skysight-inc/HackerNews huggingface dataset:
You are seriously trying to add up all the O'Reilly books and compare that to documentation published by NeXT?

I think I still have my books at home somewhere. They were by Digital Press if I recall.
What apps or third party devices out there now already are integrated with this?
PlanGrid (YC W12) is looking for awesome JavaScript hackers
Want to own a product that’s transforming the construction industry? PlanGrid (YC W12) is looking for Senior javascript and Rails engineers!

Our users are building some of the most amazing construction projects in the world, and our website is their central information point.

- As a senior web engineer, you will tackle difficult and interesting challenges for the web. Things like:

Marking up construction drawings with sophisticated annotations

- Visualizing thousands of user generated data points (like photos and building issues)

- Replacing Excel workflows with simple, powerful tools

About PlanGrid

PlanGrid is a team of 40 construction engineers, software engineers, and ex-rocket scientists, building intuitive, beautiful tablet apps for construction. We’re reinventing the way builders access information and are looking for an amazing engineer that wants to take the lead role on an app used by over 200,000 construction professionals.

We've been around for three years and we're growing fast. Unlike a lot of early stage startups, we measure our growth in revenue, and it's been exponential since the day we launched.

Learn more about us here: plangrid.com/about

We’re located in the Mission district in San Francisco (5 blocks from BART).

Sweet Perks

Unlimited vacation

Amazing company trips (what's up, 2 weeks beachside in Belize?) + frequent Tahoe visits

Construction site tours of cool SF projects using PlanGrid (past tours: Github’s new HQ, Square’s new HQ, 101 Van Ness)

Monday + Thursday catered lunches

Work from home Wednesdays

Health/dental/vision insurance with zero contributions

Whatever gear you want (most engineers have a retina MBPs and Apple Thunderbolt displays)

Free transit pass

Interested? Send an email to jobs@plangrid.com
> I'm not sure which heuristics you're referring to.

As I said, the details are somewhat hazy for me, but my understanding is that KSM maintains a notion of how recently and how frequently a page changes, in order to determine whether it's a good candidate for deduplication or whether that would just be a waste of time that causes unnecessary page faults. I could be completely wrong on this, but I don't think it's quite as simple as "if two pages are identical, KSM de-duplicates them."
There are people who want their language to be as complicated and feature-rich as possible. They have lots of choices available, including C++1*, Java, Ruby, etc.

Those languages probably don't have anything that has only one idiomatic solution. Even writing a for loop will have multiple different but viable alternatives.

Then there are people who want their language to be as simple as possible, yet still powerful enough to allow you to create all the things you can with Go.

There are very few such languages. In fact, there are a few things/special rules I'd like to see simplified in Go because they have less benefit than cost.

Having a simple language allows for some cool benefits, and if Go starts to compete with C++ for number of features, it will lose its main distinctive property.
> VS14 RTM (which, as a reminder, is scheduled for 2015)
You don't contribute to open source because you think you need to contribute to open source. That only leads to "don't know where to start" paralysis.

You contribute to an open source project because it had a bug or lacked a feature you needed and you took care of it. There is no paralysis when you have laser-focus on a particular problem.
You don't need big data for (3), we use mongo sharding primarily for spreading database write load. Not saying that it's the best way to do that but it's what we use it for and I doubt we're the only ones.
I was always impressed by this during several of his keynotes at QuakeCon the past few years. I believe it was 2012 when he was standing next to the chair talking and didn't seem to flinch for almost 2 hours straight.
I found the explanation of Boletos a bit confusing. I think I've finally figured it out. Here's how I think a transaction works when you pay by Boletos. I'll do this for an online merchant, but it works for in-person transactions too.

1. When you check out and elect to pay by Boletos, you are given a document to print. (For an in-person transaction at a store, the store would print the document). The document contains information that describes the debt you owe for your purchase. In particular, it has the merchant's bank account number, the amount you owe, the due date, and presumably an order number or something that will let the merchant know later which particular sale this document is describing. This document is the Boletos. Although it is typically printed, you only actually need the long number printed at the top or the barcode at the bottom (which encodes that number).

2. You have several ways to actually pay the merchant.

• You can go to your bank's online banking site, and show them the Boletos (perhaps by scanning the bar code if you are using their app, which commonly includes a barcode scanner for this purpose, or by entering the number from the Boletos). Your bank then transfers the money to the merchant along with the necessary information to allow the merchant to match this up with your order.

• You can go to an ATM and scan the Boletos. Your bank pays the merchant.

• You can go the post office, a lottery agent, or some supermarkets, and pay there. They collect the money from you, and send it to the merchant.

Fees go up each day after a Boletos is issued, so there is encouragement to pay a Boletos quickly. If you miss the due date, you can still pay but only at a branch of the merchant's bank.

It seems like an interesting system--something kind of between cash and checks. If used for buying online, the merchant never has any of your payment information such as a credit card number or debit card number. On the other hand, there are none of the protections that a credit card provides. Once you pay a Boletos, the money is gone. If you want it back, you have to convince the merchant to return it.

The attacks mentioned in the article mostly consist of interfering with the printing of Boletos. You go to an online site and order something. The site generates a Boletos for you to print. Malware running in your browser modifies this to substitute the bad guy's account, and you then go off and pay the bad guy instead of paying the merchant. The bad guys are getting the malware in by various tricks, including hacking into people's DSL modems and changing them to use compromised DNS servers so they can hijack attempted visits to popular sites.

Even people who never go online are being hit, because the bad guys have also compromised the POS systems in brick-and-mortar stores, so even those can print misdirected Boletos.
I worked in medical diagnostic device design for a while, and there we needed FPGAs because literally nothing else could accept data as fast as we needed. I'm talking GHz speed ADC reading, with special purpose transceivers that are built on-die with FPGAs. The fact that we can both poll data that fast and do any processing of it at all is astonishing. That's where FPGAs are going today -- data acquisition systems for anything fancier than accelerometers.
A Landing Page with good results can be seen as a validation for a MVP, but can never be one itself. Unless your business is to harvest e-mail addresses in which case you're 10 years late to the party ;)

I try to think of LP's as a catalyst instead of a validation. LP results make sure you have a potential userbase to reach out to when you suddenly have your MVP in your hands. It's like getting the cohorts ready for battle. Better line them up upfront then scrambling for them when the heat is on. In that light it's more a parallel path than a part of the MVP.
Yup, as of yesterday, they are shipping the unofficial patch. I added a simple command to test if you're patched at the bottom of the blog post.
This also applies to pure-ftpd when using an external authentication module: https://gist.github.com/jedisct1/88c62ee34e6fa92c31dc
> Why would Apple publish the app at all?

Because the intention was to have third-party apsp and device integration at launch. But something went wrong, and all the partner apps were pulled if already published, or postponed if not.
The acquisition systems in almost all medical imaging, along with their noise reduction and such are built with FPGAs. An MRI machine costs several million dollars or more, and GE sells a handful each year, so spending $10,000 on the FPGA that it's built around makes more sense than millions on spinning an ASIC that will be out-of-date the day the machine is put in the field. Not to mention the need to maintain these machines for decades, given the replacement cost. Nothing else will do, when an applications processor is too slow to do data acquisition and an ASIC isn't cost effective.
MyFitnessPal just released an update that integrates with Health today.
With little doubt, heredity does play a role. But, just because a non-smoker can still get lung cancer, should we smoke? Start with the population centers with low rates of Alzheimer's and dementia and work backwards. Even if some behaviors prove to be irrelevant, they may prove worth it for those with a genetic history of the disease.
A few were just released I think, now that 8.0.2 is out. But no big names that I recognized
I don't think it has anything to do with Spanish though, since it's really of Latin origin like many Spanish words. Culpa and words like culpable are derived from Latin (like the Latin phrase, mea culpa [my fault]).
The problem really is with calls like system("command") which ultimately translate to: '/bin/sh -c "command"'.

That is definitely a problem, but it's not the only problem. Try running this from /usr/bin (it returns lots of results on Linux Mint, Ubuntu, or Debian):

grep -nR '#!.*bash' * | grep :1:

Just as a random example, on an unpatched Debian wheezy system /usr/bin/fakeroot is vulnerable:

$ x='() { :;}; echo vulnerable' /usr/bin/fakeroot
vulnerable
I mean, sure, it's going to be turtles the whole way down if you're looking to define the universe without resorting to physical quantities (that is, dimensioned units). We don't have anything like a Grand Unified Theory yet, wherein we define Physics by means of some elemental mathematics (in the form that we can bootstrap computation from lambda calculus via things like the Y Combinator [0]). Besides, we occasionally give dimensional names to dimensionless quantities (my favorite being the engineering unit the inverse radian) [1]. It's a useful abstraction, and it seems confusing to complain about it.

So we resort to what we know, which is what we see. We can't see more than the surrounding universe, but we can try extrapolating from what seems to work. Attempting to stifle that inquiry seems a bit... I dunno, pointlessly antagonistic.

This article shows science in action, doing what it does best: taking observations and reconciling them with other observations via theory, and then fixing theory to match. It seems our universe follows certain equations which are themselves dimensionful, so I'm not sure why we wouldn't attempt to benchmark the universe against itself - we don't have much else to use. Even dimensionless numbers are only marginally useful, like alpha; it may "exist" and manifest as our universe, but it's not especially predictive.

[0] https://www.youtube.com/watch?v=FITJMJjASUs (one of my favorite videos - I still don't grok it, but I'm getting closer!)

[1] http://arxiv.org/pdf/1409.2794.pdf
Gamer-gate and the End of Culture
Linear Algebra -> Real Analysis -> Functional Analysis.

Linear Algebra and Analysis can be either applied or pure and of many different levels of sophistication.
Unfortunately this is not the case in debian. There is an open bug to replace bash with dash. There do not seem to be many bashisms in the actual script. Sadly a member of the security team did not seem to be persuaded by the utility of the switch:

> Given the many eyes now turning towards findings bugs in bash
> and building exploits with them it might be safer to fix
> those bashisms and switch dhclient-script over to #!/bin/sh.
>
> What do you think?

Actually, if you go that road, you would need to drop anything
ever calling python, perl, ruby or whatever language somehow
remotely. Some scripts might have good reasons to uses bash and
bashisms (I'm not saying that's the case here, but still).

What I find more concerning is to pass unchecked environment
variable directly from remote (or any input, actually).

[1]: dhclient-script uses bash, allowing remote bash exploits / https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762923
It seems what you really want is probability for different symbols. Have you considered estimating them by sampling?
Yes, this is not exploitable without vulnerable bash.

But to paraphrase from the thread:

However, qmail is not parsing mail from:<> and rcpt to:<> in accordance with RFC821/RFC2821. Almost anything is allowed between the <>. There is no reason that qmail should allow the string "() { :; }; nc -e /bin/bash localhost 7777" to ever pass through mail from:<> or rcpt to:<>, and thus into the environment, in the first place.

While the manpage does say what you pasted above, there's a difference between "may contain special characters" and "may contain anything the user puts in this part of the SMTP dialog".
How the Poor Can Afford to Live in New York
Why the hell would you want to do that? There's no benefit and only drawbacks over the plain old block syntax.
PSA: If you have any important information to add, enter it in the app, and first responders will be able to see it by going from the "Emergency" screen. Neat if you're allergic to anesthetics.
My understanding is that people pick node.js because of simplicity and not for speed.
So it isn't a bug if it's documented?

Seems like an interesting way to avoid paying out.
I saw a similar thing in my apache log. I shut the machine down. I will check for changed files via `find` http://xmodulo.com/how-to-find-recently-modified-files-on-li... when I get the chance.
You'll probably be interested in this: http://reassembler.blogspot.com/

This guy spent three years disassembling the Outrun arcade ROM, then 2 years re-implementing it in C++, then extending his engine with features like high fps and new game modes, and is now onto creating extender tools like track and time editors.

Along the way he found several new bugs and provides a fixed ROM which can be flashed to the arcade board. He's also got a project to develop an SoC which uses his engine to run an arcade cabinet, completely replacing the original board.

It's a phenomenal effort and an amazing blog to read back through.
http://www.guninski.com/qmail-qmtpd.html

http://www.guninski.com/where_do_you_want_billg_to_go_today_...
BMI is only intended to measure health at a population level, it's too crude to have any useful input on personal health.

And height isn't static if you're an adolescent.
I delved into some papers (and one author's body of work), and they seem quick to slap bizarre ideological interpretations on their results.

For example, I happily game-ified tedious BS jobs/classes by introducing elements of danger triggered by poor productivity. I thought the work was utterly pointless, and cheered whenever the corporation got hurt. But I needed some twisted motivation to show up and get through the damn day. And feel that my excellence was recorded somewhere.

The Kaur/Kramer/Mullainathan paper seemed to only use a barebones "endline survey," with easily-steered responses. Not in-depth interviews led by the subjects, which might've uncovered inconvenient info. (Or did I miss them?)

I also looked at economist Greg Clark's work. It's... weird... but at least his work is refreshingly honest about its political underpinnings. In a way others try to hide. And there's some interesting bits if you squint and remove the weirdnesses. For example, workers may take over a factory. But under a market economy, they may reasonably decide to oppress themselves by hiring a manager who sits in an air-conditioned room and is immune to the worsened workplace he develops.
Additional funding after demo day could take weeks or months. You would want some money to run your company in the meantime.
Ah, for an art or research project, sure.
I'd be interested in hearing why you're not fully convinced.

There seem to be 2 parts to the proof. If you have a list of primes:

You can generate another number from that list
You can always get a prime from that number to add to the list

I'm guessing it's the second part that isn't clicking with you, but perhaps I'm wrong.

As for 'stupidity', I wouldn't worry about it. The only people I've ever had call me a moron or question my intelligence in any way have always been people who were less intelligent than I am. And that's not because I'm a genius ;-)
Honest question: other than that it's tasty, is there any argument whatsoever for consuming a lot of sugar? If no, then decreased risk of Alzheimer's is, pardon the pun, icing on the cake.
So our answer has to just been to hire more developers, more and more and more developers. As the complexity grows, so does headcount.

This is why I thank the stars that I am the opensource developer, focusing on linux / Python / Django development. I cross over into SharePoint only when we begrudgingly use it as a CMS for a windows 8 app or similar.

There is an effort now to write an external service bus to manage a lot of the business logic complexity that we've baked into SharePoint. With the eventual goal of having SharePoint and other resources leverage this SB and use it instead.
As other people pointed out, it is probability using the L2 norm versus the standard probability that preserves the L1 norm. This means the following: Standard probability distributions are vectors that sum to 1. I.e. x=[0.5 0.2 0.3] is a probability distribution because each x(i)>=0 and sum x(i)=1. This means that the l1 norm of distribution vectors is always 1.

The L2 norm of a vector is the square root of the sum of the entries squared. Hence a distribution would be a vector x(i) such that sum x(i)^2 is one. This allows x(i) to have both negative and even imaginary numbers.

This awesome talk by Scott
http://www.scottaaronson.com/blog/?p=1345
explains the difference between L1 and L2 probability using the Latke vs Hamentaschen Farsical debate. See the video from the link.
I believe you would need to explicitly pass shell=True for that though.
I believe your correct. The iPhone 5s, 6, and 6+ all record the number of steps you take thanks to the M7 motion processor, but that seems to be more of a 'because it's there' thing.
The flights climbed number for me is off. I'm not surprised at that, FitBit got rid of the feature for the same reason (it's really hard to get right), but I'm a bit surprised that since it's not very accurate it was included at all.

When I experimented with my FitBit I had to exaggerate my vertical motion when going up and down stars to get it to register well. It seems I'm too 'smooth' walking up and down stairs to reliably trigger the mechanism.
This course https://www.edx.org/course/uc-berkeleyx/uc-berkeleyx-cs-191x... is a really good introduction in my opinion. It starts with the qubit and works its way up to quantum fourier transform. That sounds a little scary but the course is really well done and you just need some basic understanding of matrices like how to multiply them to get started.
Get into an environment where you can't speak your native language.

I used to tour with bands as an sound engineer and being forced to speak English instead of Dutch did a lot, fast. The only downside is that I incorporate too much Scottish slang nowadays...

I still review all my conversations for a minute to find out if I did formulate the way I would have done in my native language, and reformulate as a exercise for the next time. It's pretty Lean, but you must keep it going.
M/S Estonia accident radio transcript
And over on reddit.com/r/hackernews a bot posted links to the tweets...
It's a known behavior, and there are other write-ups (the list from lisp.org for example) that are written from the perspective that Shellshock is not a bug at all, but just an oldschool feature from a by-gone era.
Too many bots:http://www.reddit.com/r/hackernews/comments/2hn2qn/twitter_i...
They were supposed to have tons of 3rd party apps at launch, but they found some sort of (presumedly security) bug in the release build and had to pull/prevent apps from integrating when iOS 8 launched. There was even a feature area on the iOS App Store but it was quickly removed.

This was fixed in iOS 8.0.1, but that caused connectivity problems on the 6 and 6+.

Now with 8.0.2 things are finally ready, but now the apps aren't out or approved, so things aren't ready yet. Sadly this whole thing has been kind of a mess. I remember reading some 3rd parties scrambled to get an update out for the iPhone 6 and 6+ that disabled the Health functionality since Apple was temporarily rejecting apps due to the bug. I've seen a handful of commercials on TV already.

Sadly none of this has gone smoothly. I imagine in the next week or two we'll see the 'real' roll out. Maybe they'll make a big push again when they turn on Apple Pay.
Show HN: Deebrief, a better way to comment on YouTube videos
You are part of the demographic of programmers who are "anti-magic"

welcome to the club. We don't have cookies, but we have flower sugar and eggs, you can make cookies. :)
The majority of Youtube comments are garbage, so we built Deebrief to allow for insightful comments and interesting questions at particular times in a video. For a good example, see http://www.deebrief.com/#!/consume/53a37a3ba109a8020091e663