skysight-inc/HackerNews huggingface dataset:
I believe it's because the exploit isn't actually exploiting sendmail, it's expoiting /bin/sh sh -c <cmd>.

Php's implementation of popen() doesn't invoke commands directly with stdlib's execl() or execle()...it calls stdlib's popen(), which passes it through /bin/sh -c <cmd>.

That's assuming phpmailer doesn't treat a postfix sendmail wrapper differently than sendmail.

Edit: As far as I can tell, php doesn't allow any way to spawn a process without passing it to /bin/sh. That's odd, as other script languages like Perl and Python provide that. It avoids a whole class of exploits.

Edit2: It seems to be exploiting the "-f" option, not "-X". The postfix wrapper supports that.
I mean, I have Italian, Austrian, and Scots-Irish ancestry that I know about with certainty, and no doubt a bit of everything in Europe plus North American Indian and African besides, but so what? I could hyphenate myself to a fare-thee-well, but I don't see what good that would do myself or my country, and to do so strikes me as disrespectful both of those among my ancestors who immigrated and naturalized because they felt being American was worthwhile, and also of those who were transported against their will and nonetheless found a better life here than that they'd been forced to leave behind.
https://en.wikipedia.org/wiki/Montreal_Protocol

The world decided for once that something had to be done and ... just did it. This allowed the ozone layer to gradually recover. The ozone hole will hopefully finally be closed again around 2050. (No source at hand, but read it a few days ago)
This was a very real issue, but it was successfully adressed by banning CFCs etc.
Would be nice to see this displayed relative to population/demand.

France looking good but they're paying for that green color.
Chernobyl is still open for tours, afaik. You won't get very close to any of the running reactors (and not the closed one, of course) but the tours generally go through the complex' main road and through the Pripyat ghost town.
How can DNA have nationality? I don't understand. Can someone please enlighten me?
"the black hole has no interior"
<picture> with multiple srcset makes it possible to serve images that are displayed at 100% width, filling their (DOM) container.

Check out http://scottjehl.github.io/picturefill/
Apologies, I had meant to include my area in my original post. I'm in the Ottawa-Gatineau area. I've seen this done around Montreal, too.
Cars are a denial of public space and a tangible symbol of American selfishness. You're spot on. Peoples' snobbishness and entitlement in this thread is palpable. Americans dislike public transit for purely cultural reasons, no matter what they say. Boston's transit system is far from perfect but I'll put up with its warts to avoid the culture of car ownership.

I do all my best thinking on the bus...
No I develop on Linux.
Intimidation. I dealt with that a lot when riding the bus in my city, was a problem back in 1998, was a couple of years ago, and from my understanding still is today. Perhaps my city just sux though.

http://wfpl.org/charges-dropped-tarc-stabbings-downtown-loui...

http://www.wlky.com/article/tarc-adding-security-measures-in...
I recommend the rtings.com reviews, those are the best

http://www.rtings.com/tv
Sure, NWI includes Gary, long important for steel. I got married in Indiana, and our dinner that night was in South Bend on our way to Chicago. South Bend didn't look very big, and near South Bend looked quite rural.

The wedding was 15 miles south of Warsaw; it wasn't very big, and the surrounding area was farm country. The wedding was in Claypool, and her family was from a farm on the east side of County Farm Road a little south of the railroad tracks E-W about the latitude of Claypool.

Her father was a really good guy, had been a Captain in WWII, did well in farming, built the house and the farm buildings, mixed his own animal feed, was on the bank BoD, was active in Lions, was on the school board, eventually ran the local REMC, etc.

She was a fantastic student, high school Valedictorian, PBK, "Highest Distinction", Woodrow Wilson, NSF at IU, Ph.D. at Johns Hopkins.

I also spent five years in Ohio, at OSU, in Columbus. From all I can see, Ohio, Indiana, ..., are heavily rural and very much want and need cars. There the pollution from cars is of little concern.

Sure, Manhattan is different.
Steam already records the pcs you login from and even let you make them (steam guard)
Actually it is something which is far from being straightforward.

First there is no real means to know the genome of a person. What machines like Illumina do is to provide short reads, tiny parts of the genome, without telling which part is connected to which.
Next an "assembler" software is used to create a genome from the reads by comparing edges, but it drops a significant part of the reads to do so, because the method (BW/De Bruijn) can not deal with all reads or produces assembling that cannot be fully decoded (it describes loops between reads, etc). To improve the quality of the decoding, a "scaffolder" is used to "graft" some of the remaining parts on the assembly result.

Now to claim that someone as some origin, you must have a referential, which tells what is a genome of a British geographical area, an Indian area, etc.
To my knowledge the published works describe taking the genome of only a few hundred people in each "area" and they assume these genomes are representative of the people that lived there 1,000 or even 20,000 years ago!

At last you have to compare the genome that you collected to this referential to make the claim that someone has ancestors from this or that area.
Thanks for taking time to respond with your insights. Rendering math notation for screen display in an HTML browser is a difficult and challenging problem.

For a long time, TeX was the best-of-class document rendering software for mathematics. I believe TeX emits Postscript, which works wonderfully for printed articles and books. Web developers can either try to leverage legacy software like TeX or take an entirely different approach. Can you point to a good summary article on this topic?
The best human driver would have the same constraint. The best you might do is flash the brake lights to get the guy's attention behind you, if you smell trouble, and then use medium braking force instead of full. A swerve to the shoulder or adjacent lane might be available, and a tesla would have the upper hand here on situational awareness, since it always knows what's alongside.
Ask HN: Goals for 2017? What app are you using?
Any good apps to help track your goals?
Except that biodegradable packaging means the manufacturer needs to continue producing (and distributing) it, which incurs its own cost.
Been there many times. Old condos, homes have coal burning furnaces. People have no money to replace them despite aid from EU to convert to gas. Some people throw everything into the furnace to burn for heat. It's not pleasant to walk outside and breath air fowled by burning plastic bottles.
Ruby 2.4 improvements in depth: Hashes, Integers and Rounding
WebSockets are just too slow

https://www.w3.org/TR/tcp-udp-sockets/

Not sure status of this standard, or plans for adoption. As long as proper steps are taken to allow for secure implementations I'm all for it.
Thanks, Didn't knew. Mods you can remove it :)
That sounds interesting - have you got any more details on exactly how they set this up?
http://www.bbc.co.uk/news/science-environment-31905764

linked paper: http://www.nature.com/articles/nature14230.epdf?referrer_acc...

The paper is pretty good. The truth of it is they make groupings based on correlations and name the correlations based on where it is most common / convenient
>But look, "the innocent have nothing to hide" is an insidious and wrong idea

Very much agree, because there's a difference between being "innocent" and actually innocent. Only the former matters, it's subjective (jury/judge) and unknown to everyone but you, ex ante.

Sometimes the police are more invested in finding a criminal rather than the criminal.
See also discussion started from Ruby 2.4 announce few days earlier: https://news.ycombinator.com/item?id=13252225
Linux on the PlayStation 4 [video]
How are they paying? Germany pays for no nuclear, that is for sure.
Actually, I have run this program on my laptop, which is secured with Microsoft Security Essentials & USB Disk Security, but it was undetected.

Then I tested it in my institute's Computers (wishing to find any weakness). My friends use crazy anti-viruses in their PCs but neither of them could catch it. It helped me to make some changes though. I of course have removed them later. :) (It was more than a year ago.)

As I have not tested the program rigorously in all environments, I used the phrase- "almost undetectable".

Thanks a lot for your query.
Best Business Phone Systems 2016
Some of Daydream’s Biggest Apps May Have Sold Fewer Than 5,000 Copies
it's pretty insane. Ths is supposedly Putins new castle

http://www.ibtimes.co.uk/putins-palace-this-russian-presiden...
Nascar, F1 etc.
Building serverless web application with Angular 2, Webtask and Firebase
I doubt the 100x range, too, but Photoshop is decades old and, likely, has lots of its filters written in assembly for speed, with zillions of variants for all kinds of sometimes long gone CPUs and GPUs. It also still may have its own memory manager.

It that is true, it should be possible to get large wins in LOC if one either is willing to give up orders of magnitude in speed and memory usage, or is equipped with a sufficiently advanced compiler.

There likely also is some room for improvement if one is willing to change the file format (.psd is not known for its consistency), but that would likely be a rounding error.
Do you have a citation for the 3 times a day figure? I'm not disagreeing because I belive it's true. I'd just like to see some real data.
If it's a hash function that only works for this exact data set, I can see the argument. If it's a hash function that works for this kind of data (these particularly formatted, particularly constrained strings), it's fair play. Which one is it? 'It's not a good general purpose hash function' alone doesn't seem like a valid criticism, especially along with 'the Rust version uses a general purpose hash function'. Nobody said you had to use a general purpose hash function.

Imagine you got a million strings of variable length such that the last 4 bytes are guaranteed to be unique value between 0 and 999999. Lopping off the last four bytes is a perfectly good hash function for that kind of data.
To me, OpenCV is one of the great success stories among open source libraries. (Granted, I have strong bias because it's one I've been exposed to fairly often.)

It has managed survive and thrive through many changes of the kind that often derail community software projects: multiple changes in corporate stewardship, multiple API evolutions, change of main language from C to C++...

OpenCV is an excellent example of how a large project primarily driven by corporate developers can effectively incorporate community contributions and cutting-edge research. Many other frameworks of this scale either are entirely roadmapped through corporate development processes (e.g. WebKit, Android) or have went through some kind of existential crisis when balancing the commercial and non-commercial interests (e.g. Node.js).

Thanks to OpenCV contributors for the past 16 years, looking forward to the next!
Sorry for a fluff comment, but +1 for using Amazon Smile links.
www.smashmygoal.com
You would probably want to respond to the user, and it is possible only if they give you their email in the form.
Although, this can be solved by treating the From field in the mail form as just a field of information and have that in the body of email. But that would make automated replies difficult.
Well, if you read those conversations, you might notice that people think that

- nuclear is very expensive

- nuclear has a waste and risk problem

- wind and solar are price competitive and very environment friendly
Microsoft is misfiring on another major computing trend. If you can't fork the code, you are missing an important feature.
Dinorwig? http://www.electricmountain.co.uk/
MSSQL is in the very new process of actually becoming available on Linux. Give'em a bit of time at least.
iPhone lockscreen – ground zero for mobile interaction
In the US, this is a pretty common form of financing for bigger durable goods (furniture, etc) - they call it "N months same as cash" but it's implemented as a credit card with a 0% interest rate for just that purchase for a limited time.
In the case of a murder, it's a good thing. The risk is always the chance of abuse, and although in the case of water stats it's hard to imagine how you'd abuse it, having more information always means a higher chance.

Ideally we'd want to get the benefits without the abuse, but that requires a solid bureaucracy and strong rules.
Is Poland using almost only coal?
Marvin 1.5.5 – Cross-platform image processing framework
It just barely became available as a public preview. It's not recommended for protection yet.
How much does municipal recycling cost in San Francisco?

Is it a net profitable endeavor (energy in vs out)?

What are the recycled materials being used for, and what are the costs to get the material into that state?
Bitcoin price at record high against pound and euro
39 Experts Share Their Top 3 SEO Trends for 2017 and Beyond
Two! I hate when it moves the stuff around just as I am about to hit a link and hit an ad instead. It's hard enough without the page moving due to my large fingers.

Also:

* Popups asking me to download app

* Auto starting video of any sort

* Not loading the complete page so it has to keep loading as you read. This is very inconvenient when sitting on the train or subway with lots of tunnels.

* Link/button for "Read full story" on the story it self.

Most of these are reason enough for me to never visit the page again.
My recommendation here is to simply buy a dumb TV with HDMI, and plugin something cheap like a chromecast, or any of the aliexpress-20$ android TV boxes [1].

You get the exact same smartness, without the worry of bricking an expensive device. Just upgrade to the next cheap smart pluggable device in a couple years.

I'm using one such android-TV box on a non-smart LED TV and it works very well.

[1] https://www.aliexpress.com/wholesale?SearchText=nexbox+a95x
Yeh - the impact from overclocking isn't quite what it once was. It's nice that nowadays we're not left wanting for CPU speed even for most entry level processors. But I fondly remember feeling pretty excited by the "AXIA" AMD Athlons and pushing them to some pretty amazing results with fairly standard cooling (1.2/1.33GHz -> 1.66GHz and above, iirc)
Customers could elect to pay more for handling (the H in S&H), or have a pricier tier of Prime that offers eco-friendly biodegradable packaging materials.
> You won't get very close to any of the running reactors

They've all been decommissioned. #3 was the last one to shut down in 2000.

On a related note, this Youtube user [0] has videos from what appear to be tours inside units 2, 3 and 4 (the one which suffered the meltdown in '86). The one from the reactor hall in unit 2 [1] is particularly interesting.

[0] https://www.youtube.com/user/Thallium208/videos
[1] https://www.youtube.com/watch?v=Oe_zzTQFV3o
The last reactor in Chernobyl shut down in 2000. [0]

The whole complex is in the process of being decommissioned.

[0] https://en.wikipedia.org/wiki/Chernobyl_Nuclear_Power_Plant#...
Lots of Nuclear plants in the UK offer tours, though lots are aimed at school groups. The Sizewell B tour looks like it might be the most extensive: https://www.edfenergy.com/energy/education/visitor-centres
Ask HN: How to invest in already angel/ seed funded company as CTO?
We are IT Services company. Another Startup wants us to partner with them as Technology provider.

They received investment a few months back and that's undisclosed.

How do we ensure we enter/ join organisation on fair valuation ?
I went last year to Forsmark here in Sweden, they have a very awesome tour, didn't go to the actual reactor (heard that they had it but don't know if it's still possible to do).

They showed us the nuclear waste disposal facility on the grounds of the power plant, it's temporary while Sweden builds a huge disposal facility for all of the country's nuclear waste (and it looks like a scenario for Half-Life, it was very cool).

Apart from the nuclear disposal facility our tour also went to the reactor control room simulator where the technicians practice and get certified (we could even try the SCRAM procedure and all) and also showed the grounds around the facility, where the water that cools the reactor comes and goes to, etc.

Would completely recommend doing it if you are ever in Sweden and can manage to go there.
I'm not a lawyer, so excuse me if I'm asking trivial things:

To obtain a search warrant or arrest warrant, the law enforcement officer must demonstrate probable cause that a search or seizure is justified. An authority, usually a magistrate, will consider the totality of circumstances and determine whether to issue the warrant. [1]

I agree to your statement, if there is no search warrant. But in this case an authority already decided that the search is justified. What use are search warrants then if they can all be refused?

I understand, that even a magistrate or whatever can make errors. But if this happens a lot, the consequence will be, that search warrants are issued without second thought and the person/company affected by the search should always deny it first.

I'm all for privacy and defending individual rights, but cases like this make a farce out of court orders and the whole jurisdictional process.

[1] https://www.law.cornell.edu/wex/fourth_amendment
This is something that kills tens of thousands of people per year in the US alone- already greatly reduced by technological advances, and still falling. Excuse me if I don't shed a tear for the feelings that might be hurt among human drivers who consistently and measurably overestimate their abilities.
You left out the part where you also want an actual "peer reviewed study". Must be new to HN.
The Awesome Power of Theory – Explorations in the untyped lambda calculus (2014)
How GPS became a human tracking mechanism
>why does lately every Tesla-related post have a token "PR stunt" comment?

Why does every single bit of Tesla "news" make the front page? I see 50 videos a day on Reddit of people miraculously avoiding accidents, never once on HackerNews. This is kind of cool, but I'm going to remain skeptical that it "predicted" the accident. There were other cars that also stopped in time. Did we expect it to bulldoze into the back of the cars?

I mean, do people actually believe that Tesla has developed self-driving AI that is actually "predicting" accidents? Get enough cars on the road using the technology and we'll see amazing things that are hard to explain.
Simple Steps to the Perfect Project Kickoff
You can tell when someone's home or not from utility usage.
A modern programming language without any whatsoever support for generics from my point of view is just extremely bad, for someone else can very well be proof of anti-intellectualism.
Previously: https://news.ycombinator.com/item?id=12778824
Ask HN: What framework/stack should I learn to get myself a job?
I gave it a go at founding a startup. Short story - sales cycle was too long and I've run out of cash even with customers coming in. I need to find work to pay the bills now. I'm a developer at heart - I can code the MEAN stack all day long. But looking at jobs out there I see more need for React, GO etc. I'm going to do a project in another language to hone my skills, I've got java, c#, c++, javascript, python experience. What stack should I pick up to have the best shot at getting a dev gig now? ( I was in IT Management/PM for a while so I only kept up my MEAN stack skills on the side while I was developing my startup application so this is why I am asking about it now. I would prefer to get back into development.
Weight sensors cost next to nothing. Plus it being hidden in the seat gets rid of the taboo of people getting weighted.
Ask HN: Advice for creating tech startup that can be sold/acquired
Hi, I'm a software developer once ran a failed startup in college. I currently work full-time but have always wanted to start a startup. I have this idea which I'm building the prototype been at it for a year now (quit, lost motivation, but the idea kept coming back to me so now I decided to build out once and for all). It's an idea that works better with bigger companies like Facebook/Google-esque and my intent is to sell it.

For those that have sold startups before I would very much appreciate any advice I can get.

Thanks in advance.
Vilnius has a small Energy and Technology Museum[0] located in the building of the first power plant (opened in 1903) in country. Probably not worth going to Vilnius just for it, but if you happened to be nearby, it's worth its time.

0. https://www.tripadvisor.com/Attraction_Review-g274951-d18864...
Afaik you can also tell the store to hide EA games.
This is for electricity generation, so residential coal is excluded.
Searchkick queries analyzed
An article with bunch of barely coherent notes about software "engineering" not being engineering... Ok, welcome to the industry.
One of the main causes of accidents are vehicles left on the road and other vehicles impacting them or the people as they take for granted that traffic will be fluid and are distracted or whatever.

You should never leave your children and family on a car on the left lane while you leave, never.

I have a neighbor that is paraplegic because of that. His entire family went to the hospital after a vehicle crashed from behind after a minor accident.

Your first priority is putting your car and family on a safe place. Proper triage priority number one is avoid another accident, by removing obstacles and signaling other cars.
For math try
https://betterexplained.com
I haven't stood at a check-in counter in years...
I'm Polish (currently living in Spain). And yes, a lot of people in rural and small cities areas are using coal to heat houses, as well as wood and sometimes garbage which is the worst. What's more, our main electricity source is coal power plants - because of traditionally strong miners' lobby from Silesia area. Actually, no government had enough courage to make a shift into more cleaner power sources.
Certification of weight sensors for general aviation OTOH ...
Claiming it is a responsible disclosure, because of a post at a forum somewhere does not make it responsible.

Edit: I should probably clarify that it is the 1 day timeline over Christmas that I think is irresponsible.
I see a lot of NPE in IntelliJ IDEA, especially EAPs. It's not browser's plugin.
Hydro power inside a mountain in Scotland: http://www.visitcruachan.co.uk/
Seven reasons why Silicon Valley likes Trump
Usually a warrant will only last a short time and the issuer must name a specific thing they are looking for. In this case it's clear that they only need to provide the data for a specific person.

I also believe that Amazon could provide that data alone. So what makes them refuse?
Ditto. Except I think I have two.
Must for Hikers, Trekkers and GlobeTrotters
its a fine line. There is a great fear of false positives from such inference.
Let us imagine for a second that there is a legitimate reason for that water use that he doesn't wish to disclose because it would incriminate him for something else?

Hypothetically speaking if you were doing some grey-hat, "illegal" probing/hack at the time of a murder the police question you about; admitting to your actual activity could result in more time behind bars than a murder. If this activity was somehow vaguely recorded and correlated with an activity of the murderer then you have a serious problem.