skysight-inc/HackerNews huggingface dataset:
As you suspected, it was intended as a joke.

The other primes do, in fact, quite like 2, and 9 is not in any way primier than 2 despite my previous assertion.

EDIT: Actually, there was a real point to ignoring 2, and it was just so I could carry on breaking down the factors as that seemed to be the bit that hyp0 was having trouble with. Perhaps it did confuse more than enlighten. I'm not sure.
Did you mean to say 'brew upgrade bash'?
Since I volunteer in school science and computer lab, I have observed first hand how schools simply do not have the bandwidth to run any kind of IT. Even something as simple as installing a single new application on all of the lab computers is beyond the teachers of the classroom.

That means most schools pretty much have to adopt some kind of cloud based solution that allows network administration of all of the computers used by the students.

I don't know why Google's privacy policy isn't worded the way you would like, but one reason is probably that wording it in a very strict way prevents any kind of evolution of the software product. For example, if you say "we don't track activities of school students", what does that mean? Does it mean the classroom software can't notify teachers about student behavior problems? Can't show a statistical dashboard for them? That 'auto-suggest' and Google Now-style assistive features (e.g. "You have an upcoming assignment due, and estimates based on your past speed of doing them says you should start today.") can't be offered?
This. Their revenue model is screwing you over relative to the exchange rate with massive buy/sell spreads.
If you want to use these in Torch7, my excellent colleague @soumith has released bindings at https://github.com/soumith/cudnn.torch. There are some benchmarks for the convolutional layers of a classic AlexNet model at https://github.com/soumith/convnet-benchmarks.

In general, the question which is the fastest public implementation of spatial convolution is so heavily dependent on the kernel parameters (and even then, there are often knobs you can twiddle for a given implementation that can lead to substantial speedups), how much GPU memory you want to spend (GEMM and FFT based methods), so the best approach is probably just to benchmark a bunch of implementations for your network and just choose the best.
>"5 days ago Paul Krugman said the problem was that our rich were flaunting their wealth."

Except he didn't say that.

It seems you couldn't be bothered to spend 2 minutes reading ~500 words and decided to compare on headline alone.
Thanks. Yes, footprints and symbols are on the roadmap. Since it's a limited number of parts, we'll be able to have well defined, reliable data there.
There's no charge for leaving Manhattan via the GWB.
> Can we trust Uber? Not entirely. Shouldn't the question be, can we trust Uber (and by proxy , Lyft) more than the alternatives?

But at that point you still must answer the question: Do you trust Lyft or other alternatives more than Uber? Given the evidence we have, I don't trust Uber to tell me the sky is blue; I'm damn sure not doing business with them.
On all trips within New York City, any bridge and tunnel tolls to the destination shall be paid by the passenger, who shall be informed before the start of the trip.

On all trips within New York City, return tolls shall not be charged except for trips over the Cross Bay Veterans, Marine Parkway-Gil Hodges Memorial, and Verrazano Narrows Bridges.

On trips beyond New York City, all necessary tolls to and from the destination shall be paid by the passenger.

http://www.nyc.gov/html/tlc/html/passenger/taxicab_rate.shtm...
I guess they are using VP9, which has 4:4:4 chroma subsampling: http://youtu.be/xo_R40C7RTo?t=3m35s
So... instead of connecting to all my servers securely and 'yum update bash'ing I can download this script that I don't trust, configure it with all my super secret passwords and let it run riot.
yeah, i now spend 2 days/week in an AP CS classroom at a public school with TEALS (http://tealsk12.org), and the dynamic's very different. after 30 classroom hours, we're at loops and conditionals!

i suspect you're right about needing to hand-write code -- especially if you're used to things like code snippets and autocomplete. i suppose i feel about hand-writing code the way i feel about understanding compilerish: you'll probably have to do it at some point, and it's a skill worth practicing, but i don't think it should come first.
For those wondering, "What simple tools take a list of server credentials and run the same command on all of them?", Fabric is a great one: http://www.fabfile.org/en/latest/
> I can't compare mentors, alumni or investor pitching potential.

Why not? Those are 3 vital criteria to evaluating the programs value.

Alternatively, suggest hacking together you're own personal accelerator program using an autodidact approach. You can also buy your own ticket to the Valley.
I've been looking for something more powerful than Workflowy that is also based on outlining, and this fits the bill. The biggest issue for me was that Workflowy didn't have the support for due-dates and filtering tasks that I prefer for my workflow. Very excited to get to know Moo.do.
Bash is known to have version/compatibility issues - Homebrew reports Bash 4.3, but Ubuntu only has 4.3 available for the most recent version - anything from before April will only get 4.2.

This is my whole point
- targeting /bin/sh means targeting a POSIX compliant shell, which may be implemented by any number of different codebases, with a defined standard to meet. Posix mode in Bash 4.3 should be the same as Posix mode in Bash 3.9, etc.
- targeting /bin/bash means targeting whatever specific bash oddities come with the version installed.
Ask HN: How do you deal with post product launch anxiety?
We just released a new product and its a bit unnerving. You know there are tons of features that we could put in; there might be a bunch of bugs we don't know, and we are somewhat worried that user-flow, or even the basis premise of the product is wrong.
How do you deal with this?

Apart the constantly refreshing analytics, staring at the the dashboards, crash logs, or searching for tweets, mentions etc..
Inequality is increasing WITHIN Western societies because inequality is DECREASING on an Earth-wide basis. The graph here shows the results in more detail. (http://blogs.worldbank.org/developmenttalk/the-real-winners-...)

If you are cool with the morality or utility argument that you need to take from the haves within a country to help the have-nots/increase velocity of money/etc., it seems to me you should at least be pre-disposed to do the same on a world-wide basis where the inequality/need is much greater. And if you are reading this in the US, the rich is you. Roughly $32k a year in income makes you a one-percenter on a worldwide basis.
Arse-Sum! (x70)
Overcoming Obstacles to Early Product Validation
What is the software vulnerability used for the iCloud hack?
There's no charge going from Manhattan to New Jersey over GWB so they've arbitrarily added a $9 fee saying that the driver will be returning to New Jersey. Which raises the question, did the passenger who he took to New Jersey also get charged $20? Altogether that would be $40 in toll charges for a single $11 toll.
They did claim that, and everyone really was skeptical. Turns out they (you) were right.
Toll charges are here: http://www.panynj.gov/bridges-tunnels/tolls.html
Rails 4.2.0.beta2 has been released
To add a similar experience, I've seen 8 attempts—5 (all unique origins) on the 25th, 3 (same origin) on the 26th. This on an effectively zero traffic machine.
Bad entrepreneurial start but a great experience
hmm..do we now see the problem with de-regulating the Taxi industry?
Yes, but that makes the market as a whole more effective.
Yup, definitely busted.
Hey Uncle Sam, Eat Your Own Dogfood
The treasure is supposed to be buried in iron pots. A 2-box metal detector should be able to find those to a depth of several feet.

I happen to have several maps of that area from the 1820s through the 1920s.

If you ever get serious about it, give me a call :)
Thanks for the specifics!
Drinking Blood and Eating Flesh: Corpse Medicine in Early Modern England (2011)
"Nothing in this discussion indicates that anyone knows what streaming technology they're using"

I actually do, but i don't know whether it's public, so i don't talk about it.

However, i'll point out that Google already has something called Chrome Remote Desktop that already does streaming desktops.
True. Most notably I badly miss the ability to encapsulate queries in named "functions". That is one of the things I really like in prolog, since it enables to quickly raise one's level of abstraction, by building up a "language" of facts and rules.

If anyone knows a way to do something similar in SPARQL, I'm highly interested to know.
I currently use Keep, but it's getting messy. Hopefully this will help!

I really like how your logo goes from the top of the page, centered, to the bar at the top. I don't know too much about web design (I'm still learning), but how did you accomplish this?
oops sorry -- http://teachapcs.com is back up. (and thank you!)

the software demoed in the video is still fragile, so it's not fully public yet. let me know if you're interested in poking at it though (c@christinacacioppo.com)
When you've got that many people in charge of security, nobody's in charge of security. In the end, who is responsible for this bug being out in the wild?
As a 15 year vet, I agree, surely its time for something with new design goals.

- safe by default: you have to opt in to extra magic / conversions. c++ is totally broken here. sure, we'll let you easily use uninitialized data/classes with auto generated constructors, and do conversions on your arguments, that was what you meant, right? I mean really, the shortest and quickest thing to do should always be the safest. make the speed freaks opt in to the 'leet / magic stuff'.

- still keep the option to use exceptions for stuff that, you know, is actually exceptional in your project.

I'm actually looking at modern java and finding it not horrible, but there are some issues in java that don't exist in c++ like 1) nulls 2) type erasure of generics 3) stupid object.equals() defined by default and not typesafe. Sigh.
STEM Premier has a new landing page
You don't see anything unethical about competing with your own customers when you promised them that you wouldn't? Cause that's exactly what happened.
This is true in theory, in practice not very much.

i believe if the current trend goes on, you'll soon likely have not much on your local machine anymore that would be worth protecting. The philosophy behind devices like the Cromebook or streaming apps like photoshop-in-the-cloud after all only work if all your files are also in the cloud. So if this catches on, expect your Dropbox/Google Drive/etc to turn from a convenient place to backup and move your files to the primary location where you store them.

Even if you have valuable files stored locally, you'd be correct if access to cloud services would really only run through the browser. but check how all recent Android or iOS releases (or really almost all modern consumer OSes) work: most regularly phone home to their respective vendor and are usually heavily locked down - the devices are little more than physical endpoints if the cloud. On such devices, the company that created the device has likely mider access to the system than you.

obviously there are the usual exceptions from the Free Software movement - however for average consumer devices, the trend seems to be clear.
"Every time we figure out a piece of it, it stops being magical; we say, Oh, that's just a computation" http://en.wikipedia.org/wiki/AI_effect
But the weird part is that there isn't a Halo character called Asimov. The author's own potholed link to the Halo wikia just shows an "Asimov Center" as a briefly mentioned location in one short story. And even the tiny article for it takes time to explain who it was named after.

Linking the name "Asimov" with the Halo games seems to be a bizarre speculation/research failure on her part, as far as I can tell.
Intellectual property outliers: Interesting routes patents take
Show HN: Turbo – Facebook App Helping Churches Be Relevant via Social Media
That's pretty cool: http://cloujera.clojurecup.com/
> I've always thought that libertarians and free-market extremists are some sort of outliers on the morality spectrum - probably sitting near the extreme low end of the axis

That's funny, because I'd think it the exact opposite. The linchpin of most libertarians, the non-aggression principle (NAP), is pretty much all about morality. It might not be correct, especially with the sticky issue of defining property rights and whatnot, but it certainly aspires to be a moral framework.

A libertarian would say it's not moral for you to take resources from the "haves" by force and redistribute it to the "have-nots" just because you think it's for the greater good; morality is achieved by voluntary cooperation. Basically this: http://i.imgur.com/vmMrN6O.png
Physical activity can have a positive effect on children who suffer from ADHD
T – a command-line power tool for Twitter
Lark relaunches with an iOS 8 app that coaches you to be healthy
Only if Linus had initially moved into your house to deal heroin after beating you up.
As true as that may be, it's anecdata, and not necessarily representative.
Synology is based on BusyBox, so their shell is ash, not bash. So in their case, it's true, they're not vulnerable. Apple has no such excuse.

Many routers will similarly be using ash/BusyBox, though I agree they should issue a statement.
Could you all check this app out and tell me what you think?

Social media group Helps2 is introducing a new Facebook application called Turbo that is created to help churches, ministries, and faith-filled communities become relevant in the sphere of social media as if they had a full-time staff person doing it. An inexpensive alternative to hiring a social media manager and instead of a ministry constantly scouring the internet for engaging content, Turbo does it for them with hired professional writers that constantly create original, godly content to be posted. All of Turbo’s content is exclusive, meaning that users can expect to see no other church or ministry in their area with the same Facebook content. With many different content types, or as Turbo calls them -- channels, the Church as a whole no longer has to be out of the ongoing conversations on social media. Turbo is the tool that is making the Church relevant again in the sphere of social media that is influencing the world daily. I believe your readers would find it interesting to know that this app is available to them.

Potential users can visit www.helps2.com/turbo to be the first to snag the content they desire in their area code. Because each channel of content Turbo offers is only allowed to be in one area code at a time, content is limited to those who purchase the channel first.
I don't know where this figure comes from: "Nvidia's official benchmarks show a 10x speed-up when using Caffe with cuDNN.". The graph in the original announcement ( http://devblogs.nvidia.com/parallelforall/accelerate-machine... ) shows a 11x speed-up for using Caffe on the GPU versus CPU, and a 14x speed-up for using Caffe + cuDNN (again compared to CPU).

Then again these figures are also kind of meaningless, as the specifics of the experiments were not specified. There are a lot of parameters that affect the performance of different implementations in various ways: the number of input feature maps, the number of filters, filter width/height, input width/height. The FFT-approach tends to do well for large filter sizes and lots of input feature maps, for example.

I've played around with cudnn a bit using Theano. The Theano bindings are a work in progress, but so far they've already wrapped the convolution. Compared to conv_gemm (Theano's version of Caffe's GEMM convolution approach), it seems to be sometimes faster, sometimes slower. Soumith Chintala maintains a GitHub repository with benchmarks of various convolution implementations: https://github.com/soumith/convnet-benchmarks
His results aren't that spectacular either.

In my own experiments cuDNN did pretty well for very small filter sizes (i.e. 3x3), often beating even the memory-hungry FFT approach). This is great because the top two scoring entries in the 2014 ImageNet competition made use of lots of convolutional layers with small filters.

Of course the main benefit of cuDNN is that it will become faster over time, and that it will always be adapted to the latest NVIDIA GPUs without requiring code changes (provided that they keep maintaining it).
The last paragraph of that section strongly implies that the US fiscal multiplier is zero. Keep in mind that the multiplier needs to be greater than one for a positive effect.

> More recently three economists with the NBER and IMF have published a working paper examining economic features that impact fiscal multipliers. They found that the output effect of an increase in government consumption is larger in industrial than in developing countries, the fiscal multiplier is relatively large in economies operating under predetermined exchange rate but zero in economies operating under flexible exchange rates; fiscal multipliers in open economies are lower than in closed economies and fiscal multipliers in high-debt countries are also zero.

US has an open economy, high debt, and flexible exchange rate.
LuminoCity3D – Urban Density and Dynamics Map Explorer for Great Britain
I often wish we could rewind to 1990 and start OS development again from there, using the ideas of AmigaOS, RiscOS, TOS etc.
Dart, Docker, and Determination
Didn't use the existing title because it's potential hyperbolic/confusing (medication suggests a pharmaceutical, at least to me). Still, a potentially very important finding. Here's the newly-released paper cited in the article:
http://pediatrics.aappublications.org/content/early/2014/09/...
ansible main -a "sudo apt-get update; apt-get install --upgrade-only bash"
Dave Eggers was my first thought when I saw the domain as well. I wondered from the brand whether it was some sort of promotional tie-in with the book (which I haven't read). After observing the so-hip-it's parody design and signup form in lieu of an explanation of what the site actually does, I concluded that was the most likely purpose behind the site.
I gotta say, if this is what you have to resort to for one single security advisory, I'm scared to think how the remaining ~weekly advisories are handled.
Would you mind expanding on point 3? Why wouldn't using Uber be better?
Fintech apps demo'ing  NYPAY on 9/30
I don't disagree with your analysis, but this is not relevant to Krugman's argument nor my objections to it.
The Fake Terror Threat Used to Justify Bombing Syria
Sorry didn't mean to imply that one needs to learn abstract algebra to do proofs. Was just mentioning my experience as it was course where I really enjoyed doing proofs.
There are plans for Theano to build 'meta optimizers' that determine the fastest implementation separately for each layer in a network, and for each 'pass' (forward, backward w.r.t. weights, backward w.r.t. input): https://github.com/Theano/Theano/issues/2072
Sort of like how the FFTW library for FFT computation tries out a bunch of different 'plans' and then uses the fastest. I really hope this idea comes to fruition, as it would automate the "benchmark a bunch of implementations and choose the best" step, and make the process more granular.
The logo animation going to the page header when scrolling down is amazing. Kudos for who did it.
Rackspace: How to Royally Poop on Your Customers (8 Ways)
Digging into ShellShock Exploitation attempts
> dumb terminal

> send a full screen to the user

I think you're confusing Plan 9 with thin clients. Even the Blit in the video was a smart terminal ("you can run programs on it"). The way Plan 9 works is

> send data to a user's computer and let local applications worry about dealing with the data.

It was apparently different in the 90's ("terminal was a computer but we didn't compute on it") but nowadays in Plan 9 you do nearly everything on the terminal. For different reasons: the WM, the browsers, the editors run on the terminal for responsiveness; image and music decoders run on the terminal because they need a higher bandwidth to the screen/speakers than to the fs (jpegs, mp3s, etc are compressed); plumber and factotum run on your terminal so that you get exactly one instance of them per session, and that they die as soon as you end your session.

The central boxes are only really used for FS/backup, auth, cron, maybe mail servers or whatever.

So nearly everything runs on the terminal, but it's a Plan 9 terminal so it's still just a matter of plug it in, turn it on, set up netbooting (once).

> it's very obviously worse OUTSIDE of those institutions.

What I was going to say before I decided that it was too much of a tangent was: and Plan 9 NOT being a proper distributed OS could be a plus: it's possible to use recover(4) or lapfs(4) and bring the laptop outside the network. No-one actually does that, and lapfs isn't even a real Plan 9 program in C. but it's still made feasible by the fact that your editor and so on is not on the far side of a connection and isn't going to go anywhere. unlike on e.g. an Amoeba terminal, which really is just a window manager, no editors locally, no browsers or viewers.

I dunno about using "backup" to describe the Plan 9 file server, but that's even more unrelated to my original comment.
That doesn't change the version of bash pointed at by /bin/sh which is a hardlink to the OSX supplied bash. Even if you previously relinked /bin/sh to a homebrew bash, it won't change versions by upgrading the installed bash.
I'm curious what the philosophical position is that says that $1,000 is not worth meaningfully more in value or utility to a poor person than an equity fund manager, and why that position would be described as "strong".
Jimmy John’s Notifies Customers of Payment Card Security Incident
Been using this for a while in a cron job to automate archiving tweets for various topics I'm interested in https://github.com/stephenturner/twitterchive
In my uni it was for an extra credit :)
Viewed from the UK, the user agreement says "You must be an individual of at least 13 years of age and not reside in the United States to enter into this Agreement." and also agrees to provide insurance
Consider the discussion taking place in other comments - SSL has never guaranteed a conversation between client and a server at the "end". The concept of one server at the end of your connection is wrong. Often, you'll be connected to a load balancer that terminates SSL and communicates with other servers over plain text. Or, you might reach an HTTP server that communicates with other services ( perhaps a database ) and you have no guarantee that those connections are over SSL or take place on internal networks ( as if internal would make it more secure ). Besides SSL itself and the serving of your particular request, what else is being done with the information you've sent? Perhaps they're storing data or sharing it in ways you would not approve of. Trusting the services you connect to is the real tough problem and it has little to do with SSL.
1) CGI is only one known way to exploit shellshock. There are probably many others.

2) People do use Macs as servers. It's unwise, clearly, but it is done. https://www.apple.com/osx/server/

3) OSX server is setup for CGI by default, all you have to do is throw some scripts in the right directory.
Planet Emacsen
Shameless plug: https://commando.io provides a great way to run commands on groups of servers via SSH and a web interface for patching shellshock. We also store the result of stdout and stderr and who executed the commands for a complete audit trail.

See the following tweet: https://twitter.com/alexandermensa/status/514811145887027201