skysight-inc/HackerNews huggingface dataset:
An expert copywriter would know he has to optimize for the "ADHD crowd" (which is about 80% of people on the internet), for example by mentioning he provides copy in at least one of the subheads, instead of keeping his head in the sand like you suggest.
Audience simulation with rapid fire messaging
I expected this to be a less-featureful version of Webpack, but it looks like the big difference is that you don't have to hit "save" to trigger a hotswap; the changes occur as you type them (as they do in Dev Tools).
FTC: Butterfly Labs Case Not Part of ‘War on Bitcoin’
The Watson Effect: How Will Social Media Change the Gender Equality Movement?
It is just free., but what is it? Here:

> Ello is a simple, beautiful, and ad-free social network created by a small group of artists and designers.
I generally agree with your post.

However,

> if something isn't immediately profitable, it won't be done, period, no matter the long-term benefits.

This is not true. Many companys make huge amount of long term investments that will not be profitable for a while. Companys that fail to to do these kind of things will have long term problems when the market changes and they have nothing new to offer.

> People like Elon Musk do space in spite of free market, not thanks to it - he had a dream and enough money to push cheap rockets down the market's throat whether it wanted them or not.

This is also a strange phrasing. Musk could not do what he does without market demand for his product, he has lots of money but not enougth to fully devlop everything he wants without profit. He might not have started the project to make space flight cheaper, but thats the effect the market cares about and thats why its a substainable project.

Space flight is also very special because regulation are way beyond what you normally face. Goverments around the world are not to friendly to people building these kinds of rockets. SpaceX for example only has americans working there because of these regulations.
'he generally took a dim view of VCs and preferred to bootstrap"

that's pretty counter-intuitive in today's bubble-blowing tech climate. we praise companies for raising the most money from the hippest VCs rather than customer retention, technology, and market position
Yeah. That's not really a business model though, more of a pipe dream. You cannot support a service with one-time "very small" optional charges. Unless, of course, you start to twist users arms, in which case these charges stop being optional.
I'm pretty sure in many places this would be illegal

Definitely in the UK
Consider the statement "the government owns all bottles of vodka, but it allows you to control it within certain limits"?

Is that statement invalid? If so, how?

I believe your thesis, and in my words, is that in Norway "the government owns all land, but it allows people to control parcels of land within certain limits."

I have a hard time coming up with a good definition which says the first is incorrect but the second is correct.
Suggestions to lock down applications to least privileges and to set up monitoring on servers are a good idea, but they're not going to help that much here. You should operate under the assumption that an attacker who gets any code exec on your machine under any uid is going to have root, usually milliseconds later.
I thought Chromebooks were selling like hot cakes, then I asked the guy in Officeworks if they sold them and he said, "We used to, but not any more". And now Samsung are pulling their Chromebooks out of Europe.

Are Chromebooks overhyped?
FAA expected to approve drones for moviemaking
and by "winner" you mean "financially successful jerk"
There are several companies that work on crawling public pages and matching profiles to identities to provide recruiters work experience, phones, and emails like entelo and gild.
Ok, let me see if I have this straight, since I'm not seeing an end of the world situation here.

This requires a webserver to be running CGI (mod_cgi or whatever) and the get request has to go to a valid page, correct? So in this case `GET /cgi-bin/hello ... yada yada yada` /cgi-bin/hello has to be a valid location.

So, explain to me how this is any worse than any remote execution vulnerability in something like PHP?
Did anyone else notice that the BFL site is still configured to take orders for 10GH/s units, accepting bitcoin payments only? I thought that words like "shut down" and "closed" were pretty clearly reported from various sources. I can't imagine courts are going to look favorably on this action.
Okay, thanks.

The broken window just doesn't strike me as a central part of the broken window fallacy. To me, the important part is that people see the glazier getting money in exchange for a service, and think that economics is happening and this is a good thing; but they don't see that if the glazier didn't get that money, the bookseller would.

So I'd say that yeah, zizee is committing the broken window fallacy, even if the broken window itself has no analogous component in vis reasoning.

(But I'm not going to argue about it if you continue to disagree. That would be a profoundly boring argument.)
The point of CT is just to keep a log of every certificate issued. It's about transparency and little else.
Broken in Opera 12, astonishingly badly. Literally no way to contact anyone of their team in any way (email, twitter) but through ello itself.

Edit: It was pointed out that there is an email adress, though a very skillfully hidden one.
In France, you deserve 3 years in jail and a fine of 45000€ for this.

http://www.legifrance.gouv.fr/affichCodeArticle.do?idArticle...
What is Employee Turnover?
Imo, it's better to keep all components separated in their own repos for any project which can really be described as 'large'.

What if, for example, you completely rewrite your backend system without changing its API spec at all? Having the history of the backend and mobile app linked becomes a bit odd at this point.

What if you're using a system which deploys your repo? It may expect certain things to be in the root of the repo, and you certainly don't want your mobile app code to end up on your application servers.

Honestly, I'm not really aware of any instance where it is actually better to lump together multiple parts of a system into one repository. Maybe you made some bad architectural decisions which makes it easier to do so, but I don't consider that 'better'.
Only if we let it be.
Sorry, but the metric isn't vague, it's bullshit. You can't promise a conversion rate. Probably not even a conversion improvement, since the people you're targeting won't have enough traffic for testing. I'd stay away from making such claims if I were you. Making nice, clear landing pages with good copy is a good enough value proposition for people who suck at writing and/or building websites.
I automatically reject everything that needs an invitation to join, no offence.
Study Links Anxiety Drugs to Alzheimer’s Disease
Attached via the 25-pin parallel port, no doubt?
On Chrome, the back button wouldn't take me back here to make this comment - it kept switching between the first two items in their list.
No it isn't. If people keep throwing around these kind of assertions, these very serious psych diagnoses will lose all specificity and become useless.
ShellSchock vulnerability test tool (over HTTP)
The attack isn't against terminal shells. The biggest risk is against things that use the shell implicitly like system()/popen()/etc and they all use /bin/sh

It's certainly possible to be at risk if, for instance, you had a CGI script that was specifically written in bash (i.e. starts with "#!/bin/bash") but that's a lot less likely.

So definitely patch your Debian/Ubuntu/etc machines but do your Redhat-based ones (and other places where "/bin/sh --version" indicates that it's bash) first.
Playing Devil's advocate, AT&T may have been a barrier to the development of the Internet, but they also owned and funded Bell Labs, whose research (quoting Wikipedia) "are credited with the development of radio astronomy, the transistor, the laser, the charge-coupled device (CCD), information theory, the UNIX operating system, the C programming language, S programming language and the C++ programming language" for which "seven Nobel Prizes have been awarded".

In any case, AT&T was a legal monopoly, not a market player with less than 70% of market share like Google (according to comScore). The lessons are not necessarily directly applicable.
It's a good idea, but I would expext most applications vulnerable to not run as root. You would need to be root to patch the bash executable.
>Are there legal issues about fixing a vulnerability in a system that doesn't belongs to you?

Yes. Because it doesn't belong to you. Therefore you have no right to 'fix' it.
Ello looks like it raised a seed round from Fresh Tracks Capital in Vermont:

"Ello.co is a beautiful, simple & transparent ad-free social network. Ello is designed with the end user in mind, not advertisers, promising “You are not a product”. The site is a collaboration between Paul Budnitz, the graphic design lab Berger & Föhr, and the technologists at Mode Set."

http://www.freshtrackscap.com/fund-iii-companies/Ello

Does anyone know any more about Fresh Tracks?
What's the Best Node.js IDE? Sublime, Atom or Cloud9?
I generally register to every service with a different email address. The main ones I get spam to are the ones for Adobe, Groupon, Lastfm, Linkedin and oddly Battersea Arts Centre.

Edit: That's based on a quick look in my spam folder, not anything statistically sound.
Optional charges seem to work pretty well for Wikipedia. Although who knows how well that will transfer to a social network.
Would you mind copy + pasting the paragraph that answers the GP's first question? I read that whole article and found nothing indicating why the Windows socket library can't automatically use this fast path on all connections to 127.0.0.1.
Machine Learning and Deep Learning Resource
This is extremely exciting, particularly if it can be made to work with emscripten. Common Lisp in the browser, here we come!
Isn't there an important distinction between a sociopath and psychopath?

(or perhaps you are asserting that the generous use of xxxxx-path cheapens the gravity of the situation for those suffering from mental illnesses)
Phablets, pain and iPhone 6 Plus
Jack Dorsey’s Ad Agency Couldn’t Make a More Pretentious Website If It Tried
$5 will buy a full month of server time on a modern cloud host. I imagine that if they can extract that much out of a user, they can make it go a very long way. This is especially true if the optional charges include things that consume large amounts of disk or bandwidth (video/pictures and associated long-term retention).
Exactly. Tumblr couldn't put money together with the themes people were buying, even though that was pretty lively.
The traits are definitely overrepresented in the executive suite.
The $84.50 Reason Apple Wants You to Buy That Big iPhone
> No, the article only claims that a singularity cannot arise from a collapsing blob of matter.

If true, it calls into question the existence of the initial singularity thought to precede the Big Bang. The alternative -- that the working of physical theories depends on circumstances -- isn't a very good one.

People sometimes hypothesize that this universe arose as a fluctuation in some other universe. For this kind of speculation to have any credibility, we have to assume that any singularity can be explained by physical theory, not just present-day singularities.

My point is that a theory whose workings depend on the circumstances isn't a very powerful one.

> We have no evidence that the singularity that existed at the moment of the Big Bang was the result of a collapsing blob of matter.

Look at this logically. If there was a singularity at the moment of the Big Bang, then it arose from the same physical theory that creates them in the present, but on a bigger scale. The alternative is to argue that physical theory is inconsistent, depending on circumstances. That sort of condition undermines physical theory, makes it more like a soap opera than science.

> In fact, it might not even make sense to think of that initial singularity as the result of anything at all, since causality requires time and there was no time before the Big Bang.

Yes, true, but once time exists, then we can start describing phenomena as having causes and effects. So physical theory only applies after time zero, not before. But if, at time zero, there was a singularity, we can try to apply physical theory to it. I'm not saying we will be successful, but it would be a mistake not to try.
Looking at the recipes a lot look very good but I would tweak every single one to my tastes so having the ingredients sent would be pointless, I'd either have stuff I don't need or stuff I need but don't have. Which completely defeats the purpose. If I wanted "someone else's food I [mostly] can't modify" I would get takeout. I guess that's why these services don't appeal to me, for me cooking means I'm in complete control. Recipes are suggestions.
I'm sorry, but the UI is so confusing and clunky, it does not appeal to me. Plus, if we don't want ads, there's alpha.app.net - scalable, has a powerful API, actively developed, and embraced by many of us already. They just need to rebrand as this whole subdomain/alpha thing bothers.
This could just be my opinion, but you're selling custom design and using Courier New as your type - that's not very convincing. After browsing your other pages I was convinced you could design, but I would not have guessed that from this landing page.
They could, you can try for yourself:

git='() { echo hello; }' bash -c git

but it's generally understood that attackers should not be able to provide enviroment variable names. If the attacker can do that, they can also provide an alternative LD_PRELOAD variable.

Though IMO, yes this is risky.
Outlandish Labs Offers Rails Bootcamp Scholarships
5 Valuable Consumer Products and Services Companies
The For-Profit College That's Too Big to Fail
For Mac OS X, until Apple releases a software update, I've applied the original CVE-2014-6271 (shellshock) patch and am going to apply the CVE-2014-7169 patch as well once it passes review. Repository and instructions to reproduce without trusting me are located here:

https://github.com/ido/macosx-bash-92-shellshock-patched
FF too. Same issue.
Find your next iphone
sudo can be set up lots of different ways -- including such that there's no password needed.

> its not like this is a logged in ssh session

That's not correct -- whatever user is executing your CGI scripts is the "logged-in" user in bash, right?

Obviously that user should be quite locked down, and should not be allowed to run sudo at all, let alone without a password... but there are so many amateur server admins out there that I imagine there are quite a few servers where this is a serious problem (with or without sudo access enabled for the executing user).
Is collaboration valued in modern startups? I hadn't noticed.
That last link... for Murdoch to accuse anyone of lowering the tone of the debate is truly laughable, well done Google!
Nothing on the linked page says anything like "Facebook killer" or "gets the timing right"
When the project tanks, everyone will be the first to leave the sinking ship.
You Can’t Be All Things to All Customers
If this is an academic study, why do you offer a cat option in the gender question?
You can tell who is an entrepreneur and who isn't by those who talk shit about Larry and Oracle.

Some here seem to think Entrepreneurship has changed into a kumbaya group hug where we just attend conferences together , check code into GitHub, might make a bit of money if we ask nicely, or sell "ads", and hope for an early exit because of our sheer brilliance, leaving the dirty work to our future parent.

The most valuable companies on the other hand look for sustainable competitive advantage, or as Peter Thiel would say, monopoly. That definitionally implies "all others must fail" at competing with you. That doesn't mean you don't have partners, it means in the area you excel at (hopefully a big area), you are the only game in town.

With Oracle it never was quite the only game in town, but it never lost being the clear revenue leader in RDBMS (and middleware after BEA).

If you are in an area where you can't do that or it's hard to do that, you're not going to build a super valuable company - maybe a super valuable online community or open source project. But not a really valuable company generating tremendous wealth beyond asset speculators.

Perhaps that's what's changed about entrepreneurship, and why you see Larry derided by some here. It isn't just about building companies anymore, it's about funding communities that might become companies with enough tinkering and luck.
The NSA - and I expect the rest of the five eyes, are archiving a very large amount of encrypted traffic in anticipation of being able to analyze it at a later date. What do you think that Utah data center is for?

Unless you know the data will be useless in a short while, it's safe to say you're still talking on the shiny side of one sided glass.
Why would the semantics change if you use an interpreter rather than a compiler?
How much of the cost of a Facebook or Twitter is because of resource-heavy data mining? Ello doesn't have much data to mine beyond what you'd find in a typical early 2000s perl guestbook script.
I meant specifically in the source code but you're right.
I read a piece by a (very reasonable) VC explaining the detriments of excess LP cash in the VC industry. The premise was that if 100 companies get funded in a space (say, local delivery) where normally, 10 companies would have, then even the ones who under normal circumstances would have "out competed" the others through superior service and product will have a tough time vs the torrent of cost cutting and "competition" from the slew of competitors, thereby making the entire industry unprofitable.

In a way, it reminds me of the consumer electronics market, especially the laptop PC market. Fierce competition forced down profits, and now seemingly every company is focused on cost cutting rather than making something we actually want to use. Both consumers and producers have lost out (woe is me who cannot buy a quality thinkpad anymore!).
Good point. So I guess one would have to combine that with another vulnerability to be able to get root privileges.

We could also imagine a worm contacting the owner of the server and asking her to fix it.
Ca$h for Koch$
Their best recruiting sergeant right now is Facebook. (And, to a much lesser extent, G+.)

FB's use of social engineering to induce personal disclosure, and their abuse of personal content for marketing, has sensitized a proportion of their customer base who want social media but don't want to be advertised at: the sort of folks who paid for the ad-free premium version of Livejournal, back before LJ gave up on the anglophone web and turned into a Russo-centric system. Ello looks like positioning as a logical sanctuary for privacy-savvy social media users. I suspect their long term plan is that they will start charging, eventually ... but not until they have enough users to be cash-flow viable.
Warning: Do not update your iOS 8 software
Another solution is to build your go executable in a different container and import it into a busybox container. That changes the layering from:

debian
add go, bzr, mercurial, python, ...
build executable

to:

busybox
executable

That reduces the amount of data that needs to be downloaded on new boxes by a factor of ten or so.
Open-source multi cloud orchestration
> explain to me how this is any worse than any remote execution vulnerability in something like PHP?

Why does it need to be worse than something you might find in PHP? If it's a worm that's been found in the wild spreading by exploiting a remote execution vulnerability in bash and cgi, isn't that bad enough?
Storage and bandwidth is still a huge cost.
Someone compared it to Livejournal. I never used it, but no one complained about the comparison, so it might be apt.
Facebook Further Reveals Plans for Internet-Connected Drones
Bash Vulnerability CVE-2014-6271 – Worm-able and Possibly Worse Than Heartbleed
Ever heard of open source? Lots of startups are using and contributing to it, using their participation to attract both users and developers. Yeah, I'd say collaboration is valued quite a bit.
for example by mentioning he provides copy in at least one of the subheads

I repeat:

The subtitle states "I'll WRITE, design, and code a custom page..."

keeping his head in the sand like you suggest

Where did I suggest that? So many dramaz. Jeez.
Learn Swift with a live mentor (Only 30 spots available)
Maybe as a way to mark people who didn't treat it very seriously?
Interning with the Airbnb Payments Team
New Generation of GM Crops Puts Agriculture in a ‘Crisis Situation’
Show HN: Hirable for Developers
Hi Guys,

I'm in the process of building a website for freelance developers and I'm looking to seed it with developers to help me beta test it.

The site, Hirable, connects recruiters from startups, tech companies and agencies with freelance developers via a simple follow model.

After developers create their free profile, recruiters are able to follow them and get up to the minute updates on their availability via email and alerts; making sure hirable developers can line up work the minute they're free.

I created the site to essentially solve a problem a lot of us have when searching for someone to develop and create an idea for us. It was hard to find a developer, let alone find one whose work was on par with what I wanted to create.

We are close to launching in the coming weeks, and would love for you to sign up. Once our MVP is finished, we will send out information to create profiles, and give you a chance to become familiar with the platform!

http://wearehirable.com
The idea of using bash to do anything with input coming from the internet is asking for trouble, really... It's just a flaw with how CGI works generally, and how PHP etc. encourage you to build webapps.

It's the same principle as SQL-injection attacks (and the flaw is there for the same reason! It's the obvious quick solution to just query mysql with "select * from users where username = " . PARAMS['username']....

But this is far more dangerous -- injecting malicious SQL can reveal data, or break things. Injecting malicious bash commands can reconfigure your server to do whatever they like.
> This is not true. Many companys make huge amount of long term investments that will not be profitable for a while.

I guess it depends both on how long is the long term, and on the quantifiability of the returns of investment. There was a nice thread about it yesterday, with a wonderful quote:

"My former boss (CTO of Panasonic) once told me that the only way to do real R&D is to have a monopoly that allows you to hide the margins in cutting edge R&D. Everyone else was doing just product development."

https://news.ycombinator.com/item?id=8357318

Entrepreneurs avoid doing "blue-sky" research because the return is unpredictable. It might be zero, it might be a little bit, it might be an entire new industry - but you can't predict your profit. That's why we have governments that fund basic research with no expectation of getting anything from it immediately.

> This is also a strange phrasing. Musk could not do what he does without market demand for his product, he has lots of money but not enougth to fully devlop everything he wants without profit.

True. What I meant is that both here and with Tesla, he used his money to force this demand. They had to do a lot of work to get electric cars to the point people actually started to want them. Ditto for rockets; he needs them for his goals, so he made them profitable where previously they were not. But toilet-paper businesses [0] (which are the majority of the market) went elsewhere, there are plenty of lower-hanging fruits that you can monetize if you don't care what you're selling.

[0] - https://news.ycombinator.com/item?id=8319102