skysight-inc/HackerNews huggingface dataset:
This is actually not "bizarre". It's not even unusual. And it has a perfectly rational explanation.

Suppose there are three cities: City A, City B and City C. And for simplicity's sake, suppose that City B is the hub for the airline.

Let's say B and C are major business destinations with a lot of business traffic between them. Business travelers are less price-sensitive since they're not personally paying the fare (they just have to stay within corporate travel rules), and more concerned with things like flight length and schedule.

But City A, on the other hand, isn't really a major business destination. People who want to go from City A to other cities are likely on personal/tourist travel, and those passengers do one and only one thing: punch the origin and destination cities into a travel-search engine, and pick the cheapest ticket. All other considerations are null.

Now, suppose that you are the airline employee in charge of maximizing revenue. Getting money out of the B -> C route is easy -- you just need to know a bit about corporate travel policies. If most companies auto-approve any ticket under $500, for example, you could set the fare at $499 and, so long as the flight is short and at a good time of day, you'll get business travelers paying it.

But what about pricing for trips out of City A? They need to connect at your hub in City B, but again you have to remember that price is the only consideration that matters to those passengers. So you set the fares out of City A as low as you can manage while still being profitable (and it may even turn out that B -> C has to subsidize the routes out of A a bit).

The result is, often, that A -> B -> C is cheaper than B -> C.

Similarly, for some city pairs, A -> B -> C will be cheaper than A -> B, which creates an incentive to buy the A -> B -> C ticket, not check a bag, and then just walk out of the airport in City B. This is "hidden city" ticketing (because it's "hiding" the fact that your real destination is the connection point), and airlines will usually penalize (through revocation of frequent-flyer accounts, etc.) passengers who do this.
You're playing semantic shell games here. The user has no reasonable way of knowing that stripe.js came from stripe, and as such, there are no technical OR human controls that enforce that behavior.

In short, the fact that stripe.js is delivered from stripe DOES NOT MATTER, because the user CAN NOT reasonably validate this behavior.

I know you're not dumb over at Stripe; I have a hard time believing that you're not willfully lying. After all, "disrupting" onerous industry security standards is to your competitive advantage.
Oak Brook Illinois is an archetypical midwestern suburb --- strip malls, chain restaurants, vast residential areas, centered (like San Mateo) on a big shopping mall --- that happens to host a bunch of high rise office buildings. No doubt there are lots of people who work in those buildings and choose to live in Oak Brook so they can walk or take the Pace bus to work. But that doesn't make the living experience of Oak Brook comparable to that of Chicago, or even Milwaukee.

I'm not trying to say that San Mateo is irredeemable. If I had to move back to the Bay Area (crosses self), I'd probably look at San Mateo before San Francisco, because I have kids, and San Francisco seems like an awful place to raise kids. I'm just saying that it is not a realistic substitute for San Francisco for city dwellers.
Yes - 'a broken clock is still right twice a day', and scientific conclusions cannot be accurately or scientifically applied via analogy.
I think that was updated in December:

https://github.com/blog/1719-github-pages-just-got-easier
Wait, so how do you escalate this to RCE?
> Easy: you are. Lots of people live in San Mateo. It's still a suburb.

The issue was what is a "dense urban area". A city that is a suburb because of its relation to a another city can still be a dense urban area, and a sparsely populated municipality that is not a suburb can fail to be a dense urban area. San Jose is not a dense urban area, by any remotely reasonable standard.

> consider that your metric says that Berwyn and San Mateo are more like cities than Bellevue Washington,

All of those are cities, none of them are "more like cities". The issue was "dense urban areas", and certainly some of them are more "dense urban areas" than others, and that is easily and objectively verifiable.

> The idea that you might think San Mateo is more of an urban area than San Jose

You keep leaving out the key word "dense".

San Mateo is, objectively, more of a "dense urban area" than San Jose. Whether its more of an "urban area", density aside, isn't a entirely a well-defined question, but given that San Jose is basically a giant mass of the type of development referred to as "suburban sprawl" that just happens to be within a single legal jurisdiction that isn't a satellite of a larger municipality, I'd say by most reasonable standards its probably not more an urban area than most Peninsula cities, even if the latter happen to suburbs of San Francisco.)

Though, of colin_mccabe's examples, I'll agree that San Mateo isn't the best (Berkeley probably is).
FANBOYS Have you ever loved something so much it hurt?
It's great to see schema migrations move into Django core. South is great, but Django will be much better with schema migrations baked in, especially for newcomers.

For anyone coming to Django from Rails, South seems anomalous. Outside of database migrations, Django is a very battery-included framework, so it's weird that until 1.7 data migrations were handled by third party tools (mostly South) and not mentioned at all in the Django documentation.

This is a big step for Django. I'm excited for the (not too distant) future when 1.7 is the official release.
Holy shit, I still have that GAME down stairs.
Pylint, pychecker and yes: lots of unit tests.
GitHub's announcement, including other Organization-related enhancements: https://github.com/blog/1763-better-organizations
So there's 'we know the way social media plays out' and there's actual science and the two phenomena have nothing in common beyond 'we drew conclusions based on what we saw'. The difference is that the latter is rigorously controlled, tested and peer-reviewed for according to a vetted methodology, and the former is no different from saying 'basically all asian people I have met are good at math, thus this new asian person I have just now met must also be good at math'
Happens to me. You wouldn't happen to be browsing with Ghosterly, would you?
My interpretation of the graph is this:

Overall, things that rank high on SO and low on GH are more "corporate-y". Things that rank high on GH but lower than the line are "startup-y".

We have some ask HN questions like which tool I should pick-up, employable skillset, etc. Purely based on this graph, I would say pick the top-right points that lie close to the line. That should strike a decent balance.
I think they just need more than two sources since there's more to program language popularity than they can two sources can show. Stack overflow naturally biases towards languages with worse documentation and those which cater to newer programmers. For example, it favors Visual Basic and disfavors Golang, resulting in VB having a rank of 19, with Golang ranking at 22 despite golang being far more popular on github.

Factors which this survey doesn't account for include what languages new programmers are being taught in, how much code is actually running in production, what type of developers companies are wanting to hire, and what those companies are writing in behind closed doors.
The application is when you need something to be positioned next to something else as an overlay. Like a dropdown, details on hover, etc.

Like the dropdown here: http://github.hubspot.com/select/docs/welcome/
Or the overlays here: http://github.hubspot.com/shepherd/docs/welcome/

You could write the positioning javascript yourself, but the element's won't be smart enough to reposition themselves when they hit the edge of the screen. They also won't be smart enough to pick the appropriate positioning method (absolute, fixed, or absolute within the scroll parent) which will result in the fewest repaints. You probably also don't use CSS transforms much, so you won't add that optimization. Also, you won't be able to optimize multiple overlays existing on the page at once into a single repaint.

Also, you'll have to write all that js yourself, this is a library, ready and waiting at your convenience.
Ha. Clearly Facebook doesn't care about privacy.. I wonder if they even asked him first.
> Here's a gem from Django's 1.6 release notes (that somebody praised its ORM in the comments above): "The Model.save() method now tries to directly UPDATE the database if the instance has a primary key value. Previously SELECT was performed to determine if UPDATE or INSERT were needed"

I see nothing wrong with this; almost all tables have automatic sequences for PK insertion. The proper idiom for creating a new instances is the model.objects.create() method, and save() supports the force_insert argument. This is a valid optimization and reflects the use case of people who are using the framework.

I've been developing web apps for over half a decade, some of them pretty massive, most for regular businesses. The number of times I have needed to drop to SQL I can count with my hands outside of the limited domain of reporting.

If you need to use SQL for regular old CRUD behavior, either your models are not being properly normalized or you're using a shitty ORM, and neither SQLAlchemy nor Django are bad ORMs. If your problem is that your domain object is spread across 15 tables and you actually need all those joins, there's always methods that invoke the necessary SQL and return the encapsulated objects, but like I said, you have bigger problems there than worrying about your query abstractions.
Did Facebook ask you if they could disclose it? Because they did disclose it.
> One thing I don't see mentioned but once or twice is that one of the reasons the model fits MySpace is BECAUSE Facebook came around and offered a better model.

Salient point. I can't name another popular one among older-than-teens in the same vein (twitter I feel is a different sort of thing), and while I sometimes don't really understand why I continue to use facebook, I definitely continue to use it.
I think the reason you & I are talking past each other is that I wrote my comment because I found Colin's "dense urban area" appellation misleading. Your comment forced me to do the research to check whether population density meant anything like what 'potatolicious was talking about; had I done that before writing my original comment, I think my response would have been more convincing.

Oak Park is a village, not a city, and is denser than San Mateo. The city/town designation is arbitrary.

San Jose has a very large downtown area, much better transit, and more diverse retail businesses and restaurants than San Mateo does. It also has a gigantic residential sprawl. So does Houston. Nobody would mistake San Mateo for a urban area of the likes of Houston.

I agree with you about Berkeley, but that's telling too, isn't it? Berkeley is, like San Francisco, a hotbed of anti-Google protests.

The subtext of this thread is 'potatolicious' claim that no place other than San Francisco (and, admittedly, Berkeley and Oakland) offer a "dense urban core" with a "transit-centric" lifestyle that is "commutable" to jobs on the Peninsula. He is right. San Mateo does not in fact offer that. To argue the contrary, you'd need to find a way in which San Mateo offers that lifestyle that, say, Mountain View or Santa Clara or Pleasonton don't; otherwise, you're arguing that the whole Peninsula is urban, and the term doesn't mean anything. Obviously, if you find a job in downtown Pleasanton and are happy to eat out only at the Cheesecake Factory, Pleasanton is livable too.
Why is the organization name in the actual repos lowercase?

For example, https://github.com/eBay eBay is the org name but the actual repos are listed in lowercase, like "ebay / restsuperman" (which doesn't matter for the website but does matter for the git urls)
When is Stripe coming to India? An estimate would be really nice! The only way Indian startups can get to use Stripe right now is by setting up an LLC/LLP in US/UK and accepting payments through the LLC.

The problems with this approach are:

1) High initial cost of setting up the LLC.

2) Lawyer consulting fees and/or CPA fees.

3) Separate taxes for the LLC.

4) The same income is taxed in the country of the LLC AND India.

India is one country that needs Stripe very badly right now. The payment gateways here have the shittiest/unreliable APIs you could imagine of. One of them (CCAvenue) even got hacked and it was found that passwords were being stored in plaintext. (!)

However, the transaction volume is pretty much as high as any other country. Would love to get an idea of when Stripe would become available here..
Coursera / JHU Certificate in Data Science
I'm curious about the median income in NYC for those on rent control and those without it. You need to remember that most tech entrepreneurs in the city probably moved there within the last few years and therefore don't have the benefit of 10-20 year old rental rates.
I hope Haskell is installed, I just wrote a quick solution which worked with my local dictionary. However, I need to add argument parsing. Yawn. I guess I'll see tomorrow!
Physicist says he’s solved how life came from matter — and he may be right
I would say that Rail's asset pipeline is a contentious issue at best; not everyone needs, wants, or considered compressed assets to be a best practice, although I agree that some framework for support asset pipelines would be fine.

In any case, there are several extremely good 3rd-party asset pipelines
> a centralized way to stay connected

This is what FB has pushed all along iirc, or at least it's the argument I've always heard, and only recently (I'm 31) have I noticed that this is really what I use it for. It's fun to see pictures from a friend's vacation in Vietnam, or to read that so-and-so-who-I-like-but-not-enough-to-regularly-call got a new job or got married or something. It's bizarre, but

> Now we may grow up and stop caring about that sort of stuff, but I think it will take more than a few years.

...I only seem to care more over time, which is weird. I shouldn't discount making-more-interesting-and-smart-friends and the 'unfollow'-or-'hide all from foo on my newsfeed' features though.
Watchdog Report Says N.S.A. Program Is Illegal and Should End
None of them are very good. He cherry-picks stories and research (sometimes misstating it) and his logic is filled with myriad fallacies.

One of his biggest is the "survivor fallacy", where he talks to five successful people, identifies a common component and announces "that's the reason they made it!" The task of looking at the entire universe (successes and failures) and seeing how often that component exists in both groups is a task Gladwell leaves to muggles.

If I have to pick a book, I'll pick "The Tipping Point", because it was his first big success, and he makes more effort to ground his thesis in reality. The more acclaim he gets, the more frothy and goofy the next book becomes.

In his latest book, he explains how a basketball team of 10-12 girls from "from Menlo Park and Redwood City, the heart of Silicon Valley... the daughters of computer programmers and people with graduate degrees... [who] worked on science projects, and read books, and went on ski vacations with their parents, and dreamed about growing up to be marine biologists" were the underdogs against teams from ghetto schools, whose players grew up in poverty, dealt with the impacts of gang violence and often didn't have enough to eat.
That sounds like an accessibility and searchability nightmare. A huge part of the web's usefulness comes from its structured and standardized nature.
Do you mean public wifi? There are some areas that have some public wifi (Adelaide has some pretty good coverage in the CBD thanks to Internode, an Adelaide based ISP), but it isn't very common.

If you mean private wifi? Of course we do (in fact the CSIRO - an Australian based research organisation - was pretty pivotal in its invention in the 1990s), but the article is talking about mobile data not wifi.
And may the Source be with you.
Ah don't get me started on how I hate being lied to by monitor manufacturers. I have to start looking for 14-bit LUTs before I begin to trust that the panel might actually be 10-bit. Then again, I've a 8-bit with FRC and can't tell the difference. They both oversaturate as much as I'd like them to. :)
In HN we reserve consideration and respect for people who can't afford the rent in San Francisco. An old woman dying of cancer deserves none. She was probably a homophobe too!
What would you do to save your child's life?
I use both Mixpanel and Intercom.

Mixpanel has been excellent at showing marketing metrics in a typical SaaS funnel (Attention - e.g. visitors/locn./browser a consumable Google Analytics, Acquisition - e.g. did the visitor click the sign up button and become a new user, Retention - how often did the user come back). Mixpanel also has cohort analysis - users that signed up on a certain day, how long have they have been active/inactive and by extension you can calculate the churn. Depending on how you instrument your Mixpanel you can track user activity and understand product engagement. So if you release a new feature and there is no clicks on it, Mixpanel will show you that and you can remove it.

Intercom overlaps with Mixpanel in providing Acquisition information and Activity information (number of sign ins, last sign in etc). What is awesome about Intercom is the messaging feature. You can simply select one or more users and compose your responsive email (and you'll be shown a window on how the email looks in a mobile device) and send the email and track email metrics. To a product manager or customer success person at a SaaS business this is a great way to communicate with users. Intercom also has auto responders. So you can send welcome emails after a sign up (Mailchimp!).

In my opinion, Intercom is heading towards combining Mixpanel, Zendesk and Mailchimp all in one in the most elegant and practical way I can think of. Mixpanel and Kissmetrics are very similar.

(a self-plug: at kanban2go, we open sourced our mixpanel rails engine here: https://github.com/kanban2go/mixpanel-rails)
Tests, tests, tests, the larger the scope the better. Some people call it functional, some called it acceptance, some call it End To End. Test what your end users are going to do, either that last API call or browsers with Selenium.

It actually doesn't matter if your language is dynamically typed. Unit testing and functional tests are pretty big in the Java world, which gave birth to the JUnit framework family and Selenium, and many others. It's a matter of not allowing things that should be working a long time ago, ever breaking with any new commit.
I have to agree. I didn't see any mention of H.265 (edit: excuse me, HEVC), yet I'm sure I've read that it's what's going to speed up 4k beyond current HDMI 1.4 limits. (Though I see now via Google that HEVC requires quite a bit of hardware for real-time compression of a live signal at broadcast quality.) That said, I wouldn't bash Wikipedia too much. Write up better sources and I'm sure the editors will notice ;-)
Not just XML, JSON parsers are notoriously vulnerable as well.
Assuming you don't believe they are lying:

We built Google Public DNS to make the web faster and to retain as little information about usage as we could, while still being able to detect and fix problems. Google Public DNS does not permanently store personally identifiable information.[1]

More details about exactly what is logged at [1]. As for why, speed and security are the main benefits touted [2].

[1] https://developers.google.com/speed/public-dns/privacy

[2] https://developers.google.com/speed/public-dns/docs/intro
This is my reading of his comment too.. more specifically, that since the page comes from the merchants server, the page could be modified by an attacker to alter the form to (for example) submit credit card details to another server instead of Stripe's.

I think he has a point here. Certainly if the merchants web site is compromised, Stripe's PCI compliance won't prevent or detect the loss of credit card data (since it never reached the point where Stripe could protect it).
I recently went on holidays and was merrily tethered away on 4G to Telstra. Hit the cap limit on my plan - 3GB - called Telstra to get a datapack add-on - "I'm sorry, but you are on the highest plan, we can't add on any more data".

Basically I would have had to sign onto a completely new contract to get more data for the 5 days to end of month. Ridiculous.
The thing is, when you profile a typical backbone app, with a list of view.

Most of the time (IIRC 60-70% for ~20 events) is spent registering DOM event handlers. Instantiating the view itself is nothing in comparison.

So registering all the events on the container and delegating (in the POO meaning not DOM) give you a very good performance without scarifying too much your code complexity.
Alex, thank you for your response. I don't think my original observations about the wording of a support doc falls into a vulnerability disclosure. That doc has since been updated with enhanced guidance which addresses my original concern. As I think we all understand, the merchant must be responsible for ensuring the integrity and security of the HTTP response containing the reference to Stripe.js. After that they are absolved of the requirements surrounding the transmission, processing, and storage of the card data. As the PCI DSS states, they are ultimately responsible for their PCI compliance as the merchant.
Killing the Crunch Mode Antipattern
It clearly has a DB, even if it is a simple filesystem store. DB != RDBMS.
It's like he doesn't realize that libertarianism is the one true choice that any rational being would make.
$20,000 is free now? Please give me $20,000 then - it won't cost you a thing.
Looks nice.

The pagination of repos is kind of annoying compared to being able to quickly Cmd+F on a page to find a repo. They added their own search box but it feels slower than the browser-based one and also doesn't do infix searching (I type "www" expecting to find my "closeio-www" repo but it doesn't show up unless I type "closeio-w".), although hopefully that will be fixed.

Team related changes do seem more useful: https://github.com/blog/1763-better-organizations
Nice work, looks pretty solid. If you want to offload the responsibility of determining which GA metric events signify a potential spike, you could abstract it out and instead make the plugin use GA intelligence event alerts setup by your analytics team. This would help keep the respective subject-matter experts in their realms of expertise ideally allowing for a more on-going tailored approach to what, where, and how can trigger scaling fluctuations and the dev team isn't responsible for on-going management of the scaling trigger rules (well, to a certain extent).

Just a thought. I know you abstracted it out the way you did so as not to tie it to just GA, but if GA is your analytics platform of record, it could be worth pursuing. Cheers!
From the article: "New ‘flexible grid’ infrastructure allows more efficient bundling of channels, (42.5% increase in spectral efficiency) and data speeds of up to 1.4 Terabits per second (Tb/s) achieved without deployment of more fiber".
Without the deployment of more fibre? This is astounding news.
Right, but what if people want to talk about doge?
Makers of Candy Crush Saga Sue Apps That Use "Candy" & "Saga" In The Title.
I'd say it was cowardly and poor leadership for Obama to get this report and still half-step his speech, if not anti-democratic. There's something he won't tell us.