skysight-inc/HackerNews huggingface dataset:
> ("American" would have been a better substitution, but maybe you judged it to be less effective as a rhetorical hammer?)

Probably, but I'm not American, so I didn't think of that. The only other commonality I have with Armstrong is being a man, but I don't think you would approve of that any more.
I'm not there right now, but my parents are saying that's exactly what he's proposing - the retro-active bit.

It will impact me, I still have ~$20k of HECS debt that I didn't pay, and because I'm not earning money in Australia, I'm not paying it now.
But it is not her car. It is owned by the lender and she failed to meet the contracted payments.

These people need to buy cheaper, used cars.
This is actually quite common and acceptable if you want to interact with a piece of software for which there is no library or api. One real world example is producing thumbnails from Word documents using Libre Office.
Except for the "therefore Obj-C is superior" part, I agree that Option types in languages such as Swift and Scala are unfortunately marred by those languages' need to be compatible with Obj-C and Java, respectively.

I understand idiomatic Scala won't use null, just as I assume idiomatic Swift won't use nil, but nevertheless the fact that they allow nulls weakens their type systems.
Don't think "how can an attacker get me by prepending '>' or '<' to a commandline?" (You did realize that '<' is also possible, right? Did you check what else is possible?)

Think "the buggy bash parser is still exposed to an attacker, and nobody really knows what it can be made to do."
This is the time I need to pop up every so often. Vinod has a very negative reputation in the Valley. He used to be known as the biggest anti-founder VC when he was at Kleiner. He'd come in, use sharp elbows to push founders around and out, then companies would crumble. He's learned but not enough.

His new marketing of himself has helped (as has Rabois), but you can't change who he is. When given a chance, he'll take advantage of early stage startups. That's why you don't see many companies he's made. And he's been at it a long time - 27 years! He gets in the way because it's all about him and his huge, insatiable ego. He's much more old school VC in that way - but in the Tom Perkins vein, not Don Valentine. It's his way because it's his money.

The only way to keep Vinod honest is to get other investors. If he's your lead, the knife isn't far from your back.
Actually, Clang supports most MSVC extensions. Here are links to two of Clang's test for __uuidof:
http://llvm.org/viewvc/llvm-project/cfe/trunk/test/CodeGenCX...
http://llvm.org/viewvc/llvm-project/cfe/trunk/test/CodeGenCX...
Evolving Puppet for the Next 10 Years
Generational Garbage Collection in Firefox
If I understand correctly, the law is aimed at banks to disclose assets of americans with more than 50k in savings, the banks are overreacting and not handling accounts of any americans as a result. So I wouldn't say the law targets the average Joe (I know very few average Joes with $5k in savings, let alone $50k), but the banks are. Perhaps its a calculated move to get people upset with the IRS/Treasury to create backlash. I have no idea whether the root law impacts US corps.
Unlimited Storage, Unlimited Sharing and New Pricing
Taking funding from a venture capitalist means giving them an ownership stake and a say in how your business operates. If you don't trust them, don't get along with them, and don't see eye to eye with them on basic fundamentals, then you should not take their investment.

I personally wouldn't take an investment from Vinod, but I'm not in the market either so he hasn't lost anything.
>The short: We now have need-based living expense grants for black and non-white Latino/a and Hispanic people, as well as people from many other groups traditionally underrepresented in programming.

I disagree with this, it's racist.
Pester your congress rep about net neutrality using the Countable App
A Tale of 2 Countries: The Cost of My Mother’s Cardiac Care in the US and India
Very cool board. I wonder how difficult it would be to port the software to other ARM boards like an Arduino Due or Teensy 3.1.
It should. He pushes around the little people. That's first time founders and especially those not connected in the Valley.
It's part of a broad government push to repatriate American funds into American banks. There are similar regs coming (proposed?) related to Americans owning foreign corporations. All the same playbook; just keep funds on-shore, in this case by making life miserable for foreign companies that deal with American money.
No she didn't. See, that's the problem with quoting out of context, i.e., what Rupert Murdoch is best at...
Question for you: picture the most evil person you can think of, alive or dead. If they offered to fund you, would you accept it?

If you answer no, than you must admit that the character of the donor comes into play with choosing to accept venture capital. Therefor the parent's question is perfectly valid; everything else is just your tolerance for "evilness".

If you answer yes, than I daresay you are narcissistic at best.
> Yes, a local beach access dispute would not way into [sic] the decision for funding from him.

s/way/weigh/ ?
p0sixspwn 1.0.8 Download – iOS 8 jailbreakiOS 8 jailbreak
:(){ :|:& };: – A fork bomb in Bash
From the article:

“It looks like the patch does not fix every case of environment variables being used to pass on executable code. We are still testing the patch, and hope to have more information on it soon,” Boileau said.

A number of other security experts highlighted the incomplete nature of the fix on the Red Hat Bugzilla page.
https://bugzilla.redhat.com/show_bug.cgi?id=1141597#c23
Congrats ISRO :)
No one here is evil. VCs have a very important role to play in the startup ecosystem. Their job is to produce significant returns to their LPs. If you can't deliver that, then you shouldn't have taken their money.
Yes it is the "principle of [the] thing." That principle being, of course, that the circumstance of having immense wealth ought not imbue a person with the ability to restrict access to protected natural resources, like waterways and beaches.

Also, "one little stretch" may apply now, but "slippery slope" comes to mind. That isn't to say it's definitely a slippery slope to "completely privatized access," but any time another Vinod succeeds at challenging the law chips away at the above principle. I'm glad he lost.
DevOps and Infor’s Journey to the Cloud
He is being downvoted probably because he didn't add anything to the conversation. Just paraphrasing the problem isn't enough.
Right-Picking the First Project to Go DevOps On
Hey guys, slava @ rethink here. I'll be around all day on HN to answer questions.

We'll be doing a live webcast[1] today at 1:30pm PT showcasing geo features and some example apps you can build with them, would love for you to join us!

[1] http://www.meetup.com/RethinkDB-Bay-Area-Meetup-Group/events...
I'm confused why someone would expect a company to never improve their product. Short of the ridiculous (not changing their search algorithm) what would you consider a favorable response?
It's exactly the principle. If VK won, many many others would push for the same and soon it's no longer one little beach but many, many miles.
There are many network daemons besides httpd which, if they delegate request handling to any other process or system functionality, may:

1. Invoke bash somewhere in the call stack
2. Pass request data via environment variables

If both of these are true, then the daemon is presumed vulnerable. You may still be vulnerable if (2) is false (by design) yet the attacker is able to set environment variables.

CGI / Apache / httpd is the obvious vector, but don't be lured into complacency.
Yossarian Lives – The Metaphorical Search Engine
No, you fundamentally and dangerously misunderstand the bug.

Your "exec($SomeVar)" example is a standard, unsanitized-input-passed-to-command-line type bug.

Shellshock does something fundamentally different. Everything on the actual command line is irrelevant to shellshock.

What happens is that the child Bash inherits env vars from the parent (which is often the web server). The shellshock bug is that the ENV VARS THEMSELVES are evaluated by bash as instructions.

Your actual PHP or whatever can be fully up to best-practices, sanitizing cookies and inputs, etc., and still fall vulnerable if one of the server-set environment variables like HTTP_ACCEPT_LANGUAGE has a malicious payload and ANYWHERE in your code, a subsequent system() call deep within some imported module gets fired off.
Wow, thanks for the downvotes, everyone!

I wonder how that is justified, since my question generated 10 informative replies, five levels deep.

Does anyone dare to tell me why they downvoted my comment?
Note that if you are a green card holder, you are subject to the same rules, and face the same denial of service by the financial institutions.
There's a pretty significant difference between giving everyone that isn't a white male an advantage and putting everyone that is a white male at a disadvantage.

I've no idea what that difference is, exactly, but I do know that you're not allowed to question it under any circumstances.
I don't think anyone can get quality copy in 24 hours. Research alone takes weeks.
"56 year old millionaire retires."

Wow, that's heartwarming.
Maybe the hackers themselves are using the services and don't want to rock the boat :)
You can configure your instances to automatically shutdown and restart instead of migrating:
https://cloud.google.com/compute/docs/instances#onhostmainte...

Alternatively, you have a short period (60s) before the migration occurs during which you can lame a service: https://cloud.google.com/compute/docs/metadata#maintenanceev...

However, I'll grant that both of these lack the "in your own convenient time" portion of your desire.
I didn't say useless, I said less useful to a hobbyist.
I'm interested but don't want to use the "play" store. Can you provide some other download link?
Really impressive program! I'm glad that these guys are encouraging diversity, but focusing on keeping the bar for admission the same across all candidates.
We are in agreement, Daala must indeed beat the top dog by 50%.
I think you're making a mistake by offering this for free.

The kind of people who care enough about their web experience to install a new browser are the kind of people who won't mind parting with a few £$€ to do so.

To be profitable, free apps must target the broader market, but this is a relatively niche product. I don't think you'll get enough IAP fast enough to be sustainable.
If Khosla is an option, I'm sure you have others.
> "... as of today most of your friends will be asking their other friends how to get an invite to the invite-only network to secure their coveted user name."

This reads like an Onion article.
Just wanted to chime in and say that I'm loving reading your comments on this topic.
AR-Pinboard Radar
A Thousand Kilobots Self-Assemble into Complex Shapes
No, super wrong. Underneath the hood there are all kinds of things that go on and result in system() or similar calls. Think about every module in CPAN / PyPI / whatever. Any non-trivial Web app has a high likelihood of eventually, somehow, somewhere, causing a system() type call to fire off.
Cool tool! Thanks!

If you're accepting feature requests, it would be nice if it accepted port numbers as well. Also a way to check a subsequent website without reloading the page first would be nice.
Random question:

If you had dual citizenship (e.g. Canadian + US), do you even need to tell a bank about your US citizenship when opening an account?

Can't you just open it as if you were a Canadian only? Even your US SSN wouldn't be associated with it, so for all the US G and the bank know you're just someone with the same name and birthday.

As a random aside: The US Gov is practically the only country in the world who tries to collect income tax from US citizens living abroad. The fact that Americans who move away have to file US tax returns for the remainder of their life is bonkers.
> Brand new search by metapohrically

By what?
Eeeeyup. The color of their post would seem to concur with that. You disagree or question and you're immediately voted down to #000001 or thereabouts - nevermind your motives, you're an (insult) (insult) for daring to ask.

This is a very simple and pretty inoffensive question, IMO. If your goal is diversity and helping the disadvantaged: Why race instead of socioeconomic status?

By the way, they're not wrong. Racial discrimination has a pretty black and white objective definition, folks, and clicking the down arrow on my or any other post does nothing to change that definition.

It does, however, make this community look bad and knee-jerk-y. Do think before clicking, please.
this is fascinating. i love the mix of scientific experimentation with an art piece. i'm wondering at which point the improvements in the newer generations will taper off... maybe a rat could be the next warren buffet?
Why do you think Javelin is not suited for the broad market?
Why don't you want to use the play store? Just wondering is all.
Pro and contra of images encoded as data URI for performance purpose
It's 50k in "financial accounts", which includes retirement funds, and the financial institutions expose themselves to enormous penalties if they fail to report a single customer.
"Steep penalties add muscle to the law. If a foreign bank – not just in Canada, but anywhere – fails to report even a single US citizen as a customer to the IRS, the US Treasury department would withhold 30% of the banks’ US income as penalty."

What do they mean "US income"? How do they enforce it?
This is a dupe of [0] from yesterday, with ~100 comments.

[0] https://news.ycombinator.com/item?id=8365061
In anticipation of the comments we've gotten in the past:

* We hold everyone to the same admissions standard, regardless of race or gender. The grants are our way to create a more diverse applicant pool.

* Hacker School is free for everyone

* We admit everyone who applies who we think is a good fit. No man has ever been rejected because a woman was accepted, so there's no way in which this harms men.

* We auto-generate pseudonyms for applicants, so our initial application review focuses on people's code and what they write, not their race or gender

(I'm one of the founders, and I'm happy to answer any questions folks have about Hacker School.)
Portugal just ratified the Convention on Mutual Administrative Assistance in Tax Matters. Basically, the convention is an agreement pursuant to which Portugal agrees to use its own courts and police to collect unpaid U.S. taxes from U.S. citizens living in Portugal.
He knew the terms of beach access when he bought his house, as did you.
Is it really that huge? The config pages are pretty simple, and it looks like it's just served using Python's built-in SimpleHTTPServer library.
I'm going through this IRS bullshit -personally-. I was under the impression filing taxes was simple, hell why would they make it complicated.

But nope, if you live abroad it's twice as complicated for an ex-pat.

Worse still, if you're self-employed (like I am) and a freelancer it's ever more paperwork and edge cases to be careful of.

And the cherry on top! Software engineers have a whole different set of tax rules. Fuck you IRS, you greedy pricks.
What rendering engine are you using?
"could some benevolent person use the bug to cause remote systems to run something like "

That's not benevolent that's intrusion. Nobody has the right to take it upon themselves to determine what someone else should be doing in this case. I would imagine that an action like that would also clearly violate a law or two (I'm sure others more knowledgeable could cite the law).
Yeah that's the funniest thing of the story. Before VK tried to block the beach access only a few surfers came every week, and few people knew about the beach. Now everybody knows and will flock to it!
Not to disparage those sincere writers over at Onion. :)
"the banks are overreacting"

Really? The USA is considering everything as under its jurisdiction, but the banks are overreacting?
I used it for about 3-4 months when 'Stack' was introduced but went back to Link Bubble + Chrome. I couldn't exactly remember why I went back to LB + Chrome but mostly due to 'Stack' being too rigid to my liking compared to Link Bubble (back button not closing the stack, no easy jumping between stacks, scrolling and stack animations kind of wonky etc.)

All things said, I loved the browser experience. Especially easy access to bookmarks on right edge swipe and always available refresh button. I will definitely try it again. Speed dial looks good.

Edit: Just installed again and wow!! It totally looks different from the version I used some time back. Looks more slick and pretty now. Will definitely try again. Especially the 'Stack' behavior.
Repeating as public service announcement of what folks in the know tell each other:

Vinod has a very negative reputation in the Valley. He used to be known as the biggest anti-founder VC when he was at Kleiner. He'd come in, use sharp elbows to push founders around and out, then companies would crumble. He's learned but not enough.

His new marketing of himself has helped (as has Rabois), but you can't change who he is. When given a chance, he'll take advantage of early stage startups. That's why you don't see many companies he's made. And he's been at it a long time - 27 years! He gets in the way because it's all about him and his huge, insatiable ego. He's much more old school VC in that way - but in the Tom Perkins vein, not Don Valentine. It's his way because it's his money.

The only way to keep Vinod honest is to get other investors. If he's your lead, the knife isn't far from your back.
CEO Workflows: Joel Gascoigne of Buffer, the People’s CEO
The underlying problem behind all of this is that the USA's policy on taxing non-resident citizens is, fundamentally, absurd.

As a permanent resident, it's the one thing that gives me pause about applying for citizenship (I know that the same rules apply to me whilst I'm a permanent resident, but I'm concerned about what happens in the future if I decide to leave the USA).
Bash Bug, Internet Under Attacked [Linux and OS X]
Their evidence for lack of bias in their process is pretty weak: "Men and women are invited to interview, advanced to a second interview, and admitted at the same rates."

All this means is that the person doing interview #1, interview #2 and admission decision are biased at the same rate. It doesn't mean that rate is zero.

The proper test - compare admission rates against a truly objective and unbiased measure like a final exam (particularly if students anonymize their names). If gender information does not leak to the grader, bias is impossible.

[edit: Wow, I've clearly made a blatant failure of reasoning - apparently my knowledge of statistics is far less than I thought. I hope someone can explain my error - I'm not afraid of math, so don't skip the details.]
It looks like there is an extension to Parenscript called PSOS[0], which provides conditions/restarts and something similar to CLOS.

[0] https://github.com/gonzojive/paren-psos
Package Data Like Software
A humble suggestion from your friends at the California Civic Data Coalition
You're simply presenting a "No True Scotsman" fallacy. Notch created his own company, ran it, and made a billion in selling it. If that's not an entrepreneur, most of HN is going to need to change their business cards.
Feels like an eggcorn (http://en.wikipedia.org/wiki/Eggcorn)
Let's put aside the science, because they haven't taken the data they wanted yet, so it's impossible to debate, and indeed somewhat beside the point for this 15kg instrument.

The thing about spacecraft is that there is a huge engineering component. The s/c is in a novel environment (vacuum, radiation, cold) and many systems have to work together. You have to figure it all out in advance, using first-principles physics and modeling, and design and build a system that works without further manual intervention. Just getting it there intact is a significant achievement in systems engineering.

Technology demonstration is what this mission was about.
Google, Microsoft Map Brazil's Favelas
This is a "no true Scotsman" argument about the nature of entepreneurship. Entrepreneurs are people who start businesses, which is a much wider category than what you seem to have in mind.
> What percentage of hispanics in the US are actually non-white?

per the Wikipedia article you cite, 49.7% identify as something other than just White (100% total minus the 50.3% that identify as White.)

> According to Wikipedia, less than 3% of hispanics are african american or asian

Sure, but what significance do those two specific categories have? Another 1.4% identify as American Indian or Alaskan Native, 6.0% as multiracial, and 36.7% identify as "Some other race" and are reclassified against their identity as "White" in Census Bureau statistics (given the history of racial identity in Latin America and how race is understood in America, if the the "Some other race" category has to be redistributed to the other categories, it would probably be more reasonably distributed between "multiracial" -- mestizo identity as a distinct racial identity is a latin american phenomenon which is more multiracial than White, but holders of that might well not choose "multiracial" on Census forms -- and "American Indian and Alaskan Native" -- the phrasing of that Census category has exclusive implications that will lead people with identities in indigenous cultures of the Americas outside those of US territories away from choosing it and into "Some other race".
AOSP webview
http://jaxbot.me/articles/cases-where-bash-shellshock-is-saf...

Nginx + fpm not vulnerable?
I don't quite get it yet. Let's suppose someone sends a header like this: 'User-Agent:() { :; }; touch /tmp/shellshocked'

Then in my cgi script I do a harmless system('date') call. The file /tmp/shellshocked won't be created right? The file would have been created had I done for example a system('echo $HTTP_USER_AGENT') call. (That is, one needs to explicitly reference the environment variable that gets passed to bash). Is my understanding correct?
Nor can you booby trap inside your house in the US.
Good points. I got something out of it on both fronts.
To "horn in" is an idiom meaning to participate without being invited.
> He's the success story of a brilliant founder that hands off his work to a parent (Microsoft) to do the dirty work.

All Minecraft versions combined have sold over 50 million copies, and the product is on the decline (since people only buy it once). So what "dirty work" did he hand it off for Microsoft to do?
> If you had dual citizenship (e.g. Canadian + US), do you even need to tell a bank about your US citizenship when opening an account?

If they bank (or its parent) wants to be able to do business in the US, yes.

This is part of the same overreach as insisting data resident in an Irish data centre, belonging to an Irish entity, is subject to the US courts in violation of Irish and EU law.
Whose liable for personal injury on the beach I wonder?
You missed one part of what I said: "per item."

I'm not arguing that there are no costs to delivering streaming content. What I'm arguing is that there are no per-stream costs to the studio, Netflix, or anyone else (other than the hosting site) for someone who watches a stream on a pirate streaming site, so it's not really comparable to stealing a car. It still may be unethical, but it's definitely a different ethical category than stealing something which has a per-unit cost; actually depriving someone of a valuable object that they posses is different enough that the analogy doesn't work.
What benefit do banks get for being multi-nationals exposed to every country's laws instead of just doing one bank per country? I thought that this was the norm for regular businesses.