skysight-inc/HackerNews huggingface dataset:
The biggest problem with WordPress security isn't WordPress itself, it's with WordPress' extension APIs.

You extend WordPress by writing "themes" and "plugins". Themes are supposed to change how the site looks, while plugins are supposed to change how the site works. But in practice, there's no isolation of capabilities in either case, so it's entirely possible for a plugin to do theme-like stuff and a theme to do plugin-like stuff. Users don't understand this, so they think things like "oh, it's safe to install, it's just a theme."

Worse, there's no isolation between code that comes in via either of these extension mechanisms and WordPress itself. As far as the server is concerned it's all just a big bag of PHP that runs with the same privileges. So a malicious theme or plugin has a lot of scope to do Very Bad Things once it's convinced a user to install it. Users don't understand how the attack surface increases as your installed plugins/themes increase, so they install tons of stuff, sometimes just because "oh this looks fun!"

I don't know how you untangle all this, unfortunately, especially in a system that needs to run well in commodity shared hosting. The only real defense is to be extremely judicious in what extensions you choose to install.
That's not the page I saw. I was asked who I would vouch for, not who I'd like to vouch for me.

Does anyone has a screen shot of that page?
> the idea Europeans have this food business sorted is laughable.

It was a scamdal. and it IS sorted out. And EU has the regulations in place, as opposed to USA.
WebFaction[1] is commonly recommended on Hacker News[2] for shared hosting. Their service uses cgroups, which gets rid of the traditional "bad neighbor problem" in shared hosting.[3]

This week I needed a shared hosting service for a low-traffic legacy PHP app and I chose WebFaction based on the recommendations on Hacker News.[2] I don't have enough experience with WebFaction to recommend it, but the experience I've had so far has been good. My account was ready roughly one hour after I signed up, and I successfully transferred the aforementioned PHP app to WebFaction very quickly.

You mentioned that you previously used a web host in the UK. WebFaction.com has servers in Europe (Amsterdam).[4]

[1] http://www.webfaction.com/

[2] https://www.hnsearch.com/search#request/all&q=WebFaction

[3] http://blog.webfaction.com/2011/11/fair-shared-hosting/

[4] http://blog.webfaction.com/2011/06/europe-here-we-come/
The monthly volume issue is a known bug -- something we missed while developing. We've submitted a 1.1 fix to the AppStore today that should resolve that.

As for the transfer, we gather that right from Stripe's API. Could just be some mislabeling on our side? Could you email me at: scherfryan(at) gmail?
It works just fine in Internet Explorer 10.

Wonder what the purpose of the "Sorry, no Internet Explorer" is.
Jonathan Mayer And Cookies In Firefox
Here is my opinion on that matter. As part of the security team at WP Engine, it's not only my job to educate our users on how to better stay secure, but also figure out why their site was compromised in the first place. The majority of the time, it's because of some out of date plugin that I've never even heard of. Simply searching for "plugin + version" in Google brings up publicly known exploits.

The hardest issue, will be keeping WordPress Core up to date. It's easy if you have one website, but if you're managing hundreds, it's going to be a pain to update each manually, or even through Git/SVN. I do agree though, that WordPress needs to have an "automatic update" feature for both core, and plugins. Personally, I would rather have a broken site, than a compromised one. Both scenarios will require work to fix anyways. Our latest deployment of WordPress only broke a handful of websites (I only remember working on about 4 sites that actually had to rollback to a previous version of WordPress). That's pretty impressive.
You may want to step back, take a deep breath, and figure out a way (or someone else, if needed) to respond positively to criticism.

Right now you just look pissy.
Why would web browsers need anti-virus software? It's not really a problem, since the web's APIs enforce a lot of sandboxing and hence security.
Software duct tape
Why? They may grow their customer base by bringing on bigger projects, but how would that alienate the customers who are already using it?
It depends on what state you're in... (provided you're going to a bar, and not just purchasing it and going home)

You could do it in Wisconsin, but not Illinois.
we’re right in the transition period of switching to higher pixel density devices, until we completely switch over to infinite scalable graphics with small file sizes only it will still take some time, but maybe not too long :) and in the very near future we may focus on hi-res graphics only without the need to worry about standard-resolution images anymore.
I think conventional job interviews do allow you to target a broad range of competence, with a large margin of error, so if you were to compare Google employees to, say, State Farm line-of-business .NET application developers, sure, the Google engineers would outperform.

It's an interesting question whether a random sampling of Google engineers would outperform a random sampling of tech industry product developers from other companies. I don't know.

The bigger is, within the broad set of candidates that an interview process selects for, the conventional job interview is arbitrary bordering on capricious; it's inhumane for no business benefit.
Too Young to Know It Can't be Done
How much RAM does your machine have? How much was used by other tabs/applications?
This has nothing to do with "farmers". Cow 'production' uses only factory workers now.

http://en.wikipedia.org/wiki/Harris_Ranch#cite_note-post-9
Please Don’t Forget Women: An Open Letter to the Editor of Inc. Magazine
I'm in a dilemma. On the one hand it is a highly relevant response to the problem stated by the OP on the other I am absolutely not satisfied with that response. So with that in mind - up or down voting?
The same argument could be made that it opens Kickstarter up to the mainstream and can help get more eyeballs on the other smaller projects.
I'm going to go against the grain here and say that I immediately recognized what the service does. The "Reward Your Employees" text caught my eye fist because it was on the page before the rest of the content faded in, so I read it first. I never once thought the site was about making sushi.

Still, it's probably a smart idea to do your A/B testing as others have mentioned. Design is clean and the concept is very cool. Congrats on launching!
All seats to fly to space are $200k
I made that mistake but one of our devs was quick to turn that on and saved the day. Now I need to learn how to shrink wrap boxes.
what did you use to build this?
A point I've made in a previous discussion is that we clearly draw a line between directed and undirected weapons, and therefore claymores and grenades are verboten, but something like 250,000 full auto guns are legally in the hands of US citizens.
This guy does not sound like the awkward programmer who some how managed to break out. Sounds like he had some balls to begin with.
I can help out with this! (Finally a hacker news discussion in my line of expertise!)

While you could think of nested subqueries as syntactic sugar, you might also want to think of them as a view you specify on the fly, or a "derived table" of information.

Each RDBMS optimizes a bit differently, but depending on your system subqueries may have query plan implications as well. Sometimes they'll make your query faster, other times slower. It all depends on the RDBMS, table indexes, and the operations you are doing inside the nested query.

Personally, I'd recommend using HAVING instead of using WHERE with a nested SUM. The query optimizer may create the same execution plan in the end, but the HAVING is a bit more explicit in what you are doing.

For those familiar with SQL, HAVING indicates you are filtering your query on an aggregate value, where as a WHERE indicates you are filtering records out of consideration before they are aggregated (as someone else as pointed out in another comment).
Anyone know something similar for C/C++ or Python ?
Did any work come from this? I'm curious if the freelancer thread works.
Calling it an "assault weapon" makes as much sense as calling it a "gandering gillifrous".

It's purely coincidental that it is a weapon enamoured and used by so many spree killers. Purely coincidental. It's a high capacity, fast-action semi-automatic (not all semi-automatics are created equal, and the AR15 allows a practitioner to achieve automatic-rate fire) that is military built to empty clips effortlessly. Totally the same as a hunting rifle.

Meh. A .223 is still a relatively low-powered round in the grand scheme of things.

And then you point out a MASSIVE bullet used by almost no one but in bolt action rifles. A bullet that is essentially never used in the commission of murders.

Yes, and that bullet is relatively low-powered compared to a 120mm M1 KE round. Which is completely meaningless patter.
It is much more practical to secure a single repo administered by competent techs than it is to secure a zillion web sites run by people with no technical experience.
Red Herring announces Finalists for the 2013 Red Herring Top 100 Award
I'm a native English speaker (USA) with lots of math and science education, and I'd never heard of the long scale until you posted this article.

It sounds so strange. Are you sure this isn't another Wikipedia hoax masterminded by Stephen Colbert?
I just tested it using Pex for fun and - to my surprise - Pex was able to deal with regular expression and this AFAIK without any build-in knowledge of regular expressions.

using System;
using System.Text.RegularExpressions;

public class Program
{
public static String Puzzle(String input)
{
if (new Regex("123(foo|bar){3}456[0-9]{5}789").IsMatch(input))
{
throw new ArgumentException();
}
else
{
return input;
}
}
}

Pex reported three test cases.

null ArgumentNullException
"" okay
"123foobarbar45600000789bb" ArgumentException

Try this example yourself.

http://www.pexforfun.com/default.aspx?language=CSharp&co...

UPDATE: I was wrong - Rex was integrated into Pex in 2010 and this made Pex much smarter when it has to deal with regular expressions.
There's a difference between networking and cold calling.

I've done cold calling in the past. It's a numbers game. If you have 1000 people to call through and you can make even 10 calls an hour for 2 hours a day, you'll get through the list in approximately 50 days or 10 working weeks. A success rate of 1-2% would be good. If you get 10 good leads out of it and 5 of those convert you're doing very well, but then a funny thing happens. You quickly find out who's interested but not right now, and who's not interested and not worth calling back. Scratch the latter from your database and suddenly that conversion rate goes up.

Cold calling is a lot like email marketing. It feels bad sometimes to do it, but if you do it right, and you do it well then you'll be much better off than others.

The only thing I would say is that you might not be the right person to cold call. If the quality of the information you have is good and you can pay someone more suited to this to go through and keep the data clean then you're definitely better off doing so.
Happened to me too. Very spammy (I reported it to LinkedIn too, I hope they kill their API access).

First, I received a private email from a close friend I trust. Didn't know he was quitting his job and starting something new. All he was asking was for me to vouch for him. Ok. Then a few days later, he told me I should join too. That got really weird.

Looks like I wasn't the only one being played.
Click on "Reservations Options explained"
Woh... Grow up? All they posted was that they DID have an edit/see message button... how is that failing to take criticism?

I am not saying I disagree that this practice is shady, but I am not sure where the bad attitude and grow up part is coming from. There is a lot in between "your practices might be misleading and slightly shady" to "grow up you have an incredibly bad attitude"
Cool idea. Seems pretty similar to http://www.tweetspiration.com/. After putting a decent spam-filter on this, maybe there's a way to introduce crowd-supported mechanics (ala upvotes, comments, relevant mentions/hashtags)?
What are those "very difficult design decisions embedded into WordPress that make life much harder for them than it needs to be for you" prey tell?
Jason Mendelson - A VC's Perspective on Innovation in Legal
GlassDevCamp to Gather Emerging Google Glass Development Community
Thanks for the clarification. I'd say as long as it was clear that a message was going to be sent, then a the "Who would you vouch for?" context actually makes the recommendation less inappropriate and puts FD even more in the right.

(Of course, there is still the questionable practice of writing such an enthusiastic endorsement in the first person, but again you had final veto powers on the wording and you opted in to it. Such practices are unfortunately "par for the course" nowadays.)
"but like many things on the internet people don't always read everything."

I agree that many people don't read everything they see on sites, but I believe we should optimize our sites/products for that, to help those people pay attention to the details that matter to them.
Then learn the pain as everyone uses an expensive view in all sorts of queries because it's easier, and they dont understand the performance characteristics of joins well enough to understand why they shouldn't do that.
Here's the mistake you're making. You don't find it misleading. Because you don't find it misleading you're assuming nobody else should. That's not how reality works.

Other people are saying they found the page they saw misleading. You have to take them at their word.

If FounderDating folks have a brain in their heads, they will take that feedback seriously.
#Hashtags and #Language — Writers on Writing — Medium
So, being honest (intellectually or not), here's what I can say :

The tone and wording used in the auto-generated email shocked me. I would be pissed if that had been sent to anyone I know.

Saying that the content of the email "should be more explicit" is an understatement of significant magnitude, and it glosses over the crux of the issue. The site clearly betrayed the OP's trust, and had I been in his shoes I would have felt the same way.

edit :

My comment was made prior to your edit which added mention of the "tone" and the "from: field".

I have also up-voted your comment, although I strongly disagree with the conclusion.
As much as it saddens me to say this, I think this needs a CAPTCHA to keep the "hackers" from spamming it to oblivion. Cool idea, though.
Great idea really! Just the spam is a problem...
LinkedIn is fantastic!

This will be next.
The two ideas are very different, but complementary.

Boxen is about getting your MacOS environment set up with tooling.

The author of the original blog posting is talking about how to automate the creation of a production-like environment in which to do your development.

The creation of that environment requires a few tools installed on your physical Mac, which could be managed via Boxen. For example, you might use Boxen to automate the installation/upgrade of Vagrant or your IDE of choice.
Thank you, Wesley. I'm happy to hear that. We'll definitely make some adjustments to the header portion. It may also be that the copy of some of the reasons aren't clear enough to indicate what the app does.
I lost complete faith in Google product search when they cut out all the unpaid aggregation and all the decent prices I seem to find for electronics, musical equipment, etc seem to come from generic ecommerce templated vendors who have no physical presence, but no earthly location or contact information to be found.
You describe a pay-off when upgrading stage and prod. But if dev, stage, and prod are identical, then you simply upgrade dev first, find the things that broke, do the same for stage, and then it's no big deal when you upgrade prod.
I haven't looked yet, so sorry if it's mentioned, but is there any support for Amazon Glacier integration? If all I want is to make sure my photos are safe, and I'm not interested in really accessing a number of albums, can I select them and have them transferred to my Glacier account? This would be the case for many childhood photos of mine at this point in life.
> > when in the last, say 1-- years
>
> This number is conveniently chosen to be just below the Civil War

Which was 150% the original number, not "just" below the Civil War. The Civil Wars was closer to the signing of the Declaration than today.
As someone from an area without OnTrac, how could this company even have gotten a contract with Amazon? They sound worse than "play football with your packages" FedEx and UPS. And I have to admit that is an impressive feat.
The email equivalent is CAN-SPAM and carries hefty fines for violators.
> if I want to migrate a running VM from one host to another

If only you could do this on EC2. >_<
Andrew Ng-Building High-Level Features Using Large Scale Unsupervised Learning
The symlinks problem can be mostly resolved by adding this magic incantation to your Vagrantfile:

# to allow symlinks to be created
config.vm.customize ["setextradata", :id, "VBoxInternal2/SharedFoldersEnableSymlinksCreate/vagrant", "1"]

That said I have had times where npm via a putty window refuses to install modules. However, I also have npm installed on my Windows box so I can just drop down into a cmd window when that happens and run the npm command there.
FWIW, jmalter (FounderDating CEO) and jfarmer (who's passive-aggressively posting the same screenshot in a bunch of threads) are different accounts.
Wrestling Your Data Like a Top Ranked Yokozuna
Isn't there a difference between questioning X and believing that X is false?
What you really want to use is plastic bags in racks or on pegboard.
I put floppy disks on our site at work as a tongue in cheek fun visual and unfortunately nobody else liked it. Including our conversion rate. :(
I think we all agree that he opted in to vouching for the people. The complaint is that it wasn't clear that vouching also entailed sending a message if you didn't opt out of the message portion.
But you know why it takes that long right? It's not for security reasons. It's because they're holding it to earn interest on it -- while you wait.
...many years ago!
Hunter s Thompson on the Kentucky derby
its starting to seem that way.. thanks for the suggestion!
At the time the original code was written, it wasn't possible for a 32-bit integer to overflow, which is presumably why they didn't use 64-bit. That possibility was only introduced in the patch, and no one caught the bug that came with it.

Running 64-bit would have "prevented" this bug simply by virtual of that fact that the default datatype would have been big enough to avoid overflow, but it isn't really a solution. I just find 32-bit vs. 64-bit to be inconsequential to the real mistake, which was an improper software development process.
Fair enough. Before people jump on the "omg spam" train they should take it upon themselves as thinking individuals to look at the primary source.

I just created a fake LinkedIn account and will post a similar (and honest) analysis after I receive the invite.

The fact that nobody in this thread bothered to do their due diligence before pouncing is enough for me to discount their opinions as uninformed. But we'll see what the actual page looks like in a sec.
I have never heard of OnTrac and I order from Amazon Prime all the time, so I doubt OnTrac is going to "sink" it.

Googling I see it's some west coast shipping thing, for those curious.
"Clearly has never used Amazon Canada."

I have friends who moved to Canada and feel similar, but buying ~everything~ seems to be more expensive than in the states. What better options are there for you?
Cold calling isn't the same as networking -- calling someone if they aren't expecting you, haven't requested you call, or might not even know you is not the same thing as talking to someone at an event.

Perhaps the most important thing to remember is that the people who have no problems just going up to random people at events and starting a conversation undoubtedly started sometime being shy and socially awkward. Nearly all of them will tell you that they got past it by pretending to be confident.

You don't have to pretend to be super-confident, just put a smile on your face, be friendly, and fake it. Some people you talk to will also struggle to be social, they might seem rude or cold but it could be they're also shy. They might appreciate someone taking the time to talk to them.

Making friends is slightly different to meeting people, or making business contacts. That doesn't mean you don't like the people you meet, but someone you make as a business contact doesn't have to be someone you'd want to go to the pub with, just one-on-one. But if it helps, don't think of it as networking -- just as meeting interesting people.

And as for calling someone you want to meet, calling is very personal and can be considered invasive. Sure, it would be very confident -- but there are better ways. Find out who you know who could introduce you to someone who knows them, or attend an event they will be at where you could meet them.

I hope some of this is helpful.
Ruby on Rails, with the Sync Gem by Chris McCord and Pusher
How do multiple monitor setups work with vagrant? (I've had trouble with big IDEs and X transport before, with things just slow enough to irritate me.)
I might add to this that I very frequently finding myself using Amazon just for the reviews. You can learn a lot about a product by reading reviews, especially the 1 star ones. If a product has no Amazon reviews, I don't really trust it. I can't remember the last time I googled "Product X reviews."
If you're in an evil state, not counting NY, the Garand is an eminently practical weapon. Get it rebarreled in .308/7.62 NATO and the ammo is less expensive.

I have a friend in Illinois who's soon going to be moving back to Maryland, he's a WWII buff and has a M1911 (Argentine) and a beautiful Garand in .308 and he doesn't have to worry about those or any other state's "assault weapons" bans, except again NY, where you're only allowed to load 7 rounds in your magazines....

Recharging it with its 8 rounds clips is quick, and in general it's one of the most ergonomic gun designs of the century, e.g. it has very little in the way of protrusions to catch.

Agreed on FN's 5.7mm stuff, though; fun, but with a round only about 10% more powerful than the hottest .22 rimfire magnum, not practical except in full auto, which thanks to the Hughes amendment means we can't own any. But, boy, would I like to own a PS90 ... just can't justify it.
Obama to visit the YC of Austin
Attachment and insecurity issues can be greatly improved with psychedelic induced trips (with safe setting). If mushrooms, ayahuasca or similars are very hard to get(in my country it's hard) holotropic breathwork is reported to have similar effect, although can't reinforce that.

This message is more like to anyone with attachment issues, I've just read your brother is 13 years old so mehh, don't know.. Safe bet that he is not mature enough, haven't read anything about what are the hazards when adolescents take it.
Why Intel’s “How Strong is Your Password?” site can’t be trusted
Yeah, I guess so. I'm just annoyed that people treat hacker news like it's the front page of reddit or something.

But whatever.. I don't have the ability to downvote stupid posts, and apparently when I question why they're here I just get downvoted.
I'm sorry - but a "View/Edit message"-link? That seems like the proverbial fig leaf and nothing more. If they wanted people to view/edit the message, they would show a preview of the message without "finding" the link first. They hide the message by default and they do that for a reason (if they aren't stupid).