skysight-inc/HackerNews huggingface dataset:
I'm not sure it's right to compare it to the Python versioning issues. Apple can just break old Objective-C code for later versions of iOS/OS X if they wanted to. Also, you can look at the adoption rate of ARC when it was introduced. Pretty much every popular third-party iOS library jumped on to implement it, and those that don't usually are abandoned projects.
In some way they are quite honest. You can see the offer very clearly: work with brogrammers for a low salary.
Jack Ma teaches you how to be successful in life and business
Satya Nadella keynote to Korean developers
But unfortunately, nobody (outside the British Commonwealth) understands the scoring anyway.
India becomes the first Asian country to reach Mars
Keep in mind that /bin/sh is bash on OS X. So if you have any scripts with the #!/bin/sh preamble you'll have to replace the default sh too.
Oh stop this stupidity already. If you are not running a Web server that spawns bash when serving an HTTP request, then you are NOT vulnerable.

Are you running a Web server that uses CGI scripts written in shell or plain C that uses system() call? If you do, you have had other problems long before.

There are some grumblings about DHCP _client_ setups on Linux passing parameters via environment variables to shell scripts executed by bash, but I am yet to see this. This would be a problem, but probably easily fixable.

No need to panic or even patch anything (as always). If you running servers on your machine and allow inbound connections you should know exactly what those servers are and what they execute on behalf of external users.

This is NOT remotely exploitable.

It's an ad campaign for "security researchers" people.
I'm not sure whether the parent commenter meant "zero sum" in a pure fiscal sense or as a descriptor of productivity/capability/something-not-money.

Yes, a dollar taken from someone and given to another is a net null. But when we consider scale and efficacy of large organizational actors, perhaps we notice the potential of these tax dollars. It's not just the individual line A to B that must be considered. It's A to Gov to B.

I can't fund high-capacity battery research the same way the government can. I'd need to find, say, 10,000 other folks to throw $100 into a pool that we could give to a researcher to fund her experiments. She hires help, does work, maybe something comes from it. But,

How do we know she's using our money as intended? How do we know she's producing results, and the quality of those? How do we select her from all the other applicants?

Well, let's hire an auditor to check that the money is being used appropriately. Then, we need other folks in her field to confirm for us that her research is productive. We'd also need those experts (or others) to help in the technical review of her proposal against other proposals to select the most beneficial one.

Interestingly, it all starts to look like a bureaucracy. Because that's ultimately what a government, in all its spite, ends up providing -- a shared set of resources through which a society can effect greater change as a whole on itself than it could individually.

I'm sorry that your experiences and epistemology lead you toward contempt for such an apparatus, but please recognize the benefits and net-positive effect, particularly to science and engineering, such an organization has demonstrably provided.
I imagine that there would be little need for a 0day. Also, if your setup allows you to be exploited via HTTP, chances are high that you're running old stuff anyway.

Somone is going to make a fortune mining bitcoin in the coming weeks.
If we're generous in our opinion of him, it's doubtful Khosla wanted to prevent the public from using the beach. What he probably wanted was to prevent the press getting exceptionally close to him and his family, from having founders 'accidentally' meeting him when he was at home, and so on.

There is a thing called the 'principle of double effect' (thought up by Thomas Aquinas back in the 13th century; it's not a new thing) that's incredibly important to understanding the world around us - nothing we do has a single, isolated effect. Ever. There are always several causes for things, and many effects. Picking one and assuming that was the reason, or even just the most important reason, is wrong. In this case it's reasonable to think Khosla closed access to the beach for several reasons, and that had several effects, one of which was preventing public access which is why it ended up in court.
The United States, by continuing to commit many acts of war, terrorism, gross injustice, and subversion in other countries, and selling arms to all and sundry, greatly increases the likelihood of retaliatory terrorism in the United States and to a lesser degree in allied countries such as Australia.

Nevertheless, I do agree with you that Australian civilians are not in much danger, yet.
The bash exploit may not be a zero-day, but it only executes a payload allegedly containing a kernel exploit. The question seems to be, is that brand new?
I personally choose to give Swift a chance. I think it sucks largely because Xcode 6 itself sucks, but that will improve over time.
How would you install the build dependencies with busybox? Go requires some packages to build, from the Dockerfile:

apt-get install -y ca-certificates curl gcc libc6-dev bzr git mercurial
I'd be interested to know more about this as I've been curious for a while about how people do this stuff.

No matter how many instances you have, surely you'll still be hosed if they all go down at the same time? Or if there's rolling downtime taking out instances faster than you can bring the restarted instances up to speed?

So if you're replicated across three availability zones you're not truly prepared for any instance to go down at any time - you're only prepared for two thirds of your instances to go down at a time?
Resources for Coding Beginners
The success of this game is partly predicated on player trust, i.e. how do I know that it's not being rigged against me by the operator? It is a game of skill, but gives the player imperfect information (unlike chess), leaving the possibility of various forms of cheating and fraud.

I am interested to see how this could be addressed.
It can potentially be exploited via anything that shells out to bash with an environment that contains environment variables with values (that ultimately comes from) an untrusted source.

mod_cgi is just one of the most obvious attack vectors.
Everything Not to Do as an Ally
Make in India
His website look like very "Free Kevin" era, with Flash replaced by CSS tricks.
And everyone else in his position. Not that I necessarily agree 100%, but isn't deterrence the rationale for some punishments?
Help HN: Student wants to learn
Hi guys,

My fiance has a student in her class who wants to learn about coding, and web development (including design). He's very poor so can't afford to pay for anything so is on the hunt for some good info that is on the web. He's a bit overwhelmed by the sheer volume of stuff on the web, and doesn't know what is good vs what is bad.

He's been turned down by his college to study web development (long story) and wants to learn himself on the side.

Any good resources that would be good for him to start?

thanks!
Responsive testing fallacy
Net worth is difficult to calculate, which is why schemes like wealth (vs. income) taxes are likely impossible to implement.

Prince Alwaleed accused Forbes of underestimating his wealth - imagine how difficult it must be when people are trying to get the lowball figure.
My favourite part was the whole "Optionals suck because Obj-C have nil, therefore Obj-C is superior" bit.
Both Vorbis and Opus were somewhat miraculous in terms of scrappy outsiders beating the industry. This either points to the Xiph team being mad geniuses, or the audio codec field being somewhat warped by it's obsession with standardizing on design-by-committee, patent-driven corporate codecs.

Either explanation gives Daala a fighting chance.
Where did I explain it away with age? I said students & more likelihood of families. Sure, this is profiling, and thus still on the racism spectrum, but maybe not entirely in the deep brown sector.

Of which there is a lot, too, of course. This is Munich, which has a much sadder 9th of November than Berlin.
Thanks for the recommended books and links. That's actually what I'm currently doing. Studying and practicing. I just wish there was a better way. I feel like I'm back to my school days where your SAT/GRE scores mean more than your body of work. Of course, the difference is that I have to take a test for each company I apply to now.
The New Google Analytics Android App by Google Inc
As a French person, I lived in Australia. People often kindly made fun of not only our strikes, but of my rebelious mind and constant tendency to protest and organize against negative change. I would kindly make fun of their extreme docility on knee-jerk rules such as residential and corporate policies.

Unfortunately, seeing this example, I still wish Australians were keener to be involved in politics and defend their awesome land, culture and economy.
Approximate 0% of production systems have netcat. Just pick your favourite one liner from http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-ch....
The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved
Besen – Complete ECMAScript Implemention in Object Pascal
Scientists discover an on/off switch for aging cells
Why Oracle wins by Larry Ellison stepping down
very interesting one:
89.207.135.125 - - * () { :;}; /bin/ping -c 1 198.101.206.138"
Rats? Is there a pun intended?
Rental Car Company Finds 60kg Stash of Marijuana Inside Car
And yet they have reached Mars :)
What if they weren't home at the time, and it's just beacons?

Then Google didn't actually capture their private data, no? Kinda makes it hard to allege damages.
If you see that "ignoring function definition attempt" message you definitely have the first patch applied (but not necessarily a fix for the second problem) That diagnositc was added by the patch itself. See http://ftp.gnu.org/pub/gnu/bash/bash-4.1-patches/bash41-012

Maybe you have auto-update turned on and didn't realize it?
You could bot up every server at AmaGooBookSoft and still not make an appreciable amount of money mining Bitcoin, though I suppose that is not true if you go to one of the scrypt altcoins. CPU mining is very uncompetitive. A CPU miner is upper bounded at about 100 mega-hash per second (100 * 10^6 hashes) and more typically closer to 5 * 10^6. 100 megahash per second is worth approximately two cents per month. My off-the-cuff estimate for AmaGooBookSoft is 300k servers, which gets you about $6k a month or $200 a day if you rooted all of them and they were the most effective CPUs ever reported for mining Bitcoin.

The far more likely way for this bug resulting in someone exfiltrating lots of bitcoins is them hitting every Bitcoin exchange looking for e.g. cPanel on a development box, Wordpress hosted on Nginx with fastcgi, etc etc. If they find one, they've got the hot wallet inside of five minutes later if it is on the same box, a bit more if it is somewhere else on the local network.

(I've got to admit, the first thing I did after patching my boxes, to relax about the stress, was grepping Bitcoin Core for system calls. No obvious ones that I could see, for what it is worth.)

If I can emphasize again, though: just because you don't engage in risky behaviors like e.g. transacting in bitcoins, doesn't mean your boxes are safe. Every. Server. On. The. Internet. Will be probed for a variety of exploits enabled by this vulnerability. There will be dozens of independently administered for loops probing for it within 24 hours.
Do you have a citation/link to anything describing this system in Iceland? I have heard of similar systems in Finland and maybe Norway or Sweden but never Iceland. It would be interesting to know if the banking collapse has changed anything.
A way to view random posts would be great as well :)
Distributed and collaborative music and video creation
It's a workaround that should be used if you must mitigate the issue right at this moment. Applying the update, once it's available, should do the same thing. Note that the workaround might have some unintended consequences as mentioned in the FAQ section of [1].

[1] https://access.redhat.com/articles/1200223
https://twitter.com/css_tweet
>> Because it does not actually matter. If an Int gets in my array, it’s because I screwed up and likely had very poor testing around the scenario to begin with.

>The benefits of static typing is that you don't need testing of things like that. The compiler guarantees safety, allowing you to avoid writing test case that are mundane and boring, such as checking that you don't put an Int into a String array.

This is a canard. You hardly ever (within an epsilon of "never") write tests for types. You write tests for values that you expect, which the type-system doesn't guarantee. Those values have types, so those get tested as a side effect without any additional effort.
But your clean generic example is different from his. Your example specifies a CollectionType returning another CollectionType with elements of type a. His example specifies a CollectionType where the Index property is a BidirectionalIndexType returning an array of elements of the same type as the CollectionType's elements type. Im not sure about the last part because I dont really know Swift.
For me, it's the generally pleasant and motivational post in itself.

Anything that can motivate people to contribute to FOSS and to make it less intimidating, I like.

I didn't know it was Linus Torvalds response until I went in and read it - so that had little impact on my decision to read it. But it certainly was a contributing factor to me upvoting it. It's insightful and a well chosen response regardless of who wrote it though.
People are now calling it "Shellshock".

That's nice. I like this song.

https://www.youtube.com/watch?v=2pWZRJd4z8o
If the city / state is forcing the owner open the beach to the public, why does the guy have to pay liability insurance? He should try to seek declaratory judgment that he's not voluntarily opening the land to the public, and therefore the state must indemnify him for any liability created by doing so.

For that matter, if someone's not allowed to restrict access to their property, is it really their property at all, or is it the state's property?

If I were this guy, I'd appeal. I'm no lawyer, but it looks like he's got a good case the state has de facto taken his property away from him, and he's owed compensation under the US Constitution.

Everyone here seems to be against this guy, and their comments seem to be unusually vapid -- "I like going to the beach and I hate rich people" isn't a good basis for public policy.
Can someone familiar compare and contrast it with iPython Notebook (which also has support for any language/package that writes an ipython kernel plugin)
My take on swift : use it once apple release a real product made with it.
I think that in democratised affluent western societies the people always get the government they deserve.

Whatever your idealogical problems with the liberal government are, they don't present a series of shambolic polices, they don't engage in oblivious compartmentalisation of social and economic policy and they don't spend two terms of government fighting incessantly amongst themselves like the last labour government did.
Commerce Guys and SensioLabs announce a global strategic partnership
This is quite huge. A transpiled LISP in a trendy mainstream project ... I need to sit.

ps: while they're at it, there's also http://scriptor.github.io/pharen/ (php)
I cannot find "The 15 Commitments of Conscious Leadership". Is it a book? I don't see it on Amazon. Is it an article? Does someone know the authors (I can't quite make it out on the image), or the link?

EDIT: http://consciousleadershipforum.com/wp-content/uploads/2011/... is the answer, I believe.
If ShellShock is currently un-patched, it is in fact a 0 day right? Just a very public one. Should we like not be connected to the internet until this is fixed? Are personal routers vulnerable?
Codes are read much more often than written.

paredit makes editing parens easier, but reading them is still difficult for the unskilled (rainbow parens help, but it's still far from painless). Compare this to how autocompletion makes it easier to write a VeryVeryVeryVeryVeryVeryVeryLongMethodName but doesn't make it any easier to read.
If your machine is running some Unix OS, then PicoLisp is what I would recommend. -> http://picolisp.com/
any BPM sync possibility to expand the stuff available to remix/collaborate?
A random number generator outperforms most fund managers...
Its nature; we can research about this one to make this one comprehensive.
So you'd want something like the Lush of yore?

http://lush.sourceforge.net/
Most likely they're packaging some already published local root exploit and combining it with ShellShock.
So from what I can tell, neither my Raspbian or Ubuntu setups have this second vulnerability properly patched yet (although they have the first one).

I guess I'll just have to wait until it becomes available. They're usually pretty responsive about issues like this.
For people not aware, "Hy transforms its Lisp code into the Python Abstract Syntax Tree"[0].

[0]: http://hy.readthedocs.org/en/latest/index.html
Wouldn't that break the feature? Function definitions need to be executed so that they are available, right?
The question is: will the society as a whole benefit more from money spent by scientists and engineers or from a better health and education system.
I think this is a "win win win" situation for a specific range of wealthy people and not the society at all.
Wonderlic test
Convertr Lite app help you to convert units and currency
I don't know, properly abstracted LISP code is 'supposed' to be tiny (you have all you need to write nice DSL/API) so you don't have long winded things on screen.

And I have a differing opinion about code meant to be read. This is a side effect of syntaxful languages read statically in buffer editors. You want to understand LISP ? you load the code, play with and evaluate sub expressions, and sexps/paredit is of great help here.
There was a powershell-like shell project for linux. Instead of a unified runtime it used d-bus to automatically pipe objects from a process to another.

Due to the d-bus dependency and other details, I remember it being a Gnome/RH-related project but I cannot remember the name.

(I'm not persuaded that d-bus is the best choice here, but still, it was an interesting project)

Anyone remembers it?
Sony is just forcing most of the persons to buy windows anyway. Its their downfall in Europe. But as we can see the growth of tablets; its going to be end of the road. It don't think Samsung will be back on manufacturing laptops again in Europe. Like places in India still Samsung, Sony, Dell, Lenovo are still competitors; even they are now realizing the dead line for laptops
A Fairy Tale of Two Storage Protocols
UnFappening: Re-Dressing Nude Celebrities
Yea, they should have done this from beginning instead of hiring Sam.
Wayland and Qt 5.4
How did you patch your boxes? From my understanding there are still no patches.
It isn't that different though. You still look at clock speeds on the CPU, as well as the burst speed for what it can ramp up to. So that's the 233/300/450 comparison done.

Then perhaps look at whether it is i3/i5/i7 - the higher ones are better.

But then instead of just thinking that your processor is one CPU, count how many logical processors are in there: dual core, quad core etc.

It's still the same - the higher numbers are better :-)

Of course, other things to take into consideration (like it has always been) are FSB speed, RAM clock speeds, disk cache size, disk type, amount of RAM, GPU processing capability (use the same rules as the CPU - count the RAMDAC speed, the amount of RAM, the number of cores), and so on.

I don't think it's changed that much. Just there are more brand names and model names on things now, perhaps?
Just because you'd prefer to rent to people of the same nationality, doesn't mean it's legal. (likewise for age/sex). In your opinon that's not racist. In the law's opinion that is racist, and you can be convicted/fined for it.

You're quite free to believe it's not racist, and that the sky is purple, but the law has different ideas and will act accordingly.
What does CnC mean here?
(Google doesn't tell me.)
I am impressed that you've got the moon in your garden. I can clearly see it reflected on your monitor.

My garden doesn't really compare.
Am I reading this right? If a string starts with the characters '() {', it is handled differently by the interpreter?

What am I meant to do if I actually want to store the characters '() {' in a string?
"Command and control", I guess? http://en.wikipedia.org/wiki/Botnet#Organization
Command and Control
Command and control. One frequent thing that black hats do is have all the boxes they root subscribe to e.g. an IRC channel, so that they can receive further commands. The ratware ("software written with nefarious purposes in mind") often comes pre-configured with options for blasting spam, hosting content on HTTP (for SEO or exploitative purposes), doing DOSes, and executing arbitrary commands against the local system.

One can, of course, envision numerous ways to get data in and out without it being an IRC channel, but that is easy to implement, works across a wide variety of target environments, and plays well with the existing ratware ecosystem.
when I first saw Golang, I hated it, but now I think it's the best server side language. Galang is an insanely pragmatic language. It's not fancy, just works.

Facing Swift, I had mixed feelings. It's a beautiful language, probably as pretty as Ruby, but what really makes it unique, or extremely productive? I can't find any.

Am I the only one agrees with the author that generics probably do more harm than good. I'd argue that generic gives programmers a fake feeling of control and easily leads programmers spending time on over design.
So; the bending trend begins. So the next gen will be bending iPhones, Samsungs, Sony.... every phones will be bending. Is that Bend test really needed for phones?
But my thought is the flagship model phones are really worth their money. If we spend $1,000 on a unlocked version of a phone; if bends or brakes than. Is that gives you next gen phone. I don't know. After seeing the iPhone 6 plus bending its warning for manufacturers.
They deserve it, but I've heard some rumors that game programmers are pushed to their limits with deadlines and cuts.

I've got a feeling marketing is eating up most of the budget for all AAA titles. I can understand seeing how consumers seem to love the hype train. Does anybody have a clue on the actual size of marketing in big productions? I couldn't find any facts.
Weirdly, my mum used to have laptops for years, which she used for running at an obscenely low resolution, making it practically unusable.

She played solitaire on it, and used Facebook. And I think that was all!

She bought an iPad (finally) and doesn't make a fuss about not changing the font size (she can't, so she doesn't make a fuss anymore), and seems really happy with it. But she isn't trying to create things on it. That could be what's different with your mum.
I second the battery and screen improvements.

And perhaps increased CPU performance because I like short compile times please.