skysight-inc/HackerNews huggingface dataset:
1. IMO, the bigger issue with response_body == stdout is that the default data output is unescaped. Take a look at Wordpress templates. The fact that the template framework is PHP doesn't really cause any issues. And WP is diligent about keeping the escaped data easily accessible, so calling <?php the_post(); ?> actually works fairly elegantly.

2. I wonder if reliance on == has ever caused any major security issues? I know there's some edge cases, but I can't remember a time == ever came back to bite me. (Yea, you can point to strpos(), but everyone knows that example and it's marked with a big red box on php.net.)
It’s tragic that this is a clear-cut trademark violation, because the name is otherwise perfect.
Error Handling in SQL Server: Best Practices
My gut feeling is the ripple effects in the local economy is huge. Never mind that this product could probably be produced with less effort at a centralized location - initiatives like these work by both providing a slightly cheaper product and enabling poor people to participate in secondary or tertiary industries.

So in a sense this is an education project on multiple fronts as well. Not just about hygiene and taboos, but also about economics. It's a brilliant illustration that increases in wealth, even from a modest starting point, have large effect. It would be really cool to see this phenomenon studied closer.

World poverty is really just like the Great Depression on a global scale: Lots of quite healthy and able humans which are for some reason (economics, lack of education, lack of communication) unable to participate in global wealth creation. Anything that helps alleviate this problem is a big bonus for humanity.
1. We have a currency without government!
2. We were robbed, and will now contact the government.
I feel like most of the university-educated young women I know use Diva Cups or Keepers (and many don't mind talking about them and promoting them to others or I wouldn't know that). I think their usage really depends on local culture, social norms, propensity to shop in organic grocery stores where they are often sold, etc.. The first women I knew who used them started in the early nineties.
> I don't have to get into the guts of Drupal and write PHP a good day.

I'm a Drupal dev at my day job, application dev at home. I love getting into my codebase for my sidejob, but D7 is awful under the hood. PHP isn't what makes it messy, it's the procedural hook system.

And yes, PHP 5.5+ is awesome to have.
This idea keeps coming up and I believe mopidy is perfect for building such a system (of course I am biased as one of the main contributors).

The way to go about building this with mopidy is essentially one of the following:

- Create the voting system based on the MPD protocol to talk to mopidy

- Create the voting system using our JSON-RPC websocket access to the core APIs.

- Create a frontend in python with full access to the core APIs.

Each of these of course have it's advantages and disadvantages. But to me one of our main strengths is the architecture we've designed over time and how people can use mopidy almost like a framework for exposing the media server in a novel way.
What is the situation if you are cofounder of startup? So you own some part of US company.
It seems to me that PHP is pushing the built-in webserver to allow for accessibility, or "plug-and-play" if you will. Instead of having to go through having a LAMP setup everywhere you go, you can test code on the fly.
Why haven't the major bitcoin banks/exchanges banded together and made a set of standards, akin to PCI-DSS to define security standards and implementations for these services? You would think that everyone would do it after MtGox sank. This is starting to leave bad joke territory and I hope it doesn't happen to Coinbase.
Nice.
I created a Vonnegut books list, but the output is not in the original order.
there are large segments of the population whose wants and needs it is not very profitable to meet.

Did you mean to include the "not"? If so, why would established companies and/or entrepreneurs try to meet people's needs if it's not very profitable?
USCIS is generally very wary about L-1 abuse. The US company would need a full staff and board of directors.

i.e. Both sides of the equation have to be real companies doing real things who have a legitimate need to occasionally bring employees across. Neither of the companies can exist solely to funnel workers into the US.
One guidebook to the archeological site of ancient Troy, starts with, "Having solved the money problem, Heinrich Schliemann turned to archeology." (For a bio, see https://en.wikipedia.org/wiki/Heinrich_Schliemann.) Perhaps rather than starting in science and then bailing to industry, academics might follow Schliemann's path and earn their funding first. This won't work for many very expensive fields, but it's unclear how well the funding lottery is working for those fields now.
There is an important distinction between making an estimate on the spot based on reasonable expectations of the problem ,I am 90% confident I can have switch panel wired in 6 hrs. Verses, I have no clue and need to spend 3 hrs just analyzing the problem before estimating the difficulty.

I have been thinking about this a lot over the past months, most teams and projects fail because people get in over their head by

* Not analyzing the problem deeply enough (hrs not weeks)
* Estimating too early, they don't want to look weak
* Not revising estimates once they are in it (heroic save)
* Not asking for help or re-analysis from outside minds

On projects that went well, we put concerted effort into mitigating the above failure modes. Being wrong or not knowing is OK, being wrong or not knowing AND NOT fixing it is a huge problem. These issues don't come out of nowhere, there are precursors and warnings far in advance of emergency situations.

As a poster above mentioned, accepting a bullshit answer is being complicit in a lie. We need to push back in a polite way when we are being bullshitted. By accepting poor estimates (in all the dimensions of poor) we enable failure.
OpenSSL seems to have a less restrictive licence to me (although I suppose it is an issue if you want to directly integrate it with GPL code, but that's why it's a library), and I somehow wouldn't expect a bug of this magnitude to make it past their review.
How does this compare with the Polymer project?
People getting thrown out of their houses due to lack of money (and lack of earning capability) are complaining about other people spending massive amounts on frivolous uses ?

I am amazed. Wait ... no I'm not. I'm even inclined to call those claims justified.
While this is all true, there are a couple of other important considerations:

1) packagers have a history with their packages. They fetch from the same source, verify with the existing GPG key, etc. They aren't fetching from a different random source for each build. As part of the package review process the upstream source should be reviewed and confirmed.

2) Everyone in the distribution is using the same code. Unlike Windows/OSX the users get the same binaries from a single source. This allows problems to be corrected quickly for everyone at the same time.
I meant passing a pointer rather than a by-ref call (which is indeed C++ only).

i.e.
void myfunc(thing* stuff)
{
return;
}

int main()
{
thing stuff;
myfunc(&stuff);
}
It's an interesting question of how much resources law enforcement should assign to a case like this.

Many fierce proponents of Bitcoins are the anarchy-leaning libertarians. Its appeal is that government agencies can't track and tax it (or have a tougher time with it)

While I do think a crime has occurred, it feels a bit like collecting a benefit you refused to pay into.
>As people, we should want to have the freedom to decide our own fate, not put it in the hands of an alien entity.

This is what I don't understand about your argument: the governance of cryptocurrencies is the same democracy you're advocating elsewhere. The difference is replacing the fallible human element with a set of mathematical rules. Noone is saying the rules cannot change (or altcoins would not exist). The entire purpose of the cryptocurrency experiment is to find rules that everyone will like and aren't based promises from politicians, corporatists, or plutocrats.
There's another way that "AirPNP" could be misinterpreted, to humorous effect: https://en.wikipedia.org/wiki/Party_and_play

(It's especially amusing when you take into account the stories (whether exaggerated/apocryphal or not) of people using AirBNB as a means to identify places to hold such "parties").
Yes, we need another paid email service. Competition is good.

Besides the obvious gmail, I think your fundamental competitor in the not-gmail space is fastmail.fm or something like it. If you think you can make a go of it at those prices, plus or minus an order of magnitude, then have at it.

Mail is not for the faint of heart. Besides the technical details (which are harder than most people assume), you have to operate in a way that you earn and keep the trust of your customers. You have to not lose mail, you have to stay up.

You have to accept that you'll be an unwilling partner to the NSA and other law enforcement. You'll also be a target of under the table surveillance by the NSA and other spies and criminals.

You have to get email fundamentally, rock solidly right. Above that there's lots of room for features and services more or less related to email.

You're going to have to work hard to peel me away from fastmail, and you'll have to work even harder to peel everyone else away from gmail, or even to get them to notice you.

I look forward to your Show HN (truly).
March 4th, 2014 - The Sharing Economy jumps the shark.
Show HN: ShelfLife, a social commerce platform for collectors
I'm sure there's a perfectly good reason why I clicked on a link that told me it would kill my browser...

Yes, killed Chrome 33.0.1750.146 m on Win7 here.
http://www.openwall.com/lists/oss-security/2014/03/04/8
As in embedded cue sheets? Are you sure this isn't supported? At first glance it looks like gstreamer understands these and hence mopidy should.

EDIT: I'm wrong: it's not in currently supported version of gstreamer (sorry).
I think josephlord's point was that the name "ROT13" completely specifies the 'key': If you changed that, it would no longer be ROT13. So it arguably can't be considered a key if you define 'key' to mean 'a piece of information additional to knowing the algorithm used that is necessary to decrypt'. (If the 'algorithm used' was specified just as ROT (i.e. caesar cypher) then 13 would be a key). But this is basically semantics.
Calcium, building block for the world
Indeed, the effort to create a central protocol repository is at least 20 years old. No one succeeded. The key part here is the crowdsourcing. Won't happen without a crowd. And won't happen unless a busy geneticist can share with a tap of a button. That's why for two years we have been focused on giving amazing tools to researchers - build the user base. We did not even begin building protocols.io and the checklist app right away because we know how hard it is to get traction. Also, we may just be doing this at the right time - on mobile. The protocol checklist app is the key ingredient that will make this happen.
It's a weird problem. A 6 major release may be the only time to do such things, and people here think it would be a disaster. I don't know if it's possible at all to retrofit language improvements into the stdlib.. do you write a parallel one or do you write books hoping people will catch on the latest way to write good code ?
Ok. So where can I find an accurate exchange rate for Bitcoin vs. U.S. dollars? I'm just curious to see what the rate is these days, given that people keep getting "hacked." And as a so-far-not-adopter, I wonder if now may be the time to "invest" a little into the Bitcoin thing.
> Systematic hard work can get you results in academia.

This is not necessarily true. At least in life sciences, there is a big element of pure, dumb luck. Biological systems are inherently noisy, and no matter how diligent we try to be about our processes and protocols, there is always luck.

I spent nearly two years of my life performing a single protocol (an endocytic receptor internallization assay) and the line between "good results" and "wasted a week" was incredibly thin. Some things just require luck to work out, no matter how careful you are.

I left academic biology because I didn't want luck playing into my career. In academic biology you must be incredibly smart, incredibly dedicated, willing to work long hours with little pay, AND be incredibly lucky.

I looked around at the post-docs in my department (at MIT, mind you) and saw brilliant people who would never produce a top-tier article, who had spent so long in their post-doc that they had no chance of ever becoming a professor. They would probably wash out to some industry job at Merck testing cholesterol drugs after wasting 10 years of their life pursuing some fictitious dream.

Truth be told, I wasn't as brilliant as most of the people around me, so I made a judgment call and left. It was the right decision, I'm happier than ever (and actually make money too).
John Chow Kicks Butt Again
While I do believe increasing reliance on 'trustless economy'-enabling concepts, I can't help but wonder how feasible, and by extent how constructive, the idea of thinking in terms of a big paradigm shift is in this regard.

Yes, bitcoin might be a nice pocket of 'trustless economy', but any practical use inevitably requires trust. There's the hardware, the OS/software, the ISP's, the exchanges, etc., that all, to a greater or lesser extend, require trust.

Now Snowden clearly exposed that this trust is not deserved, and that's a problem. But while working on increasing this 'trustless economy' is a worthy goal, I can't help but feel that the best approach is to both work at increasing trust where it can't be avoided, and decrease the need for it where possible.

But perhaps that's too defeatist. I'm following developments in this area with great interest!
"The easy possibility to write letters must - seen theoretically - have brought a terrible disruption of the souls into the world. It is communication with ghosts, and not just with the ghost of the receiver, but with one's own ghost as well, which develops under the hand in the letter one is writing, or even in a series of letters, where on letter substantiates the other and can call on it as witness. How did the idea came up that humans can communicate with each other through letters! One can think of a person that is far away, or touch a person that is close by, everything else is above the power of humans. But writing letters means to bare oneself in front of the ghosts, which they are greedily waiting for. Written kisses don't arrive at their place, but get drunk out by the ghosts on the way. Because of this plentiful food they multiply so outrageously. Humanity is feeling that and fighting against it, it has, to disable the ghostly between humans, and to achieve the natural communication, the peace of souls, invented the train, the car, the airplane, but it's too late, apparently they are inventions made while falling, the opponent is so much calmer and stronger, and invented after mail the telegraph, the telephone, wireless telegraphy. The ghosts won't starve, but we will perish."

-- Franz Kafka, letter to Milena Jesenská (March 1922)
Maybe put a warning (something in the title) which tells that opening the page may cause our browser to crash? I thought it would open a page where the issue is discussed, not a page which directly crashes my browser. (HN hides the subdomain: demo.cmrg.net, therefore removing the only indicator showing that this is a demo)
Not to mention their C++ IDE that they will be releasing which the C++ community is in dire need of. Finally we'll have a decent alternative to VS!
ShelfLife co-founder here. We're aiming to document to every collectible ever made, and provide collectors with the best tools for buying, selling, and tracking their collections.
>I'm actually shocked by the lack of standardization and documentation in the wet lab

There's actually quite a lot of both of these. Here's the thing, we all have protocols specific to our labs or organisms. For many of us, our protocols are based on a canonical source (Which are now usually found in Nature's Prootcols) but optimized around what we do. Working with organics is rarely as easy as it might seem (especially if you're coming from the software side of things, I somwhat did too). I've digitized most of our protocols (some dating back to the 1950's) but for the most part we all refer to hardcopies of them. Electronic protocols aren't nearly as useful as print ones, especially since they're constantly tweaked. And most of us in academia freely share our optimized protocols with eachother -- you only have to ask.

There are a couple of Lab-notebook-in-the-cloud options but I've never really liked any of them. Instead I keep everything in Dropbox (for sharing with my colleagues) with versioning handled in a private git repo. I can commit experiment notes and checkin images. All of my notes are in markdown.
Honestly, the visa and immigration stuff is more of a problem for the company hiring you than for you yourself. As someone originally from the UK, I'll agree with the health stuff, though. The system here is an utter mess.
"I specifically brought up the ability to service a loan."

Again, that is not what is illegal. What is discrimination is to pick one candidate with equal background ability, and drive over another. Yes, it is wrong to use it as a signal for not being invested in a company.
Agree that this should have been presented differently - something other than the normal update mechanism, which becomes routine over time. This is a major update with a fee associated - the 'upgraded' user is presented with an 'unlicensed' copy of Arq4 and continual purchase dialogs until they get out their credit card and pay again.
Indeed there is, I have a friend (Java developer, early 40ties) who moved to Amsterdam with his wife and two kids. It's pretty easy for in-demand jobs.
I use code completion all the time, even when navigating APIs I've written myself -- not because I don't remember what they do, or what the functions and methods are called, but because it serves as a check that what I expect to be doing is what I'm actually doing. As a simple example, say I need to write `user.getAddress()`. Now, it doesn't pain me that much to type 'getAddress', and I'm pretty certain that the method that returns the user's address is called 'getAddress'. But if code completion doesn't offer that method as a suggestion, I'm going to do a double-take because I probably have the wrong object.

I do the same thing on the command-line: if I'm going to cd into a long path, I'll often forget I've typed cd and try to tab-complete file names instead of just directory names. When hitting tab refuses to autocomplete the file (it only completes directories), I'm forced to rethink what I'm doing before I finish typing an invalid command.
That's a LOT of determination. I'm amazed by his courage. There must be more to the story that was left out. Salute to the gentleman. A godsend.
> Exactly. That seems to support his statement.

Oh, I don't disagree with him/her.
Definitely worth it, thanks for the suggestion!
Can Plants Do Arithmetic?
Yet nobody will pay fees for a bitcoin wallet.
> This is profoundly ridiculous. It's the equivalent of saying Home Depot shouldn't sell power tools because some do-it-yourselfer might saw his foot off.

You're incorrectly characterizing the argument: it's actually like saying Home Depot shouldn't sell power tools without safety guards, fuses, emergency shutoffs, SawStop, etc. PHP has a number of misfeatures which make it extremely easy for all but the most vigilant of developers to make mistakes with security consequences (https://eval.in/108854 was making the rounds just this morning) or simply increasing the likelihood of creating bugs (i.e. the inconsistent parameter ordering across the similar array_* functions). Most of these complaints date back to the late 90s but now are much harder to make both because the core developers don't take them seriously and because there's now a huge backwards compatibility problem.

The most interesting development in PHP is the HHVM hack mode or similar concepts where an actively-maintained codebase can opt-in to safer behaviour. For the sake of anyone who has to secure code on the internet, I hope this catches on.

EDIT: See slide 15 onward in http://www.slideshare.net/skamerman/ipc-2013-high-performanc...
So, why bother?

Better pay and opportunities, it's as simple as that. Having lived in the UK and Canada, I can say that the tech (and particularly startup) industry in the US is simply much bigger and more advanced than other places I've been.
There are many ex-companies that tried to push for an electronic lab notebook (ELN). There are several other ELN companies today that seem to have gotten nowhere. That's due to a panel of reasons, most important of which - they are competing with a paper notebook. May not be digital, but getting information into the paper one is trivial. Getting it into all the others a huge barrier.
I think the webcomic "Toothpaste for Dinner" perfectly captured this sentiment:

http://imgur.com/qhrduxF.jpg

Are there negatives to an alway-available Internet connection? Sure.

Are they massively outweighed by the incredibly power of being able to communicate and share ideas and ideals with the entire world, and access the sum of human knowledge, for free, at a moments notice? Definitively yes.

Calling a society "truly free" simply because they do not have easy access to one of the triumphs of human ingenuity seems naive at best, and wilfully patronising at worst.
> I don't think we need another email service. The backend stuff tends to be very complex

Hmmm, there's an interesting idea for a business, Back End As a Service. You provide rock solid email back end, and your customers are email "providers" who distinguish themselves on features, price, charity, whatever, all of them using your back end services.
"His soul swooned slowly as he heard the snow falling faintly through the uni­verse and faintly falling, like the descent of their last end, upon all the liv­ing and the dead."

(there are some people having a dick fight about their majors in college...well I was an English major.)
I don't think something like this should be hosted/SAAS. I don't want to send my Gigabytes of logfiles (sometimes containing confidential informations ...) over the internet to some unknown entity with probably questionable security.

My small startup company already has more than 10 (virtual) servers which would cost us 500 dollars a month to monitor which is more than the servers itself cost.