skysight-inc/HackerNews huggingface dataset:
"Security in internet software and
protocols were often just not considered at all in that time..." I find that a rather perplexing issue with many, especially software based products and research. How do you, in early, usually time, effort, support, and resource constrained stages of a project or research discover and identify all dependencies and requirements to the best of your knowledge so that there is not a type of runaway train effect where momentum is gained and speed is accumulated but it is frequently overlooked that there are all kinds of things like security, anonymity, etc. that are not being considered even though they will invariably become monumentally important.

Take the internet today in general as a huge example of that issue; it was never developed with anonymity or privacy or security in mind and here ware are, horrified of even just the tip of the iceberg that was revealed through Manning and Snowden. If the early researchers and engineers had built the early technologies with fundamental, most basic human considerations in mind we might not be looking down the barrel of a dystopian dawn.

So my question is whether anyone is aware of a method, procedures, techniques, etc. to plan for such a paradox?
Why India Went to Mars
Individuals are not particularly responsible for this, this is bad business behavior. Supermarkets and restaurants waste a lot of food as part of normal business. I'd be surprised if I've personally thrown out more food than I could hold in the past two years. I remember throwing out a couple of inches of a half gallon of spoiled milk a month ago, I think.
I personally feel bad for Chet about this whole thing. For those of you
(probably most of you) who do not know Chet has been maintaining Bash
for free in his spare time for the last 25 years. He began working on it
because he was not satisified with the shells available at that time:

In 1989 or so, I was doing network services and server support for
[Case Western Reserve] University (CWRU), and was not satisfied with
the shells I had available for that work. [1]

I had the priviledge of hearing Chet speak about his experiences
maintaining Bash.[2] From my perspective he has done a really great job
over the years making software that many people love to use and abuse.

So while this is a really bad network security situation for the
internet at large I think it is dubious to hold Chet or even Bash at
particular fault. Rather, we are all at fault. We have been writing
software that just shells out to Bash or sh or z-shell for years because
it is convient. We could have easily have written our subprocess code in
better ways but it was easy to use shells and we used them, even when we
didn't really understand them.

[1] http://www.computerworld.com.au/article/222764/a-z_programmi...

[2] The venue was Link State a student run conference here at CWRU
Not really - it is written from quite the elitist perspective, with a nihilistic goal at the end. It is pretty dark and depressing if you ask me.
These are the slides from an interesting presentation by one of the people that did a lot of the work for the new jsonb type in 9.4, and associated index improvements: http://www.sraoss.co.jp/event_seminar/2014/20140911_pg94_sch...

Also contains some comparisons with MongoDB.
Actually Clang is fully C++14 compliant, and already has some C++1z features, and gcc only need a few more patches.
It is an interesting and revealing quirk, though, to equate privacy with the abolishment of the State.
Interview with designers of Ello
Neato! This is a nice hack to understand the price of an area.

You should turn it into a bookmarklet. http://ted.mielczarek.org/code/mozilla/bookmarklet.html

Presently, the code only searches one page of results. Airbnb limit's the number of results on a page to 18. This code should iterate over the pages, to average all the listings is an area.
Allow me to present Cassandra: http://planetcassandra.org/what-is-apache-cassandra/

Note that Cassandra scales linearly.

http://wiki.apache.org/cassandra/ArticlesAndPresentations
The Best Lip Sync of 2014: DBZ Opening “We Gotta Power” in Okinawa Japan
And it's not limited to C. E.g. I would be in favor to remove os.system from Python (in favor of subprocess.call). The `-syntax (backtick-syntax) in Ruby is particularly evil. It's so convenient because it is so concise, but I guarantee you that it is the source of a lot of vulnerabilities. It should be removed ASAP. I think that's kind of a theme in Ruby: is it convenient? Then put it in. But I would have expected more from Python.
So ruby and perl are specifically designed to be a handler of untrusted data?

How do I know what other programs are designed for such a task? What's a "generic program"? At this day and age, it is expected that pretty much all software ought to be designed with security in mind (not that it always is). Because any piece of "generic software" (or just software) is otherwise going to be exploited. Especially on platform where double-clicking a file is the expected way to open it.

More importantly, the point we are making is that we're not expecting bash to "handle" anything. It gets some data. It's not supposed to do anything with it on its own. Period.
"An American company called Interorbital Systems will even chuck into orbit personal satellites the size of biscuit tins for eight thousand dollars a pop; it accepts PayPal"
It only takes an hour or so to google and read up on what the different ways of replicating data are in PostgreSQL, their advantages and disadvantages.

Are we really that scared of 'research'?
Somewhat ironic for all the noise made about qmail that many configurations of it are vulnerable. I wonder if Bernstein will be paying out that $1000 reward, and if so, to who

See section 1.3:

http://cr.yp.to/qmail/qmailsec-20071101.pdf
Changing world one billion sensors time
Those weren't very good pranks, IMO. They're all very similar to things that already exist.

Separating garbage into 8 categories? We already do 3 in real life. It's a matter of time before it's more.

A broken yogurt machine? It happens.

The political ones aren't even surprising. They could have put real names of city council members on the list, and I'm sure 90% or more of the participants wouldn't know if they were real or not.
Umame
The qmail bounty explicitly disclaims "bugs outside of qmail", which this one clearly is. So, no.
He'll get the phones replaced under warranty.
'It's obvious' isn't an argument. It certainly didn't seem obvious about YAML for some people [ http://www.kalzumeus.com/2013/01/31/what-the-rails-security-... ] to exactly the same effect.

edit:

"A brief description: Ruby on Rails makes extensive use of a serialization format called YAML, most commonly (you might think) for reading e.g. configuration files on the server. The core insight behind the recent spat of Rails issues is that YAML deserialization is extraordinarily dangerous. YAML has a documented and 'obvious' feature to deserialize into arbitrary objects. Security researchers became aware in late December that just initializing well-crafted objects from well-chosen classes can cause arbitrary code to be executed, without requiring any particular cooperation from the victim application."

So what was 'obvious' then is the opposite of what is 'obvious' now.
http://harmful.cat-v.org/software/dynamic-linking/

..comes to my mind. Shared libraries and their advantages are at least.. controversal.
I understand the spirit of your comment, and the statistical difficulties in doing ratings in a meaningful way as described in TFA, but it is absolute truth that there are teachers who are absolutely _wretched_ and when I was an undergrad it drove many of us nuts to have no way to identify them. The problem might have been especially severe when I was an undergrad, since I went to one of the most populous schools in the US, before the proliferation of social medial and the like made a lot of this information gathering easier. But it was a real problem. The fact that in the case you mention all the students had the same normal curve (by which I assume you mean they had the same means and also the same shape) is interesting, but there's more to being a good or bad teacher than the numeric outcome of the class, which ought to be a familiar argument by this time.

Another problem that you mention, and that was also very real, was that some of the teachers literally could not be understood. I use 'literally' literally -- I took an automata theory class from a guy that seemed to have been speaking his own native tongue and not English. That class was an absolute delight, as you might imagine. Most of my teachers had strong accents, and I could deal with it, but some were incomprehensible and had no business teaching in am American university.

Acting like these are problems that don't exist, and that complaints are just small-mindedness or excuse-making, is just as bad as going the other way and throwing a fit when you have to 'endure' an unfamiliar accent. Everything's a matter of degree.
One thing that'd be somewhat useful, with respect to #2 ("It must invoke bash"), is to separate it into those which specifically invoke bash, versus those that invoke /bin/sh. If bash is not installed as /bin/sh, as is the case on Debian and Ubuntu, do any of these (inetd, exim, etc.) still explicitly call it? Put differently, is this mainly an issue for distributions that ship bash as /bin/sh? Or do users of distributions like Debian also need to worry about common system services setting bash shell variables?

Maybe I'll try to answer that by pulling a bunch of Debian source packages and grepping for explicit calls to bash...
Murray said, “But the odd integers can be derived. If you divide every even integer in the entire infinite series by two, you will get another infinite series which will contain within it the infinite series of odd integers.”

For S={2,4,6,8...}

S/2={1,2,3,4,..}

I used to think the set of even integers is a subset of the natural numbers.Doesnt this suggest that the reverse (the set of natural numbers being a subset of even integers) is actually true?
Took me a few seconds to realize what's so captivating about this for geeks.
I've experimented with this, too. One thing that I also like is that you can have multiple returns within the lambdas and know that the control flow paths will merge again at a common point. The compiler can also make sure that each one returns a value of a compatible type.
You Don't Really Need to Build an App
Superiority by Arthur C. Clarke
That is a trite truism which does not illuminate anything. The main problem is that unlike for food, there are no regulations in place requiring chemicals in products to be proven safe for humans. What happens is that decades after a chemical has been introduced, concerns might be raised, and the industry launches a big PR campaign to try to cover up the findings (I believe this very article is an instance of this).
Quote: "One option is to explicitly write down a function which computes the exact derivatives by using the rules that we know from Calculus. However, this quickly becomes an error-prone and tedious exercise."

There's the alternative of algorithmic symbolic differentiation. For most well-behaved functions, symbolic differentiation produces useful results (not true for the reverse case of symbolic integration). Many readily available libraries now produce symbolic differentiation and other similar results. Users should not dismiss this approach out of hand.
LOL, that's just so someone (of a rival group) who tries to get their real IP address (to ddos them), finds that subdomain, and doesn't look closely, and goes to ddos the FBI.
Just use Xamarin.
> (And Ello? I care even less than the author. PG has the canonical technique for building a product like this: concentrate on a very small market subset, and then expand. I don't see that they have done that.)

Isn't "Silicon Valley hipsters" a small market subset?
React.js/Om https://github.com/swannodette/om type of framework would be awesome! The only thing is I don't think UIKit lends itself nicely to this kind of programming. We're also missing Persistent Data Structures (in the http://en.wikipedia.org/wiki/Persistent_data_structure not durable sense). I wasn't the first one to think of this :) https://twitter.com/michaelklishin/status/474268337665740801
Shouldn't we all be glad with it? HTTPS-MITM-as-a-service... and authorized... awesome!
Port allocation is quite simple. We randomly select an unused port between 8000-8999.

The most recent version has a --count flag which allows you to specify the number of application instances to launch. I believe the Heroku equivalent is --scale.
For emacs/clojure users I highly recommend Sam Aaron's Emacs Live. It is an "opinionated" emacs setup and while some of the opinions might not be to your liking, it is really easy to set up and get going with clojure using it.
I was extremely excited about swift when it first came out and I played around with it initially in beta. However after working on an app in Swift now I can't help but feel like some of the hoops you have to jump through for it make it a tremendous pain in the ass.
A better, safer, free-er, social network
Smart algorithms to help people lose weight.
Depending on Open Source Software Is Risky Business
A 3 minute video of all the cool interactions we spent so much time attempting to visualize ourselves would have been all that was needed. Then a 5 second explanation of how it was done at the end. Something like this needs all killer no filler.
Any time you are dealing with massive amounts of data in a fairly restricted environment (something out in the field) FPGAs are about your only solution. Image processing is really one of the largest and best uses of FPGAs that I have seen.

I think they are very overblown for many things though. I'm sure eventually when semiconductor technology slows down (Moore's Law) that FPGAs will start becoming worthwhile for most things simply due to their efficiency. We are still a long way from that though!
Actually I want a more reparable phone. I'll sacrifice thickness if it means that the LCD, digitizer, motherboard and chassis could be separated by just undoing screws and cutting a seal (iPhone 3g's I took to repairing bby remaking the seal with polyurethane each time).
Can be achieved with lambdas or anonymous functions in most languages; c#, c++, javascript, python to name a few :)
Uber and Entrepreneurial Psychology – Haywire
tl;dr: if you don't think FB has value, then you won't think an "improved" FB like Ello has value.

Fair enough.

Of course, most of the planet thinks FB has value, so this observation is of relatively limited utility.
Is “Thin Content” the New Google Update?
On the theory that it is more likely to help HNers than the bad guys: http://httpd.apache.org/docs/2.2/mod/mod_ssl.html . Note in particular the part about StdEnvVars. The docs say it is off by default, but it is actually on in a lot of common deployment scenarios, for example if most of your apache configs were sourced from the big "apt-get install foo bar baz" line everyone copies from a blog post to get a working LAMP installation on an Ubuntu box.

I have not POCed this yet, but if I were trying to, I'd first try to make a client certificate with a highly non-standard Distinguished Name. It doesn't particularly matter if it fails validation as long as it doesn't fail in such a way that Apache dies before passing your information deeper into the guts of the web app.

After that point you're just looking for e.g. any page or library in the web app you can coerce to do a system() call or similar. While I was poking around in my own apps something like system(...) in Ruby on Ubuntu actually called /bin/sh rather than bash, but I think that is probably not the case for every combination of stack and distro.
They probably spent 3-6 months on this. To me it comes across like an "innovation center" put together by building a project team out of different skill sets and giving them some leash.

I'm not sure how this fits into the mobile first or cloud first strategy however. The cube, while I suppose with a team of engineers could be moved and re-displayed, isn't "mobile" at all.
Ideo Helps Develop New Designed-Minded Journalism Degree
I read this every time it appears on the front page, and I enjoy it every time. Asimov remains an inspiration.
"Content submitted to File Exchange may only be used with MathWorks products."
> And it is usually quite accurate.

How do you know? How would you know?
I get the feeling that a sizeable proportion of NoSQL users don't have much knowledge of relational databases at all, never mind replication. If you just want to persist some JSON data you already have, I suppose it is quite a large leap to start reading about relational algebra, ACID, undo/redo logs, SQL, and so on.
The reason people don't like Facebook is that advertising is suppose to be very targeted towards them in a minority reportesqe way. FB advertising was overly creepy to me the every time I use it in this regard.

Honestly, everything you do online is tracked unless you use addons/extensions to counter these and block these trackers. You're always going to be tracked no matter what you do. Unless you recycle names online you're going to be tracked.
For some reason the article didn't link to the actual Medium post: https://medium.com/@cshirky/why-i-just-asked-my-students-to-...
From my conversations with iOS developers, those libraries don't come close to the robustness and simplicity of equivalent java/android libraries like retrofit, gson/jackson, coupled with RxJava... Etc.

I do think a large part of that is due to lack of generics that allow the code to recursively deserialize nested classes and collections without any extra boilerplate other than the class definitions.

I know for a fact that mantle just can't do that with obj c in its current form.
I was excited about Swift. After learning enough to write code that does something meaningful, I find it boring.
"We're really shy unless we're singingly horribly or stomping on a pad in front of people!"

It's funny how that works.
How Top Executives Live (Fortune, 1955)
Aral Balkan – Independence ★ Democracy ★ Design
"I’m coming to see student focus as a collaborative process."
To me, this statement feels deeply condescending. I would much prefer to treat students as people making their own choices - for good or ill - so that they can deal with the consequences. If a student chooses not to pay attention in class to their disadvantage, they have every right to do that! I hope professors aren't pressured to become babysitters.
Even more relevant is the other Multivac story "All the Troubles of the World", as per http://en.wikipedia.org/wiki/All_the_Troubles_of_the_World
Andreessen advises tech community to worry
Leave it Microsoft to "innovate" by creating a non-product which purports to connect people who are dancing by...putting a giant Microsoft product between them so they can't see each other. They say it is "virtually connecting people who are separated in physical space". Is it only me who finds this uproariously funny? It's not "virtually connecting" anything! It's putting a big cube in between them. Which separates them. And people are not "separated" in the way they are saying by physical space...since people can see.

I know, I know, it's just a toy to play with, but the way they describe it is so tone-deaf.
The apartment building my mum lives in (in Sweden) already has six bins: paper, compostables, clear glass, coloured glass, metal tins, and remaining household trash.

Also, there are several things that can currently not be thrown away in the bins at all and needs to be driven to the recycling center (batteries, electronic items, large items, ...) so it would be easy to think of some more bins to add.
I only started a FB account this year. Put it off forever, but was finally convinced when I moved to a new city and a) wanted to keep in touch with friends back home and b) wanted to make it easier to keep track of new people I met.

I have to say it's a lot better than I had imagined. I first I was really excited to express myself amongst friends without forcing them to email me.. the next step was when my family found me, and now I express myself on there... less. Finally, I've gotten used to it and it's just another communication tool. I basically use it to track events and chat with people. So.. pretty boring, but a useful tool.

My initial hesitation wasn't really a "badge of honour" or a principled stance of any kind, although when I told people I didn't have an account they usually took it that way. When I joined, lots of comments along the lines of, "I thought you were too cool for FB! lol". It was never about that for me. It was just a general... unease.. about the idea of writing down in a database who was, and was not, my friend.

I don't find that, in real life, friendship is a binary yes/no relation, and therefore I find it weird to explicitly encode this more or less ephemeral thing that is friendship and social dynamics into a formal data structure. However, on joining, I quickly realized that FB "friendship" has little to do with the real thing, and is simply a way to stay connected with people. So no biggie after all.
No, I believe it's saying that any split that was not caused by a swollen battery is out-of-warranty. If it was caused by a swollen battery it would be eligible for an in-warranty repair.
> Yes we haven't located it in modern times, but that is irrelevant.

I would have said "almost irrelevant", but thanks for your informative post. I should have known this about Alexander's whereabouts.
I think they celebrate on 1st April.
Envato Market
"So I don't know what the right answer is. I think a minimal step in the right direction is to encourage people who use computers for other things than work to sit towards the back, and encourage those who want to pay attention to sit towards the front. That said, second-hand distraction is reduced (you can't see the screen of someone sitting behind you) and the teacher is motivated by what they see in the front row."

Totally agree with you - that's basically what I came up with, too. Screens to the back seems like an easy enough guideline to follow.
...there are teachers who are absolutely _wretched_...

Are there? We thought the same thing about our "worst" professors/TAs. Yet students ability to differentiate/integrate seemed unaffected.

Now this suggests one of two things. First, that there really are no "worst" professors/TAs. Second, that students have the ability to replace a $3-4,000 class with reading a $50-150 book (+ Khan academy, etc).

In the former case it suggests teacher quality don't matter much. In the latter case it suggests teachers are completely unnecessary and our usage of them should be reduced. This experiment at MIT is promising:

http://phys.org/news/2014-09-online-classes.html

...there's more to being a good or bad teacher than the numeric outcome of the class, which ought to be a familiar argument by this time.

This is a familiar platitude. I've never seen an actual argument that didn't appeal to invisible dragons.

http://www.godlessgeeks.com/LINKS/Dragon.htm
No, not a subset, for no more reason than that 17 is a member of the latter set and not of the former one.

What you're seeing is a 1:1 correspondence between an infinite set (the natural numbers) and a proper subset of same (the even natural numbers).
Vantagens Na Harpia Toldos e assim Ofertas incríveis qualidade total
I think what you mean is you used to think that the set of non-negative even integers was "smaller" than the set of natural numbers. The reason you can do this is because the set of non-negative even integers has the same cardinality as the set of naturals (both are countably infinite): http://en.wikipedia.org/wiki/Cardinality

The same is true of the rational numbers, by the way. There is a famous proof of the fact that there are infinite sets with larger cardinality that the naturals (the reals for example): http://en.wikipedia.org/wiki/Cantor's_diagonal_argument