skysight-inc/HackerNews huggingface dataset:
My personal point of view: The Program Manager role should be replaced by more specialized roles, or no role at all.

I see PMs having 3 main responsibilities: Project management, user experience and defining requirements.

The problem with this role is that it's REALLY hard to find PMs who are GREAT at all these different skills.

I would rather have a project manager role, user experience researcher role, designer role, business analyst role, etc.

If the project is too small to define each position, then I wouldn't define a role but rather get people to wear multiple hats. There are devs that are very capable at project management, designers that are also good frontend devs, etc. Or bring external help to support the specific needs of your project.
the sun's hydrogen is older than the sun.
boom.
You don't understand. A big barrier to entry for competing with Heroku for any other startup is creating a similar virtual environment that abstracts away from metal machines for people who just want to write apps. Docker provides that to startups. So we will see more startups competing in this space, you are going to use them and call them when shit hits the fan.

Recently, Google App Engine allows deploying apps in any language using Docker. So, with Docker, App Engine is suddenly a competition to Heroku for Ruby programmers.
Im live in australia and speak only english and I regularly search and have occasionally bought items from Taobao, including bicycle wheels, motorbike parts and something else that escapes me right now.

I use chrome with auto tranlation turned on, i first translate my keywords in google translate and then paste these into the taobao to search.

I'd buy more things if i could find a reliable third party onseller to deal with - the last one was an incredible ripoff when it came to posting ground freight.

If anyone has a reliable onseller, im open to suggestions!
You can't control the name of the function - that's dictated by the name of the environment variable. The feature at fault is activated by the presence of "(){" at the start of the environment variable value.
> backup files which could leak source code

Would an open source app not be PCI compliant?
It's possible to positively, uniquely identify a gun from a selfie? Was the selfie of the gun, showing it's most intimate private parts: the serial number?
Docker + {aws, digital ocean, rackspace} is substantially cheaper than heroku.

Docker makes these services relatively comparable to Heroku in complexity, so the heroku value prop has been diluted.
Why is the Ubuntu package version behind the upstream version?
Focus on getting rid of the politics, right? Otherwise you end up having to PM-up and hire more PMs to out-PM the other org. Fun times.
Apple is just about the only company that really benefits from that misconception (possibly by virtue of the fact that there's not really a "linux" company, though Canonical is trying)

I wonder if it would be a reach to say that the average mac user (though when I think about it, a disproportionate amount of those users are probably devs) will hear about this on the news, and assume Apple has their back (which they do, I'm sure they'll force a patch soon if they haven't already) and not even know there's a UNIX system down there
I can't deploy Kafka to Heroku. I can technically deploy Akka but 1X/2X instances aren't going to cut it and PX dynos are hilariously expensive, plus clustering isn't possible.

Yeah, if your app can fit on Heroku, leave it there. But Heroku is not a silver bullet for all types of apps. Containerizing them makes it much easier to add and remove instances, easily deploy new services, move instances around as underlying resources die, etc. Docker doesn't provide everything to make this happen but it's the key.

I've spent the past two weeks moving an Akka cluster into Docker with CoreOS. I'm about to deploy Kafka in the same way and so far it's been fantastic.
fortunately, sudoers(5) (et al.) whitelist certain variables.
Ask HN: How are you managing checklists and pipelines together?
With Trello's boards, Asana's checklists, Kanban walls, and emails, how are people managing their productivity? Isn't it getting harder to figure out what is actually a priority?

Although one systems is more predominant, the others creep into people's workflows. Is this just the new workflow or are people taking a different approach?

I'm working on Catalist [1] & want to hear people's thoughts on this issue to see if it's worth solving.

[1] [http://www.catalist.me]
> If you ask anybody, the only answer you ever get is "TaoBao."

LOL! That's exactly the answer I would give you :)

> Images have critical text that isn't translated

This is mostly down to the vendors themselves, who define the text and images that show on the item listing.

> often the page loads elements after translation has finished

Yes, you can't parse a Taobao page before waiting for JavaScript stuff to complete. I believe this is in large part to thwart scraping.

> I wonder how much effort .. to .. smooth out the experience

I'm sure they have the engineering capability to do it. They've built an amazing site (experience, scalability, reliability) and developed some cutting-edge stuff to do it (like tengine). The thing is, why would you make your site easier for robots to parse, thereby increasing your costs and polluting the data you use for analytics?
Any service where you also control the client doesn't really benefit from the use of SSL certs issued by trusted public CAs, other than the simplicity of doing things the same way you always have.

Imagine a file storage service accessible via a desktop client, mobile client, API and web. You can't get around using trusted public CAs for API and web, but the desktop and mobile clients could only trust your own CAs with no loss of functionality.

I think the major stumbling block is that the best practices for running a CA aren't well known or broadly disseminated or easy to follow. If you're developing a system that makes it easy to securely manage a signing key, and otherwise do the right things, that would be sweet. Not sure that there's monetization potential there though.
Thanks for this detailed bug report. I'll be working on fixing these issues.
This appears to be the same as http://seclists.org/oss-sec/2014/q3/att-690/eol-pushback.pat... at least for 4.3.
But for 3.2 http://seclists.org/oss-sec/2014/q3/att-690/eol-pushback.pat... did not work, I had to download bash32-053.bin from Chet's email.

Procedure for Ubuntu 8.04 and other installations where binaries are not available (default 8.04 LTS server did not have m4 and bison dependencies), assuming that 1st patch has already been applied per https://news.ycombinator.com/item?id=8364385 :

#Executing as root
#assume your sources are in /src:
cd /src/
echo "getting m4..."
wget http://ftp.gnu.org/gnu/m4/m4-latest.tar.gz
tar zxvf m4-latest.tar.gz
cd m4-1.4.17/
./configure && make && sudo make install
cd /src/
echo "getting bison..."
wget http://ftp.gnu.org/gnu/bison/bison-3.0.tar.gz
tar zxvf bison-3.0.tar.gz
cd bison-3.0
./configure && make && sudo make install
echo "getting patch..."
cd /src/
#replace line below with wget http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-026 tomorrow
wget http://seclists.org/oss-sec/2014/q3/att-690/eol-pushback.patch
cd bash-4.3
patch -p0 < ../eol-pushback.patch
./configure --bindir=/bin && make && sudo make install
Yep. Estimates include upto 25,000 killed. Many of the surviving victims got only 25,000 inr (approx 500 usd) as compensation despite life-long injuries and birth defects to their children.

30 years on, victims are still fighting for justice and adequate compensation:- http://www.change.org/p/ananthkumar-bjp-revise-figures-of-de...
Really? I watched the talk, I didn't see any evidence or concrete claim that it was actually implemented. I'm 100% against surveillance, BTW.

I don't think what Snowden and the PM were saying were so incompatible - it's a word game. Sir Bruce Ferguson (ex head of the GCSB) said on RNZ that surveillance is an agent actively looking at data, so "mass surveillance" would be agents actively looking at 4.4M peoples' data. Clearly that's not happening, so John Key can claim that there's no mass surveillance here with no conflict. Snowden said he routinely saw New Zealanders' data, but the Americans can collect all that data with impunity since we're all filthy foreigners to them - there was no evidence presented that it's the GCSB actually collecting it.

This is why surveillance, like tax, needs international laws these days - domestic law is mostly irrelevant unless you're the US. In our case the US can collect our data with no issues since basically all our internet goes through there, and we can just ask them for it if we want it. Everyone can say they're not doing any wrong with no fear of contradiction, and everyone is happy.

Except us, of course, because, you know, we're being constantly monitored.
Sorry, typo. I meant not
We just released 0.1.89 (special release to include the shellshock chisel) a few hours ago, so distribution maintainers aren't that fast: https://github.com/draios/sysdig/releases

Debian is currently at 0.1.88: https://packages.debian.org/sid/sysdig

And Ubuntu periodically merges all the unstable packages from Debian, so that's why they're lagging one version behind at this moment.
Trailmix: a paid OhLife replacement
Let me first say that I am sympathetic to your situation. My startup was financially ruined by the Google penalties.

However, I'm not sure that anchoring yourself to "they used to think I was good enough" is a valid argument. Perhaps they were presenting bad results that benefitted you before, and have fixed that with better results now.

It honestly sounds like you're mostly upset because something was taken from you that you were used to having. That does not necessarily mean you deserved it previously.
You can still buy incandescents. 100 watt bulbs are phased out currently (though still available), but only those. 100 watt bulbs are incredibly wasteful, I never used them due to the fact that they convert most of their energy to heat and I live in a warm area, so they not only wasted power in irradiated heat, but power from climate control. They also are a fire risk (we had a fire in my house when I was a kid from a lamp with a 100 watt bulb falling over).

I have 60 watt incandescents in my local stores (they're not phased out until 2020), though I don't buy them since CFLs work for me. If you just need illumination, you can buy a 35 watt CFL bulb with as much lumen output as a 120 watt incandescent, though I usually get lower wattage ones and spend a little more to get ones with a color temp I like. If you guy them at a hardware store they have a lot more selection and you can choose your color temperature. Assuming you like warm color temps like incandescents, LED bulbs are still a little pricey, but you can get LEDs in the 3000-4000k range that can output more lumens than a 100 watt incandescent at a 10th the power draw. They last long enough to eventually make up their up front cost in energy savings.
Even if that was meant as a joke, I do hope you realise the irony.

To protect against running untrusted code in a shell, you ... run code from an untrusted source in the shell. As root.
Somebody get this man a blog, stat!
Sales Rep Says: Do Extremely Well One Year, You're Screwed for the Next
Note that most airlines now limit you to one status match per lifetime.
When Apple wasn't cool
Shouldn't scare tactics to get laws passed be classified as some sort of defrauding the public?

Edit: Did writing that comment now put me on some sort of list? Semi-sarcastic, but semi-afraid. Chilling Effect is best Effect.
I know this is a dumb/basic question, but it's one I've wondered and don't fully understand. How is Docker that much easier/better than just writing some other kind of script that configures a machine for your app to run in and deploys it?
If you publish the updated brew, can't it manually be added by users?
This almost sounds like a case of the pot calling the kettle black.

The author speaks with confidence that black holes do exist, but he is actually referring to inconclusive data open to interpretation as proof.

Blacks holes are yet to be observed.

https://en.wikipedia.org/wiki/Black_hole#Observational_evide...
From everything I see, money does not scale all that well with happiness. Thus, those dollars you spend now are almost certainly going to be more valuable to you (buck for buck) then the dollars you have when you are rich. So its not just the chance that is low, but the payoff is even lower.
My friend just tried Bellhops. Her experience was bad. The movers were clearly not professionals, so even though their hourly rate was low, they were more expensive than a local moving service.

The takeaway is this: be like Uber by having aggressive, two-way ratings (clients rate movers; movers rate clients) and be willing to blacklist people who abuse the service or fail to provide a good customer experience.
This may be true, but it also makes the common assumption that your time (or the time of your team) is somehow worth $0 dollars. But, I imagine that you would be the first to say that your time is worth much more than $0 dollars.

Put another way, hardware stores sell paint and paint supplies all day. Buying those and painting a room yourself is certainly cheaper, but it assumes you have the extra time to paint and don't mind you being the laborer. Hiring a painter costs more, but saves you a ton of time, energy, and elevates the level of expertise you are bringing to the job.

Getting started is one thing. The ease of how you maintain and grow is another.
I'm going to call the provider that hosts my docker instances and get it sorted out.
Exporting manufacturing jobs is only cost-effective if the labor is about 4x cheaper. The coastal provinces of China are now at that level relative to the US. Manufacturing is mostly capital cost; labor cost isn't that big a fraction of product cost. Offshoring adds costs; air freight is expensive, sea freight takes forever, and long-distance less-than-container-load land shipping within China works surprisingly badly. Coordination is worse, and quality control is hard.
From the manual:

"6-row keyboard (backlight function on some models)"
The Idiot’s Guide to Australia’s Surveillance Legislation
I think the cases where it's still a hole are probably obscure and/or unlikely in the wild, but I definitely think the response to this should have been to disable the feature altogether. It's a terrible idea and I'm really curious if anything actually uses it and should be using it.
These are good examples.

I bought an extra laptop power supply for my Macbook Pro from Taobao. It cost 16 USD, and works well and looks like the original. It's probably of reasonable quality, but without the big brand behind it, I don't feel comfortable leaving it on unattended.

I've never thought to buy chocolate from Taobao, and I probably never will, unless it's from the official Tmall store of the brand owner, e.g. http://godiva.tmall.com/

I heard about a guy who bought a fake North Face jacket from the Silk Market or Yaxiu or somewhere similar. It rained a few days later and the jacket was soaked through :(
Welcome to the latency hell.
If you want some help with navigating it I can probably help, drop me a line.
Possibly relevant (from 2012):

http://www.dailytelegraph.com.au/asio-boss-says-we-need-more...

> On the other side of the ledger, Mr Irvine admitted that the debate about civil liberties and intelligence gathering was a valid one to have.

> "I believe however that the vast majority of Australians expect their governments to take all necessary actions to protect their community and further the national interest," he said.

> He said ASIO has no plans for a "grand expansion" of its spy network but said it would need to lift recruitment to meet the demands or cyber terrorism as well as traditional forms of terror.
You are correct, you asked an innocent and to-the-point question.
Selling crack to pay for schools; our next great social program.
Agreed, kudos to everyone for the speedy response!
> They outspend us on marketing 1000-to-1...

In most industries this is called "dumping" and it's absolutely destructive and infuriating.

https://en.wikipedia.org/wiki/Dumping_(pricing_policy)

Between this problem and all the other issues that are coming from this age of startups (like trying to build a business on a startup and then it just poof goes away one day), the Startup world is in definite need of maturity and more grown ups.
Yes, we most definitely can publish a private brew tap. I'm no expert as I mainly use Linux, but my understanding is that I'd need to create a brand new draios/homebrew-sysdig repo. I'll try to find the time to look into this and update the documentation. If, instead, just a PR to our main repo would suffice, feel free to send it over and we'll merge it in no time :)
Looks like we took down the web server :)
Please, elaborate. I was under the impression that the Intex 1.3 branch was entirely separate from the main trunk and it would take some time to merge it back in.
Laser video projector great for projection mapping
Docker is an application run time, basically a small package that is build to run software of your choice.

It's much faster (and smaller) to build such small images .vs building out the whole OS with Memcached installed (for example).

And you don't have to deal with OS configuration, etc.
Jessie isn't released / stable and doesn't receive security patches until it is. It's called testing for a reason.
I'm not so sure about that one, FARC is a marxist group that had ties to Chavez. I can't see the CIA helping them.

It seems more likely that anyone looking at the flight / maintenance logs noticed discrepancies. No legitimate buyer would take it.
> If large numbers of people were to start using Javelin

If.
How to Start a Startup Lecture 2: Full Transcript
I had a fake Lenovo power supply burn on me. Couldn't tell it was a fake except by the price being pretty low.

I purchased "Toblerone" chocolate on Taobao and it came unboxed (just a foil wrapper) and didn't taste the same.

I've seen fake clothing that lasted for years and was probably worth the price paid, but I've also seen too many items fall apart. Personally, I won't buy fakes, but I will by Chinese brands if the reviews are good. We have a few items with Chinese names, like a blender and juicer, that were half the price of other brands but quality is quite decent.
The LD_PRELOAD workaround is meant to "fix" the shellshock bug, sysdig doesn't do that, it just passively monitors every injection attempt up to the point where the injected function is actually read by a newly spawn bash.

With the LD_PRELOAD trick you can definitely secure your system, but you won't be able to see if there's a new service that is being used as an attack vector (for your own curiosity). With sysdig, you can, and if you capture a trace file you can also follow the exact process chain that caused the propagation of the environment variable.
What does SELinux do to contain the the bash exploit?
I did 'yum update bash' on my Centos 5.8 Linode a couple of hours ago, and it updated to 3.2-33 and is apparently no longer vulnerable, according to the one-line test I have been using:

X="() { :;} ; echo busted" /bin/sh -c "echo stuff"
Heroku has its own issues. Maybe they will fix them quickly, maybe not. At least on your own server you are in charge.
JMESPath – Declaratively extract elements from a JSON document (Python)
"Do governments have persistent identity?" What kind of a thing is that to say?

I could have said that in response to me looting a store... I shouldn't be handed punishment, because the rules of the government that were up 2 weeks/years/decades ago when I robbed the store don't apply today now that I've been caught.

That's a meaningless response. The fact of the matter is, injustices were once done (effects of which we still see reverberating today), now it's time to put the dollar on the line to make up for those past injustices. And, you know, it wasn't that long ago that these things were happening... it was merely a generation ago. Black folks you see walking and talking outside -- it's them, and their sons and daughters who couldn't drink from the same fountains as others. I don't think a lot of people really get this. Imagine your mother and father were subject to this kind of horror... how badly this would break them, what effects it would have on their parenting...
Yet Heroku relies on container separation, don't they?
>Nothing wrong with calling it out.

Says who, Jesus?

The down votes are likely from sounding entitled and looking to be offended, especially if it was as you mentioned the second comment.
Try using terminal's vim. Works better for me, I rarely use MacVim.
MySQL didn't properly support point-in-polygon until 5.6 though (before that it used a MBR and you had to hack around it with a stored procedure)
This looks really awesome and would drastically improve my workflow, but doesn't seem that there is support for linux which is a big bummer. Any idea when to expect linux support?
Following andrewchambers' advice, have you asked companies if you could work part time? Companies can be flexible sometimes.

If you can afford it, you could start a consulting business and work only couple of days a week.
Tech workers have no sense of what it means to earn a middle-class wage. I earn more than most tech workers but I have a frame of reference for that income having lived in many parts of the US that are generally disparaged as "flyover country".

With all due respect, you are ignorant of the economics of many parts of the US. You can live quite well in South Carolina (briefly lived there) and Mississippi on $40k per year. In many regions, you aren't struggling for money unless you make less than $20k. The United States is a diverse country and I have lived in much of it.

In many parts of the US, the cost of living is extremely low and a dollar goes quite far. Believe it or not, there are large swaths of the US where you can buy a house for much less than $100k (cheapest house in a town I've seen in the last decade was something like $12k, out in flyover country, for an actual house, albeit small). You might not want to live there, and I certainly do not, but many people do. If you like the environment, you can live a satisfactory middle-class life on $40k in those parts of the country. Housing is cheap, food is cheap, fuel is cheap, entertainment is cheap, and if your tastes are simple it is easy to save enough money to comfortably retire in those communities.

$40k would definitely be on the low side if you live in a place like Silicon Valley or New York City. And I've lived there too. But the article specified South Carolina and Mississippi. And I've actually lived on less than $40k in Silicon Valley. Down in Mississippi, no one is going to be complaining about a $20/hour manufacturing job. That's a good living for modest effort.
So is the default dhclient conf vulnerable in any of the Linux distributions using bash for /bin/sh (eg CentOS/Fedora)?

edit: According to one poster on Stackexchange, Debian/Ubuntu may be vulerable despite not having bash for /bin/sh: "What's more, on Debian (and possibly many of its myriads of offsprings like Ubuntu), which uses dash as /bin/sh, dhclient-script is explicitely shebanged to /bin/bash, and it does seem to contain a bashism, too" (https://security.stackexchange.com/questions/68156/is-connec...)