skysight-inc/HackerNews huggingface dataset:
Yes.

In the past, I've used Python to automate Excel, Outlook, and some non-MS products like Catia.

Honestly, I don't see the advantage here. FOSS is nice, and OSX support is nice, but if you're interacting with MS products, FOSS is not a concern anyway, and it's probably running on Windows...

What would be really nice is if it supported multiple backends, so I could run the same Python code with Excel, Apple's Numbers, Google spreadsheet or Gnumeric, and have it work the same on all of them.
Good refresh on inner-self development and mental toughness, the Mind Gym concept by Mark Divine very solid. Here's a podcast interview> http://life-longlearner.com/mark-divine-interview/
What do you mean? Most workers don't work for tips. They have established salaries or wages that the employer is required to pay them.

Tips are entirely optional. Official payroll isn't.
also http://www.pyxll.com if you want a solution that embeds python and doesn't use a COM server
Nothing special. We use S2 to compute a covering of a polygon (like a town) by a number of grid cells. If you insert a polygon (or line) into a geospatial index, it will actually be inserted multiple times, with one entry for each grid cell of its covering. Then when you query by a point (e.g. to answer said query, assuming you have a table with all the town polygons), we find any polygon that has a grid cell that intersects with that point and then do a post-filtering check using the actual detailed geometry of the candidate polygon. This is fairly efficient and can be extended to a lot of different cases, though I'm sure there are more efficient specialized data structures for some specific types of queries.
How about intentionally adding a base that creates a very water-insoluble salt? Then the process is just 1) add base 2) filter 3) re-carbonate it, and you have non-acidic coke.
Thanks for the feedback, Dang. As head moderator, I take your perspective very seriously.

I understand that rewriting titles to make them more sensational is definitely undesired. We want titles that accurately reflect the article.

With that in mind, I have a question. Sometimes the most salient aspect of an article from a HN perspective is not mentioned in the title. This often happens because a NYTimes title has to be less technical for their readers. Thus, they title the article more broadly but the actual content can be a much more specific perspective.

In the case of this article, the real focus is how collaboration in the open source community often lacks the structure required for ensuring code quality.

Given that the average HN reader is starkly different from the average NYTimes reader, why isn't is sometimes appropriate to change the title to reflect these differences in technical knowledge or perspective?
Can Confirm, I work at a start-up and see it on a regular basis.
You don't pay slaves.
> "Our [widget] Will Make [industry category] History"

I'm pretty sure every corporation, every scientist, every inventor thinks this about their big project. While some actually disrupt, most intend to disrupt, and fail.

Disruption is not only about invention, it's also about marketing... One thing is for sure no one has cornered the market on disruption.

I don't know if I'm being that clear, in relating industry disruption and making history... An example is IBM's Watson made Computer Science history but they marketed the shit out of it, too, and by hosting a competition on jeopardy between Watson and the greatest Jeopardy players of all time, media attention was scored, public paid attention, and only then was 'history' made. Watson, the invention was not the history creator, the event involving Watson was the "history".

Another example is Nikoli Tesla, while he technically made history many times over, isn't very strongly remembered in the public conscious, Edison on the other hand wasn't as much an inventor as he was an excellent marketer. He didn't even invent the light bulb, but he sure did make it famous and by doing so "made history".
And I sound sillier with any alternative, like when I start with "Well, it’s complicated, see.." and fumble around at explaining what an entrepreneur does, then get asked "So you run businesses that you start? Isn't that an entrepreneur?"
The parent understands what you wrote just fine. What I think you misunderstand is the parent's point. The "$1B" has to come from somewhere. The parent's point is that in the Valley/VC bubble, that $1B isn't primarily from economic activity in the traditional sense that a business provides a good or service to enterprise or retail consumers in exchange for money, but is instead primarily from additional rounds of fundraising from other investors in later series.

So I'd modify your first sentence to make it more accurate: "It might be you do not want to build a company with a $1B value that is largely paper-money based on investor provided funding."
Using environment variables with Webpack and Divshot
I disagree about DF. I just grabbed a tutorial and started playing. The real curve starts later in the game when the crappy UI is no longer enough to drive 80+ dwarves.
It's actually not "new" it's a "feature" that everybody became aware it existed since long ago only once Shellshock bug became known.

Christos Zoulas from NetBsd has the arguments that I really like: it's a "feature" that was widely unknown and that should be disabled by default:

http://openwall.com/lists/oss-security/2014/09/25/31
A Healthy Platform (Engineering) Checklist
This is not a vulnerability, it is intended functionality. Some scripts undoubtedly depend on overloading a shell builtin command with a function (even though it is gross).

The post's proposed exploit path is not possible on Linux and most OS's, because you cannot have a setuid script.[1]

[1] http://unix.stackexchange.com/questions/364/allow-setuid-on-...
Exactly. And it seems like you would not want to hire the person who says "yes" because you know that person is a liar. But I guess Airbnb worked out anyway.
You're correct that neither approach is wrong, especially since it might largely depend upon what type of business you're building. However, I think if you have no fear in your ability to raise funding, a business may relax in the real market discovery search. a super sexy valuation is always nice...but I think profitability is always in vogue. When I read this recent article[0] about what it MVP really means, it reminded me that some people in our industry forget that finding a market for your innovation is the lifeblood of long term success.

[0]https://news.ycombinator.com/item?id=8356906
So does that discredit everything else he says? He very bullish on the disrupting capabilities of Bitcoin, for example.
I don't know is there are any tools ready-to-use that can help you doing this.
But if you have some knowledge about programming, you can look for some libs (for python, ruby, nodejs, shell, etc...).
That's kind of a poor attitude to have on a forum about -hacking-. :P
9 Rules for Emailing from Google Exec Eric Schmidt
I am oversimplifying. You are right that speed still matters for cancels.

It's true that you can post hidden midpoint orders. That's a far cry from posting a public bid at $42.2837 in order to jump the queue ahead of someone posting $42.2836.
But these don't work for tips either, since there are no tips. They work for whatever they agreed with (or more likely, accepted from) Soothe.
> It seems that it's possible to shift back towards single-income families simply by becoming a highly-developed, socially-safe country.

In other words, do something sufficiently similar to providing a basic income.
Sorry! My conclusion (i.e. that RedHat was patched against this 3rd vulnerability) was just by running

env ls='() { echo vulnerable; }' bash -c ls

on my recently patched CentOS box. If I'm reading that right, if I was vulnerable, I'd get the output 'vulnerable'? But, instead, I got the correct output of the `ls` command.

The linked article was pertinent because RedHat did patch bash in a different way than upstream. Here's the relevant quote:

> Our patch addresses the CVE-2014-7169 issue in a much better way than the upstream patch, we wanted to make sure the issue was properly dealt with.

That help?
Definitely works on Ubuntu and I'm assuming Debian as well.
Will the Uber model work for a good or service that isn't commoditized? All we ask of a transportation service like Uber is to get us from point A to point B cheaply and safely. A massage is more complex and doesn't have a two item to do list that can simply be checked off and labeled "a good massage". This means the standard deviation of quality is a lot larger. There is also a benefit of loyalty. Massages are a more personal and customized experience than transportation and there would be a greater benefit to having your masseuse know your preferences.
In Debian Lenny you should also do at the end
sudo rm /bin/bash && sudo ln -s /usr/local/bin/bash /bin/bash
Harvard Business School is complicit in America’s widening inequality
Flattr never really took off but I don't know why. Patreon is taking off. Practically every podcast I listen to uses it.

One reason why ad-based is the more common model is that in the USA we are more used to ad-supported media than pay-only commercial-free? I know I have heard some podcasters say that they have gotten comments from UK listeners that it sounds weird to the UK listeners to have the host read ads. In the USA this is a common thing on radio (they will have pre-recorded radio but then have the host actually read other commercials as well).

But that is all just me guessing.
The Man on a Quest to Open-Source Cancer Research
Explaining the Shellshock bug to a 7-year old
I am not really qualified to determine whether there is a bubble nor do I believe there is much value in speculating constantly about it. If there is one, valuations will drop, cash will be harder to get. Its not going to change the kind of work I like to pursue or the work that makers, builders and engineers do. It will probably change how much everyone is stuffing in their pockets, fine.

One glaringly bizarre thing from my perspective is why anyone would listen to VCs about whether we are or are not in a bubble. I'm sure there are other perspectives, but it would seem someone heavily invested in seeing valuations go up wouldn't want to ring alarm bells... I think instead I would rather gauge things by the numbers which unfortunately, are probably not frequent enough to reach true statistical significance to not have incredibly large confidence ranges. That being said, some of the money flying by on crunchbase every morning is ludicrous.
Pure Python Markdown Parser/render for the CommonMark Specification
Fuck it. I'll play along.

Buzzfeed and the other a hundred or so copycats.
Searchengineland.com, sejorunal.com, smashingmagazine, ColledgeHumor, NatGeo, Scientific american, goodhousekeeping.com to name just a very FEW. I've written for some of those and have seen the actual traffic numbers. There are thousands of pages which promote something and do very well. Those are the ones I saw in 2 minutes browsing my feed.

I can go in a lot more detail, but this is just not the place. The reality is that marketing and PR is fucking hard. It's like me saying "I tried to build a spaceship, but Boeing's parts just suck big time, so I couldn't".

I just don't get why people think they can just wake up one day and be rockstar PR specialists. Just because you can click a few buttons on a web page doesn't mean people want to read your shit.
Help your future self search for stuff. If you get something you think you may want to recall later, forward it to yourself along with a few keywords that describe its content.

That just seems silly. You're telling me the best way to search for something is to make a copy of it? We need a better way to communicate than this. I expect better from the world leader in search and email.
His firm's investments are the ultimate expression of opinion. So do we now question the validity of those investments? AirBnB, Coinbase, Digital Ocean, etc?
Yes, if you have full control over the environment you can make all sorts of havoc ($PATH, $LD_PRELOAD, ...) What made shellshock special is that you only needed to control the value of a variable, not its name.

I don't see how this qualifies as much of a vulnerability. Maybe now that bash's imported-function feature is better known we'll see it leveraged as part of a multi-step attack though.
Toy Script to Incentivize Daily Writing
> who wants to hear others' reactions to YT videos

You'd be surprised. There are a LOT of "look at my reaction to some video" videos on YouTube.
>> it would be weird to turn down money when it's on the table

really ? Its not free money. You have raised rounds so you know it will dilute your equity.
>ads and PR spending

These are growth activities as opposed to the others you list. The truth is many products never have just organic "viral" growth. They need ads, sales, or both to drive it.
Thank you for the understanding, and my heart goes out to you as well for your penalties. In a more just world real users would decide what succeeds and what does not.

My defense of the current site from a content perspective is simple: just go to it (www.rackforms.com).

I feel very strongly the look (clean professional), layout (easy to navigate), and technical details (fast, fully responsive, etc) are not causing it to be penalized from a content perspective.

My reasoning for why it should rank is also simple: it used to rank high, and none of that was an accident. I've always followed common sense methodology when creating it, such as creating content for humans, not search bots.

Never the less, since the penalty I've happily made dozens of changes, most of which were suggestions from kind and well meaning SEO folks -- none of them made a difference. Not a single one.

Conclusion -- my issue isn't nor has it ever been content, it's links.

Of course the irony is the vast majority of changes I made were to please search engine bots, not humans. Google has always said this is the opposite of what we should be doing.

For example, one guy suggested I used to word 'form' too much on my home page, and Google may consider this keyword stuffing. And so I pruned it from 23 to 12. Trouble is I sell web form software, and let's just say changes I made were, in many cases, a stretch -- many sounded decisively nonhuman. Who and what am I helping at that point? Google bot is clearly smarter than that. The kicker: the current page 1 site used the word 'form' 43 times. It's just silly voo-doo at this point, and no one except Google knows what the hell they're talking about.

Here's why this is all a bit scary: as link-penalized webmasters poke around the edges and make such changes, we're getting further away from a site that used to be looked upon favorably by Google from a content perspective.

The reason I cite "it used to be good enough" is common sense. Yes we can always improve our site and we should be: but a link penalty, mine especially, is so thorough and so unrecoverable so far, that making loads of other changes will very likely hurt more than help.

But again, just visit my site, visit the page 1 and 2's, and then consider I'm page 15 or lower. I have no doubt my site, should it's ranking be restored, would be a delight for Google users to visit.
There's also office in Toronto (where I'm sitting), the Bay area, and a lot of other cities. It's a neat place.
This could create a huge underground prostitution market worth billions. I hold no political view, just a happy ending for those who pursue it.
No, he complains and plays the victim all the way to the bank.
Shouldn't this be business 101? Plan for a downturn, use your resources wisely to avoid future disasters? Even after several market crashes, it's surprising to see so many businesses acting so recklessly with their capital. You would think being in the valley they would know better.
'Make in India' vs 'Made in China'
Apple watch radial chart with D3.js
Pocket Casts just today started a beta version of this service [1]. The paired Android/iPhone app can sync latest episodes as well.

[1] http://www.androidpolice.com/2014/09/26/pocket-casts-web-now...
Initially it was exciting, but I got turned off when I realized how much the two sides hate each other, and how much that hate festered into petty dramas.

The last thing I need is a reason to hate on and talk shit about other people for a completely made up reason
Vertically integrated monopoly
NASA Expands Commercial Space Program
If the only evidence on Marc was the Snowden info, sure, it might mean to discount his statements. But the rest of the information that we have of him as a VC totally outweighs his Snowden views to the point of irrelevancy.
Microsoft Visual Studio 14 CTP (http://www.visualstudio.com/en-us/downloads/visual-studio-14...) supports touch for scrolling, pinch-to-zoom, tap-and-hold for context menus, double-tap for word selection, and line selection by tapping in the margin.
Wow this is getting out of hand, that's not really a security vulnerability anymore. That's how bash passes exported functions, I'll get back to that.

There is some misunderstanding though regarding the suid shell script. I can't think of any modern unix other than solaris that allows those by default any more. It's just not a concern anymore unless an admin twiddles some sysctl or what not. And in the case of solaris /bin/sh is not bash. Also /bin/sh does it's own setuid after comparing to 100 (unless the -p option is passed) so often if people are not adding users to a group or sudo, they would create a ksh or perl script instead. Anyway that's just rambling, sorry, the short answer is that I would be really surprised if there was any modern system that used bash as /bin/sh and also allowed suid interpreter scripts.
> Its not going to change the kind of work I like to pursue or the work that makers, builders and engineers do.

As someone who lived through the original dot-com bubble, I would respectfully argue that this viewpoint is naïve. There were lots of "makers, builders and engineers" who had to settle for things other than the work they liked to pursue for many years after it popped.
Can we go straight to the part where this is disabled behind a --insecure flag and everyone can spend a release cycle migrating untrusted input handling to languages which were designed for it?
Why use the term cloud? It's just a server, no cloud-ness.

https://en.wikipedia.org/wiki/Cloud_computing
What really happened during this time? I often hear about it but not sure what was experienced by the Chinese people and what the long term effects were.
I think it depends on what you mean by relationship. I've been listening to the same morning radio show for 20 years or so and I feel like I care about the hosts even though they don't know I exist.

On the other hand, many of the podcasts I listen to I am able to be in their chatroom when they record and can have an actual back and forth. I think they recognize my name so that is a real relationship even if it is a tenuous one.
The Romance of Science in Victorian Natural History Bookbindings
The advice to build a war chest is often quite pessimistic. For example, if you think the market is going to bottom out by the next time you're going to raise money, you might as well raise it now. With all else being the same, it would have been a whole lot easier to raise money in 2000 than at then end of 2001.
You know, I agree that I shouldn't care. That was a momentary sentiment.

Either way, I use vim, and, as a result, I have to listen to pro-and-con debates unwillingly... all the time. At the time, this was an example.

In actuality there is no right answer to what browser is best. Personally, I think vim is fast and easier-on-the-hands than emacs. In particular, I never have to lift my hands from the main row, where in emacs I too-frequently have to press combinations of keys and shift my positioning.

This all comes from someone who originally used emacs, then converted to vim.
Skillz Raises $6M to Bring Competition, Cash Stakes to Mobile Games
How Often Is a Home Run Caught by a Fan?
Useful Websites and Tools for Testing Code Snippets
Does this change default to "yes" on unattended installs? I'd assume it doesn't, because that would be dangerous.

EDIT: Indeed, from the same changelog: debian/dash.NEWS.Debian: when upgrading existing installations, the system shell will not be changed automatically (closes:#539363).
Even if you have a setuid script it appears that bash won't import functions in that case.

However the fact that the script isn't setuid isn't really the concern for these shellshock, since a setuid program could indirectly run /bin/sh.

Again, though, this doesn't seem to another shellshock problem. In shellshock you only needed to control the value of an environment variable, not its name. If you can control the name and the value then there are plenty of other ways you can attack programs.
It does; considering situations where this would be seen as a realistic/novel approach for fixing flapping tests. No need to examine root cause! sigh
I like the drone idea, but it wouldn't have enough power... Unless it was stationed right by the receiver, where it wouldn't need too much?
Is bike sharing just for gentrifiers?
As a UK expat, I don't expect to be able to vote in the UK. I don't live in the UK. Why should I vote there? Why would I feel entitled to?
Maybe the title should be "VMWare Fusion (for Mac OSX) local privilege escalation." Since, unlike Linux, the ways to exploit it on OS X seem significantly more limited.
you make it sound like all the VCs got together and decided to make this happen. it's instead an artifact of the economic system we have. it's due to humans being involved, but not caused by individual humans.

the car analogy would be the waves of stop-and-go traffic on a congested freeway, which is caused by variances in reaction times of people.
this, or Hbase + Phoenix: http://phoenix.apache.org/
Not about the game, but this was an incredible read about meeting new people. For me, it's the spice of life, and it's why I'm now a part-time Lyft driver. Instead of being bored, I get to meet someone new, go for a ride, and have a real conversation about things that aren't MongoDB and Go.
There's also the Maybe monad, which is a good substitute for null.
My favorite reference is the VBA Developer's Handbook by Getz & Gilbert from 2001.

You can probably learn everything you need from Googling for solutions to problems, but that book was great when I was committed to working with Excel and Access for a while. It covers a lot of things you're not going to think to search about.
The issue is some one else will take the money and build your product and give it away for free. At that point you die.
OpenStreetMap Coordinates 0,0
Well I certainly wouldn't want to appear silly to someone else. That would just crush my spirits.
not sure what this means
"hmm... (HTTP/1.1 200 OK): Possibly vulnerable. We couldn't detect it as being vulnerable. We are working on an update to this scanner that will allow for a deeper scan."
My girlfriend and I met another couple to go canoeing one day on town lake. The guy in the other boat was a chemist. He trotted out the old "glass is a liquid" thing, and I explained no, that's not true, and I went into great detail. But he stuck to his guns and insisted, and then played the "professional chemist" card, saying "I think I know a little bit more about chemistry than a guy who makes webpages."

I was furious, but my dogged insistence that I was right was starting to draw glares from both of the women, so reluctantly, in the name of peace, I dropped it. Then the ass had the gall to say "Haha, don't worry, I'm sure there's a lot of things about webpages that you could correct me on!"

The worst part is, if I sent him this article, and any number of others proving the same point, he'd just say "what? why are we talking about glass?" That conversation was nothing to him, and I'm sure he's already forgotten it.