skysight-inc/HackerNews huggingface dataset:
I guess I just don't understand why Vinod would risk his reputation and his historical legacy on this issue. It seems to me that he and everyone else on the planet would want to go down in history as a "good guy". Especially because he has the opportunity with so much money to just do the right thing. The concept that is most sad to me is how an individual can not see past their own nose, and not think about all of the other people, in this case surfers who would get so much enjoyment out of this access. The cool thing about life is we continue to learn from others mistakes. Clearly, we can all learn that in life the most important thing to do is always think about others and not about yourself first.
I'm certain that few Internet users truly believe in site-specific search. This is no exception.

Question: What is the average time to incorporate? (also other variants, "...incorporate [a limited liability company | public limited company | private limited company])

Response: Large wall of text. After reading it, question is not answered.

The purpose of a FAQ is to quickly answer frequently answered questions. This search function works as a search function. It does not work as a FAQ.

Does look nice, though. I hope this doesn't come across as usual HN negativity. I would actually be interested in the answer.
Be the king of the IT jungle--if you plan for these changes
It seems like expat Americans need a political lobbying group to watch their interests. It would seem like large, international companies might have at least a passing interest too, as they might want at least some fraction of american staff to be posted internationally.
> why would a CGI implementation use the shell to set environment variables?

This is exactly my question; that, and: if this is so, then isn't any script that uses mod_cgi (e.g., PHP, Perl, etc.) vulnerable? Yet there are multiple statements that only cgi scripts written in bash are vulnerable.

I haven't been able to resolve this apparent inconsistency in the description of how the bug works in the case of CGI, which may be a critical factor in understanding ones own vulnerability. What exactly is the order of execution here in the case of mod_cgi?
If it simply said "for under-represented groups" you wouldn't have made that comment. The difference is that they need to clarify what groups are under-represented so they (people within those groups) can approach hacker school and don't feel like I did a year or so ago when I thought "oh I can't go cuz I don't have enough money to sustain myself".
It is, but what I've found a bit funny about the entire recent 'diversity' discussion is that such things aren't already done as a matter of course.

We're in an industry where modeling, A/B testing, logging, trending and engineering for redundancy is implicit - except when it comes to hiring apparently.

If a load balancer assumed to split 50/50 was actually operating at 80/20 someone would notice. If a particular demographic were bouncing from the landing page at disproportionate rates, someone would figure out why.

Both problems would be broken down empirically and solved with a thorough post-mortem published on the company blog.

To this point, those same sort of issues applied to hiring have been largely addressed with "We've got to do better" and "The problem is upstream" with barely a word about how things managed to creep so far out of whack to begin with.

It's really refreshing to see admission of an actual (potential) problem and some of brains being applied to mitigate it directly.
Inviso: Visualizing Hadoop Performance
What we mean by "at the same rate" is that these rates are the same as the rates that men and women apply. For example, about 65% of our applications are currently from men, and men are about 65% of the people we invite to interview, advance to the next round, and ultimately admit.
"It's cool. But a language like C would be much better suitable for these microcontrollers."

When you realize why the above doesn't sound right to you, then you'll realize why your sentence doesn't sound right to the rest of us.
It may be possible to exploit the bug for "good" reasons like patching the bug, but the patches that are out now don't seem to properly plug the exploit, and as with any update there are plenty of considerations that could end up bricking the application.

Aside from the "it's not yours to fix" angle, you have to weigh the moral benefits of possibly patching the exploit, possibly crashing the application (I bet this is much more likely than a successful fix at this point), and wait-and-seeing whether the application owner patches the exploit on their own (along with the risk of a compromise in the mean time).

Edit: Of course there are a slew of legal issues with attempting this as well.
Sure, antitrust laws exist, but you don't handicap yourself before you're even breaking the law. And if you are breaking the law, then it is the justice system's job to stop you and that is who we ought to be upset with.
This is going to sound snarky, but I'm not sure how else to ask it: why should I (or anyone not an expat) care?

It seems to me that the complaint is from people who don't live in the US and have very little attachment to it other than convenience.
The entire bootstrapped startup ecosystem is starting to feel very used car salesman/infomercial to me.

Everyone talks about how successful their startup is selling
books on how to be successful in startups to hopeful startup founders....

Another ebook? really? and +$200 for the video supplements.
Uh, but isn't that because it turns sane people into crazy people?
Can I still maintain my US citizenship as an Uruguayan citizen if I so choose?
I remember that one, and I remember thinking that it looked pretty good, but will fail because of the name. Good to see you changed it.
Yes, I did have a good reason: Our initial tests indicate that the organization is not vulnerable.

To be fair to you and to me, I can understand your take on what I posted but what I posted was redacted to remove organization-identifying information. A better redaction would perhaps have been Our initial scans and appraisals are that our public-facing systems are likely not subject to shellshock.
I imagine it's more of a "check this box to verify you are not a US citizen" system. The bank could then charge your account fees if you lied and they had to deal with the IRS.

I actually think the US tax return laws are reasonable -- there have to be some obligations for citizens to go along with the rights they have.
I was under the impression that windows server is pretty stable/secure these days.
I've been using your browser for a couple months now (I think I saw it mentioned on Android Police if you're curious) and I've been liking it. It looks slick, and works exactly how I think it should. The one problem I have with it is one I'd like other opinions on, both for my curiosity and your benefit.

Frankly, it's not my daily driver because I don't know who you are and don't trust you. Using a (no offense) no-name browser is somewhat of a risk as the developer could potentially be recording personal info. Of course, I have no guarantee that Mozilla isn't either. However, and yes I'm fully aware of how silly this sounds, I trust Mozilla despite never looking at their code or knowing any of the developers.

I'm guessing privacy is important to you (since you have the option of using a VPN service as IAP) so I'm curious how you would allay my fears of using a random browser from someone other than the big three.

Either way, I wish you luck.
I think you meant "Fuck you, US Congress".

The IRS is the enforcer, not the source.
What exactly is an API platform? A competitive edge that's what
Diversity in our field is a hard issue to tackle, and it's great to see people trying to find solutions.

This said, I'd like to see the results, as I would believe the diversity problem is not as much with hackerschool as it is with the pool of applicants.
I would have thought the best way to do secure shell scripting is to use a non-shell language, e.g. Python or Go.

It seems most shell vulnerabilities (including shellshock) fundamentally come from the awful and dangerous syntax.
Semantics aside, my point is why would you not attempt to gain every bit of leverage that you can. There are no indications here that google is breaking any antitrust laws.
Did you fix this? (should be fixed in 4.4+ webview, I think, if that's what you're using for all supported devices)

https://community.rapid7.com/community/metasploit/blog/2014/...
It is not clear from the changelog for me: do geospatial queries support "changes feed" introduced in recent releases of RethinkDB? i.e. can I get notification every time a new document within a range from a point appears in the table? (w/o filtering data in application level)
Probably if the bank itself files a US tax return. I don't know if they'd be able to enforce it on a strictly local bank that only does business outside the US, but a lot of banks are multinationals.
And therefore so are other square watches! It means that the form factor isn't unprecedented. The notion that a watch face can only be aesthetically pleasing or fashionable, which is what is being argued, is absurd. There are plenty of precedents from watchmakers such as Patek Phillippe and Omega.
Well technically it is not jurisdiction but treaties as well as leveraging economic clout and agreements.
A metaphorical search engine sounds interesting but I am not going to sign up without more detailed example.
Yes, although the U.S. will expect you to file and pay taxes (as the article above explains) :)
No, don't work at AWS, for the record. But responses like this is why I'm a big fan of the Amazon platform and the point I was trying to make. Oh well.
Just wanted to say that I continue to be impressed by how seriously Hacker School is approaching diversity. Hopefully other organizations who want to diversify their communities are taking notes!
> Fuck you IRS, you greedy pricks.

That's blaming the bullet instead of the gun
Any particular reason it's not compatible with OnePlus One and Nexus 10 on Google Play? I get it if tablets aren't supported. I could get the apk but I was wondering...
If testing is the reason, I can help.
Ask HN: How to find a CTO and CFO - Social Media Company
My name is Barrett and I'm the founder of a social media events company called CreaTour. We organize events all over the nation for fans to meet their favorite Viners, Instagrammers, YouTubers, etc.

Anyway to date we've done Austin and Orlando and I'm currently working on getting investors involved and planning out future events. We've already grossed over 100k JUST from ticket sales.

I have lots of ideas how I want to expand it and recently we launched CreaTourMGMT where we manage different influencers or internet personalities. We 're working on growing our lineup.

Anyway as all this growth and awesome things happen, I need help.

I'm currently seeking a CTO (Chief Technical Officer) to help fulfill all our awesome creative endeavors.

I'm also seeking a CFO (Chief Financial Officer) to help manage everything from budgets to taxes and everything inbetween as the company continues to grow.

If anyone is interested or knows someone who may be interested please let me know!

Just to clarify... EVENTS IS JUST THE BEGINNING. As I mentioned above we are already expanding out into management and have lots of other areas we want to do as well.

barrett@thecreatour.com
Ask HN: What DB to use for huge time series?
Hi HN, I wanted to know if anyone had good recommendations for a database for massive timeseries. I took a look at InfluxDB and Druid, both of which look promising but they're young projects and I don't want to strand myself with a deprecated component at the core of the system I'm working on. Does anyone have any suggestions/advice/experience they can share to provide some guidance here?

thanks in advance!
Slightly unrelated question, but is there an equivalent for iOS app extensions on Android?
The broad market is going to use the default browser that comes with the device.
Yeah I get that - but surely just _calling_ /bin/bash isn't enough - you have to be able to pass in the arguments to bash that enable this exploit. And if you're not allowing user input into your system call, I still think this is a non issue in this scenario.
Banks operate as "one bank per country" (actually, per currency), as the only way to hold e.g. USD is to be incorporated on US soil. However, these are just subsidiaries, owned by the multi-national corporation. Any country can say "comply to our rules or don't do business here", but only a few countries are lucrative enough to actually have any power over foreign subsidiaries.
Apathy is probably your biggest enemy. Look at the struggles Firefox and Opera went to even with the random browser choice stuff in Windows in Europe, which made no significant difference to their market share.

http://en.wikipedia.org/wiki/BrowserChoice.eu

http://en.wikipedia.org/wiki/Usage_share_of_web_browsers#His...
WhatsApp Used This Pricing Strategy to Win and You Can Too
I suppose I should have worded it differently.

The structural process of changing the U.S. Code is not conducive to encourage restrictions on private industries.
Here's something: http://i.imgur.com/NCrA3TK.png

Use away, not claiming any rights on this.
Features and Scope in Open Source Software
Because the employees who have the same political and religious views as the boss are making more money.
I obviously haven't thought about this as long as you have, but offhand I think that model is a mistake. Only a small subset of people (and perhaps a bunch of companies) want things like proxy support or VPNs or other extra services. Most people just want to browse the web, so you're limiting your market a lot.

(I do think you could make value-added browser services a business, but you'd have to go to enterprises to do it.)
I had this stupid idea long ago of using "security by obscurity" and rename some commands that are typically used manually and are favorite ones of exploits like this, for ex: curl, wget, gcc -> rename to le_curl, le_wget, le_gcc etc, just for my use. Maybe it wasn't such a stupid idea.
Yeah maybe you hold everyone at the same admissions standard but it's not true for accessibility to the grants. Will we reach a society where we hope to be born from a more "diverse" race?

That's racism... it's sad that you use racism while believing that you are solving it. Please don't help based on the race, help based on the needs.

Edit: Can anyone debate instead of downvote? That's doesn't seems like an healthy way to change opinions...
So this will automatically be Chrom(ium) on newer versions of Android?
Yes you can with a query like

r.table("users").changes().filter(function(change) {
return change("new_val")("location").distance( r.point(<someLongitude>, <someLatitude>).lt(<someDistance>)
})
This is only evidence of lack of bias if you know the quality of both pools is equal. If there was a quality gap between pools, this would be evidence that you are biased.

I reiterate - if you truly want to measure bias on factor X, you need to compare to a metric that is blind to X or otherwise known to be unbiased.
Thanks. I'm still confused though:

1: Why does Bash "interpret" the environment variables' values? What is the expected result of setting a function definition as the value of an environment variable? In my worldview (which is clearly wrong) there is no reason for Bash to look at environment variables' values until they're evaluated.

2: This is probably besides the point: but since when is the empty string a valid function name? I can't get Bash to accept "() { :; }" (as opposed to "f() { :; }" as valid bash.

Edit: see my self-reply for answers.
As a permanent resident, you have a "do or die" date in your life.

If you have the green card "in" at least 8 of the last 15 years, you have the privilege of paying the exit tax when you give up the visa status. (Well, you pay extra tax only if you are "rich" for certain definitions of "rich". You will certainly have a giant mountain of tax forms to fill in.)

If you terminate your green card before that magic moment of holding the permanent resident visa "in" 8 of the last 15 years, then you can exit the United States cleanly and easily, with minimal paperwork and no risk of extra tax.

That's why I tell people who want to come to the USA to avoid getting the permanent resident visa and get a different visa status instead.

Disclaimer. I am a lawyer. I am an international tax lawyer. My office does a LOT of expatriation cases where we log people out of the U.S. tax system and the U.S. nationality system.
yeah totally.
Show HN: Jekyll Resume Project
It really depends what your source material is. Anything geared to the masses will site US innovation and competitive spirit. Anything geared to the political/military class focuses on how Russian rockets were superior to the US, and that the US had to catch up and surpass the Russians.

If you take away the cold war background, many observers seriously doubt that the Americans would have bothered going to the moon.

And yes, both countries wanted to beat each other in a game of technological machismo, because they were convinced that the other side was going to be a military aggressor if they didn't. That is something missing from today with China/India, and why I doubt the US would care much if those countries space programs surpassed the US.
Just about anything when it comes to social equality is about as far divorced from objectivity as it's humanly possible to be. Too many emotions running hot, too many knee-jerk decisions made.

It is refreshing to see an actually objective, fact-based, and mostly well thought out approach to solving the problem.
> Is there that little slack in Amazon's compute capacity?

Amazon's ability to deliver sharp prices does not come from leaving unused tin lying around in datacentres.
No, bash interprets as functions ALL environment variables that begin with '() {' on startup. If you have an unpatched bash it will also excute any trailing commands after the function definition. You don't need to manually reference any environment variables at all to be vulnerable. This is to how the bash feature of exporting functions to subshells ("export -f") works.
Meet a female UAE pilot who's dropping bombs on ISIS
From Ruby to Go: a rewrite for the future
I'm also the developer of http://getgom.com (VPN as a Chrome extension using SPDY SSL proxies), and as a fellow Singaporean when our government openly does surveilance, I __completely__ understand where you are coming from. To be fair, I'm not sure how I can solve his problem though.

Open sourcing could be a plausible answer. But fighting Google Play clones and what-not is really time-consuming and as an indie dev, my time can be better spent.

What do you suggest?
A fine idea, it's certainly interesting. A couple of questions:

1. It only connects to twitter? Why not other options including CoinBase?

2. What do you do with the code that's generated?
> There is no theory stating that the singularity of which the big bang is theorized to expand from was brought into existence from a collapsing star.

Not an issue, only that a singularity can exist, and therefore might come into being in the present.

If in a consistent physical theory we grant the reality of a singularity arising from very high matter density, then this narrows the range of possibilities for their nonexistence in the present.

So we have conventional densities easily explained by current theory, and we have the possibility of a singularity as an endpoint of increasing matter density, which narrows the discussion to the means whereby a mass might collapse past the critical density. I'm just saying this increases the burden on those who try to argue that the transition isn't possible. Especially given the absence of evidence in favor of, and plenty of evidence against, the stated thesis.
Why is this in the 'ask' list?
Links that actually detail the changes made to the algorithm, and links to the Google Play certification requirements would be useful substantiation; just like they did for all the good points they had above that.

Also, i don't understand why you felt the need to emphasize Google Play. That is exactly what i had said in my comment above.
Please define "under-represented groups". How do you divide theses groups? I love movies, does they have a group for movie-lover? What about books? I believe theses groups are based on race. Divide by race and you get what? Racism.

> "oh I can't go cuz I don't have enough money to sustain myself"

That's the reason why you should get that grant, not because you are from a different race.
I have no idea to be honest, Google Play does that sometimes.
Intents could be the answer. See http://developer.android.com/guide/components/intents-filter...
Right right, no problems there. I'm comfortable, not wealthy, and a remote worker :)
Ahmetsulek... the website link for TextExpander goes to the wrong website... and there is no way to contact you on the site. Awesome.
Yeap, it is already Chromium WebView since 4.4 :) But the performance lags behind bleeding edge Chrome since Google gives its own Chrome a more advanced version of Chromium WebView.
a sad day.. won't someone think of the executives?
Debugging Dating: Explaining dating with status and error codes
Something worth noting is that FATCA essentially makes it impossible for an institution to remain "FATCA compliant" if they have any financial relationship with a non-compliant entity. Sure, they can have such relationships, but the U.S. Treasury department can then impose a 30% penalty on any transaction that passes through a U.S. bank. Given that the vast majority of international payments are made in USD, that 30% penalty is going to be very painful for any bank that purposefully decides to be non-compliant.

The end result of that will be that the global financial system is going to be bifurcated into "compliant" and "non-compliant" institutions. Believe me, most banks/insurance companies/financial entities will find it worth their while to eventually become compliant.

The reason that more countries aren't complaining about this (and most are actually entering into bilateral enforcement agreements with the U.S. Treasury department) is that they'll then be able to get access to the same sorts of information on their own citizens that the U.S. is getting on their own as a result of FATCA.
The closest we have to such a lobbying group is American Citizens Abroad -- https://americansabroad.org/

The two major political parties have organized themselves for citizens outside the United States but predictably they have other drums to beat. The D and R debates tend to be indistinguishable from the Itchy and Scratchy Show. The ACA is even-tempered and contains both D and R members.
Defense-in-depth strategy for HTTP, nginx, and shellshocked?
Attribution of motive in lieu of an argument? Really?
Some of your documentation is 404ing.

How many dimensions are supported?

Also, does this support many projections, or just a few. I see "geoSystem: 'WGS84'" which isn't an EPGS identifier. Along those lines, are distance calculations done on a geodesic, a plane, or is that configurable (some projections are a planer, others aren't).

Also, what does this mean? geometry.distance(geometry[, {geoSystem: 'WGS84', unit: 'm'}]) Does this do a correct interpolation of degrees to meters along the path (again based on the projection) or is there a fixed constant?

EDIT: Are there commands to export WKT or WKB?
Typical for the IRS to go after the small fry while letting the behemoths get a free ride!

Meanwhile, Facebook and Apple are supposedly based in Ireland.
http://www.businessinsider.com/how-much-money-apple-avoids-p...
That the users created for Apache, database daemons, etc, default to bash for cgi.
Rethinking the Primacy of Linux in a Linux System
I think I already saw something like that.
"Cat-Pictures-as-a-Service"

Brb, working my billion dollar exit now.
https://news.ycombinator.com/item?id=8177695