skysight-inc/HackerNews huggingface dataset:
sometimes these structures act as heat sinks to ensure even heat dissipation throughout the part and improve conformity
hang in there friend.
The creation of valuable knowledge, experience, and technology is a valid argument. Mentioning that engineers' salaries get taxed is a bad argument, since that's just a smaller portion of what was already tax revenue.
What is Justinian's argument? He doesn't actually mention the "commonwealth" at all. He merely appeals to the "law of nature".

In any case, if there is some principle underlying Justinian's edict, what is it? How did he determine that the sea is part of the "commonwealth", but that a mountain or someone's house is not? This is hardly explained in the given quote.
The judge had to twist the law to get the decision everyone wanted. She said closing the gate was "development" and therefore needed a permit which he didn't get. That's already quite a stretch, it would have been capricious to tack on a fine.
Apples to oranges if you're comparing bare-metal to xen/ec2.

If you're just worried about being able to manage your own window you won't have access to a embargoed xen issue before it becomes public. It's the first time they forced a 2 day scheduled event on me, I'll error on the side of caution and take my reboot.
A $22 million fine would have been a great lesson.
The data they wanted was the MAC addresses of the routers. With that information, then can then improve their maps geolocation by seeing what wifi networks are in range.

The problem is they grabbed more than just MAC addresses.
My version of ash seems unaffected. Do you have more info?

# env x='() { :;}; echo vulnerable' /bin/sh -c "echo this is a test"
this is a test
# env x='() { :;}; echo vulnerable' /bin/ash -c "echo this is a test"
this is a test
I doubt the article is being precise, first, and might use one for the other. That said: ignition means the electrical system that fires the spark plugs. Starter is the motor that starts the mechanical bits moving, so the ignition can do its job and keep the mechanical bits moving. Any car with the traditional keyed start even shows these circuits as separate positions on the cylinder. Most motorcycles have separate controls for those two circuits: a toggle switch for ignition, and a momentary switch for starter--you must set ignition to "on" before the starter will do any good.

Disable the ignition system, and nothing's going anywhere. Disable the starter motor, and it's just not going to start--unless you push it down a hill or, say, short the relay with a screwdriver (as mentioned in the article).

While technically you could put a remote controlled relay anywhere (the dome light won't light up if you're late on payments--take that!) it sounds from the description of the device ("starter interrupt") and other clues that it's the starter system that's being killed. And that makes a lot of sense: that way if the device fails it at least won't bother you while you're in motion.
If "a very long historical precedent" were sufficient to justify a policy, it would also justify the policies you wish to discard.
Wow. This is a really douchey thing to do... I mean even if people DID use the beach, how many people are going to be on it??? It's not going to be an eyesore.

I'm firmly in the camp that lakes, streams, coastlines, can't be property.

http://en.wikipedia.org/wiki/Freedom_to_roam

"The freedom to roam, or everyman's right is the general public's right to access certain public or privately owned land for recreation and exercise. The right is sometimes called the right of public access to the wilderness or the right to roam."
So Bill Shorten (the leader of the opposition) is my member of parliament. I've written him to ask that he helps to slow the process down and read the recommendations of the joint committee. Not sure what more I can do here :/
We have a lot of non-HVM scheduled for reboot.

One of them was our VPN server, scheduled for reboot during our tech demo.
Funny how you conflate "rich" with "smart and generally good"
Collection de Dévastée – Fashion Week de Paris: sombre et gaie à la fois
You're referring to :

Mallach agreed with Surfrider that closing the gate amounted to “a change
in intensity of use,” That change, she said, could be considered development
under the law. As a result, she said in her ruling, Khosla must apply
for a coastal development permit if he wants to close the gate or make other
changes to the property.

Removing public access means he intends to use the land privately. While what constitutes "use" is debatable, these are moot points considering the laws passed in 1972 and 1976:

prohibit homes or developments from blocking access to beaches. They essentially
make the entire coast, including all beach property below the mean high tide line,
public property.
The source of the data also contains many interesting comparisons and conclusions, particularly with respect to time.

http://www.nsf.gov/statistics/seind14/index.cfm/chapter-5/c5...
We're using atomic commits since 2009 when we moved to git. However: we very often merge features with --no-ff to make it way easier to back them out at once if needed.

That way you get the best of both worlds (very easy archeology and very easy backing out of features)
Show HN: Part time coding school in Berkeley
Hi hacker news, I recently launched this learn to code program, our first batch will start in a couple of weeks.

Our idea is that because many people can't just take a lot of their time off and money to learn to code a part time more casual program was needed; also a lot of people want to learn a few specific things to help in their work but don't necessarily want to become full time programmers.

well, take a look :) ideas, questions and tips are welcome.

http://hackership.co/

we still have a couple of spots for next batch if someone happens to be interested around here
this might be the xen vulnerability that is as yet undisclosed to the public.
I know that the web cams on new Macbook Pros do not work on linux, and there has been little to no progress on making them work.
This is probably just a local problem in what I will euphemistically describe as my "very highly customized" shell, but... it might be useful to use "/usr/bin/env instad of just plain "env" in that one-liner test for the vulnerability.

(or maybe the "command" builtin instead? It seems to also 'properly' show the vulnerability as well, but I'm not if that would affect the test in some cases)
I think that unless the 'problem' that encryption is meant to solve is the existence of governments themselves, then it doesn't make sense to write off engagement with the political process altogether.. "encrypt all the things" only works if you somehow have the power and influence to make all the companies do all the work to encrypt all the things (against their own gain in some cases.) Without some kind of political pressure, or even better the force of law, or at the very least a bully pulpit to convince people that it's a good idea, I wonder if it's necessarily tenable. You can always do both anyway.
I'm a fan of linux and have never owned a Mac, but honestly if I had one I'd just stick with OSX. It's going to be a much better experience.
Was directed there from his Twitter feed where he seems to offer it as a response.

"There's been a story going around that it's been proven that black holes don't exist.

Yes, they do. <link>"

https://twitter.com/StartsWithABang/status/51488524891693875...

Edit: Re-reading my original comment I see my choice of words was poor.
MySQL Benchmarking on m3.xlarge and m3.2xlarge Instances
> no longer getting a fibre to the home national broadband network because that was too expensive

According to various leaked reports:

http://www.themercury.com.au/nbn-co-tears-faster-cheaper-ftt...

the all-fibre option might actually be cheaper than the proposed Multi-Technology-Mix that the government are building but they're simply too dogmatic to listen to their own internal reporting.

Insert your preferred conspiracy here. There are literally dozens of corruption theories that are plausible.
You use instance stores for persistent data. That instance disappears. Where are you restoring that data from? Either your backups are stale, or you were replicating the data or its underlying filesystem, which means you're still reliant on the network.
Google one liner to find bash exploitable code “sh -c export .*?= ”
In most of the world, driving a car is an expensive luxury. Even here in Canada insurance for a young male is $4500 a year and gas costs $4.50 a gallon. Regular middle class students and teenagers do not drive, they walk or take the bus, often in blizzards or freezing cold temperatures. Getting a car is something you do when you've graduated and started a full time job.

Having to actually pay your monthly payment so that you can travel in comfort in a personal automobile is really, really far from oppressive.
A Computer Scientist Tells Mathematicians How to Write Proofs
Do I correctly understand that there were `expr 7169 - 6271` 898 potential (or is that confirmed?) vulnerabilities tracked in the few hours between those two mailing list messages?

If true, I never really comprehended the volume of vulnerabilities flying by every day.
That minuscule amount of population growth makes me think the existing population just had a few children.
You and Thomas can ignore everything I say about security. J. Random Rails Developer, on the other hand, probably gets useful signal if I start panicking. (Am I panicking? YES.)
Shellshock is also "reverse-shell-able". This Python script relies on /dev/tcp which is not available by default on some distros. (Source: @ortegaalfredo) But you could probably rework it to use netcat.

http://pastebin.com/raw.php?i=166f8Rjx
The funniest part is seeing the headlines: "TERRORIST SHOOTING"

No, the "terrorist" was shot, he didn't shoot anyone.

I'm more and more disgusted with my country lately.
I suspect that many folks who "don't run bash" actually do use bash quite a bit, e.g. in initscripts and various software packages.
Too bad Microsoft Visual Studio refuses to get with the times and update their antiquated compiler from C89. They are now 2 standards and 25 years behind.
How to Increase Traffic to Your Website – List of 21 Dam Proven Ways
Or new maids.
Clock-SI: Achieving Snapshot Isolation in distributed databases [pdf]
I guess if you already put your machines in different availability zones, they will not reboot in the same maintenance window.

Actually AWS scheduled maintenance is the best you can get in the market already, because most of the time they allow you to reboot yourself in order to land an updated host (This time is different might be due to some critical security issues). Other providers like Azure / Google, you have no choice.
Or "I don't run UNIXes that default to bash, or hide it under /bin/sh, etc."

Unfortunately, bash shows up in surprising places, including default Solaris installs nowadays.

On OSX and Solaris, I've chmod'ed 0000 /bin/bash with no apparent ill effect so far. I'll put more effort into establishing its acceptability as a solution tomorrow.

BSDs won't have bash unless someone has gone out of their way to install it, which can be undone straightforwardly.

But it could be a long night for our Linux brethren and sistren.

Good luck, and remember to stay hydrated. :)

EDIT: obviously, don't chmod 0000 your login shell! Fix that first. Make sure whatever you switch to isn't a symbolic or hard link to bash.
https://news.ycombinator.com/item?id=8364994
I wonder how many merchants are able to accept Mastercard in Nigeria. More likely people are using them simply to deposit or withdraw cash. Remember, before square and stripe it was an expensive bureaucratic nightmare to accept payment cards even in Canada or the US.
Just empty rhetoric.
Actually, no. You can sleep more easily tonight.

Typically the CVE is assigned when the vulnerability is reported to the maintainer after it's initially discovered, before it's been made public. So really the difference represents how many other vulnerabilities there's been between the first time this was discovered (which could be months, could be weeks, I didn't check) until now.

Since 7169 was only discovered today, it immediately got assigned a new CVE while still public.

Also, the last number in the ID represents the total number of vulnerabilities tracked by CVEs in the year mentioned in th middle. So, there have been 7169 vulnerabilites in all sorts of different software this year.
Here is all you need to know about government and opposition in "times like these" - a satirical piece from The Shovel:

Labor Party To Close Down Until After Iraq War: http://www.theshovel.com.au/2014/09/23/labor-party-to-close-...

On hearing the news, Prime Minister Tony Abbott said, “Until this war concludes, we’ll just have two parties saying the same thing, so it makes sense to put one away for now”.

Labor leader Bill Shorten later released a statement saying “Until this war concludes, we’ll just have two parties saying the same thing, so it makes sense to put one away for now”.
Can't wait to head there with a stereo now.
Patched all the CentOS machines hours ago, whew.

It's on yum now, just yum update
Google Compute Engine offers live migration around maintenance events: https://cloud.google.com/compute/docs/instances#onhostmainte...

(note: I work on GCE, more or less)
How to Invest Like a Shark on Shark Tank
Your experience is probably anecdotal. I have been using Surface Pro 3 and if that is not cool I am not sure what else could be.
Someone is going to be going through busybox soon, and then there (potentially) will be a whole bunch more exploitable boxes that don't have a generally have a regular update cycle.
There are many pros and cons to EC2 vs managed hosting vs operating it yourself.

I meant that in this particular case, you are likely to have fewer headaches from this issue in your own datacenter because:

1. You probably don't run Xen in the first place.

2. If you do, this vulnerability may not be critical to you. I'm guessing that it is exploitable via the other instances on a host. If you don't share hardware with other companies, then a co-tenancy exploit may not be a huge deal.

3. And if the vulnerability is critical to you, you may be able to better schedule the maintenance for your own particular business needs. Fix half your hosts, fail over, fix the other half; schedule it during your particular low traffic period.

The scope of the issue is also smaller, you just have to solve the problem for your use cases rather than the massive undertaking this is for Amazon.

I don't think this one incident means EC2 is bad and real hardware is good, forever and ever. There are tradeoffs to everything.
Well, zsh isn't much better than Bash. Fish beats both, but the web-based stuff annoys me. Given Windows has the super-powerful and elegant PowerShell, I think a new shell language is definitely needed.
Not to call out someperson, but I would love to see him/her respond to your last two photos.
Great idea. Setup IFTTT to do the same to a Slack channel: https://ifttt.com/recipes/206224-post-nvd-vulnerability-noti...
This is a photopolymer printer - while the reaction is mildly exothermic, the amount of heat produced is negligible.
I was already aware of the pg quote when I made my previous post. I stand by my assertion. FWIW, I have the same opinion of upvotes expressed merely to signal agreement.
It seemed to be implied, since much/most chronic back and muscular pain either comes from or is exacerbated by inflammation affecting the spinal cord.
Internet Braces for Crazy Shellshock Worm – Wired
These instance types are not affected:

T1, T2, M2, R3, and HS1 instance types are not affected.

http://www.rightscale.com/blog/rightscale-news/aws-reboot-su...
Interesting. How would a line compile on its own if it's, say, "n += 2;" without providing the n?
Yeah, that's the prefix I was looking for.
Do these consumer protection laws apply to security updates or cloud/service-dependent features?
It can, although that hasn't been litigated yet - that's the class action part the article refers to. A lawsuit like that often starts with a smallish number of plaintiffs whose injuries (in the sense of being negatively affected by someone else) are similar enough for a case to be made that they're representative of a larger group, whereas if there was only one plaintiff it would be impossible to decide whether a pattern of behavior existed.

Lawyers love class action suits because while they may only generate a small payout for each plaintiff the law firm running the suit may collect 30% of the payout in return for administering the settlement (writing to all potential plaintiffs, advising them of their rights under the settlement, disbursing payments and so forth). That's a lot of administrative work but for a large settlement it can still bevery lucrative. So much so that in very large lawsuits there is sometimes litigation between competing firms about which is best positioned to represent the plaintiffs, before the main matter is litigated. ISTR that happened with the tobacco litigation by the states in the 1990s, which ultimately involved something like a $20 billion payout.
Could this be the most discriminatory Job Description ever?
We Are Less Irrational Than We Think
debian is switching to systemd. the only big holdout i've heard of besides slackware is gentoo.
Is this really true? Last I saw, they were adding some the of C99 features (because the C++11/14 spec actually required some of it), but not going all the way. And it was unclear if they were only focusing on the language or the standard library or both.

(I'm willing to skip C99 for C11 because am sick of dancing around Visual Studio for compatibility. Clang for Visual Studio is looking really appealing to me.)

Why they have the only world's C++ compiler that can't handle C baffles me. What did they screw up so badly in their implementation that every other C/C++ compiler got right?
Well, you could remove bash entirely (say, by replacing it with a link to dash). Doing this will likely break things, however, up to and including rendering the machine unbootable depending on which distribution it is and how the init scripts are written.

You could replace bash with e.g. a perl script that strips parenthesis from your environment variables, and then invokes a differently named copy of bash. That might not break anything. Then again, it might.
Wow, that's one big paragraph. :)

It's going to depend heavily on the companies you're applying to.

Do you have a Github account? That might help. Also if you've got a really healthy Stack Overflow account or similar, it might help change the course of your interview.

There was a thread the other day about this -- https://news.ycombinator.com/item?id=8200562 -- where the OP is trying to avoid onsite interviews, so clearly they're out there.

On another level: you should know that there's no universal consensus on how to hire developers. If you keep talking to different companies, you'll find someone that's a good fit for you in your current situation.

Keep at it, and don't get frustrated.
It was a sarcastic remark. My original comment's gist was that all of the naysayers, at least with respect to the amount of funding required, are basing their analysis on a faulty assumption. So far, we've seen a very narrow niche of people, with very specific interests, fund successful kickstarters on the order of $1,000,000 to $10,000,000. In _contrast_, the demographic of people that would likely be interested in funding cancer research is potentially 1,000 to 10,000 times larger than the 18-35 year old, white American male STEM worker with disposable income and a poor understanding of the realities of electronics manufacturing demographic.

Thus, $1,000,000,000 is not unreasonable at all.
Huh, I literally just checked all the shells on my android device (with code that worked on my laptop earlier), and it didn't seem vulnerable. Are you talking about a different vulnerability?
Ease of exploitation and ease of discovery have basically nothing to do with each other.

Relatedly, "many eyes makes all bugs shallow" is, and always has been, totally horsepuckey. (And despite it being horsepuckey, and horsepuckey which is trivially exploitable in that if you believe it you'll produce software which can get owned by people who are better at e.g. counting to four than you are, people still believe it to this day.)
NOVA – Rise of the Hackers
What a bizarre process. So if these 22 people can't find their MAC in the .pcap then it's case closed? What if they weren't home at the time, and it's just beacons? So only if they happened to be streaming a video from Netflix at the time, causing enough continuous traffic load so that some actual L3 packets pop up in the scan, only then do we get to squeeze some billions from Larry and Sergey?

Don't get me wrong, I really like the idea of sending a strong signal to companies that driving a van up to my house and pcap'ing my packets is not acceptable. But I do hope it's proportionate. $1 per byte sounds about right, so 200GB = $200B. Don't worry, we can let them pay over 100 years. Oh wait, there's already a name for that. Taxes.

At least this will set a great precedent for suing the NSA next, right?
Art project: Train rats to trade markets
Hm.

On one hand, this is pretty specific and not "run into the woods" dangerous.

On the other hand, it's also not that unrealistic.

Also, I am kind of afraid there will be more stuff lurking in there.
Tesla Quietly Adds Radar, Key Hardware for Adaptive Cruise and Collision Avoidance
I agree with all the other posters, and believe performance and form factor have reached a point that makes frequent upgrades less common. However, I'll add one more point into the mix...

Modern computer specifications are confusing. Back in the day it was extremely linear. Oh, your computer is 233 MHz, this new one is 300 MHz, or 450 MHz, or 1 GHz. It was like owning a Supersoaker 2000, and wanting the newly released 3000.

Now, I have no idea what I even own. As someone else said, it's a dual-core something or other. There's no upgrade path, or direction for consumers to follow. If you walk into a store, it's quite confusing, and it's difficult to make sense of all the recent hardware, and I think it leaves people not knowing what they want to buy, or what's even considered an upgrade.
Can building an app help clean India?
"all the events of the last week seem so orchestrated that it is hard not to be cynical"

Uh... make that the last 51 years. If you only just noticed, you're not paying attention. And I only say 51 years from picking an arbitrary point (JFK assassination) for when the deep state's evil ways became really obvious.

"If the people were to ever find out what we have done, we would be chased down the streets and lynched."
-- George Bush, cited in the June, 1992 Sarah McClendon Newsletter

"We'll know our disinformation program is complete when everything the American public believes is false."
-- William Casey, Director of Central Intelligence. An observation by the late Director at his first staff meeting in 1981. This observation reveals the mentality of cynicism which infests the US Federal control structures, and the reality that these structures regard the American people with total contempt.
I don't doubt that ec2 instances probably have good uptime on average. But instances can mysteriously disappear, that is a fact, and if you are on AWS you should plan for it. They give you all the tools you need for such planning.
CVE-2014-6271 was posted on the AWS Security Bulletin earlier today:

http://aws.amazon.com/security/security-bulletins/CVE_2014_6...

My guess is that they cannot rely on all users to perform these updates.
Export Administration Regulations (EAR). While the International Traffic in Arms Regulations (ITAR) contains the U.S. Munitions List, EAR contains a Commerce Control List, which includes dual-use technologies. Both require registration with the U.S. Department of State's Directorate of Defense Trade Controls.