skysight-inc/HackerNews huggingface dataset:
It seems to me that the explicit separation (and vagueness) of 'compter' and 'computer system' seems intended to have the latter cover networks. But perhaps you're right.
This is the same reason old CFLs seem to last a lot longer than new ones. The old ones had better temperature ramp up circuitry.
I'm only going off the article:

> The Niantic staff will curate missions to ensure that no one does anything nefarious, like putting a pornographic picture in the mission description.
Plus with progressive tax rates and high taxes in CA that ratio realistically goes more towards 1:6 or higher
I didn't say it required it. I simply pointed out (albeit sarcastically) that CGI scripts do get written in bash, and people often often make use of sudo within them. I've seen such a beast in production at multiple companies.

The amusing up/down vote war I am watching on my karma gives me hope that at least 50% of HN got it...
Um, in much of the south 40k is decent money. I moved into my first house and got by fine on 35k just a few years back.
Indonesia scraps direct elections for regional leaders
You keep offering me more money, but that's not what I want
I have been working as a full stack web developer for 12 years. Right now I have 10 job offers. I am one of the best in my city and I've produced some amazing products. But I don't want to work for any of these companies. They keep offering me more money, but that isn't what I want. I want my life back. I want time. You want to pay me 11x minimum wage, but I'm still considering a job at Starbucks or maybe Uber. While my friends lived their lives, dating, finding wives, I built your companies. I will not work for you anymore unless you offer me time. Let me work 3 days a week and you will retain your talent. Only pay me for 3 days. I don't need medical or benefits. You can even pay me less than market value for my job. I JUST WANT TIME. I have so much to offer the world and I want some of my own life. If it comes between getting paid 200 / hr to work somewhere 5 days a week or living out of a car so that I can experience life again I will choose my car. Please email me at worldnick@gmail.com if anyone has any ideas. Thank you.
The Fairbanks Scales in the 19th century were famously reliable and durable. Sadly, for the Fairbanks, to the point that once one was bought, there was little need to replace it. The Fairbanks brothers (who lived in Vermont, not Alaska!) became fabulously wealthy. But their company is largely forgotten, due to it saturation the scale market within a generation or so....
Ello
Can anyone swing me an invite? Would like to check it out

http://www.independent.co.uk/life-style/gadgets-and-tech/news/what-is-ello-the-inviteonly-social-network-facebook-users-are-apparently-fleeing-to-9756095.html
In texts.io, it looks all typing render to rich format but no way to get back the markdown in text.
Google Drive – a new design for simplicity [free SaaS]
Meteor 0.9.3: Packaging updates and improvements
water on earth came from meteors and some of these meteors could have been older than sun
Hi Jgamman. I agree! Pictures are very good schematics at leading proofs into the right direction. Tons of examples: Monotone Convergence Theorem and Bolzano-Weistrass. Best, Otis B. Ramsay '99
In fact, you can argue that our entire series IS about pictures and schematics!
The US gov will make substantial efforts to help you if you're caught in a war zone. That's a big plus if you live or travel to dangerous areas. I'm a Canadian, but I've heard stories about people working overseas with other foreign workers. When things get bad the American's are quickly evacuated, other not so quickly.

Also if you ever move to the US you immediately, or at least very quickly, qualify for programs you never paid into. Medicare if you're old, in state tuition if you have kids, etc.
Deep learning and Speech recognition at Wit.ai
We are building the AI platform that helps thousands of developers create apps and device that understand human language (speech and free text): https://wit.ai

That’s an ambitious goal. Even Google and Apple haven’t completely cracked the problem.

Our approach is different:

- We provide the mass of developers with a simple way to build apps that understand voice commands, and learn from every interaction ; and

- We leverage the community: what Wit.ai learns is shared across developers.

We are a team of nine engineers based in Palo Alto and San Francisco. We were part of Y Combinator W14 and funded by the best VCs.

We’d like to hear from you if:

- You have worked with ASR and/or neural nets "on the field"

- You see yourself as a full-stack software engineer: you like to resolve a problem entirely from hardcore algorithms to implementation.

- You are curious: you can’t resist the urge to solve hard problems, learn new domains, try new things, and you don’t take “that’s impossible” for an answer

- You have done many mistakes (we know you won’t make them again)

- You are ready to learn/do whatever it takes to succeed, from Clojure to Javascript to supporting users to debugging C libraries to assembling furniture.

Some examples of what we’re working on now:

- Leverage C/C++ open source speech to text engines (Kaldi, Sphinx)

- Improve the learning efficiency and the accuracy of our Clojure-based NLP layer

- Build embedded runtimes in Rust/C/C++

- Build iOS and Android SDKs handling low-power magic word (“OK Google”) detection and audio streaming to the API

We are early-stage enough to be able to offer significant equity. We also offer a competitive salary, full benefits, help to relocate to the Bay Area if you need to, and all the perks you expect (we’re probably not the right company if this is your criteria number one though).

If you think you are a good fit, please contact us at jobs at wit.ai with any relevant information that would help us get to know you better (resume, Github, projects, code samples).
I've used TeamViewer 6, try it out
Re: CVE-2014-6271 – remote code execution through bash
I used to be all vi all the time. One day I figured I ought to learn emacs. I don't remember what the exact impetus was, but I gave myself an 8 week challenge to use nothing but emacs. For the next ~7 years, I pretty much used nothing but emacs, and it was enlightening to work with text in the emacs concept, and to witness emacs' implementation of its concepts, and all the excellent modes that authors developed within its framework.

Fast-forward to about 4 months ago, and I thought: "My vi-fu isn't at the level of my emacs-fu", so I gave myself an 8 week challenge...

If anybody were to ask me "should I learn emacs or vi?", an appropriate answer would be "yes." They're both awesome, and you can learn both. Go for it.
A one hour commute could easily cost ~ 5k/yr in fuel alone (50 weeks * 5 days * $3/gal fuel * (60miles / 20mpg)), instantly cutting that increase from 30k to 40k in half.
People don't trust Mozilla because they read the code, they trust Mozilla because they do exactly what was described above. They do the things that foster trust.
WARNING: The Internet Might End in December
Is this bill allowed to be retroactive? If so, this is what they will get Assange, or the next Assange with. Consider the Australian arm of WikiLeaks (including the party) closed for business.

Which now concerns me. Will WikiLeaks Party members be put on a list just like the ASIA targetted communists during the cold war?
Google Online Security: Gradually Sunsetting SHA-1
Check out Dokku for deploying docker containers. It's like a mini-heroku in 100 lines of bash.

https://github.com/progrium/dokku
The Bash Bug: What you need to know about the latest security flaw
First Shellshock Botnet Attacks Akamai, US DoD
I'm not saying there's a contradiction, I just find it interesting.
Facebook login flow broken on iOS8 safari
The difference in costs for everything else is similar or worse in rural areas though. For instance, a 32" TV costs the same on Amazon no matter where you live, but when the water company only has 900 customers instead of a few hundred thousand the cost-per-gallon sky rockets.
That is incredibly annoying and true. Not sure if the current govt's focus includes web startups.
It's not about terrorism, it's the MPAA and RIAA behind this push. In other words, it's the for the corporates.
For 13.10 do this, selecting correct architecture:

----------------------------------------------------------

amd64

wget archive.ubuntu.com/ubuntu/pool/main/b/bash/bash_4.2-2ubuntu2.3_amd64.deb

sudo dpkg -i bash_4.2-2ubuntu2.3_amd64.deb

----------------------------------------------------------

i386

wget archive.ubuntu.com/ubuntu/pool/main/b/bash/bash_4.2-2ubuntu2.3_i386.deb

sudo dpkg -i bash_4.2-2ubuntu2.3_i386.deb
Exotic optics: Metamaterial world
Apple still uses Windows XP in its production factories
Something I noticed is that when I open several pages in Stack view externally from the app, then open the Stack in the full browser, the tabs don't properly get thumbnails until I manually switch to them all.

Regardless, this is clearly a forward-thinking mobile browser, more so than Chrome, and so I support it wholeheartedly.
A package manager does not support just a single version and can handle dependencies like OS X App Store does.
Dear Liza, Dear Liza...
Hackers Are Already Using the Shellshock Bug to Launch Botnet Attacks
Which is where /bin/sh gets involved. PHP should be calling pipe/fork instead of popen IMO, I can't see the point in invoking a shell.

Ideally there would be something like a popenve() to simplify the process of opening the pipe(s) and passing arguments and environment.

There are also various other variations on the popen() concept, like my own popen3() implementations in C[0] (note that I'm not the only person to write a popen3; Python, Ruby, and probably other languages have their own).

However, I mimicked the real popen(), and my implementation uses /bin/sh as well. It would be easy to make a version of popen3() that accepts argument and environment arrays, but it would still be insecure if the environment was set to the calling process's environ pointer[1], and/or the command to be executed was a /bin/bash script.

[0] https://gist.github.com/nitrogenlogic/1022231#file-popen3_20...
[1] http://linux.die.net/man/7/environ
Available on Debian now.

https://www.debian.org/security/2014/dsa-3035
India's Mars mission: Picture that spoke 1,000 words
Maybe you should negotiate with them for part time work. I dislike the current systems too.

Sometimes i wish i could take all my time off in the form of 3 day weekends every second week.
Of course it is. You keep your front door locked, you might have a lockable screen door and bars on the windows, or a burglar alarm or a number of other security precautions, but I'm pretty sure you don't live in an impregnable fortress or a bank vault.

More likely you have a basic level of security that deters crimes of opportunity, perhaps even a serious burglar, and that is sufficient, same as for most people. Now maybe I'm wrong and you live in a decommissioned missile silo or some other super-hardened structure, but to pretend that there's no difference between basic security measures and leaving your front door unlocked is total BS.
An Interview with the First A16Z Distinguished Professor of Computer Science
Airbus Patent-Pending Virtual Reality Helmet
Android phones are constantly scanning cell and Wi-Fi networks to improve Google's geolocation, mapping, and traffic services. Google/Niantic could direct players (by setting the portal locations) to areas that need more network scanning, beyond the network scanning their Street View cars do.

At Mozilla, we are trying to do something similar with our "MozStumbler" app [1] for community "stumbling" of wireless networks. You can compare Mozilla's network coverage of the Embarcadero map in the Venture Beat article at [2]. We also have weekly leaderboards to show who has discovered the most new cell or Wi-Fi networks at [3].

[1] https://github.com/mozilla/MozStumbler/releases

[2] https://location.services.mozilla.com/map#15/37.7966/-122.39...

[3] https://location.services.mozilla.com/leaders/weekly
Or you're not sanitizing your inputs in which case you have another problem anyway.

Sanitization is an orthogonal issue; no amount of escapeshellarg() would save someone from this issue, especially if the call to Bash is several layers of library calls and program executions removed from the developer's code (see pyre's comment: https://news.ycombinator.com/item?id=8368861).
Ubuntu: http://people.canonical.com/~ubuntu-security/cve/2014/CVE-20...

RHEL: https://rhn.redhat.com/errata/RHSA-2014-1306.html

CentOS update is available also - just not on some mirrors yet.
We're moving towards more open spaces. Buildings like 44 have large scrumish workrooms, no private offices.
Debian patched this 8 hours ago, Redhat issued a patch about 3 hours ago, I believe Centos is still vulnerable, Ubuntu 14.10 isn't patched yet, Ubuntu 14.04 was patched about 3 hours ago.
It's impossible to enumerate all evil. There's no way of knowing what else is vulnerable until it's demonstrated to be vulnerable. I've commented elsewhere, though, describing what types of function calls and programs are likely to be vulnerable.
Totally they are. Folks like MadsK and DamianE write TONS of code. Plus, now that we're doing all our work live on GitHub, the roles can easily blur.
Work for a few months at $200/hr and then take many more months off. You don't even have to ask. Just quit.

Or just work 40/hours a week. That really won't hold you back from having a life.

If you think having a real job is less stressful, you're nuts. Being poor is a bad time. And good luck having a family as an uber driver. You really want to stay in $200/hour software fantasy land.
This is almost 10 years old. The title should include the year.
I think the implication is that Chrome & Safari are both mobile editions of desktop apps, which is true to some extent.
One might expect alcohol consumption to be roughly normally distributed, but clearly it is not when the top 10% is so far off the chart. Imagine what it would be like to drink 74 drinks in a week. I've been a heavy drinker at times, but that amount blows my mind. And that's just the middle of the top 10%. I love me some booze, but that amount is so far beyond what I would consider enjoyable that there would have to be something seriously, irrationally wrong with me to partake to that degree on a regular basis.

That's what addiction is. It's like asking why someone with OCD can't simply not wash their hands. It's mind bending to even imagine for someone who hasn't had that experience. I've dealt with obsession and compulsion at times in my life (not as a disorder), and I know how hard it is for me to modify habits and fixations. True addiction is some next level shit.
Having used Win8 just long enough to blank the machine and install Linux, I found the beast just horrifying.

I think there was a point where win8 actually cut into MS' sales - and MS has a pretty tight monopoly on the low-end PC market.

And Win8 is where the things Sinofsky talks about - being aware of how ordinary users actually get thing done - were palpably tossed out the window.

In the discussion of what lead to Win8, the perceived virtues of the Mac were monomaniacally pursued. Static design - having an impressive, beautiful look - was everything. Doing tasks was nothing.

And I think earlier MS for all its other evil, had a pretty good record of producing good, usable programs (buggy too but they were careful at finding the features people needed and wanted).
It's mostly Linux issue because bash is there installed by default and even /bin/sh is really bash...

For example on BSD you could technically install bash, but chances that it is used as a shell for a services is very small.
These are the ISIS refineries we're bombing
Very thankful this made it out today.
Water is indeed pervasive throughout the universe. Here's a pretty interesting and relevant article from NASA:

http://www.nasa.gov/topics/universe/features/universe2011072...
I found the incremental approach used in redis to be most interesting (http://antirez.com/news/63).

Can you comment on how one can safely enumerate "all" keys of the hashtable, while minimizing contention.

It would be great to know whether, in principle, rhashtable can offer such a capability.
I just patched my CentOS 6 server a few hours ago. Double check yum.
Only one parent comment sure, but it was the second comment on the page at the time, and is currently the longest thread on the page. Nothing wrong with calling it out.
> Most competently-constructed buildings and bridges today could last for a thousand years.

That's not even remotely true. Without continual maintenance most of them would collapse in 100 years, maybe 200 on the outside. But that's not really the point. The real estate market is quite a different beast driven primarily by scarcity of space and location desirability.
2nd CentOS update is out too https://news.ycombinator.com/item?id=8371164
If you search Wikipedia for "rendition aircraft" you will find a plane that crashed in Mexico in 2007 while carrying multiple tons of cocaine. Do a Google search on the tail number of the aircraft and you'll find a couple sites who did extensive investigation of the aircraft's previous owners (an empty business office) and interesting flight history (Guantanamo Bay, Cuba.)
How the Vanadium Redox Battery Works
> Linux/Unix-based

Actually it's primarily Linux because /bin/sh is pointing to bash.
We couldn't find exactly what we wanted to replace heroku with in our setup, so we ended up building longshoreman :

http://longshoreman.io

http://mikejholly.com/introducing-longshoreman/
Until shit hits the fan.

I really don't understand how all these "instead of Heroku just use X"-people do not understand that one of the main benefits of Heroku is not managing servers. If your app on Heroku has an issue Heroku will fix it (not your app of course). If your app on Docker has an issue. Who you gonna call?
One of the biggest issues with Docker is security more than anything else. You can't really rely on container separation in a shared environment if someone somehow plans on selling Docker containers.
Exploiting Bash Remote Code Execution Vulnerability
Sure, but where do you go?
Murder in a Time Before Google
Cognitive Artificial Intelligence: The MicroPsi Project
Chrome Remote Desktop has a Linux beta version available.
Not having worked with bash (et al) in ages I wonder whether allowing a function definition (even without trailing commands) is not still hole? What if you defined a function 'ls() { evil... }'... could a CGI script making a call to 'ls' actually end up with the function instead of the real 'ls'?
Steven Sinofsky's (post-Microsoft) blog is also a good read:

http://blog.learningbyshipping.com/
Going West: The World of Live Action, Competitive Oregon Trail
I patched mine about 10 hours ago. Is this one newer?
As an Australian I concur with the parent statement.
Are You Shellshocked?
Why would you prefer this over the LD_PRELOAD workaround provided by redhat?
Do governments have persistent identity? Does it break after a revolution? What about a constitutional Monarchy like England's? If its a democratic government does having ancestors who voted for an oppressive government make them responsible for the past?
Apple: Most OS X Users Safe from 'Bash' Security Flaw
Yes, but if you can control enviroment variable names then you can also set LD_PRELOAD and a whole load of other nasty enviroment variables.
Try switching to a different terminal app. I get excellent performance running vim and my entire dev environment in tmux. I also find that the performance is pretty consistent whether I use chrome-ssh, cygwin, gnome-terminal or konsole. Honestly, I'd be surprised if any modern GUI toolkit could compete with a curses app in terms of display performance.
Nope. It's about an ongoing global cyber intelligence war.

Check out my other comment in this thread for a quick rundown on some stuff to start researching.
Make sure you have bash-4.1.2-15.el6_5.2 instead of bash-4.1.2-15.el6_5.1 which was the initial patch.
Looks like it improves things both ways,http://app.rdmag.com/news/2014/09/nanotechnology-leads-bette...

Hope we see it in production for both uses!
I would prefer to work 60 hour weeks. The problem is I am done. Now, I must get out of jail. I certainly have no interest in your job making license plates -- nigger reverse engineerinsg and clusterfucken soiling the fields .

I am God's high priest. I will rule the world. Just wait.
In other words they play the politics to free up the devs to focus on writing code. Yep, that's what PMs are for.
Yes. It's not mentioned in the website, but Indian Government also provides immunity from criminal prosecution to wealthy foreign investors with strong political connection - regardless of the nature and (genocidal) scale of the crime.

Step right in, investors. Find a get-out-of-jail-free card in your goodie bags!
...although some programs blacklist unsafe environment variable names. They all should be updated to also blacklist bash function values.
I guess it is the hard way for some people to learn that they aren't safe just because they use UNIX systems vs Windows.
Sorry, I should have been clearer :(

These prices include delivery to Beijing. I converted the CNY prices to USD only to make them easier to understand.

I have heard that some Taobao vendors do ship internationally, but I have no knowledge of this, and have only heard it indirectly from overseas Chinese. If you don't speak Chinese, then dealing with unusual requests or customisation can be hard, because it's all done through the online chat system, and 99.99% of vendors only speak Chinese.
Don't forget that he even further destabilizes the economy and costs the people a lot of money through policing, federal insurance of banks (or whatever system Greece uses), etc.
I'm using debian jessie (testing) i386, and I had to download bash myself (from sid) because my up-to-date system was affected but the first patch was available for sid (unstable) and wheezy (stable) and not in jessie.

So I don't know if every architecture, and version is updated with the same speed.
Hmnn well I wonder just how much safer BSD is compared to Linux...

I would consider linux to have more eyes on it, and if I remember correctly, LibreSSL was not infallible (despite all the shaming of OpenSSL folks that went on)
Pointer ownership prevents memory bugs and concurrency bugs. When you have the combination of aliasing, mutability and concurrency is when you have all of these Heisenbugs. Rust attacks it from the angle of not having aliasing. You can have mutability and concurrency, but only one thread should have ownership of the thing being modified.
If you have some RHEL4 machines that you still haven't retired:

wget https://oss.oracle.com/el4/SRPMS-updates/bash-3.0-27.0.2.el4...

rpm -ivh bash-3.0-27.0.2.el4.src.rpm

rpmbuild -ba /usr/src/redhat/SPECS/bash.spec

rpm -Uvh /usr/src/redhat/RPMS/x86_64/bash-3.0-27.0.2.x86_64.rpm
MySQL has had geospatial extensions for years. They even work. The underlying table format is an R-tree, which, unfortunately, is only available for MyISAM. Point in rectangle is very efficient, and other queries that can be expressed as multiple point in rectangle tests are reasonably efficient. "Nearest" is not efficient, but for many purposes ("find nearest McDonalds"), generating a query rectangle for a reasonable driving distance, then sorting by distance, is effective.
I was surprised i didn't see it mentioned in the post. VM-style isolation is there for a reason. Dunno if Docker is the wave of the future, but as a Heroku(AWS?) killer would be nice to learn how sharing all this performance goodness on the same system is resolved isolation-wise.