skysight-inc/HackerNews huggingface dataset:
My complaint with the response was the "if you go down that road" response. The bug submitter was not suggesting dropping shell scripts, it was a request to remove the bashisms from dhclient so that it could work with dash.

It is not like there is an alternative python/ruby implementation that is "more robust against software failures" and has DEB_HARDENING turned on. If there was I would totally support going down the road of "making small changes to programs that process data from anyone on the network" so they could run on HardPython.

If there was something like HardPython alternative that was "more robust to software failures" with st
The only time I consciously put my phone (Galaxy Nexus) in my back pocket while sitting was when we were going on a water ride at the amusement park. I think it was worth the risk because we got soaked of course, but I definitely tried to not put my full weight on it.

There have been other situations where I have unconsciously put my phones through pretty intense pressure, not realizing it was under me where I sit down or sleeping with it and it getting stuck in between mattresses/cushions/pillows whatever (although for other reasons I have been trying to not go to sleep with my phone anymore, leaving it plugged in somewhere else).
Here is the relevant Wikipedia article: https://en.wikipedia.org/wiki/MS_Estonia
basically this force ppl to only check for things at specific times instead of having to instantly interrupt work.

its more of a social issue than a technological one. some people will have proper notifications setup and even when they get them, will not go check what this is about immediately (maybe 3 or 4h later they will).
It requires a lot of self control or a certain mind set tho so I can see why you' technologically enforce that behavior.

Note that you have to suppress twitter, fb, sms, etc as well for this to work best.. thus.. thus there's still room for changing our habits when setting up notifications and responding to them.

personally i made myself a rule that no notification is important enough for my direct attention. so i kept notifications via my phone vibrating only for direct calls (because people dont like voicemail and dont call a lot anyway) and for special msgs that due to the work i do need immediate attention (security incidents).

everything else, even if they're "urgent" to someone, i wont get notified and wont check. i check twice a day instead, "manually" and this includes everything: mail, twitter, etc.
If its that important they'll call me. else they can generally in fact wait a few hours - turns out im better at deciding whats important to my own time than they are (obvious, i know).

I strongly encourage people who havent tried to do that, to give it a go for a couple of weeks. Note that this includes everything. Your personal SMS, tweets, what not as well. And that includes weekends and off hours too. Otherwise this wont work.

I feel a lot more free since I started doing that a few years back and I get a lot more done in fact - while I feel like I work less. win/win.
thats a pretty good point ;P
The "series A crunch" suggests that VCs don't have enough money to invest in all the startups that they want to. But almost all VCs have much more money than they know what to do with. They raise huge funds to rake in millions per year through management fees.

The problem is that traditional VCs can't manage very many investments. So only a handful of series A VC deals can happen per year.

But there is a nearly infinite supply of money just waiting for another way to invest in startups that isn't VC. Things like Kickstarter from the bottom up and AngelList from the top down are the harbingers of doom for most VCs.
If you do have hardware extensions for virtualization optimization in your CPU, you're probably missing out on performance with Xen by using paravirt.

System calls and memory access are slower in PV than HVM (See: Problems introduced with paravirt when x86_64 removed two of the protection rings from CPU architecture) , and PV-on-HVM drivers for block/network devices get you PV level performance.
"Academic and government positions require you to work in a bureaucratic setting, maybe for the rest of your life. In industry, you can be a lone wolf if you want. In this sense, there is greater freedom in industry."

Can someone please elaborate on the industry part of this quote?
Distributions couldn't distribute qmail in the past because the license agreement made it impossible (or at least required such stupid things that no one in their right mind would do so). Its license became public domain in 2007, and I suppose would allow distributors to do sane things with the packages, but Postfix had already supplanted Sendmail as the preferred MTA on Linux and nobody really cared about qmail...since qmail isn't demonstrably more secure than Postfix (and both are maintained by well-known and well-respected security researchers).

And, to be clear, most distributions no longer use Sendmail as the default. Postfix is the default on RHEL/CentOS/Scientific Linux. exim was the default in Debian for many many years, not sure if it still is. Postfix is the default on Ubuntu, I believe. I can't think of any distros for which sendmail is the default MTA.
I don't know. Do you have a reference for an example of this attack?
If I remember correctly, the Mill wouldn't have this issue, since all stores go through the cache hierarchy (by default) so they finish as soon as it's in L1 (~3 cycles typically). It's then evicted down through the cache and into to main memory as usual, while retaining consistent aliasing semantics automatically.

I may have misunderstood, but this is covered in more detail in the memory talk I believe: http://youtu.be/bjRDaaGlER8
A full VM implemented and tested with Python
What is this Website Coded on?
So what is this website coded on? For example: php, python, java, etc
On the other side, I get annoyed at having to do a quadratic equation or matrix multiplication by hand for the millionth time because I can't have advanced calculators on the tests or quizzes. After you understand the concepts of those it becomes pointless to do them by hand so much. What am I getting out of manually multiplying two matrices? It prepares you for a situation that will pretty much never exist - not being able to look up a formula or make wolframalpha do some tedious algebra for you. This is what I like about physics tests; they tend to just give you a sheet full of all the formulas because if you don't understand the concepts of the material, then all the formulas in the world aren't going to help you. Physics professors tend to understand what's important more, in my experience.
Examples of how a psychopath can profit where an empath would languor, with neither side doing anything illegal:

- Alter a contract to improve your situation at the expense of the other party

- Always take advantage of discount offers that are clearly loss-leaders, such as gift cards on sale at a grocery store, without buying anything else but the cards

- Eat at the soup kitchen instead of buying your own food

- Tip low

- Exclusively buy property at foreclosure sales

- Either claim credit or ensure that people are more willing to assign credit, especially when promotions are on the line

- Look for connected people to make friends with, even though they are slimy weasels and you don't like them
An Algorithm That Decodes the Surface of the Earth
Bruges is a City in Flanders, Belgium. It's not in Germany.
Yes, it isn't that hard to use exec*() to execute a single program, but it gets rather messy if you want to execute a series of piped commands.

Also another function to worry about is popen().
So the problem is when the same byte occurs 2 or more times in rapid succession, right? Couldn't you use a temporary variable to count the number of consecutive occurrences of the same byte, and then once you hit a different byte, add the total consecutive count to the appropriate slot? That way you only write to the count table once for each run of identical bytes, and you never write to the same slot of the table twice in a row. Assuming that the compiler can fit all the necessary temporary variables into registers, wouldn't this eliminate the problem entirely? Or would this be so much extra work that the processor becomes the bottleneck instead of writes to memory?
Having the team to focus on their work w/o email distractions is a dream of productivity. Having a custom tool is key to getting this kind of thing to work. Airtable(https://airtable.com/invite/ijciBkzn) we posted yesterday on Show HN was built to get that set up easily.
> body measurements can be assessed through a Withings scale

Nope, Withings still hasn't actually released an update that does this. Despite it being one of the "flagship apps" that were advertised with iOS8 to have the feature from the start.

None of the mainstream health/diet/fitness apps currently give anything to the Health app that I can find.

Definitely a very lacklustre launch. I was/am quite excited for this app but when it launched and nothing actually worked except your steps, it was a bit of a letdown.
This reminds me of the 99% Invisible episode on Cow Tunnels[0].

0: http://99percentinvisible.org/episode/cow-tunnels/
Internalizers (Citadel) are the beneficiaries - as well as those competing for the top of the queue on every price shift. It would disappear quickly if it were just a bug.

Then of course, is that phone conversation I had where it was explained to me (see above)
I heard an interview with someone from the brewery on NPR. Apparently the "pipeline" is not a single pipe, but a bundle of multiple pipes, which carry additional types of liquids such as dirty water, cleaning solution, etc. to flush the actual beer-carrying pipe. Interesting setup.
The cost of an unpredicted branch inside the loop would probably outweigh the benefit.
Cool, I appreciate the transparency. What sort of conversion rate do you get on a course launch?
Imagine how expensive it would be to install a new system of piping throughout the city, including equipment to move the packets along and sort them at each of the junctions. And to carry physical goods, these would have to be big pipes, probably at least 50 cm in diameter.

Probably the best bet would be to piggyback on the subway system, since they already have tunnels dug. People could send and pick up packages at subway stops. And maybe subway trains could add special freight cars.

But still, we are talking major expenses, and negotiations with God knows how many slow-moving bureaucracies.
Implant-based blood glucose measurement devices[1] are becoming available, for example. These devices are well outside Apple's area of expertise, but interfacing with the data from these devices is well and truly within Apple's grasp.

Imagine that Apple was going to develop wearable technology of some sort (like, say, a wrist-watch) with inductance charging. Would the induction loop also be usable to interface with implanted inductance-powered sensors located in the wrist?

[1] http://www.diabeticlive.com/diabetes-101/diabetes-news/impla...
Kevin Mitnick Offers a Peek Inside the Cryptic Zero-Day Marketplace
Show HN: J2objc Eclipse Plugin – Convert Java to Objective-C
It seems to be working very well on this website.

The link appears broken to me.
Can you atomically increase one element of that array by 2 without a big chunk of code?
You probably have:

APT::Default-Release "squeeze";

In a configuration somewhere. Check /etc/apt and the various files in the subdirectories of that.

If you have that line remove it or change it to squeeze-lts
I'm pretty sure you can using a stored procedure written with plv8. Though that's not exactly a fluent and elegant natural solution
Yeah especially since some people offering this same service for free

http://voodooalerts.com/free
Vivekananda also lives on as an icon for the RSS and other extreme right wing Hindu groups.

Here for example is RSS leader Mohan Bhagwat speaking in front of a big Vivekananda picture:

http://samvada.org/files/Independence-Day-Bangalore-Aug-15-2...

Maybe they claim him wrongly? IDK.
$ env -i WLIST=$WLIST WLIST2=$WLIST2 command
This still exists to some extent. Many sellers use software that will match on the high end and the low end. In fact if you want to buy a book but think it is too expensive then a really easy way to game the system is to put up a fake listing with the price you are willing to pay and see if any sellers creep closer to your price. Chances are there are one or two sellers that are willing to sell whatever they have listed for cheaper.
For some Starbucks workers, job leaves bitter taste
> against virtual currency exchanges that use MongoDB, utilizing the eventual consistency

against solemnly depending on MongoDB's eventual consistency alone.
weev does no credit to Richard Stallman or his philosophy by insisting that either must be considered beyond criticism or above reproach, or suggesting that the controversy around things like Heartbleed and shellshock amount to character assassination, or casting him as, literally, a Sisyphean figure who practically singlehandedly created the modern software world, only to be cast aside by simpletons who can't comprehend his awesomeness.

Particularly, given the position of free software advocates themselves who are more than willing to deride, malign and condemn as immoral or evil any program that doesn't have a GPL attached.

I agree that making fun of his weight or his eccentricities is in poor taste, but his ideas are fair game, which is as it should be.

RMS may be right. Personally, I think he's right about a lot of things. But he didn't come down off the mountain with clay tablets written on by the finger of God.
We have :)

It's pretty hard to use a custom floating point representation that isn't supported as a primitive type. To make the matters worse even the standard binary floating point number doesn't map to JSON. E.g. +/- Inf and NaN don't have JSON representation.

We strive hard to provide intuitive user experience and abstract away the complexity of modern computing for non-technical users. At some point we might use a decimal floating point or better yet a fixed point decimal as the default representation for numbers.
This is a great blog post. Anyone implementing this sort of thing in Pg needs to read it.
Functional programming to save the world (2007)
Alas no. He had an official heir, Alexander IV born after his death aged 32, and possibly another son to a mistress. Both were assassinated in their teens.
Thanks Steven.
Sorry, are you saying Nginx+Fastcgi is vulnerable in general? I tested one of my boxes using nginx+fastcgi+mono and wasn't able to trigger the exploit. Or is it specifically nginx+fastcgi+php?
My recollection is that Oracle supports notifications, which is essentially an event system.

I'm surprised that Postgres has not yet implemented something like this. Would it not make sense to have a notification mechanism integrated into the RDBMS to avoid the necessity of polling ?
NgColorThief – ColorThief wrapper to extract dominant colors from images
Show HN: Immunizations - List and find clinics and record your vaccine record
Hoping for the automatic DNS fail-over feature to be implemented soon
Reading these disaster transcripts always haunts me. But it's also nice to see strangers rally to help each other. There is no discussion of cost, delay, or hardship.

It seems very weird to me that ultimately, according to Wikipedia, they buried he ship with pebbles. Why was this done, I thought most sunken ships were left alone.
I think a better reason is that jobs and messages can be relational with the other tables in the system, and so can provide the same guarantees that the rest of the db offers.
Associate Professor in Mathematics and Computer Science
1) Since the mid-90s Apache and similar http servers have offered fastcgi as a way of communicating with processes with sockets. So you can understand why hearing you single out apache to "use a more secure IPC like sockets" detracts from the main argument which I'd otherwise agree with.

2) I'd wager that the people who came up with CGI initially had expected that the process apache spawns would be anything but a shell.

3) Non-shell CGI processes happily deal with all manner of binary, back-ticks, dollar signs etc. in their HTTP_ envars all day and have done so for nearly 20 years. It's not a huge leap in logic then that these envars should be considered capable of holding arbitrary data without exploding.

4) You make it sound like nobody has considered environment variables a problem before, but sanitizing the environment before spawning a process from the CGI was already a well-established best-practice way before this bug came along. That process looks like - whitelist of envar names, remove all others; check PATH/LD_LIBRARY_PATH/etc sanity; command string parameters use specialized token substitution (eg. "echo %{integer}%" where some bespoke code throws an error if %{integer}% is interpolated to anything other than an integer), etc.

5) Despite the insanity of running CGI stuff which I would generally agree isn't a great idea, I'm pretty sure I'm allowed to be surprised that the mere content of an environment variable, whose job it is is to contain arbitrary data to be passed on to the CGI app should cause things to explode.
Good point. Though it's important to note that the reserchers identified an effect, and hypothesized about the mechanism.

It's possible writing improves understanding for some reason other than/in addition to paraphrasing.
http://news.bbc.co.uk/onthisday/hi/dates/stories/september/2...
How Uber Can Help Save the World
Perhaps this is a concession so that people who do not want to work with BMI do not have to by default. As minikites says, on a personal health basis BMI isn't very useful so folks may want to skip it altogether.
Switcheroo Redirector
We have to crush the forces of selfishness. It's the curse of our modern world.
> Unless I missed something, it doesn't provide a reason to expect bias in the other things.

"VAM’s instability can result from differences in the characteristics of students assigned to particular teachers in a particular year, from small samples of students (made even less representative in schools serving disadvantaged students by high rates of student mobility), from other influences on student learning both inside and outside school, and from tests that are poorly lined up with the curriculum teachers are expected to cover, or that do not measure the full range of achievement of students in the class."

> If you believe VAM is unable to measure the effects of teachers, are you willing to follow through with the logical conclusions? Namely, the effect teachers have on students is so small it can't be measured ...

We already knew that the contributions of teachers to student achievement was relatively small long before VAM was invented. The only people who seem to think that teachers have a very large impact are the pro-VAM folks (e.g. Bill Gates and Malcolm Gladwell), who all cite the same flawed study.

That said, the reasons why VAM can't measure teacher performance isn't because the contributions of teachers are small per se, but rather because there are all sorts of problems with all of the proposed measurement systems.

In order to create a VAM system that actually worked, assuming such a thing is possible, you'd have to make a number of changes to the way that the school system is designed... e.g. assigning students to teachers at random, designing standardized tests to measure teacher quality, implementing standardized tests in all subject areas, etc. But implementing all of those changes may well be worse for student learning than firing all the bad teachers or whatever. Not to mention that there is currently a major crisis in teacher retention, with half of all teachers either getting fired or quitting in their first five years. (After spending two years and god knows how much money getting their masters degrees to go into the profession.)
I also disagree; the article's rationalization is productive.

Your mention of Occam's razor is key. The point of this rationalization is that it shows quantum mechanics (or at least a subset of the theory) is mathematically simple, thus serving a threefold purpose:

1) Due to Occam's razor, a simpler theory is more likely to be correct than a more complicated theory with the same explanatory power. If quantum mechanics can be expressed more simply, then the estimated probability of its correctness should be increased (by only a slight amount).

2) Quantum mechanics, explained this way, is interesting from a purely mathematical standpoint. Even if we knew quantum mechanics doesn't describe reality, mathematicians (and theoretical computer scientists like Aaronson) would perhaps still investigate it. Of course, this may not interest physicists.

3) The article presents a novel way to teach quantum mechanics. Mathematical simplicity can (to some extent) replace intuition as a way for learners to grasp the theory. As Aaronson remarks, quantum mechanics is often taught by following the historical order in which the ideas discovered. Starting from the "conceptual core" (if Aaronson is correct about the conceptual core) is arguably a superior pedagogical technique.
I have come to exactly the opposite conclusions than the one proposed in this article. For me, not working when I don't feel like it, and really exploiting the times of high energy yields the most productivity.

If I force myself to trudge through moments of low energy, it saps all my energy. Moreover if I finish my alloted time of work, and then hit upon a high energy moment, it forces me choose between working even more and having any kind of leisure.

Of course, I think this has to do with the work one does. I'm in academia and the article discusses data entry. You don't really need creativity or initiative to do data handling.
I wonder what would happen if you used AVX-512 registers to store the byte distribution. You could use 16 of the 32 512 bit SIMD registers instead of relying on memory. AVX-256 would require 32 SIMD registers but it has just 16 available.
All I would say is, do not let those scumbags distance you from reading about this guy. They have been trying to 'churchify' hinduism since ever and playing fast and loose with history and building this identity of "a racially and spiritually superior never-did-nothing-wrong majority that has been repeatedly wronged" that now needs to collect its dues and reclaim its prestige. It is striking how often that line works.

But yeah, expect downvotes because many people believe that crap. More true among Indians outside of India and in particular regions within, perhaps fuelled by the urge to connect with their roots. That is a perfectly legitimate emotion, just spoiled by the presence of these people who try to make some quick religio-political capital out of it.
Arc - a Lisp dialect created by pg. Also, interestingly it uses flat files instead of a database.

http://arclanguage.org/

http://en.wikipedia.org/wiki/Arc_%28programming_language%29

Although if you look you can find clones in various languages.
A nice book I have found on the topic of virtual machines as they relate to programming languages is http://www.amazon.com/Compiler-Design-Machines-Reinhard-Wilh.... It is a pretty good book although the focus is less on emulating actual hardware and more on designing and implementing custom virtual machines as compilation targets for imperative, functional, and logic languages.

I kinda wish there were more meetups that focused on this kind of stuff instead of the latest and greatest frameworks. This kind of fundamental theory is applicable in any kind of application and framework setting.
I did a test on this as well. It approaches the speed of distributed version only if there are a lot of consecutive bytes. The distributed version is fast in any case.