skysight-inc/HackerNews huggingface dataset:
Ya know, in the past 2 weeks I got "cold-call" emailed from recruiters directly to my personal email; not through LinkedIn's InMail feature. One from life360.com and another from jut.io. That hasn't happened to me in over 6 years and the recruiters seem to know what my LinkedIn profile info says. But, it's a gmail and I know that if you get my gmail from anywhere and put it into "https://plus.google.com/u/0/up/search", you can find my G+ which links to my LinkedIn.

I've been wondering how they got my email...
Can you name those hundreds of issues discovered on Windows stack for, say, 2014? I'm on IIS and I really want to know if I'm missing something.

MS had it's fair share of security flaws in the past but give them credit for their current state. You sound like people still talking about BSODs, while it's certainly a thing in the past.
2 factors:

- you also have to account for the highly likely probability that the jackpot will be split between multiple winners.

- even after that accounting, lotteries do sometimes have an expected value higher than the ticket price. The expected value of purchasing N tickets for the N lotteries that led up to and include the big lottery is still the standard 40-50%, but the N-1 previous paid out much less than expected, so the one with the big jackpot pays out more than expected.
Hacking the Cancer Genome
Most lotteries have multiple winners of varying amounts, depending on how many of your numbers match and how many other people happened to pick the winning set of numbers. I suspect that in order to get a 50% chance of winning the jackpot, you would have to invest into considerably more than 86 million tickets.
If the utility function of money was superlinear (has a steeper slope the more you have) this would make sense.

But since you're a human being, I'm fairly confident that your utility function is sublinear (has a shallower slope the more you have). Playing for variance doesn't make sense in this case.
On the one hand, if this had been in Windows, no one in the public would have been able to stumble across it, though you would expect them to be paying rooms full of engineers to make sure that's never necessary (and yet stuff happens.)

On the other hand, despite the premise of open source that 'many eyes make all bugs shallow', the amount of code in the wild and the complexity of it (and the diversity of implementation languages) has pretty much guaranteed that there's more code than possible coverage.

No one has to come up with clever marketing for Microsoft exploits because everyone expects there to be tons of them, given the level of complexity, and that Microsoft will push patches for them, because it affects their bottom line. Meanwhile, it seems in the open source world, you need PR campaigns to goad the community into due diligence.
>Update: Someone is using masscan to deliver malware. They'll likely have compromised most of the system I've found by tomorrow morning. If they using different URLs and fix the Host field, they'll get tons more.
But they do get a better chance at winning. Instead of 1 in 175 million, they get 1 in 500 thousand. The problem is either is approximately zero...
Why would the fact that Samsung is no longer selling Chromebooks in Europe make you want to return the Chromebook you already purchased?
On Linux dhclient-script is written in bash. If it is vulnerable, then connecting to open wifi can be exploitable via rogue DHCP server.
I agree. There are lots of usability issues with the website. However this still one of the better websites compare to all the government websites.
Wu-Tang Member on iPhone6
Yes, but Debian and Ubuntu has changed their default shell to Dash (in 2006 I think), and embedded systems usually use some lightweight shell such as BusyBox. So far from all systems do.
The author fails to realize one critical thing—that the imaginary "Objective-C 3" language he wants requires intentionally breaking the fact that Objective-C is a strict superset of C… exactly what Swift has done.
I wonder which will cause a greater net suffering to mankind?
Takana – SCSS Live Editor
Your connections can see your email address: http://www.ianharris.com/linkedin-email/
if you derive enjoyment from losing money

That's a funny way to put it. Exchanging money for entertainment has been a common and accepted practice for a very long time. Technically, when you buy something you lose the money, but it's weird to highlight the losing part over the buying part.
Or a tool that just generates random mailaddresses ending with a popular e-mailprovider domain.
Show HN: Spaces.pe – Start a new online business in minutes
Some spammers send spam to made up email addresses, hoping someone will receive it.
I thought LinkedIn had a contact sync app that people can run to pull all of their LinkedIn contacts into their own address book. If so, could it be that one of your connections ran that, and their machine is compromised?
It leaked a year or two ago. I had to change my listed address and SMTP REJECT the old one due to the amount of spam it received. Glad I had listed a linkedin-specific address that I could burn.
and if I am not a paying customer, can I enable them manually?
The FAQ question answers a ton of questions. Just search for a question you have and see what happens :)
Many years ago, I worked in a lab where I synthesized a variant of Interferon using solid phase peptide synthesis. It was all manual work, using pretty basic materials. It's just a peptide after all.

I finished at 11 PM. Cleaned it up, walked across the street to probably one of the world's most respected Cancer Hospitals. Gave it to the MD on staff, he said we'll try it now. Right now.

A lot of things go on when people are at life and death cross roads. Lots of things out of the mainstream. When all hope is gone, sometimes miracles can happen.
The email to which I'm receiving viruses and spam is not of that form.

Edit: To those who are downvoting - the comment to which I'm replying says:

> Or a tool that just generates random
> mail addresses ending with a popular
> e-mail provider domain.

Firstly, the address does not end with the domain of a popular e-mail provider, hence the email address to which I'm receiving these unwanted emails is not of that form. Thus my reply is true, and informative.

It's also neither a random user at the domain, nor a dictionary element, nor a simple variant on a dictionary element, nor short, nor public (until now), nor falls into any of the formats I see and deduce from the dictionary attacks on the servers I run. And it is long, and has internal structure. Thus is is, again, not of the form being described in my comment.

So thank you for the down-votes, but I feel that my comment is true, relevant, and justified.
Yes, but Amazon's schedule involves them having advance, non-public knowledge of major security flaws. In some ways, you've got a false sense of security.
I believe the golemotron is incorrect. For example, http://autos.aol.com/article/highest-speeding-fines/ points out that Finland's fines are a percentage of income, while Iceland's is merely expensive. "In Iceland, higher fines are justified by their supporters by the danger of driving on roads that can turn quickly from tarmac to gravel, often leading to unintended consequences for fast drivers."
Do you have any evidence that this was found by looking at the code, as opposed to stumbling across it in use?
I play sparingly and it's irrational if you expect to win more than you spend on the tickets.

It's not irrational if you're playing for fun.

The $10 that I spent on PowerBall tickets provided me with much more enjoyment than the $10 that I spent to see The Blair Witch Project.
Plenty of stuff uses environment variables and in places one may not think it vulnerable. Reviewing some of our own software, it's unclear, just from documentation, which third-party systems actually pass some environment when shelling or not.

"Legacy CGI" might be discussed as a clear-and-easy example but this will impact many, many other systems.
this is so interesting, one more reason to have a rat as my pet.
The question, then, is whether they're complimenting you because it's new and they've never seen it before or because they actually think it's a good-looking watch. People complimented PT Cruiser owners when those things first came out. :P
The only guaranteed result is not to play, that will ensure that you do not win 100% of the time.

Not quite true; every time you don't play you win $1. If you don't play often enough, that can really add up.
Shameless plug : We sell high-end digital watches ( != smart watch ) at www.slyde.ch

Feedback appreciated.
iOS Update is Bricking peoples iPhones
I use that as my main keyboard. I've tried other, "smarter" keyboards with auto-correct and predictions, but I find I am actually slower with them.
this is a mix of neural network and genetic algorithm.
Getting Started with tmux
If I recall correctly, at least some of the STM32F4 timers can be clocked at the same frequency as the system clock, so 168MHz maximum.

The GPIOs can be configured with a maximum 100MHz clock, though your software likely cannot read the registers that quickly if it is going to do much else.

EDIT: The reference manual actually contains a lot of the peripheral details, with the datasheet containing the chip specific details, like clock speed and which peripherals are present.

http://www.st.com/stonline/stappl/resourceSelector/app?page=...
I think the parent claiming to value the variance first-order (experienced as "excitement").
No, the WAF is not included in the free plan.
I've found that landing pages are less of a design issue and more of a messaging issue, although having something attractive is certainly nice to have. If you're largely taking existing headlines and making them look nicer, you're missing greater opportunities for improvement.

I also don't think saying you get 10% - 17% conversion rates resonates at all. A lot depends on what you're optimizing for. I have landing pages that can routinely convert 70-75%, but that's a first step optimization for click-thru, not sale. I think it's best not to pigeon-hole yourself into a range and instead just say "I've increased conversions by x%".
No, because wsgi (i is for an interface here) does not use shell to pass data. Subprocess.Popen would only be a problem if it passes user-generated data as environment variables, and it doesn't do that by default. That's rarely needed, but you may want to review your code to be sure.
We got a lot of feedback at ProductHunt (http://www.producthunt.com/posts/spaces-pe), so thought it might be interesting for the community here, and to hear what you guys think of Spaces.
Run externally accessible applications under a user id with no login and no ownership of the application files it's running. Make sure that the euid of the process can only write to the specific areas of the system that are absolutely necessary. This would help quarantine the system impact of remote code execution like this.
Go isn't very search friendly, Golang is A LOT better for identifying and searching anything related to it.
Cloud 66 now actively monitors Rails servers for OS security issues
Sony wearable are powered by Android Wear. Does anyone know if Android Wear supports BLE out of the box? I suppose it does but am not sure about light devices such as Sony SmartBand. There doesn't seem to be any mentions on the page.
Thanks for sharing this! I've already encountered some skepticism as to the severity of the bug so information like this is very helpful.
Out of curiosty: did it cause any problems with intended use of this shell feature? Did anyone complained that it broke something that worked before?
The basic distinction is this: Natural selection refers to one organism having superior reproduction prospects due to inherent physical factors (strength, speed, height, weight, ability to digest specific foods, ability to detect and respond appropriately to threats, etc.). Natural selection takes place without the awareness of the hosts involved: By the time their relative advantages or disadvantages are in evidence, they are long dead.

In other words, natural selection is about fit, that is, how well an organism "fits" or is suited to and environment. (That it what Darwin meant by fitness: Environmental suitability.)

Sexual selection refers to overt preferences in mating: A female bower bird chooses the male that builds the "best" bower (a completely useless artifice neither ever use), a human male prefers women with larger breasts (pretty much ditto), a peahen prefers the peacock with the more extravagant tail (ditto for sure, in fact, more extravagant tails are liabilities).

Examples are many. The term "runaway sexual selection" is used to refer to exaggerated traits that become prevalent and possibly dominant in specific, local populations (think of human characteristics you associate with certain groups: Sometime, somewhere, someone preferred those slightly larger eyes or slightly curvier hips and over time those became prevalent). These traits are generally completely irrelevant, with zero fitness value.

They exist because we think they look/smell good. Why did we come to prefer one over another? The same random variation that causes changes to fitness causes changes to fitness indicators, but those indicators are not necessarily honest signals.
You're not missing anything. It is technically possible to design and build a business focused solely on buying lottery tickets for profit (i.e.: buy enough to ensure good enough odds to win) But there are a number of risks. The list below isn't exhaustive:

* sharing the winning number with someone else
* do you buy every single ticket or enough to "virtually guarantee" a win? (and the fewer tickets you buy, the more risky it becomes)
* the logistics of purchasing that many tickets

I have even read stories of people trying this before - but haven't been able to find the link. The story I remember best is one man hiring a bunch of people to buy lottery tickets on his behalf.

Anyway. I'd love to see someone make a go of doing this "professionally", but when you have 172 million or more, the incentive isn't really there anymore.
Ubuntu symlinks /bin/sh to /bin/dash by default as of some ancient version. This is pretty annoying and I often end up manually undoing it and linking it to /bin/bash when a script fails in spectacular ways (dash doesn't support some bash-specific niceties). It's merely a fortunate accident for Ubuntu that this type of bug was discovered in bash, not dash.
We have not seen any complaints about this.
To clarify further: it's a bash thing, because the arbitrary code execution happens when bash parses environment variables.
CloudFlare is so amazing... Thanks for all your hard work. I have over a million blocked malicious attempts on my site which gets a huge amount of traffic (not shellshock, I mean in general).
Overview of Meteor Cordova – PhoneGap Integration
On the other hand, there's the 1994 Navy sponsored study which had as an (informal) conclusion that Haskell was better at rapid prototyping when compared to other languages of the time.

http://haskell.cs.yale.edu/wp-content/uploads/2011/03/Haskel...

The experiment mostly compared Haskell with imperative languages such as C++ and Ada, but there was also at least one Lisp variant. There were several informal aspects to the study, not the least of which being that there were no clearly defined requirements for the system to be implemented (so it was up to each participant to define the scope), but the conclusion is very interesting nonetheless:

The Haskell took less time to develop and also resulted in less lines of code than the alternatives, and it produced a runnable prototype that some of the reviewers had a hard time believing wasn't a mockup. Many of the alternatives didn't even end up with a working system. It should also be noted that the Haskell participants decided to expand the scope of the experiment; i.e. they didn't "win" because they implemented a heavily simplified solution, but in fact added extra requirements to their system and still finished earlier!

Even though Obj-C wasn't included in the study, there were similar enough C-like languages in it, so my bet is that Haskell would have won against it as a rapid prototyping language as well.
A large project? I'm not sure what's particularly large about this. Perhaps it should be "how I organize a project I'm going to have running on a server at some point"?
Was he brown?
This needs a web version too.
Someone really needs to interview Stephane Chazelas and ask them how the heck they found this flaw in the first place (after 15 years).
> This torrent of chunky rectangular smart watches

Genuine question: Did you include "rectangular" because you would prefer a circular smartwatch? I genuinely don't understand why people would want a round smartwatch. I don't see how a round screen would provide a good UX (this is why they don't make round monitors, or round smartphones).

Even if watches are traditionally round, I wouldn't want to have to build a UI around the constraints of a circular screen.

Whether you implied this, I have seen multiple people voice their preference for a circular smartwatch, so just trying to understand the logic vs. the constraints it would impose.
I know exactly the look you mean. It's typical modern "techie" fanaticism. I had people asking me if my first Android phone five years ago was an iPhone, and they exhibited a look that I also would only describe as "let down" or "disappointed".

I use the word "techie" in quotes because, while many of those people would have described themselves as techies, I found they were really just consumers of technology. They had no functional knowledge of how anything worked or how to make anything themselves. To them, the only smartphone (or smartwatch) in existence was the Apple product, because to them the entire point was to brag about acquisition.

Even within the demographic of programmers, you'll find "techies". They ask you what programming language or framework you used to build your project, then get disappointed when you didn't magically read their minds 6 months in the past and chose their darling flavor. I've got no use for such people.
To be fair, it's pretty expensive breaking them into chunks and packaging them individually and they're turned pin ones by the looks. This isn't massive production run bags of them.
They are just fancy jump hour watches? Or, am I missing something?
California Lemon Law
California Lemon Law was designed to protect buyers from defective goods that can endanger your safety. It requires that the warrantor of a good repurchase or replace it from the consumer if it is a “lemon” and is covered by the warranty. With the help of the given law your attorney can settle your case and get the compensation you need.
I enjoy playing Virginia's New Year's Millionaire Raffle lottery which sells a finite number of tickets. They cost a decent amount (I think $20) but it brings me excitement on the day they release the numbers.
Then you should love this proposal for an improved lottery:

http://lesswrong.com/lw/hm/new_improved_lottery/

In fact, as mentioned, why not just keep an eye out for winning lottery tickets on the ground? Because you have an ~epsilon chance of getting a winning lottery ticket, and you also have an ~epsilon chance of finding a winning lottery ticket on the ground.
On the other end of the spectrum, while still simplified and exaggerated, there is "Person of Interest".

They _must_ have some decent technical consultants for the show because they rarely do the Hollywood style of UI and everything has a certain consistency throughout the production. They take technology terms and mostly use them correctly - most recently building a "mesh network" over NYC for private voip communication with "rolling encryption" using existing UHF TV antennae on rooftops (UHF covering up to 3GHz - standard wifi being 2.4GHz).

Could that actually be done? Dunno, maybe - probably not as simply or quickly as shown, but still, it shows effort.
Slightly off topic, but it depresses me greatly that maintaining/building roads is STILL such an expensive endeavor. How are poor countries ever supposed to have passable public transit systems?
You can always install XPrivacy and deny them everything. It's not a solution for the average user, though.
So rarely instead of often. I would not judge all dynamic languages on what PHP does.
I've got to maintain a couple of RHEL4 servers that have simulation software running on them that has never been ported forward (education - the people who wrote it have long since left). Though we also still have a couple of DEC Alpha's kicking about attached to nanofabrication services. Fun times... Luckily I don't need to maintain all the win98 boxes we still have as well. Or the DOS ones.

Variety is the spice of life, and all that...
> Your construction is "ownership of a car equals the right to restrict who gets to drive the car."

No. Ownership (IMO) includes the right to restrict. It's necessary, but not sufficient. But the converse is not necessary. It is not necessary that I be able to allow anyone to drive my car in order to say that I own it. I can't, for example, allow an unlicensed driver to drive my car, but that doesn't mean I don't own my car.

> you instead countered with "ownership of a gun equals the right to restrict how it can be used."

No, you got this backwards. Ownership stands even in the face of (some) restrictions on how it can be used.
Well the bash vulnerability and then immediate disclose of another vulnerability makes that statement pretty moot.

We also have deeply layered non-hetereogenous kit so you have to punch hard to get through it all to something useful.
How to Price Your App
IP68 is actually more waterproof than IP67 - higher digits mean better levels of protection in IP codes. IP68 is basically the highest rating possible under this standard.
When the expected value is so definitively against you I guess it's implied that you're playing for variance. Maybe you also feel that you're playing for the entertainment value, which isn't subject to the same mathematical rationality.

I get that. When I play poker for 5 hours and come out even at the end of the night or slightly behind, I consider it worthwhile because I had fun for 5 hours.
Out of curiosity, have you considered enabling it temporarily for everyone with Shellshock rules enabled? Just a day or two, to give people time to fix this. Is it feasible with your infrastructure/the way WAF works (I never used one)?

It could do a lot of good for people and be a great PR move at the same time.
Not very deep.Separation is not always violent,sometimes separation is an act of care and sometimes it's an act of prevention.Separation is neccessary.The 'rest of mankind' is sometimes not the space where you want to spend your life in.
Is that affiliate tag really necessary?
A better link would be Mr. Shehi's Zidisha page:

https://www.zidisha.org/microfinance/loan/Shehi/4590.html

TL;DR Mr. Shehi received micro-loans via Zidisha, and was able to start a small, single-computer internet cafe. In addition, he provides computer help and repair services, and sells mobile phone accessories.
I believe that's using the concept of a horizon. For an object of a particular mass, we can use our theory to tell us where the event horizon would be, if it collapses past that point. My understanding of this recent paper is that they are saying: it won't collapse past that point.
Is there a (low volume) mailing list that would have alerted me to both this and Heartbleed?
I'm going to bring it up internally, but don't hold your breath.
It looks like flava-flav's clock on that little girl's arm http://i.imgur.com/1GJsajR.jpg
As a paying customer, I'd like to say thanks. Too many companies give too much away for free, leaving no incentive to upgrade.
Yea, I think the Fitbit style is the design they should shoot for.
They could use the wrist band to hide precious IC space, along with the antenna for the GPS.