skysight-inc/HackerNews huggingface dataset:
Yeah, I feel like going and redesigning parts of the system that are usually other peoples' area would result in some interpersonal problems at the least.

I'm sure the dev ops people will be happy I converted our automation from Chef to Puppet, you're welcome!
Yeah, this is the hidden cost of not choosing sane defaults. If you're not sure what "sane" is, default to "most likely/common use case". It's good to hear this is changed to opt-in in Angular 2 though.
What if, and this is a big IF, he is Satoshi and somehow "lost" that key?

Heck what if the real Satoshi lost that key, how would he make us believe him if he were to step out of the shadows?
Don't they use SVN? http://www.imagemagick.org/script/subversion.php

Maybe github is just a mirror

(edits - nope, looks like they changed recently. perhaps it's a reflection of developers moving from svn to git)
I think the difference is that that seems like something I would screw up. I know how to make a $5 DigitalOcean instance that only has ImageMagick that I can pipe photos to and from. I don't trust myself to unshare the network from some running process without leaving other holes.

There are all these gotchas when you have stuff running in the same OS and it just takes one little mistake and your adversary has root.
Why is the new tax needed? What are we trying to fund that other taxes don't already cover?
Don't we (the government) subsidize HFCS? Wouldn't not doing that raise the prices and not require a tax then?

I will oppose a 'sugar' tax because I don't think the government should be deciding what foods I consume, especially when I think taxes should be for raising money.

I am aware it's not the full picture and I haven't explained it well but I hope I got a little bit of my view across.
We've had this 10k basic income since the 1930s its called welfare, to reiterate what I just said basic income has to secure a middle class lifestyle for it to be meaningful.
It's weird. I had to do commandline image manipulation in big batches several years ago. There were two options, netpbm and ImageMagick. I ended up using netpbm (and it's still my preferred solution) after ImageMagick proved to be buggy and much much slower. It always surprised me that people flocked to ImageMagick after that.

I'm completely unsurprised about these bugs given the number of serious problems I ran into. Granted, that was something like 17 years ago, but these veteran projects have a tendency to hang around on life support for decades. Projects that are huge messes don't generally get cleaned up without massive outside pressure (see: openssl).
> C-level officers are usually paid in stock as well as cash, but the staff reporting directly to them are salaried employees.

A great point, but note that the writer considers C-level officers to be workers in this case. The headline might as well be Workers Pay Probably Keeping up with Inflation, Execs Doing Great, but that's not really news.
Always been confused by how the wayback machine works. Feel like if they were able to partner with browsers to anonymously hash of content and discover new content combined with do a better job doing version control that there index would be a lot big and granular too.
This is reminding me of watching a free energy scam unfold. Lots of big announcements, pending big announcements, some half ass attempts at validation, some more news of tinkering and delay, etc, etc. He still can't come up with the signature or the excess energy.
Ok, sure, we changed the title for you.
i wonder what such high punitive damages (10x actual assigned) are for. It implies that J&J knowingly did something wrong like a tobacco company.
Yes, but it's a setting that you can see and are required to define, it's not a built-in constant that is True unless you define it to be False.
Real World Observables
But it no longer makes sense, since the scientists have already said that it's unstoppable. So dumping more money into trying to protect them seems like a waste of money, no?
And you would be replaced by someone who likes to travel to tropical beaches to sit and read books all day :)
Bitcoin is way, way too small to disrupt banking. The total value of the M2 money supply of USD is $12,500 billion. Bitcoin's total value is only around ~$40 billion. That may seem large, but it is puny compared to the banking industry.
I've used Flyway for that. Conceptually similar, but it's a real tool. Very solid.
I love that security vulenarabilities have names now. I think it's great for awareness.

But when you have magic in the software's name you could do better then ImageTragic.

... though none come to me right now
Get the spelling and come back and post it!
Check out this one weird trick to making your websites 20% faster!
Since performance rarely matters and debugging usually does, doesn't seem totally crazy.
I think before #1, #2, or Rust, we need a better "libsandbox". You don't even need containers to do this -- DJB showed how to do this with Unix over a decade ago [1]. See section 5.2: isolating single source transformations.

I think the reason people don't do this is because it's extremely platform-specific. Most of this C code runs on Windows too (ImageMagick, ffmpeg, etc.)

And it's complicated. But if there were a nice library to do all this stuff, I think people would use it.

If you're just shelling out to command line tools like ImageMagick, you don't even have to change any C code... you can just run it under a wrapper (sorta like systemd-nspawn). But I think most people are not using ImageMagick that way -- they are using a Python/Ruby binding, etc.

But it can still be done -- it just takes a little effort. MUCH less effort than changing any of that old crufty code, much less rewriting it in Rust!

[1] Some thoughts on security after 10 years of qmail -- https://scholar.google.com/scholar?cluster=98145703154405707...
+1 for lektor. But a cool bootstrap theme on top and you get anything you need like good categorization and pagination etc.
Besides the fungal pathogen Phytophthora ramorum that kills oak trees, similar funguses are also killing other types of trees. Many avocado orchards in California have been wiped out by Phytophthora cinnamomi.
https://en.wikipedia.org/wiki/Phytophthora
I was also eating subway roasted chicken subs for a lot of meals fwiw.
Is it possible he is making an offer to Satoshi? That he's willing to take on the persona permanently (and maybe at a cost)?
> "at least 70k"
you gotta get back on earth man. When I got my first job in San Francisco I was making 65k, had 1 roommate in a nice apartment in the Mission, lived well, and was still able to save money.
And LA is cheaper than SF.
Incorrect, please re-read my statement. An average 10% annual return over 10 years. As the other reply to this notes, history shows in general this rule has held since 1970ish.
Although I have to say the regulation is no guarantee.

I actually had to catch a cab from Earl's Court to Kew Gardens because District Line had issues. I got in and told the driver, an elderly man, my destination of Victoria Gate, Kew Gardens. First red flag, he wasn't sure where that was. Second red flag, he pulls out a paper map book, like the kind I haven't seen for 10 years. Third red flag he doesn't even know which lane to exit the roundabout to go towards Kew.

I proceeded to watch on my smartphone how he went completely the wrong way and added 20 minutes to the trip getting stuck in heavy traffic. I'm well familiar with The Knowledge, and I can tell you without a doubt, someone lent this old codger his black cab. Whatever idiot cabbie did that did far more damage to the cause of the traditional black cabs than anything Uber could ever do.
"seccomp()" (old simple mode) does pretty much this but much more simply and efficiently - disallows all system calls except read() and write() to existing file descriptors, and exit() and sigreturn().

https://en.wikipedia.org/wiki/Seccomp
Perhaps I can add some context on top of the post. All updates are in transactions unless explicitly opted out. Also remember our case is a little special: we have hundreds of the databases with the same schema, what if #328 fails? The failure/rollback scenario is a bit more complicated when you go past a single database involved.

As for backups: absolutely. We handle this independently though. We do full backups every night as well as T-logs every 15 minutes. If I had to restore every database we had to a very specific point in time or just before a migration command was run: we have T-logs to do that going back 4 days at all times.

I'm sure there are good solutions for single database applications way more fully featured than our approach, they just do little to solve any problems we actually run into.
5 Reasons to Invest in Real Estate Crowdfunding
They have a fairly obvious "SECURITY WARNING: don't run with debug turned on in production!" above it though.
This has always been the case. The standard for scientific proof in the natural sciences is often quite high, and the legal standard for tort claims is usually "preponderance of evidence", which you could think of as a P-value of 0.50. The lowest P-value acceptable in most scientific fields is 0.10, more common you would use 0.05, and particle physicists would use 0.0000003 (for announcing the discovery of a new particle).
I think your point (b) is overly contentious and shows you don't really know much about Liberals.

In fact, most liberals I know are very much about personal responsibility - including towards society and the environment.
As an Australian I find the CA eucalyptus very nostalgic. They are most certainly a fire hazard, but I am surprised to learn that they are considered useless for firewood. Here in Australia the best firewood is eucalyptus - it is a bastard to split though.
You wouldn't need to live in a city like Los Angeles. Without job security to tie you to a location, you would move to areas of the country/state where cost of living was lowest.

Additionally, if you wanted to live a middle class lifestyle, you would have a job. That's the incentive to keep working. The basic income is to keep people at an above-poverty income level, not to keep everyone at middle class. In fact, the mere definition of the term means you couldn't have everyone at middle class.
What I found interesting about this is how they created a system where taxis can become cheaper and drivers can earn more at the same time as their idle time is reduced.

Also, at the same time, it is very illustrative for how humans (in this case, drivers) really don't matter very much in such systems. As the one guy says, "Uber don’t see drivers as humans". In that way, it looks they are just one step away from driverless cars.
They should not have received it besides more Americans drive Ford,GM and Toyota than Tesla.
For what anecdata's worth, I see a huge number of non-technical people who buy high-end laptops (specifically Macs), and as far as I can tell, it maps fairly well to the individual's socioeconomic status. Everyone from baby-boomer parents to social workers. It's why you see so many Macs and iPhones as product placement ads within shows whose target markets dwarf the techie population:

http://www.businessinsider.com/apple-product-placements-in-t...
So judging by this commit[1] and this line[2] I reckon you could somehow escape the "wget" command (assuming that's what it invokes here[3]). The following characters were removed in the commit: ' ', '"', "'", '`', '<', '\\', '>'.

If so then it's not complicated file formats or buffer overflows, it's an improperly escaped 'system' call being fed user input in an obscure feature that probably shouldn't have been included in the first place. Party like it's 1999 guys.

Edit: I'm pretty sure this is an RCE issue. This function[4] replaces the placeholders in the wget command, which is this: `wget -q -O "%o" "https:%M"`

So seeing as %M is user controlled we can feed it a URL like "//hacker.com/`rm -rf /`" and it will blindly pass it to the shell. Wow.

1. https://github.com/ImageMagick/ImageMagick/commit/a347456a1e...

2. https://github.com/ImageMagick/ImageMagick/blob/e93e339c0a44...

3. https://github.com/ImageMagick/ImageMagick/blob/e93e339c0a44...

4. https://github.com/ImageMagick/ImageMagick/blob/32bdefdc31f1...
Medicare and UBI would have to be separate programs, just like Social Security and Medicare are today. Poor old people living off of Social Security don't pay their medical bills out-of-pocket, they have Medicare to pay for them.

In a system with UBI, we'd really need to have universal healthcare ("Medicare for all"). Someone making only the basic income isn't going to have any money for sky-high Obamacare premiums, and would likely be on Medicaid. But that whole system is a complete mess, with a lot of people unable to afford Obamacare because their state didn't expand Medicaid enrollment. And now with one of the biggest insurance companies pulling out of the Obamacare exchanges, rates are going to skyrocket even more. There's only two solutions to this: 1) repeal Obamacare and change to a system where people who have no insurance are denied healthcare and are left outside the ER to die on the street, or 2) universal healthcare.

The way politics are going in this country, I predict we'll see #1 before we see #2.
Yes, from anywhere in the world, actually.

https://about.gitlab.com/team/
I wonder what happened there?
Yeah, and I believe that it's the only game in town for storing really large amounts of electricity.
In biological systems pruning is also important. Basically, if net A works even after removing connection X, then remove connection X.
It's very efficient and it's a great solution overall; the only problem is there are only so many dams we can build, since each one requires drowning a valley.
On an unrelated note, the best comment reply ever:

"Why do you assume that the experts missed a plan that some random guy on the Internet came up with in 30 seconds?"
There is a fundamental difference between code deployment and DB upgrades: DB upgrades must preserve (and upgrade) the existing state. Code deployment only needs to ensure that the new code is in place. It can do so by deploying to a new location and then redirecting the entry points, or it can do so by laying over the new code. Either way, the ways ways in which it can go wrong are few (at least compared to DB upgrades). DB upgrades, on the other hand, must take existing state (which can measure GBs and TBs) and transform it into a new state. If you're really unlucky, this may involve a size-of-data transformation (eg. update every row in a big table). I've seen 'upgrades' that lasted weeks. Having witnessed DB upgrades at MS Azure scale (see [0]), and having to code myself several SQL DB upgrade steps (internal system upgrades, the kind done when you install new DB engine, not user upgrades) I can say with confidence that DB upgrades are hard.

What we all end up with are either DB migration steps (a-la Rails migrations), of which I approve see [1], or schema comparison tools (a-la vsdbcmd.exe) of which I'm very skeptical after being burned several times on large DBs (they are as good as the tool, and some tools are better, still I find explicit migrations much better).

As a side note, My startup DBHistory.com is recording all DB schema changes, like a DB flight-recorder of sorts, and one of my future goals is to add capability to generate compensating actions for any DB schema change and thus be able to revert the DB schema to any previous state (by simply rolling back every change, in reverse order). But I must reckon I'm quite far from having such a thing working, and I'm not even considering migrations that modify data, not schema.

[0] https://medium.com/@rusanu/why-i-have-high-hopes-for-the-quality-of-sql-server-2016-release-6173bc1fbc82#.wp1zt5pn0
[1] http://rusanu.com/2009/05/15/version-control-and-your-database/
Glad that the XLIFF file import bug is fixed
If we want a code review on anything risky, we may push a branch or we may just post the commit in chat for review before we build out. Which is chosen depends on how big or blocking the change may be.

We ask for code reviews all the time, we simply don't mandate them - I think that's the main difference.
Black cabs almost exclusively take cash, they'll take you to an ATM if you only have card.
Check out this magic coin trick
Dude should have made a small fortune selling optimization services to those big corps.
Why does she care what anyone does in their free time? That corporate attitude that a company owns any IP you create, is the REAL problem.
Oh, I did it intentionally. I live in Bulgaria and the situation is similar. However my definition of 2nd world is just different, that's all.
If the intent is to escape the "15 minutes of fame", this doesn't work... because you still endure the 15 minutes of fame.

If the intent is to escape authorities and supervillains, this fails as well. They don't tend to discredit things without an actual investigation, which will reveal the ruse.
Fleet: C99 library OS for unikernel applications
There's a crucial distinction to be made. Ignoring unknown properties is a defined part of the CSS spec, so implementing it that way is just being correct. Postel's Law leads to trouble when "being liberal" means unilaterally extending the spec in ill-defined and ultimately incompatible ways. Example: autocorrecting "awesome-new-value" to its closest known match "alternative-old-value".
By bipartisan support, I mean that if you want to get a basic income to appeal to people on the right you can appeal to existing branding. FairTax is just a basic income with a smaller stipend. Brand it that way. When you co-brand it with the ability to gut a lot of existing federal programs so that they can be reformed without inducing panic that will also garner support.

Consumption tax paired with a BI would significantly raise the offset at which it starts to affect people.

Things that hurt the middle class much worse than a consumption tax are an income tax that is a percentage and continually increases in that percentage until the percentage caps at the point that most people would call "incredibly wealthy" (IMO).

The perk to something like a Fair Tax is that it's also an economic solution to illegal immigration. If you're in the country, you're paying taxes. If you're legal, you're getting the BI/stipend. If you're illegal you are basically paying to be here. It guts a big portion of the cost argument.

A FairTax + Basic Income hybrid solution could solve a vast majority of hotly debated issues in this country.
Giving up is a very poor plan. Dead trees make wildfires much much worse. California wildfires are terrible as it is.
Not too long ago some of the comments here were saying "how will we feed all of those millions of EVs out there if the EVs do end up replacing most ice cars?"

Well that's the utilities opportunity to survive. Utilities should actually lobby against ICE cars and pro-EVs. They will be the ones charging EVs everywhere. Not everyone will afford to charge their own EV at home where they have solar panels.
Even with C++, a modern flexible C++ game engine should be mostly data driven. For flexibility and being able to have faster iteration times, changing data at run-time and seeing results almost instantly is necessary, with the level of quality people demand from games these days.

Granted that's not the case across the board, but people have been pushing for data driven C++ game engines for years.
> 1. Simpler formats for file representation and data interchange. When someone tries to add an extra bitfield option, say no. When they keep trying, get a wooden stick with "no" written on it. Part of the disease of modern computing is bloated specs.

> 2. Restrictive not permissive code bases. Exit and bail out early. Tell the user "file corrupted". Push back.

The best talk on computer security I have seen is Meredith Patterson's Science of Insecurity at 28c3: https://www.youtube.com/watch?v=3kEfedtQVOY

It is really interesting that the techniques needed to achieve these security goals (theory of grammars) is one of the oldest and best explored areas of computer science.
Lead Exposure and Violent Crime in the Early Twentieth Century [pdf]
Does Microsoft have the best people? Or does massive pay and moonshot projects outweigh a private office for most of the best?
Rails 5 adds a way to get information about types of failed validations
No, I am just talking about the people on my block. Alameda is the gem of the bay area in my opinion.
Perhaps one day I will learn how to write HN clickable URLs...
I was on a job last month that involved a lot of cabs sitting around waiting for people. According to the producers dealing with them the drivers would ring like crazy because for idle time the drivers don't get paid... but Addison Lee still charges you for it. Absolute scumbags.
Suppose, our mind is indeed designed to have a postdictive illusion of choice, does it make sense to equip an AI with it?

Does an AI need to feel in control? What kind of role can an illusion of choice have in reinforcement learning? Wouldn't it introduce errors on smaller time scales, e.g. when catching a ball? Or in building up procedural memory in general?
Did he really? The message was in March 2014 from the "Satoshi Nakamoto" account on p2pfoundation.ning.com:

http://p2pfoundation.ning.com/forum/topic/listForContributor...

which at one point (probably) belonged to Satoshi, but by September 2014 (almost certainly) belonged to someone else. The account was only used three times before that, in February 2009, to write a post about Bitcoin and two replies. It's certainly possible that if one non-Satoshi person gained access to the account between 2009 and 2014, multiple people could have, and that the person who sent the March 2014 message was just an unrelated kindhearted person who wanted the paparazzi to stop bothering Dorian Nakamoto.
Hi Zerr,

Thank you for your interest in this role. We are looking for potential employees here in the United States that are open to working onsite here in SF or Remotely within the States. If you have any questions please reach out to me at mwelch@ripple.com
Preparing for the Future of Artificial Intelligence
Then Satoshi is, for the purpose Bitcoin, dead. If there is no way to prove who Satoshi really was, what other term could we use?
To expand on this; they both use GD by default, as it's the most widely-installed library with PHP extensions available out of the box.

But both have plugins/modules that you can use to switch the library to ImageMagick very easily, and some plugins/modules would require ImageMagick for specific functionality.
XHTML?
Also, Linux has "built in" (whatever that means) DNS caching. It's called nscd. It's just usually not enabled by default (which is sensible, since it's better off shared).
Also interesting: https://www.quora.com/Can-electricity-be-stored
I think you're misinterpreting it. She's saying a person who rewrites (implied: and implements) a core process without informing other developers or product teams.
Texting Is the Modern-Day Postcard
tl;dr Unix security model is too hard to use. Let's put another layer of crap around it!
wait, why wouldn't you want your image processing library to have the ability to run random processes / shell commands? Oof.

In the meantime, maybe a DONT_RUN_COMMANDS ifdef around every call to fork/system/exec is merited...
SAFECode: Static Analysis for Safe Execution of Code
You can change the scaling in the control panel though.
`` can invoke subshells
> Then Satoshi is, for the purpose Bitcoin, dead. If there is no way to prove who Satoshi really was, what other term could we use?

"Satoshi's identity is unknowable" would be a more accurate description of that scenario that "Satoshi is dead".
SoftBound and CETS: Complete and Compatible Full Memory Safety for C
5 Fintech Trends to Watch in 2016
General consensus so far seems to be that GraphicsMagick is unaffected by this vulnerability.

If security is really important to you though, you should move image processing to separate isolated servers anyway, and verify magic bytes as described by this site.
Another: What would an AI be afraid of?