skysight-inc/HackerNews huggingface dataset:
That's just openwrt. Other than VxWorks or QNX based hardware, a ton of network-connected devices ship with bash. Some even use it for their web interface backend.

Your office printers are probably vulnerable to this bug. So are medical devices, SANs, network switches, IP phones, cars, SCADA systems ... you name the device, I can probably name a vendor that ships bash on it. Here are the Cisco and Juniper devices affected: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10... http://tools.cisco.com/security/center/content/CiscoSecurity...
Oh yes I did read that and most of the comments available. I hope the FTC hits them very hard. My comment is only specifically about using the test network vs the live one.
Ask HN: Is it time for software developers/engineers to unionize?
I've seen an increasing number of HN posts on the subject of how software developers/engineers are almost universally underpaid relative to the value they bring. The collusion between Apple, Google and others to keep salaries down and block poaching suggests that this is a systemic problem. There are sites out there like Glassdoor that offer some transparency -- but for the most part this industry is very opaque. The average software developer/engineer is left with only anecdotal information to gauge their value in zsalary negotiations.

So my question for HN is this: Would software developers/engineers benefit from a union? From a collective bargaining standpoint, would a union give software developers/engineers a leg to stand on? What would the backlash be from the tech industry if developers/engineers unionized in large numbers?.
The Myth of the Rational Investor
Favorite T hack:

t followers --sort=since > followers.log

Keep followers.log checked into Git and track your followers/unfollowers over time.
Is your position that a software vulnerability the only type of security issue? Is your position that ignoring software vulnerabilities is fundamentally a different thing than ignoring other types of security issue? I'm confused by why you are asking.
> So does this mean that the primes actually distribute based on some pseudo random pattern?

To prove this, we would have to identify the hypothetical pseudorandom pattern. If we successfully identified the pattern, we could locate primes deterministically. If we could locate primes deterministically, modern encryption would collapse.

So ... no. No one knows how primes are distributed among composites, and there may be no pattern, as that term is generally understood.

> Certainly that is trivializing things but is this what the notion of the numbers acting random, but clearly not being random implies?

Yes, but with the important distinction that a pseudorandom pattern can be recreated, given the genesis of the pattern. For example, a pseudorandom number generator will produce exactly the same pseudorandom numbers for a given initializing "seed" number.

As to the primes, it's possible that their placement among the composites obeys a pattern, but we don't know what that pattern is, and this is a matter of great mathematical interest.
Why Top Performers Fail Under Pressure (and How Not to Choke)
Ghost of Ronald Reagan Authorizes Most NSA Spying
Outernet: Humanity's Public Library
Except that I am a cloud admin
No idea. Sometimes ppl just downvote for spurious reasons.
It seems like you added some information to the conversation, so I upvoted your comment.
The CDS advocates that an employer monitor insider actions 60 days prior to termination and for 60 days after termination.

This is a strawman based on faulty statistics. The 60 day window largely falls on the front-end of the firing scenario and is often the cause for firing. If the employer has advance knowledge of, say the end of a contract period, then this is possible, however the biggest leaks have come from people who are not on the tail end of known contracts.

I didn't see anything in this article that is new or unique to the insider threat protection - and does all the same stuff that all previous protection programs do: look at all employees as future threats.

The best insider threat program is a combination of good compensation, good communication, clear expectations and high work engagement. No insider threat ever was enthusiastic about their job, engaged with other employees and wanted to excel in their position.

Someone who is unhappy is a threat, the best way to combat that is to be doing something they find worthwhile and being compensated fairly for it.
I used the broader category because in these kinds of situations Free Software brings nothing to the party.

Free Software licensing only places restrictions on what licensees of the software can do with it. The original copyright holder, by virtue of possessing the original copyright, is not subject to those restrictions. That's why dual Free/commercial licensing is such a common choice for companies who are looking to monetize - it's an easy way to maintain commercial control over a product while still getting to call yourself "open".
Having lived most of my life in a state that is hostile towards unionization, I don't think this would make life much easier for me. Nonetheless, it's a good question.

(I don't have the answer.)
I don't know why you are being down-voted. I think we can agree the issue isn't that they were mining BTC with customer devices but rather that they swore they weren't. Had they not released statements saying they would not be getting into the mining business and that they tested the devices on the test net then there wouldn't be nearly as much of an issue.

Yes people would still be mad they tested them for 2 days when 15min would have been enough (especially when they were so late in shipping), but the big issue is they lied to everyone who bought one of these devices.
Mainland-resident here. Been in and out of HK since 1998. Usually only a few days. However, a FOAF is a just out of jail old-school dissident in Hong Kong.

I can see why people are protesting: partly its the want to stay independent, partly it's fear of the steadily increasingly mainland presence - not just in government, but people. Regular HK'ers are studying Mandarin (very different from their more historically significant and representative dialect, Cantonese) and aiming to do mainland business.

My main observation would be: heard about it from foreigners, got bugger-all details from purely foreign media, saw no mention in mainland media (which, to be fair, I rarely see). So just to confirm: there is zero coverage in the mainland, and not much elsewhere as far as I've seen.

Anyway: good luck Hong Kong, you have a really unique situation in which you can exercise your rights. Make it worthwhile.
CLion EAP 138.2344.15
20 GB file over 10 Gbit/sec would take 16 seconds.

I just recently migrated a 180 GB instance from one KVM compute node to another in 3 minutes.
Show HN: Neo4j.rb v3.0, Ruby object-graph-mapper for Neo4j
The Irish Post Office Has a Plan To Tell One Murphy From Another
It really depends on when the money is spent and what the money is spent on.

>They start by looking at multipliers for government consumption... In developed countries, they find that the long-run multiplier is 0.66.

but then

>However, government investment—things like infrastructure building—results in higher multipliers. Here, the long-run multiplier was 1.5 for developed countries

So that shows that the "what" matters. Here's the "when":

>They examined several European countries and showed that fiscal multipliers are substantially higher than previously assumed. Previous IMF studies had assumed multipliers of roughly 0.5. In other words, a €1 injection of government money into the economy would only have a net benefit of 50 centimes. By contrast, Messrs Blanchard and Leigh found that the actual multipliers in the early years of the crisis were “substantially above 1”.

That being based on a 2013 study by the IMF, later than the 2011 study quoted on Wikipedia.

http://www.economist.com/blogs/freeexchange/2013/08/fiscal-p...
Grow Your Online Business Using Fiverr Gigs
Fabric is a great suggestion! Here is a small fabfile as an example.

It's super-simple (wrote it for this answer), but should be less than 5 min if anyone need something quick.

from fabric.api import *

# Fabric
#
# Simple tool to execute commands on multiple machines.
# Use for easier, ad-hoc changes, such as package updates.
#
# http://docs.fabfile.org
#
# Installation on OS X
# `brew update && brew install python && pip install fabric`

# use local ssh config
env.use_ssh_config = True

# Hard-coding host IPs is not ideal! There are better ways:
# http://docs.fabfile.org/en/latest/usage/execution.html#defining-host-lists
all_nodes = [
'10.10.10.1',
'10.10.10.2',
]

# print uptime
# usage: `fab uptime`
@hosts(all_nodes)
def uptime():
run('uptime')

# install package via apt
# usage: `fab install_package:my-package-name`
@hosts(all_nodes)
def install_package(package):
run('sudo apt-get update && sudo apt-get install {name}'.format(name=package))

# check package version
# usage: `fab package_version:my-package-name`
@hosts(all_nodes)
def package_version(package):
run('dpkg -s {name} | grep Version'.format(name=package))
The 3D effect really becomes noticeable when looking at Employment density plots. Skyscrapers appear in Central London and Canary Wharf: http://luminocity3d.org/Economy.html#employment_density_2011...
Which is strange because Tolstoy was an anarchist and Thiel would have made him spin in his grave.
Wondering why this is voted down. He is quite right. Several math professors at my school who teach applied math do not know even the utmost basics...say things like computing kernel of a quotient group. Am sure they must have known it at some point during their student years, or maybe during the 60s-70s, you could get away without knowing these things, I dunno.
otoh, my abstract algebra professor was able to learn and then teach me Ito's lemma all the way up to semimartingales, topics he had never set eyes upon in his entire life! So I'd say the abstract stuff makes you much more stronger - gives you tools to understand from scratch material you've never seen before. The applied people generally glaze over when you mention math topics out of their competence zone, especially topics that are "useless" for some definition of "use".
Cassette Boy, who is known for his online mash-up parodies of shows

Not so many years ago, that sentence would look very weird. I love the times we live in.
Actually this need for a good debug tool of some kind is a key point. In the 80s I wrote an operating system for 6809, but I did have access to an ICE. I, and I'm sure many others, wanted to write something for that new 386 SX the second it came out. I thought Linus Torvalds had access to a 386 emulator at university, but I can't find a reference. I did find this, which describes how he debugged without one:

(from http://www.cs.cmu.edu/~awb/linux.history.html)

(he would have hated the machines I use these days, they take 6 minutes to boot)

"The worst part is starting off: after you have even a minimal system you can use printf etc, but moving to protected mode on a 386 isn't fun, especially if you at first don't know the architecture very well. It's
distressingly easy to reboot the system at this stage: if the 386 notices something is wrong, it shuts down and reboots - you don't even get a chance to see what's wrong.

Printf() isn't very useful - a reboot also clears the screen, and anyway, you have to have access to video-mem, which might fail if your segments are incorrect etc. Don't even think about debuggers: no debugger I know of can follow a 386 into protected mode. A 386 emulator
might do the job, or some heavy hardware, but that isn't usually feasible.

What I used was a simple killing-loop: I put in statements like

die:
jmp die

at strategic places. If it locked up, you were ok, if it rebooted, you knew at least it happened before the die-loop. Alternatively, you might use the sound io ports for some sound-clues, but as I had no experience with PC hardware, I didn't even use that. I'm not saying this is the only way: I didn't start off to write a kernel, I just wanted to explore the 386 task-switching primitives etc, and that's how I started off (in about April-91).

After you have a minimal system up and can use the screen for output, it gets a bit easier, but that's when you have to enable interrupts. Bang, instant reboot, and back to the old way. All in all, it took about 2 months for me to get all the 386 things pretty well sorted out so that I no longer had to count on avoiding rebooting at once, and having the basic things set up (paging, timer-interrupt and a simple task-switcher to test out the segments etc)."
10,000 miles / (365 days * 3 years) = just above 9 miles per day. Not bad :)
really neat - could do well in JS with WebGL
16-month old article.
does this work with the Pomodoro technique?
I agree with you that this mentality is likely how we gotten into the mess, but I think the way out is less clear. Thanks to the whole piracy dilemma, there was motivation your three strategies and develop the technology and services that they require. But now the technologies are there and aren't going away anymore, even if everyone would suddenly start paying again for everything.

Take Adobe for example: They moved from selling Photoshop as a software to a subscription-based model where they are effectively selling the same thing as a service. They didn't just use the cloud technology to secure their old business model, they actually made it even more restrictive.

Similarly, when you buy a phone, you don't get to choose between a cheap, locked down phone and an expensive free phone - you're paying the full price and still get the locked down phone.

So I believe, it is necessary that we get an alternative to the "free" culture, but it isn't enough. As things are today, it makes the most economic sense to abandon the "free" culture and still keeping your users in serfdom. Something else has to happen to shift balance, but I have no idea what that could be.
that is a really great idea
I'd hate to be stuck in a Union where what I'm paid is based on my seniority or on some test they come up with to measure my ability. I like being able to negotiate my salary. Unions may initially bring us higher wages but the combination of union dues, corruption, and bureaucratization of our field by unions will ruin it. Soon you wont be able to develop unless you're part of a union and have done your mandatory 3 years apprenticeship if we go that path.

I don't want to be the next automotive industry.
License or not, source or not, if I have something installed on my computer, I can modify it or at least attempt to do so. I can also run it without a reliable network connection. Not so much for streaming services.
The reason so much disruption comes from "barely skirting the law" is because government sets up the law/regulation to entrench these old business models. So much of what the US government does today is in service of big business, not necessarily adhering to whatever moral standard you have in mind for the rule of law.

Uber has to use the gray areas precisely because regulation was set up to prevent disruption of the cab industry. This regulation inhibits growth and promotes stagnation, evidenced by the fact that NYC cabs did not accept credit cards until 2007 and by how obviously under-served the SF cab market was.

Uber, by skirting the laws that were not serving the consumer but rather entrenching an industry has been able to do more in five years than the entire taxi industry has in 50.
Linked in Down
Avoid duplication across multiple pages, e.g. top navigation, footer etc. Note how "Notes" and "People" are separate pages. Angular is sufficient for single-page apps, so if you want to put all your logic on a single page you won't need Jekyll.
Usually it goes like this:

In-house solutions -> Centralized commercial offering -> Open source installed on premises
I am really struggling to understand the "build_string" example. Here's my attempt to pick it apart.

template<std::size_t count , typename STRING>
struct build_string_impl;

I think the above is a template that resolves to a forward declaration of a struct type called build_string_impl. It says, give me a size and a type STRING, and I give you a struct type.

template<std::size_t count , char... Cs>
struct build_string_impl<count,string<Cs...>>
{
using result = typename build_string_impl<count-1,string<c+count,Cs...>>::result;
};

I think the above is a partial specialization of the above forward declaration. In this specialization, the typename STRING is not a string, but instead a variadic char-thingy. So the 'typename STRING' is misleading. This partial specialization creates a struct type that contains a member type 'result' that aliases the 'result' type member of a recursive template instantiation.

template<char... Cs>
struct build_string_impl<0,string<Cs...>>
{
using result = string<c,Cs...>;
};

This is a partial specialization that represents the base case. It declares a template that creates a struct type build_string_impl that contains a member type 'result' that aliases the 'result' of a string type.

Where I get lost is here:

build_string_impl<count-1,string<c+count,Cs...>>

This attempts to instantiate the build_string_impl template with a size_t and a string. But there is no implementation of the template with these types - only for size_t and variadic char. So how does this get instantiated?
Yeah, they _finally_ added Strict SSL which validates it with a CA at least, but still no free option if you want actual security.

Really hope they get there soon. Secure self-signed SSL to CF then free CA signed SSL to the internet would make this whole free thing a lot better.
We’re planning to integrate many more services into Moo.do. Having first and third party plugins for adding content and viewing data in different ways is a big part of our goal. We’re looking into the best way to achieve that and what a full API would look like.
Scientist Claims Menopause Will Not Exist in 20 Years Time
I can't see any practical reason why this would be the case. Photoshop is a pretty hefty application in terms of RAM/CPU, so it makes a lot more sense to run it remotely, since Chrome Books are built to be cheap, not powerful.
That overpopulation isn't binary, it's qualitative, and having more than two kids/family is reducing the well being of the rest of us.
I like the minimalism of the UI compared to similar apps.
It's a pretty universal gesture when someone has a gun pointed at you.
Ah, the difference is that much of the research done on Scala makes it into the language
No thermoelectric elements :(
> What important truth do very few people agree with you on?

That psychology isn't a science, although public perceptions are slowly catching up:

http://arachnoid.com/science_of_mind
I'd rather say something like "Fischer–Griess monster" (it is a constant in the set of finite simple groups). Surely a constant, but not a numerical one. The interviewer will probably change the topic immediately for not becoming embarrassed. ;-)

Surely a less diplomatic way than Tao's, admitted.
It's plants! On a map! (Only kidding, it looks clean and nice, including on mobile.)

I haven't played with this much, but I'll bet there's a way to have a smoother zoom transition for your map overlay(s).
Benefits of Writing a DSL in Ruby
The original title was clearly linkbait.
I agree, although perhaps ChromeBooks are "cheap and weak" because there are no applications that use the power (hence the failure of the Chrome Pixel). If ChromeBooks are to become ubiquitous, I think local VMs is a great solution for legacy applications.
That should be "--only-upgrade", but ya, that's what I did.
Show HN: I built an e-paper based calendar
That's a better description than the Art Director at one Digital Agency who explained that the reason for the name change to KFC was because "they weren't allowed to call it 'chicken' anymore."
There already is one [1], it just has no power because no one joins it. People forget the requirement of unions where it's member/non-member ratio is at an equilibrium where employers are compelled to negotiate with the union.

Every time I have ever seen this issue come up, the loudest voices in the community are vehemently against it.

The argument goes that software engineers are too creative and valuable to simply be replaced like so many union workers. See thread here:
http://programmers.stackexchange.com/questions/9481/are-ther...

I think the real answer is that the ethos/personality/philosophy of a large swath of software engineers does not jive with collective organization. Also the market is such that developers are on the top of the pile and thus do not need to organize.

[1] http://www.iww.org/unions/dept500/iu560
There is no known measurement of utils and good reason to believe there never will be. Our strongest insight into subjective preference is revealed preference. Without action, preference is not revealed, and where preference is revealed by action, we can only know that one preference is higher than another -- ordinal. We cannot determine that one preference is, say, 10x higher than another. These are the limitations of utility analysis for a single person.

Diminishing marginal utility holds for a single person, and it ought to hold for interpersonal comparisons ceteris paribus, but of course ceteris paribus is a logical impossibility for interpersonal comparison given subjective preference. To hold ceteris paribus for two people is to assert they are the same person, and we're back to diminishing marginal utility for a single person.

Our only guide to interpersonal utility comparison is intuition, which is easily confounded. There is no way to say that my number one preference has more utility than yours, and we have even less reason to say anything meaningful about my number X preference compared to your number Y preference.
>	I've seen an increasing number of HN posts on the subject of how software developers/engineers are almost universally underpaid relative to the value they bring.

Examples?
Why Twitter should not algorithmically curate the timeline
Even in the Valley, an attractive woman rarely is rarely thought of as out of place. People would be too busy hitting on her or admiring from a far to question where she came from in my experience.
Google has on-site masseuses. They also have dedicated massage rooms with no windows. (I've seen one.)

I hope that I'm wrong, but I'm suspicious about what happens in there.
Just wanted to clarify if by "from the ground up" you mean rewriting everything (memory management, device drivers, scheduler, API, etc) or something else. And what that would look like?
This is another one I've used, with a somewhat different set of functionality: http://www.floodgap.com/software/ttytter/
A world without mosquitoes (2010)
I just skimmed and re-skimmed the usage examples on the page, and I see no option to actually tweet something.

I assume this has to do with the third party limit ?
Here in New York all Uber drivers are registered with the Taxi & Limousine Commission and have to meet city requirement re: licensing and insurance. I'm sure Uber would be happy to comply with the regulations that cities eventually come up with as long as those regulations are focused more on protecting consumers and less on protecting the old taxi industry.
My wife is a registered nurse, so she's a union employee. While it is nice to have someone negotiate on your behalf and represent you when you have a dispute, it certainly doesn't help with salary negotiations. You can't switch hospitals to get a higher salary because it is a formula based on education plus years experience. As an engineer, I have tripled my salary over the last 5 years by switching companies and being a good negotiator. A union would have just gotten in the way. Developers need to learn their true value and negotiate accordingly.
I think it would be easier for developers to just form small companies. All the advantages of a union with none of the disadvantages.
China's Great Firewall Cannot Shut Out News About Hong Kong's Protests
I thought that was Plan A.