in emails
Resolving Social Identities
Cpanel Certifications program
You are all misusing (or absuing) the DNS. Do you live in (or target) the British Indian Ocean Territory? No? Then this domain is not meant for you.

Meant or not meant, my best domains are with .me.

Google can probably give webmasters the option of using any domain for that country or globally.
This sounds really, really, really freaking cool. I am overjoyed to see AMD not throwing in the towel and conceding the entire high-end CPU market to Intel. A monopoly there would threaten Moore's law.

I can think of a lot of cool things to do with hUMA. I might have to get one and dust off my once very strong interest in evolutionary computation (strongly biomorphic genetic algorithms, artificial life, etc.). EC can do very interesting things -- its the only "AI" technique I am aware of that can be genuinely creative -- but it eats CPU cycles for breakfast.

It would also be great for creating a practical fully homomorphic cryptosystem based virtual machine for "blind cloud computing"-- where the VM host has no idea what the VM is doing. All kinds of neato stuff is waiting on this kind of computing platform to be practical.
It isn't - they should be abstracted to what they help with though. For example I have a \Helpers namespace and my autoloader brings them in as required: http://pastie.org/7743301
Why would someone take one of the most important features of git (local history) and throw most of it away by abandoning ability to edit it?

If you pushed a broken commit push another fixing it, just like in merge-based workflow.

Having dates switched is not important, having four different branches on said Tuesday gives you a lot headache searching who introduced a bug. And git bisect won't help you. ;)
Better yet, git log --since='last tuesday'. Try it.
OVH acknowledges back office security issue
To be fair, it's not been put up on legislation.gov.uk yet (though should be in the next few days).

For HN's convenience, the section is:

116A Power to provide for licensing of orphan works

(1) The Secretary of State may by regulations provide for the grant of licences in respect of works that qualify as orphan works under the regulations.

(2) The regulations may—

↳ (a) specify a person or a description of persons authorised to grant licences, or

↳ (b) provide for a person designated in the regulations to specify a person or a description of persons authorised to grant licences.

(3) The regulations must provide that, for a work to qualify as an orphan work, it is a requirement that the owner of copyright in it has not been found after a diligent search made in accordance with the regulations.

(4) The regulations may provide for the granting of licences to do, or authorise the doing of, any act restricted by copyright that would otherwise require the consent of the missing owner.

(5) The regulations must provide for any licence—

↳ (a) to have effect as if granted by the missing owner;

↳ (b) not to give exclusive rights;

↳ (c) not to be granted to a person authorised to grant licences.

(6) The regulations may apply to a work although it is not known whether copyright subsists in it, and references to a missing owner and a right or interest of a missing owner are to be read as including references to a supposed owner and a supposed right or interest.
It seems like such a waste to scrap have a functional, responsive electronic device hanging at the L2 orbit point, just because it can no longer cool its sensors. Can't it be repurposed?
There is a full-featured API... it shouldn't be too hard to code up some open-source (or even paid) apps that pull stats out of Trello...
Can Google Glass ever be fashionable?
Do you think that you will see an end to web browsers bugs in your lifetime?
(given that they don't disappear...)

I don't because by now they should already be bug free....
Or better still... one where it doesn't matter:

http://www.php.net/manual/en/function.implode.php
I made a CD (yes, like a music one) and discovered that social media (myspace at the time) was a powerful marketing tool.

Didn't make it to $10k, but did have a net profit of a few thousand which wasn't bad for high school.
Are people still using PHP these days?

Couldn't help myself :(
Makes me wish I had taken a class with him while at Tufts. It's a hard truth that you can usually plot a good course through your university experience AFTER you are finished.
As far as I know, the current working model of the universe presumes an infinitely large universe. That's what all the math seems to indicate. Obviously, since the rest is not observable, nor can we ever interact with it, proving this in a tangible way is not possible.

It's just that we can only see and interact with a finite portion of this universe, and sadly, over time this portion will shrink in relative terms.

In the distant past, more of the actual universe was visible. The distances between galactic clusters was smaller.

In the vastly distant future, our galaxy might be the only one visible. The rest of space will simply be empty, light stretched out so much that it's nothing more than faint background noise.
I find that to be very true. Seems a lot of amateur programmers pick up CakePHP for one reason or another without actually knowing PHP and try to drive every screw with the one hammer they have. When everything's suddenly broken they blame the hammer.

EDIT: Although I suppose the author's point of view is from the outside-in where he's tasked with cleaning up the mess that amateurs leave behind and has a bias against it.
Yes it's slow in that it's a blocking call. Since it takes more than a fraction of a second put a message in the mail queue, it'll _feel_ slow.
If they included some kind of offline support, I would pay $200 in a heartbeat.

I often have work that I do offline, and I disconnect the internet so as to avoid having to use willpower to stay away from the internet.

I'm sure they're aware it would be useful, but concluded the number of users it would apply to doesn't justify the effort. But, in case they're considering offline support, wanted to add my anecdote.

I don't necessarily need to access all my boards and cards while offline, I'd like like to be able to add cards or modify cards I had open without losing those changes.
I don't think you slept as good as edw519 with his check that night.
I'm not saying tax rates have no impact; obviously they can. But taxes levied to addressed collective action problems, where people are actually seeing a return on the taxes paid for things they'd have to fund otherwise, should in fact make labor cheaper. This is also usually dwarfed by things like exchange rates, wages (possibly including minimum wage laws), cost of living, and labor laws - most of which also have interconnections. It's no longer a simple equation in the way that "Hm, my money will be taxed less in that pile than this one" is.
I would recommend Doctrine DBAL[0] over Meekro.

0. http://www.doctrine-project.org/projects/dbal.html
I don't quite agree with him on that also.

PHP is multi-paradigm, if you keep helpers functions in a way it's well structured and feels right in your project, why do not use them?

This is a personal preference, not a fact.
You never merge 'next' to 'master'. You merge topic branches when the topic is considered to be complete and stable (it "graduates"). The rerere [1,2,3] feature (a fantastic set-and-forget feature) ensures that you won't have to resolve the same conflict multiple times.

The amount of time required for a topic to stabilize in 'next' depends on the topic and what it affects, but you can easily summarize "branches in next, but not in master" to look for candidates.

Feature releases are tagged on 'master' and 'next' is usually rewound at a release (create a new 'next' branch starting at the release, merge all the branches that failed to graduate in this release cycle, and discard the old 'next'). This is easy to automate.

[1] http://git-scm.com/2010/03/08/rerere.html

[2] http://www.kernel.org/pub/software/scm/git/docs/git-rerere.h...

[3] http://gitster.livejournal.com/41795.html
No, it does not. CI never builds those broken commits because they never go outside of authors personal computer. Commit often, push when it's done and only push commits that work.
This iPhone Breathalyzer Wants To Call You A Cab
http://www.randomnumbers.info/

5 digits 0-9

Line 42732

Miniamin, of Moadiah, Piltai: 12:18 Of Bilgah, Shammua; of Shemaiah,
Jehonathan; 12:19 And of Joiarib, Mattenai; of Jedaiah, Uzzi; 12:20 Of
Sallai, Kallai; of Amok, Eber; 12:21 Of Hilkiah, Hashabiah; of
Jedaiah, Nethaneel.

12:22 The Levites in the days of Eliashib, Joiada, and Johanan, and
Jaddua, were recorded chief of the fathers: also the priests, to the
reign of Darius the Persian.

12:23 The sons of Levi, the chief of the fathers, were written in the
book of the chronicles, even until the days of Johanan the son of
Eliashib.

12:24 And the chief of the Levites: Hashabiah, Sherebiah, and Jeshua
the son of Kadmiel, with their brethren over against them, to praise
and to give thanks, according to the commandment of David the man of
God, ward over against ward.

-----

Min

Mode

MAT

Jedi

Hash Alibi

Cadmium

Ward
QS Apps on the Today Show.
Recipients of copies can still claim false product/advertisement. In EU law, if the consumer can claim that the expected product was one with source code included (thanks to GPL notifications), certain laws gets into effect.

First, the consumer has the right for compensation (normally the price of the product). Second, the company will be forced to stop claiming that the product is under GPL. This then leads to either willing infringement (ie, removing the GPL notification once its been there), or continue misleading the consumer (Very large fines).

So far, I have not heard of any case like that. The closest was a case regarding contract law, which is tangent.
A big part of Kanban is Work-In-Progress (WIP) limits on columns - something that most tools leave out.

It is a pain in the butt when a column is at the WIP limit - but that is kind of the point. It forces you to help move blockages before overloading a column.
"Google Chrome has blocked access to www.inc.com for now." — false positive?
The most painful thing about the years I spent working with PHP was having not even understood that web development frameworks existed. The little slice of the development world I existed in had absolutely no exposure to the concept... after switching to Python and only then discovering the concept, most of those PHP memories, in addition to being painful, became simultaneously embarrassing.
How To Analyze Your SEO Competitors
Totally agree. It wouldn't be too hard for someone to build a lightweight frontend to their API with a d3/raphael charting capability.
It would be great to get a common lisp supported in Light Table...
White House program targets IT jobs for service members
I'd love to see the spreadsheet on that one, that must be incredibly well thought out to be profitable. How often those 'emergency peak loads' exist, their duration and the write-off on equipment and fuel costs must have kept the designers of that system up for many long nights.
Sorry if I'm being dense - but I can already do this in GWT. I run jobboard.io and am able to set US as the GEO Target for that domain.
safari too.
Microsoft Research's IllumiRoom Concept for Peripheral Projected Illusions
It can be that slow, yes. There is no assurances that will be fast, you're just hoping it will be.

Now you could argue "that's true of anything!" but in general you are forced to depend on local IO/CPU/RAM otherwise your site is struggling in general, by adding DNS/SMTP/etc you're just adding more "stuff" that your site relies upon.

Plus SMTP servers are "allowed" to go offline for short periods. The client should try to resend the email 2-4 additional times before giving up. Clearly a PHP script cannot do that.
This is a huge release - so many awesome new features. The Python integration alone has been one of the things I've been waiting for to really dive into Light Table and give it a spin for longer than 10 minutes.

Congrats to the Light Table team!
SICP is a masterpiece. I took the old MIT 6.001 in Spring 1986 where we burned through the entire book in about 14 sleepless weeks. Sussman was the lecturer and Rod Brooks was my recitation instructor. I was like 19 years old at the time and it was the most intellectually beautiful thing I had ever experienced. I ended up acing the course and went on to get a PhD in CS. I've never read a better book on programming.
there's no generic "helpers". probably he meant to be more specific like htmlparsinghelper.
Yeah that one caught my eye in an otherwise good list too. Typically sending email via PHP's mail() function is only slow if your server is not configured correctly: http://www.alphadevx.com/a/372-Fixing-slow-performance-of-se...
Growth Hackers To Follow
To be honest, I never understood his argument at all. If consciousness is a sort of information sheaf attached to spacetime that "measures" (in some yet-to-be-determined mathematically precise way) certains canonical kinds of information flow (e.g., recursion, self-reference, entwined causality) over all possible sets in the topology, then the Chinese room would be isomorphic to the mind. One also has to consider its interactions with the external environment. What if everything else in the universe was "Chinese-roomized" so that time and space scale appropriately? That's the same consciousness sheaf on the same space doing the same computations, and there is little reason to believe the algorithm would feel any different from the inside.
In the sense that you can bookmark the "comments" link off someone's profile, yes.
Official AWS Security Blog
What I have started doing is working on a vastly reduced version of bigger projects that I want to accomplish. You could call them prototypes, but I try not to saddle myself with the baggage of the larger project...

I use the larger project as a starting point for deriving the smaller project, but once I've got the small project defined, I do my best not to be hindered by the larger project ideas and just work the smaller project by itself.

I try to make it small enough to finish in a weekend.
Thanks!

It’s just a first release. No plans for an Android version yet, but we’ll see how things work out.
Pagination with Cursors in the App Engine Datastore
no trial. all I can do is paying and hoping the 14 day return-with-no-questions-asked policy with manual refund will work. no, thanks.
There's an elephant in the room that he missed.

Rebase breaks bisect.

If you have a sequence of patches, wherein each patch compiles cleanly, and you merge it with another sequence of patches, you still have a sequence of patches that compiles cleanly.

If however you rebase your sequence of patches onto another sequence, and this introduces build errors (not uncommon), bisect no longer works on this segment of history, even after you fix the build issues with a final "cleanup" patch.

Rebase destroys semantic history. Merge preserves it.

EDIT: whomever downvoted me, care to explain what's wrong with my reasoning?
UltimatePoker to become first legal, real-money online poker site in US
Very impressive demo.

So happy to finally see python support.

What is used for the javascript rendering? I assume since they are using the chrome dev tools they are embedding chromium into Lighttable?
I went from SML, Caml Light, and OCaml to Common Lisp, and then to Scheme.

I prefer Scheme by far to any other language I've ever used (which includes a whole bunch of languages not listed above).

For me, Scheme is much more fun to program in than OCaml, etc. With OCaml I found myself constantly wrestling with the compiler to get my program to compile, and had problems decyphring its obscure error messages, which seemed to require taking university-level courses on type theory in order to be understandable.

With Scheme, my programs mostly "just work", and I can program the way I think.

Some people have problems with Scheme's parenthesis, but I personally quickly learned to love them because they make scope explicit and obvious. Through long and bitter experience, I've learned to value explicitness and clarity in programs above almost everything else. Scheme is great for that.

True, Scheme might not be as safe as OCaml and friends, but for ease of programming, speed of development, and sheer pleasure, I find it very hard to beat.
Oh that's odd, can anyone else confirm?
Square/cube law strikes again. You can only run an automotive starter continuously like a minute or so (at absolute best) before something melts down and the system is scrap. Scaling the power cube up by a factor of a thousand or so and the cooling square surface area up by a hundred or less and suddenly you get like one revolution of the motor before the starter windings and relay/contactor melt down. Not pretty. Of course you could make everything unimaginably immense but that starts making air tanks and air compressors look cheap.
"In my experience, relatively few students appreciate how much they're learning in my course while they're in it."

That quote describes me to a T.

The University of Minnesota taught a sophomore class on OO using SICP. At the time, C++ was hot (this was about 1991 or 1992) and I distinctly remember someone raising their hand and asking "Why are we learning this language that we will never use again? Why isn't an OO class taught in C++?" And I remember thinking to myself "Who cares what language it's in? I'm kind of excited about learning another language." And I truly was.

It wasn't until much later, after being in industry for a decade (currently starting my third decade now ;) )that I recall thinking to myself "You know, that book had a tremendous impact on how I write software and program in general, I need to pick that up again, what was it?" And I re-found it and am on my third reading of it as I write this, mostly just to refresh the ideas in my mind (since I mostly work in Java and JavaScript these days), but I have never truly finished the whole book. The class took us through chapter 3 and then sort of a mixed bag of topics from later in the book, so I've never truly read the whole book, but certainly enough of it to help me.

I didn't realize it was a famous book at the time, it was just our text book. I still didn't realize it was a famous book when I re-bought it a decade later. And now I know why it is a famous book, it is that good. And though the third re-read is very familiar, I still enjoy it and find it profound.
Helper files are a pain in the ass because they're usually all jumbled up and hard to maintain. In my experience with them, they come a zillion functions that are all unrelated, from input sanitization to XML processing to database initialization. Then, when you need to figure out what the hell is going on in your code, you have to wade through a forest of garbage just to figure out what the function is doing. God forbid you accidentally make a typo in ANOTHER function while editing the one you wanted -- now you've just introduced another bug without even realizing it.

Furthermore, in PHP, we devs are almost always using the same boilerplate over and over again (getting user input, etc.), so why would we use a "helpers.php" file when we instead could break out our code into more semantic, reusable chunks?

Instead, you should be creating classes (or at the very least, creating files that all have related functions, not just throwing all of your "helpers" into one file, so instead of helpers.php, you have inputSanitizer.php, htmlParser.php, et cetera).

For example, I see a lot of this kind of thing in "helper.php" files:

function sanitizeInput($input) {
$input = htmlentities($input);
...
return $input
}

What I personally love to do because I'm OO obsessed is use a home-grown InputSanitizer class, so now when I have a new project, I don't have to copy over my "helpers.php" file and then strip out everything unrelated to my project; I just copy over InputSanitizer.php to the new project and do something like this:

$username = InputSanitizer::getPostData('username');

MUCH cleaner and easier to maintain. Even better: if you're using classes and auto-loading, you'll never have to worry about includes again, you simply just call the class methods or instantiate.

There's a clean, wonderful side to PHP that I think a lot of people aren't taking advantage of.
Ah ok. But is there some reason for Lynx not to support JS? Is this by design? I also found out about links [1] and elinks [2] but seems that their JS support is marginal or requires compiling with certain flags [3]. Haven't anyone tried to incorporate V8 yet?

[1]: http://links.twibright.com/

[2]: http://elinks.or.cz/index.html

[3]: http://stackoverflow.com/questions/9353519/lynx-with-javascr...
My point (in agreement with TazeTSchnitzel) was essentially this - if X was a large enough company, I would expect them not to hide their registration details, especially, I would argue, in the case of a security company, so that potential clients and employees can be certain of the veracity the communications they receive. If I were to receive a communication from an email adress not associated with the main domain of the company, I would be instantly suspicious if the whois data was obscured or concealed.
When I went to Berkeley, those with no programming experience were encouraged to take CS 3 (Simply Scheme) before taking CS 61A (SICP).