skysight-inc/HackerNews huggingface dataset:
I really like the idea. It seemed an odd recipe to start with though. "Ask the butcher to take out the backbone if you’re nervous about doing that yourself." No it's not hard; it would take me a minute or two with my poultry shears. The NYT has a great back-catalog of recipes but I thought this intro did a poor job of persuading non-cooks that this is almost as easy as getting takeout. (And, truth be told, a lot of cooking will take more time than takeout when you factor in planning, shopping, and cleaning--even if you keep things relatively simple.)
I have a very conservative rule: No updates for 60 to 120 days. This applies to PC, Mac, phones, tablets, routers, embedded devices, appliances, firmware in general. This has served me well for quite some time. I fully appreciate the time and effort put forth by those who have the time to deal wih the range of inevitable "oh shit's" that almost invariably come with every software release. Not something I have time for or interest in any more.

The only times I have violated this rule was when somthing was already so broken that a new version would still be considered an improvement even with warts.

Just one of those more conservative engineers.
When cooking for one, I used to cook a couple nights/week the staples, and then reheat them. For example, I'd make a cous-cous salad thing on Sunday night, then pair it with a fresh cooked fish or chicken on Monday/Tuesday, maybe swap out the veggie (usually something steamed). That way, I only cooked the really quick/easy things on a given night. On wed, I'd cook a fancy rice dish that would end up making it into lunch for Thursday/Friday.

It's all about a little planning and getting into the habit.

I found that while cooking, I could watch some tv shows, or listen to some pod casts, etc...
And 1000 hours capacitors? ;)
Currently not all state sponsored research guarantees shared results, but the NIH does (after one year). But: Not all results are guaranteed to be public, just the published work. If you really wanted to know, for state-sponsored research in the US, you could probably FOIA results, all the way down to the notebooks.
The World's VolunTour Challenge
Realistically nobody would know if you're using ethnicity as the basis of your decision right?
VUPEN is an example of how exploits are monetized. "Trusted organizations" can subscribe to their vulnerability service for a large chunk of money.
When cooking omelettes, I usually add a little water to the pan and steam the eggs after flipping and adding the veggies and cheese. The water would then moisten the eggs, making it hard to over-cook them.
Perfect software vs. economic reality
It's not the minimal interaction that's the draw. It's the lack of waiting for the waiter to come to you.
This vulnerability is the kind of reason I would have a stripped-down OpenSSH for public users, if I were them. Hard-code to do what they need, don't use configuration files, remove any features not needed. For example, to print the "You've successfully authenticated, but GitHub does not provide shell access." a user gets trying to ssh to github.com, don't invoke anything, print it directly from the SSH server.
You need good set of unit tests if you want to survive managing open-source project.
Let me inturrupt this fascinating discussion for an important PSA:

All of you who don't produce 0 day: You don't get to have a say. Your opinion doesn't matter and you don't get a seat at the table, not even as an observer.

And now back to telling other people what to do with their work product...
Finally, a fire hydrant for the 21st century
Here's a better link: http://www.vizio.com/tvs/pseries.html
These kind of long-term contracts pay the 'market rate'. Back around 2000 the market rate was about 30-40GBP/hr or about 300GBP/day, or higher in the city. Although I haven't done any contracting in the UK for quite a while, I do occasionally look at the contracts out there and the rates seem to be about the same these days. Just go to jobserve.com and you'll see.

Right now I live in Canada and charge US$100/hr for short term contracts (up to a few days), although normally I quote fixed-price and it works out roughly $100/hr or a bit higher. This is mostly for customizing my own product to a customer's requirements.
Really appreciate that overview. It does seem that even if the author's concerns are true, we still have good alternatives available.
So please enlighten me what are the applicable laws and how they can put me in jail for cancelling an offer or choosing one candidate and not the other.
in the past, I worked at a place which changed it name. the domain was held by an email marketing company already, but unused. We ended up leasing the domain from the owner for 5 years, at $200/yr after rejecting their $3K offer a few times.

It depends on who you're dealing with, basically. I doubt JNOM will be so flexible with you, they have a not-so-positive track record.
A call for debate on robot policy
Ask HN: Feedback on our landing page?
Hey HN,
Please help us to improve our landing page.
Link: https://staply.co
What do you think we can improve? Is it clear what we do?
Being able to see what started what, cgroups, which binary produced what output, automatic process restarting is what I like for using on a server. I also like the nice timers output and that I don't need an additional cron or network configuration utility.
Excellent insight!
Yes - the shell currently running is probably the user's login shell, and the shell in e.g. /usr/local/bin/bash was probably installed by Homebrew or MacPorts.
I definitely don't want to hide problems with my init systems behind a supervisor that has its own host of problems. The union of those two products does not make a more stable, easy-to-reason-about system.

Granted I could choose something better than monit, but then why add another layer to hide brokenness, when we have the capability of doing it correctly in the first place.
No, that is not what tptacek is saying.

Unauthenticated GET requests were just an example of something that can invoke this behavior. If you have any network-enabled service that's capable of spawning a shell, you can have attack vectors open.

Possible vectors include things like DHCP clients, SSH, web servers, etc. Lots of things open shells for reasons you wouldn't intuitively expect. It's very likely that there are many creative vectors for exploitation that will be discovered in the coming hours.
I suspect (but don't have confirmation) that this includes Microsoft's SaaS products like Exchange Online/O365, which are very successful.

I get the impression that Azure specifically as PaaS/IaaS, OTOH, is quite a bit less so. At least compared to AWS.
Not really. I tried send someone a large sum recently and my options were 3rd party payment sites (Paypal, Google Wallet etc), cash, or check. Direct transfers (ACH) do exist, but it's difficult to set up and so is usually between accounts owned by one person (bank<->bank, bank<->Paypal). Plus it takes 3-5 business days. I ended handing over a cashier's check.
Tech Firms and Lobbyists: Now Intertwined, but Not Eager to Reveal It
I agree. In the next few months, we'll probably be finding out about some of the cases where neither existing sanitization nor the half-fix for this problem was sufficient to prevent exploits in this family. :(
I guess the lesson here is not to discuss and give helpful links for companies in the same space as a YC company. Oh well.
One thing I would like is the ability to pay at the table. Moving from the UK where the waitstaff brought the card reader to the table for you (to pay with chip-and-pin) to the US where waitstaff I had met for the first time disappeared with my credit card for several minutes was unnerving at first.
My wife's fledgling startup does something like this -- she makes meal kits with all dry ingredients and instructions that are designed to encourage experimentation with recipes. Her initial set is Indian cuisine, but she is working on other cuisines as well http://recipesack.com

(I know I risk being down-voted, but this seems relevant.)
GNU/Linux requires vi, perl, python... also as dependencies, but they're separate programs, the thing with systemd is that nothing can be separated, you use ALL components at the same time or change OS. Bear in mind that systemd is being integrated with the Linux kernel, so you have to update the kernel in sync with systemd.
Is fastCGI the same thing as CGI, for this case, though?
I think they were under a lot of pressure on the HealthKit front. That was one of their big flagship iOS 8 features, they got all these app developers to integrate it, then iOS 8 shipped and they had a showstopper bug and wouldn't release any apps using HealthKit.
There's some poetic justice to feeling deceived by a book with that title.
We're selling out so quickly! More kits and a new menu will be live in 5 minutes.
Will Apple backport these dozens of security fixes for iOS7 exploits, http://support.apple.com/kb/HT6441?
MFSA 2014-73: RSA Signature Forgery in NSS
Photos of the Day: Giant Terror Ape Weighs 1.1 Tons, Stands 6 M Tall
Your friends and family all have iPhone 6s and updated a point release in the first hour?
As our probably ten year old Panny plasma begins to look more and more outdated, I'm looking at options. I don't know that 4K won't turn out to be the next 3D TV, but this looks like a potential option. If it turns out that I should have stuck with the few remaining plasma vendors, I can always turn it into a computer monitor.

Peripherally, I hate to be the guy to complain about the web layout (especially when the complaint is "it renders funny on WinPhone 6.x"), but I'm on a 13" MacBook Pro using regular ol' Safari, and that page is (for me) unreadable. I mean, I could read it, but I don't want to. Too much scrolling for the next tiny nugget of information, scrunched pictures, just plain work to try and get to the bottom.
Is this also dangerous to common FastCGI-Wrappers? E.g. this is used by Virtualmin:

#!/bin/bash
PHPRC=$PWD/../etc/php5
export PHPRC
umask 022
export PHP_FCGI_CHILDREN
PHP_FCGI_MAX_REQUESTS=99999
export PHP_FCGI_MAX_REQUESTS
SCRIPT_FILENAME=$PATH_TRANSLATED
export SCRIPT_FILENAME
exec /usr/bin/php5-cgi

At least SCRIPT_FILENAME is user input isn't it? I'm really not sure but like to have some clarity. It should not work because it's likely impossible to have () at the beginning of the SCRIPT_FILENAME? but can someone give some hints? It's common to have bash/sh wrapper script: https://httpd.apache.org/mod_fcgid/mod/mod_fcgid.html#exampl...
What mystifies me in these systemd discussions is that people constantly seem to attack a caricature of systemd that has little in common with its actual implementation. Take for instance the perpetual "monolithic architecture" argument. What monolithic architecture? Systemd is in fact highly modular. For instance, PID 1 concerns itself with starting and monitoring units, and not much more. Other functions are implemented in other programs, such as journald, udevd, logind and so on. Of course, some of the components sometimes need to talk to each other, but generally via well-defined (D-Bus) interfaces - e.g., pam_systemd registers user sessions with logind via a D-Bus call, and loginctl asks logind about current user sessions, also via a D-Bus call. What's wrong about that architecture?

Now, systemd the package is getting pretty bloated. For instance, there is no reason why stuff like networkd couldn't be in a separate package that depends on systemd. But that's not really an architectural issue, and not much of a problem for users. (For instance, you can disable networkd just fine.)
Which is why I said maybe.

I haven't dove down into fraud statutes too much but I'm going to go out on a limb and assume that when someone takes payment they have a legal obligation to verify the credit card holder actually authorized the payment they collect. At the very least Visa,etc,'s lawyers will care. There are also a whole bunch of other statutes that can apply too.
Deploying a WordPress Theme with Git
Your options depend on where you live.

I signed up for Covered California, which is subsidized insurance. My husband (non-US citizen, but perm resident) is part of my plan. This depends on what state you live in. Some states rejected the federal healthcare funds.

As for employer contributions, it depends on the employer -- I offer my employees insurance. If they choose NOT to take it, I don't give them a pay bump -- the cost per employee is negligible, and insurance is not offered in lieu of higher pay here. The purpose of me buying insurance for employees is mostly to ensure they're healthy while working for us, and getting care so as not to sicken others while on the job.
Cooks Illustrated has online cooking lessons that have a strong technique focus. I haven't subscribed but I've seen looks good. I think they came out with a book with a similar focus as well.
I successfully upgraded bash on my droplets a couple minutes ago.
http://hints.macworld.com/article.php?story=2001110223300292
He wasn't ever a white hat, grey at best.
Does heroku.com run on heroku? Obviously!
Flow: my addiction behind programming
So is this place closed and the author is just reminiscing about the building? I feel like an idiot that I can seem to tell where reality starts and the fiction ends.
"That makes you the minority view."

So what? I was giving my opinion... You do realize the majority view has been often wrong though out history?

"Status's in IM apps were hugely popular, that you are unable to see the value to others indicates a lacking of either imagination or empathy on your part."

I didn't say it may not have value for others but once again it has no value for me. The last thing I want to do is update my status in my IM/chat program every time I logon.

Your scenarios are totally irrelevant... In either case why does it matter if the receiver is driving? They could send a text or leave a VM if don't pick up (which would then assume maybe driving or just busy). What do these scenarios have to do with my point the sender shouldn't expect an instant reply to every communication?
I often tap the top status bar in iOS to scroll to the top of the page. Not sure about other users, but that shouldn't be something a developer is 'breaking' to provide a truly fixed header bar. Love the idea of a truly fixed header bar though, so I'd love to see a different solution to this problem.
Oh... to be Canadian...
I still get redirected to http://www.vizio.com/en-ca/.
Fuck free Kevin*

*consensually.
$ apt-cache show debian-goodies
<SNIP>
checkrestart - Help to find and restart processes which are using old
versions of upgraded files (such as libraries)
The Trouble with Certificate Transparency
Only the build/patchset version is incremented in these packages (the -2ubuntu2.2). You can see the package version with dpkg -s bash | grep Version.
Thank you for this. I watched the video last night but was left a little out in the dark without any captions. Transcripts like this are a godsend for those of us with a hearing impairment!
Very interesting. It might be an idea to do some post mortems on the failed drives. [1]

Why not take apart some failed drives and see what you can find out as to why they failed vs. ones that did not. Perhaps info that might be of interest to the manufacturer but in any case would make an good blog post. Or maybe you can cannibalize and use again.

[1] I did an "air crash investigation" on a RC Chopper that had crashed. I found out that a servo failed because a part in it was plastic (a gear) (as opposed to, I think, brass). Consequently the jerky move that I made was enough to cause the plastic gear to loose a tooth and then I lost control.
So won't high frequency traders discover your limits (by posting and canceling orders rapidly) and drive you into them, costing you money? I thought this was the simplest kind of fish for them to catch.
When Snowden gets the "Alternative Nobel Prize", I think it is really relevant for the IT sector. I find it sad, that three posts just vanished undiscovered by anybody.

I find such a thing much more relevant, as when some president gets the peace nobel prize for things, he intended to do (and never did).
Using my Kobo eBook reader as an external eInk monitor
The "bait" is the claim that a patent-less drug will be cheaper when it finally comes into use in the clinic than a patented drug (from your indysci campaign: "Releasing without a patent means the drugs will be cheaper and it will be easier to build on the work to make improved drugs or drug combinations. Releasing without a patent means expanded access to drugs in countries that can't afford extensive licensing and export agreements.")

But you and I both know that is not how drug development works. When you bring in a pharmaceutical company to fund the clinical trials (which are hugely risky) they will demand an upside. The upside will come if they (a) make a derivative molecule that they can patent (b) patent a use of the drug for an indication (c) package the molecule in a way that is patentable -- e.g. with an adjuvant.

The crowdsourcing page on Indysci reads as if the drug will eventually be cheap and readily accessible just because you have not applied for patent protection.

Another point: the indysci page misleads people about what drug patents means by comparing it to open-source software. As an academic researcher, you can work on ANY molecule, no matter its patent status, in an academic research setting. That means you can develop new uses for the molecule, make derivatives, etc. What you really mean is that patented drugs cannot be SOLD by anyone other than the manufacturer.
That's a pretty stupid way to look at it. Compare it with salaries in India, not with USD. It's a lot of money (vs a young Software Engineer in India) if you live in a government sponsored apartment, and get other government benefits too.
A16z Podcast: Building Marketplaces with the Power of Community
http://www.ubuntu.com/usn/usn-2362-1/

Ubuntu 14.04 LTS: bash 4.3-7ubuntu1.1

Ubuntu 12.04 LTS: bash 4.2-2ubuntu2.2

Ubuntu 10.04 LTS: bash 4.1-2ubuntu3.1

For releases in-between, you should be able to manually download one of those versions from http://archive.ubuntu.com/ubuntu/pool/main/b/bash/ and install it. I wonder how many vulnerable boxes there are that won't get these updates because Ubuntu stops support after 9 months. There must be tons of boxes running 13.10, it's not even a year old yet.
This device annoys me. I occasionally go to the Applebee's near me, and I've used it once. They usually are either broken or not on (either way, black screen). Anyone here with experience as a waiter with these things? Are they awesome for the waitstaff?
They all have phones that are:

Crashing often now (buggy iOS 8)
Bent (bentghazi)
Broken because of this

I'm sure there are other reasons, but those three are running rounds. Not hard to believe Apple people are unhappy atm.
Ask HN: What are OP and GP?
Great idea -- We're actually making a few starter kits: one of basic cooking equipment and one of spices for our customers. You can either buy or "earn" the kits as you go along with Gobble. It's exciting to see kitchen-averse folks take an interest in basic cooking and help everyone get up and running.
I think the only device that can't update to iOS 8 is the iPhone 4, which is a bit long in the tooth.

I'm guessing Apple isn't going to throw a bone to people who won't update their phones. I doubt they'll help the iPhone 4 users, but that would be nice.
It'll be interesting to see how food delivery plays out over the next few years.

From a quick Crunchbase & YC search, I see Instacart, Sprig, Chefday, Munchery, Plated, PlateJoy, Spoonrocket, Postmates, Goldbely, Doordash, Plate, Zerocater, Delivery. com, Orderup, Tasteio, Zesty, Ezcater, Table Runner, and Gobble.

I think most of these players serve similar geographies, and while they all have their own unique spin (which usually involves speed of delivery, pricing, or ingredients vs. already cooked), that seems like a lot of competition in an industry with tiny margins.
If you were a native Russian, your would look out not for malice but rather for negligence and indifference on part of the authorities. Which is why I, for one, think the right question to ask is: how did it come that a person so evidently in distress could not be located quickly in a place like that? No doubt, Losiny Ostrov is a large park (it is about the same size as Pinnacles State Park in California), but it is surrounded on all sides by urbanized territory and should have excellent mobile coverage. Given that Chervonenkis had a phone on him, couldn't Search and Rescue have the mobile provider determine his location (qv. http://en.wikipedia.org/wiki/Mobile_phone_tracking) with at least the accuracy that would allow for a small ground team to find him?
I confess: I know that OP is original poster.
People don't seem to realize how expensive it is to bring a new pharmaceutical drug to market and why this approach won't work.

A typical drug will cost between $1bn-$2bn and take about a decade of work by the time it hits the shelves.

(http://en.wikipedia.org/wiki/Drug_development has details for those interested)

Crowdfunding at those sort of levels just isn't feasible yet.
Maybe it's because I'm pretty much in the libertarian/anarchist spectrum, but I think that if what he's doing is legal, it's for the best that it's done openly.

The alternative to free markets isn't "no markets" or some flowery hippie ideal world. It's mafia and black/dark markets operating in complete or partial secrecy.
Personally, I like having the NYT equivalent of Epicurious on my iPad. But I don't necessarily disagree with your basic point. The 16K NYT recipe database is somewhat at odds with a KISS philosophy around cooking quick tasty weekday meals.
Using jQuery is a good example of comparing the behavior of HTMLCollection to a jQuery object http://jsfiddle.net/m3xzdg71/.
Yes, because that approach has been shown to be effective in the past, right? Oh, no, never? Never ever? Perhaps you just need to say it more often.
I didn't see anyone compare this success at first attempt with the (partial) failure of Jade Rabbit https://news.ycombinator.com/item?id=7226307 however that seems a more interesting comparison between newcomers to space exploration rather than, say, NASA missions.
Completely agree. I just came back from Istanbul and they use the mobile card readers everywhere. Every bar/restaurant tab was cleared in seconds despite there being 6+ people in our group. This was new to me as an American who had not used them before. I wonder why these aren't being used in the US as they are easier and probably more secure than the current system of signature-matching.
Indeed. As I read this article I found myself thinking of my CoolerMaster case at home.
This displays a profound ignorance of the real situation, which is that the majority of useful early stage research is funded by philanthropy. Not by government, not by companies, but by people making donations. It doesn't come from the existing funding institutions because they almost never fund anything that hasn't already had its prototype and early stage research completed successfully. If you don't have your proof of concept you are not getting funded, and the institutions don't really care about where the starting point of the pipeline actually comes from. Every lab scrapes out funding from the corners of existing grants and petitions patrons to conduct what is arguably their most important work, which is to say the actual work of taking risks and creating new things.

What most people call research grants are nothing of the sort. They are development grants. The research already happened, and it was paid for by bootstrapped philanthropy.
I'm pretty sure he's been in touch - basically food started showing up again out of nowhere.
Looks like the new GTX 970/980 can push 4k at 60hz through these with HDMI 2.0, it's a very exciting combo
Larry Osterman Is Guest Star in Not Invented Here