skysight-inc/HackerNews huggingface dataset:
Yes, I have the 2013 model of the X1 carbon and it's about perfect for me (running Debian). But I have no idea why they ruined the keyboard on the latest model.
If you're following the instructions here: http://apple.stackexchange.com/questions/146849/how-do-i-rec...

...then this patch needs to be modified (different line numbers) before it can be applied to the Apple version of bash:

--- parse.y.old 2014-09-25 13:42:17.000000000 +0300
+++ parse.y 2014-09-25 13:41:39.000000000 +0300
@@ -2503,6 +2503,8 @@
FREE (word_desc_to_read);
word_desc_to_read = (WORD_DESC *)NULL;

+ eol_ungetc_lookahead = 0;
+
last_read_token = '\n';
token_to_read = '\n';
}

Testing locally, this appears to mitigate both known (so far) vulnerabilities.
Not really the same. That's rather like saying because I have a chassis and some wheels and an engine piled in the garage, I have a car. They have to be connected together in the right way to make Shen. Shen is available under Clojure and has been for about 2 years.

I'll also add that IMO there is a difference between having these features in a library and having them in the language standard. Common Lisp for instance, has had pattern-matching in various forms, but if you look at the code contributions on comp.lang.lisp these extensions are not often used.
Might want to add pricing information.
How do you disappear from sight?
The Quora reply was very illuminating: the astrophysicist mentions that Einstein and Eddington already suggested the same solution as Mitra did long before him, but most people today don't think it's the correct one. I guess Einstein also lacked the CAMBRIDGE AFFILIATION to get any recognition for that solution.
> Buchwald’s decision, which is being appealed, did not outlaw public access to the beach, but left the ocean as the only way for the public to get there.

Shuttle boats to the beach as a (new?) business?

(If my now-retired father lived close there, I could very well imagine him doing that to earn a few bucks extra, and to give families access to a nice beach).
Tap In, Check Out: Swipe culture is tinderizing our lives
I'll also add that I'll be asking for volunteer contributions on the Shen news group to help assemble this test suite. So people who want to expedite us here can do so.
Not strictly true, Cricket is making a comeback in the US it seems: http://www.theatlantic.com/entertainment/archive/2014/08/cri...
Linux Bash Bug: A Bigger Threat Than Heartbleed
Really? Not that I'm doubting you. Could you please provide me a link so that i can educate myself?
You can choose to become a programmer, but you can't choose to be born Indian. I imagine you would take offence if I said I am proud to be white? If people keep saying they are proud because of things they didn't choose, then that breeds social differences.
true, I can mark the free ones, thanks!
> Am I the only one agrees with the author that generics probably do more harm than good

It's really the same debate as 'Dynamic' vs 'Static' languages, since without generics your code is relying on runtime type checking in anything remotely complex, thus is effectively a dynamic language.

Personally, I'm of the opinion that people that don't like static typing only feel that way because they've only used the shitty implementations in Java or C#.

Regardless, This is a religious war that has raged for decades, and isn't likely to be answered anytime soon. The answer really comes down to "It Depends". I fall firmly in the 'static typing is good' camp, mainly because I have hard evidence to back up my opinion that it results in significantly fewer defects.

(Specifically, very clear reports from from issue tracking systems showing our defect rate in production dropping by 90% (!!!) when we switched from Groovy to Scala, with a notable increase in productivity).

Some of the developers complained, since they had to learn knew tools. But being professionals, they learned new tools and were better off for it.

Now while I'm an extremist religious zealot about proper static typing being the one true way, I'm quite mindful that, for many developers, that tasks they are working on just aren't complex enough for it to make much of a difference in practice - they are able to test all edge cases and deploy stable software to production, just with a little more runtime testing than they'd otherwise need.

Some languages - such as Go, or pre-enlightenment Java, do not implement Generics, and thus require runtime casting in many cases. In these languages, there's still a degree of compile time checking, just not as thorough as it should be. As with dynamic languages, they can work with no perceived issues for projects up to a certain size and provide a reasonable halfway point. Beyond this, you're going to hit a wall.

As to your argument that Generics do "More harm"? I'd strongly disagree. If you're unfamiliar with the gotchas generics introduce (i.e. Variance can be a mindfuck), then they can seem difficult and problematic. But like any other professional tool, once you've gotten over the learning curve you're more productive with it than without.

tl;dr If I wanted to bang a few pieces of wood together, I'd feel comfortable using a Hammer. the learning curve small, and I can connect those two pieces of wood in no time.

My Uncle is a carpenter. As a professional carpenter, he bangs pieces of wood together all day long, every day, for his entire career. As such, a nailgun is a more appropriate tool. While being more complex to use and having a steeper learning curve, he's a professional, and uses a professional tool to do a professional job. Occasionally he might want to bang some quick project together in his shed, and getting out the nailgun is overkill, so he uses a hammer for the odd thing here and there.

I'm a professional programmer. I use professional tools, even if they have a steeper learning curve and might be more complex. Occasionally I want to whip up a quick script, so will just hack it together in Python.
> Why should ownership of land be equal to the right to restrict access to said land?

For the same reason that ownership of a car equals the right to restrict who gets to drive the car: that's what ownership means.

> Where I come from (Norway) a land owner needs a good reason to deny the public access to the land.

Then no one really owns land in Norway. The government owns he land and grants people development rights.

One could argue that this is how things ought to be (e.g. http://www.henrygeorge.org/pcontents.htm). But such theories are historically unpopular in the U.S.
It's actually the other way around. For most stocks, if the last tick was upwards, the next tick is more likely to be downwards (where a "tick" is any time the best bid or ask moves, and "price movement" means the change in the mid price).

For example, taking a random stock over a random three month time period, I compute that after an uptick, the probabilities for the next tick are -

P(uptick) = 39.3%
P(downtick) = 56.3%
P(no change) = 4.4%

where "no change" typically happens when the best bid and ask change by the same magnitude, but in opposite directions.

Of course, this is not very useful for trading, because it doesn't give you enough of an edge to overcome the bid-ask spread.
The Uncatchable
> the people always get the government they deserve.

I wish that unintelligent idiom would die, because it's absurd on its face, and falls into the neo-democracy trap of assuming that you can treat a citizenry as a faceless whole. I'd even question whether the ability to choose between two very similar parties qualifies as democracy.

Like it or not, parties are elected by themselves, then governments are chosen from these parties indirectly by the media. The number of citizens that actually engage with policy directly to make a self-informed choice are a statistical anomaly.
Unladen Swallow?
Beleggen in appartementen
The Importance of Staying True to Your Roots as an Entrepreneur
+ makes it easy to add two numbers. It doesn't make it hard to make invalid assumptions about what adding two numbers together actually means.
Where is the kernel exploit in this? Whats so kernel about some script which probably just replaces nginx with a malwared one?
Eight months back, three scientists from ISRO did an AMA on /r/india where they answered a lot of interesting questions and provided good insights into the good, the bad, the hopes and the struggles at ISRO and of being a scientist in India. That AMA will likely answer many of the questions here about ISRO and its operations. For instance:

"All nations wanting to launch to Low Earth Orbits at low costs approach us. Germany, France, Israel, Norway, Denmark, Italy are examples. Yes, despite ESA. Because PSLV is a cost effective and reliable launch vehicle for launching to LEOs."

And of course, Reddit being what it is, there were cute questions and answers as well. Sample:

Qn: "Let's face it. You're definitely "cool" now. Were you "cool" growing up? How was your school/college life in general? Do women dig ISRO scientists?"

Scientist 1: "Oh yes, cool all the way. I don't know about other scientists but they sure dig me."

Scientist 2: "He's kidding. I know for a fact that he is more single than Lance Armstrong's nut."

More here: "We are three ISRO scientists here to answer your questions -AMA" http://www.reddit.com/r/india/comments/1ujcmo/we_are_three_i...
Mysterious Social Network ‘Ello’ Explodes in Popularity
Finance Startup Nubank Nabs $14.3M in Sequoia’s First Brazil Investment
> wget shells out to bash

Why oh why would this ever happen?

This hole bug is way overblown. Not every small program on the planet "shells out to bash", and if they do, thats one seriously messed up program.
Slightly OT: I installed SwiftKey (currently the top option under iOS on this website), and I really like the concept (would at least like to try it out, even though I've developed a pretty good proficiency with two-thumb typing), but I don't like the fact that it's hard to re-do/correct the last word. I can either type slowly, which defeats the point of the keyboard, or type quickly and have to do the slow process of backspacing the last word and re-swiping it (which slows you down a lot).

Is there some magic gesture I'm missing, or is there a different third-party keyboard that has a similar idea but is better in this regard? I'm tempted to pay the $1 for Swype but I don't want to bother to do that and then discover it has similar problems.
Can anyone guide on how to avoid this bug? Is there any patch for this?
There's an Apple Store download 'TouchPal' on the Android page. I like the minimalist design.
I have an instance listed as scheduled for reboot in 2 days but haven't received an email. Without this post I'd have been caught out on Saturday wondering why I'm getting a ton of message queue connection errors.

Downtime I can live with, but unreported planned downtime? Not impressed.
That patch doesnt fix the whole issue.

The fix right now is to mv bash ohhellnobarsh && ln -s dash sh

Or such.
Yes, if you're selling subscriptions. SEO is not meant to maximize subscription revenue, but to get people to click for free, aka ads. Which will it be for them?

Two recent pieces are leading me to believe that NYT is floundering around, without a real cohesive online strategy, still:

[1]http://www.cjr.org/the_audit/the_new_york_timess_digital_li....

[2]http://www.cjr.org/the_audit/the_new_york_times_cant_abando....
thanks! fixed it..
That makes me think of another facet of this bug: it can bypass logging by sudo of the executed commands.

A quick look at journalctl's output shows that sudo by default, at least on the distribution I'm using, logs only the original user, the tty, the current working directory, the target user, and the command. It does not seem to log the environment variables.

So you could use an innocent-looking sudo command (like "sudo ls") to hide doing something else as root, without using obvious commands like "sudo bash" or "sudo -i".
Yes, I had that one too, also this:

24.251.197.244 - - [25/Sep/2014:10:07:47 +0000] "GET / HTTP/1.1" 301 178 "-" "() { :; }; echo -e \x22Content-Type: text/plain\x5Cn\x22; echo qQQQQQq"
'straya!

I'm not sure how to feel about Australia's response to ISIS. The right-wing side of politics seems to be going completely over the top in trying to crack down on terrorist cells operating in the country (we did just have two policemen stabbed in what appears to be a terrorism-linked beheading attempt), arguing that security is more important than freedom.

Then we've got the left wing side of politics, which is trying to do all it can to downplay the risk and argue that there is literally a 0% of an attack on Australians, despite an incident just days ago and dozens of Australians having travelled to fight in the Middle East who may return.
Which has not been standard security practice for last 20 years - Do Not Use System or Execve or any other stuff from your php/web-scripts. Not. Ever.

This bug only affects people who dont care about security.
Some come in 2 version, free & priced, eg Swype which you currently link only with the paid version
> One reason may be that large companies want ownership of a modern, C#/Java/Go-like language

Quite true. A major reason why c# exists is that circa 2000, Microsoft wanted ownership of a modern, Java-like language.
The article does not contain an apology. It contains an excuse ( old code ) and expresses Google's hope that the evidence can quickly be deleted. The words "sorry", "apology", or their derivatives and synonyms do not appear in the link.

Saying it was a mistake does not acknowledge the possible harm actual persons may have suffered. 'Mistake' references the possible harm Google suffered as a result of its actions, e.g. poor press.
> Those values have types, so those get tested as a side effect without any additional effort.

Not in the presence of implicit conversions, often insane in dynamic languages. (like, 12 + "34a" gives 46).
I should point out that it's not at all surprising that the "top 4" rats performed very well. If you got a couple of hundred people, animals, or random number generators to trade using any set of rules you like, and then looked at the top 4, you would almost always find that they outperform, because that's what being in the top 4 means!

The real question is whether the same four rats would be the outperformers if you ran the experiment again.
Both Debian and Fedora are good options. As summed up nicely by the "Introducing GNOME3 3.14" video at 2:15 [1], here is a probable order of 3.14 landing in various distributions:

1. Arch

2. Fedora

3. Debian

4. Mageia

5. SuSE

[1] https://www.youtube.com/watch?v=7p8Prlu3owc#t=135
Agreed - after watching John Oliver's piece on student debt in America I'm pretty convinced that Australia's system is fine. Tony Abbott's only issue was introducing deregulated fees at the same time that he cut funding to universities. The latter is what's really causing the issues sa far as I can see.

By the way, the way it works is pretty much that you have to reach an income threshold before you need to start paying back your student loan.
Why would it be messed up if it's true? The Unix philosophy is to compose complex functionality using lots of small tools. Shelling out to existing tools instead of reinventing your own makes total sense.
Cost of Living 1938
1.49$ (+€0.14 hidden fee)  GoDaddy
By the way, there's a little "up" triangle next to each post which means "this" ;).
Someone else in this discussion mentioned that the badness is the exact four characters "() {" at the start of an environment variable. Filtering out all environment variables starting with these four characters should be 100% effective, and I wouldn't be surprised if Apache, sshd, sudo, dhclient, and others start filtering out values that start with precisely these four characters.

I don't think these four characters at the start of an environment variable are common; if they were, this bug would have been found out much sooner. It should be safe to filter them out.
Switching to the En-US Keyboard Layout
The same applies in Scotland as well [1].

It's always interesting to see the reactions of people who view property ownership as some kind of natural law when you present them with systems of property ownership that differ on fundamental points. Property ownership is entirely a social construct that differs significantly across different cultures. I don't see what basis you have for calling your preferred legal system the one true meaning of ownership.

Nobody really 'owns' land anywhere. It's always a set of rights granted to you by the government, unless you are an absolute monarch yourself.

[1] https://en.wikipedia.org/wiki/Land_Reform_(Scotland)_Act_200...
> it doesn't really have the same semantics as the one language they are used to

His complaint is that Swift does have mostly the same semantics as Objective C, and offers only a prettified syntax.
That's funny, showing my age, but "Shellshock" immediately brings up a completely different song in my mind: https://www.youtube.com/watch?v=JUhZ30D7tYU
Plumbing services?
I am aksing for advice for good plumbing services in US? I have searched the web and didnt find any satisfying results. Can anyone help me? Thank you!
The Wild, Secret Life of New York City
I don't think it's overblown.

If you run a web server that generates its own CAPTCHA using something like ImageMagick, or call system() to gzip something, you could possibly be vulnerable.

Never underestimate vulnerabilities and the way people can use them, or even combine them, to exploit systems.
I think you're referring to sweet-expressions. http://srfi.schemers.org/srfi-110/srfi-110.html
In case you want to test for ShellSheck https://suite.websecurify.com/market/shellshock
Movie-makers set to get FAA nod for drone filming
Serious question - how do you run utility programs to do things without system()?
How Ashish J. Thakkar Is Helping African Entrepreneurs
Hi everyone,

We just published this tool to test for Shellsheck. https://suite.websecurify.com/market/shellshock

Do a scan over before it is too late.
ShellShock – Online Testing Tool
> Ree88. J. Reeds, ‘‘/bin/sh: the biggest UNIX security loophole,’’ 11217-840302-04TM, AT&T Bell
Laboratories (1988).
For Android, I really like SwiftKey, and have been using it for years. Its predictions are very accurate and it (un)learns very quickly.

But since the last updates (maybe when they added emojis? I'm not sure) it has become laggy and unresponsive, sometimes I end typing a phrase and have to wait several seconds while I see the text painfully appearing one letter at a time in the screen. Also there is a period of 1-2 seconds after I send a message when I can't press any key, as it will be ignored. I don't use Flow.

However, it has something that I can't find in any other keyboard: two simultaneous languages. Every keyboard allows to select several languages and change between them, but in SwiftKey they work at the same time and you can use both seamlessly, and for me that's irreplaceable.
"really tiny" is the most important point?
This is a long verbose article that contains some confused ideas, however I think it also contains some very interesting ones which could serve as a basis for further consideration.

The two ideas I find most interesting here are:

A) True random numbers cannot be computed by a Turing machine whereas human minds may have access to them. The author does not address the fact that it is relatively easy to augment a TM with a physical RNG. I'm not aware of any evidence that such an augmented TM can solve problems a simple TM cannot.

B) Human minds seem to be able to always abstract to a higher level meta-language whereas programs/TM's seem to lack this ability. I have a feeling this issue may be key to the difficulty in producing machines that seem "truly intelligent" but I don't currently have a clear grasp of this problem.

The author makes a great deal of use of the term "consciousness" without being very clear about what he means by it. He seems to be using it in the sense of what I would call "true intelligence" or strong AI rather than in the sense of "capable of having subjective experiences".

I have generally tended to hold the following "beliefs":

1) Algorithms cannot have subjective experiences (strongly held).

2) A strong AI algorithm could exist (somewhat weakly held).

Issue (B) above leads me to question belief (2). Perhaps it will turn out that "subjective experience" is necessary for strong AI and hence that no strong AI algorithm exists ?
Ask HN: How do you backup your systems?
Show HN: Tally – Create polls in no time
> This bug only affects people who dont care about security.

And those running code written by people who don't know any better...

If you are an admin for servers running third part code that you have not verified every line of, you need to be concerned about anything like this just in case said code does something that isn't considered best practise.

Also if the CGI code path uses affected functions, you are not going to be protected by avoiding using them in the code that is eventually called.
Howdy!

I built Tally because I couldn't find a poll tool which was both super simple and clean. Let me quote James Murphy: “The best way to complain is to make things.”

Plus I wanted to figure out what are the biggest challenges fellow startup founders are struggling with, therefore: http://tally.tl/GQDy3

If you would have any questions, please do shoot.
And whether they require full access on iOS.
Not only will the type-system not substitute these types of tests, but also the reverse: you just don't write tests for types, as they are subsumed by the value tests, which is why I object to the canard of "the type system saves you from having to write trivial tests for types".

And yes, a type-system can do certain types of "forall" analyses that are difficult or impossible with tests, but that's a different topic.
IANAL, but I am a property owner in the US.

While the rights of property owners are important, they're not absolute. It's prudent to recognize that there can be compelling (yet possibly competing) interests that require limits and restrictions to be placed on those rights.

As an example, say you own a piece of land. Someone else buys the land that completely surrounds it. What prevents the other landowner from fencing you in, effectively denying you access to and from the property that you own?

The only way to legally guarantee this doesn't happen is to limit the rights of the other owner (see http://en.wikipedia.org/wiki/Easement for more).

Some other limitations/examples:

The air rights over your land - aircraft are free to fly over your land without needing your explicit consent

Zoning and occupancy restrictions - you're not free to build a strip club in the middle of a suburban housing development

Safety of others - you're not free to booby trap the path to your front door, since that would foreseeably endanger people who are legally visiting your property (for instance, mailmen, public servants, and even pesky door-to-door salesmen)

This is not to say that all of these limitations are fair, or that every competing interest has merit. However, there are enough of these interests that many of these limits are codified into law.

[edited for readability]
Australia is a country with free health care available to all citizens and no constitutional right to free speech. Hence laws banning making racist statements in public(amongst a great many other anti discrimination laws)

You are deluded
You know what all these "ramp ups" for mass surveillance in the so called "democratic countries" tell me? That this sort of stuff has been going on for quite a while, but now much of it has become public, and they are scared some of them could go to prison, or at least Courts could stop them from having these powers, so they try to "legalize" all of it now.

Even if people test its constitutionality, it will probably be a very long battle, to get rid of all of these powers, and they'll use the powers as much as possible against the people questioning them to try to maintain these powers.
Grow Your Business with A/B Testing