skysight-inc/HackerNews huggingface dataset:
Correct me if I'm wrong, but I think a large proportion of database hacks are still SQL injection attacks.

If you assume that the password handling code is on a webserver and the database is on a separate server, there is no reason to assume that an attacker getting read access to the DB through an injection attack will be able to access a pepper on the webserver.

Defense in depth is rarely a bad thing. Especially when it doesn't actually harm the end-user experience.
Anecdotally, the problem isn't that sites (e.g. Quora) don't trust FB Connect, it's that users don't.

For every project I've worked on that had both FB Connect and in-house login, almost no users used FB Connect, no matter how the two options were visually presented. I've seen iOS apps get absolutely HAMMERED in their App Store reviews simply because they don't have any login other than FB and users refuse to use it.

I agree this is a problem, but if I'm a line-level engineer or product guy, my short-term goal isn't to come up with a high-level solution, it's to do what works and won't fuck with my acquisition funnel. Which is currently roll your own.
Well, when it comes to Arabic, the short vowels should be written out as accents of sorts. However, they are quite often missing in actual written text. However, even as a native Arabic speaker I will struggle with text written like that and it will take me a while to read it. That's because most Arabs(at least the Lebanese, Syrian and Egyptians I've mostly been exposed to) do not speak the written Arabic. Rather, we speak a colloquial language that will differ from one region to another. These are visibly descended from the formal, written, Arabic but they are not at all the same language. They have many different words, a completely different grammar, and very different pronunciation. So as far as most Arabs I know, the written Arabic is pretty much yet another foreign language they learn rather than their native language. The similarity between the written and spoken is similar to the difference between say Latin and languages that were descended from it(such as French).
"I am completely comfortable with them using whichever tools they want."

Forgive me for saying so and I doubt you intend it so, but statements like this is what gets us into trouble. At a certain point we need to trust the people that build the foundation for us, but only once we've done our due diligence. Most people, maybe not you since you seem to know more about the team, have not yet.
And as a trade off you get a much cleaner and more performant solution to the same contrived problem. This is where Haskell and functional coders tend to break down. Yes its mutable, but by violating that one rule you gain so much in terms of readability and performance.
Source code: https://github.com/panrafal/depthy
"Median per capita income was $18,700 in the United States in 2010 (which translates to about $75,000 for a family of four after taxes), up 20 percent since 1980 but virtually unchanged since 2000, after adjusting for inflation. "

This is incredible. Since 2000, there is no increase in median per capita income after adjusting for inflation ? Statistics like this bring in the 1% question at times and the comparison between the really rich and the rest of the population.
And of course the size of your take home check is all that matters. It doesn't matter that you then have to pay for a number of services that other parts of the world paid for with their pre-tax income.
For something similar, take a look at Terra [1], the "low-level counterpart to Lua". It's based on Lua, but has "low-level" functions that are JIT-compiled to machine code using LLVM. It supports calling Lua macros from low-level functions, or you can use Lua code to write complex high-level frameworks (e.g. Go-like object system [2], Java-like object system [3]).

It's still in development, so there are parts of the system that don't work very well (e.g. global variables in compiled executables cannot be statically initialized), but it's a very interesting project.

[1] http://terralang.org/

[2] https://github.com/zdevito/terra/blob/master/tests/lib/golik...

[3] https://github.com/zdevito/terra/blob/master/tests/lib/javal...
But then I suppose you'd also need to compare the quality? Is the free healthcare paid for taxes as good as the paid healthcare after taxes? I'm not saying it is or it isn't, just makes it hard to compare. If someone doesn't take advantage of the free education what then?

Also so much of US taxes goes to military, which countries like Canada benefit from, in a sense our military spending subsidizes Canadian healthcare.
Enterprise Mobility Patterns: Application Storage
> And finally, again, there's the evidence: if he really did want to get rid of this woman, and he could, why didn't he?

That's more speculation than evidence, surely?
> Because a language without macros is a tool: You write application with it. A language with macros is building material: You shape it and grow it into your application.

Is this the OP's analogy? It's quite interesting.
It serves a technical purpose just as much as their ego. It makes it possible to search for someone with a specific make and/or model of product in order to ask for help or recommendations, or gauge someone's expertise/seniority/subfocus within the forum's focus during a discussion.
http://dev.sh has a nice auto-setup script for this.
SpaceX is rapidly turning into AM&M from 'The Rocket Company'[0].

[0] http://www.amazon.com/The-Rocket-Company-Library-Flight/dp/1...
It's hard to sympathise with Airbnb if the facts as presented in the article are accurate.

It is against the law in New York City to rent out an apartment for less than a month, a 2010 measure meant to curb unregulated hotels. [NY Attorney General] Mr. Schneiderman says 60 percent of Airbnb rentals in New York are illegal.

If that is the case, then it seems entirely reasonable for the legal authorities to seek the identity of those offering those rentals and prosecute them. These people aren't "regular New Yorkers", as Airbnb claim, if they're regularly and systematically breaking the law.

It might not be a good law in some people's opinion, but the correct solution for those people is to make a case for better laws, not to break the existing ones and just hope they'll get away with it.

Then, a few years ago, Silicon Valley had a collective insight: Better to ask forgiveness than permission.

Maybe not so much, as it turns out that laughable arguments about being a new category of "microentrepreneur" operator that is neither person nor business and is therefore somehow outside the law are treated with the contempt they deserve by the legal authorities.

In a blog post, Airbnb said the regulators’ plan was to accuse Airbnb hosts in court “of being bad neighbors and bad citizens.” It added: “They’ll call us slumlords and tax cheats. They might even say we all faked the moon landing.”

Indeed, it's hard to imagine why people who say things like that don't get taken entirely seriously.

I'm all for disruption, and I sympathise with the little guy start-up trying to compete against big guy established players, but that's the game. You don't get to win by just ignoring the rules. This summed up the whole situation for me:

Micah Lasher, Mr. Schneiderman’s chief of staff, fired back that “being innovative is not a defense to breaking the law.”
Struggling NYSE lobbies against high-frequency trading
Show HN: Timer App for Coffee Enthusiasts
I think when you factor in purchasing power parity it goes the other way. Food and non-coastal housing in the US is pretty cheap.

Also, it's much cheaper to live well in a certain style in the US away from the coasts than in Europe. Bubba has a large house, two trucks, a few acres of land, ATVs, a hunting cabin, and hunting licenses. Francois has a small house, pretty much no land, and a single small sedan. Francois might make more money in absolute terms but Bubba would never agree to swap.
My favorite Ruby resources:
http://www.confreaks.com |
http://www.rubytapas.com |
https://www.destroyallsoftware.com/screencasts |
http://railscasts.com (dated but still useful) |
https://www.ruby-toolbox.com
Oh, very nice. That's clearly the right architecture.

It still fails on a lot of things for me (including your above example and the std::cout example, although variants work), which I'm guessing (hoping?) is just a lack of maturity. Looking forward to see how it progresses.
Herndon, Virginia - PHP Web Application Developer - Marine Spill Response Corporation (MSRC)

Not Your Average Job

As an employee of Marine Spill Response Corporation (MSRC), supporting oil spill and emergency response operations will be the most important part of your job. However, it will likely only comprise a small amount of your time. The majority of your time will be working with a small team of developers managing a number of mission critical web applications and websites. We are looking for a creative and innovative full-stack developer who can help us build and maintain our Intranet, company website and various other applications. If you are looking for an interesting place to work this may be the job for you!

Skills and Requirements

* Advanced Object Oriented PHP

* Proficient in HTML, CSS, Javascript, AJAX, jQuery, MooTools, JSON

* Experience in UX/UI Design

* Knowledge of Application Architectures and Design Patterns

* Proficient in MySQL and Relational Database Design

* Experience with Linux Server Administration and Shell Scripting

* Experience with Git Source Control

* Image Editing Skills

* Ability to work well independently and as part of our team

* Strong desire to learn

* Can take direction and provide constructive feedback

* A minimum of 4 years of extensive hands-on experience in a multidiscipline Information Systems Department including software programming and traditional computer data infrastructure support a must

Requirements Specific to Oil Spill Response

* During oil spill and emergency response operations the candidate could be called on to assist setting up, operating, and maintaining the Emergency Communications Package (ECP). Additional response assignments may include operating the communications command center of an Oil Spill Response Vessel (OSRV). To fulfill these requirements, the candidate is required to:

* Be on call and ready to respond 24 hours a day, 7 days a week

* Have sufficient credit to meet travel requirements

* Travel to emergency response locations

* Be subject to MSRC’s Medical Surveillance Program and random drug screens.

* Must meet the physical requirements of the job, including the ability to lift 35 pounds

Benefits

* MSRC offers a competitive benefits package, to include a 401(k) company match.

About MSRC

* MSRC is the largest, dedicated oil spill and emergency response organization in the United States and a not-for-profit organization. For more information about MSRC please visit our website at www.msrc.org.

Apply Here: http://msrc.theresumator.com/apply/yI6ynJ
My previous employer was switching from just using shared folders and manual versioning (which worked, was accessible, and we had great search tools for it) to sharepoint. Despite almost the entire development floor complaining and objecting to management, their was no changing their mind. My guess is that some higher level exec had a great lunch with some MS salesman.

The result was that next week, people were setting up ad-hoc fileservers and documentation systems to avoid using sharepoint, with half-baked sync scripts to placate management.
In the modern USA, the rich wield too much political power to be kidnapped and ignored by police. Also note that the USA doesn't have a severe gang problem like Mexico does.

And low barrier to entry? Maybe, but I keep hearing all the time about companies not being able to find the talent and experience in people that they need/want.
Paying to get rid of pagination on Slate.com?
"Remember you aren't the universal use case."

Just because something failed for you, doesn't mean it failed for everyone. One of the author's main points is talking about GIT GUI's, which I think is his/her primary problem. Terminal based programs, nmap, git, gcc, emacs, vim, etc. Don't lend themselves to GUI-ization easily. To attempt to categorize their vast functionality in terms of drop down, or pop up menus and buttons is largely an exercise in futility.

Personally, I'm more excited to see a blog post from the author working on a headless server for the first time. I think he could give a wonderful review of the Bourne Again Shell.
This seems to be a play on words. The regulators get better pay than sleepy mom and pop commercial bankers, but not more than investment bankers.
What purpose does drawing a line serve? "Over here, this is art, over there, not, so now you know and can't be confused by what is and isn't art."

Your examples of a telephone book, a traffic signal, a TCP/IP packet, are interesting, because these are all things that, in their specific form are not made by a person, which fails on my first criteria. They're made by machines. However, the infrastructure in place to provide them was made by a person. And I would absolutely call the telephone system, the highway system, or the Internet a work of art. I don't think that's even controversial.

I had a friend that literally this is what he wanted. He wanted to to be told what was and wasn't art, what was good and what was bad art, so he could know what he should be spending his time and money on. Emphasis on had a friend, he was a dolt in a lot of other ways, we don't hang out anymore.

"Not everything can be art!" He would say. Why not? Really, who gives a shit? Why did he care that some things should not be art?

Art is fundamentally in the personal reaction, just as much as it is in the delivery. The two are inextricable. A rainbow is not art if you don't believe in God, but it is if you do.

I consider art appreciation to be an important step in becoming a well-adjusted, tolerant human being. You have to learn to know what you like, and why, and you have to learn that others won't agree with you. THAT'S why people refuse to define art, because they don't want others defining it for them and don't want to be found guilty of the same sin. Because it's in the personal reaction as much as the delivery.

So by that measure, no you can't (and I don't mean shouldn't, I mean it is physically impossible) to call something you've kept to yourself "art". The word "art" is itself a communication of an idea. To call a painting you burn before you let anyone see it, a dance you do in the mirror, a song you sing in the shower, is to attach meaning to it, and meaning is for the purpose of communication. At that point, if you do communicate it, you've performed it in some form. Perhaps the art is your retelling of how skillfully you masterbate. Or perhaps the person you are communicating to through your journal is your future self--who is himself of a different, more experienced, though shared cultural background, as present day you. Its artness is made in the transmission of the idea, and immediately so.
Here's The Only Way To Get Really, Really Rich
Yeah, but unit testing suites don't actually reason inductively. Scientists do. Big difference.
When I read it, I immediately had to think of the classic joke: There are only 10 types of people: Those who understand binary and those who don't.

Obviously, a micro-entrepreneur, like any other entrepreneur, runs a business, and the laws for businesses apply.

As an airbnb customer, I'd be more happy if they'd properly work on improving the legal situation than playing this silly PR game.
10 crucial guest blogging tips for growth
Lessons learned from experimenting with guest blogging as a growth tactic.
My class loader hates me and wants to slow me down
GCC 4.9.0 released
> The extreme growth of the wealthiest 10% is simply outrageous by comparison

Is the bottom decile worse off because the top decile is better off? I don't think so, I think everyone is better off with Gates, Jobs, Page, Brin making tons of money. Wealth is not a zero sum game. Don't get me wrong, I want to see a world where everyone can support themselves and provide for their families. I just don't think having super rich people prevents that from happening, I think it is just the opposite. The Gates Foundation is a million times more effective than any gang of UN Bureaucrats.
All I see is a black page? (Chromium 33.0.1750.152)

404s for the script and CSS files
Seems simple and useful like jsfiddle. I will really use this in my app.
Would be interesting to see a quality of life comparison (if such a thing can be reliably quantified)

The fact that it can't be reliably (more specifically, objectively) quantified is why we see so many nearly-worthless income comparisons instead: The content mill has to run, and less responsible journalists are often happy to print arbitrary crap masquerading as information rather than tackling hard topics with hard work (or just accepting that some things can't be accurately compared and moving on to things they can actually address in a meaningful way).
I've been thinking recently about Heartbleed, and I was wondering if by writing C code to implement various network and cryptographic protocols, we're acting as human compilers for something that might be better represented in a more abstract format. I know there's some research on this already (the Austin Protocol Compiler), but does anyone here know of any other serious efforts to take the human out of the equation in terms of implementing protocols in C?
Possibly true in the US; but in Canada where we get stuck paying bullshit exchange rate premiums all the time, I can still usually save a bit of money. Just recently I bought some audio equipment from amazon.com, which, with duties and taxes prepaid, still came to less than the pre-tax price of anything local. And I live in Toronto; it's not like stuff is hard to find around here.
Sorry, you're right. Deng. I have trouble telling eng / ang apart.
Yep, seems he deployed a bad build. Was working a bit earlier, and hopefully soon again

Edit: works now http://depthy.stamina.pl/
Why would they do this? Also, I thought Crimea just declared itself "independent", not as part of Russia.
How Much Do Leaders Explain National Growth? [pdf]
Sounds a bit like the fighter pilot who shot himself down

http://www.check-six.com/Crash_Sites/Tiger138260
If it's important enough to be a world event, you'll know about it if you follow even a small number of sources.
Thanks, that clarifies it.

But would it be (more) correct if we'd say "key stretching function" instead of KDF?
GitHub co-founder, Tom Preston-Werner, resigns
Mental Model: Complex Adaptive Systems
Well, it's necessary to remember what GDP actually measures, and that's the sum of all economic transactions. This does not necessarily make a country richer or improves its quality of life. For example, if the US healthcare system operated on the same level of efficiency as the average European one, the US GDP would instantly shrink by at least 5% (probably quite a bit more). There are lots of things that the US does inefficiently (not always a bad thing, some inefficiency is the price of freedom).

As Robert Kennedy once put it:

"Too much and for too long, we seemed to have surrendered personal excellence and community values in the mere accumulation of material things. Our Gross National Product, now, is over $800 billion dollars a year, but that Gross National Product - if we judge the United States of America by that - that Gross National Product counts air pollution and cigarette advertising, and ambulances to clear our highways of carnage. It counts special locks for our doors and the jails for the people who break them. It counts the destruction of the redwood and the loss of our natural wonder in chaotic sprawl. It counts napalm and counts nuclear warheads and armored cars for the police to fight the riots in our cities. It counts Whitman's rifle and Speck's knife, and the television programs which glorify violence in order to sell toys to our children. Yet the gross national product does not allow for the health of our children, the quality of their education or the joy of their play. It does not include the beauty of our poetry or the strength of our marriages, the intelligence of our public debate or the integrity of our public officials. It measures neither our wit nor our courage, neither our wisdom nor our learning, neither our compassion nor our devotion to our country, it measures everything in short, except that which makes life worthwhile. And it can tell us everything about America except why we are proud that we are Americans."
> a Chinese character can have one pronunciation (two in very rare exceptions.)

That isn't all that exceptional, if you measure by frequency of encountering multiple pronunciations; 的 de/di, 地 de/di, 长 zhang/chang, 重 zhong/chong, and 行 xing/hang are all quite common in both pronunciations. However, as obnoxious as chinese script is, it's still a syllabary -- you can read it (as in, know what sounds the characters make) perfectly well for the most part without knowing what anything means. I have essentially no knowledge or experience of Japanese, but I am given to understand that it's roughly the norm for the sound of a character to be determined by context rather than by which character it is.

> The big red herring is the two syllabic alphabets, hiragana and katakana. Those are very easy. But they do become a nightmare from hell when you are faced with a script that has no kanji at all (like older video games.) The synonym problem, on a scale of 1 to 10, goes from a 12 to a 50.

People use this as an objection to spelling reform for Chinese too. How do you handle the synonym problem in speech? No matter how much trouble synonyms give you, kanji will never repay the time you had to invest in learning them (given a hypothetical world where you can choose to read anything in kana).

> When I look at Chinese ... the biggest negative it has over Japanese, is that it's intensely more difficult in spoken form than Japanese. It's very hard to hear and reproduce the tonal marks correctly, yet that can completely change the meaning of words.

Can, but if you have a decent grasp of the language and butcher the tones, nobody will misunderstand, for the same reason that they often don't bother to mark tones in pinyin.

> And with so many similar sounds, you end up with poems like this

That poem was written specifically for a political battle, to make the argument that characters shouldn't be reformed. There are no actual poems like that; notably, that poem, when read aloud, is not intelligible Chinese. So all it's really doing is showing that Chinese characters can indicate a superset of the language.
https://twitter.com/matthew_d_green/status/45696043584599654...
A mainstream OpenSSL alternative would be great, but despite the fact that I'm not a web hipster, I just couldn't force myself to read that page.
I think the author made two mistakes:

- Assuming that engineers aren't creative, and want to work on well defined problems with well defined inputs.

- Confused our parents generation of engineers with ours.

The skills of building a good technology can also be applied to building a good company. This is one reason (intellectual signalling is another) that MBA programs like to admit engineers.
Waste of parsing time from my part. Save yourself 20 seconds and don't read this.
Unless you have any health issues or have kids that want to go to college. Then it goes the other way.

Trust me, as an American who lives in France, Francois wouldn't swap either.