skysight-inc/HackerNews huggingface dataset:
I agree that Clojure is continuing to rapidly gain mind share – among long-time Lispers, relative newcomers to programming, and also seasoned "curly bracers" that a few years ago never thought they'd see a day when Lisp would make it into mainstream dev shops. Personally, I like it a lot and use it on a daily basis. The excitement around it is in no small part due to the insightfulness and ongoing hard work of Rich Hickey[1], his close collaborators at Cognitect[2], and some amazingly dedicated community talent (e.g. Philip Hagelberg[3]). Not to be overlooked is the brilliant decision to have it be a "hosted language" that interoperates with non-Clojure code on the JVM with little to no hassle – that opens a lot of doors, better believe it!

That being said, I attended RacketCon 2014[4] last Saturday and was blown away by the work going on in that community. Michael Fogus[5], a well-known name in the Clojure community, even gave the keynote[6]. The language's creator, Prof. Matthias Felleisen[7], and his grad students have been doing truly cutting-edge work over the last 18+ years (what became Racket was "conceived" at Rice University in Fall 1995). It's a fair question, though, whether the Racket team even wants the language to "make it big," i.e. along the lines of Clojure's rapid rise in popularity. I got the impression they have mixed feelings about that prospect, and those concerns have certainly shaped (and will shape) their marketing of Racket.

My thought is that if, in the next couple of years, they are able to achieve a really good compile-to-JS story (some work has been done already[8]) and a solid JVM-hosted implementation, then they may get a bunch of spill-over from the Clojure community without even trying to "steal sheep". There are some tremendously powerful language-level facilities already built into Racket that will likely not be implemented in Clojure any time in the foreseeable future, e.g. delimited continuations[9]. Also, the Racket team seems to have the right mind about learning from other languages, e.g. picking up some of the popular idioms from Clojure.

So, all in all, I think Lisp's legacy is far from definitive and it will be truly exciting to see what comes out of the Clojure and Racket camps over the next 5 years or so!

[1] https://twitter.com/richhickey

[2] http://cognitect.com/

[3] https://github.com/technomancy/

[4] http://con.racket-lang.org/

[5] http://blog.fogus.me/

[6] https://www.youtube.com/watch?v=oe2tK5Lxybc

[7] http://en.wikipedia.org/wiki/Matthias_Felleisen

[8] https://github.com/dyoo/whalesong

[9] http://docs.racket-lang.org/guide/conts.html
On top of that ISRO is a profit making organization [1]. ISRO regularly launches satellites for other countries and makes money in the process.

ISRO's expertise is also helpful to advance India's defense capabilities which could have otherwise remained hostage to USA's Military Industrial Complex.

[1] http://en.wikipedia.org/wiki/Antrix_Corporation
Whatever happened to the old unix philosophies of KISS, and if it isn't broken, don't fix it.
Granted, as many other have pointed out, SysVinit definitely has its pain points and could use improvements, but there are some other init systems people can use without having systemd shoved down our throats. It's been a while since I've played with *BSD, but it might be the time to start seriously looking at it again. Or switch to slack/debian and keep my old-fashioned init system.
I'll let others judge the originality of Shen.

I would say that the performance of Shen is very much a function of the platform and the person who did the port. The Merlin compiler in Qi II would, as doall points out, outpace the output of a Lisp programmer. I've yet to put all that technology into Shen.

Also, credit to the 2011 Shen committee members who ported Shen to so many platforms, the versatility of being being able to traffic Shen code across languages is what made Aditya's work and talk possible.
US debt is one problem that can be solved purely by money and nothing else not especially Obama's rhetoric.
Bug in Bash shell creates big security hole on anything with *nix in it
That's actually what I'm doing right now, keeping everything in a config file in a directory accessible by all machines.

It's definitely worked fine so far.

I was wondering if others had other solutions.
The market is: businesses and governments that cannot afford to use anything less secure. For this niche, their phone could be $1000, they're still going to buy BlackBerry because it is the only thing that checks all the boxes and provides the security processes necessary.

This might not be a tens of a billions of dollar revenue per quarter business like top consumer electronics manufacturers are, but it is a great niche to be in since the security needs are always there for those types of customers.
> If I understand correctly, black holes do not play a large role in our model of the origins of the universe. So this doesn't (directly) lead to "rethinking the origins of the universe".

But it does, because one hypothesis about the Big Bang is that it commenced from conditions identical to a black hole's singularity. So our understanding of black holes is critical to at least one idea about the universe's beginnings.

> Or does this just make us question whether that massive thing is in fact a black hole?

The answer is that there is something like a black hole at the center of our galaxy, but people are free to theorize about what exactly it is.
> Where is the market for a $600 handset that isn't an iPhone 6?

In the $600+ Android flagships? (e.g., Galaxy Note 4 is $699 - $825 w/o subsidy, depending on carrier.)
Oh yes. I forgot scientists produce life saving medicine from their dorm rooms all the time. How could I forget.
AWS issues unavoidable reboot schedules with short notice on many EC2 instances
The keyboard doubles as a track pad. I imagine the phone will shine when reading content in landscape mode, and scrolling using the track pad. Supposedly works well for lefties too. I understand that the BlackBerry displays around 66 lines of text, compared with the iPhones 31-odd. I'd like very much to play with one before I wrote the device off. Given that I use my phone primarily for reading this could find a niche.

There's a pretty decent cursory review on The Register - http://www.theregister.co.uk/2014/09/24/blackberry_passport_...
If I read the abstract and introduction correctly, it doesn't say that black holes per se don't exist, only that they can't form as the result of a collapsing star or supernova. The linked-to article seems to be jumping to conclusions (e.g., rethinking the origin of the universe; impossibility of black holes at all, etc.) that the paper isn't even making.
Oh, certainly. I was only talking about OS X, which didn't build the DHCP client around a collection of shell scripts for portability.

On OS X, you could see every time a process is invoked like this:

sudo execsnoop -c bash

On Linux, that requires work which fortunately Brendan Gregg already did:

https://github.com/brendangregg/perf-tools/blob/master/execs...
Wait, what? By showing companies "you're listening" to their astroturfing, you are even more actively condoning it. And you ignored this part, but aside from all the tweets and favorites condoning astroturfing, you've said and written that having companies beg users and social networks for upvotes is a growth tactic for Product Hunt. Just come clean when you're called out, man.
I think this is the craziest line in the entire story:

The Passport was already in development
years before Mr. Chen arrived.

Years? Chen has been their CEO for a year now. When did this project start?
>You feel that the creator owns all potential value immediately when the thing is created.

That is a bit simplified, but yes, it's essentially what I believe. In your estimation, who else should own that value?

>I dont believe that this is true, the owner owns only that value which they are able to realize, if they are unable to realize the value they expected then that is not theft.

That logic seems so completely and obviously circular that I'm thinking that my interpretation can't be what you actually meant. Here's what I read. Please correct where I've misunderstood you:

The owner provides a means for realizing the value of a creation (i.e. attaches a means of distribution and a price). People side-step that distribution and opt for a means not authorized by the owner, which does not compensate the owner. Then, the conclusion is, "well, the owner wasn't able to capture the value, so it's not theft".

Seems to me that the theft is the reason the owner was not able to realize the value.

>where did this come from? demand of an infinitely reproducible product does not necessitate "some price above zero" it can be exactly zero dollars that people are willing to pay.

Basic economics. Generally, the reproducibility of a product does not dictate the demand for it, only the supply. Accordingly, reproducibility may affect the price, but not the demand. People don't want something more because there are more of them, although oversupply may lower the price to one that more people are willing to pay.

The bigger point is that you are confusing demand with price elasticity. When consumers want a product (demand), there is some price that some number of those consumers will pay for it. If you couldn't download a movie for free, but could get it for $0.01 vs. $100.00, you may well choose $0.01. But, you'd pay something that represents how much you value it. You are an exception to this only if you never buy anything. Other than that, this applies to you as well, no matter how much you seem to suggest that you never pay for things you want, but stock up on free stuff you don't want.

I don't know. I can't determine why such a simple concept becomes so tedious, with all of the circular logic and red-herrings about breaking-and-entering to copy drawings, re-selling used iPhones and such.

Through all of the posts here, no one has clearly elucidated why people have a right to the value created by someone else's labor, other than by paying the price that person has set.
FastCGI does work differently – it spawns a process which stays open and communicates with it over stdin / stdout – but that doesn't mean that his PHP script doesn't unexpectedly invoke system() somewhere.
Does anyone know why debian was chosen as the source for these repos? I thought they were defaulting to ubuntu.

ie. https://github.com/docker-library/golang/blob/master/1.3/Doc...
Raspberry Pi Node.js Project Setup with Git Deployment
> A large proportion of the expense of this mission goes to paying the wages of domestic scientists and engineers in India. This money will in turn get taxed and spent by the recipients and pumped back into the local economy.

This is a completely nonsensical line of reasoning, that's why. They're still paying folks to do ostensibly wasteful activities, and you're not going to successfully counter that with your perpetual motion economics.
Yes, there is a concern in getting a bad batch, or having several drives fail all at once. Interestingly enough, while opening those 1450 anti-static cases and seeing the manufacture date of them, they were in separate batches (some with more dust on the cases than others), so we have some heterogeneous-ness on them. HDFS with its various levels of replication factors, and our backups/DR for high-value data takes care of the rest.
There are several TLS modes that don't use certificates. SRP and PSK are the two that I have some limited experience with. Both require sharing a password or key beforehand through some other medium.

If you're not concerned with man-in-the-middle attacks, then you could also use the ANON modes.
Nice algorithm. The diagrams in the paper are wonderfully clear and useful.

My instinct on reading it is that allowing readers to continue during a resize is a solid improvement, but that any approach based on buckets using linked pointers (open chaining) should be considered "low performance" by definition.

Do you think this approach is enough to make them competitive? Is there a parallel approach that would work for faster hashes that don't chase pointers? Would here be a way to "compact" the hash on resize so that at least the pointers are tightly arranged?
Seriously, ill take the .co save 199k and a letter.
> The primary complaint about strlcpy() is that it gives no indication of whether the copied string was truncated or not.

So how hard would it be to add a return value indicating this?
This is a very good answer, thanks for taking the time to write it. I will say that "pretty good" evidence is not consistent with the language we usually see in the media[1] but that's really another issue.

Can't SR only model photons at c because some term disappears with zero mass which prevents infinite energies? Isn't it a whole different question whether GR is still reliable in the analogous case with massive objects?

[1] http://www.phdcomics.com/comics/archive.php?comicid=1174
Rocket Internet is going Public
The current incumbents are indeed broadcasters - they broadcast on radio frequency spectrum their selection of episodes from a variety of shows. And yes, they have features similar to Netflix. No amount of logic dictates that such features offered by others automatically drags Netflix into the "broadcaster" categorization. Taking such logic further would bring bloggers into the "broadcaster" category should the incumbent broadcasters begin blogging themselves.

Each show is not "essentially the same" as a channel. A channel is a curation of related content (by the curator's definition of 'related.') Obtaining a collection of all episodes of a series and making them available for customers to play on demand is pretty much the opposite of curation, in my opinion.

So I'm still not seeing how Netflix is a broadcaster by any existing definition of the term.
I think the default in bash should be to never execute the contents of environment variables (like the restricted shell mode allows). Does anyone know why it allows you to pass in shell functions this way? Does anything use it?
> just in fuel costs

I think you mean 'just in rocket costs' as the fuel cost is negligible and the cost of the launch is 5 figures (dollars/kg).

For example the falcon 9 costs $12,618/kg to GTO and $4,653/kg to LEO. I don't recall the exact figure but fuel cost is a low single digit percentage of that cost.
Fine. Now it's called BashSmash. Are you happy? Go make a logo.
This script here is run when the process is spawned and spawns the PHP process that listens to stdin/stdout. Similar scripts exist in most install of mod_fcgid. E.g. PLESK, Virtualmin, other ISP-Panels... It boils down to look at what environment variables are there when bash runs this script or not? Once bash starts and grabs the environment variables the exploit starts.

So considering there are other variables in there that can be manipulated it would be possible to own a large chunk of servers on the Internet. However I'm not sure if there is caveat and I had hoped that someone can help me.

Edit: Looks safe. These variables are not even there. It's just an outdated script.
> Is it worth pursuing legal action?

Not unless you don't get the refund. If it was $10,000 or $100,000 I might answer differently.
>Still, it amazes me that they don't do something fairly obvious like team up with Bloomberg on becoming the mobile Bloomberg terminals, complete with the chat and coloured keys.

That is one hell of an idea.
While I completely disagree with kazinator, you have not pointed out a fallacy and your links do not contradict anything kazinator wrote.
What would an example be from, say, Google?
If you did, it wouldn't be strlcpy() anymore. The point is compatibility with existing users and expectations.
I have a feeling this thread is leading down a very nonproductive path, but I'd like to salvage something of value from it and discuss the consequences of the national debt.

http://www.npr.org/blogs/money/2011/10/21/141510617/what-if-...

I'd like to challenge the notion that the national debt is undisputedly a bad thing. The majority of the U.S.'s debt is in the form of treasury bonds - widely considered the most secure form of financial instrument. If the treasury bond can't be paid by the U.S., there are much bigger problems (such as the government of the largest national economy in the world collapsing). The treasury bond is utilized worldwide for its stability. It is used to moderate economic growth, and to stimulate it when it slows.

I'm not convinced government debt is entirely good, but I'm also not convinced that things would be better by paying it off.
Up, C, Down, C, Left, C, Right, C, A+Start was cooler.

Sega was pretty much unknown in the US until the Genesis came out, and never really beat Nintendo in popularity.
Phones are getting big enough that they're not particularly comfortable to use in landscape mode. I could two-thumb-text on my 3gs just fine; my Nexus 5 is actually pretty awkward in that regard (although swiftkey makes that a moot point anyway)
I don't disagree with any of that, but the evidence in question still depends on several big assumptions.
People Who Collect Radioactive Glass
I hope India and China pull off a Mars Direct style mission and beat the US to Mars. The US needs another "Sputnik Moment" to get itself going in space again. I mean for real, not as an esoteric form of federal "pork."
He taught statistics at Stanford for a few years. He also taught startup engineering (CS184) before doing the MOOC.
Meanwhile, strlcpy() returns the length of the source. So if you just want to copy a part of the source, or you're not sure if the source is terminated past the length you want to copy, it's either wasteful or dangerous.
It kind of depends on what you mean by "out of fashion". BB is out of fashion because it lost the plot and, producing a phone that the Verge said was harder to type on than a virtual keyboard, can't be used one-handed, which is bigger and heavier than a phablet while having a smaller screen shows it doesn't have a clue where to find it again.

Who is the market? Cheapskate enterprise customers with huge pockets?
DropJar, transfer up to 10GB free, pause and continue
How can one receive a signal from one's brain?
yeah, it was updated in debian in the morning...
NASA's MAVEN payload was just 4.3 times heavier (65kg vs. 15kg) but cost 9.1 times more ($671M vs. 74M).

So NASA is still 2.1 times more expensive per kg of useful payload. And costs scale less than linearly with the payload mass, so a bigger Indian mission would have likely been even more than 2.1 times more efficient than NASA...
I don't think it would be a common use-case when creating new software, but when patching legacy software to use better RNGs it's not unheard of for them to be using older RNGs that return a float between 0 and 1 (drand48 as an example).
>Copyright is not an entitlement, but rather an explicit bargain with society.

Of course it is. The notion that we would buy anything at all vs. outright taking what we want from others is representative of an explicit bargain with society. If you want to throw out property rights and start from scratch then, sure, we can dispense with this entire discussion posthaste.

>When the law does not respect the people, the people will not respect the law.

That sounds noble, but there's clearly a difference between advocating change and making up your own laws. But, beyond this, we're talking about an attitude of consumer entitlement, as if creators literally shouldn't have rights to their own creations. Read other comments on this thread.

>If the producer wants to "own" the content itself, the only way to do that is to lock it away in a vault, never attempting to license or sell it at all.

I earnestly can't tell what this comment is supposed to mean. Are we advocating that no one ever create anything or simply that their punishment for attempting to derive economic value from their creations is to have that value outright taken from them?
Debian security updates are distributed from security.debian.org, which is separate from the normal Debian mirror network, and Debian discourages the mirroring of security.debian.org because security updates are time sensitive. Hopefully Digital Ocean is not mirroring security.debian.org.
I don't think either you or the author are correct.

hobbes@media:~$ env X='() { (a)=>\' sh -c "echo date"; cat echo
date
cat: echo: No such file or directory
hobbes@media:~$ uname -a
Linux media 3.13-1-686-pae #1 SMP Debian 3.13.5-1
hobbes@media:~$ echo $BASH_VERSION
4.3.25(1)-release

It looks to me like we're setting X in the environment, calling `sh -c "echo date"`, passing that X in to it, nothing happens, then we're cat'ing a file named echo, which does not get created in the first place, at least not on my machine.

I played with the original test a bit. You can break it into two lines to see what is happening. For example:

1. hobbes@media:~$ export badvar='() { :;}; echo vulnerable'
2. hobbes@media:~$ bash -c "echo I am an innocent sub process in '$BASH_VERSION'"
3. bash: warning: badvar: ignoring function definition attempt
4. bash: error importing function definition for `badvar'
5. I am an innocent sub process in 4.3.25(1)-release

1. Create a specially crafted environment variable. Ok, it's done. But, nothing has happened!

2. Create an innocent sub process. Bash in this case. During initialization...

3. ...bash spots the specially formed variable (named badvar), prints a warning,

4. ...and apparently doesn't define the function at all?

5. But other than that, the child bash runs as expected.

1. hobbes@metal:~$ export badvar='() { :;}; echo vulnerable'
2. hobbes@metal:~$ bash -c "echo I am an innocent sub process in '$BASH_VERSION'"
3. vulnerable
4. I am an innocent sub process in 4.3.22(1)-release

1. Create a specially crafted environment variable. Ok, it's done. But, nothing has happened!

2. Create an innocent sub process. Bash in this case. During initialization...

3. ...bash accidentally EXECUTES a snippet that was inside the variable named 'badvar'?!

4. But other than that, the child bash runs as expected. Wow, I should update that machine. :)
Does Blackberry have a significant security lead any more? It did in 2012, but does it now? And don't all of its compatibility hacks produce a gigantic attack surface?
Well, it's not completely nonsensical since economics isn't anything like physics. More spending stimulates the economy regardless of how the results are used. (Hence the jokes about dropping money from helicopters, or burying money for people to dig up.)
This question was asked on https://github.com/docker-library/golang/issues/11#issuecomm... too, but the main reason is that the "debian" base images are tightly controlled and kept really minimal, so it's easy to make the new images as minimal as they can be too. The Ubuntu images are also great, but they include more stuff as part of keeping a consistent experience, so they don't have the same focus on minimalism that the Debian images can.
I'm dividing by UULONG_MAX + 1.0, because it expects a number between 0 (inclusive) and 1.0 (exclusive). I'm not sure how portable it is though.
I know my opinion isn't in line with the positive feedback loop culture on HN, but this phone looks like a joke!

I feel like hardware keyboards on mobile devices are archaic and overhyped. I know it's Blackberry's key thing, but instead of trying the same old tired keyboard, why not embrace the software keyboard with some innovations? They could do some research in ultrasonic haptic feedback, shape shifting displays, even something as far fetched as claytronics to replicate the the textures and friction of everyday objects.

If you like or have to use Blackberry, I guess this is the phone for you, but otherwise how can anybody want to choose a painfully mediocre device? I don't feel sorry for their slow fade into obsolescence.