skysight-inc/HackerNews huggingface dataset:
Tech Startup Salary Survey 2014 // by Compass (Startup Genome)
Isn't Apple stuck to an old version of Bash due to the GPL, just like they were with GCC?
For a Worker with Little Time Between 3 Jobs, a Nap Has Fatal Consequences
It was a node.js app. You didn't need to add .cfm to the paths to make it a joke.

/me ducks
Aye. Especially given how the patch was pretty much just as exploitable, and the patched patch looked just moderately so. Were this more than a press release, it would be discussing a plan of action as to any sort of auditing plan to make sure bugs like this in the future are discovered /before/ they start causing trouble.

OpenBSD has shown that small organizations can audit and maintain code with a focus on security and correctness. Why hasn't the FSF, with its greater level of resources, managed to do the same?
This is not that interesting. Marketing pages like these are usually outsourced to agencies. This doesn't suggest that Twitter itself will be moving their main stack to ColdFusion.
That's probably the main reason. It's too bad though because it would be great to have it available on linux, even in an unsupported offering.
McDonald's delivers in Shanghai?
haha that's a good bit!
Startups: Interview on Sherpa Foundry-Biz Innovation at TCDisrupt
The headline should read "Anyones health kit app stop working?"

https://news.ycombinator.com/newsguidelines.html

My dashboard only contains a few things I entered manually, and fortunately it's still there. I haven't been using a 3rd party app, yet. (iPhone 6 w/ 8.0.2)
This would have been more interesting if they'd ported Photoshop to asm.js, or even NaCL...
This is huge, no matter what kind of technology or compromises being made, it shows the acceptance and maturation of chromebooks in the general public.
Currently in "Full SSL" mode they take any self-signed certificate. No fingerprint confirmation or even pinning.

I use CF on multiple sites and generally love it, but this is one of their biggest shortcomings - I still need to buy certs if I don't want to get MITM'd.
> Overall, this doesn't sound good at all. If they are streaming screen "video", color correction and pixel-level precision in design is going to be tough. Photoshop seems like one of the most difficult programs to work via VNC.

This would be a huge issue for the professional market. But it appears that they are targeting education with this first (or maybe just that market). Color precision is likely not the highest of priorities.
Lee Sedol wins historic jubango against Gu Li
> On the business side, when interviewing VPs Marketing/Sales, the #1 question asked was "What additional value does this bring beyond what we already have?".

It's true that massive amounts of data are being collected, but the better value proposition for customers to sign up is: "Billions of dollars are spent by companies on advertising; you deserve a slice of that."

>The other issue is that the amount of cash required to make this interesting for the avg. person is relatively high.

I also ran into the exact same dichotomy when sussing out this idea, namely that people don't mind monetization of their data exhaust/patterns "for free" or in nominal exchange for a foreground service, but being asked to give this in direct exchange for monetary compensation makes them demand a very high premium for the exact same data.

EDIT: Personal.com is establishing a track record of securely consolidating and storing sensitive information. I can't help but think that controlled sharing of personal information (extending beyond core password/address/credit card/banking details) will be their next big push.
That’s completely irrelevant, since there are patches for all old versions of Bash.
I had a significant career advancement as a result of my activity on HN. And I am sure that I am not alone.
Because without doing independent research, a reader must accept the possibility that the story is wildly exaggerated, which is the sign of a narcissistic journalist.

If the subject is a narcissist, his description of himself may be wildly exaggerated, which is what the article reports.

If the writer is a narcissist, his description of his subject may be wildly exaggerated.

And yes, there are plenty of stories of narcissistic journalists, some eventually exposed as frauds who make up their copy.

The really interesting cases are those in which both the writer and his subject are narcissists.
Show HN: Teech.io - Parse for education apps developers
node.js or how I stopped worrying and learned to love spaghetti code.
Free Your Metadata
Photoshop seems like one of the most difficult programs to work via VNC.

I think it's actually the opposite. Usually only a small amount of the screen is changing, so response is fast. For full-screen or complicated effects they can provide more CPU horsepower than your average laptop, so the operation may actually complete faster, even if screen redraw takes more time.

FWIW I've used Photoshop over Remote Desktop in the past and with a good connection it feels perfectly usable. There's a little input lag which is only noticeable with sweeping brush effects, not UI interactions, and like I say large area screen redraw (e.g. scrolling) suffers. There's no visible compression or artifacts and I don't see why color correction would be an issue.
How Emotions Lead to Smarter Decisions
Isn't this irrelevant since no one is 1) using CGI on Macs and 2) no one is using a Mac as a server?
The fact the post was shared on Google Plus speaks volumes.
It might appear that bvanslyke is correct because if Uber is understood to be breaking the law and that revolves around the core of their business then they could be considered in the business of organized crime.

I can't help but question whether the difference is doing something illegal to obtain the money and THAT being the organized crime part or the fact that their means of generating revenue could be viewed as legal but that it isn't legal because of consumer protection and liability laws.

In other words, shaking someone down for protection money is illegal. Driving someone from point A to point B is legal. Doing it as an unlicensed cab is illegal but the actual practice isn't.

I liken what they do to be more closer to how Tesla chooses to sell their cars. Legal in theory and and ethically positive but not legal in some areas due to skirting the line between where the laws come into place.

I don't think RICO statutes would be a very strong case against Uber.

Are you technically an unlicensed cab if you won't drive your friend to the airport unless he gives you gas money?
I suspect that it's built using Native Client (https://developer.chrome.com/native-client), not using VNC. "Streaming" in this context probably means that the code and files are dynamically served by the server, rather than referring to streaming video.
How Much Cash Should Your Startup Burn?
I believe that they can provide a patch for the old version if they release the source to said patch.
humorous/ironic is probably the better word. The application server on this site is pretty much irrelevant, they could've just used a google form to collect the data.
No, they specifically say that if your internet connection is terminated you will need to reconnect and restore your session. It is a virtual machine running in the cloud and you are VNC'ing in from your browser.
Benchmarking Tableau's S-1: How Key SaaS Metrics Stack Up
If You Only Do One Thing – Part 10
This is an amazing hack but it will eventually get you a slap on the wrist from LinkedIn. When enough people complain about unwanted "invites," you will be given a warning about violating terms of service. Be careful about using this hack.
Care to expound why you disagree? Or was there some poll I was unaware of in which you were responding to?
The Concur Acquisition in Context: A SaaS MegaExit
If you're going to do something, do it right. Or leave search out of your product if you aren't willing to invest the effort and energy required to implement a proper solution.

Those SQL queries are hideous. Most people have learned that, because of many developers like this, to avoid search because it's next to useless. Please do us a favor and leave it out of your product if you aren't willing to invest in a proper solution. Not one that is "good enough".
Benchmarking Veeva's S-1:How 7 Key SaaS Metrics Stack Up
Would you like to expand on that comment? What does it mean when a post is shared on Google plus?
Maybe I'm not doing things right, however, when I run the test code for shellshock my 10.9.4 box seems immune.

Maybe it's homebrew patching it...
Benchmarking Zendesk's S-1: How 7 Key SaaS Metrics Stack Up
Which volumes are those?
No, it's actually streaming.
As the link says, they run managed vm's and stream it.
As someone else says, VNC is really old technology. We can do better.
CS6 already has gold status under Wine, works quite well. They could "port" it to Linux just by wrapping it in a Wine container and fixing a few bugs, much like gog does with games (using both Wine & dosbox)
> While it should actually be a reasonable assumption, this is likely inaccurate both concerning public servers

Funny, I have personally worked at a company which ran their frontend on Mac Mini's. They weren't using CGI, but at least part of the assumption that people don't run Apple web servers is false.

Also, Mac supports running an Apache instance configured to run CGI scripts out of the box, correct? I haven't personally used it.
Clojure Cup 2014 Apps
Yes, but there's another issue.

Apple hard links /bin/sh to bash.

They could switch /bin/sh to an Almquist shell like dash to mitigate Shellshock.
Yeah, all those people who bought chromebooks for their bleeding edge performance will be really upset.
Trees as Linked Lists in Common Lisp (2010)
I have some serious doubts about the usefulness of this -- considering how long it will take to "open" a large PSD file.

There's also the issue of sensitive/confidential content -- Adobe is putting a very large bulls-eye on themselves. Since your PSD/etc files are being uploaded to Adobe to "open" Photoshop, they'll have to be stored there, and that is very attractive to nefarious individuals.

I understand that in actuality the files are stored on Google Drive, but the data itself eventually exits Google's network to enter Adobe's. I wouldn't be surprised if Adobe keeps copies around for their own convenience, eg: caching or historical metrics.
Four inch iphones are gone forever
Well, it's being ported to run in a virtual environment, not necessarily even Linux :/
Adobe PhotoShop is coming to Linux, through Chromebooks
thank you very much - did you try it?
I think you're making this overly complicated.

For one, doing client-side color correction (for example with WebGL) is technically possible. It's probably not in this solution, but let's not use words like "impossible" unless they're actually impossible.

But more importantly, I think you're just complaining about latency, but then you're using the phrase "impossible."

EDIT: I thought you were talking about gamma correction and the color space of the display, where the program running on the server wouldn't know about the gamma and color characteristics of the monitor on your current browser. Thus, "monitor settings." But no, you're just worried in general about whole-screen fill rate latency. Again, I think using terms like "impossible" is hyperbole. It will be fine for some users, and not for others.
1. No means no, full stop.

2. Yes means maybe.

3. Yes followed by no means no. (see #1)

4. No followed by "non-verbal yes" means no. (see #1)

5. No followed by yes means assume no, except for painfully clear yes

I mainly wanted to add my #3 even though "Never ignore this signal, ever." is pretty clear. For 4 and 5 I just wanted the list to be closed under "followed by".
Not original or insightful or funny. Disappointing.
Shocktrooper: mass server patching for shellshock
Show HN: Moo.do – Simple, Powerful Organizational Tool
A nice, convenient way to get the graph. For the integral:

http://www.wolframalpha.com/input/?i=2+integrate%28sqrt%281-...
Thanks to the head start provided by gcr, recently I added the equivalent of geiser's support for images in the REPL, to racket-mode.

As for supporting WXME format files: Although that sounds very cool, I don't think that's within the scope of what I want to attempt for racket-mode (or have time to do) now.

p.s. The video of my demo at RacketCon was posted recently: https://www.youtube.com/watch?v=QWiteH8PARQ&list=LLoI3ip0MG_...

p.p.s. My "30 year old technology" comment was re the previous speaker. I am definitely not begin derogatory about Emacs. :)
Do you believe that commercial software shops are dedicating resources to completely understand their software and 'all of the potential future ramifications'?

Or are resources dedicated to pushing out product and moving on to the next?

Better a hell I know and can see than one hidden. At least there is a chance of seeing the demons before they strike and exercising them without relying on a priesthood, to stretch the metaphor.
The page read like a pile of propaganda.
I understand the point if you're already proficient with PG, and want to keep it in the same system. But I will say Elasticsearch is surprisingly easy to get started with. Install, POST some docs, GET a search query. That's pretty much it. I implemented it for a project and it literally was a few hours to get rolling with it (and improve search speeds by orders of magnitude).

But sure, it is another system to have to deal with.
Great job guys. The Survey looks good!
FYI. Just because it's a CFM extension, doesn't mean that they are using ColdFusion (which is Adobe's CFML engine). They could very well be using Railo (http://www.getrailo.org/) or OpenBD (http://openbd.org/). Both of which are free, open sourced and magnitudes faster then ColdFusion.
Mailage – Uber Productive Email for Teams
i belive the bug can be used to execute code on your mac with a dhcp server

https://www.trustedsec.com/september-2014/shellshock-dhcp-rc...
My 10.9.5 box fails the tests.

What does

/bin/sh --version

give you?
"banging the Free Software drum and pointing out the deficiencies in proprietary software." is exactly the FSF's purpose. It is literally what they are set up to do.
In Haskell you have appropriate typing for lenses because you build paths in a typed way. For instance, the API could like like this

type Lens src tgt

compose :: Lens src int -> Lens int tgt -> Lens src tgt

and then chains of lenses composed with `compose` would carry the appropriate typing information to not have to fall back on Any. This doesn't work "idiomatically" in Clojure because the *-in commands want to consume a list of keys where (1) each key is untyped and (2) the list cannot be heterogenous like it must be for the typed API.

That all said, it'd be easy to implement the typed API in Clojure as the "van Laarhoven" representation I mentioned has `Lens` just being a certain kind of function and `compose` just being regular (reversed) function composition: it's exactly like transducers in that regard (in fact, transducers can even be seen as a specific instance of a particular generalization of a lens, I believe).

The challenge is figuring out where the vtable for things like `map` lives. I'm pretty sure this is solvable in Clojure by using protocols (although I'm also pretty sure you can't get `Traverses` that way since you need return type polymorphism to get `pure` to work).

Anyway, it'd be neat to experiment. Maybe I'll teach myself some typed-clojure and see if I can't port the van Laarhoven lenses.
Interestingly enough, the graph I linked (and didn't look closely at before posting) shows this week that hashes and possibly also difficulty seem to have begun to take the first slight nose-dive in a long time.

It looks like the difficulty might even go down this time, in about 10 days when it's recalculated. Some people (more than the opposing numbers) are apparently turning off their machines now (ostensibly it's not profitable to start/continue mining at this time.)

For a long time, people "in-the-know" have been honestly telling folks that it's much cheaper and less risky to go out and buy bitcoins directly than it is to try and get involved in mining. I'll leave it for you to sort out all the additional potential conflicts of interest added there.
So then, is the proposed alternative a library of containers and algorithms that are genericized via void pointers, memcpy sizes and function pointer predicates?
Not any more! They abandoned that name for several reasons - the state of Kentucky enforced their name as a trademark, plus 'Fried' became a bad word. So now they're just 'KFC'
One possibly negative outcome of this could be SEO related. In my research thus far, Google has suggested that HTTPS _could_ increase your ranking to a very small degree, but the question is whether they consider this duplicate content.
That's what they're attempting to establish in a nascent 2-sided market where, by other proxy measures, the value of personal information is close to zero for large swaths of the uneducated digital population.

I use the word 'uneducated' because presumably the working hypothesis is that once data-awareness is raised (i.e. "you can actually get paid to share your data!"), the corresponding market-price of various personal information tuples/assets will rise.

EDIT: As a single other data point, AT&T's cable division called U-Verse is offering a fiber plan called GigaPower that effectively pays subscribers $29/mo for their participation in the AT&T GigaPower Internet Preferences (i.e. consensual data-mining) Program[1]. The "payment" is offered in the form of a price delta between the Premier (i.e. data-mined) tier for $70/mo, or the Standard tier for $99/mo[2]. So, at least one large corporation believes that household web browsing data is worth $29/month which is a good proxy for a price ceiling on how much personal data could be worth in the medium term.

[1] http://www.att.com/esupport/article.jsp?sid=KB421828&cv=812#...

[2] http://www.eweek.com/small-business/att-u-verse-with-gigapow...
The FSF does not maintain the software, it is a purely political organisation. The GNU project is responsible for bash.
This law does literally the opposite of what you are talking about.
Exactly. If you have complaints because digital data is not protected like physical property, voice your concern to your government.
Taking Asimov quotes out of context is a form of violence.
I have to admit that sometimes I write sphaghetti code, however, no code I've ever written has bugs, because I aim not to write bugs in my code. :)
If you can play an FPS remotely (and I have - and it works) then I think this is a walk in the park.
That's the whole point of the Cloud. To the business, it deleverages the customer's control and increase the latter's dependence on the former.

Think about why Skype is no longer P2P. Think about how some Video/Audio formats are proprietary that you have use the same service or else you risk losing all your past recordings.
This will eventually get you banned by LinkedIn since it violates ToS. At first you will just get a warning (and have to re-agree to ToS to be let back in). Be careful using this hack. It's an amazing hack but will also very quickly get you in trouble.
A friendly warning to all! Don't say anything negative about Bitcoin here or on /r/Bitcoin as you'll get gang-downvoted. A lot of people have a lot of built-up aggression by the ever-declining Bitcoin price and want you to pay for their loss in some sick weird way!
http://www.shonmehta.com/p/the-dood.html
For the N-queens problem, especially as N grows large, there is an interesting probabilistic solution that generally is (absurdly) fast.

Put the N queens randomly on the board. Then repeatedly pick the queen that is attacked by the most other queens (if/when there are multiple, pick randomly), and place it in the spot where it is attacked by the least other queens (if/when there are multiple, pick randomly). Repeat until you have a solution.
$ /bin/bash --version
GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
Copyright (C) 2007 Free Software Foundation, Inc.
I misread you at first.
And for 100-queens? Or 1,000,000-queens?
Hopefully there's no way to live that really depends on HN in any way. :)
Hey, Christina.

Really thought-provoking article! I've been teaching students to code for seventeen years, and your experience dovetails with mine. (Disclosure: I'm also the author of 'Learn Java the Hard Way'.)

I must admit that I'm skeptical that any "regular" student could learn Java well enough to pass the APCS exam in only twenty hours.

Can you explain a little better about the population you're working with? These are high-aptitude students with prior programming experience, no?
It seems to be prevalent in Baltimore. I couldn't find the "many" places that hacks are common names for illegal cabs. Chicago, Philadelphia and NYC all use hack to refer to legally licensed cabs and they're all much larger cities/metropolitan areas than Baltimore. I think this is why it is much more common to use "hack" to describe a legitimate taxi driver. Thank you for your input.
> OpenBSD has shown that small organizations can audit and maintain code with a focus on security and correctness, why hasn't the FSF, with its greater level of resources, managed to do the same?

It's simply a matter of different goals. The OpenBSD project has security as a primary goal. They often throw out features, flexibility or portability on the grounds of preserving security.

GNU instead prioritizes those features, flexibility and portability, occasionally losing out on security.

Security is hard and involves a lot of sacrifice with little evidence of success aside from "oh look, we haven't had any vulnerabilities for a while".
How serious is Linkedin about this?
How Lucky's Tale Avoids Making Users Sick
Only if you define "general public" as the intersection of Google Apps for Education customers and Adobe Creative Cloud licensees.
Just reading through HN during my (very boring) introductory to programming class in high school and noticed the name seemed familiar. Thanks Christina for tutoring me over the summer! The way programming is taught in high schools needs some serious reform - and reading this gave me a lot of insight into how people learn how to code (and how I wish this kind of thinking & super cool editor was implemented in my programming class).
The attack surface for shellshock is insanely large, and it's crazy to leave bash unpatched even if one or two currently-known vectors happen to not currently be known to be exploitable. People will be finding ways to tickle it for years to come.
> when some CS students could do it better and cheaper over a summer

And then move on, leaving an unmaintained chunk of code that, while possibly better than the third-party software, instantly becomes a liability of unmaintained code. There's a reason why contractors have a bad reputation in the industry for the code they deliver. It's only developers that know they'll have to live with their work for the foreseeable future that put thought and effort into maintainability.

The only way that your "CS students over the summer" plan could work is if the University put a ton of effort into bootstrapping an open source community. Even then, it's doubtful they could create something that would be appealing enough to work on. Academia has a contractor-like reputation for producing code bases that are mostly only intelligible to the sole developer that worked on it.

Personally, I'd put my money on a non-profit third-party organization like Khan Academy to be able to design something that gets traction. They know the space, have world-class engineers and would be able to generate enough PR to start a community around a tool that they open source.