skysight-inc/HackerNews huggingface dataset:
Pointless how? As we're all data nerds here, try posting negative comments when price is going up (maybe they are too busy doing what I mention later) - you won't see much downvotes unlike when it's going down. I'm sorry, but the Bitcoin community is just disgusting! With "VIPs" like Charlie Shrem, Mark Karpeles, and the likes, it's doomed to fail! When PayPal announcement temporarily spiked the price, you can read comments like "I just jizzed in my pants" over at CoinDesk. This is the kinda human material that's building the Bitcoin community, unfortunately! Computer scientists made Bitcoin possible, but it's all in the wrong hands now, so, we should rather embrace things like Stellar now (I was a fan of Ripple, first, as a great piece of technology, but Stellar doesn't have much of the Ripple baggage)!
I think it is more of the fact, that OS will be shipped with remote monitoring built in. <sarcasm> Privacy advocates everywhere rejoice. </sarcasm>
A Day in the Life of Frozenbyte QA
> since you need return type polymorphism to get `pure` to work).

If you don't mind an extra layer of interpretation (which you might very well mind!) you can get around this by building up basically an AST of your applicative computation---I did this, more or less, in my monads-in-clj library: https://github.com/bwo/monads which has a kind of not-that-useful applicative definition: https://github.com/bwo/monads

I don't know too much about the innards of van Laarhoven lenses but I'd guess that a straight port might be inhibited by the fact that Clojure isn't pervasively lazy---so using Const as your functor, for instance, won't let you avoid actually computing the eventual second argument which is just discarded. But I dunno.
I feel that the second title is better, as it talks about the kind of testing they are using, instead of being a click bait of "HOW DID IT GET YOU FIRED?".
I think your first point is a pretty good summary of where the US economy is. Plenty of dollars chasing investments, but fewer looking to consume products. High price/earning ratios reflect this.
> You must be an individual of at least 13 years of age who resides in the United States to enter into this Agreement.

So the insurance policy only applies to USA customers, that's why it's not a huge risk for them as they are targetting a global audience.

They should allow webmasters to redirect too the send page with a URL like "https://www.circle.com/send?cost=5&to=1PbiuKqC8L4nsgdkaWwvFH... so then websites can accept bitcoin easily whilst having a high conversion rate due to the simplicity Circle provides (in comparison to redirecting them to Bitpay which would complicate the process for first time bitcoiners).
Besides the fact that you arguably can't dismiss morality out of hand, inequality makes people unhappy and they don't want it.
Or even more simply, why it really matters what the codename is at all.
About the same level of effort?

Linux: apt-get install bash

OS X: Install xcode, install xcodetools (CLI), download bash source code from a mostly-undocumented URL (need to search through apple support forums), download and manually apply patch from GNU. Build bash, manually copy build output into /bin.

Yeah, totally the same level of effort.
They're selling an option for bitcoins denominated in electricity. It can potentially make sense for them to let someone else take that risk, and still make sense for someone else - in a different situation - to take it. Which isn't to say that is necessarily the situation here.
Well, Bitcoin now is what the dollar was during the Wild West, so, Bitcoin is centuries in the past - all kinds of outlaws and corrupt sheriffs and deputies. Even bounty hunters as people now offer bounties to find the Mt.Gox thieves!
I presented Conway's Game of Life in a classroom this summer of 10-12 year olds. They had no issue understanding it, were fascinated by the very simplicity of the concept that has immeasurable applications.
> No less democratic than being able to choose Democrat or GOP.

Wrong, it's much less democratic because it isn't just (A) which names are preprinted on the ballot or (B) candidates likely to be elected. No, you literally cannot make a valid choice beyond those pre-approved by Beijing.

> Protests don't change a damn thing in western countries

You're telling me that every single change to the US since ~1870 has been from something other than protests?
Honestly, what is wrong with the queries? They use pretty straightforward SQL functions, datatype conversions, operators, and relational querying capabilities. Is it just aesthetics or are there performance or other actual problems with them?
Yes, i agree with you this can be a proper OS kernel too; i've misundestood the OP statement because i didnt know the real context of what hi was implying; my bad.

This is actually, probably a good step into what a "OS" kernel will look like in a not-far-away future
Movie Magic: When Special Effects and Bad Ideas Collide
I think he was saying, what value does this add for marketers (i.e. those buying the data)? They already have many ways to get users' data, and at (likely) a lower cost.
I went to Rice which was rather generous with AP credit. I used AP classes to cover lots of my electives and some intro math and science stuff. I skipped all the calculus requirements via AP. Some classes however only allowed you to skip classes without actually any credit granted. I think this varies quite widely by private universities.
pushed forward by browser makers

Huh? Which browser alerts me when the cert changes from the previous one that it has seen for a site?

That would be the most basic and trivial mitigation for a start. What we see instead is consortium paralysis for decades. Occam's razor much?

HSTS does nothing for certificate trust. And the other two you mentioned still conveniently keep us at the mercy of browser vendors and infrastructure owners.

Don't drink the snake oil.
Thanks. I understand that the original party can misuse the data in any fashion. The question is if having CDNs where anyone can put their site, makes the original intended site more prone to security / phishing attacks? Could it be for example that due to some hack (at the original site, CDN, elsewhere), CDN ends up mixing information from the multiple sites it is hosting?

For the original sites, I use NoScript and Ghostery to block 'third' parties to capture the data (e.g. I would not want Facebook to register my activities on 'other' sites I am visiting). I am clueless on how to set these tools up when information is being served from a common CDN. And get confusing messages from security folks who tell us to check the domain name of the information source.
Like I said in my comment, yes, pinning the cert would be better. It wouldn't be PKI at that point, but it would be better than just accepting any self-signed cert.

But what is 'safe'? What are you actually trying to secure?

If you're trying to ensure that CloudFlare receives an authentic copy of data to deliver to users, a pinned self-signed cert will do that. If you're trying to also ensure that only the intended parties get the origin's data, this is not "safe".

In the current model, CloudFlare is the 'client' that requests resources from the origin 'server'. The client verifies its connection to the server is valid before requesting content, which is where a self-signed pinned cert would show that the client is who they say they are. But the server has not verified the client! The client could be anybody, like the NSA for example, and the origin server would hand over data happily. To fix that you'd need to also do client-authentication in the handshake. I don't know that they support that currently.

You're basically implementing public-key crypto using PKI infrastructure using two nodes. Can it work? Sure. Was it designed for this? No. Are they doing it 'securely' right now, for all uses of 'secure' or 'safe'? Not to my knowledge. Will they support client authentication in the future? Who knows.
There is a handy script to get the Bash tarball from opensource.apple.com, apply patches 52, 53, and 54 from ftp.gnu.org, build it, and then prompt to replace /bin/bash and /bin/sh. Xcode required.

https://github.com/tjluoma/bash-fix

(yes, you have zsh on OSX by default)
VC money might cost more.
Show HN: Bedrock
You seem to implying some position of mine towards the larger discussion based on my statement, which wasn't my intent. Whether I trust Google to do what they say and whether I think they are appropriate for the task being discussed, are not necessarily the same thing. There are other factors of importance, as you pointed out.
> this flies in the face of econ 101

Econ 101 provides an extremely limited understanding of economics.

Your assumption is that the company is a closed system -- a fixed pile of money. But in the real world it isn't, it's part of the overall economy. If people are spending more, the overall economy expands, which increases the earnings of our hypothetical business, which leads to them having more than $100.

The benefit of a minimum wage increase is in the way it puts money in the hands of people who will spend it.
Just saying.. but not everyone is as good as everyone else in math.

Also of your 7 billion, I'm not sure how many are mentally incapable of doing such work (maybe they are really old or really young, etc).
Probably has something to do with the BLAST browser client that VMware is doing with chromebooks.

http://blogs.vmware.com/euc/2014/08/vmware-nvidia-google-wor...
I think the biggest story here is the fact that the bug was fixed and ready to be installed via a single apt-get command within hours. To me, this is an immense success.

On the other hand, if its 2 months later and a fix still has not been issued, then it is safe to make the argument that the web is broken.
Red Hat found the bash bug and is a successful commercial company with paid developers.
Commercial and free software (freedom) is no contradiction.
Mou 1.0: Markdown editor on OS X, for you
Could you or the parent express what you dislike about backends written in Java? I think there tends to be a pretty negative stigma associated with it, but I haven't really seen why. Personally, I've worked with both C# .Net and Java backends, and it's really a horse a piece. Is performance the issue? Security? What is the general dislike of Java about?
Shellshock (software bug)
But think this through...if you don't run anything locally then what, exactly, are you protecting on your local system by running things remotely?

Although honestly, for something like photoshop I really don't see a problem. It's a creative tool, and probably isn't producing interesting data for the NSA, et al. The real security concern here is Adobe's, in that they want to protect their software from you, the user. They want to set up an annuity-style revenue stream, and the only way to do that is to protect the binary image of their software. So they did that.

Really, the only objection I would have to this is that it adds a (sometimes rather difficult to meet) requirement that you have a solid internet connection to run what used to be a stand-alone application. More philosophically, I object to the horrible waste this kind of runtime requires, particularly of network bandwidth. Perhaps, though, this is the price of saving the premium proprietary software market.
I'm always pretty skeptical of any new "organizational tool" but this really fits with my workflow. Currently porting over most of my todo lists/tasks.

Would be nice to get access to a full API. If I could automatically add github issues here, or feed things in from trello/email I would never have to use anything else.
PassGen – targeted password dictionary attack tool
MesosCon 2014 (video playlist)
> The marginal value of a tax dollar is greater to someone who makes less than I do than it is to me.

Perhaps you mean marginal utility? Strictly in terms of value, the wealthy tend to trade that dollar for assets rather than consumption. Marginal value of any dollar is higher when it generates a return.

If you do mean marginal utility, there is a strong philosophical position that interpersonal utility comparisons are not meaningful. Diminishing marginal utility holds for any one person, but subjective preference and merely ordinal (rather than cardinal) preference confounds any attempt at interpersonal comparison.
A better explanation of iCloud behind the scenes.
http://www.businessinsider.com/heres-what-everyone-is-gettin...
Why I Don't Want Your JavaScript Framework but I Love You
Looks a bit like org-mode for the web, which is pretty cool. Any inspiration there?

Slick intro video as well, congrats on the launch!
Well the Xbox team got it from the sci-fi author. The point is it might be inspired by Halo, but the Halo reference is inspired by the author. It's like saying John Locke is a reference to Lost, when Lost co-opted it from the philosopher.
Yes, this.

It's about as depressing as people 5000 years from now thinking that most of what 21st century people knew about birds was disseminated using an ancient application called Angry Birds.
How many wars to we have, our entire global economy is supported by all these wars, I mean ammo has to be made, guns, and that means lots of cashola for the military industrial complex.
What Is the Right Burn Rate at a Startup Company?
None of those are read-only.
That was back in 2009 when I had a previous surgery.
This is a pretty well thought out note-taking/organisation app. Evernote and Keep weren't really cutting it for me, so I have been looking for one for a while. Even considered building one myself (which I still might eventually), so I have checked out quite a few. Congrats to the team who put this together. One slight grudge, which hopefully they would have considered fixing already -- the Android installer is quite big.
While it's definitely easy to get started with ES, I've found the tedious part to be ongoing coordination between two systems. Unless there's no interaction at all between the documents stored in your search index and the data stored in the database, it is necessary to coordinate them at the application layer, which is more complex and can be less performant than doing everything in the database.
A comprehensive post. Just to add to 2) Chromebooks are DRM friendly, and chromecasts are locked as well. Google bought wildvine DRM and my guess is DRM can be pretty much expected to win for media/software, since hardware makers are on board and they've had enough tries to get the crypto implemented right. Even intel cpus have DRM on board (intel insider). The only threat to DRM now is it relies on human beings keeping secrets [edit: and having as few people / companies who know the master secret as possible], so if the economic value in breaking it is high enough, someone will get paid off / extorted to leak it... whereas 1) is probably safer from attack, and 3) can get hit by adblock+ right now...

Definitely fun watching the battle play out, and as a programmer with a family to feed I must admit I'm hoping for a way to value virtual creative goods that isn't $0.00 :-)
The circumstances which prompted the formation of IRBs would not have been solved by IRBs: IRBs would not have stopped the military from harming downwinders, would not have stopped Nazis, etc. That's all one needs to know.
I agree with most of your statements, except that I like to think of HTTPS primarily as an indication of encryption not trust. If you dont have end-to-end encryption whats the point of trusting the involved parties when its so easy for an un-involved party to take a look at what you are doing?

I agree that HTTPS has NEVER guaranteed end-to-end encryption nor displays any indicators when thats not the case So this isnt a new issue, however Cloudflare's policy has indeed highlighted this issue and elevated it to an entire new level.

The more I work with PKI/SSL the more it becomes obvious that there are no perfect decisions. At its core, I like what Cloudflare has done. It impacts the SSL market in many ways and I want to see what comes of it.
Windows has had telemetry since forever (well since at least XP). It has gone by several names including "The Windows Feedback Program" (Windows 7).
You can argue about whether something constitutes a moral imperative, but to dismiss moral imperative entirely means you're excluding yourself from humane discussion.
How is this a cultural problem? It seems strictly like an economic problem. Teachers are highly valued in our culture (or at least, valued much more than they are in our economy). We DO value work, and that's precisely why people are concerned. The economy doesn't value work as much as our culture does.
Sorry, I though it was an oversight! Thanks!
> I think the thing that frustrates me the most...

If you're really upset, then just quit FB. Otherwise, keep baa-ing with the rest of the sheeple. I quit 3 years ago when their abuses got to be too much. Amazing, I still have the same friends and enjoyable life. I suspect most people would discover the same.
[Disclaimer: I use Windows 7, but I did use Windows 8 for 2 weeks then decided to go back]

I'm anxious to see what Microsoft has in store, but I'm not excited. The recent post here by the developer whose system credentials were changed after he linked his Microsoft account is part of the reason why. Of course I'd want access to the Microsoft Store, but I don't want to log to the system with those credentials, I want to keep the ones that were already set. I doubt this will be the direction that Threshold will take, and if it turns into another Win8 turd I'll probably be done with the Windows OS

EDIT: Since I've been downvoted to oblivion I can only assume that the MS employees here like my post about as much as I like their Winows 8 OS
Robot jurisprudence: How to judge a ’bot; why it’s covered
/s Yes, Asimov was the real name of Master Chief. His compatriots were Bradbury and Heinlein.
And, in 1963 Moore's Law had yet to be recognised. If it had been, he might have realised that fat clients were going to dominate the future of computing. But at the time, it would have been near impossible to believe how relentless CPU progress was going to be.
The 4 Main Types of Chief Marketing Officers
The OP may or may not have misunderstood it depending on how cleverly you parse what he wrote, but he presents it in a way that no reader would be able to understand, compared to the extract from the study which actually does specify the final numbers so one understands that it was a small intervention.
For anyone wanting to patch their Mac (especially any older Macs, right back to 10.4 PPC) to the latest 4.3.27 bash without compiling themselves, TenFourFox posted a binary a few hours ago & some simple Terminal instructions:

http://tenfourfox.blogspot.com/2014/09/bashing-bash-one-more...

TenFourFox are the people behind Firefox for old PPC Macs. The binary they posted today includes a patch for CVE-2014-6277, which bash 4.3.26 didn't have.
Sure, but they're KFC because everybody knows what the letters stand for. Circle, I can't figure out what they're trying to sell me.
Thanks dang--we're very excited about the launch, simplifying the tools and of course would love all of my friends to see it on HN. Nothing funny.
What kind of import and export capabilities does it have? It is important that I don't lose my data due to vendor lock-in.
I don't think that's what he meant lol. I think he was referring to the cocaine.
Clearly VCs don't believe that Bitcoin hardware is a "sure thing" if none of them were willing to invest in it.
Apple has explicitly said that they are addressing the bash bug, and that they will issue a patch for it as soon as it is ready.

> "we are working to quickly provide a software update."

http://www.huffingtonpost.com/2014/09/26/shellshock-bug_n_58...

Want to get mad at a company? How about Netgear, which as far as I can tell has provided no official statement, warning, or patch for their consumer routers and APs.

Or how about LG? I have an LG Linux-based smart TV and I can't find one thing they've said about Shellshock. (In fact, I have not received a software or firmware update to that TV for well over a year at all.)

Or how about Synology, who said almost the exact same thing Apple did. Where are the posts suggesting we all stop putting our data into Synology NAS?

> A thorough investigation by Synology shows the majority of Synology NAS servers are not concerned. The design of Synology NAS operating system, DiskStation Manager (DSM), is safe by default. The bash command shell built-in in DSM is reserved for system service use (HA Manager) only and not available to public users. For preventive purpose, Synology is working on the patches addressing this bash vulnerability and to provide them as soon as possible.
NoSQL will protect you from the onslaught of data overload
Hmm, was it "troublesome" in terms of performance building the index or doing the search or was there some other issue?
“The vast majority of OS X users are not at risk to recently reported bash vulnerabilities… With OS X, systems are safe by default and not exposed to remote exploits of bash unless users configure advanced UNIX services. We are working to quickly provide a software update for our advanced UNIX users.” -Apple

Apple says they are working on a fix. Given that other vendors like RedHat had to issue multiple patches before they finally squashed the bug, I think it is far too early to claim that Apple isn't fixing this in a timely manner.
It's definitely homebrew, Apple hasn't patched their binaries. Don't let this give you to a false sense of security. Many scripts could still be hardcoded to use your vulnerable /bin/bash binary, and many more won't load the PATH variable from your ~/.bash_profile. The only way to fix the problem is to patch /bin/bash and /bin/sh, updating homebrew is not nearly enough.
Midlife Crisis: career stagnation, failed relationship, and feeling of futility
"Schools don't buy software based on privacy"

They should do in my opinion. I find it depressing that so many people overlook or dismiss privacy concerns, particularly where kids are concerned.

The kids who are asked to use Google classroom have no choice in the matter since the decision is made by the school. That means they must sign up for a Google Account regardless of whether they want one. It's the responsibility of the adults to evaluate the impact of the software they choose. And privacy should be one of the top concerns for anyone evaluating software for educational use in my view.

Google's educational privacy policy [1] is carefully worded to state that they do not mine the content you upload to Google classroom ("Your data is yours"). What they don't state is whether they track the activities of school students and what this actually entails. How is that data aggregated? Who sees that data inside Google? Is the data anonymised? Or is it tied to an individual student?

Given that you must enter a date of birth to create a Google Account, Google is capturing very specific and personal details of thousands, perhaps millions of students. Over time, Google will have amassed a staggering amount of information about the behaviour and activities of these students and will continue to do so into their adult lives (if the students continue to use their Google Account).

If Google isn't tracking the online activities of Google classroom users, why do they not simply state that?

[1] https://www.google.com/edu/privacy.html
Looks like HTML/Plaintext/JSON exporting options are currently supported.
I was thinking about the applicative AST. I think that's a good solution, and perhaps if you're willing to explicitly compile it then you'll only need to pay once (and maybe even memoize it on later uses?)

There shouldn't be a problem with strictness and van Laarhoven lenses. The particular trouble is just writing the lenses in the first place:

(def one [inj]
(fn [p]
(fmap (fn [f] (pair f (snd p)))
(inj (fst p)))))

where did the `fmap` come from?