skysight-inc/HackerNews huggingface dataset:
It will be once they release a patch, yes

https://security-tracker.debian.org/tracker/CVE-2014-6271
do you understand enough "science" to fathom "scientific achievement"? If the people behind the mission explained to you "science" in it and what are the "scientific achievement", would you understand them?
I am sure tons of people reading already know this, but I have a habit of saying this everywhere I see system() mentioned anywhere on the internet, just in case somebody reading is tempted to use it: system() is evil, please for the love of god never use it.

If you need to invoke another program use execve() and friends. The versions that end in -p will even check PATH for you. You don't need a shell to evaluate your arguments. Cut out the middle man and pass the arguments directly. It will save you a lot of stupid bugs.
Glassbreakers is making the world a better place by helping women connect with female mentors that can help them with their careers. The confidence gap in the work force is real and we believe Glassbreakers will be a confidence tool for many female professionals. We hope to make the world a better place by empowering women to break the glass ceiling, together.

Women are the worlds largest untapped resource. We need more women in leadership roles across industries to start making real social change and to improve the lives of women every where. There is no clear path to do that but women at the top credit their career success to mentors who helped them get there. We hope that by automating the process of mentor matching women based on skill sets we can lead of movement of global female empowerment, which will have a ripple affect on improving our society at the macro level.
I don't know if Ubuntu has pushed a patched version of bash, but bash is what you should update. Someone already posted a way to test whether your version is vulnerable.

You might also look into changing the default shell (but beware, scripts with bashisms in them...).
Pictures win prize
They might have, for all I know. It's doable in a product that isn't trying to do much else at the same time, if you own all the servers in question and can make sure they are connected by a low latency network. The bad news will come when you try to keep the property of seamlessness between servers while scaling up to do other things as well.
Do you love packaging? Do you hate the two minutes it takes to cut things more than you like your money?
Adblock Plus CEO: 'Ads are vital to the online ecosystem'
I just don't get how "business" types who can't code or design get the idea that deserve 100% of a project when they don't want to pay the developer.

It just blows my mind. If you can't pay me, then I deserve at least 50% of the equity.

She was doing the "business" end of a project that had no customers and no "deals". So, what exactly did she do here?
Intel Invests $6B in Israel to Create Chip Manufacturing Facility
> why don't you pirate?

I don't like feeling bad, in the past I have felt bad about pirating.
Good and Bad reasons to become an entrepreneur
thanks, I've passed it on.
Firefox devtools responsive mode presets
We Need an Energy Miracle. New Nuclear Might Provide It
JQuery UI Hacked?
At the moment jquery.com loads with the following content:

<body>I'm looking for a new job, I'm so sorry for this experiment with iframe, no one was injured, all files was permanently deleted. Greetz: Umputun, Bobuk, Gray, Ksenks @ radio-t.com My PGP public key is:
<key>
</body>

I think it's safe to say they've been hacked.
I have to say that 4 Hour Chef has some great tips and tricks when looking at hacking cooking.

Especially things like knife skills, gear and prep.
Start Up Advice – Recent Resources from Different Perspectives
Sebastian Thrun's $35M Plan
Looks very interesting. Like a combination of Subtask and Trello. Each of those have limitations that keep me from adopting it for all my note-taking and project management... Perhaps this is the perfect middle-ground.

One thing, though: That demo video went waaaaaaay too fast. I couldn't keep up with it at all, and just stopped watching. I understand you're trying to fit all the many features into a single, short video, but that's just too much. Why not go at normal pace and just feature the most "a-ha!" features?
Tap to Live: Apple Pay and the Impending Rebirth of NFC
"From the beginning" in this case going back to the mid 90s. Pretty sure "Modern template systems" have mostly been written since then.
And it's own database which is mentioned in http://thread.gmane.org/gmane.comp.sysutils.systemd.devel/69...
Building products beyond the launch
A in-depth look at Eyeo, the company behind Adblock Plus
Previous discussion of a different article about the site: https://news.ycombinator.com/item?id=7069081
At a glance, one interesting use of this is a potential local privilege escalation on systems with a sudoers file which restrict commands which can be run to ones that include a bash script, and allow you to keep some environment variables.
oilslick is really neat, I find it both pleasing to look at and actually useful to view the full elevation range. Is there any common geospatial software that includes oilslick out of the box?
Dart: Style Guide (updated)
Their source material here is 1 million pages of HTML, they don't have (on my reading) some separate source of "structured data" for the modern template system to use.

It seems reasonable (and possibly low) for a 90 days estimate to extract the content from the variety of versions of static page, structure it, and then publish it in a more modern fashion.

It's all very well to say they should have used a more efficient system from the start, but "the start" in this case is 1996, which is the wild west in terms of best practices.
BlackBerry, Under New Leadership, Unveils Its Newest Smartphone
This is a very good article -- and it is about much more than Bell Labs.

In the later sections the author attacks singularity problems, humanities place as it continues to virtualize more and more of itself, and frames Bell Labs as the remnants of reality left over (and maybe we still inhabit) after we move our minds further and further from our physical presence.
Great questions! For background, I was part of the Flu Trends and Consumer Surveys teams before I left Google to start Iodine.

Google Consumer Surveys attempts to create a representative sample of the internet population according to the breakdown from the Current Population Survey (CPS) published by the Census. This is done at survey delivery time. Additionally, after the survey is performed, the stats are reweighted by this distribution since the targeting system isn't always able to deliver a fully representative sample due to other constraints (publisher volume, survey volume, etc).

Of course, this only helps with ensuring that the stats represent Internet users. However, there are many reasons to believe that this sample is a reasonable proxy for many types of questions. For examples, see:

http://www.google.com/insights/consumersurveys/static/consum...

http://www.people-press.org/files/legacy-pdf/11-7-12%20Googl...

http://fivethirtyeight.blogs.nytimes.com/2012/11/10/which-po...

Additionally, there can be a bias in many traditional survey platforms (RDD telephone surveys being the current gold standard) due to the adoption of mobile phones among other things.

With respect to recall-reporting problem, for a subset of users, we asked not only about the medication but what they were taking the medication for. We do this in the form of an open ended question and it helps increase our confidence in what the user reports. Details of our exact methodology are forthcoming!
The US govt has also been relaxing the export restriction on high-resolution imagery as well.

DoCommerce gave digital globe permission to sell 0.31 m for b&w band and 1 m for multispectral bands from WorldView-3 beginning in Feb 2015 I think.

EDIT: http://worldview3.digitalglobe.com added link to microsite. Couldn't find quick link to relaxing of export restrictions but I am 99% sure it was announced months ago.
And it supports QR-codes for kernel panics!
This notion of supply works if the producer has an enforceable monopoly on production and distribution of the content. While the big studios do have a monopoly on the content they produce (i.e. movies and music are not commodities) the inherent ease of distribution and reproduction of that content means that attempts to monopolize its distribution will inevitably be circumvented.

For all practical purposes, once a work is pirated it is effectively supplied by a large number of individual actors within the market, and not the original distributor.
Available for purchase by rental companies and purchase for retail are two different things. Netflix doesn't typically buy a bunch of DVDs from Amazon and then chuck the jewel case. There are exceptions though:

http://articles.latimes.com/2012/jun/07/entertainment/la-et-...
Ubuntu pushed the update around noon

4.3-7ubuntu1.1
In the age of NSA sponsored spying, having an independent and largely self-taught space program is indeed a scientific achievement. Especially for a country that's 67 years old.
New UI Lets Your Phone and Desktop Screens Behave as One
Write a really short sentence and your signature should say "sent from my iPhone"
True, it is an idea. I guess I was responding to the order in the slide deck. I'd rather have (1) more specific, "market need". I think going idea -> product might be misunderstood by younger folk. The whole point of doing idea -> product super fast is to validate the market.
I am not so sure. Debian sid (i386) with current updates, the example test shows I am still vulnerable. 4.3-9 bash
It reminds me a bit of Rutherford's famous quip about experiment design, "We don't have any money... we shall have to be clever!"

Indian's ability to come together, organize and execute this mission is a huge credit to them. I hope other space agencies will take a careful look at what they've done and how they've done it, so they can learn from them.

As a Canadian, this makes me realize that Canada could just as well have done this. $75 million is less than our government spends on subsidizing our local film industry: http://www.tbs-sct.gc.ca/ems-sgd/me-bpd/20142015/me-bpd02-en...
Cloud vs. on-premise? Which is best?
The OS IPC mechanism quite likely does not use a lock free queue -- or at least, not in quite the same way as I think the grandparent post refers to.

Using a well implemented ring buffer [+] can get enqueue operations down to a few instructions and something like two memory fences.

The overhead of IPC, which wakes up the kernel scheduler, switches the processor back and forth between privilege modes a few times on the way, knocks apart all the CPU cache and register state to swap in another process, while the MMU is flipping all your pages around because these two processes don't trust each other to write directly into their respective memory... is not going to have quite the same performance characteristics.

An moment in the history of logging is java's log4j framework, which, within a single process, used exclusive synchronization. When this was replaced by a (relatively) lock-free queue implementation, throughput increased by orders of magnitude. (Their notes and graphs on this can be found at https://logging.apache.org/log4j/2.x/manual/async.html .) This isn't an exact metaphor for the difference between a good lockfree ringbuffer and IPC either, but it certainly has some similarities, and indeed ends with a specific shout-out to the power of avoiding "locks requiring kernel arbitration".

--

[+] The "mechanical sympathy" / Disruptor folks have some great and accessible writeups on how they addressed the finer points of high performance shared memory message passing. http://mechanitis.blogspot.com/2011/06/dissecting-disruptor-... is one of my favorite reads.
Make sure security.debian.org is in your apt sources list?
Some of the user-interface problems I recognised in my few-minute-test:

- Many notes I have are longer: I.e. tend to be made of headlines etc. So i need something like markdown for structuring. Using the mouse seems to cumbersome and to hard to maintain a visual consistency.

- The delete button (particularly on the default notes) was too hidden in the menu. I had to search for it.

- Adding a link didn't automatically select the link field to immediately copying the link.

- Copying a link in a empty text field didn't convert it in a link field (seemed like a good opportunity to shine)

- I didn't find a "new note" button after entering a first node (because I had to save it... doh). I think I would prefer an auto-save and/or a "new" button to avoid the confusion.

- When clicking "link to tag" I have no method of aborting my uneducated request (esc?) I had to enter the tag to safe it even though I changed my mind.

- I often had to click "..." when trying to edit an entry. 6 menu items: I think they could all be shown side-by-side?
Really good article, most of the people want to be an entrepreneur for this reason> Be his own boss...but in reality this is what happens:

“People have this vision of being the CEO of a company they started and being on top of the pyramid. Some people are motivated by that, but that’s not at all what it’s like.
What it’s really like: everyone else is your boss – all of your employees, customers, partners, users, media are your boss. I’ve never had more bosses and needed to account for more people today.
The life of most CEOs is reporting to everyone else, at least that’s what it feels like to me and most CEOs I know. If you want to exercise power and authority over people, join the military or go into politics. Don’t be an entrepreneur.”

This should be the real reason for being an entrepreneur:
“If you’re going to devote the best years of your life to your work, have enough love for yourself and the world around you to work on something that matters to you deeply”
The first thing your website should say
really?
Where do people find out about the algorithms, etiquette and other unwritten stuff about this site. Often people seem to make claims about certain aspects of HN, like you did above, but I can never find anywhere to either prove or disprove it or understand what the 'rules' are.
You could search for *.cgi scripts indexed by Google. They may not be written IN Bash but maybe one of them opens up a shell to execute a command. Even if you are not explicitly passing any bad data to it, the environment will be passed and trigger this crazy vulnerability.
>It is not stealing because theres is nothing that the original owner had and now does not have

This completely ignores my point about depriving the owner of the value of the thing. If you create something and offer it for sale, yet every single person simply pirated it vs. buying it from you, then haven't they removed the value of this thing that you still own? Owning it becomes worthless to the creator, yet millions of others who did not create or pay for it are now obtaining value from it.

The argument that the creator still owns it is pedantic and facile. It's just a rationalization that ignores the real question of value. You knowingly deprive the producer of all value of owning a thing, then say "But, it's OK. We left you with the thing".

>you could try to say that the person who downloaded something represents a potential sale lost, but i think its a bigger assumption than you are recognizing that the person would have ever paid for the property.

It's not an assumption that there is demand for the product if people are willing to download it. And, economics (as well as common sense) tells us that there is some price above zero that people are willing to pay for that which they demand. Isn't that all we really need to know?

>the producer has in no way lost all the value of the property, they have simply lost 1 single potential purchase

And if no one pays and the producer thus loses all of the value of "all" of the potential purchases, then will you say the producer has been harmed? Because you really must conclude that if you carry this line of reasoning forward. So, now, at what point along the continuum of one pirated copy to all pirated copies has the producer experienced an actual theft, and how is it the consumer's right to make that determination? Also, are you saying that as long as some people are willing to pay, then others have the right not to pay? Because that's another conclusion to which your logic leads. So, those who are willing to pay should subsidize those who are not?

These arguments for piracy really run out of logic oxygen quickly and collapse on themselves.

>Would you file an insurance claim if I broke into your house and made a copy of a dvd you owned? [if you think this is a bad example because of ip rights, change it to a picture you drew]

Or, "here's a really bad example that does nothing to refute your argument. Please help me by coming up with a better example to refute your own argument".

No thanks. That's a pretty lazy "argument-style", don't you think?

>by your logic, reselling an item you own is also theft, since that represents a potential lost sale to the original producer

That's not my logic. What's so difficult to understand about compensating the producer of something you wish to consume?

Look for clues in your own question. You used the word "own". Think about that.
How Amazon optimizes its algorithm based on how you read and your notes / Kindle
Ask HN: Best HN android client?
Can anyone reccomend an android client for HN? I have been using https://github.com/manmal/hn-android but find it problematic recently.

It works well as a reader but I can no longer log in to vote or comment.
Read this and reminded me of Michal's Medium post- https://medium.com/@michalbohanes/seven-lessons-i-learned-fr...
I suggest: (1) choose a tool/language/library you want to learn, (2) work through a use case and write a blog post about it to help the next person do the same, (3) consider how the README or docs should be updated accordingly.

Writing up your experience is often a useful trigger to create an open-source tool/library or modify an existing one. It forces you to consider how your own experience can be made useful for others.

Also read the source of tools/libraries you use. Often, gaps or modifications jump out readily.
I'm a fan of mocha + blanket for coverage: https://github.com/alex-seville/blanket

The mocha integration is incredibly easy:

mocha --require blanket -R html-cov # for html output
Exactly.

I don't mind paying for self-hosted version of this - I'm looking for something like this for quite a long time, basically a spiced up cross between org-mode and Tiddlywiki.
Because if someone tries to sign up for my site with an IPv6 email, that's a glowing neon sign saying "SUPPORT NIGHTMARE AHEAD"
It's a solution for loading scripts from third party servers (e.g. jQuery), not from servers you control.
The DPLA who is handling this has a pretty great API. Check it out: http://dp.la/info/developers/codex/
... I think a lot of geeks might be burning their "free kevin" t-shirts.
Hell, I'm not Indian and I'm proud of India.

They've achieved something incredibly difficult, on an amazing budget, and best of all: we're gonna get science out of it.
"Mitnick became a symbol of government oppression in the late 1990s, when he spent four and a half years in prison and eight months in solitary confinement before his trial on hacking charges. The outcry generated a miniature industry in “Free Kevin” T-shirts and bumper stickers."

I wonder if money could be made selling 'Fuck Kevin' shirts and bumper stickers now.

Incidentally, Fuck Kevin.
Don't forget SSH_ORIGINAL_COMMAND. GitHub and BitBucket had an exciting morning...
I've come to the conclusion that those who successfully employ technical analysis (i.e. chart reading, etc.) are practicing a form of risk management (knowingly or unknowingly), but do so consistently. In short, they are quickly out when they are wrong (taking small losses) and allow their 'winners to run'.
Why half of U.S. adults no longer believe in the American dream
Hmmmm... I thought that a large reason many people helped develop bitcoin and it's community was to thwart Paypal, its highly-politically-motivated nature, and others like it.
This is what happens when you have two different processes doing IPC using a human interface mechanism.

Another huge family of vulnerabilities that exists for the same reason are SQL injection vulnerabilities. SQL was invented as a way for humans at a terminal to do database operations. However, we started using it as a way of doing IPC. The problem with using human interfaces as an IPC mechanism is that human interfaces are rarely well-defined or minimal, so it is very hard to constrain behavior to what you expect.

The way to fix all of these bugs is to use well-defined, computer-oriented IPC mechanisms where there is a clear distinction between code and data. For example, database queries might be constructed by function call instead of string manipulation, which could pack them into a safe TLV format with no chance of malicious query injection. Generating web server content from a different language could be done via a proper FFI or message passing mechanism, rather than CGI scripts.
Thanks I guess ill do that with video, split it in kinda introductions to main parts of the app
Study: Google Glass Is a Driving Distraction, but Still Better Than Smartphones
I've been lurking here for years, but I finally have something worth sharing! Our laboratory was lucky enough to partner with the Air Force (a very early recipient of Glass), and we have run the first driving distraction study with the wearable. Tell me what you think!

I'm also here for advice. Aside from my university's press release, how do I get the word out about this?

If anyone want's the full article, hit me up at my website: bendsawyer.com.
How to Grow a Business by Connecting People
A bit off-topic, but arguably relevant: USAA has just about the best customer-service operation I've seen. I'm a 40-year member, and my dad was a member for 50-plus years. When he died, almost all of his financial accounts were at USAA; their survivor-assistance group was, in a word, marvelous.

USAA originated as an insurance association of active-duty military officers, who had a tough time getting insurance elsewhere. IIRC, to this day it's run largely by retired officers (and now, retired senior NCOs as well) who had major responsibilities during their active-duty careers. I get the impressions that much of its culture of service comes from that.
> The barriers to rapid progress in New Nuclear are not technical, not even economic. The barriers are in the outdated nuclear regulations that scare off private investors and in the nuclear industry-regulatory culture that accepts timelines measured in decades as normal.

Nothing new here, I used to work in the nuclear power industry and this is exactly what killed off "old" nuclear. Change the regulatory environment and there is nothing new needed. People point to Fukushima to prove how dangerous nuclear is when it goes wrong but it is the regulatory environment that prevented replacing those plants with better, new designs that would have survived the quake/tsunami.
As I understand this, any CGI script could be affected. Even if written in a different language if it turn does an os.system (or equivalent). More info here:
https://securityblog.redhat.com/2014/09/24/bash-specially-cr...
The permissions would only be as the web server user, but that allows all sorts of things to be run that are quite dangerous (resource exhaustion, attacking remote machines, downloading code and running it)