skysight-inc/HackerNews huggingface dataset:
Yeah, but a script that intentionally invokes /usr/bin/git has already achieved the non-privileged access the git vulnerability could provide. A script that unintentionally invokes (i. e. not to exploit) would then need to be combined with a malicious repository, which may be tricky.

But I don't want to dismiss this vulnerability – it's so easy to fix on Apple's part that they don't have an excuse. There are a few too many neglected corners of their OS where they seriously have to get their act together. But in practical terms, people focus too much on the technologically exciting or Apple/MS/<other divisive entity>-drama provoking vulnerabilities, while there's probably like one or two people working in software who actually verify every hash of every download and audit the source code for every version of every vim plugin they install.
Lately, though, they seem to have developed a bias (or maybe it's just become more evident?) against what you might call the "non-establishment" left, people like Jeremy Corbyn and Bernie Sanders get unexpectedly short shrift from most of their writers, whereas their (often female) competition, like Yvette Cooper and Hillary Clinton, get glowing coverage. This has been pointed out extensively in the comment sections, to no avail...
I read it as meaning new choices of where to spend the money. In other words excluding spends that have already been contractually committed, but I suppose it might mean growth in ad spending. In other words 85% of ad spend growth will go that way.
When trying it for Android it didn't feel like a help at all.

I still had to set up all this mobile dev environment boilerplate...
"If you hear of an outbreak of plague in a land, do not enter it; but if the plague breaks out in a place while you are in it, do not leave that place."
And 10 more unannounced locations through '17. I'd be surprised if a single AUS wasn't one of them.
What is that from and what does it mean?
Of course you can have rich and highly functional design, as well as very functional, minimalist barebone design.

It's always harder to come up with a design that's simultaneously pleasing and feels easy to use, but throwing design out of the window altogether is nothing but a copout. It's the easiest thing to do, but is it a solution, or just an attempt to make some sort of a point?

To me it's the equivalent of shaky camera and black-and-white filming: every film student's act of rebellion against James Cameron and the like ; )
Salary trends for UXers – Digest
Facts in that story are factually wrong:
http://www.deerfriendly.com/decline-of-deer-populations
Disable it, reboot, fix the problem, reboot again with it enabled. Big f'ing deal.

I'm far from a fan of Apple's protectionism, and yet this doesn't seem like anything to be up in arms about.
Apple Developing iCar in Berlin [German]
Hmm you're probably right - I didn't consider sustained low interest rates. The decline started long before rates came down but I've no idea how 30+ years of differently funded schemes would look (ie without the funding changes). That's a lot of compound interest.

> let's not forget Gordon Brown

Oh he gets no free pass on pensions - he raided them for billions.

My personal pension has performed disastrously from 2 bad years it'll probably never recover properly from. There went my early retirement thoughts. My parent's generation retirement options look pretty good.
I think its a test for the candidates capability to grasp the concepts and coding those basic algorithms with out bugs is to demonstrate their ability for diligence.
Pastafarianism is a great non-violent method of highlighting the privileged position of organised religions worldwide. When a nation decides that church and state should be separate, and no religion is promoted over any other, you usually end up with a handful of religions with privileges (e.g., tax exemption, access to civilian private records, etc.) that no other organisation can attain. When another religion gains popularity, they too claim these privileges (which is only just, as there is no state sanctioned religion).

This creates a neat conundrum for the lawmaker; what is a religion? When is an organisation a church? Can you legally define what a religion is?

Why is the Church of the Flying Spaghetti Monster obviously satire, and Catholicism a proper religion? What about Scientology? Is it about the number of adherents? Something tangible? A short-list of pre-approved religions? Pre-approved by whom? On what legal basis?

If you follow this line of reasoning to the extreme, you must conclude that a satirical organised religion is just as much a real religion as any other. Which is fine, but it implies that have to provide the same (legacy) privileges to all, or accept not being a secular state (and rewrite your constitution as a consequence).

Pastafarianism is all about proving this inherent silliness afforded to established religions.
The opening paragraph reads:

"Sometimes I think about all of those pictures which show a bunch of people in startups. They have their office space, which might be big, or it might be small, but they tend to have Macs. Lots of Macs. A lot of them also use git to do stuff, perhaps via GitHub, or via some other place entirely. There are lots of one-off repos all over the place."

If you can see a cheap shot in that paragraph, then you are reading things that aren't there. A blog post gives a certain amount of freedom for the author to elaborate on a theme.

You seem a bit defensive. I'm not sure why, but I certainly don't think that Rachel was attacking those who use Macs.
If you're going to rewrite in any case surely it's worth going to Rust (or Ada, or another language that simply doesn't have the myriad unsafe possibilities that C++ does).
great documentation .. plus a very good reference for using Hackernews API .. great job
This method of interviewing may not be perfect, but i think this is really a good way to filter the candidates out. Whats your ideal(or near to ideal) interview would be which can filter the candidates out.
Tap2Share – Share iOS screenshots with just one tap
> freedom to fail without any safety nets.

What kind of freedom is that? Does freedom of speech include the freedom to be thrown to the lions if you say the wrong thing?
Well, the same is roughly true of oil although it's a little harder to store and ship. There's at least two futures markets (Brent and WTI), various oil grades etc. People seem happier assigning a single "oil price" despite local variation.
Something like Appcelerator Titanium took years to mature and become stable, I don't think you can get a multiplateform solution right that fast. It seems that React native on Ios is more stable than it is on Android. I wouldn't use it in production for android.
"Advanced" users would know how to turn off System Integrity Protection if they wanted.

It makes absolutely no sense to downgrade OS X versions to avoid SIP. It's quicker to just disable SIP than to downgrade the OS.
Sometimes I think that Apple are increasingly trying to lock down OS X to prevent anything from being installed outside of its own walled garden.

The poster's point, as you haven't understood it, is that by preventing updates of utilities like the system git, vulnerabilities remain available on the system. This makes the system less secure, and the only way to fix the security issue is to disable the security feature that is preventing the security vulnerability from being fixed.

In other words - by making system files immutable even to root, it's not exactly making the system any more secure.
At least in Microsoft Edge "Next" button on the toolbar sends you to the "next" page.
Did some Googling, couldn't really find any stats.
> Edit to ask another question: another question for you, as you seem to have the answers here: why does Apple install git in a directory that is under the control of System Integrity Protection? Why not under /usr/local? It's not exactly a "system utility" - it's a DVCS and not in any way critical to the running of the system. Hell, I'd not even consider it system software.

I can imagine git might be necessary for applying some updates (on FreeBSD svn is a critical part of the base system, because one way to update is by svn updating the source and rebuilding).
In the 'Lisp World' JIT compiler are mostly not used. The main approaches are:

* program compilation, where the object system can declare parts as non-extensible

* a runtime compiler, which can compile methods

See for example for a recent attempt to statically compile methods and handing the types to the optimizing compiler (which also uses type inference):

https://github.com/guicho271828/inlined-generic-function/
Rachel is a widely known and reputable author. I doubt she aimed it as clickbait.
"Getting Started with Swift on Android"

"FAQ
[...]

Does this mean I can write Android applications in Swift?

No."
went to a marketing tech conference and pitched our idea about AdWords Automation : AdNabu to a bunch of people. Exchanged cards with a few of them. We couldn't get meetings with any of them.

We got a call from from an enterprise with whom we couldn't interact personally. Met them in their office twice, started a free trial, showed positive results and they became a paying customer in a month

We had to sign a lot of documents but the contract is longer and more profitable to us :)
Is that honestly a surprise to anyone at this point? Sure Facebook I might not fully understand, but at least it's highly targeted, even if it may not generate revenue for the advertiser.

Most of the companies buying ads are in the business of sell "actual products", which means that you need the catch the buyer when their in a buying mood. There's little point in trying to peddle my goods on Mashable, people simply aren't in the right mindset at that point.

Google on the other hand, that's where people go to find the sellers, reviews and specifications. It makes a ton more sense to do your advertising in that setting.

Sure ad blockers might be hurting the revenue of online media companies, but that only because they've taken ads to such a ridicules extreme. It made no sense to try to sell me a TV and lure me into online poker when I'm reading a news article. It just contributed to my desire to kill of those ads.
Rewriting in any language won't help with this one unless the language has builtin integer overflow checking.

The solution here is actually quite trivial: just restrict filenames to 255 bytes and nesting to 255 levels, which limits paths to 64KB at most. Anyone trying to use git repositories exceeding either of those limits should be considered insane.
I thought YouTube moderators had the worst job?

http://www.buzzfeed.com/reyhan/tech-confessional-the-googler...
You can override per-package, yes, if you really want to, and you can pin versions for C. As others have said, in practice a newer version of one package often depends on a newer version of another (the system will generally stop you rather than blindly installing incompatible things), and obviously you'll miss out on the testing of an integrated system that's the selling point of debian stable, but you can do it.
It's apparently from a muslim religious text. I found this very interesting because it's a rule that covers both self-preservation ("don't enter the infected zone") and quarantine ("if infected, stay where you are"). It's an early containment protocol.

What seems most fascinating to me is that by proscribing this from a religious channel, you can circumvent psychological mechanisms that would otherwise cause people to act in their own self interest - and in this case it actually works for the greater good.
Client onboarding: How I turn 90% of prospects into paying customers
In that case, then git is a vector through which SIP can be bypassed. But it's not used to apply updates as it's part of XCode command line utilities and not the core system.
> The idea that you can't perceive something unless you have a word for it is ridiculous.

That's not the idea. The idea is that if you don't interact with something you can't perceive it, and if you can't perceive it you won't have a word for it.

> our eyes have perceptors for blue. Were they just useless until the last few hundred years?

They can be used to used to disambiguate other categories besides blue. For example, you would use your blue receptors to differentiate forest green and aquamarine. But aquamarine and cobalt might look exactly the same to you.

Every individual will see a slightly different set of categories based on their experiences. The world has infinite information, and categories don't actually exist in the world. They are just something we form in our minds through interaction with things that do exist. If a category doesn't signify anything useful to a creature, that creature won't perceive the category at all. It doesn't mean their receptors aren't picking up the information. It just means the perceptual system is disregarding it as noise.
That's the idea of a subscription model: you'd pay about the same as now (or, let's say, 10 years ago). But you get to read whatever you want because it doesn't cost anything to give you the extra content, knowing that you wouldn't pay for it anyway. Everybody wins: readers get more diversity, publishers stand to actually increase revenue because it's a much better offer than in the past and could attract more readers and the society profits when people are better informed.

It won't be at <price of newspaper>/<articles per issue> because nobody reads every single article. There's also the slight complication that newspapers used to get about half their revenue from ads and classifieds and that's pretty much gone. We should find out in the next decade if there's an econmic model for journalism. If it turns out that there isn't, and if some sort of disruption hits TV as well... It's at least going to be interesting.
Git-vanity: a tool for generating Git vanity commits
Not completely jokingly, you could follow up with constants.io (the domain is currently available).

It would be used for "constants" in the programming sense-- i.e., named values that are not actually constant over time, but rarely change. You could be the global repository for config files! :)
Just wiped OSX off my MBP 11,2 and rocking Ubuntu minimal. Happy days.
8 Uncommon Linkedin Marketing Tips for Small Businesses
How to keep your business organized without drowning in software
Claiming this isn't a hoop to jump through is Apple fanboyism at its best.
This is true, but it's primarily due to the fact that highly skilled reversers aren't really producing cracks anymore.
> Yeah, but a script that intentionally invokes /usr/bin/git has already achieved the non-privileged access the git vulnerability could provide.

Or, in Old New Thing terms, "it rather involved being on the other side of this airtight hatchway".

https://blogs.msdn.microsoft.com/oldnewthing/20140529-00/?p=...
Yes, this is what I have seen in Belarus as well until recently. Typically it was people with higher income who became overweight. For example, my grandmother lived through German occupation during 19941-1944 in a small village. For 3 years pretty much the only source of calories for her was potato with occasional fish and mushrooms. She never became overweight and died aged 92. My father (her son) have never experienced any food shortages and was always relatively well feed. Yet he became significantly overweight when he became 50 years old and 20 year later he continues to struggle with that.

But then starting about 10 years ago the pattern that I have been observing on the streets started to change. Now it is more common to see over-weighted young people from low income families.
All too often, the scared white person is wearing the airline's uniform.
Running Ubuntu in VMware and doing all the critical stuff there is also a good solution as you still get perfect hardware support through the underlying OSX layer.
Has anybody used Silver ?
http://www.elementscompiler.com/elements/silver/
It seems to offer a working Swift compiler which can also
create android apps (and ios and .net)
The discussion hasn't been about stdio so far.

Btw. my fflush(3) manpage does mention that fsync(2) is required to ensure data reaches the disk. Of course it's not nice that we have to drop abstractions (and portability) to go the safe way. Let's just say stdio is a bit simplistic.

Btw. many file systems don't reorder write and rename for exactly this reason. But at least ext2 and btrfs seem to do it.
Also Jack Schofield was writing regular decent IT-focussed articles in The Guardian long before most other UK newspapers.
Show HN: Corporate Vitamins
CStrings and drop guards everywhere break
Is there any free tool to find IT skills that can increase my job opportunities?
I am looking for a free online tool that can help me find IT Skills that can increase my career opportunities in the area of my expertise. I you know any, please share. Thanks in advance.
This is so desperately needed. Or (better), a Spotify-style flatrate (which would encourage consumption that doesn't cost the publisher but is a benefit for the reader).

It's the one remaining hope for quality journalism, but apparently they need to stare into the abyss before they get their act together. That, or it needs a mass extinction first until it is obvious that the supply of original content is visibly reduced (unlike now, where about 10-15 publications produce excellent content and thousands turn it into autogenerated slideshow).
> The "Guardian-reading lentil-munching sandal-wearing lefty" is a popular caricature

I find some of these caricatures interesting. Like how many leftists are vegans or vegetarians, and how many libertarians are meat-lovers. You would perhaps think that diet should have no correlation with political opinions, but it certainly seems to have.

Or take clothing. Among leftists, there seems to be more people wearing stuff like sandals, colorful clothing, dreadlocks, piercings etc. than among right-wingers or libertarians. When I see pictures of libertarians or right-wingers, they often seem to be wearing conformist looking clothes, such as suits. Is there a reason for this?

In order to do well economically, you probably need to be careful not to offend other people, so you cannot express yourself too much. People who express themselves more (wear what they want to, rather than what is inoffensive), are probably more likely to become economic losers. And if you're an economic loser, I guess left-wing politics (tax the rich!) is appealing.
Isn't that why religions have been so successful. They are not only a psychological coping mechanisms, but actually increase the success (or fitness, if you like) of the societies they dominate. So this (don't leave an infected area) is an excellent meme in Dawkins' original sense.
Religions make some kind of honest claim on metaphysical Truth. Satire is at odds with that.

The clever thing is that getting the government to pick winners here is actually worse than letting someone wear a colander in his ID photo. This doesn't undermine organized religion as much as it demonstrates the limitations of liberal government.

I'm not sure that's a win for anyone.
Compared to the Permian-Triassic extinction event, the black death barely qualifies as a mishap, let alone the greatest catastrophe ever !
The poster's point, as you haven't understood it, is that by preventing updates of utilities like the system git, vulnerabilities remain available on the system. This makes the system less secure, and the only way to fix the security issue is to disable the security feature that is preventing the security vulnerability from being fixed.

I understood the point perfectly well, and that's why I think it's a bit overblown. This security feature is precisely designed to prevent you from modifying your system and encourage you to defer that to Apple. It should be obvious that such a feature will also prevent you from fixing things yourself, which Apple either hasn't gotten around to fixing or refuses to. But since they give you some way of disabling it, you just do that and fix it yourself (and presumably SIP will then protect your fixed version of git?)
"The infection takes three–five days to incubate in people before they fall ill, and another three–five days before, in 80 per cent of the cases, the victims die."

Takes at least 6 days for the infected to die. That's a really deadly disease. Even Ebola was not that fast. The WHO website mentioned that it takes 21 days for Ebola patient to show just the symptoms, which could mean it would still take few more days for the patient to die.
How to name your product (2015)
What about scripts that explicitly call /usr/bin/git?
In the first paragraph, ending:

>But in recent weeks, what had been a simmering worry among publishers has turned into borderline panic.

the words "into borderline panic" are a link, but to the same article. Does this mean that the author didn't write the link, but some editor added it, in this case after the article was published? (And accidentally added a link pointing to it.) Or, how can this happen?

I had always thought that the NYTimes authors added their own links as part of their writing style. It would be interesting if instead this were a survival tactic exposed at the top of this story...
Show HN: A Jewel Game That Plays Itself
Instagram Is Ruining Vacation
What the hell does edgy mean these days?
> just restrict filenames to 255 bytes and nesting to 255 levels, which limits paths to 64KB at most. Anyone trying to use git repositories exceeding either of those limits should be considered insane.

Funny, because I've actually been locked up for being insane five times. Speaking from experience, they'd only consider me insane if I said something like 255 was an important number because there are two sides to every problem and five fingers on each hand, and the path, which two feet take, is six one way / half a dozen the other, to the four corners of the earth, which is the natural limit.

So... you don't really know what insane is. Jus' sayin'.
Continuing my hobby of coming up with ways for machines to entertain themselves. If humans get bored, machines (eventually) will too.
> They are basically screwed until Apple deigns to
> deliver a patched git unto them

Actually, no. Don't use the tools that come pre-installed.

All you have to do* is:

brew install git

*and make sure that brew installs are prioritised in your $PATH. Which you should do anyway.
Panama Papers Wordpress and Drupal Vulnerabilities Visually Explained
Plug the competitor into semrush and/or other seo tools and find out where its traffic comes from. start there with your efforts too/alternatives ones of the same kind/niche.
This is a good argument. But that is not a market where majority Python programmers are.

Once the wrappers are done, for most developers, it becomes the matter to layering those build blocks building their own functionality. It is not a strong enough argument that people should use Julia because it is a better language to write wrapper. Let alone that Python wrappers for data science stuff is already like a de-facto builtin.

Not saying Python is perfect, but IMHO, Julia is not hitting the right spot in order to really stand up against Python.
I've noticed the problem in my peers and in myself too. One good remedy is this: http://mindingourway.com/have-no-excuses/
"In refusing to generate an excuse when everyone else is doing so, you violate some unspoken pact of mediocrity"
When someone's changed it? Which people do _all the time_.