skysight-inc/HackerNews huggingface dataset:
> the web view has control over JavaScript

More explanation please. Can the host app inject a script into any page? That seems absurd.

> the keyCode attribute of the KeyboardEvent in the JavaScript event handler is provided for backward compatibility

Not only that but you can actually read a password input's value directly, no need to wait for keyboard events. This surprised be quite a bit. I had always thought these fields were not readable.
Lizard Stowaways Revise Principle of Ecology
No dice.

/smirk
It pretty painless in my experience but i guess your millage may very on that.
I've noticed this becoming a trend. The votes are not for the quality of the comment but rather the agreeability. It's too bad...
That's a good attitude. If I find myself heading an open source project, I'll take that advice with me.
The first chapter (the one about random-number generator numbers and slot machines) was almost cool though (the rest was so-so, leaving that very impression you mentioned) -- read it in Russian, in translation, in a book store [and decided not to buy].
Maybe a fix: http://www.amongtech.com/how-to-fix-ios-8-0-1-no-service-iss...
If you ever took pictures of paintings at a museum with your phone (some museums do allow it, for example in Sweden) you would want an app that does what this post describes. It is clearly nontrivial to do it well in this type of processing aka blind processing. Author: check out the book by Cichocki.
Seems like it's hitting primarily iPhone 6 users. https://twitter.com/jsnell/status/514830848374214656
Do you have a screenshot by chance?
My wife (a PhD holder in the field) would smile and say "that is of course because markets aren't efficient".
You didn't read the story, did you?

> The best handwriting machines already vary some letters to avoid seeming too repetitive. Check out "offer" in the third line of that letter above: The "f"s are different from each other. The bot has been programmed to pen that letter a few different ways, the better to fool readers.
Pico-ITX board runs Android 4.4 on Snapdragon 805
The magazine that published the article is based in one of those countries.
Woah, mentoring Linus had a good day!
How do you discourage people, exactly? (genuine question)

Is there a warning on submission that says something like "Please don't ask your friends to upvote your submissions. If you do, your submission may be penalized. The best products stand on their own merits."? If that's the case, then why do you Favorite Tweets from companies begging for upvotes instead of warning them that their behavior is unacceptable?

I personally have received spam asking for Product Hunt upvotes ( http://i.imgur.com/B5hLdYG.png ), and you of all people should be interested in not supporting that.
Pretty nice. I actually have a big thank you to Elm as I based my Clojurescript time travelling debugger on the initial Elm demo!

http://connecttous.co/connecttous/connecttous.html?livedebug...

https://github.com/zubairq/coils
For me in 10.9.5:

$ bash --version
GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
Copyright (C) 2007 Free Software Foundation, Inc.
Yes, this ended up in an unexpected place.
Nice insight. I liked that.
No.

There is a world-wide shortage of competent programmers, and companies are starting to realize that irrelevant biases are hurting them.
Even if the malicious code doesn't have superuser context, it can do damage to whatever context it is running under. If it's running as www-data, it can trash all your www-data-owned files. Or send your www-data-owned password files somewhere, etc. Unprivileged code can also attack other systems (firewalls permitting); you don't have to be root on system A, to be part of a bot net which attacks system B. Denial-of-service havok can be wreaked from a regular user context, too. Not to mention privacy violations. Pretty much all browser-related security and privacy issues are user space!
https://launchpad.net/ubuntu/+source/bash/4.3-7ubuntu1.1 seems to be at least one version of the fix, I'm unsure about LTS and other releases.
Never upgrade.
"A CGI script written in bash"

You're killin' me here. If you expose a shell script directly to the network, you're exposing a shell and deserve to be pwned.
In 1996 (or as late as early 2000s), many published texts were via tools like Dreamweaver, where the publisher would checkout / lock a file, make static changes, and save the file, directly on prod. Like you said, it's not surprising at all they have a large portion of their articles in static HTML files.
The commentary might be interesting. Look at the obvious analogy with learning code.

You can look at 16000 source code files, perhaps with a decent search engine, and with some heuristics and guts copy and paste into an app. This is the exact clone to the ml and mg of stir fry recipe #1415

Or you can learn some syntax and techniques and idioms and just kind whip something together out of thin air. No one has ever made a stir fry quite like this one, probably ever.

Cooking is just like coding. Oh and the two options, both for coding and cooking, are not binary exclusive BTW. And some things like pastry or food safety you can't just make up on the fly and expect success, there's always some mix and match.

To say this NYT app makes a strong statement on one side of the debate while ignoring the other is an understatement. I think it does a disservice to cooks and coders to not at least mention the alternative strategy.

You can make a mcdonalds burger with a formal detailed recipe. You cannot make a gourmet meal that way, in my opinion.
Shipping is massively fuel efficient, and enjoys economies of scale

Food is built into the cost of the cruise itself.

Mishaps are insured, and relatively rare. Insuring ships is a very old industry.
There are plenty of free in-person classes in the world (I'm sure you can sign up for a dance class, for example), and an in-person class that had a 5% completion rate would be a disaster.

I'm not sure what you're arguing. You think people are learning well from MOOCs in their current form? You might note Thrun's own thoughts on the subject: http://www.fastcompany.com/3021473/udacity-sebastian-thrun-u...

"We were on the front pages of newspapers and magazines, and at the same time, I was realizing, we don't educate people as others wished, or as I wished. We have a lousy product,"
The problem is, sometimes I know what I'm doing more than the type system does. But sometimes I only think I know more than it does, and actually it knows more than I do. This makes it very difficult to make the typed-vs-untyped choice "correctly". No matter what you choose, sometimes it's the wrong choice.

What's the answer? Maybe gradual type systems? I dream of an IDE where I have a setting for "type rigidity". I'd start with it "off", and just write the code. Then I'd set it to "warn", and see what it complained about. For code to be production, I'd set it to "error".

But for that to work, I'd need some way of telling the compliler "I really know more than you do about that type error you think you're seeing, so trust me on this one". (In effect, this winds up functioning something like C/C++ casts.) The problem comes when it's right and I'm wrong, but I tell it to trust me anyway...
ionic is great. Make sure you're aware of the browser support limitations when using it for a mobile web-app though. http://ionicframework.com/docs/overview/#browser-support
This was partly copied by a study that Wolfram Research did on the Rosetta Code site...

http://blog.wolfram.com/2012/11/14/code-length-measured-in-1...
I Felt Like a Criminal: The Pressure to Become a Helicopter Parent
No, because they did not look at him as an individual after categorizing him. This is exactly discrimination.

For example, why would anyone expect the same behaviour from a single black criminal drug-addict as from a married black lawyer with kids? The fact that they share the same skin-tone is the least important hint to their potential behaviour, and yet, historically, it's what people use because it's the first thing they see.
Nice puff piece :-) The interesting bit is that if you're going to be servicing a lot of machines, then even if it costs you more to build/acquire them, you can get back more in savings in operating them. This is called "trading capex for opex." And while it takes a reasonably savvy CEO to "get it" the number of CEOs who just "don't get computers" seems to be on the decline (at least in spaces that use a lot of computers).

In one way this also puts pressure on folks like Amazon since their margin on EC2 and other services is a mix of over-provisioning and opex savings, having other folks be able to do this is a win. Perhaps the saddest thing was talking with the HP "Gen8" folks (trying to sell me servers to replace my Supermicro ones) who don't get this at all. But for them they came from one server / one app not 500 servers / one app. I expect they could reclaim some market share that way but I don't expect they will.
"American Elk Island" probably wouldn't fly too well as a place name, in any case.
I completely agree with you. But I think a number of the recipes (at least the ones I tried) actually had tricky bits that required a little experience. I can see how it would frustrate people who were complete beginners.

My own egg epiphany was "cook them on the lowest heat you can, until you think the waiting will make you insane."

But you also make an excellent point—ask your mom (or some other person in your life who cooks well)!
If the OP is here, great list! Also, this section is repeated: "Always use momentum scrolling"
I think this is great advice. While I've only contributed to a couple open source projects and haven't lead my own large ones, I completely agree. There's more to submitting patches than writing the patch- understanding contribution guidelines (code style, documentation, testing), responding to feedback, etc, these are all extremely important in actually contributing to a project. And having even just that little patch merged in feels great when you're starting out.

Plus, no one wants to make a big helpful functional contribution only to be thrown away because they weren't aware of how the community operates. Small patches have a low risk as far as learning about how to contribute, even if the patch is rejected for whatever reason.

Though this seems somewhat obvious, it's nice to have it stated and validated by the leadership of one of the largest open source projects.
many congrats. i got curious what you do.. visited your site, browser threw a security exception. http://cl.ly/image/263R2V1o100F
No, but the money is a great catalyst for dreaming up a rationalization that lets you sleep at night.

There are plenty of things in business that can be seen as unconscionable from the outside. I find more business practices disgusting than the general consensus of Hacker News threads, I'm kind of amused that selling exploits is one of the places where a line seems to be forming.
> 20-score passengers

I'm with you on the metric, but... 20-score? Really?
+1 to SSL
Agreed - Most mail clients do upload on auto.
Scroll down to the Medusa Challenger navigating the Chicago river in 72.

http://galleries.apps.chicagotribune.com/chi-20131028-st-mar...

Talk about a tight fit. That must have been incredibly stressful.
Yes. You make it sound like people can't hold multiple opinions. A person can simultaneously believe the drug war is unethical while believing that selling (rather than openly revealing) 0day exploits is unethical.

The difference is that most of those people are not calling for any government interference. Otherwise that would be humorous given that governments and their no-trace-back shell companies are the largest clients. They simply disagree ethically through free speech.
Eh, I also included periods during the Gold Standard in the previous post:

1917	12.5	15.4	14.3	18.9	19.6	20.4	18.5	19.3	19.8	19.5	17.4	18.1	17.4

1918	19.7	17.5	16.7	12.7	13.3	13.1	18.0	18.5	18.0	18.5	20.7	20.4	18.0

1919	17.9	14.9	17.1	17.6	16.6	15.0	15.2	14.9	13.4	13.1	13.5	14.5	14.6

See those inflation #s?

We just aren't going to agree. Because I'm of the opinion the CPI isn't perfect ... but compared to other CPI data points, its relatively accurate. The problem with the "perfect, ideal" idea is the fact that, frankly, no one ever tried to build it and graph it over time. Those that pretend they want that are just pushing an ideological agenda and drop large portions of the basket completely. The problem with the CPI is the qualitative analysis, by its nature, fundamentally imperfect. It is an opinion. That said, you can't just drop categories and claim to be anything except a joke.

> So instead I will step back from this tangent. We got into CPI over disagreement on how much inflation there is, and I was arguing that there's a lot of inflation because we went off the gold standard, and so that's why factory jobs don't pay $30/h anymore. You argued that I have it backwards and that everything was good in the 70s. You said it worsened in the 80s and asked me to explain how and I justified it by saying that's when Neoliberal policies took over. What part of this do you disagree with?

It seems roughly right for what was said.

The reason factory jobs don't pay $30/h is because of globalization [cheaper to produce goods in other countries], tax burden shifting from capital to labor [ http://www.businessinsider.com/history-of-tax-rates?op=1 ], etc. That isn't really a "Neoliberal" issue but more simply technological progress has allowed us to outsource more to cheaper labor countries.

I don't care too much as long as people have a living wage [which is at least $10/hr] and the poor aren't taxed heavily compared to historic norms.
> enough sources of "random" genetic variation

well, that's the kind of thing the GP wants to put in numbers and a mathematical system, to provide substantial arguments.
Jimmy John’s Confirms Breach at 216 Stores
> lets drop Gnome.

Slackware is an example of this. They removed Gnome almost a decade ago.
If you're spinning up a lot of VMs, or paying by the hour or watt, you might care about how fast a server boots. Anyway lots of other init systems do parallel boot, not just systemd. So you don't have to use systemd just to get a fast boot time.
Seems like it's good to remind people every now and then that Linus is a human with empathy, since a lot of them really don't understand the reasons for when he rants, and then start to draw conclusions.

On a related note, Theo de Raadt rants need far more attention than they currently get.
Oh, didn't know this earlier, thanks for the info!
That's exactly what thegrugq does too. Tomorrow if I find an iOS bug that's exploitable I don't have a rolodex of contacts to sell it to hence the need for this service. As a middle man he can confirm the bug hasn't already been discovered and is generally trusted not to keep a copy himself and hack the planet with it after sale. This arrangement protects the seller too from revealing their exploit code to the buyer before payment. Anybody could create a Tor market for auctioned exploits but somebody has to verify the goods first or you get swamped with junk offers.
The Creepiest New Corner of Instagram: Role-Playing with Stolen Baby Photos
The patch: ftp://ftp.cwru.edu/pub/bash/bash-4.3-patches/bash43-025
I'd say that this "benchmark" is senseless. Ruby is for sure generally not faster than Java, and C is not about 18 times faster than Go. So no reason to pat any language on the shoulder.
Brain Drain: Are We Evolving Stupidity?
More Americans Favor Mixing Religion and Politics, Survey Says
I probably cooked 50+ Blue Apron meals so far. I absolutely love it.

* Packaging: it just takes a bit of planning to deal with. Personally I fold the cardboard box and it fits nicely in my outdoor garbage can for paper (which is recycled), and I make sure the ice packs are re-used by giving them away[1]. So I only have to trash the foam (approximately 1x8 feet of foam every week).

* Quality: I am blown away by the quality of the meals. It is similar or better in taste to what is offered by a trendy restaurant rated 3½-4 stars on Yelp in my area (San Francisco). Even my wife would agree and she is a picky eater :) Yes sometimes I receive a lettuce or parsley that does not looks that great, but it is rare (<3-5% of the ingredients).

* Difficulty: I find the Blue Apron instructions very easy to follow, and I only had very basic cooking experience before (frying steaks, making rice and pasta, etc). I have never messed up the cooking of a single meal or found any one to be difficult. Just follow the instructions precisely and I believe anyone can do it.

[1] I accumulate 4 weeks's worth of ice packs, then put them in a box on my doorstep and post them on Craigslist in the "free stuff" section - someone usually picks them up in the next 12-24 hours.
It looks like what many agencies are already doing (for both Android and iOS), so it is definitely a viable business model.
I know some startups that already have agencies working on their mobile apps (either Android, iOS or both). After some time though, they all want to develop their apps in-house.
Unfortunately, the size of the world's nuclear arsenal being what it is, it doesn't much matter if "most" of the nuclear weapons end up in the hands of good actors.
Keep calm. This is not a relevant benchmark for real world scenarios.
Upgraded, everything works just fine. T-Mobile.
You're not serious right? MacOS is very much a tightly integrated system.
Right. But the point is they can buy from retail. (And I believe that's how they did it at first.) Today, they just generally choose not to do so primarily because it costs more.
Run Golang on the Intel Edison with Gobot
What feature of systemd did you always wanted on a server?
I've got several iOS language apps so I need to "split hairs". http://appstore.com/h4labs. Even getting the nouns right in many languages was harder than I thought it would be.
I'm guessing not an iPhone 6 or 6+?
Great attitude. Linus has had plenty of heated moments on the mailing lists, but 1) he's often right and 2) his venom is usually reserved for experienced developers that really should know better. Glad to him being so open and accepting with newbie kernel hackers.
> Who asked for a thinner, lighter phone?

Probably the same people who use OtterBox & LifeProof cases on iPhone. Most iPhone users slap on ugly cases to protect their beautiful iPhones. Wouldn't it be much better if Apple builds an iPhone sturdy enough that it doesn't require a case?
The chopping for me requires the most attention. It takes me a while to rinse all the vegetables, chop them, set them aside, and then clean and dry my cutting board, colander, and knives.

Then I have to trim up the protein, season that and set aside, wash those utensils, and move on to actually cooking.

Any meal with more than three major ingredients, meat, veg, and starch, I save for the weekend.
Atmospheric drag, too, I suspect. Especially if the wire has some sort of weight on the end of it.

Actually, that's rather like an anchor.
A wonderful idea, but in the current state I can’t use it since it doesn’t support entering Cyrillic.

In fact, vim doesn’t do the right thing with Cyrillic either (vim binds commands to entered characters, not keys; so when entering Cyrillic you either have to switch layouts when entering commands — or do some ugly hacks), but it’s at least usable. Edit is not, right now.
I'd do doctor training or correction. An expert "extra pair of eyes" is a project I've not seen anything on.
I favorite to show people I'm listening (read-receipt). It's not an endorsement for asking for upvotes. I realize how this would be misinterpreted so perhaps I'll avoid that in the future.
A score is 20 so 20-score would be 400, not 4,000. Is that the joke?
Vanguard Vanguard Vanguard.

Don't try to be clever. Just invest your money in a few different indexes and let it be.

Last year my account grew ~30%, it's increased 16.1% so far this year (the market isn't as crazy as it was in 2013 but it's not bad, either). You need to be disciplined enough to let your money sit and resist the temptation to do dumb things when the market dips.

It's not rocket science, the best way to fuck it all up is to try and manage your money yourself and play the market. Don't do that. There are thousands of bankers out there working 12-14 hours each day to take advantage of people who don't know what they are doing. Don't be a sucker.
What tradeoffs is it making for faster boot times that you feel aren't suited to the server?
> Since all major Linux distros are deciding to adopt systemd...

Slackware is a major distro. So I expect everyone who opposes systemd to migrate to Slackware, and I'll get even more slackbuilds to browse through on SBO, right?
Does android support the -webkit-overflow-scrolling: touch; property?
Feel free to share this! Also feel free to mention my handle/name/website :)
Why the Chinese Military Is Only a Paper Dragon
Yup, I think you're right. Thanks.
Interesting, I had the exact same reaction as you. Bought the book (along with Michal Zalewski's Silence on the Wire), got less than a chapter in, and put it down in frustration. I've since wondered if I should go back and give it another chance. Sounds like no?

For what it's worth, I really enjoyed Zalewski's book. He seems like a really smart guy.
Traditionally if you wrote a letter on someone's behalf (eg they instruct you by phone on what to say and to get it in the mail as fast as possible), you sign is 'PP J. Smith'. PP is short for 'per procurationem' meaning 'by the agency of'. You don't need to know Latin, just that 'PP [name]' means it was sent on someone's behalf.

If I got a letter with no indicator and it turned out to be someone's secretary I wouldn't be offended exactly but it would make me a little wary until I was more familiar with the person and their working habits, eg maybe they have total trust in their secretary, but the secretary isn't familiar with this convention.

Obviously I'm a bit old-fashioned about these things, bt these conventions came into being for good reason.
If the goal is to create a sustainable business than an acquisition would be a failure.
Neither is working. Some speculation that it is an OTA issue. AT&T rep told me to try to redo update through iTunes. Requires downloading the .ipsw. I'm giving that a try now. Hopefully they will have a more sensible fix out soon.
Gnome 3.14 Released
"Incredible complexity" is a handwave. If you can't give a specific reason then you have none at all.

You can use "incredible complexity" on literally anything. Everything is complex. Humans manage.
This isn't a problem on Android because you never get an update.
> Eat more things out of cans

Most things that come out of cans, taste like the can they were in. Canned vegetables are terrible. I'd go frozen prepared veg over canned.
*Shawn Fanning
> This is fairly axiomatic. An open market increases the price of vulnerabilities which in turn increases the number of vulnerabilities found (unless you want to argue the ability to find vulnerabilities is inelastic for some reason)

Wait a second...won't increasing the number of vulnerabilities found push prices down? If I'm looking to penetrate a system I only need to buy one vulnerability, so in effect different vulnerabilities are somewhat fungible and so should compete on price. Hence, if more vulnerabilities are being found and coming to market, prices should be going down.

On the other hand, with a free and open market for vulnerabilities there would likely be people who would NOT have bought vulnerabilities on the black market buying vulnerabilities on the safer, easier to use free and open market, so demand could go up, raising prices.
> Successful swing traders win only 50% of the time.

Is this better than just picking stocks at random instead of carefully selecting them?
Anyone with a problem iPhone 6/6+ on 8.0.1 want to dump the apple system log (asl) to see what's going on?
Bash bug as big as Heartbleed