skysight-inc/HackerNews huggingface dataset:
My first internship was at a company that was (apparently) a pretty big deal in the 80s, and by the time I'd gotten there was relegated to a quarter corner of a small floor in a building. The passion had long since left, the three remaining programmers were just ticking off days, and a sort of miasma of sadness and despair hung in the air. There was a brief hope when we showed up to work on a goofy R&D project, and within a few weeks you could tell the office was happier to have my co-intern and I around, if for no other reason than we were fresh, youthful faces.

I was very happy to move on from that gig, because I saw the future there and it was stagnation.

In Houston you get much the same feeling talking with NASA folks and former personnel...the writing is on the wall, the dream is all but dead, but the poor bastards haven't gotten the memo yet. There was once great hope for the future, once some great idea that using technology we could go out on rocket ships and study the universe and spread and thrive and grow and learn and love and all these wonderful things, and then suddenly we decided to reallocate those funds to frivolous and costly wars. Decided to spend that money instead on bureaucracy and police departments and shitty healthcare and a dozen other things.

By contrast, every technician and engineer I meet here in the energy industry is gleeful and well-paid, if perhaps overworked and overstressed. They get to make things, they get to order big impressive parts built to tolerances NASA would approve of and stick those things in the most inhospitable places you can imagine--if we ever wanted to go to Venus and set up shop, you'd want to hire Baker Hughes or NOV to build the gear.

This, despite the fact that the work they do is inevitably going to hurt the planet and mankind in the long run. It's a hell of a thing.
How does nginx pass data to passenger?

Edit: also note that CUPS is vulnerable according to https://access.redhat.com/articles/1200223

Also dhclient (!)
^ *is some difference. #sigh
“I Am Ivan Fyodorovich and I Hacked Google”
I'd love for recipe sites to have this feature where I can plan a meal for the week at office on a weekday during break time and the groceries required for the meal show up at my doorstep every week. The site can then track the nutrients based on the recipe and integrate with my health tracking apps to ensure that me and my family is getting the right nutrients and exercise... I wish...
The same way they prove any other type of crime. Sometimes people are blatant (e.g. the english hoteliers who refused to rent a room to a same sex couple), or when you put other facts together it becomes obvious (e.g. at 1:00pm the landlord tells someone with a foreign accent that it's unavailable, but at 3:00pm they tell someone with a different accent that it's available), or sometimes an offer is withdrawn when a certain fact becomes known (e.g. everything is going great until the prospective tenant says he has to call his husband)

You do not have "the right" to choose to not rent your property to someone. If you think it's one of your rights, and you're in the property market, you should talk to a lawyer.
How a Second Language Trains Your Brain
His website needs some work
I was fooled into this when his first book was released, "The Art of Deception". I think I read the first three pages and heart sank because it wasn't a book about computer stuff really at all and I started thinking this guy is a fraud. but mostly I was fooled by marketing. (I was 12 at the time). I just remember being very let down by the book and not being a fan of Mitnik for that reason.

The comment section of this post has an underlying anger towards the hi-jacking of the word 'hacker' as it was and is applied to kevin mitnik and thus misunderstood by the public waaaaay too often.
I don't think that's an accurate description. If you got to the store and they told you that, I dunno, you're the millionth customer and your TV is free, I doubt you'd feel like you failed to get rid of the money. Because you weren't trying to get rid of it — you were giving it up as a concession to get something else you want more.
In brief -

There's a very large park in Moscow called Лосиный остров ("Moose Island"), more of a forest really. On Sep 21st he went out for a walk in this park and around midnight called his relatives and told them he got lost. They called the police and the emergency services. Tried calling him back as well, but he didn't answer. On Sep 23rd his body was spotted from a helicopter that was involved in a search and it was ID'd by the relatives.

The rest of the article is fluff.

[0] https://en.wikipedia.org/wiki/Losiny_Ostrov_National_Park
Previous discussion: https://news.ycombinator.com/item?id=8359223
The vulnerability is in bash startup; any already-running shells should be safe.
Not another story about this overrated dude.

Don't get me wrong, im sure hes a nice guy. But he hasn't demonstrated anything useful for 20+ years and it seems he is mainly making a living writing vague non-technical h4ax0r books and giving interviews. Hell, i think he cant even code.
It was also not explained why this person is going to school. Why are they going to school? I would assume that if they were making the choice to put in the work for school they have not completely given up on a better life in which case I would expect them to at least consider making some other better decisions.
Probably not a good idea to link to a hacked site, and not a good idea to click through to one either.
$ x='() { :;}; echo vulnerable' bash -c 'echo test'
vulnerable
test
$ pacman -Syu
...
$ x='() { :;}; echo vulnerable' bash -c 'echo test'
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
test

Benefits of using an OS with a real package manager.
> Your pro-government rant doesn't fit in this case because the government is one of the customers in the zero day market.

(Legitimate) governments generally are the only legitimate users of 0-days. Governments can legitimately and legally hack into your computer; nobody else can. Governments can legitimately and legally shoot you, but generally nobody else can.

One definition of government is that they have a monopoly on violence.

(I say "generally" above because there are exceptions, of course.)
I think the first step is to decide what you're interested in learning and reaching out to a project closely aligned with your goals. It is possible you will be rejected, but still worth making the initial effort to find one that would hold your interest. See the following blog post (and comments) explaining the ideal mindset needed when going into this: http://www.hanselman.com/blog/OpenSourceIsAThanklessJobWeDoI...

The specific group that I had in mind was Python; they have implemented a mentorship program at http://pythonmentors.com -- I'd recommend starting there and asking for pointers to other Python projects. With resources like http://learnpythonthehardway.org/ available you should be able to hit the ground running.

Apache maintains a similar process here: https://community.apache.org/mentoringprogramme.html and Debian does too for their package maintainers: https://www.debian.org/doc/manuals/developers-reference/new-...

Google and Facebook both run programs offering opportunity primarily to university students (Summer of Code and Open Academy). You can find a recent study of the Facebook approach here: http://www.sserg.org/the-role-of-mentoring-and-project-chara...

There is also some older info aggregating projects that were looking for help: http://teachingopensource.org/index.php/FOSS_Mentor_Projects

The Outreach Program for Women might not be applicable to you, but there is a lot of good info on their page too: https://wiki.gnome.org/OutreachProgramForWomen
To follow up on #5, talk like a human. People are generally turned off by PR speak so I recommend makers be personable. :)
Something that tends to get lost in these discussions: it's not a question of systemd-versus-sysvinit. Systemd is miles better than sysvinit. There's absolutely no question that the vast majority of Linux users would rather sysvinit disappear entirely.

But that doesn't mean that there aren't better alternatives. My personal preference is runit[1], which is based on djb's daemontools[2] and gives you all the dependency management and speed gains of systemd without the monolithic architecture and without the complicated shell scripts of sysvinit, as well as cool features like service management trees for non-root users. (In fact, runit doesn't need to be run as init—you can run it as a non-root user and provide service management even if you use another init. It just happens to make a nice init.)

The tests I've seen show that a minimal system with runit boots roughly as fast as than a minimal system with systemd. That doesn't mean runit is the end-all solution to "which init"—it's perfect for my needs, but maybe not yours—but it does mean that the choice is not a choice between systemd-but-fast versus sysvinit-but-slow. The field of choices is much, much broader.

[1]: http://smarden.org/runit/

[2]: http://cr.yp.to/daemontools.html
Network configuration.

You don't need systemd to solve that, though!
Was there even an argument presented in the section titled 'The invasion of “desktop linux”'? I couldn't find it. Where's the evidence that systemd is making design choices that are driven by desktop linux and detrimental to usage on servers?
Flagged for spam. I don't care if it's the New York Times or not. What does this have to do with anything?
Because of the way cgi works you could just set a user agent or other http header to contain an 'rm' or'nc' command or something in to download and run an attack tool. E.g. You could run netcat to listen on a port or connect out to an attacker's system to provide a connection into an otherwise firewalled database server
Thanks, I did see them. That's more like a tool, ours would be more like an optimized service.
The video went pretty fast for lay users to follow.

As a survivor of online projects that ended up closing down, I will wait for a way to export data before using this seriously.
On your second point.... Governments should be assumed to be bad actors and they certainly have some of the deepest pockets. If an open market increases the price, it would seem to make it a better market for bad actors.

Especially if we think of small software companies or open-source projects (like OpenSSL) who cant afford to pay hundreds of thousands of dollars to secure their own exploit.

On your overall point... I think this issue of selling 0days is more a debate of ethics, and I don't think economics can solve a problem of ethics.
"My clients may use them to monitor your activities? How do you like them apples, Chris?" -- Mitnick to ACLU technologist, last line of article

Wow what a first class dick. He's implying that he will be glad to sell zero days to the government to illegally monitor ACLU activities (e.g. free speech, etc.)?
It is not from the benevolence of the butcher, the brewer, or the baker that we expect our dinner, but from their regard to their own interest.
Why do you "have to" build it on those distros? Why not use a server distro that doesn't even have X let alone GDM?
Before completing checkout? So they billed your credit card without permission? That's pretty damn bad... Like maybe credit card fraud bad.
I'm sure that the people at Home Depot knew for certain that their network was secure right up until the moment they discovered they were hacked.

You can learn by experience, or you can try to leach the wisdom of others.
I think that's the case. From http://blogs.gnome.org/bolsh/2010/07/28/gnome-census/ -

"While over 70% of GNOME developers identify themselves as volunteers, over 70% of the commits to the GNOME releases are made by paid contributors

Red Hat are the biggest contributor to the GNOME project and its core dependencies. Red Hat employees have made almost 17% of all commits we measured, and 11 of the top 20 GNOME committers of all time are current or past Red Hat employees. Novell and Collabora are also on the podium."
Assuming that everything the author says turns out true - such as the "big one" exploit - in say an year from now, does anybody know any active popular open source distro that aims to keep systemd away from servers?
The question is quite sensible, although as with anything, it can be rendered senseless by reducing it to a logical fallacy:

"I am an artist. This does not harm me. Therefore, this does not harm any artists".

>there's no impediment to enjoying such benefits

Surely there are, else this thread would not exist.

>it's my job to figure out how to capture them, not society's

That seems absurd on its face, but perhaps you mean something other than what can otherwise be extended to say that there should be no contract law, property rights, etc.? If so, please enlighten us as to how you capture benefits without any assistance from society/civil law.

>It's not being destroyed, it's simply remaining with the consumer instead of being transferred to the content creator

Surely you know that statement was intended to say the value is destroyed for the creator. But, if not, there it is.
The comments section in the article has a rep from the company handing out a promo link.
One of the prime examples from my corner of the world:

The Finnish software house Reaktor recently invited Mr. Mitnick as a "keynote speaker" into their popular event for software developers:

http://reaktordevday.fi/2013/

To be honest, I didn't understand the relevance at all. The idolization seemed quite childish.
Not quite, row layout gives too much white space between items. I would prefer columnar layout. It's like row layout but vertical.

Oh, and this should be delivered over SSL... but I'm sure that's in the works.
Don't move to the coasts to attract young techies; just move downtown
Someone please ELI5 (Explain Like I'm 5)?
> are not drop-in replacements since they don't take care of forking, changing the signals, and waiting.

I never claimed it as a drop-in replacement. I think you know the solution to these problems. (I guess maybe someone who naively uses system() might not, so perhaps I need to work on a better spiel.)

> As long as you're not passing arguments from outside sources to the command, using system() should be OK.

Personally I've seen too many bad uses of system() to make that a thing. Maybe they'll not realize it's subject to PATH and that PATH can be untrusted. Maybe they'll not realize they sometimes have asterisks and spaces in a filename. And so forth...
Learn to cook! You'll be glad you did.
More like three or four hundred. And before that, replace "secretary" with "scribe."
While the fact that cross-over during meiosis does in fact contribute to increased genetic diversity leading to resistance to disease, parasites, and other adaptational advantages, one still needs to answer why did sexual reproduction evolve at all? Bacteria and protists are quite good at promoting genetic diversity through horizontal gene transfer, and viral infection with natural DNA replication error rates provide enough sources of "random" genetic variation to keep a diverse gene pool. One can think of competition to share genetic material as a primordial form of sexual selection. Getting from this kind of competition to orchestrated sharing and cross over of large genomes is a huge jump. The real question may be, did increasing organismal complexity necessitate a different type of reproduction to maintain genetic diversity? The answer to this may be yes, but alternative, less sexy hypotheses have to be tested as well. Another question to answer would be – What evolved first: multicellularity or sexual reproduction?
>An open market increases the price of vulnerabilities

That's impossible to tell. You could just as easily say that the price will crash when you take away all the costs and risk of running a black market and give buyers a place to compare multiple "products." The demand side could just as easily be inelastic (or at least saturated) as the supply.

> the good actors should always win the bid

This works if you're talking about Microsoft, but not if you're talking about smaller companies or open source products. Maybe a Google or a Facebook would step up and pay off the market for things that they use, but "the rich people will take care of us" is not a setup that I'm comfortable with.
Just did an update on my Linode and one of the updates was

replace bash 4.1-2ubuntu3

So seems like it's there now.
The biggest thing with small patches (2004)
I went to jQuery.com and the website is normal, and this is the second time this comes up. Does anybody know what's going on?
Maybe if you're buying widgets, but not services. Just like you may be ok with buying a car from a person who doesn't understand the value of his product, but would be more leery of hiring an accountant who didn't understand the value of his services. SaaS solutions are truly a service in this regard.
Very much so. I wasn't thinking through the library (and library equivalent) implications.
Are you saying that if you don't have a web server that allows "get" requests (only posts) then this exploit is not an issue at all?

Usually no. This exploit should be vulnerable to any HTTP method. "unathenticed GETs" are the lowest security level of HTTP calls, so if they can be used as an attack vector, you should pay attention.
Really good point, and on a related note, guys with guns and swords have power. Doesn't Kevin worry about getting kidnapped?
Chris, the ACLU staffer quoted in the article, is not an attorney. Chris has likened selling 0-days to being an arms merchant -- not a bad comparison -- but I'm not aware of an ACLU policy calling for a ban on selling 0-day exploits.

To respond to your point more broadly, the ACLU has done excellent work on many Internet issues, and has represented me in court on multiple occasions. But it is not a monolithic entity, its board members do not always make the decisions you and I might prefer, and it does not always come down on the free speech side of an issue: http://www.volokh.com/2011/04/27/harvey-silverglate-on-the-a...
Gentoo still has OpenRC as the „preferred” init system.
Indoor Location with Estimote Beacons
DHL parcelcopter launches initial operations for research purposes
Just don't turn it off after you've ran `pacman -Syu`, it will never boot again ;)
Yev from Backblaze here -> all of the drives in our datacenter will fail. We just report on the timing of those failures. We still buy Seagates in droves because they are a great value. As long as you have backups of the data, any drive is great!
Looks like she just wrote a book, "Hand to Mouth: Living in Bootstrap America" that will be available in early October: http://www.amazon.com/Hand-Mouth-Living-Bootstrap-America/dp...

Also, shouldn't this article have a (2013) tag?
Warning – iOS 8.0.1 Update Breaks Cellular Connection
I don't agree with you (on all points) but none the less applaud your ideas and the way you formulate your arguments.
What exactly are we looking for? Only see a few failed to load JavaScript assets, and those could be from my Hotel wireless injecting their Ads.

http://engine.adzerk.net/ados.js?_=1411579196670

and

http://cloak.ovatn.net/adframe/cframe.js?id=1491
My friend tried it on Heroku - It is affected.
Getting creative with Webhooks and VictorOps
The amount of variety possible with nothing more than pasta, simply cooked meat or fish, and fresh vegetables is truly impressive.
IBM's core strategy is one of technological differentiation through R&D; not price leadership. It's absolutely part of that strategy to exit commoditizing markets (which is why they got out of x86 servers as well) where product differentiation is difficult.
Also make sure your mirror is up to date. When I updated this morning, osuosl was out of date (and still is as of this comment: https://www.archlinux.org/mirrors/osuosl.org/125/)
Why does this go to a documentation page? Anyway this was already discussed https://news.ycombinator.com/item?id=8359223
12%! I would love to join this fantasy world of yours :)
Double Arse-Sum!!!
Yes, I just noticed a couple days ago that http://cm.bell-labs.com/cm/cs/who/dmr/ is gone (and blocked from archive.org).
Tightly integrated operational systems are painful. The article really says it all:

> Linux is becoming the thing that we adopted Linux to get away from.

It's just true in many more aspects than the one where this sentence is placed.
Ted Selker and the IBM TrackPoint: From Research to Market in the 90s
Flagged. This is a snuff film.
is the goal to make a mega corp think twice about adding a product of feature? Now they can cancel that feature in fear of having to buy a 0day back for a gorillion dollars?
Great point! Didn't think of it from that angle!!

However - I don't think these services are trying to teach you how to cook any more than boxed mac and cheese is. They are for the "I want to have a home cooked meal but I don't want to make it." types.

Speaking of eggs, I didn't know what I was doing wrong with them for a long time, they weren't bad by any means, just everyone else did them better. Then I was having a conversation with my mom about how she makes better eggs than me. She told me "eggs are done before they are done." Now I cook eggs like a champ.
Really excellent writing on these pieces. I lol'd at "dutifully bricked itself". If only all tech writing were as colorfully engaging.
Yes BlueMix is a Heroku competitor. It is the easiest way to consume Watson APIs but won't be the only way. I can't disclose pricing yet.
How does this compare to Nodejitsu? Also, do you have support for socket.io?
It is already gone, but noted:
https://twitter.com/jquery/status/514811609752289281
This.
More generally, the less attention that goes into perfecting the layout and wording, the more likely the reader is to believe you're on a busy human's to do list and not a mailing list.

HTML layout very bad, neat little bullet points bad, good copy bad, lack of line spacing and excessive terseness good.
I don't see much that's novel in the article, other than perhaps the rack dimensions. Corporate servers and workstations have been designed for easy, screwless maintenance for a long time, going back to the 1990s I think. I'm pretty sure I also hot swapped array drives back then by just pulling a lever. I can't remember the last time I needed a screwdriver for a corporate server/desktop; I even see laptops now (HP Elite line) that are screwless, at least the parts I've seen, and designed for easy maintenance.
I've heard similar billing/delivery weirdness from folks using Gobble.
This is similar to patent trolls, no? Both don't produce anything worthwhile, buy from others and use it to intimidate others (except patent trolls do it themselves in the open, whereas he sells it to people who'll probably use it secretly)
Dash sucks, bash rocks. Dash isn't even close to being as capable of a shell as Bash.
Not in his individual Wikipedia article (yet) : He name is the 'C' in VC-dimension : http://en.wikipedia.org/wiki/VC_dimension
Ask HN: Are you an Icebergs user looking for an alternative?
I would love to hear from you because I am building an alternative to Icebergs since it got bought out by Pinterest and is shutting down. I am in "stealth" mode but have a landing page at www.orbitapp.io

Thanks.

Ps: you can leave a comment or email me at eibrahim - gmail
I used to do rack and stack in the eBay datacenter. We actually had double height racks (84U). I always wondered the same -- wouldn't it be easier to build a catwalk instead of having a bunch of ladders and lifts around that required two people?
The page was temporarily replaced with a plain-text message explicitly stating they were hacked and that the hacker was looking for a job. The page has since been reverted.
Tell HN: We're doing a free seminar about the 2015 Digital Goods VAT changes