skysight-inc/HackerNews huggingface dataset:
ModSecurity one-liner to fix Bash exploit
1. Insert the following line in your ModSecurity configuration file:

SecRule REQUEST_HEADERS "()\s*{" "log,deny"

2. Restart Apache
Unfortunately it's not a written statement ( you can imagine that nobody working at apple would publicly say a thing like that). And it's not a direct source either, so you can very well take that with a grain of salt.

Actually, I am still hoping that someone will contradict me by providing concrete example of apple software using core data though, because as i stated, i invested a lot in that technology for an important project.
What he probably wanted was to prevent [...] founders
'accidentally' meeting him when he was at home, and so on.

If a guy buys a house next door to a fire station, and he's woken up by fire engine sirens, I feel a bit bad for him. But he knew when he brought the house there was a fire station opposite.

I think the same thing about Khosla's beach access - I feel bad if he's having problems, but he knew the beach access was there when he brought the property.
In a similar vein, I feel that there's a sense that consumers feel tablets are "vaguely better." By this, I mean a number of things. For example, laptops often by and large are still sold with hard disc drives instead of solid state, and therefore tablets are actually a faster experience. tablet and smartphone UIs do a 'better job' at handling errors; by this I mean keeping redundant error message pop-ups to a minimum and attempting to more elegantly kill an app. An app store is a simple and safer place to download new software than the awful method Windows had going through the 90's and 00's of venturing out and downloading mysterious programs (which in it of itself has greatly damaged the Windows reputation).

I guess my point is that these issues are not inherently solved due to the tablet form factor, but rather better UI and more pointed hardware directed toward consumer use cases.
Rats Are The Solution
--Nope-- Kinda, I actually blended this with something else, which was more of a simple editor hack to avoid typing the top parens. Now things are clear. Thanks for the link though.

Anybody actually wrote code in sw-exps ?
Addressing for PHP: Postal address management powered by Google's dataset
I do tend to side with the left on this one.

We have one incident where the emotional term "beheading" seems to be the key word, adopted by both perpetrator and media, and the number of people involved was minimal. We also have "dozens" of Australians travelling to the middle east, just as we had dozens of Australians of Serbian / Croatian background travelling to the Balkans in the 90's, and probably dozens of other dissidents travelling to their respective places of allegiance during many past disputes in global history.

These numbers ("dozens" or fewer) are the same sorts of numbers as the "average" murder rate. These people are just psychopaths with an easily accessible justification. The police can currently handle most cases of this without any extra powers. They're extremely good at it.

The risk isn't 0% (and politicians generally shouldn't be trusted anyway, on any statement), but it's actually statistically negligible (less than 100 divided by greater than 20,000,000), and preventable with current policing practices and powers.
Visual Studio is the only major C++ compiler that is inept at handling C. This is not unreasonable to expect proper C support and there is something terribly broken with Visual Studio in that they can't. Even Stroustrup has called for better compatibility with C.
I thought the patch wasn't that effective? Is there a PoC that runs on a patched system anymore?

Edit: found one https://news.ycombinator.com/item?id=8365216
Land can't really be private property in the usual sense. You can't take it with you, and using it is pretty much always going to impact other people (in a way that really isn't true of normal property). We already have the notion that land "ownership" is different from ordinary ownership (e.g. compulsory purchase laws).

The argument for private ownership of land is usually that it makes it possible for people to invest in long-term improvements to the land, e.g. building houses there, or irrigating it for agriculture. But that doesn't really apply to beaches; most of us think that beaches provide more value to society when they're public than if you built houses or grew crops there.

So yes, beaches are special - they're unusually valuable as public property, relative to their value as private property.
Run the program without starting a shell?
Flexport (YC W14) is hiring customer service team members
Flexport helps companies import products from overseas. We're a licensed customs brokerage and freight forwarder built around an online dashboard. Backed by Google Ventures, First Round Capital, Bloomberg BETA, and Y Combinator, our mission is to bring the world free trade through technology.

We are solving the complicated problem of moving products from where they are produced, to where they are purchased. Our clients' goods are handled by as many as 8 different companies from the time they leave their factory to when they arrive at their customers. Flexport helps to coordinate all these movements, to make sure the products arrive where they are supposed to, when they are supposed to.

We've reached product-market fit, with over 1,000 companies signing up to use our service in the last 12-months. With our sales and marketing machines finally hitting their stride, it's time to start scaling up our customer service and operations teams.

We need amazing customer support people to support our clients and make sure their shipments get handled properly.

If you are a world-beating customer service professional who takes great pride in making sure that your clients love everything about you and your company, then Flexport could be the place for you to come do the best work of your life.

Responsibilities:

* Interact with customers by phone, email, and livechat and make sure we are doing the best we way to serve their needs
* Interact with freight forwarders, ocean carriers, airlines, factories, warehouses, customs officials, insurance brokers, quality inspection agencies, and other stakeholders to ensure your clients' cargo moves on-time, every time
* Support sales execs to make sure their clients are always taken care of, even when the clients have crazy demands
* Provide well-structured client feedback to our product teams so they can understand how to improve our web application and overall customer experience.

Requirements:

* 4-year degree, preferably from a top school
* 1-3 years customer service experience
* Outstanding phone presence
* Super fast typing speed
* Availability to work from 6 am to 3 pm M-F
* Experience in logistics is a plus
* Experience in a startup is a plus
* Fluency in Chinese is a big plus

Compensation:

* $65-75k depending on experience
* Full healthcare benefits
* Catered lunches several days per week
* Generous stock options plan

Email jobs@flexport.com to apply
Ubuntu Trusty's patched version 4.3 doesn't seem to be affected by this, but Precise version still is (4.2; same one as in Debian).

Is this new exploit version dependent?
> For the same reason that ownership of a car equals the right to restrict who gets to drive the car: that's what ownership means.

To go along with your car example, there are relationships which trump ownership. In the US, if a uniformed police officer approaches you and requests the use of your car in order to prevent a serious crime, you must comply. The cop's dire need to access your vehicle trumps the ownership of your car. Sure, you still own your car, but somebody else needs it a lot more right now.

Same thing in Norway regarding land ownership. Sure, you own it, but public access to that land may in some cases trump ownership.
There is the idea that there could be multiple, infinite number of singularities (and therefore universes).
I understand where you're coming from. At first glance I thought it would be the return of the dreaded virtual appliance giving people no clue on how developer X got to end result Y.

However, this is not that. Docker simply gives more emphasis to officially maintained docker images of popular projects, all of which have Dockerfiles available for your inspection!
As far as I can tell, this is the first library other than Google (Java/C++) to make use of this data.
With Swype (my favourite), a single backspace deletes a word you just typed. Alternatively, you can select a correction of the word from the correction bar.
I do agree with your points, but i think you've over generalised them into a degree that discussion is not only unnecessary but also childish.

Let's restore the context back to Swift in iOS programming to match its targeting market, shall we? Could you come up with 1 use case which:
.. generic is really useful.
.. the problem hasn't solved by well recognised 3rd party lib/framework.(by "well recognized" i mean github starred or forked more than 500.)
.. should be used in 10% of the top 100 apps on Appstore.
This is exactly what system() does.
... because the number of cars (well, COEs issued) is strictly capped by the government.
I think, to some extent, Linus cultivates this image himself. Reminds me of Richard Feynman threads here on HN: https://news.ycombinator.com/item?id=8030010

Someone commented (not sure it was on HN) that Feynman also cultivated a different, more "rough", image in public than he actually was in the real life.
Earth’s Impending Magnetic Flip: magnetic field weakening faster than expected
> Nobody really 'owns' land anywhere. It's always a set of rights granted to you by the government

The source of ownership rights is orthogonal to the meaning of the word "ownership". In common usage, ownership means: a perpetual and transferrable right to dispose of something as one sees fit. (Some would argue that the adjective "unencumbered" should also be added to the list, and that the existence of property taxes in the U.S. means that no one "really" owns land there either.) If the right is not perpetual and transferrable, then you are a lessor, not an owner. If the right is not to dispose of the thing as you see fit then what you own is not the thing but some sort of restricted use license on the thing.
No love for the Hacker's Keyboard (Android)? It's invaluably helpful for sending ASCII Control characters (when on an SSH session, for instance).

https://play.google.com/store/apps/details?id=org.pocketwork...
Now I see him

209.126.230.72 - - [25/Sep/2014:07:43:58 +0300] "GET / HTTP/1.0" 200 151 "() { :; }; ping -c 11 209.126.230.74" "shellshock-scan (http://blog.erratasec.com/2014/09/bash-shellshock-scan-of-internet.html)"

..and someone else

89.207.135.125 - - [25/Sep/2014:12:51:01 +0300] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.0" 404 168 "-" "() { :;}; /bin/ping -c 1 198.101.206.138"
Doesn't look like they're ignoring sterilization techniques.
Quote from an interview with an ISRO scientist: “Maybe it’s because we spend a lot of time working in clean rooms with full suits on, so you can’t tell who is male or female.”
http://qz.com/270346/20-of-isros-staff-you-rarely-hear-about...
http://linux.die.net/man/3/execv
Real World React
Various laws restrict children and the inebriated from driving a car. Under your ownership definition, that means that the government owns the car, no?

If so, it seems like your example of what it means to "own" something is actually a counter-example.
Only employee engagement tool you will ever need
Six reasons to define JavaScript constructors with only one argument
Cute project, but since it isn't actually hooked up to live trading, I'm going to suspect that they're not actually dealing with the issues which would keep them from making a profit on those trades: trading fees, losses going into the bid-ask spread, the fact that large enough purchases actually move the market, and the fact that the crash which wipes you out can come along on years later just when the victories of the past few years made you think you had everything figured out.

Simulated trading is all well and good for the long-term buy-and-hold sort of trading where you can assume you're a medium-small-sized fish in a huge pond and these errors are inconsequential, but with ultra-short-term trading like this the texture of the market matters a lot more.

That said, if you're a day trader of some sort trying to compete with the task the rat has been assigned to do, there's a very much elevated chance that you're in the wrong business.
"Australia is a country with free health care available to all citizens"

The Abbott gov wants to end this. The Liberal party in general has been busy dismantling Medicare for years.

"no constitutional right to free speech. Hence laws banning making racist statements in public"

This is a drastic oversimplification of a very complex debate.

I love Australia, I live here, and probably always will.

But... We need to wake up to ourselves because the way we're going isn't pretty.
You want to actually remove bash god forbid something calls /bin/bash directly instead of using the /bin/sh link.
PerfectKeyboard for Android? I use it daily thanks to the T9 layout (not sure if that's the correct name for it, but the old Nokia style phonepad layout)
It's a fair point, but the ability of a policeman to appropriate my car under very particular circumstances (in an emergency or if I've broken the law) is very different from the ability of anyone to take my car (or even just, say, sit in it) whenever they please. I'll grant you that it's a difference in degree and not in kind, but personally I feel pretty comfortable drawing a line between those two situations and calling one "ownership" and the other something else (like a restricted use license) but reasonable people could certainly disagree about this.
...and here we go:

http://gravit.io/
lol @ this: http://seclists.org/oss-sec/2014/q3/681

Soon someone will be suggesting that you have to add some random string to all of your env variables to make them work, otherwise they are ignored, like with CSRF mitigation.

Actually, I jest, but that's probably a good idea, anything running on the system could view some /tmp file with the string and append it to the env variable string or something, but any remote client wouldn't be able to access that.

Hmm...
If you like another keyboard but need the functionality that Hacker's Keyboard provides, you can try JuiceSSH, which augments any keyboard with control characteres, function keys, etc.

https://play.google.com/store/apps/details?id=com.sonelli.ju...
Burger created which replicates taste of human flesh
Land rights in Scotland are even less restrictive - the 'right to roam' encompasses most agricultural land. Naturally, people are still prohibited from damaging crops or interfering with livestock.
That's also the case in the US, not known for its strong socialist leanings.

For example, from http://www.cityofboston.gov/snow/removal/snowremoval.asp we can about read the laws for Boston, which require the property owner to clear the sidewalks within 3 hours of either the end of snowfall or sunrise.

Or to pick a much smaller city in Wyoming, http://www.gillettewy.gov/index.aspx?page=300 , "The City has an ordinance (Section 18-17) requiring owners or occupants of all real estate in the city to remove snow from the sidewalks adjoining the property within 24 hours after the snowfall ends."
I can't load the page without Javascript enabled in my browser. It's a shame that I need to enable JS to view what's really some text on a page.
Show HN: WEDG, the personal cloud you've been waiting for
> Why they have the only world's C++ compiler that can't handle C baffles me.

Why? C++ was born at AT&T, the same place C was born.

Given its design to be as compatible with C as possible, it was quite natural for C compiler vendors to bundle a C++ compiler with their C compiler.

There isn't any requirement in ANSI/ISO C++ that a C++ compiler vendor is obliged to support C.

Microsoft's decision is not technical, but political.

From their point of view, if you want to write C style code, there isn't nothing in C++ that prevents it.

On the other hand, C cannot provide at the language level the mechanisms available in C++ to write safe code.

Not to mention that Windows APIs are mostly COM based since the Windows XP, anyway.

If you want C on Windows, or to have fun using COM or WinRT from C, there are plenty of other compilers available.

Both Symbian and BeOS were C++ based OS. I for one, enjoy seeing Windows going into the same direction.
California, Hiding Air Bases, Factories and Plants in WWII
So you are agreeing with the parent right?
It would be helpful if the SwiftKey video (iOS) actually demonstrated the keyboard.
Villa sole condo
Open letter to BLDG-B HOA / appointed officers / collectors / agents / employees

your group is iLLEGAL
there is already an existing Homeowners Association registered in SEC
none of your names are associated with the legal SEC registered HOA
(Villa Sole Condominium Unitowners Association Inc)
there are no By-Laws the validates you legal existence

your group's issuing collection notice for association dues is iLLEGAL
there are no By-Laws (established by registered unit owners to regulate itself)
that validates your actions (collection / hiring / entering contracts in behalf of the unit owners)
there is not even a vote of a simple majority of the register owners approving
collections

your group's BDO savings account is illegal
the beneficial owner of the account is not the HOA

your group's dues is exorbitant
compare to other condos nearby that have clubhouse, pools, park, etc

ignorance of the law excuses no one
RA 4726 (Condominium Act)
RA 9904 / IRR-RA 9904
HLURB Board Reso No 877 (Magna Carta for Homeowners and Homeowners Associations)

*
you have been warned
continue with your illegal activites
we will expose this to social media
file all necessary legal action cases against your group
*

RA NO 9904 - Section 73
Penalties and Sanctions
What responses does it pass, does it not sanitise them? Can anyone link to details of what DHCP does that's relevant here? Thanks.
I agree. The problem is that MD917 is the bill, but not the actual law. Bills are often structured as a delta to the law.
Terminal Monitor: A Better Way to Understand Terminal Messages
Yes, glibc has so far chosen not to implement Annex K.
How to start a startup lecture, lecture 1.
next: hedgehog fund managers
I was thinking the same thing – if there ever was a case for a "bash --allow-terribly-insecure-features" flag this is it.
I'm waiting for something like Hacker Keyboard for iOs. It is very useful on my Android device.
SSL is ON
It's also more important.

Generally with tests, you're less concerned about having some particular examples succeed, than you are with finding if there are possible values that fail.
> Under your ownership definition, that means that the government owns the car, no?

Actually, children and drunk people can legally drive, just not on public roads. There are a lot of restrictions on behavior in the interests of public safety that trump certain property rights under certain circumstances. That doesn't mean I don't own my car.
What if Amazon's infrastructure fails during the reboot?
No. Both children and drunk people can drive their cars whenever they want on private property. The government only says they can't do it on PUBLIC roads, because it's against the interests of the public. Your example would make sense if children and drunk people were prohibited from using their own cars even on private property, and that's not the case.

In some countries this may be different - in some eu countries if you cause an accident while drunk while on private property, you might be prosecuted.
Alink.us – Share Everything. Everywhere. Anytime
The fallacy is assuming people write tests.

Regardless of what gets preached at agile conferences and such, the reality is that in most enterprise projects, the amount of tests is close to zero.
Villa sole condo ra no 9904 section 73
RA NO 9904 - Section 73
Penalties and Sanctions. – Any person who, intentionally or
by gross negligence, violates any provision of law, rules and regulations, fails to
perform duties and functions mandated by law and/or violates the rights of the
members, shall be punished with a fine of not less than Five Thousand Pesos
(Php5,000.00) but not more than Fifty Thousand Pesos (Php50,000.00) and
permanent disqualification from being elected or appointed as member of the
board, officer or employee of the association, without prejudice to being charged
before a regular court for violations of the provisions of the Revised Penal Code,
Civil Code and other pertinent laws.

If the violation is committed by the association, the members, officers,
directors or trustees of the association who have actually participated in,
authorized, or ratified the prohibited act shall be held liable.

If the violation is committed by the employees and agent who acted in
gross violation of the provisions of the Act, the officers, directors or trustees, or
incorporators of the association shall be jointly and severally liable with the
offending employees, agents, and the association.
Al-Qaeda's Embrace of Encryption Technology
Indeed - thanks for the correction!
I literally just bought the Samsung chromebook. Should I return it and get another chromebook?
That was exactly what I thought.

His argument seemed to be "look, you could have added this feature to existing Objective C syntax rather than inventing a new language" - which is all true, but rather misses the point.

At least one of the problems with Objective C is its syntax, and he states this himself - "Much of the Objective-C syntax is clunky, bolted on, and downright infuriating at times". Yet nothing I see in his suggestions solves that - unless he's suggesting ditching all existing syntax (which is pretty much what Swift is), then all he's doing is proposing yet another syntax structure to add to the already messy bastardisation of C and Smalltalk that makes Objective C the pain it is today.
Git Checkout – Autocomplete Local Branches Only
Complete free quick test for #shellshock + how it works
I don't see any particular reason you'd expect a C++ compiler to handle C, except the very specific part of C (largely C89) that is a proper subset of the C++ standards. They're very different languages at this point.

gcc's C++ compiler doesn't handle C past C89 either; you can't use C99 features when compiling with g++. There is a separate C compiler that's part of the GNU Compiler Collection, but then there's also a Fortran and a Go compiler: gcc includes a lot of languages. MSVC++ doesn't; it's just a C++ compiler, not a Fortran or Java or C compiler. Linux norms are a bit more polyglot, so gcc is more polyglot than MSVC++ is.

I personally like C, so it'd be nice if Microsoft shipped a C compiler in addition to a C++ compiler, but they've chosen not to. As a result, the "C" you can write is precisely the C that is also valid C++, and you can't use any features that aren't valid C++. If you really want there to be a language "C/C++" again that all C++ compilers can be expected to handle, you'd have to convince the C++ standards committee to add C99 or C11 features to the next C++1x.
The reponse from ubuntu 14.04

user@user:~/ X
X: user not authorized to run the X server, aborting.
Running a startup is not an intellectual exercise which is the context for that quote.

Running a startup is more like improvising in a jazz band. There is some theory behind it but if you think you stink.