skysight-inc/HackerNews huggingface dataset:
I think http://www.wired.com/2014/09/curvature-and-strength-empzeal/ ("how Gauss taught us to hold a pizzeria slice"; discussion at https://news.ycombinator.com/item?id=8274529) is relevant here.

The phones most resistent to bending in their length axis have back sides that are curved. That makes the backside contribute to the strength of the phone in the bending direction. Flat backsides will bend easily, so the relatively tiny vertical sides (and any ribs inside the phone, but those are rare due to lack of room) are the main parts contributing to strength. That's why the iPhone's weakest point is near a slot in those sides.
That's a great and a pretty unique story, thanks for sharing!
There's a lot of Apache hate here but I have to wonder if you've actually used it. Anyone stuck running cgi stuff with apache invariably goes to fastcgi or mod_fcgid for performance reasons, which already uses a unix domain socket.

That shellshock exploits will still be possible in this configuration is once again, not Apache's problem.
I think the initial question is very important. A lot of people aren't actually using open-source software on a daily basis, so maybe that's where they need to start.
Even through bash is open sourced, But the author of dhcp or apache can't spare many time to see bash source code.
It's not a bash problem and not dhcp problem. Just because every code got a some bug hiddened.
That sounds to me abuse of power even coming up with that question.
MongoDB clustering is nothing short of disastrous.

If anything I hope databases like RethinkDB and even multi-master PostgreSQL if we ever see it learn from the most crucial mistake here - rolling your own consensus. (This goes for databases other than MongoDB, I don't meant to single it out here)

Stick to proven algoritms, ZAB, Paxos, Raft.
> it's a charm to scale (in many different kinds), compared to PostgreSQL. If PostgreSQL had something built in(!) ...

This! A million times! I agree 100% that Postgresql is better than MongoDB in every way except in ease of replication (that's really my only need) for HA. We needed an embedded database in our product and I wanted so bad to use Postgres, but we needed HA and we needed our customers to be able to set it up. This was so important to us that we took the otherwise inferior solution.

Now, that said, I bring up the replication/HA issue every time one of these "postgres is better than mongodb" articles comes up. The last time I posted a Postgres developer responded to me that they're laying the groundwork for a good answer and that it's coming. I can not WAIT for that day!
So basically "this code has no bugs, just undocumented features".
Great I don't feel stupid laughing at Candid Camera because it's on New York Times!
Under what circumstances does one choose an approximate solution over the exact solution especially given that both ways are of more or less the same complexity besides that you have to symbolically calculate the derivative once for the exact solution?
Yea, that caught my eye as well. More particularly, the fact that he resorted to playing on the audience's emotions with a hypothetical situation rather than sharing any actual data about the number and types of crimes have been solved by having Apple and other companies decrypt devices.
It depends on your workload, but MongoDB has worked extremely well for us, we've never lost data. I love aphyr's posts on databases, but you can't use them as a blanket for everything.
>Charge an appropriate amount for those products.

I am sure most of you have hear Patio11 say this before, but in case you haven't and you are the kind of person who wants to go this route, Patio11 means you should _charge more_.

Take whatever you plan to charge and double it. Then you will make a lot more money.
If you are of the believe that throwing away food is really not that big of a deal I would encourage you to join your local chapter of Food not bombs for a single day to see if you walk away from that experience feeling the same way.
I did this for a whole summer a few years back and it changed my outlook completely. We used to collect bread and other foods from grocery stores that was approaching its Sell By date, but was perfectly fine and safe for human consumption. We would then gather all the veggies we would collect from local farmes market and make some really nutritious and hearty soups and stews which we would then distribute to the homeless in downtown Los Angeles. After you've witnesses the gratitude from someone who might have gone to bed on an empty stomach you will seriously find yourself questioning the politics that make it illegal for folks to dumpster dive or to redistribute food that would have otherwise ended up producing more methane gas in a landfill as this article suggests.
6 randomly selected characters out of the 62 available gives less than 36 bits of entropy, which anyone with even a passing interest in any kind of cryptography will instantly recognise as pretty poor.

This issue is compounded by the fact that humans are notoriously bad at randomness. I really don't think many users will be typing the 22 random characters required for just over 128 bits of entropy every time they want to use their phone.

But maybe the 5.5 year figure includes the incrementally increasing delay that Apple insert between tries after x wrong guesses -- assuming a manual brute force, which is pretty much not how it would play out in reality.
Where Original Ideas Come From
5.5 years is ~173563000 seconds or my maths and google are both wrong.

For pure brute force you'd want to make some assumption about the mean time taken to find the correct password, but lets argue that you find it after checking exactly 1/2 of the possible combinations.

2.8400e+10 passwords checked in 1.7300e+8 seconds => ~0.6 milliseconds per check. ish. I think.

Edit: as comment below points out, humans are crap. In reality any hack would use dictionary attacks rather than pure brute force. I was just addressing the maths.
In my humble opinion, proofs by contradiction are not the best examples of mathematical reasoning to be presented to the uninitiated. It has been my experience that people untrained in mathematics find it difficult to (intuitively) accept them as valid.
I'm on the latest release of GNU emacs. I'm mostly on Windows, which could be the issue.
More solid but over 20% heavier than the 5. An iPhone4 weighs more than the much larger iPhone6. I think they're all under the maximum weight threshold for how much a device like this should weigh, but every time I pick up my wife's iPhone 4 it subjectively feels heavier than my iPad mini, even though it's less than 1/2 the weight.
My two cents on Ello
CHUCK SKULL&#39;S GOLDEN AGE OF RADIO 09/27 by the Wacko Network
> People would have answers that would be grammatically correct but would not make any sense.

You mean like this?

http://www.mongodb-is-web-scale.com

;p
> You should never call out to anything by passing untrusted user input directly.

So if I call a CGI script with parameters foo=bar, what data should apache pass to the handler, if not something along the lines of the string "foo=bar"? When I pass the header "User-Agent: baz" and the handler asks for the user-agent, what should it be told if not "baz"?

Environment variables are data, not code. When apache executes a cgi script, whether it's C or perl or shell, it makes the user input available as data in defined locations.

There's a bug in bash which causes some of that data to be executed, but there's no way to protect against that class of bug.

This isn't a case of "you should have protected against sql injection attacks". It's a case of: there is a bug in your sql server, such that the query "select from Users where username='rm -rf /'" will execute "rm -rf /"*.
Very good point. Updates soon :)
Why does the format the data is stored in matter more than the data itself? JSON or columns in rows - it's not fundamentally different.
The entire narrative behind MongoDB in the first chapters of its evangelism was performance, partly due to its document-oriented approach (things are quicker in some scenarios when you get rid of relations, and it was contrast against the many tables approach), which is something that you can only very recently do in pgsql, and partly due to implementation choices like the dangerous default lack of fsync.

Early evangelism for Mongodb was overwhelmingly one that hyped performance over all others. It was, somewhat infamously now, webscale.

So now pgsql (since 9.2, but vastly improved in 9.3) can also do the things that MongoDB does, better, if you want to do the document approach (which is a serious debate unto itself). That is news and is interesting.

As for scaling out, I would argue that 9.3 offers more realistic, robust options than MongoDB does.
Show HN: Ping – You're going to like me (new app by Secret)
Plot or not, it is naive to think your personal data is safe at a super commercial company like Apple. I see it as
the typical 'Apple' way of selling things; pretending what they make is better, faster, more secure bla bla bla.
Apple targets a huge market of people not understanding technicalities, this is a typical example.
The point is that, when bash was written, there were few mechanisms for executing code as another user. There were servers/daemons, but they did not execute user code.

Of course some people would pipe to shell in their .forward file and eventually get pwnt, but it was a freshman mistake, and the damage was isolated.

Once you reach the point of executing a shell with an euid other than your own, it's not the shell's job to sanity check your actions.

The web has changed the execution model thoroughly. And people now do lazy things based on their loose understanding of flexible execution models.

This is neither a bug in bash, nor a bug in Apache, etc. It's an integration bug between two complex systems that were designed with zero-to-poor knowledge of each other.
It could be done in OCaml or Haskell, considering they both have compile-time AST generation/manipulation, but I'm not sure if anyone's written an actual implementation of this. Nimrod too, as that has AST macros. As does Elixir.
If that was a true over an adequately large poulation of students, it would indicate that the professors are all equally bad at teaching.
Video cpms can be well over $10, a 40M-view video could easily make a few $100k (though, of course, only a % of that ends up in the creator's pocket). 500k views could be a few thousand. Spread your equipment costs out over a bunch of videos and you're making some nice money.
Japan's second highest volcano erupts
The Great Depression left a lot of Americans with a similar attitude (my grandparents saved everything), but as you say, we are ~1 generation further removed from that event.
The BS/m delivered in this presentation is amazing.
Yea right, PRISM has been forgotten already...
To me, this seems like a very unsatisfying solution. Not as easy and simple as the CPP. Not as immediately powerful and integrated as C++ templating.
I use Emacs on Windows too, but I don't develop there, it's mostly a glorified notepad for initial analysis of log files, so I can't really help there. I would recommend getting melpa setup on your emacs and keep cider as up-to-date as possible to see if that helps, assuming you're not doing that already either via melpa or directly from source.

Good luck to you!
You have it backwards.

The state and its avatars recognize that they can and must have the ability to exercise absolute power over citizen's thoughts, computations, and communications if they wish to fester in society.
3TB is 310^12 bytes assuming the decimal bytes used in the storage industry. The uncorrectable bit error rate is for the raw block storage. It does not include the low level formatting, which is no more than 20% of the storage on 512-byte sector drives and less than 10% on advanced format drives. The probability of an uncorrectable bit error when copying 3TB using decimal bytes) is approximately 1.5% under the assumption of a 5 in 10^15 uncorrectable bit error rate:

[1 - (1 - 5 10^-15)^(3 * 10^12)] ~ 0.01488...

If your 20% figure is accurate, the actual uncorrectable bit error rate would need to be something like 7 in 10^14. I am not disputing your empirical information, but your numbers are do not agree with it. The difference in what your numbers say and what you say is only about 1 order of magnitude. Doing statistical calculations with better records could allow the cause of that to be identified.
In SQL injection, your SQL server behaves as advertised. If you pass it SQL code, it will execute that SQL code, so you need to be careful that you don't pass it SQL code coming from untrusted input.

With this exploit, bash is not behaving as advertised. If you pass it an environment variable with a certain value, it executes code. There is no way to sanitize your input to completely protect against this class of bug.
People connected in space... can dance together...

... by being on opposite sides of an opaque obelisk. Or, you know, you could actually dance together, in actual physical contact, actually looking at each other, rather than some laggy, pointless, abstract acid-trip-inspired video game (which uses more computing power and electrical power than the median US household practically owns).
that has now been fixed: https://github.com/draios/sysdig/pull/252
First, an 18 year old has less experience deciphering a thick accent than someone with years of experience in IT. I don't blink at accents that would have baffled me a decade ago.

Second, if there is cognitive load devoted to understanding the words, that is energy not devoted to understanding the concepts. Friends in those classes in college spent extra time outside of class with tutors and study groups than those with good teachers because they knew the tests didn't change.

Third, the lack of variance means the teachers don't make a difference in general. Perhaps there is a greater question to ask there.
It has nothing to do with the format. I'm using JSON as an example of something that could be large. I'm only talking about separating the "could become massive" columns/data/whatever from the "small, relational data".
A friend of mine came up with the perfect use-case for MongoDB.

His company installs and monitors sensors in civic infrastructure: roads, train tracks, bridges, ... These sensors provide constant data streams which need to be stored somewhere before processing. Any raw data older than 2 weeks is worthless, and if 2-3% of data is lost before written it's not much of a problem. More data is coming in all the time any way.

For them MongoDB is the perfect transient cache. Sensor data is processed and the results stored elsewhere. Easy to expand. Flipping between installations is just a matter of toggling load balancer, an once an offline cache has been processed, it can be nuked and put back as a fresh system.

So, for a setup where easy size expansion, fast mostly-reliable writes and ease of use are the primary design constraints, mongo fits in suprisingly well. It's a fascinating use-case.
PayPal now lets shops accept Bitcoin
Plenty of other shells support backticks without the "export -f" magic. They must, as backticks are mandated POSIX behavior; few support "export -f" at all. (And at least one that did, the old Bell Labs post-v7 "Research Unix" shell, used only environment variables with embedded characters which couldn't easily be created by normal means, to avoid the risk of "magic processing" on things like TERM and HTTP_FOO.)
Moo.do – Ridiculously simple, incredibly powerful organization
No Pineapple Left Behind
It sounds like this is just a clean way to run yacc and protobufs. And: using yacc from Golang programs is in fact ugly right now; it's actually a little worse than it is in C. I think you should just take this document --- whatever it's provenance --- at face value.
> Sorry but in this case your application should have been tested to withstand all possible failure scenarios and restart scenarios so I have little sympathy.

Someone who thinks they can test all possible failure scenarios is severely lacking in imagination.
> There could be truth in that number depending on what encryption algorithms are used. Some take significantly longer than others to apply.

The computational burden likely cannot be too high, as it is running on mobile hardware and people expect rapid access to their data after entering their passcode.
A project you should look into and keep an eye on is Dat, a "Git for Data": http://dat-data.com/
That first chart is terrible. I can't believe the Washington Post allows a chart which gives a 2 year period from 2010-2012 the same visual width as 10 year periods. It makes it look like the rate has leveled off.
> Apache should have used a socket, and should have known they needed to.

Well, there's nothing inherently dangerous about setting environment values. Yes, some have special meanings in special contexts but so could data piped over a socket.

So your argument boils down to: Apache should have seen the special treatment of data in this context, and used another context instead.

That's fine, but it doesn't address the real problem, which is that the shell was not designed to be executed on behalf of other users. There's no spec to say that data received from the "other" channel will not be interpreted or used unexpectedly.

Until you have that guarantee, you're just rearranging the problem space. There's no systemic improvement.
You're getting close, but you missed the essence. It's not about text vs. binary. It's also not about "well-documented" vs. "ad-hoc". It's about preserving semantics.

"The Unix Way" means throwing away all semantic data - passing plain strings with no context, which are then parsed and re-parsed in an completely ad-hoc manner, usually with regexp-based shotgun parsers.

Note how SQL injections, or XSS attacks are prevented - people stopped stiching strings together and started generating proper instructions through code. User input is sanitized and driven through process that converts it from untrusted string to trusted data structure. Typing SQL queries in a semantic-aware system looks almost the same as stiching strings (thanks to SQL being flat), but now you can't possibly SQL-inject yourself.

So in general: stick to text formats or not, but whatever you do, never glue data structures using tools that work on data medium layer, that are not aware of the structure and meaning of data they are operating on. E.g. never glue strings to build SQL queries or HTML code.
> “Apple will become the phone of choice for the pedophile,” said John J. Escalante, chief of detectives for Chicago’s police department. “The average pedophile at this point is probably thinking, I’ve got to get an Apple phone.”

http://www.washingtonpost.com/business/technology/2014/09/25...

This one's even more pathetically blatant.
A little action might not hurt – #heforshe
Insightful comment, bot those units really make me cringe. How do you do physics with those? Did you know that 1 lb in is 16 oz ft?
If it was introduced as a game/device that people can buy - sure, I agree. But as an art project? What's wrong with that?
And nobody came.
"Canvas for a new kind of creative expression", "unique technological sculpture", "the cube is community". All those buzz phrases make it feel like it's an april fools ad parody.
Show HN: Post-it App- Digitize, organise and share them
Except in Maple/Mathematica, it's generally not convenient to symbolically calculate the derivative.

This method will also work if, for example, you want to compute W'(z), Gamma'(z), or other special functions.

http://en.wikipedia.org/wiki/Lambert_W_function

http://en.wikipedia.org/wiki/Gamma_function
I used to use them, but now I view #regions as a massive code smell.
Ask HN: Meetup at JavaOne/Oracle OpenWorld?
JavaOne and Oracle OpenWorld start tomorrow in downtown San Francisco bringing an extra 50k or so nerds to the area. Would anyone be interested in a HN meetup (yes ... I should have started earlier)?
If you want a quick video guide to getting started, there's: http://www.timestored.com/kdb-guides/getting-started-kdb

Even the java driver is written similar to the C code :)
http://code.kx.com/wsvn/code/kx/kdb%2B/c/jdbc.java
This is one of the reasons why I love the draft (draftin.com) writer: you can track both words added and removed words, so refactoring your writing causes your score to go up that much faster than just writing.
From what that sounds like, I agree. This is a complex problem description with a pointer where the database provides solutions.
+1 would love to see the source ;)
James Comey, head of the FBI:

"The notion that someone would market a closet that could never be opened — even if it involves a case involving a child kidnapper and a court order — to me does not make any sense."

The whole point of our system is that this guy can be as ignorant and disrespectful of our liberties as he likes, without actually endangering our society.

Which isn't to say that attitudes like his won't do damage. Really we ought to have officers -- in ALL stations of government -- with a far better understanding than this. Who, exactly, appointed this guy?
I'm sorry, but I don't want to be at the mercy of the manager of the Apple store. I once questioned the way
a Apple manager was treating a Salesperson who was helping
me. Well I guess I the Manager was having a bad day-- he
wouldn't sell me anything and ordered me to leave the store.
Yes--I was banned from a Apple Store. I took a video of the Manager with an Apple phone and posted it on Youtube.(I
took it down. I've always had a hard time with
guy's who get a little bit of authority and it goes straight
to their heads, so maybe I did something to piss him off?)
After that incident, I realized there's a hard coded line
of command at those stores and if the Manager says no--the
other employees don't have any power.

(If anyone from Apple reads this don't let store Managers abuse their position; you lose sales, and employee store
moral goes out the window. You can guess which store it is
from my name. Don't take my version of the story. Verify the incident with other employees, I
don't think anyone would forget--it happened
feb 1, 2013, and "The Manager" was Greg?)
Good collection of photos in this Guardian piece:

http://www.theguardian.com/world/gallery/2014/sep/27/escape-...

The last photo shows the erupting volcano with Mt Fuji looming in the background.
I never got the point of the NoSQL movement.

For me it always sounded like a bunch of people not willing to learn how to write proper queries and optimize data storage.
Well, I did say "in my experience" :) I certainly didn't mean to imply that problems requiring less than 3GB of GPU RAM are laughable, or anything like that. I should have said something like like "problems that people are currently writing papers about", maybe.
Generics exist in multiple forms since CLU (1974).

To reduce them to what C++ and Java implementations offer, is just being ignorant from history of programming languages.
How do you use CPP or templates to generate .c files from yacc grammars or protobuf definitions, to embed HTML or binary data from files? I think you misunderstood the main purpose of this tool. You probably only read the last and least important use case.
That is why I use beeminder to track the things I want to do. I get really nerdy looking graphs and if I don't follow through with my goals I have to pay them money, which is a nice way to check if I really don't see the value in what I am doing, or if I just don't want to do it that day.

I gain no financial benefit from this endorsement, I just really like their service.
D, Rust, Nim(rod), Template Haskell, OCaml, C++...
Show HN: Simplecheckout -Send beautiful invoices with built-in payments
I just stumbled across this on Jalopnik. Sorry you didn't get more attention!

What are your thoughts on the advancing HUDs for cars like Navdy? https://www.navdy.com/