skysight-inc/HackerNews huggingface dataset:
Trivia: Chip Hazard is also one of the VC "bad guys" in Phil Greenspun's writing about the downfall of Ars Digita:

http://waxy.org/random/arsdigita/

Edit: I have no idea if that actually means something; it's just a name I remember from Greenspun's writing.
If you forget to escape even one bit of supplied user data your entire application, server, or possibly even business can be compromised. You need to be extremely disciplined about escaping if you use this antiquated method. There are automated injection tools that will discover and exploit these, it's not even hard.

All you need to do is use a database layer with placeholder values and if you're diligent about encoding everything that way, your chances of being hacked by a simple SQL injection bug are nearly zero. You'll have to make several mistakes before you're in hot water.

`mysql_query` is the worst possible interface to MySQL since it's literally the low-level C bindings ported in to PHP without any kind of enhancement. Those functions were intended for writing more abstract interfaces, not being used directly.

While it is possible to write mysql_query code correctly, it is very challenging and not worth the time when facilities like PDO exist.

Also, if you loathe "over abstracted" database libraries you're probably using the wrong library. A library should make your database interfacing easier, not harder.
I am looking forward to this event. I hope to see everyone there.
The benefit of Uptano would be that their boxes are dedicated so you'd potentially get more horse power, which is always appreciated when you're running a Ruby app.

I think you made the right choice with paying for hosted CI. The past three teams I've worked on have spent an obscene amount of time babysitting Jenkins/Hudson in the past.
Exactly.. without the graphics, audio, plugins, etc... it may as well be gopher, which most browsers don't even support anymore.
I couldn't agree with you more. It illustrates particularly well the fact that there is a line in the sand to be drawn and that it is ambiguous. His is just but one perspective on a site that serves up one type of content.
Huh? Google's reputation in shreds? How so? If you're referring to NSA issue, that's the American government's reputation you're talking about. Google (and almost every other big tech company) was simply compelled to follow the law.
Some direct links:

https://github.com/HoTT/book

http://hottheory.files.wordpress.com/2013/03/hott-online.pdf

http://hottheory.files.wordpress.com/2013/03/hott-ebook.pdf

First commit in Nov '12. Most work seems to be have been done since Jan/Feb '13:

https://github.com/HoTT/book/graphs/commit-activity
I'm sure there are many legit VPN provider out of there, which really care about the user and provide some hardware/bandwidth, but most are oversold services (barely scam) with very high price for what they offer.
I think the solution is a self-made VPN out of a VPS. VPS nowadays are really cheap, and you can get awesome deals with some very serious providers. Also, you can easily get one outside the USA, for (in my opinion at least) increased security.

For anyone interessed, https://github.com/Nyr/openvpn-install makes installing OpenVPN a breeze. For VPS deals, http://www.lowendbox.com/ and http://vpsboard.com/.
"""
The key to 3D deep sub-diffraction OBL is the development of a unique material with two chemical activation channels. One is for photopolymerization and the other is for photoinhibition. For this aim, the material should be designed to satisfy the following requirements. First, it should include an initiator that is highly photosensitive to two-photon absorption generated by a writing beam, which allows for the near-threshold fabrication. Accordingly, it is possible to achieve a minimum degree of photopolymerization required for building solidified structures with a feature size smaller than the focal spot of the writing beam. Second, it should exhibit an effective inhibition of the 2PP process, which is
"""
I can assure you, we're here to stay :)
While tldr summary is certainly valuable, asking for one without even bothering to form a single sentence is the same level of spam as +1 type of .
It's a good article, thanks for reminding me to re-read it.

I note that in it, Stephenson makes a prediction, as if it were a known fact, that I think we now have significant reason to doubt.

He says "Rockets are as close to perfect as they're ever going to get. For a few more billion dollars we might be able to achieve a microscopic improvement in efficiency or reliability, but to make any game-changing improvements is not merely expensive; it's a physical impossibility."

I think we now have reason to believe that for around a billion dollars ($1b is the estimated total R&D budget as of a year ago), SpaceX has already made better-than-microscopic improvements in efficiency. But more interestingly, there's reason to believe that with little or no additional outside investment (i.e. working on profits), SpaceX is pretty likely to soon make a very large improvement in efficiency, with Grasshopper &c. Rockets are probably not as perfect as they're ever going to get.
>You can tell someone hasn't spent much time at AfD, the section of Wikipedia where people (anyone in the world, really) discuss whether articles should be deleted, by the outrage they express at the "arbitrariness" of Wikipedia's notability rules.

Ad hom: Person objects to treatment they receive from Wikimods, therefore they must lack experience.

Ad hom: List of articles for deletion containing articles that are all obvious junk. Implies that all deleted articles must therefore have been junk. Maybe I have inferred too much here, but that's what I thought you were going for, and you have a point. There are probably a lot more pages that need deletion, but it doesn't support the infallibility of Wikimods or refute the validity of some of the complaints made by people about Wikimods. I have no idea if you culled the list, but that might make it worse depending upon what you culled.

It's nothing worth getting our knickers in a twist for, and I guess I should disclose that I have created/edited a few Wikipedia pages myself and often found that experience, and working with some others on the site to be frustrating. I'm not talking about vanity pages for my friend's bands either. So I may have developed a natural reflex to unreserved or what I perceive to be unjustified defenses of Wikimods.
We want to start small so saas felt the way to start. We're adding a way to export all the data and also possibly exposing the API soon as the app is already build on top of one.
Even when there is only single user branching can be quite useful, too. When I was writing my thesis, I usually worked on different parts at the same time. Having each changeset in a separate branch made it easier, especially when I procrastinated by fiddling with various settings like margins, colors and page styles.
How we approach schema design at Tutorspree
Stratasys to acquire MakerBot
This is going to be at the Pivotal Labs office, right? I can't wait, that's an amazing venue for this!
Nice marketing on their web site.

(Need to update the investor page though, currently not
showing USV./)

https://www.firebase.com/about.html
How Domain Registrars Can Deal With Yahoo Email Recycling
You can roll your own using latex-diff. It comes eg. with TexLive and has some (limited) built-in support for different versioning systems.
Monopoly was first published in 1935 and the prices haven't increased since. That makes the cost of a stay at the most expensive hotel $34,000 in today's money, which is far more than I'd ever pay to stay at a real hotel...

Ignoring inflation, you can compare the price of staying at that hotel with buying the land it's built on for a relative estimation of the cost.
Of course words are more important.

Imagine the web without images. Maybe Boring, but largely functional. Now imagine the web without words.
The idea of homeopathy tries to make the solutions "stronger" by dissolving them with water. It's the main process behind it - the point where you're pretty much left with just water.

Nothing like that is claimed here. This idea is based on how ions of silver interact with cells which was also described. You may not agree with the article, but comparing it to homeopathy is just silly.
Al Gore articulates the value of text well in _The Assault on Reason_. Short version: text is a "cool" medium which only indirectly rouses emotion, while images, sounds and especially video are "hot" mediums that are much more likely to bypass the prefrontal cortex, and directly stimulate emotional reactions.
Frequently aerospace companies will have a limited number of licenses for various pieces of software. C++ as a language obviously doesn't have this limitation, but a limited number of licenses for various custom test suites and third party software (e.g. Matlab) is frequently a bottleneck. If this is a bottleneck, it makes sense to have these licenses in use 24/7.

Purchasing more licenses is always an option, but usually not a quick one.
There is a company trying to do this, without requiring the technical knowledge. http://www.scigit.com/
FBI uses drones inside U.S. for spying, director says
For years, the two things that most frustrated me to hear from product managers were "how hard would it be..." and "can't you just..." It took me quite a while to figure out why I had such a strong, visceral reaction to these phrases.

Oh, man.

When it comes to my natural reaction to this, the words 'strong and visceral' doesn't even do justice.

It took me a really long time to understand why I had such a deep-seated loathing for phrases like that. Think of some absurd scenario where someone asks you to cause harm to yourself, so they can benefit in some way, and that's how I would respond. I basically translated these requests to something like, "can't you just shoot yourself in the foot, so I can sell your toes?" and reacted accordingly.

This post provides some good examples -- explained in a much more objective and rational manner than I've been able to -- of the cost, and why this bothered me so much. In general though, if engineers have to spend a lot of time mitigating "can't you just...?" then I think it may point to a more systemic problem in the organization. Namely, the business units are so disconnected from engineering they don't even realize the costs of what they're asking for, and the engineers are so disconnected that they reap zero benefit from whatever business goal is going to be accomplished by this.

I'm actually okay with shooting myself in the foot to sell my toes every once in awhile. I just don't want to do it if everyone else is going to make money from selling my toes except me, and they don't care about giving me time to rebuild my foot afterwards.
Could we wait on "improves on iOS 7's X" articles until iOS 7 is actually released to consumers? Things could easily change between now and whatever date Apple finally chooses.

This is something like "Chevy's new car doesn't have the problems of the 2017 Ford Fusion that we saw a prototype of".
If you want to know more about what it's like for a blind person read "Do You Remember the Color Blue?" by Sally Hobart Alexander.

It's aimed at children, but I found it interesting.
I'd take that article with a grain of salt. There's much omitted from that account and it happened 12 years ago.
Privacy, Secrecy, the Web, and Ads
Words are the substance, style is the presentation. The focus should be on the content with style in a supporting role. You can't convey content without a style, so at the very least you should ensure that your styling doesn't detract from the message you're imparting. The first bite is with the eyes, as they say.
New Home Pingdom Site
Guess I should have been more clear: what risks do they run that aren't already inherent to link shorteners like bit.ly (that are still getting users)?
In my experience, practically everyone agrees that software should be simple, but not everyone agrees on what simple is.
I actually like adding filters to my photos, not sure if that makes me dumb or a hipster but it kinda just makes them look more surreal at times.
What's your take on this? From the fact that you are pointing this out would you say he hasn't changed his spots? (I know nothing about him which is why I am asking..)
So we've come around full circle. Back to plain old text. NCSA Mosaic anyone? I just hope we don't all go back to <marquee> and <blink>...
Because you don't want to be in a high performance jet when the VM decides to do garbage collection during a critical maneuver.
Firecloud is [will be] a P2P web publishing platform in your browser
No idea at all. Edited the comment to make that clearer. I have zero professional exposure to any of these people.
Yet we fight a lot of "obsolete" enemies. The effectiveness of the F-35 won't be known until it is battle-tested. Before then, it's all rainbows and unicorns.
It is terrible, made my palms sweat. But seeing the reaction from The Authorities and the townspeople (misdemeanor charges, "After the principal reported the incident to police, townspeople forced him to resign") makes me think twice about the fear of exposure of hazing I have seen from victims. Kind of makes me think we should advise kids to take justice into their own hands, maybe. The victims might feel a bit redeemed after vigilante action, and AT LEAST THEY TRIED.
Why I use spaces over tabs
This is for the San Francisco Hacker News meetup group!
Then the court should revisit the
case. They can do that, too.
I'm rather annoyed that you're not reading anything I've said.

No, the problem is not that I haven't read the page. I have. It can cause segfaults. Your configuration can cause segfaults. Your configuration can cause segfaults. Your configuration can cause segfaults.

And yes, I acknowledged that they can't remove it because it's too late, using those exact words. That doesn't mean it's not a problem. It means you should jump ship to something saner, like lighttpd, which also doesn't have the rewrite-sometimes-redirects problem.
$100,000 goes to anyone who hacks Windows 8.1
Thanks for your input. I'll try to consult one.
Sounds like the sort of thing you'd write for The Daily WTF's contest: http://omg2.thedailywtf.com/
Drones are far more appropriate for today's conflicts.
I am looking forward to this as we are preparing to raise a seed round. I'll be driving from Palo Alto to SF so if you're interested in carpooling, email me (in profile) next week.
So funny to me how people take the message so literally. Most people do not view the source of a webpage so a little script that doesn't affect the user experience is irrelevant to 99% of internet users. The message is about what you are presenting on the web...
AOT compilation really isn't required; sometimes JIT compilation is a real winner (like in those startup time cases Alon mentioned, but also in cases with constrained memory, like mobile) - sometimes 90% of the code in your app isn't going to be running most of the time, and it's much better to have 1-2ms pauses for things to be JITted or larger pauses behind a loading screen.

The AOT compilation for asm.js is arguably a win primarily because it produces deterministic behavior (existing heuristics in SpiderMonkey and V8 are an ENORMOUS PAIN) and because it enabled them to get their existing IonMonkey code generator to produce better output. Those both justify the effort, I think, especially given how cheap it was to implement.

All of those proposed features in your last two bullet points are useful for JSIL, which does not use asm.js. I can understand how people with a narrow understanding of JS look at these things and think 'these are all VM features for asm.js disguised as JS APIs!' because they don't understand, but they simply aren't. IIRC, Emscripten doesn't even benefit from Binary Data or Value Objects because it already has a virtual heap; that's not going to change.
Can we please stop using "ab" for benchmarking and perhaps switch to a tool that actually generates HTTP/1.1 requests?
Uncaught TypeError: Cannot call method 'getOrigin' of undefined
I love what these guys are doing and their technology. Congrats guys!
If anyone's thinking of doing hair animations for non-legitimate reasons, it's restaurant website developers
Minimal change development
This is an incredible team.

The reason why I love seeing this is because these guys fall squarely in the category of work hard, iterate for years and get rewarded. This wasn't an overnight success. Rather, it's the result of an extremely smart team committed to making something great. I'm really excited to see what they come up with over the next few years.
Why not? It's not like they can just go down to the local HackerNinjaRockStar DojoSpace and rent some Ikea standing desks. At Apple, for instance, there are sealed buildings and security requirements that impose a cost on expansion above espresso machines and foosball tables -- and they're not required to meet DoD legal standards.
>Does simplifying the front end often compromise the backend?

Sometimes but not necessarily unless you're making a programming language or a platform. For typical, more direct cases it's not necessarily the case at all.
Nothing, because no one gives a shit.

Stop flattering yourself, no one is reading your facebook messages or emails.
This has already happened years ago. Getting optimal performance in V8, SpiderMonkey and other runtimes is only possible if you hit the sweet spot for the engine's various heuristics. There are literally thousands of different ways to hit 'optimization bailouts' in a modern JS runtime and end up dropped into an interpreter or incredibly slow 'safe mode' JIT, where you will see performance penalties of 10-200x (yes, really).

Plus these heuristics aren't documented, change frequently, and sometimes have bugs. It's awesome.

In this regard, asm.js is an improvement because at least it makes it clear how you end up in the 'fast zone' and it has an offline validator you can use to check your code.
I agree completely. Learning HTML was such an empowering feeling for me. You can make something fancy or minimal, whatever you feel like. We are all unique and personal websites show that much better than a social media website ever can IMHO
On USV, my dealings have shown them to be incredibly hands off. Had a case where I made a deal suggestion to USV v. one of their famous investments. They said "I've thought they should do something like this for years, they won't but we respect that it's their decision". (Or something like that not an exact quote obviously..) Which is to bad (for me) because that investment recently had a big big announcement.
After sitting on the setup of my blog for a good nine months -- trying out several static site generators, experimenting with different color schemes, reactive layouts, font sizes, font families, deployment scripts, and composing about 15 stubs for posts and not finishing a single one -- i have accomplished less than this.
Well in that case couldn't you just use the native github application? It has a decent UI for normal usage scenarios. (Assuming they're using GitHub like these authors.)
We aren't likely to see masses of T-72s rolling under uncontested airspace any time again.
Dang it! You're right. Bad habit. :(

I've just updated it. Thanks!
In time I'll publish a paper and technical report. In a little more, I'll show a prototype. But I do have my hands fairly full!

I don't usually work from the literature (it is hard to access papers outside of academia, and they're usually weird, abstract, hard to read, and miss the point anyway) so I work from the first principles.

But at a high level, imagine either an Ericsson or Carnot cycle, (dependent on materials), where high temp, high pressure heat addition is contiguous combustion during expansion, and the isothermal compression is a secret sauce :-)
I was referring to the fact that the syntax is the same so if you don't know the NeDB syntax you can play with the MongoDB REPL. Appart from this there is no connection between the two.
They're a dime a dozen these days. Incomplete list, block ciphers only: HIGHT [1], PRESENT [2], KLEIN [3], PRINTcipher [4], KATAN [5], TWINE [6], LED [7], PRINCE [8], Piccolo [9].

AES is generally known to be doable in around 2500 gates, or gate-equivalents. These lightweight ciphers aim lower, towards the 1000 or so.

[1] http://www.iacr.org/cryptodb/archive/2006/CHES/04/04.pdf

[2] http://homes.esat.kuleuven.be/~abogdano/papers/present_ches0...

[3] http://doc.utwente.nl/73129/1/The_KLEIN_Block_Cipher.pdf

[4] http://www.iacr.org/archive/ches2010/62250016/62250016.pdf

[5] http://www.cs.technion.ac.il/~orrd/KATAN/CHES2009.pdf

[6] http://www.nec.co.jp/rd/media/code/research/images/twine_LC1...

[7] http://eprint.iacr.org/2012/600.pdf

[8] http://eprint.iacr.org/2012/529.pdf

[9] http://link.springer.com/chapter/10.1007%2F978-3-642-23951-9...
With constrained memory, ahead of time wins by a long shot thanks to demand paging. You only need to allocate physical memory for code that is actually hit.

With JIT code, you need to allocate space for the bytecode, allocate space for the linking, relocations, or whatever substitute you use (since bytecode typically isn't prelinked), allocate space for the JIT itself, and allocate space for the JITted output.
I was asking myself the same questions and ended up just writing an app - my first one - that simulates your future financial I/O based on earnings and spending etc. It's free:

https://play.google.com/store/apps/details?id=com.codelemma....

What the app does is it takes your income, expenses, savings and debts, and generates tables and graphs showing future monthly cash-flow, savings, net worth. Each element may be independently configured with rates, amounts, durations etc.

It's my first app so I'd be very happy to hear feedback on usability, usefulness, etc. Thank you.
The tokens would be signed with an expiration, so if they backed up to a time when they had a valid "access" token, the verification would fail (assuming the device has an internal chronometer that the user can't modify). If they were to lend the game to a friend, then back up to a time before they lent the game, there could be a problem.

So it'd be up to the backup software with access to the sensitive storage being smart enough not to cause that problem. Alternatively, backups and restores could require an internet connection.
Congress to consider “Aaron’s Law”
For "roll your own" with an embedded device, the Marvell Kirkwood is probably the best since it has AES acceleration in hardware. One of the Sheevaplugs has this. It's not really well supported in Linux yet. It ends up being about as fast as an Atom.
And yet you chose to present your ideas using words. At the heart of the Web is the communication between humans. At the heart of that communication are words.

You can argue that we can communicate using images, but that communication is limited when compared to words.

You can argue that we can communicate using sounds, but unless those sounds are words, the communication is limited in the same way as when using pure images.

You can argue that the Web is not only about communication between humans (e.g. we can do shopping online), but the communication is indispensable for all those other services.

You can argue that the Web is not only about communication between humans, but all that machine-to-machine communication is ultimately there to connect humans.

Web design is there to help you achieve whatever you're trying to do on the Web in a way that's more appealing and easier to interact with. I think that Justin's assertion is that words are at the heart of whatever you're trying to do on the Web. And I think he's dead on.
Just being cynical here, but books written by people from far away places have circulated for a lot longer than the internet has been around.
You say idiom, I say chronic lack of imagination.