skysight-inc/HackerNews huggingface dataset:
CLSQL does the escaping itself. The question is whether a library that does prepared statements is reasonably expected to be safer than one that does escaping.

I haven't audited CLSQL's escaping myself, however. And I concede that using prepared statements takes one possible vulnerability off the table, which is nice. I was just wondering whether 'eudox had any specific reason to think that CLSQL's escaping was flawed.
Completely agree, and I think it might turn more off than on. For example, she states that she would now write the subject line as: "Learn how I increased X for company Y". To me it seems like a very spammy subject line, that has nothing to do with the intention of the writer trying to be hired.
> (given the rapid rate at which server apps are starting to migrate from Python to Go).

Do you have data for this claim or is it a hunch? I've seen this meme repeated a lot in HN.
Actually, the majority were personal email addresses I had taken from LinkedIn and Gmail. The ones which were opened a lot were from personal email addresses.
How about trying to contact alumni from your University who are now in the Silicon Valley?
Point conceded. Perhaps I will use Crane for my next app.
What we need is the Transparency Amendment. After X many months (not years) information the PEOPLE's government collects, and the rational behind collecting it, must be made public. NO MATTER WHAT. You can't have your cake and eat it too; it's simply not the way this universe works.
Lauren Holliday is a full-stack marketer and journalist with a marketing mindset. She has written for publications across Florida and blogs across the U.S. Email Lauren at lah@freelanship.com.

Two weeks ago I saw a post about Full Stack Startups. Is full-stack marketer another new term? What distinguishes a marketer from a full stack marketer? (I'm asking sincerely). Do hiring managers post jobs these days looking specifically for full-stack marketers?
The spikes.
You respect him for noticing this only now?
It's great the Codehaus implementation of Groovy has finally come to Android, but there's no mention of this on the Groovy users or development mailing lists at http://groovy.329449.n5.nabble.com

Groovy users around the world would appreciate being told first, instead of needing to attend a conference, or follow online rags like infoQ or people's personal blogs. And users subscribed to their developers list should be told in advance what's in the pipeline rather than being sprung with a change of plans this suddenly. We're all expecting Groovy 3 with the meta-object protocol rewrite and Java 8 lambda retrofit to come next, and now we find out on Hacker News of all places that Groovy 2.4 is next.
Probably describes a person who can produce in print and on Twitter.
For these cases, it'd almost be worth it to take a snap-shot (pic) of the blackboards.
What is this? The web version of an infomercial?
Thanks I had forgotten the term. http://openeeg.sourceforge.net/doc/links-biopsy.html#schemat...

My first exposure to EMG was in a very low cost eye tracker.
Could This App Create A Free, Secret Web?
> On the other hand, there are correct programs which we still don't know how to type. This means that there are programs we just can't write in statically typed languages, at least not yet.

I know this is true, but is it common? What would be a realistic case for this? Realistic as in, "code most people who are fans of dynamic typing find themselves writing". Contrived examples can always be found, but if someone told me they don't use static typing because there are programs that cannot be typed, I'd ask them "how often do you write that kind of programs?".
Huh, so to me that reads as a list of companies who drop the ball.
Pork Chop: The easiest way to tweet up a storm
I do a lot of random reading, often via searching for a conference (SIGCHI, UIST, etc.) rather than a topic. If you can find a full proceedings list with titles to skim over, it can give you an interesting view year-to-year.

But speaking to the problem of intuition and seat-of-pants methodology:

Reading research publications is often a habit of successful professionals, but it really doesn't do much to give you a solid grasp of research methods because they typically say nothing about why they chose the methods they did, or why they didn't choose other methods, or what flaws there may have been in methods you previously made up off the cuff or pulled out of an article somewhere.

The best way, bar none, to deal with that is to be an active part of a community of people who are at or above (mostly above) your experience level. Immersion in a community with superior experience gives you a constant stream of professional growth. For academics and grad students, they have an existing framework that is largely dedicated to providing that, and through many routes in parallel (their department, conferences, weekly seminars with visiting speakers, teaching).

In industry, you're often the one person in the company, or one of 2-3 people, who even has anything to say about the whole "UI is not UX" issue. And reading will help, socializing on social media etc. will help, but you also have to make an effort to talk shop with other professionals on a regular basis, who are at or preferably above your skill level.

Meetups can help, to the extent that people who know more than you are there, and that you actually talk shop (pound for pound, you may find more misinformation & marketing). If you're near a university with a decent program in this area, you can also poach their meetups. Go to seminars or whatever, it's not like they'll usually check ID, just don't be disruptive and you're fine. Some are explicitly open access, which you should be taking advantage of whenever possible.

Basically, "don't be the smartest person in the room."

If you're not growing, either find or make a new room that has people above your skill level in it. Then interact with them, about professional issues, and be prepared to put your ego aside.
I didn't knew E2 before, but reading that article was almost impossible with all those nonsense internal links. I simply don't get whats going on, it's supposed to be some SEO? Awful
http://wadefoster.net/post/42802176600/full-stack-marketing

https://medium.com/on-startups/rise-of-the-full-stack-market...
You might not not need jQuery
I think this is a decent strategy for an aspiring marketer, since it shows off actual marketing skills.

For a software dev, however, not so much. I think it could come off as insincere and/or spammy.

If I'm emailing a company about a job, its because I'm particularly interested in working there. Therefore, I really try to be as personal and specific as I can when reaching out to the company. Especially in the initial email.

Otherwise I'd risk misrepresenting myself.
It's a progression; Growth Hacker a year ago meant a marketer that could code, manage marketing campaigns, make content and do creative campaigning, then the technical parts of that seemed to drop off, and full-stack marketer came to mean the same thing. Now I'm assuming the technical aspects of that have dropped off here as well and 'Growth Engineer' or something like that seems to have taken its place.
SQL is fantastic for relational data - it maps pretty closely to relational algebra.

About all I'd change is placing the column names after the table/object names - "FROM table1 SELECT col1, col2" instead of "SELECT col1, col2 FROM table" because it makes code assist features easier. (Microsoft did this with LINQ)
Classic HN.

"I'm 10 degrees removed from the facts but I'll betcha OP is super dumb. Give me points for saying so."
306 - JavaScript for Automation
I call BS on this. No sources and burying all that engine oil and diesel would contravene a mountain of regulations.

http://m.huffpost.com/uk/entry/5459717
I did that once back at university. It was also a linear algebra course. Of course, at that time there was no cellphones that took pictures, and I happened to be carrying a bulky camera with me.
Ask HN: What is a good db as a service?
I am working on a SaaS that requires some sort of database (sql/nosql) to store data. It will be write heavy. I usually host my own databases however I want to use my time more for working on the code and less worrying about the database server. Anyone have any suggestions? price is a factor initially also.
"How to piss off half your business contacts in 30 minutes."
This was much of math grad school for me. I have a remarkable ability: I can write down exactly what people said and process absolutely nothing, in beautiful cursive. Or I can listen.

Now that I know my subject much better, I can take notes & really get something out of it, because I can process the material at the same time.
The thing is MS and Apple won't negotiate on any of this. They have never been involved with open standards and respectively pushed WMV and MOV formats instead.

You have to move forward under the presumption that neither will ever cooperate in a macroscopic sense, especially after Google caved and gave up making youtube webm based.

You still have to make the best solutions, and speak why they are the best, and hope everyone else will switch so that inevitably the dinosaurs do too. Because you can't reason with a trex.
Don't want to be THAT guy but... OK so she sent(sorry, spammed) an identical email to 162 people and got 15 interviews. Which is 10% and well, it's pretty bad.

Since when spamming is HN worthy? :(
Class is for understanding; notes are for recording the class, so that the understanding can be revitalized at a later date.

In other words, notes are your tool to have access to those critical moments of understanding again, later. I don't know about you, but even if I have a "eureka" moment, it may start to slip through my fingers and require refreshing once or twice.
If you ever game on your Mac, you soon find out that it is impossible to right click without raising your left click finger first.

I'm only an occasional gamer, but it was enough for me to jettison both magic and mighty mouses after a few days. Shame.
We “will be paying no ransom,” vows town hit by Cryptowall ransom malware
Thoughts and sneak peak at iOS 8
Excerpt:
Then there's the request to sift through the heaps of snark on Twitter and other social media services: "Ability to detect sarcasm and false positives," the request reads.

Think you're up to the job? You're probably not, but the Secret Service is accepting proposals until June 9 at 5 p.m.

So, it looks like a good job opening for someone from HN. No? /s
It's quite a clever idea really, just invent a new occupation type for yourself. Since nobody really knows which titles have any form of validity or even what they mean you make yourself look like you are ahead of the curve. Hopefully everyone will be too embarrassed that they don't know what a "full stack marketer" is to actually question it.
FWIW, in the business environment, I find the people who are the most connected and seem to know everything are the ones who do a good job of taking notes with a computer.

It's a bit of a different story, of course, because rather than learning what they are really doing is compiling vast troves of information, like a squirrel harvesting nuts, and the advantages of computerized notes (ease of searching, for example) pay large dividends in this scenario.
The vast majority of information available right now is in their videos: http://millcomputing.com/docs/

Their forum has some good responses from the team on follow up questions asked by the community as well.
You could go for a 2 year master's degree at a university ideally in SV, but if you have to choose between a mediocre school in SV and a top school on the East Coast I'd go for the top school. This will get your foot in the door.
Were they really cold emails? Sounds like it was a network of acquaintances and folks the author already had personal or professional contact with before.
so... the government can force carpathia to spend thousands of dollars a day, but can't manage to keep its own data intact?
But it isn't a commentary on what makes Apple great. What makes Apple great is fantastic design, where simplicity and elegance are in the service of functionality. Apple mice sacrifice functionality on the altar of simplicity and elegance.
It's still possible for a MITM to use the old certificate.
Indoor clouds?! This is cirrious business.
The article says that Apple "has the jump" on Google when it comes to indoor maps, but Google already has indoor maps in a lot of places. What gives?
This is strange. The Macbook Pro is anodized aluminum - shouldn't have nickel in it, but it might have copper/zinc traces, which are also allergenic to some people.
It's interesting that the bug was found using the Coq proof assistant. Hopefully this vulnerability brings attention to the usefulness of theorem-provers like Coq for finding these sorts of bugs.
I feel the same way (that these are very complex issues in which the appropriate balance is best determined by the courts). I'm trying to pre-emptively address the populist arguments which are often articulated here in which only the BoR is given the time of day.

'Secur[ing] the Blessings of Liberty' is certainly a key constitutional imperative, but so is 'provid[ing] for the common defence'; failure of the latter arguably results in a de facto abridgement of the former. My more utilitarian side would like to always resolve such balancing problems in favor of greater liberty and rely on the emergence of self-organizing political structures, since we are clearly not governed by angels; on the other hand I'm increasingly in sympathy with Madison's corollary that 'if men were angels, no government would be necessary.' Between a sad misanthropy and the limitations of foresight, these days I more inclined to a reluctant deontology which puts greater trus tin institutions than individuals.
Patent troll on the verge of winning 1% of iPhone revenue
The title is slightly misleading. It should read "How I landed 15 interviews in 30 minutes of work". She says that the actual process of being offered interviews took a few days.

I don't think this is a bad strategy. The problem, like others pointed out, is the spammy nature of it. If she directed the e-mails to the "send your resume here" addresses - I think it's spot on.
There are millions of balls, a few manage to get through. Nobody is going to go around actively catching them.
Reflection is not possible in Rust?
Over subscription is what drives economies of scale in IaaS and PaaS. It allows companies to drive down prices and increase performance for the p99 customers.
Das Referenz: Wikipedia Redesigned for iPad
More like they don't care about that category of threats.
Excerpt:

So, I decided to create an email marketing campaign. My promotion? “Get a one-week free trial of Lauren.”

And the result? I landed 15 job interviews—for less than 30 minutes of work. And within days, I had gone from unpaid intern to paid marketing director.

I am posting this because "for less than 30 minutes of work" is not how I interpreted the meaning of the headline "...in 30 minutes." It doesn't actually say how quickly this all happened other than the vague ...but regardless, I had 15 interview offers within days of sending the email.

I get that writing headlines is hard. I really, really struggle with that myself. I am posting it for clarities sake, basically.
Genuinely curious: what makes it especially appropriate for gamedev?
Fair; StackExchange might not be the best model. I'd say public reviews of papers, but not crowdsourced ratings of reviews - rank reviews by researcher reputation instead, weighting that reputation by reputation in a given subfield, and maybe with a weighting boost if the paper in question cites the researcher's work.

Anecdotally, I've got a paper draft on ArXiv right now, which I sent to both the authors of the paper I based it on (who I got some really useful feedback from), and to a mailing list full of developers working on similar problems (who argued with me about typos my abstract didn't have) - this suggests that the people you cite might have better input into your paper than the general public.
You are correct 5 contexts, four transitions.
jQuery is a DOM manipulation library, it is not useful to script OS X apps.

...unless one of them exposes a HTML DOM to the scripting layer, now that I think of it.
I'm in favor of formalizing such a rule, but a period of months just isn't realistic. As a very simple example of why, consider how easily this would enable financial fraud; you could lay the groundwork for a fraudulent scheme early in the fiscal year, wait for a six-month 'transparency window' to close, and observe whether your prior activities had attracted official notice or not - if not, you could proceed with impunity.

I'm not saying this to pour cold water on the idea; it's one that I think should be explored and refined, as part of a general framework of privacy protection for the individual - that is, I'd like some degree of sovereignty over my personal data as regards commercial as well as government uses. I think the EU is a good way towards this.
Why are there no production-quality implementations of the newest standard then?
The private key could have been stolen any time during that the heartbleed vulnerability has been present on the server (~2 years).

This would allow for a MITM attack which would obtain user credentials and unauthorized access to a server.

Since the attack isn't recorded it's unknown if it was used extensively before it was made public. The time between announcement and patching was likely significant enough for the potential of someone stealing the private key during that period as well.

This is also why re-using the same private key for the new certificate is a bad idea.

Think about the wide variety of sites that would use a free SSL certificate that might not have the funds for revocation. Almost every site I've ever seen has had people try to hack it.

There is a fairly decent chance that a very small site would not have someone steal it's private key, but it's hard to make that assumption, that's why every site about Heartbleed suggests revocation of the old certificates.
http://devstreaming.apple.com/videos/wwdc/2014/306xxjtg7uz13...
No they wouldn't, because the MITM attacker would simply use the old one. And the user wouldn't know. That's why the old one needs to be revoked.
Thanks for the feedback, and I'm glad to see you published an app! Automatically incrementing the version number is something we are going to do. Emailing hello@gonative.io is the best way to reach us.
Ask HN: how to get a tan as a developer?
The question is pretty straightforward: I'm pretty much out of the sun all day long. Is there any way to work outside with a computer? Maybe a nice setup?
Different people process information differently; for me seeing an abstract diagram of say, a B-Tree, would be more useful than a pseudo-code overview of the structure (at least first - the code might be useful once I had an grasp of the idea from the diagram). That's just me, though, different people learn differently.
There is nothing about "how" to make clouds here. Just a bunch of promotional artsy mumbo-jumbo. Nothing about "how".
They should try with a Surface Pro device. I wonder if handwriting notes on a tablet is any different.
Those are traditional at E2 - a quirk of that particular community. I don't think they're SEO. If done right, sometimes they make you think. Sometimes they don't even go anywhere and are still successful in that regard. Sometimes not.
Little gag replies are risky here. Potty humor like what you've done above will never be rewarded. It's too easy. Sometimes clever puns or double entendres will get a couple of upvotes.

This is the correct behavior. Everyone is capable of making little gags, so they add little to the OP. Not a downvoter, btw.
> They have never been involved with open standards and respectively pushed WMV and MOV formats instead.

The MPEG-4 file format is .mov, and MPEG-4 onwards are open standards.
The rating inflation could be lyft's fault. The lyft system is specifically inflated: 1 & 2 are really bad rides, 3 is "bad enough that you never want to be matched up again", 4 is "needs work" and 5 is "good". If you have an excellent ride, it's 5 + tip. However, deactivation is ALSO inflated, Lyft wants only 4.5 + drivers (after a certain number of rides). Passengers crossing between Lyft and Uber could be skewing the statistics of driver ratings.

As a lyft (and uber, from time to time) driver with 9 years of living experience in San Diego, there are times when I know exactly where the destination is but I am not sure of the "best" way to get there, or I am worried that there are multiple ways to get there and having the GPS decide gives it an "objectivity" that CYA's me for 'dispute resolution' purposes.

And both lyft and uber have been expanding like crazy recently, so having a 4.8 or 4.9 could be the law of averages in small numbers working against your experience.
e2 is fairly deranged. It's not your place to head for an informative read, and "encyclopedia" would definitely not be the right word, but it's great for ideas, stimulation, not-quite-sure-if-satire, unfinished short fiction, and link chains like "geometrical" > cannon defense patterns > transhumanism > The Broken God > a cloned kitten named "cc". I think of it like /b/ for bored grad students who are into Barthelme and Jeff Noon. One of the treasures of the internet, in my book :)
This has always been a problem with Groovy; terrible communication from the core language developers. It's unfortunate because I think Groovy could be a lot more popular than it is but I think most developers are unaware of its existence even on just the stock JVM.
Miami Cops Are Running A Sting To Catch Lyft Drivers
Xiph needs to start a public prototyping playground that extends unpatented video and image codec research to create islands of techniques that are not patentable. They don't hav e to work, just be an idea.

Like if I said, "I'd like to use cellular automata and voronoi segmentation to do multiscale texture extraction and motion representation."

Someone else could possibly do a 500-1000 line python program that implemented something like that.

Create a 1000 of those ideas drop them into the public domain (we need something like the GPL for ideas) so that there is a large body of techniques and work that is unpatentable.
Captchas vs. Spambots: Why the Slider Captcha Wins
I've actually read both the article and Isaacson's biography.

I don't find "Zen monasteries in America" anything but a novelty, much less those "lengthy meditation retreats".
After a quick search I couldn't (readily) find any links about writing Mac apps in Javascript. The Strongloop seems to be for iOS7 only. Where would I find out more about this?
Wikipedia Mining Reveals The Most Influential People In 3500 Years Of History
Yeah, I suspect I was a bit unclear there!

I'm pretty familiar with ObjC-Javascript integration and have been working with it for a while. This change offers a nice direct system interface for automation, and one that has access to all of Cocoa.

I also didn't intend to put Javascript down at all - its more that the more complex part of building a MacOS app is working with Cocoa, and Javascript will make that more complex, rather than simpler, just because of the impedance mismatch.

I'm not sure there's a compelling use case for building such apps, but it's still pretty cool!
I wish we could easily get anti-patent patents.
Well, being DCT-based isn't that important, but they are all still block-based transforms. It doesn't help that all wavelet codecs have failed, because video researchers only test with PSNR and not with human subjects.

H.264 doesn't use the DCT, but still uses the same size macroblocks, which is what made it unsuitable for very high-res video. HEVC uses up to 32x32 sized transforms.