skysight-inc/HackerNews huggingface dataset:
The female comment was an observation, not a dig at you.

Maybe you just carry more than me (I see you say phones, plural). I don't have a problem with stuff falling out, and I use my front pockets. If I am somewhere crowded and expect pickpocketing is a risk, I put my hands in my pockets.
>Shouldn't you then technically feel less pain over time if it's constant?

getting accustomed to pain isn't a trait that would be carried through evolutionary selection. Pain is a signal about something that has to be addressed. Out of 2 possible reactions - acting on the signal vs. not hearing the signal the first is obviously evolutionary preferable. An yes, evolution and selection isn't merciful, and here i'm very agree with buddhism. We evolved to be scared and run away from sources of pain and constant risk of pain is what makes us moving through life.

BTW, am i the only one who is WTF??? while reading it:

>In 2006, Justin, an Upper Dublin High School grad pursuing an economics degree at Penn State University, lost 60 pounds over the course of a few months, with no end to the mysterious weight loss in sight. Justin’s doctors, perplexed by his condition, performed surgery on him to install a feeding tube in his small intestine.
Walmart Now Offering Low-Cost Mobile Checking Accounts
I am curious why strlcpy() was not modified to check the length going in and out to check for truncation? I am not a C/C++ guy but that is one question I had when he said that was one of the gripes for the function.
It's a bad idea if you don't have a well-defined mode of operation; for example, you're fine if the hash table uses copy-on-write semantics.
Show HN: Generate crontab syntax online
Anybody interested in running their business off of a model undercutting competitors prices should study Jack Tramiel.

I don't know why his name doesn't come up more but he was a remarkable businessman.
Or 0x00000001 next pointers, if it's using a hlist_nulls. See http://lwn.net/Articles/609904/
strncpy() zero-fills the array. Which seems overly wasteful.

char buffer[1 << 24}]
strncpy(buffer, "a", sizeof(buffer));

will set all of the array to zero, instead of just copying two bytes.

And as you noted, it won't NUL terminate the string. Since strncpy() doesn't return C strings, it's not really a "C string" function. It's a horrible, inefficient bastardization which should be used by no one.
> While the Passport is almost exactly the size of a travel passport, it is much heavier at 6.9 ounces.

Hilarious comparison. Must it be actually be stated that the Passport is heavier than a travel passport?

Apples and oranges... Passports and passports.
Here's how to patch Ubuntu 8.04 or anything where you have to build bash from source:

#assume that your sources are in /src
cd /src
wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
#download all patches
for i in $(seq -f "%03g" 0 25); do wget http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-$i; done
tar zxvf bash-4.3.tar.gz
cd bash-4.3
#apply all patches
for i in $(seq -f "%03g" 0 25);do patch -p0 < ../bash43-$i; done
#build and install
./configure && make && make install

Not sure if Ubuntu 8.04 with custom built bash will be upgradable to 10.04??
Yes, but the basic technique is (at least) decades old. To transit some of the tighter bends of the Panama canal, ships used the hydraulic effects between the ship and the bank to either pull closer to one side, or as a cushion to push the ship over so it could turn in a smaller radius.

I've never heard of squat being used to make it under a bridge, though. We were just taught that if you were heavily loaded and close to the channel bottom, increasing speed could be a bad idea.
http://seclists.org/oss-sec/2014/q3/672

Still vulnerable.

env X='() { (lol)=>\' bash -c "echo id"; cat echo
For an explanation of "RCU grace periods", read "The RCU Api, 2010/2014 Edition":

2010: http://lwn.net/Articles/418853/
2014: http://lwn.net/Articles/609904/
Maybe. Actually, it looks like Github is using libssh, which is along the lines of what I was thinking, without having to mess with crypto too much, as you say.
Thank you! After reading this same statement about toilets vs space missions dozens of times I could hardly muster anything more articulate than "aaargh!" Apparently the West had solved all of humanity's problems and ensured a reign of perfect equality and peace before embarking on trivial things like research!
Is anyone in business using Chromebooks? If not, it isn't going to be in Blackberry's sights.
You might as well just call it a "17 trillion dollar company" to claim credit for the entire US GDP.
If you could provide reliable electricity and water for 300 million people for $74m ($0.25 per head) then you might have a point, but it's not really a lot of money for a country as large as India.
Related to the guy who has 100 orgasms/day? http://gawker.com/the-undeniable-tragicomedy-of-a-man-orgasm...

Both seem pretty awful.
>the developers are busy adding new features and don't care at all about old bugs.

What old bugs are you talking about? the only old bugs I can find are fixed or non-systemd bugs that weren't cleaned up

>They say if you're not using one of the latest kernels, tough luck.

Where recent means at least 3.7, or 3.8 if you want Smack support.

>certain problems with systemd will take down the whole system, and make it unbootable too!

>you're continuously debugging systemd "modern innovations" instead of focusing on your product.

[citation needed]

I've been using systemd and systemd user sessions since Arch switched over and the only issues I've come across have been my own fault.
If yum still doesn't find it, you may be on an older release. Try "yum --releasever=2014.09 update bash"
I know it's always tempting to argue vagaries with trolls, but if you have the time I would very much appreciate it if you could give a short answer to my good faith question here:

https://news.ycombinator.com/item?id=8339654
Great reference point for widgets - thanks for putting this together!
Those indicate the NULL at the end of a hash chain.
Thanks, it's true, very useful when your phone is in your pocket and you can't get to it easily
Ask HN: Free vs. fee beta programs
I'm working on a project called Booklaunch.io. Like an About.me for books, authors can create a beautiful page to market their book, collect email registrations and lead readers to purchase links.

http://booklaunch.io

Currently we are beta testing, trying to get a lot of users into the system to see their habits, system use, likes/dislikes.

Authors can log in and build their book pages for free—they pay on launch. Beta testers get 33% off the listed monthly / annual price.

We are trying to validate whether writers would pay for this service. To get more users, we are considering switching to a free beta. How accurate is a beta tester survey after the fact that asks "would you pay for this service?"
Partpic Makes It Easier to Find Repair Parts 
http://techcrunch.com/2014/09/08/partpic-makes-it-easier-to-find-repair-parts-for-your-whozits-whatsits-and-more/
Apple pulls iOS 8 update after iPhone users complain of major software glitch
That's not really a fair comparison. JavaScript backs onto a browser that already implements a vast amount of rendering.

If we had a similar iOS control, we could do it really simply too.
It's a bit of an ugly duckling device, and I'm not sure it can ever grow into a beautiful swan.
How does the "grace period" work in practice? Is it really a set amount of wall time?
So like Palm Foleo (except with an 3G/LTE radio)? Yeah, that's a huge market.
Well, it hooks into your code in the sense that you can expose classes and libraries to it.

One use is for C++ "scripts". Clang replaces the older "C interpreter CINT" in ROOT (which is mainly a data analysis framework for particle physics). CINT was horrible because it was "not quite C++", and encouraged bad behavior. You could swap . and -> for example; objects that were saved to a file you loaded appear automatically in scope (without prior assignment), templates were a bit iffy and so on. You could run many .cpp files as CINT scripts, but not the other way around. So current best practice is to avoid the"interpreter" and write proper programs that link to libROOT. Cling seems to be much more sane.

I don't know if you need something like that, but one thing Cling/CINT gives you is reflection/introspection, which is pretty neat. I think it's also somehow used to get generate bindings for other languages. Oh, and having a Repl is pretty nice. I use it e.g. for quick plots:

$ root filename.root
[0] tree->Draw("mass")

(where "tree" is a data structure automatically loaded from filename.root containing data points, and the command makes a histogram of "mass")
I wrote an Atari ST emulator out of nostalgia called STonX myself when I started to use a Unix box (Sun IPC), I believe it was the first open source ST emulator ('94 or '95, also the first for Unix with big/little endian support, ran on Linux, DECstations with Ultrix, Sun/Solaris etc.). It was somewhat special in that it supported "native" graphics capabilities, i.e. bigger resolutions than 640x400 using VDI if the host hardware supported them. Had a bunch of bugs though that I never got round to fixing...

My memories of the ST were fond: it was quite powerful yet still a system that you could look into every aspect of, you could single-step through the OS in ROM if you wanted and there weren't dozens of strange tasks running all the time like today. When MiNT (Unix-like OS layer) was released, we could even play in the Unix league using gcc, bash, tcsh, emacs.
I skimmed through the LWN article and it appears to oversimplify the situation implying that bucket lists are singly-linked. They aren't (or at least they weren't in kernel's hlist few years ago), there's also a back pointer and I'm not really sure how this fits in, i.e. one can't simply re-link tail of one bucket to the head of another when merging them... In other words it seems like LWN got the whole thing dumbed down significantly, no?
Ummmm you like posting links without thinking? Here are a couple of them for you. You see the fallacy in your argument?

http://en.wikipedia.org/wiki/Poverty_in_the_United_States#Re...

http://en.wikipedia.org/wiki/Homelessness_in_the_United_Stat...
Do This and Multiply Your Traffic Coming from Facebook
Sorry, was trying to avoid biasing the results. Looked at waffle.io, zenhub, huboard, blossom.io... Some others. Google kanban github and a bunch come up.
I completely agree. The only thing that's topped getting a tiny patch of my own accepted (into pylibtiff) was someone getting me to put a python module I'd written* onto pypi. Both were great feelings, and it's extremely important to encourage such highs in new people contributing to open projects (Linux kernel or random bibtex editor alike.)

* the library was in fact just a python wrapper for some C++ code, but that's where leverage for the original author starts, in bindings.
How many people could you provide reliable utilities to for $74m?
Hi,

I help run the anti-spam team here at Weebly, and I can report that we're not observing any notifications from Facebook indicating that sites on the Weebly network are blocked. I've run a few tests using some popular sites on the network, and wasn't blocked from posting any of them.

More importantly, the site that the OP posted is not hosted on Weebly.

I recommend reaching out to Facebook for more information.
I see a pattern in this article:

"said analyst Rob Enderle of Enderle Group"
"Maribel Lopez, an analyst at Lopez Research, added"
"Jack Gold, an analyst at J. Gold Associates,"
Will this work for just the input component with a separate table view controller? That'd make it much more useful for non-messaging apps also.
People do ask the same question about many things the U.S. does.
Outstanding work!
Still don't see a roadmap...
> The Passport, when bought without a carrier subsidy or large corporate buyer’s discount, will cost $600 in the United States, $50 less than the basic iPhone 6.

Where is the market for a $600 handset that isn't an iPhone 6?
The function of human staff go way beyond up-selling. I work as a cashier at a successful restaurant in Portland, Oregon, and while punching info into the computer takes up a good portion of my time, it is less than 25%. Most of my time is spent answering questions, setting expectations, chatting with customers, solving edge-cases and cleaning. We don't really upsell, actually, it's tacky.

The reason why we don't see kiosks for ordering food, IMO, is path dependence. Entering data into a form is work, and people don't want to do it themselves.
Behind the Venture Capital Boom: Public Pensions
Un(official) Hackathon Schedule (Winter 2015) – Google Sheets
i have an android phone and widgets on ios 8 definitely looks cool
cool, what app do you work on?
> I haven't even updated my 5S as I need 5GB on a 16GB device for an OTA update.

If you hook up to iTunes, you can use it to do just the OS update... sync is optional.
I was reading around the zeroMQ implementation of secure messaging that uses this library. It seemed sensible enough (plaintext handshake, exchange session keys and hashes to verify long term keys). But it was entirely couched in "I am not a cryptographer" and "strawman only" caveats.

I appreciate the dangers of thinking "encryption cures all other bad decisions" but it would be useful to have a spectrum of security we can talk about.

I would love to see something like Big O notation for security - where we are 95% confident that the implementation has closed off vulnerabilities "on the order of published exploits, on the order of passive sniffing inside network, on the order of State level actor targeting your data"

I just wonder if we ever can say "hell yes this will do" as opposed to "well even Fort Knox might have a vulnerable point"

Edit: perhaps I mean "design patterns for security layers"
5 New Enterprise Open Source Projects to Watch
Yeah I saw the chrome extension, not really into that.
If I understand correctly, readers never need to wait for the grace period. Careful ordering of operations ensures they can charge at full steam and yet always have a consistent view of the hash table.

The grace period is only necessary to ensure that no readers could possibly still be using a block before it's moved or freed. For example, when enlarging a table, if an object gets moved from a big bucket into a smaller one, there's a chance that readers on that object would suddenly find themselves in the wrong bucket. Waiting for the grace period ensures that there are no readers anymore and it's safe to move the object.

Very similar to RCU. Paul McKenny has had some great RCU articles on LWN in the past.
No, it's a construct from RCU. There's an rcu_read_lock() and rcu_read_unlock(), which despite the name is a lightweight cpu-local operation that doesn't take any locks. synchronize_rcu() waits for all currently active readers, but does not wait for any new readers.
I am amused that to cut through the noise the author - a former Developmental Biology graduate student, who went on to found a successful bio-tech startup, who presently lectures at Stanford and is a partner in one of the premier VC's in the valley - is foced to use linkbait to drive eyeballs to his article just like the rest of us hustlers.

(1) https://www.linkedin.com/in/balajissrinivasan
You can just keep going, building up your string using strlcpy/strlcat as you go, and check for truncation (whether from this call, or a previous one) using the return value whenever it's convenient. Depending on what sort of programs you write, truncation might even not be a problem anywhere from some to virtually all of the time, so in those cases you can just let it happen and the code ends up even simpler.

(When I first discovered strlcpy/strlcat I went and changed a bunch of string-fiddling code to use them and it was really amazing how much simpler everything became. Virtually all of my bounds checks could go away, leaving just the string stuff. Much nicer? Well, I wouldn't go that far. But certainly fewer ways for it to go wrong.)
"“The point isn’t to raise revenue,” he said. “We care more about reminding people to separate their materials.”"

If that's the goal, why the extra work with processing fines?
Euclideon SOLIDSCAN – Capture Reality
We have added the CVE to our scanning routines and the update is now online on www.detectify.com. Test your environment for unpatched servers. In times like these it's OK to go for our free plan.
All ETFs and mutual funds have this, I believe it's SEC mandated. Regardless, your points may or may not be true but how something performs in a bull market isn't strictly the point. You need to average your returns over a long timeline.

There is nothing special about Vanguard ETFs, and even if you feel you are diversified there's an old saying that in a severe downturn the correlation of everything goes to 1. So most likely, in a downturn, everything you hold will go down, even if you feel you're diversified. This of course is not a law, just a probability.

(And just as a helpful FYI, both stocks and bonds are securities)
I like your before after comparisons Tapfame. Looking forward to seeing that sooner next time :)
It depends on the hash table. Cuckoo hashing is a lot easier since you can resize and reorder the buckets concurrently in a new array, exposing it to new readers is a single pointer swap. When you have a linked list of buckets you have a lot more work to do!
Bash patch incomplete, function parsing is still brittle
Show HN: Foundcy – What are startup founders reading today?
I have unfortunately had to use this before seeing this post on a Samsung TV.

I honestly didn't believe the documentation at first. I remember Googling it again and then found someone's post that said, 'No really. That is how you do it."
Isn't there a lot of observational evidence for black holes ?
The Hitachi drives are Toshiba drives.

The 3.5" desktop and server Hitachi drives are all manufactured by Toshiba. WD wanted to buy Hitachi's drive division so there would be a WD/Seagate drive duopoly, European regulators said they had to sell Hitachi's 3.5" to someone else before they would approve the merger. Toshiba stepped up and got it.

http://www.anandtech.com/show/5635/western-digital-to-sell-h...

So yes it is somewhat confusing. You buy one of these drives and it will say "HGST a Western Digital company" on the box, when in reality it's all made by Toshiba, probably in an old Hitachi factory.
OtterBox Defender Case for iPhone 6 Plays Great Defense
That was written in February (how could you miss this? it's literally the very first thing at the top of the page) and doesn't mention either of this paper's authors. The article discusses a closely related but nevertheless quite different topic.
Yes. Education at the bottom, and you mispelled 'Governemt'. I would not mention the GPA, and remove the 'Class X' stuff which I guess doesn't mean anything in the US either. Focus on accomplishments and not academic grades.
The article mentioned, "Mersini-Houghton shows that by giving off this radiation, the star also sheds mass. So much so that as it shrinks it no longer has the density to become a black hole."

If anyone else wondered how the radiation of massless particles could result in the reduction of mass, I've found a resource with simple explanations for a layperson like myself.
https://www.physicsforums.com/threads/mass-lost-by-the-sun-b...
Worse than Heartbleed? Today's Bash bug could be breaking security for years
Nice - Still can't beat Google Now though
http://en.wikipedia.org/wiki/Unitarity_(physics)

http://en.wikipedia.org/wiki/Black_hole_information_paradox
I think the key is that you're stating that fundamentally, copyright should have value. This is not a given. I can certainly imagine a society where copyright infringement is allowed and no value is given to copyright at all. I'm not saying I would want to live in that world, but it's definitely not the same as a world that allows stealing.
Another member of the peanut gallery here. I've not been bold enough to make any claim in writing (it would probably be full of misconceptions), but the black hole hypothesis always seemed a bit half-baked, and I've definitely said words to that effect in conversation.

In the hypothesis Einstein's field equations obviously break down, and instead of acknowledging that any explanation will be enormously difficult to test we seem to have bought into this completely untested idea that matter can continue bending space-time around into a singularity and all that. Can someone with a better understanding point out what logic is (probably) missing here?

The other thing that sets off my hand-wave-o-meter is the pretending that we are somehow already observing these things ("new telescope detects hints of black holes") or have concluded that they exist without any positive evidence. Instead of "the mass at the center of the galaxy which is so large that we currently have no good way of modeling it without a black hole" we hear "the supermassive black hole at the center of the galaxy" and so on.
Amiga rulez !
Samsung[1] and Sony have literally just pulled out of the market due to declining sales.

[1] http://www.pcadvisor.co.uk/news/laptop/3573470/samsung-exits...
> Well they need to change their design then. It's a design flaw.

Uh, what? You really think that because of an edge case outside of intended use (again: not just putting the phone in the pocket, we're actually applying significant pressure to it in order to accomplish this) Apple should design a thicker phone?

There are 5.1 million car crashes in the US per year which result in damage, dents, and bends to cars. Maybe we should redesign all of them too?

You're suggesting that because the material is not impervious to pressure they should augment the physical characteristics of the product to allow for an extraordinarily remote eventuality which is exhibited in a tiny number of devices which are used entirely outside of the normal conditions (i.e. they're under ENOUGH FUCKING PRESSURE TO BEND THEM.)

Get a grip.
I imagine that the metaphor "black hole" will be here for a while. After all, we still use the term "big bang" for the 'first moment' of the creation of the universe, even though the "Big Bang Theory" isn't generally believed any longer.
I can't comprehend how this got buried so fast in the mist of "patch, patch, patch".
I doubt it; I only finished it last week. But the map tiles are hosted on S3 and free to use as a custom map layer in Leaflet/OpenLayers/GMaps API.
This

"Instead of shared folders create Staply groups where files and links are connected to the messages and not just thrown in.
Share everything you want with anyone, file size and number of members is unlimited."

Could be smaller and easier to read.
Betteridge's law? I know that the headline doesn't actually end with the question mark, but I think it just might still apply.
What? Just get chip and pin machines like the rest of the world.
I replaced "sh" with "bash" in the above, and on my patched system it creates a file called "echo" with the date in it. Can anyone explain how this works? Is it an exploit?

Edit: From my experiments, the name in (a) doesn't matter, and "echo" and "date" can be changed. The thing in echo's position is where the output goes (and can be an absolute path!), and "date" is a command that is run. Still no idea how it works, as I'm not very familiar with shell syntax and Googling symbols like "=>" is mostly useless. It may even be meaningless and is just garbage to get bash into a state that causes this to happen?

Edit 2: http://seclists.org/oss-sec/2014/q3/679 has a small example. "Tavis and I spent a fair amount of time trying to figure out if this poses a more immediate risk, but so far, no dice. It strongly suggests that the parser is fragile and that there may be unexpected side effects, though"
Show HN: iPhone 6 -– BEND HERE -– case
With all the frenzy about the bendgate the last few days, I've made a case with "how to instructions".

Here it is in white http://goo.gl/bc3KJJ and black http://goo.gl/jzUiHf

Enjoy!
Brazil releases 'good' mosquitoes to fight Dengue fever