skysight-inc/HackerNews huggingface dataset:
As someone with chronic pain, nope, I don't think one builds up a tolerance to it. Instead, I think I'm lucky in that the severity waxes and wanes. Below some threshold it recedes from being pervasive, going into the background and I have to go consciously looking for it to see if I'm still feeling it.

Exceed that threshold and it's always there, front and centre, just pain. At that point, as throwaway91214 says, I consciously try to ignore it.

When it exceed the next threshold, life pretty much stops for awhile until it recedes again. Those are the sleepless nights and long, minimal days.

(I use the notion of thresholds for simplicity, it's perhaps closer to an exponential scale).

I've had mine for about eleven years. Such is life.
Consider picking up a copy of the Joy of Cooking, or another good encyclopedic cookbook. In Joy, at least, the recipes are fairly concise -- but there's a wealth of other info in there: how to tell when specific vegetables are ripe, cuts of meat and their uses, etc. It's one of the only reference books I actually use, in any genre.
A default installation of FreeBSD is not affected, as FreeBSD does not have bash installed by default.
That's really cool.

For the connecttous.co link it would be nice if it was clear that it will actually send email to the addresses entered in the fields - it's not just a demo/toy. I may have inadvertently spammed someone when I was playing around with it.
Comparing apples to oranges here. This is a portrait mode device for people who like to read content. If you want to compare landscape you would compare iPhone 6 to Z30, and well, the Z30 has a better reading surface.
Last I heard they were focusing on the healthcare vertical, but finance kinda makes sense too.
I wouldn't say nice, just full of himself. You're below him in a sense.
FOIA requests for medical records, which is much of what we're talking about, is really quite difficult.
Introducing HoloBase
A potentially more likely scenario might be: "If I upload [script].jpg to your image service and you run a resizer that takes IMAGE_FILE as an environment variable as input, then I will install my rootkit".
In the words of Vikaram Sarabhai, the founding father of ISRO:

"There are some who question the relevance of space activities in a developing nation. To us, there is no ambiguity of purpose. We do not have the fantasy of competing with the economically advanced nations in the exploration of the moon or the planets or manned space-flight."
"But we are convinced that if we are to play a meaningful role nationally, and in the community of nations, we must be second to none in the application of advanced technologies to the real problems of man and society."
I'm a working scientist, and this really doesn't reflect my experience in the slightest.
Building an Anti-Virus Engine (2002)
I finally understand how it can be used.
FastCGI accepts name/value pairs from the server and most default language bindings against it will turn them into environment variables for the benefit of code that expects to be able to reference them. This can get tricky if you do anything that spawns a process with your code later.
http://www.isup.me/www.facebook.com
It's just you. http://www.facebook.com is up.
Hearing That Things Can Change Helps Teens Dodge Depression
> But some analysts say that BlackBerry must overcome several significant hurdles to re-establish its phone business with the Passport and a second model, the BlackBerry Classic, which has not yet been released.

You may get your wish.
I think every language would be more productive if it were interpreted at development and compiled at production.
Ships and trains are the most fuel efficient ways to transport things - and things include people.

In terms of the bad PR, I confess I'm biased - I'm an epidemiologist, with a fondness for GI infections, so norovirus is near and dear to my heart. But cruises have good marketing, the failures like that are relatively rare on a mass scale, and it's a cheap vacation that feels like luxury to people.
/bin/sh is the shell called by system(3) and used by portable scripts bundled with packages. Those things can't use anything but standard sh anyway, so having them run bash is overkill. "Don't use bash as your /bin/sh" isn't the same as "don't use bash as your interactive shell" or "don't write bash scripts"
In fact it is a similar situation if you believe that the mission itself does not produce sufficient value.

The salaries are not merely money being cycled around in the economy if the labor being paid for results in the scientists not having time or inclination to produce other labor. Furthermore, it is likely that the resources launched off of the planet could have been used for something else.

Whether or not it is equivalent to the broken window fallacy really does depend on subjective assessments of the value produced by the missions. However, it is also worth noting that even the broken window fallacy is not some universal law, and relies on its own assumptions. In certain market failure conditions destroying something and fixing it as a mechanism for increasing the velocity of money could have a net benefit.

Although it is very useful to distinguish between the real economy and money transactions as though money is an abstraction for resources being traded around, the best policies also acknowledge the existence of money, as well as friction in the economy.
My father taught me to never eat at a restaurant that had photos of the food.
You aren't likely to see this again, but in case it helps, the following setting in Sublime Text's key bindings may help you:

```
{ "keys": ["super+v"], "command": "paste_and_indent" },
{ "keys": ["super+shift+v"], "command": "paste" },
```

Though you should always be careful when copy/pasting code.

I'm not sure how it encourages classes, I personally didn't even use classes at all for the first long period of my CoffeeScript life. And now only do sparingly.
Nacl makes it hard to screw up the constructions. It doesn't make it hard to make invalid assumptions about what a signed encrypted blob actually means.
I've been monitoring my Apache logs all day for the string "() {". So far Robert Graham's scan is the only match. This is what the log entry looks like:

209.126.230.72 - - [24/Sep/2014:22:07:56 +0000] "GET / HTTP/1.0" 403 492 "() { :; }; ping -c 11 216.75.60.74" "shellshock-scan (http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-internet.html)"
Latin American Startup Flipter Is Acquired by Silicon Valley Company
People have weird ideas about the protective powers of a "full security audit". This is Bernstein, Lange, and Schwabe's code. There aren't many auditors qualified to review it.
Ello – A simple, beautiful, and ad-free social network
Now that you mention it, that would also be an issue for the technique you describe; specifiable to the rounding characteristics for truncated numbers.

It's probably a better design idea to have a predictable sequence of float (like, application dependent) results and randomly select from within said sequence.
With all due respect, I have a question. Where does the pain come 'from'? Like, if we hurt ourselves, the pain comes from _that_ place. When it hurts, does it hurt _from_ a place or just a general feeling of pain over the whole body?
I did, actually. Value types are nice but annotation processing can do pretty well:

https://github.com/google/auto/tree/master/value

I'm honestly not seeing as big as lambdas (or generics in Java 5). If you think they really are that big, perhaps you could explain why?
I'm sorry; perhaps I'm slow. I see the problem, but how can a stranger set an environment variable?
Short answer is. I'm not a faculty in a university since I tried and choose not to try any longer. I'm not in pharma because of patents. So getting a public grant is hard. It's even harder because my old boss is now in charge of the relevant funding stream and she shouldn't be working with grants that further her former avenue of research.
This is fantastic.

Maybe I just missed something, but I've never seen a link shortener like this and that surprises me. This seems like the kind of thing that should be on all SEO "Must-Use" resource lists.
At least for the server size, entity framework partially solves this with code first migrations. Using the code first model you can define your data types in code then have entity framework generate the appropriate sql code. If you change your data structure down the road you can autogenerate a migration that changes the database from one version to another. If you deploy a version that is a few migrations ahead then it will execute the proper migrations one after the other.

For the client side it's usually a good idea to specify a versioning relationship between server and client. AWS, for example, you request the API version you want to use: http://docs.aws.amazon.com/AmazonSimpleDB/latest/DeveloperGu...
If black holes don't exist, what are those massive things at the centers of galaxies?
I think, neither did they.
To add to what others have said here, I'll point you to the authors of TweetNaCl, which sort-of competes with Sodium:

http://tweetnacl.cr.yp.to/papers.html

Little is said, other than that TweetNaCl is smaller and thus more easily auditable. No criticism. No pointing out failures. Considering the source, that's IMO a serious compliment. (For comparison, read what is said of OpenSSL...)

So in short, Sodium is a great library. It was forked from NaCl (the most trustable there is) and has some good features added, like scrypt, BLAKE2 and ChaCha.

I think NaCl, TweetNaCl, and Sodium are a great ecosystem, each with different strengths. All great libraries, and the only ones I'd recommend unless you're doing TLS.
Note that the image maintainers (starting with tianon above) reserve the right to change the base distro they use for the images. So they can truly use the best tool for the job, now and in the future.
typically doing a \COPY is going to be much faster than an INSERT in general, so a SELECT/INSERT may end up a bit slower. i haven't benchmarked it, but am pretty sure i'm right here.
Your suggestion is uninformed; and John Sarno's advice is pure quackery. Please don't speculate like this on severe medical conditions.
3 Frameworks to Create Powerful Presentations and Tell Compelling Stories
Great work! I saw your map on The Next Web [1], so it looks like you're already getting some good press.

My first thought was this map reminded me of Cerebro, so I expected to be able to find individual characters too. That could be a nice next step.

And after that, maybe some map overlays to show the geographic distribution and progression of various Marvel Universe events.

Then ?

And finally, profit!

[1] http://thenextweb.com/insider/2014/09/24/interactive-map-x-m...
I think this problem is mostly due to using Go, whose libraries are not mature.
PHP never "spawns shell for weird reasons" - it would spawn shell if you ask it to spawn shell. Just as any other language would, if you ask it. Still, many apps may use shell indirectly - e.g. to execute some system function, to call out to some tool, etc. - and those may be vulnerable even if original code was not CGI script. Moreover, you don't have to run specifically bash - any command execution may go through shell, which may be bash, e.g. Runtime.getRuntime().exec() in Java. Thus it may be not very easy to pinpoint all the places where this bug could sneak in.
They're complexity anomalies. Things can't resolve themselves out and so stay in.
You have no idea how hard making this video was for me. Also I got lucky because a friend had connections to a cameraman who worked for top chef. Also we tried before, and failed spectacularly (and we may yet fail... The campaign is still a smidge below where it needs to be to tilt and that doesnt take into account interest decay.).

If my scientific bona fides are in question, you should check out my publication record. It's not in spectacular journals (which as a scientist would probably be as suspicious to me as a flashy video is to you), but, I've done spectroscopy on a metastable peptide, isolated and characterized an anticancer compound, and improved an enzyme fourfold with hand picked site directed mutagenesis. I'm no Linus Pauling, it's true, but I feel fairly accomplished.

I don't want scientific funding to go to most professors. Seriously, have you actually met those guys?
Appropriate versus inappropriate is irrelevant, in my opinion. Can it work? Yes. Is it more likely to backfire and make your team miserable? Yes. Is it something that creates a hostile work environment? Debatable, and definitely situational.

I would actually argue that when done right, this sort of smack-talk can be healthy and reassuring to the recipient. It's a bit perverse, but I like a situation where my coworkers respect me enough to make fun of my mistakes without me or them worrying that it actually calls my competence into question. I've worked with people who you can't poke fun at, and it's usually because they actually are somewhat incompetent and making fun of their errors would be cruel.
Yes. And competition at a global scale like that should be good for everyone too.
More like they scored a goal for humankind.
The early stage research on 9ds was funded by the ACS.
Watch Cirque Du Soleil Dance with Drones
In a webserver, like Apache, environment variables are set from headers sent by the client, e.g. each header like Cookie would produce variable like HTTP_COOKIE. These variables can contain any data that the user sent. If Apache uses external code (like PHP, Ruby, Python, etc.) to process the request, it may pass these variables to that code, and if that code runs some command on the system, these variables may be passed to the command shell, which would lead to code contained in the variable to be executed at that point.

This can also happen with other service processes - such as OpenSSH, that sets ORIG_SSH_COMMAND variable to the command that the user supplies. That may allow people to break out of restricted accounts -i.e. accounts that are supposed to run just one command (ssh-based services, like SVN or Git, may be an example) and run arbitrary commands under such user.
I wish someone would write a headline like:

"Why 750 million Indian citizens cannot enjoy basic sanitation facilities after 60 years of gaining so called independence of their nation"

Seriously....
Not him, but the biggest and obvious one is the ecosystem. There are no apps for the bloody thing, and the most charitable thing I could say about the Android support is that it's weak and half-baked.

The device and OS itself is solid, but nobody cares if there are no applications for it. A smartphone without apps is not substantially different from a circa early-2000s feature phone with worse battery life.
This is what Atlassian Stash does.
This thing looks incredible, aesthetically. If there were an Android option, I'd seriously consider it.
Forget ABCs, This Adorable Little Girl Can Name All the Fonts
CGI scripts is the most obvious way - when executing a CGI script, each HTTP header gets translated into an environment variable - but I have no doubt there's all sorts of odd network-facing apps which set environment various and then run a command, even if you're not running CGI scripts.
I'm in the same boat (though I've been in said boat for a while), and while it certainly could be worse (as per the OP), it's not much fun either! Glad you've found a couple of things that are at least mildly helpful.
Great work! Please also create this for alternate timelines, i.e. Age of Apocalypse :D
In UK pubs you normally order food/drinks at the bar and pay upfront. You get the drink right away and food is brought to your table once it's ready.

This is even better - as you don't have to stand and wait at the bar for your order to be taken.
Needs more details, a couple of examples that instantly spring to mind:

Do you spread requests out across multiple IP's to avoid bans / rate limiting?

Do you run javascript on the pages?
My CentOS now says "ignoring function definition attempt" after the upgrade, so I assume CentOS update is now out.
There are a lot of scripts the do something like: curl 'http://myradframework.com/script.sh' | bash

That'd be pretty easy to do this if they weren't honest or man in the middle attack the site.
How Nations Fare in PhDs by Sex
Lots of internet facing software fills env vars with user data: Apache may set several SSL_* vars and HTTP_* vars, ssh may set LC_*, LANG, TERM, etc; procmail and other smtp filters probably have their fair share too.

The moment any child process of these hit a system() or popen() like call, /bin/sh initializes and may hit the bug.
It does run .APK files... but portrait mode isn't going to work with 90% of Android apps.
It's comparable to living in a third-world country. In the eyes of someone from a country with universal healthcare it beggars belief that people actually want to live in the US. It just looks like you're all boiling like frogs with no real understanding that your situation is abnormal even by the standards of many developing countries.
Honestly, when you're as fucked as BlackBerry is now, experimentation can't be all that bad; this might be crazy enough to work! That said, this is clearly not for me.
Would a space with multiple aisles (think grocery store) be hard to map with your current algorithm? Or if I add beacons to each aisle I should be good to go?
The wrong world cup. In India, it means the Cricket World Cup.
It started in a limb (right forearm where he had trauma from a routine surgery). For many people with RSD/CRPS it doesn't spread. Interestingly people used to go as far as amputating the painful limb but phantom pain remained. For a small percentage of people, it spreads over the entire body. They call this Full Body RSD. My father has this so his pain is everywhere but most often it is in his extremities. At it's lowest pain levels he says it feels like the worse sunburn he ever had. At his most painful moments he describes it like being stabbed with knives.

This TEDx talk by Dr. Krane (he works with children with RSD/CRPS) describes the disorder and where the pain comes about half-way through http://www.ted.com/talks/elliot_krane_the_mystery_of_chronic...
What the inside of a spaceship might really look like
they can't use the OS and apps as a differentiator. reason why Nokia went with Windows - which is also questionable.

going with Android reduces you to a pure hardware OEM. see the Windows laptop world how great that is.

my rationale is that switching BBOS with Android solves nothing for BB.
After 6 years of programming, I'm still a developer. What am I doing wrong?
I started my programming in 2008 and have worked on many big as well as small projects. I work on .NET platform mostly. I've worked in big companies and have done freelancing for 2 years leaving my job. This year I moved to a different country and started job as developer (I took whatever I got). I'm quite sure I'm not a bad developer. I have good feedbacks. I've completed projects and earned appreciation. Last week a new guy was hired in my company as Project Manager and he has only 1 year experience and that too not in programming. In networking and stuff and has done some PM stuff for couple of months.
Now I think I'm not in the position that I should be. I can constantly see things that are going wrong in the company. For example, what the new PM does is constantly come to developer and ask a lot of things rather than documenting it. He hasn't been even able to choose right tool to log issues in 2 months. Uses 2-3 different stuffs. Doesn't communicate the progress to the team. Rather chooses specific developer and goes on with it. In other words, isn't connecting to the team.
If the company decided to hire inexperienced PM, why didn't they promote me or even my fellow developer to do so?
Is this happening because I've got brown skin? Or am I doing something wrong? I'm not so interested to do PM job but I'm concerned I'm not being a good developer, or something lacks in me.
Having to use lambdas just to get the syntax to allow for a one liner makes your point about reformatting.
The best comment to date. This 75 million will come back in droves as India now high gears its space exports.
Mailchimp is a great platform. If you are building a list for a blog then SumoMe is great for email capture. What are you using this list for?
Grants and big donors to push through preclinical and a for profit partner for clinical is my vision, but I am open minded to alternatives.
Ask HN: What service should we use for customer support?
We've been using zendesk for a while but recently ran into API limits. Their search and view performance is also not optimal. What are some YC startups using for customer support? Our needs are:
1) must handle high volume of tickets
2) support for searchable metadata attached to tickets
3) API
4) fast and flexible view & search system (would love regexes)
The future of Python
Wikipedia has rather more information on this, including (in the History section) a bunch of examples of this at scale going back to the 70s

http://en.wikipedia.org/wiki/Compressed_air_energy_storage
Could it be that God just spoke the universe into existence? ducking for cover
So true. $75 million is not a lot of money for India. The Prime Minister's Office just spent $50 million on latest equipment for his bodyguards (secret service detail). ONE Indian company just signed a deal with the Nepal government to spend $1 billion for ONE hydro project in Nepal. And it is nowhere in news in India.
Startup Idea: Elastic Cloud for Music
So only "True" currencies are $1m signed bitcoin transactions now?

That level of No-True-Scotsman shows confirmation bias. How much have you put into bitcoins?
Vinod Khosla Loses Legal Battle to Keep Martin's Beach Private
Thank you for sharing this.

After 10 years of being heavily medicated to handle the pain, my father too is rarely thinking clearly and has a very poor short term memory.
GitHub: Security vulnerability in bash addressed
Just noticed that this URL will get flagged/blocked by network admin content filters ;)
That works for me too. I was first unsure but breaking it up into an export Z=.... and then running bash -c 'echo date' on a separate line seems to execute essentially date > echo.

Can anyone explain what's going on there? Seems like defining a function within a nameless function; how does it end up with this redirect? I'm not sure what the exploitabiliy of this is; is it just essentially $1 > $0 ?
As a counter point.

I am somewhat of a food snob, but I don't like to cook. Fast food and cheap (aka applebee's) food is off the table, but the traditional wait time at mid to high end restaurants is simply wasted time. Honestly, I find ethnic restaurants often have a great balance as it's often vary good food without the overhead of an 'up scale' restaurant. But, american restaurants rarely mix casual dining with great food.
Seriously?

I gather that you are not an Indian, and if you really are an Indian then either you are an illiterate about what's happening in country, or you are an NRI earning in dollars in US who really don't care about India, except in writing these snarky comments.

If you are not an Indian citizen, you still should know the truth before you talk.

750 million Indian citizens aren't enjoying basic sanitation facilities because of the corruption in India. There was a Politician who was a son of Chief Minister who pledged more than 75 million in an election. This is just one example of the amount of corruption in India. Every state in India are filled with those politicians who are corrupt, and they own huge amounts of Black money.

So, I don't see what is your basis in typing in useless comment, when this money was spent as per the Budget allocation.

And finally, please don't write something unless you know the facts properly. The basic sanitation of all Indian Citizens will be improved, if the Political situation of the country is improved not by stopping Technological Advances.

Sometimes, if you don't have anything to contribute, it's better to close your computer and get out than to write these kinds of comments.