skysight-inc/HackerNews huggingface dataset:
Both the Grauniad and the Torygraph have got a bit cliche with more of their pieces. I suspect this is a function of the move online. Back in the days of newsprint I'd often alternate to give myself a somewhat wider point of view.

Meanwhile at the Torygraph

1) Take something which is routine and well known to everyone except the Torygraph's reader demographic (hysterically uneducable free market junkies).

2) Find an example of someone abusing it.

3) Blame it on Labour esp Corbin or The EU

4) Profit!

3 is becoming increasingly tedious

You've basically enumerated "how newspapers work".
Lone planetary-mass object found in family of star
Anecdotes incoming!

> I have seen only 3 Teslas on the road in my lifetime, besides some promo by the Tesla store. 2 of them just last weekend on the Autobahn and they where slow as a turtle with about 120 km/h. I was going by with about 180 km/h.

I see a Tesla almost every day - it's parked outside of the office. There are at least two more that can be spotted on the grounds of University I went to. When I was in Norway last year, I played the game of "spot the Tesla". I counted 13+ over the course few days.
Hello Hacker News, I am Patrick, creator of GitHub Reviews. Thanks for stopping by!

I built this web application that lets people review popular GitHub repositories. The site allows users to:

* Determine quality by reading reviews and viewing aggregate ratings

* Discover related projects that are linked to each review

* Share their thoughts about a package with the rest of the community

* Improve repositories that they own by listening to their users

Currently on stackoverflow, questions in this vein are closed because answers would be too subjective. This usually happens despite strong interest from users.

Here are some reviews that I wrote: https://githubreviews.com/plurch

Any feedback or suggestions are welcome!
Have you looked at QGit? Yes it is very old - but is also still works fine.
I like the idea, but you have to work on the Design. I would not try to advertise it in that moment. Also create something that shows recent/popular reviews. At the moment i get the feeling that nothing is going on on your site.

A Question based on your comment, how do i know as package maintainer that there is your site with potential reviews on my package?
Storage Made Easy Exhibits and Presents at the OpenStack Summit in Austin
Quite a lot.

One example: WhatsApp is one of the primary messaging services used in Brazil, with something like half the population using it. The vast majority of which don't speak any languages other than Portuguese.

When the courts in Brazil shut down WhatsApp for 48 hours, there was a huge outcry because it is THE primary means of communication for people, especially to talk to family who have gone abroad.
Absolutely and I didn't want it to be perceived as negative.
Tesla has a problem where they don't have the cash on hand to build that production line quickly, nor have the equipment on site or people trained to use it for the capacity they will need.

BMW's i3 and i8 are both attempts at not only testing electrification but beyond that they went after materials testing and packaging. As in, the i3 was a moon shot in materials technology and its battery pack is actually quite serviceable.

While I know everyone loves to toot the Tesla horn the real problem that hit the other car makers was GM. GM because showed what having established relationship with suppliers and a wealth of in house knowledge can do in short order. GM is bringing a 200+ mile range EV to the market THIS YEAR, not late 2017, 2018 or whenever.

That car, the Bolt, has basically obsoleted every sub 100 and even sub 120 range EV over night. GM's supposed battery costs are lower than projections from Tesla's gigafactory
>How does one uninstall stuff on Linux anyway?

with a package manager suited for your system, or with the knowledge of what files the software in question touches.
Perfect analogy! I as well was someone who used to spend hours in book stores consuming books. I'd usually only need a few paragraphs at most and it was better for me to write a few notes in a notebook than spend $30-50 on a book when I needed so little of the content from it.
Actually 99% of the Time this will install it to /usr/local
Yes, but large, established services switching is another ball game. Even is Viper is not nearly as big as it used to be.
So the manipulations have been going on since 1999 (2005 for VW) and appear to have been deliberate, rather than snuck in by a small group of engineers.

Will be interesting to see how VW and the other brands mentioned here get out of this. Their crisis management so far certainly does not help.
> a bit like Slack

The UX and general usage is so similar (in my eyes), I actually assumed it was a spinoff from the same company for a good while.
I guess you are asking how to be a good developer. I suggest you to learn by doing. Watching and reading tutorial in not enough. Go and check some tutorials and try at least 2 hours everyday sit and code.
Isn't it difficult to even buy/keep a car in Singapore ? Or maybe I missed /s
"second-highest concentration of Teslas"

Norway?
LSD Stream of Consciousness
Yes?

> The VW scandal more generally raised awareness over the high levels of pollution being emitted by diesel vehicles built by a wide range of carmakers, including Volvo, Renault, Mercedes, Jeep, Hyundai, Citroen, BMW, Mazda, Fiat, Ford and Peugeot.[22][23] Independent tests carried out by ADAC proved that, under normal driving conditions, diesel vehicles including the Volvo S60, Renault's Espace Energy and the Jeep Renegade, exceeded legal European emission limits for nitrogen oxide (NOx) by more than 10 times.

https://en.wikipedia.org/wiki/Volkswagen_emissions_scandal#A...
Signal is a niche service. Its selling point is security. Viper and WhatsApp are general services and their selling point isn't security.

I'm not trying to imply that WhatsApp are the first secure chat, but I am saying it is the first major platform to switch to end-to-end security and this looks like the first step in a trend of switching.
I prefer "moderncv".
If you actually read the article instead of skimming it would be clear.
> Prolongation of the deadline wouldn't help me much either, though, because I'd need at least half a year — which they definitely won't give me, I've already asked.

For what it's worth, they gave me a year.
Note: this is fiction.
> Would it be a good idea to unionise for such things?

Does your boss have the same goals as you? Does your CEO care deeply about your personal progression and happiness?

If so, there's no need to join a union.

For most people, a union is an insurance policy against your employer turning against you. Providing legal and financial assistance when you need it most.

To summarise: if your employer has more lawyers than you do - join a union!
I'm aware of their purpose, and I'm not against it. Merely pointing out what a good example this particular article is of them having extracted a reusable pattern. The Guardian has always been an activist paper driving page views with outrage and this model has translated well into the digital age. They're very good at it.

PE and Brooks, of course, were famously wrong about e.g. Vodafone who it turned out were in fact tax compliant. Like the Guardian.
I am assuming that criminal charges are pending against Bob, I think that his details need to be released to others operating in the sphere of cryptocurrency as he could easily do this to another company he works for.
Message passing without memory sharing. Isn't that what Erlang processes are? Is it because having to load the packages into the thread makes it too large? Just curious.
How to Improve the Customer Experience by Using CRM?
A founder of a tech startup on remote working in Nepal
That's a shame, since I program in J, and I've tried the free K version. L would have made my PL list quite funny! I'll take a look at it, since I have used tcl/tk in the past.
I wrote up a little utility I wanted to distribute last year, and I came up with this little script block to do it while also verifying the scripts hash:

> bash -c 'S="3bceab0bdc63b2dd7980161ae7d952ea821a23e693cb74961b0d41f61f557489";T="/tmp/gut.sh";set -e;wget -qO- "https://www.tillberg.us/c/$S/gut-1.0.3.sh">$T; echo "$S $T"|shasum -a256 -c-;bash $T;rm $T'

This downloads the file to /tmp/gut.sh (which hopefully works on your system), then checks whatever file was downloaded against the hash specified (which hopefully works on your system), then executes it, then deletes it.

I think that `shasum` is a pretty widely-available utility among Linuxes and OSX, though not universal, but it occurred to me that it would be really awesome to have a program that was more purpose-built to only execute shell scripts that matched a particular hash, a la:

> curl https://www.tillberg.us/c/blah/gut-1.0.3.sh | shverify --sha256 3bceab0bdc63b2dd7980161ae7d952ea821a23e693cb74961b0d41f61f557489

Obviously, many other systems are more "secure" than curl-bashing, but curl-bashing is very convenient, and adding some sort of common utility to support it could mitigate the most obvious security issues.
except windows 10 works, to my anecdotal experience, better than windows 7 on the same box.
DNA Regex Search with Elasticsearch
I didn't feel like the article was bragging, but it would be nice to have a discussion about how many of those services would be redundant in the face of a devOp, vs a devon yearly pay.

It might not be hard, but sometimes it is worth paying someone else to do the boring stuff so you can focus on your core competences.
Yeah i agree. Although I still haven't found a test framework I like for this so any pointers appreciated!

I tried it all ansible based: https://github.com/CraigJPerry/ansible-users/tree/test-cases...

I tried it using Python's unittest2 module: https://github.com/CraigJPerry/home-network/blob/v0.1.5/test...

I like the idea that ansible playbooks should be self testing.
Placeholder images from Flickr.com
"But how effective can they be if they fail to reach 15% of a population" was in reference to the fact that almost 15% of the DC population doesn't have a bank account which the author took to mean they can't use UberX or any other Uber service. This isn't strictly true but the barrier to entry without a bank account is high enough to dissuade most of this population from using Uber services.
Invoking ROM BASIC on an IBM XT
Is it only me, or the top bar (which re-appears with scrolling up) is extra-annoying?
Google faces EU charge over Android 'abuse of dominance'
Which aspects of the design do you think need improvement?

I agree that there are not many reviews since I have just launched, but I need people to be aware of the site’s existence so that they can contribute.

Currently there isn’t any notification system in place for package maintainers, but that would be a nice feature to add.
X-Powered-By and Server Headers: Disable or What? Are They Harmless?
The Victorians who flew as high as jumbo jets
Take-away: Always download the script and execute it locally. An attacker may change the underlying script once you pipe it to shell.
What's with random_problem + gate formula? I don't get it.
Culture of Design Competitions Finally Changing?
Not only in the US, and not only because of being "highly paid" but "spending too much".

In most of the world, including large parts of western Europe, unless you're upper middle class and higher, it's either hand-to-mouth or smallish savings (nowhere near 30%).
I disagree. Many (probably most) makefiles conform to the GNU Coding Standards, which recommend declaring "all" to be the default make target. `make all` does not install; that's what `make install` is for.

https://www.gnu.org/prep/standards/html_node/Standard-Target...
Of course the obvious downside to a voluntary savings plan is that it isn't effective at actually creating savings. We know this, because in the United States, we don't have compulsory savings plans, and thus have a voluntary system. So how's that working out? Not well. Approximately half of all Americans save 5% or less of their income[0], which isn't enough for emergency situations. Another study in 2013[1] said 27% had no savings at all. Now the main reason for this is quite simple. A lot people don't make enough to have anything so save.

[0] http://money.cnn.com/2015/03/30/pf/income-saving-habits/
[1] http://money.cnn.com/2013/06/24/pf/emergency-savings/
The title should say _Anchor_.
Thank you for the link. I will look into this. Some of the reasons I get the idea I need to incorporate this additional step (feature detection) are:

1) I'm building this primarily for a robot, so my impression is that by building up a set of primitive features, and building up on top of them, will be more efficient for soft real-time use cases.

2) I have done what you suggest (more or less), for example as a test with the MNIST Digit Classification data. I was only getting approx. 95% success rate using this basic technique, which at first glance appears impressive until you realize what is considered "state of the art".

3) My goal is to also incorporate additional layers of data (which I'm under the impression will help improve my overall success rate), such as edge detection, corner detection, and most importantly 3d data (ie. distance from camera based on data extracted from Google Tango), so if I'm correct about #1 where this will be a more efficient calculation, incorporating all the additional data (and extracting features from that as well) will slow things down only incrementally.
Nixon, baby.

https://en.wikipedia.org/wiki/Watergate_scandal
https://en.wikipedia.org/wiki/List_of_scandals_with_%22-gate...
The js on this page almost broke my chrome
EDIT: works fine after disabling dashlane extension
The Watergate scandal (named after the hotel where things took place) was such a big thing that the press/public developed a habit of relating subsequent scandals to it by giving them a name ending in -gate.
I can't understand why the Babushka is better (or worse) than popular SCM, such as puppet, chef or ansible?
It's coming from a scandal involving Nixon.

See here: https://en.wikipedia.org/wiki/Watergate_scandal
It sounds good, but if you're distributing the hash through the same channel as the script, then it's open to the same vulnerability (MITM, website breach, whatever)

> adding some sort of common utility to support it could mitigate the most obvious security issues.

Package managers are awesome!
my first free software is from 1991. i realised the power of community gradually from 2005 when fighting software patents in europe. i refined and tested the techniques in the ffii for projects like digistan. i saw the failure of money and power in amqp. in zeromq it took years to find the right patterns. i documented much in culture and empire. sorry for the lower case, i am on my phone without erdogansk spell check.
"But they never used it" ORLY ?
I think the many discussions about this conflates two things:

1. "curl|bash" vs "curl >install.sh; sh install.sh"
2. install scripts vs package managers

The OP talks about how to detect a streaming execution of a script and exploit it. This proof of concept exploit aims at discouraging the the use of curl|bash as a means to installing code, and instead promotes that at least you should save the script (and review it) (i.e. the "curl >install.sh; sh install.sh").

All of the points you mentioned are valid and important pain points that affect any arbitrary executable install script (not verified cryptographically using a side channel). Deciding whether to use an install script or a packaging system is really a tradeoff.

The "obvious" problem the OP was talking about was that smell you feel when you see piping code to bash. I think OP made an excellent job showing how you can make it harder for people to spot and audit malicious code and how this is pretty serious downside for piping code into bash; It's more like: "I have a gut feeling this is horrible, so let's think about a way to prove that gut feeling", and the proof is insightful and non obvious.
Monetising Open Source Hardware
It's worse at the Torygraph, they've gone all in on buzzfeed SEO lists. "40 things to know before you're 40" and the like. They're a bit behind the curve with leveraging the Twitter outrage mob for clicks, probably because hardly anyone ever manages to read to the end of one their articles without dying of boredom.
I became a global multi-strategy hedge fund manager at 23 ($1bn fund) via a series of odd events so didn't have time to go through the classic CFA analyst => fund manager process.

I get asked this question a lot and usually recommend http://www.realvisiontv.com these days, particularly if you like videos.

Some variable quality, but some really excellent, unique viewpoints from value investors and macro managers there.

I would also recommend the Market Wizards series by Schwager and Inside the House of Money/the Invisible Hands by the Drobnys.
This is true most of the time, but it might be that the electric car projects were handled as skunkworks. That's often the only way, for a very established incumbent, to protect substantial innovation attempts from corporate managers.

If that was the case, it's not unlikely that the management had genuine technical legitimacy. And that they're easy to poach, with a promise that their technical achievements won't be nullified by corporate politics.

(that's pure speculation, I have no insider info from BMW)
Your approach tackles the scenario that the actual shell script `https://www.tillberg.us/c/blah/gut-1.0.3.sh` might be untrustworthy, but the whole command including the verification hash will most likely also be downloaded from `tillberg.us`.

If `tillberg.us` is malicious you assume that both the gut-1.0.3.sh file and also the hash in the curl command will be changed.

So I think your idea only works when you reference files hosted with a third party but decide to trust the guy who gives you the hash. Basically all occurences of curl to bash piping I have seen in the wild are of the former type, so I really don't think this helps much.
Overproduction in theory and practice
As usual, what's old is new again. Makes sense given that user interfaces and "styles" of software are just like styles in anything else (ie: fashion) -- they come and go and come back again.

Fast forward another 3 - 7 years and users will be wondering at the marvels of a chatbot where one can simply click on the picture of the action they'd like it to perform! Perhaps entire menus of actions will be presented, in horizontal or vertical strips inside the chat interface... these actions will of course be represented by hieroglyphs expertly designed to convey just what they do and no more, to as cross-cultural an audience as possible. Maybe we'll call them icons or something.
> Does anyone have a link, by any chance?

C. Northcote Parkinson, 1955. http://www.economist.com/node/14116121

"A glance at the figures shows that the staff totals represent automatic stages in an inevitable increase. And this increase, while related to that observed in other departments, has nothing to do with the size - or even the existence - of the Empire."

What I don't know is where Parkinson got his own figures from. Some of them are cited in the article, but I think not this one.
> like saying the word “fútbol” instead of soccer

Hispanic folks: Is this in fact a thing that feels alienating to you? If so, would you be willing to explain why? It is the first time I've heard about it so I'd just like to confirm that Conor Friedersdorf is referring to a real thing.
literally just today, there's news that Mitsubishi were doing the same thing - http://www.bbc.co.uk/news/business-36089558
I'd be interested in knowing, how do you assess whether something is a "trusted source" or not?
Emission testing fraud at Mitsubishi (incl cars for Nissan): http://www.theguardian.com/business/2016/apr/20/mitsubishi-m...

Kia was also namedropped in the article.

I suppose it's easier to compile a list of manufacturers not involved in messing with the numbers...
gifts are welcome. my kids will appreciate the love from strangers. one does not ask for gifts...
Yeah, but what's the societal point of efficiency when wealth has become so concentrated, that the economic ladder has been pulled up?
Recently I stumbled across hashpipe: "hashpipe helps you venture into the unknown. It reads from stdin, checks the hash of the content, and outputs it IF AND ONLY IF it matches the provided hash checksum." [https://github.com/jbenet/hashpipe]
I know a little about UK company law and company formations - what with running a company and all - but I had no idea that it was possible for a company to be a director and secretary of another company, or that it was so easy to bypass normal reporting and ownership requirements with shell games like these.

I'm fairly sure the details will be news to most small business owners in the UK. It's the kind of insider loophole wrangling that's only available to people who know the right lawyers and accountants. It's not at all obvious from online searches, even if you're investigating offshore and/or holding companies.

So dismissing people who learned something from this piece as "hysterically uneducable middle class outrage junkies" is self-indulgent virtue signalling. It's simply factually wrong.
Haven't we all created software that is never used?
Pretty fitting really
I travel all over the world and have seen literally thousands of them myself. In NYC/SF/LA area, a day doesn't go by where I don't see at least a few during the course of the day. I saw 2 in Nashville, TN area two weeks ago. I saw 4 in Dubai last week and 1 in Abu Dhabi. I've seen them in England, Amsterdam, Germany, Hong Kong, Japan, Czech Republic, Canada, and more in the past two years.

It's likely I see them more because I'm looking for them subconsciously (I think in part because I want one, just can't justify owning one as I rarely drive at home in NYC) and you just don't care. What your brain/eyes "see" is very heavily biased on a personal level.
I'm actually looking at getting a car at the moment so I've been looking into this to better understand the repercussions for consumers.

It's weird, VW say that if your car if affected, they'll fix it. It's a software update that a) won't affect performance and b) won't affect fuel consumption.

So, why did they do it in the first place?

Edit "VW confirmed the fix will not affect the performance or fuel economy of the cars, while Mueller also said the cars will pass the European emissions test (without cheating) after the fix has been installed." - http://www.autoexpress.co.uk/volkswagen/92893/vw-emissions-s...