skysight-inc/HackerNews huggingface dataset:
As much as we like to ignore it in our ivory tech towers, lack of affordable food is a problem in most developed countries.

Also, the production and distribution of food produces a lot a waste that is considerably more problematic than organic waste.
Skylark – arkOS VPS
Great link, but I would say still more than reading HN ;)
Basically what they're saying is that CGI should never have happened.
The plants were mostly grown in petroluem based fertiliser, factory farming of crops puts 10 calories in to get 1 out. Pre WW2 it was 1 in 2 out.

The separation of livestock fed on subsidised corn from farms growing plants means lakes of "waste" manure that used to be used as fertiliser become an environmental problem instead of a solution.

And for business minded farmers thinking about mixed agriculture they discover that corn feed is cheaper to buy than to grow.
That's not strictly true; PL/Perl is (obviously) a programming language and is available in trusted (with certain operations disabled) and untrusted variants: see [1].

The issue with PL/Python is that it's nigh on impossible to properly sandbox Python.

[1] http://www.postgresql.org/docs/9.3/static/plperl-trusted.htm...
Food only looks cheap at the point of consumption. Millions of tax dollars went into the subsidy.
I didn't mean "view" in the sense of "database view" but rather in the sense of "page view". All data displayed on a page with multiple types of documents was returned in a single query. That's certainly doable in pg, but requires a lot of hacks and it's not efficient. Or you can use hstore and basically use pg as a nosql db.
"The bromine industry has not done a very good job in PR, in educating people that there are chemicals there that save your life and keep you safe."

I feel bad for the BBC because this article is a big pile of PR with jewels like:

"The chemistry blogger Derek Lowe points out that the few people known to have suffered health problems (none of which were quite like those listed by Buzzfeed) were drinking a vast amount of BVO-containing drinks - in the order of two to four litres per day."

So the culprit is in the person for drinking TOO MUCH!! 2 litters per day is a bast amount while also the recommended amount for a person to drink on a day. If you play sports like tennis or soccer or American football you are going to drink two or three times more than this.

Never mind that athletes are the intended segment of drinks like gatorate.

I am watching TV and it starts burning? This is the reason I use Apple aluminum displays, I don't want brominated sh*t near me. Unfortunately this lobby forced mattresses and quilts to use it and now you could detect those traces in the air of any normal bedroom. There are appearing lots of neurological disorders that are strongly linked to those products getting in contact with our body, as they are easily absorbed by our skin as well as our lungs.

The problem with those lobbies is that they don't let us decide. I don't care if my TV weights more or cost more(injection molded plastic is way cheaper), I want a metal frame. Nobody in my family smokes so let me choose foams and feather products that are brome free.

The excuse they use in order to force everybody to use those products is that most people have smokers in their house and they go to bed with the cigarette, so they are asleep while the house burns so they need to protect you.

Turns out that protecting us against ourselves is a great business. It is a pity that a theoretically independent medium like BBC takes part on it:

http://www.paulgraham.com/submarine.html
You're missing his point, and it's condescending/naive of you to assume that his app hasn't been tested to withstand it with no information to tell you that. My app has been thoroughly tested to withstand reboots; however, I have 22 machines with rackspace and (a) I've never tested all 22 going down at random times, and (b) I STILL want to be awake in case anything happens unexpectedly. The pain here is the timing and announcement window for those of us who want to monitor their machines for problems.
Rarely is not never.
[Fun] The bug known as bash that could eat away your software
What do you do to feed your brain?
As it may happen to you, my day job bores me and I feel the need to feed my brain overnight with continuous learning and taking up pet projects. Sometimes I go for things which may benefit my career, but many others I just like to go off-track just to push my brain harder learning something else from scratch.

For a software engineer working in finance, what other domains of science have active hacking communities with hard problems to solve ? Bio-sciences ? Astronomy ? Any active communities of software engineers trying to change the world ? Thanks in advance for any pointers...
My first question was: how slow is hardware divide? The article didn't answer that, but there are many resources on the net that do (more or less, it's tough to precisely benchmark these very sophisticated CPUs). One paper is at [1].

The general conclusion is that simple operations like add can be done in 1 CPU cycle. They can be easily pipelined for a throughput of 3 different add operations in 1 cycle. Modern CPUs also pipeline integer multiply so, while the latency is perhaps 4 cycles, the throughput is 1 multiply in 1 CPU cycle.

But hardware division can be slow, really really slow. A Pentium 4 might have a latency of 80 cycles for a 32 bit operation, 160 cycles for a 64 bit operation. And there's no pipelining, multiple divides don't appear to be done in parallel. Even newer CPUs like the Sandy Bridge architecture have a latency of 26/92 cycles for 32/64 bit operations.

So it's not surprising that compilers try to avoid doing hardware divide.

[1] https://gmplib.org/~tege/x86-timing.pdf
If you can't put data into variables then that makes what you can do with shell scripts quite limited.

Your advice is really: don't use shell scripts any where near untrusted data. Tracking which data is trusted and which isn't across different processes in different languages across different systems is not a trivial task. So really the advice is: don't use shell scripts. That's sound advice, but not something Apache can or should enforce.
Except the JSON parser may be using specially-formatted input[0] as parsing directives[1], the XML library has various custom directives and is probably sensitive to billion laugh attacks anyway, the SQL library doesn't correctly handle part of the DB's dialect, etc… in the same way you've got a shell somebody decided should smuggle code from ENVvars and didn't realise it was implicitly executed OOTB as cherry on the cake.

> It's not so obvious that a shell should have to deal with malicious environment variables, due to the reasons outlined in the original post.

Which I don't care for, my point is that the webserver can not wipe the ass of every bug or misfeature implemented by the shit put behind it. It's just not possible.

[0] e.g. "magic" object keys or keysets, most libraries expose ways to hook into object deserialisation to do exactly that but they could do it by default as well, and I'm sure there are some which do

[1] which is exactly what bash does here
It goes far beyond CGI. Linux systems use shell scripts all over the place where the data involved may come from untrusted sources. DHCP is one example, but there are many others. If shells can't be trusted not to suddenly execute the data inside variables then shells can't be trusted to do anything.
Yes, but what happens if your JSON data size grows so large that it can't fit on a single machine? Multi-master replication or sharding is a terrible pain in any RDBMS (at least according to my research and trials).
Nope your argument doesn't follow from parent's point.

Parent is saying people want durability and better battery life and would gladly sacrifice thickness for it, not sacrifice all the things that iPhones have and those old Nokia's didn't.
How is it different to set some environment variables and then call out to a shell script, versus to set some environment variables and then call out to a perl script, or a binary compiled from C?
Download Odin latest versions
The point of walking the dog is getting the dog exercise.
Find your Twitter friends and followers on ello.co
The Shocking Truth about College Admissions in India
> (graph) Gray value of Obama’s hair (expressed as % similar to Morgan Freeman’s Hair) over time, with annotations of important events.
I think this line sums up the study best for me.
So essentially you're looking for a website builder builder?
Absolutely correct. But we also know that the OCDE definition is a strict percentage which is so absurd it creates large middle classes in cultures which have absolutely no middle class. And events may unfold such that the definition may be absurd even in our own culture in 20? 50? years.
"Quite humorous"?

* In Unix, shell scripts and shell subprocesses are everywhere, and are supposed to be everywhere.

* Environment variables are passed across subprocesses by default, you need to explicitly filter the environment to prevent that.

Therefore, if you write a shell, the reasonable assumption is that it's going to be integrated into pretty much all "systems"/programs running on a Unix box with this shell, and environment variables will travel from everywhere to everywhere.

Of course the feature isn't a "bash security bug"; it's just one of those endless poorly documented, weird special cases which together make up what we know as "Unix".

And the answer to anyone shooting themselves in the foot, whether it's one person or a billion, is "you should have read the documentation" - and now, apparently, "you should have read the source".

It's a good thing this kind of "design philosophy" is absent outside the field of computer programming. Generally the vendor should be the extremely diligent party, and the user is assumed to be reasonably naive - even if the user is a professional (think power tools, etc.) It is only programmers, for some reason, who think that it's perfectly fine to add whatever features they want to their code without much worrying about consequences, and leaving the worrying to the users.
He Collects Software Bugs
Your response sounds like blaming the world's oldest webserver for being the world's oldest webserver. CGI sucks, but telling the 1990s to go home and not come back until it has a secure mechanism of IPC just isn't helpful: this seriously isn't an Apache (or other CGI httpd) problem.

As someone else said, traditionally only the names of shell variables have mattered, not the content. Apache exports most of its envars named HTTP_* as an attempt to somewhat de-fang them.

That some crusty CGI app spawned a bash process which then chose to do something outrageous with the content of HTTP_COOKIE really isn't Apache's fault. Seriously.
pay particular attention to this reboot if you recently
did "apt-get update" or similar to take care of the bash
problem

I don't understand. apt-get update won't install new software on reboot. That just updates the index in apt. There's no other way to update bash without "apt-get update && apt-get install bash" and that won't impact anything on reboot.

Your updated mysql config file sounds like you apt-get upgrade'd, installed a new version of mysql, or something like that and the changes didn't go into effect until the mysql process was restarted. I got bit in the ass with that same thing when I apt-get upgrade'd.
Man who crashed drone into Yellowstone hot spring must pay over $3,200
The native app uses REST to do data transactions, while the mobile site has caching mechanisms on its side. That can be one of the reasons I guess.
>> "we'd throw away excess bread at the end of each day"

And here's the problem. Good food getting wasted. That bread would be perfectly fine the next day and 90% of people would be happy with it but the business would rather waste it and have something perfect. The same thing happens in grocery stores. If a multi pack of crisps/chips splits they throw out the entire thing even though every pack inside the large container remains sealed. They could sell those individually or tape up the outer container and offer a discount. When I worked in a grocery store the amount of good food thrown away was unbelievable. I'm sure the amount of wasted food could be reduced significantly by focusing on these areas which don't fall under the 'better to have too much than too little' rule you mentioned.
If you run a bit into the edge of a counter top, with 70 lbs of force, I feel, your phone would not be your top concern. Plus I think, people are mostly worried about the phone deforming in your back pocket if you sit down on it. I am not a physics student, but even if you sit down on, say concrete, I think, your ass needs to have some serious muscle tone, such that a metallic object can get deformed without causing you discomfort.
It's the requirement for the JSON parser, not for apache. It's like saying apache should quote SQL strings automatically so that SQL injections can't happen. This is not apache's job!
Even most of the older post is focused on side-effecting functions. His main concern with the previous approach is that functions relied on outside-the-function context (global or quasi-global state is extremely common in game engines), and a huge source of bugs was that they would be called in a slightly different context than they expected. When functions depend so brittly on reading or even mutating outside state, I can see the advantage to the inline approach, where it's very carefully tracked what is done in which sequence, and what data it reads/changes, instead of allowing any of that to happen in a more "hidden" way in nests of function-call chains. If a function is pure, on the other hand, this kind of thing isn't a concern.
Actually the iPhone 4 suffered the most from this because of its metal casing (most phones were , and still are, made from plastic).
Because this created a sort of faraday cage for the cell signals, part of the design (the metal border) served as an antenna. In fact, as two antennas (seen here (http://jim93277.files.wordpress.com/2010/08/iphone3_1_610x37...). One for WiFi and other cool stuff, the other for Cell tower stuff.

But if you held it with your left hand, you could create a contact between the two antennas and things would freak out a bit. This is 1000% due to the design of the iPhone 4, and not an issue with other phones. It had nothing to do with "covering the entire antenna with your hand".

So who's wrong? Apple, for not considering this? Or a good 10/20% of the world for doing things with their left hands?
Isn't that uh...kind of to be expected?

Food is cheap, renewable, spoils fast, and can't really be recycled usefully (compost and bio-diesel stills are very fringe cases. The other items on the list are some mixture of expensive, non-renewable, non-perishable, or easily recyclable.
Automatic differentiation is very nifty and should be more widely known about. Many machine learners will already know about reverse-mode AD under a different name though: backpropagation.

The author might be interested in the theano library used to compute gradients for neural models in pylearn2. It supports performing some algebraic simplifications on the compute graph before running AD. I'm not sure if it supports exactly what's being proposed here, but it does seem to enable some interesting hybrid symbolic / automatic approaches.
Define the future of global trade at Flexport
There's no need to guess. The relevant RFC sections are easily located.

http://tools.ietf.org/html/rfc3875#section-3.4

http://tools.ietf.org/html/rfc3875#section-4.1.18

http://tools.ietf.org/html/rfc3875#section-7.2

http://tools.ietf.org/html/rfc3875#section-9

HTTP header values have some limited formatting requirements[0], but are otherwise arbitrary. There is no general way for the server to know which values are safe and which are not. That would require the server to know how the script would respond to any particular input. If that were the case, the script would be superfluous, and the server could simply respond to the client with the result it already knows the script would return!

[0] https://tools.ietf.org/html/rfc2616#section-4.2
I completely agree. If you're going to add generated files to a source code repository, they need to be clearly marked in one way or another.

If the author truly want a "go generate" they good sell it much better. I understand the yacc idea, it can be a pretty good solution for something like configuration files. OpenBSD use yacc to do the grammar for many of they tools and that has worked out create.

The big sell though would be WSDLs. I understand the aversion towards SOAP and WSDL, but it's here and having Go support would be nice. Generating Go code from a WSDL wouldn't be to hard a sell I think, and it fits nicely into this idea.
Bill Gross and the Dying Breed of Mutual Fund Superstars
10 CEOs You Should Be Following on Twitter
Here are some more facts about food wastage in America:
1. America wasted 33.79 million tons of food in 2010 and this figure keeps on increasing as population grows.
2. The above mentioned figure is enough to fill 91 Empire state buidings.
3. 17.2 households in America were insecure of food in 2010.
It's economics. If I buy half a gallon of half and half, I know full well I don't need half a gallon for my coffee before it spoils.

I estimate that between 40% and 0% of it will be wasted on average depending on how many weeks it lasts in the fridge. But if I compare it to buying a quart, a quart will cost me around $2.49 while half a gallon would cost me $3.79

This means that for a cost of $3.79 I get to use 0.4 gallons on average, while for $4.98 I get to use 0.5 gallons (assuming a quart never expires, which isn't true, I've had a quart go bad after a little over a week)

This means that for 0.4 gallons buying quart by quart I have to pay 3.98, but buying half a gallon I pay less. So my strategy is then to buy quarts when they're on sale (when I can get them for $1.99) and half a gallon when I have no discount.
Even if you ignore the symbolism of throwing food while people still die of hunger, I am surprised by the "so what?" reaction of this crowd. Isn't YC about improving efficiencies? Yes there is waste elsewhere, the average server utilization in a data center is 12% but that's one reason the cloud came along with a 60% utilization (see http://www.boozallen.com/media/file/Economics-of-Cloud-Compu...) and new technologies like Docker will likely make that even higher.

So instead of saying "So what?" shouldn't we say: "we can do better and this is a business opportunity"?
just imagine what all those ISPs and hosts who are not on the private list but who use Xen are thinking. They must be crapping themselves, hitting F5 on the announcements page, ready to pounce and fix.
calorie reduction diet has been shown to drastically extend lifespan of rats. people are reporting the same thing as well. bodies run more efficiently.

also can't there be a compost program for mixed food? i mean we compost compostable stuff and mulch make things grow in our garden very well. I think the city was going to even collect organic waste use for citywide processing and composting to be used on city grounds. this could be a boon to replacement of fertilizers and move towards self sustainability.

my 2c
If any phone is going to be subject to the same force at the edges, regardless of length, then that's what you want to be measuring. It doesn't matter if a long phone can handle slightly more torque than a short one, if it's going to be subject to a lot more torque.

I don't know what the stresses applied to a phone in a pocket actually look like, but it's not obvious to me that measuring force rather than torque is unfair.
Basically, yes. In developed countries we spend a historically small percentage of our income on food, because food is cheap and abundant.

Meanwhile, as you say, the problem with starvation is a lack of purchasing power. Amartya Sen won a Nobel prize for showing this, in fact. Over and over we see regions with famines exporting food, not importing food; Sen initially showed this was the case for the Bengal Famine of 1943, but it has been seen many times. People think the Irish potato famine was all about potato blight, but to quote Wikipedia "Records show Irish lands exported food even during the worst years of the Famine" and "Ireland exported approximately thirty to fifty shiploads per day to Britain, which was more than enough to feed the population." The same pattern has shown up in Africa over, and over, and over, for example in the Somali famine of 1981, or the Somali famine of 2001.

(This is also why food aid to stricken regions so frequently makes things worth. Donate a few hundred tons of food, and the market for food in the region crashes. Good for the urban poor; terrible for the rural farmers and pastoralists who are usually the primary victims of a famine. Worse, "death spirals" have been documented where the price of cows drops so low that farmers can no longer afford to feed them, and end up having to slaughter them all, just as the market price is at the lowest. Then when food prices recover, the herds are dead and the farmers are bankrupt, and can afford neither food nor new cows. And the famine keeps on rolling.)

In short: You're right. Food wastage in America has no impact overseas.

Edit: There's also some political issues. India is currently fighting tooth and nail to protect the millions of small grocers and shopkeepers from the international supermarkets and "big box" retailers. India points out—correctly—that if WalMart or its kin come in, many of those small shopkeepers will lose their jobs. Economists point out—correctly—that the existing system is horrifically inefficient. For the system as a whole, those jobs are a massive cost centre, begging to be rationalised with automated warehouses, containerization, RFID tags, the whole 9 yards, instead of the archaic, expensive, inefficient system now that wastes so much of what passes through it through wastage, overheads, spoilage, etc. The same fight is also brewing over farming; peasant farmers are horrifically expensive and inefficient, but while a few mega farms could produce several times as much food for less total cost, they would do so with a tiny fraction of the manpower. And the urban jobs for the peasant farmers do not exist, and throwing them out of work would be a humanitarian disaster which the Indian government is not equipped to deal with. And so on. Food is cheap and abundant in the West as part of a massive system of technology and infrastructure; as much as we might wish otherwise, it cannot be easily grafted onto a non-Western society without major changes which Africa and India, at least, are not yet able to embrace.
Since the sub-process runs as the same user as the original process, it wasn't really considered a security problem. The problem is calling a sub-shell without sanitizing the environment first. It's really a bad idea to connect unsanitized user input to a turing-complete system of any kind.
burn the methane?
I think the public actually do have some ability to distinguish what is nonsense and what is not. I think her arguments against azodicarbonamide seem quite reasonable to me and have been acted on. Her arguments on microwave ovens on the other hand appear well nuts:

'Hari has argued against the use of microwave ovens, for reasons that include the claim that they cause water molecules to form crystals that resemble crystals that have been exposed to "negative thoughts or beliefs," including the names of Hitler and Satan.' (Wikipedia)

but I don't think many people take that seriously.
correct the title, "opinon".
Exactly. It's impossible for bash to know the difference between wanted variables and possibly-malicious ones. According to Postel's Law, it's Apache that should be more careful with its output, not bash that should be suspicious of its input.
Gottfrid Svartholm Trial: IT Experts Give Evidence