skysight-inc/HackerNews huggingface dataset:
Does anyone think it might be related to the recent bash bug? It even affects dhcp clients which is a case with aws.
https://securityblog.redhat.com/2014/09/24/bash-specially-cr...
Doubtful. The dude has a net worth of $1.5 billion. He would have made back the $22 million as interest from his investments within a matter of weeks.
"Our Malibu Beaches" app for Android and iOS: http://escapeapps.com/malibuapp

The shenanigans that Malibu residents do to keep outsiders away is astounding. David Geffen has his entire street side of his Malibu house covered in fake garage doors with corresponding curb cuts so you can't park there. (Technically you are allowed to park there, but try explaining that "these are fake doors and illegal curb cuts" to parking enforcement)
Can this replace my server's installation of squirrel mail? Where my users could log into their accounts and reap the benefits of mailpile instead?
Should be fixed now:

To manually update EC2 instances managed by Elastic Beanstalk, you can run the following command:

For Amazon Linux 2013.09
"sudo yum install -y http://packages.us-east-1.amazonaws.com/2013.09/updates/556c...

For Amazon Linux 2014.03
"sudo yum install -y http://packages.us-east-1.amazonaws.com/2014.03/updates/e10f...
"The people can always be brought to the bidding of the leaders. That is easy. All you have to do is tell them they are being attacked and denounce the pacifists for lack of patriotism and exposing the country to danger. It works the same way in any country."
-- Hermann Göring

That'll be next. Any one who stands in opposition to these bills will be "exposing the country to danger".
This doesn't really answer your question, but I think it's interesting to note that Institutes of Justinian are doing two things here. First, they are announcing to the Romans that the seas and running waters are part of the commonwealth. Second they are making the seas and running waters part of the commonwealth. They are simultaneously making a declaration and changing the world to fit that declaration.

In short, seas were part of the commonwealth because Justinian said so. An <ahem> appeal to authority. But an appeal that Justinian made, not benjohnson.
Ugh. Bummer. Was really stoked about the domain too.
The Art Forger Who Became a National Hero
Yup, fundamentally it's not following best practices vs. a few minutes of downtime. It's a far better call than not forcing the update.

Of course all the people who built shoddy cloud presences are going to be screaming blue murder that their 'oh so successful' but 'couldn't be fucked to run in multiple AZs' businesses are going to be down for a few minutes.

It reminds me of doing tech support during the dotBomb, every daytrader would phone about how they were losing thousand per second while their internet was down, I'd ask them to switch to their backup connection, and then explain that they had the cheapest residential connection available that's inappropriate for day trading and that if they are making thousands per second they should have a backup connection in place.

Then I'd upsell them on a business package and have a guy there in 24 hours.
In the MRO image it's hard to see, but I'm pretty sure they are wearing thin white gloves (probably nitrile).

The ESA picture says its from a thermal and mass model, and the guy in question is hovering over a test fixture.

I can't say much about the ISRO video. I hope it's just press footage of something that isn't the actual flight unit. That would be pretty reasonable. Later in the video you can see the techs wearing gloves pulling the vehicle off a moment of inertia test. It's encouraging, but the fact that they're wearing hair nets while half the guys have giant, uncovered beards is not.

With Curiosity, NASA even went so far as to aim the initial trajectory to miss Mars. This was out of fear that the upper stage of the rocket, which did not have the same amount of contamination control, would collide with the planet.

MOM's orbit is fairly eccentric, so it's not likely to collide with Mars any time soon. I think we have a lot of time to study Mars before we worry about any potential contamination.
Rogue DHCP servers should not be a problem in any decently engineered enterprise or college campus network. Cisco switches have included DHCP snooping for years which when used only allows authorized switch ports to act as a DHCP server. Any decent enterprise wireless platform should either have transparent firewall functionality to block client DHCP responses or an equivalent to DHCP snooping.

If you've properly deployed these tools you've greatly limit the potential impact of a DHCP based worm.

Home router? Anyone test this against Linksys junk yet?
> I think it's a bit naive to say that science doesn't turn on belief.

That depends entirely on what we mean when we say "science". If by "science" we mean as defined and as practiced when it's done right, then no, belief plays no part -- it can't. If it did, it wouldn't be science.

> Scientist aren't robots, mechanically and dispassionately ingesting evidence and spitting out theory.

Scientists aren't robots, but they are also not hothouse orchids.

> They're humans with imaginations, beliefs, agendas, and egos, guided (hopefully) by a methodology that leads to discovery.

You have left the topic of science. The reason science exists is precisely because people are the way you describe them. Science is meant to be a counterpoint to natural human instincts, beliefs, passions, and other logical failings.

> I think belief is what drives science, and it's not all that bad of a thing.

You're now confusing science with religion. In religion, you let sincere feelings guide you to a conclusion. In science, you let logic guide you to a conclusion.

In religion, something is true until evidence proves it false. In science, something is false until evidence proves it true -- exactly the opposite.

Much of scientific discipline is meant to guard against what we believe is true or want to be true. Experimental and control groups, the classic double-blinding precautions in human studies -- all are meant to minimize the corrosive, undermining influence of our beliefs.

The perfect religious follower is guided by belief, hoping only that his work reflects his passion. The perfect scientist doesn't care what conclusion his work comes to, hoping only that it reflects reality to the best of his ability.

Belief and science are in absolute opposition.
> Removing public access means he intends to use the land privately

The argument was that he wasn't removing public access; he contends public access never existed:
"the Deeney family, which set up the first cabin in 1918, had always charged people to access the beach, a clear indication that it was a private beach prior to 1972"
Well, this is an installation guide for the latest MacBook Pro, for the latest ubuntu.

I wouldn't call this "easy".

https://help.ubuntu.com/community/MacBookPro11-1/Saucy

It also has a fairly big section "Things that do not work (or fully work) yet".
I'm a Surface Pro 2 User and a Software Dev and couldn't be happier. I only have to carry 1.1kg of Hardware around to have my full Workstation with me and when i'm in my office i've got a perfect Dockingstation. No fiddling with cables: https://fbcdn-sphotos-d-a.akamaihd.net/hphotos-ak-xpf1/t31.0...
Conservation of energy
Yes, clearly it's wrong, and I've had instances disappear myself. But it happens rarely enough, and some don't want the overhead of running another instance or ensuring an application has zero downtime. There is a large spectrum between having zero downtime and running a single-instance app on EC2.
As I understand it, this ruling hinged on the former, not the latter. I think a fine would have been unreasonable - this a disagreement over technicalities in the law. On the other hand, what guys like David Geffen are doing in Malibu is blatant knowing disregard for the law, and fines would be completely appropriate in cases like that.
Lenovo sells more than just consumer PCs.
Yes you are right, but GCE does not offer the flexibility that allow user to reboot themselves in their own convenient time.

Note: I am not saying the 'live migration' in GCE does not work, I am just saying I've more confident (well...peace of mind, IMO) to shutdown the my own database manually (which is automated and tested), ensure all data are flushed to disk, clients are disconnected gracefully and slave has promoted to master.. and things like that, rather than some black magic like 'live migration'

Of course, I am not saying 'live migration' is wrong, but it is just my preference.
I’d be curious to see what the gender breakdown looks like for native-born vs. immigrant PhD students, by field.
Dropbox actually held a recruiting event at Berkeley the other day where one of their engineers gave a talk on writing Hearthstone bots using Sikuli.
can someone explain the downvotes?
No good deed goes unpunished, especially when there's lawyers and money involved.
I set my expectations low when I saw the empty hype the beginning of the article was building up, but this game actually sounds quite strategically interesting.

I definitely see why this is the kind of game that isn't the same without money, much like poker and backgammon. I hope there's some kind of micropayment platform that it could eventually support to avoid the credit-card fees and the check-mailing fees.

(No, not bitcoin. Most people can't use bitcoin.)
I'm very annoyed by the founder of this exploit, if you are going to release something as serious as this. At least work on a solution first. Bash source code is open and out there, isn't this suppose to be the "benefits" of open source? Gee.
Service Technician from Liberty Heating and AC Repair
Jason Rohrer's games are fantastic - I'd recommend his game Passage, which only lasts for five minutes.

http://hcsoftware.sourceforge.net/passage/
Why would you be restoring data? The other instances in your high-availability datastore should have sufficient redundancy to keep you alive until a replacement can be spun up and brought back up to speed.

If you aren't using a high-availability datastore, I would suggest that you have not sufficiently sussed out how AWS works and probably shouldn't be using it until you do.
Virtualisation is actually a really nice way to run Linux on a Mac.
‘Discriminatory’ job ad angers developer community
It is unrelated. This is a Xen patch.
It's true. I was late for work today but at least I got a seat on the train.
In Iceland they have an interesting idea. Many fines are assessed as a percentage of your income rather than being a fixed amount.

The debate around doing that in the US would be incredible. Some people would see it as being unequal treatment under law. In one way it is; in another way it isn't.
I'd pour one out for the people with the gigantic I2's that they'll have to reprovision, but I'm pretty sure they can afford their own, they don't need me to pour one out for them.
Hah.. sorry about the long paragraph. I edited it so it's now two whopping paragraphs :) And thanks for the link, that's really useful!

An active github/stackoverflow account would definitely have helped me, but it seems like, those things just gets you to the first step of getting a phone interview. You will still have to go through the entire process. But yeah, I do just have to keep at it.
> The article implies that since singularities can't come into existence now, there can't have been a singularity at the moment of the Big Bang, either.

Yes, that's true, but if the paper's thesis is correct, then there aren't any black holes or singularities at all, at any time. If the thesis is false, then there can be black holes at the universe's beginning, and they can form today, given the right conditions.

> Lots of things that cannot possibly come into existence at the present time did exist at the moment of the Big Bang (and shortly afterward), because the conditions back then were so radically different from they are now.

Not so different, and from a theoretical standpoint, they lie on a continuum from the present to the past. The condition of the universe as a whole has changed over time, but from the present we can mimic earlier conditions using high energies.

It is often said that one goal of accelerator technology is to move backward in time toward the Big Bang. As technology advances, as accelerator energies increase, we create conditions more like the conditions in the early universe. The ultimate hope is to create conditions as much as possible like the first few seconds of the universe's existence, to be able to see the genesis of present conditions and refine physical theory.

> Perhaps the only singularity that ever existed was the Universe at the moment of the Big Bang. After the One Singularity has blown itself apart, no other singularity can come into existence. I don't see any inconsistency in that scenario.

A physicist would immediately see the inconsistency in that. If the conditions of the Big Bang theory can exist in reality, then given the same conditions of temperature and pressure, we should be able to imitate an earlier reality on a small scale. That's what an accelerator is designed to be -- an imitation of nature at an earlier time.
An accepted patch has been released in the form of 4.3-9.1 [1]. It's available on debian everywhere except oldstable.

[1] http://osdir.com/ml/general/2014-09/msg47743.html
OK - so assuming that there isn't going to be a single patch which fixes all possible / related bugs any time soon.

Options?

- Change /bin/sh to something else. (CentOS has BASH as default, alas...)
- Filter out unknown, or suspicious looking HTTP vars / env vars at varnish/apache/nginx level, somehow... (doesn't stop other services)
- Figure out some clever SELinux configuration that blocks it.

I wonder how much would fail on switching out BASH as default sh?
Why startups always target money? Why is getting to millions first Priority?
Every startup has target to get to million, billion. Why are they judged by the money they make not the problem they solve? Shouldn't the startups be focused more on helping people and promoting ethical business?
The battery life might be better if you virtualize linux instead.
First Photo of Mars from ISRO's Mars Orbiter
Already confirmed by AWS its not related. Confirmed in this thread its not related. That issue is an OS level problem, AWS won't touch your OS.
Does anyone know what Apples policy on fixing this might be? I understand why they ship with an older version of bash and other GNU userspace tools but is there a precedent they've set for backporting?
I started a Verilog implementation of part of Daala with this kind of idea. Google also provides a VP9 HDL implementation which has been included by a couple of chip vendors.

However, such a fixed purpose decoder is going to have to compete in die area with other video decoders on the chip. I feel that a better solution is DSP-based video decoding - examples include Broadcom's VideoCore. This is actually how most video decoders already work, but you generally can't edit the code. These decoders give the speed and low power of a dedicated hardware decoder due to special-purpose function blocks, but are still flexible enough to decode different video formats and include bugfixes after the hardware has shipped.
Why Getting It Wrong Is the Future of Design
The per-capita car ownership rate in Singapore is 12 cars per 100 people (or 1 car per 8.25 people). - https://en.wikipedia.org/wiki/Driving_in_Singapore
What do you feel is reasonable to pay for a decent used car? What do you feel is a normal amount of money to have just laying around, ready to be invested in a car?

My experience looking for a used car in the greater phoenix area says you can't find anything decent for under $10k. Carmax is said to have higher quality used vehicles, but they rarely have anything under $10k (after gov't fees and taxes). Also, in this price range, the mileage is usually 100k+. Nobody keeps maintenance records, so to avoid blowing up your engine, you'll need to immediately spend $500-900 on a new timing belt. Next, expect your high mileage car to have at least one critical part wear out every other month or so.

I searched long and hard and settled on a $6k car. Twelve years old, 150k miles. It was the cheapest car I could find that didn't have any obvious problems (Firestone vetted it; turned out to have $3k+ of problems over the next fifteen months). My income was ~45k. What with all the other bills, I needed a loan.

It's uncommon for a programmer, but the gov't census for the area says a combined income of $40-60k is normal. I know my fair share of single mothers who wait tables for a lot less than half of that.

I heartily dispute the assertion that it's easy to just pay cash for a working car. One last piece of anecdotal evidence to my argument: the ease of selling my high mileage piece of shit car. I put it on craigslist for $1200 and it sold within hours. I described it as clearly as I could: "as is. doesn't work. died and won't turn back on. lots of recent expensive repairs. must tow.".

tl;dr, in my experience, an easy sum to save gets you a car that doesn't run. if you want a car, you need a loan.
The article was provocative, if light on the clinical details, but that's OK, not a medical journal after all. It does convincingly portray that having a rare condition, and lightning survivors are rare, is a special curse.

Good doctors take an interest in unusual cases--it's an opportunity to learn. FWIW I've not encountered anyone with a lightning-caused condition, but the article arouses my curiosity, I am kind of a geek about the questions brought out by such phenomena.

BTW for anyone interested in lightning rather than physiological effects of it, this site may be worthwhile:
http://www.blitzortung.org/Webpages/index.php?lang=en

As I read the brief descriptions of people had been sruck by lightning, I surmised some suffered PTSD-like symptoms, as was mentioned near the end of the article. Among the many patients I've seen diagnosed with autoimmune disorders, similar hard-to-characterize symptoms are often present. Perhaps lightning-induced damage to tissues sets off a cascade of immune system responses leading to symptoms, but I really have no idea what connections exist among these phenomena.

Just a few of the things I look forward to learning about.
What about simply disabling CGI in Apache? If you're not using it, turn it off. Use "--disable-cgi" at Apache launch. This will break some "control panels", but you probably shouldn't be using a CGI-based control panel in 2014 anyway.
Because he's wrong, and so are you.

The 'broken window Fallacy' is Bastiat's observation that while the income generated for glaziers from repairing rboken windows is indeed a form of economic activity, and that this is nice enough if you're in the window business, it's economically inefficient because the economic activity merely restores the status quo instead of going to finance new production - had the window remained unbroken, the shopkeeper might have bought a book or a suit of clothes. The glazier's gain is the shopowner's loss and so there's no net improvement.

But that's a wholly inappropriate analogy for this situation of expenditure going towards Indian scientists and technicians, because they were engaged in new and productive work rather than merely receiving a subsidy. The Indian government didn't have an existing interplanetary program that was scrapped and replaced with another; it built one from scratch. In terms of Bastiat's analogy, it would be as if the shopkeeper hired the glazier to install a new window in what had previously been a blank wall.

The direct economic value of measuring whether there is methane in Mars' atmosphere is intangible - just as it would be hard to measure the impact of a newly-added window on a shopkeeper's turnover at the time of its installation. It could also be argued that NASA or some other space agency could conduct the same measurement on some future Mars project, and so the ISRO effort is probably duplicative. But even if the direct economic output of the craft itself is assumed to be zero, the development of the satellite manufacturing and launch capability, which is a net economic gain too, whereas the replacement of a broken window does not have any innovative component (since the prior existence of the window means the capability to make it already existed).

It seems to me that you and the other two posters who are arguing this position are making the implicit assumption that that NASA et al. have a comparative advantage in the development of space technology and that therefore Indian efforts are economically superfluous, in addition to your general distaste for the notion of government as client.
VS has a C++ compiler, not a C compiler. There is no getting with the times. That's like advocating that the Java compiler should get with the times and start compiling C++11. C and C++ are quite different languages, despite looking superficially the same. Think of it as a DVCS history that evolved into two very different branches at one point (C89) with the occasional feature branch of C merged into C++.
I'd like to check if my home router is vulnerable to this over HTTP or DHCP or SSH. Is there any tool I can use, like the heartbleed folks had?

My router runs DD-WRT (an old version which I can't upgrade), has an administration web page and has ssh access enabled. It does not have remote web administration enabled. Any tips?
Checking in 8 hours later - my droplet on nyc1 is still affected.
> FWIW, it's always been easier for me to think of it as 'moving' more quickly along the time axis - which would appear slowed down to someone farther away from the source of the gravity.

In reality, it's the other way around. At the bottom of a gravity well, time passes more slowly. An astronaut on the moon observing a laser beam from earth's surface would see it as red-shifted compared to a local reference, reflecting the fact that time passes more slowly at earth's surface than it does on the moon. The other equivalent interpretation under GR is that the light loses energy climbing out of the gravitational field and is therefore red-shifted. One of the beauties of Einstein's theory is that, if you do the math using either assumption (slower time or lost energy), the result comes out the same.

The classic confirmation of GR conducted in 1919 during a solar eclipse showed that the paths taken by starlight near the temporarily blocked sun were curved toward the sun. This is consistent with the idea that time passes more slowly near the sun. Consider that a light beam a bit closer to the sun would have a longer transit time (because of slower time passage) than one farther away, which would have the effect of curving the stellar light wavefront toward the sun.

This article has some graphics and deeper explanations to assist in understanding these ideas:

http://arachnoid.com/relativity
Weather Information System Using Scala.Js and HTML
Android is not vulnerable. The person who posted a screenshot on twitter has bash installed on their phone. It is not in stock Android as far as I can tell, nor is it on my manually rooted Nexus 5. What the rooting tools install I don't know, it might include bash.
SSH in and look at your iptables. If any inbound ports are open besides state RELATED,ESTABLISHED (required for NAT), delete those rules. Reboot the router and verify that the lines do not reappear -- you may need to add a startup script to your admin page that deletes the rules on each startup.

That doesn't prevent an XSS attack on the admin page if you view a malicious web page on a browser within your home network, but it's a first step.
I don't think that's fair. What if he doesn't know how?

He could propose a patch sure, but exploiting a code base may not require in-depth knowledge of it, while making a good patch to it is much more likely to. (I suppose in an ideal situation the fix would be localized to a spot where one would only have to understand a screenful or two of code, but in my experience this is not usually the case.)
Felton Quantified Literally Every Conversation He Had in 2013