skysight-inc/HackerNews huggingface dataset:
Almost all green with the bash that comes with OS X 10.9 with Apple's patch applied:

$ ./bashcheck
Testing /bin/bash ...
GNU bash, version 3.2.53(1)-release (x86_64-apple-darwin13)

Variable function parser inactive, bugs not exploitable
Not vulnerable to CVE-2014-6271 (original shellshock)
Not vulnerable to CVE-2014-7169 (taviso bug)
Found non-exploitable CVE-2014-7186 (redir_stack bug)
Test for CVE-2014-7187 not reliable without address sanitizer
Found non-exploitable CVE-2014-6277 (lcamtuf bug #1)
Not vulnerable to CVE-2014-6278 (lcamtuf bug #2)

Has anyone received Apple's patch via software update? It did not show up for my Macs. I had to go to their site and download it.
There's a bit of a question about what "fixed" means here. It seems like most of these packages have applied the prefix-and-suffix mitigation measure: namely, while the function importer code is still present, it only works on environment variables with specific, uncommon names. It's basically the case that in any context where you can set environment variables with arbitrary names, you can do other sorts of evil.

Several distros have not released patches for the later parser vulnerabilities _now that that codepath isn't reachable_ unless you're able to make an environment variable with the specific sort of odd name it requires. The test program here does specifically check for all the known patches with custom variable names, and maybe it's good to fix them, but it seems slightly disingenuous to suggest this is "unfixed". Remote attackers shouldn't be able to create environment variables with these names anyway.

I think I'd prefer a bash that has applied the prefix-and-suffix hardening and not the patches for the lcamtuf bugs, than one that's fixed all the parser bugs we know about but still allows function imports without the prefix-and-suffix requirement.... there are probably parser bugs we don't know about.
The definition of "will work" has been downsized over the years.
What ITER is now claimed to do is much less than it was originally supposed to do. Originally it was supposed to be able to produce 500MW more or less continuously. That goal has been downsized to 300-500 seconds. The current record for holding a fusion reaction together is about a second. If ITAR beats that by a reasonable margin, its backers can call it a victory and go home.

http://www.slate.com/articles/health_and_science/nuclear_pow...

http://dotearth.blogs.nytimes.com/2012/10/19/a-veteran-of-fu...

If anybody seriously thought this would work commercially, it would get its $15 billion in private funding and be working in three years.
whoa nice
ROI of driving more traffic via PPC for e-commerce may surprisingly be negative
Right. There's tons of reasonable choices here. Which is why Rust currently has no defaults, and is why you need to write 5i today.

This whole topic is very much still under discussion. While many want defaults, what they default to is still a question. And there's a sizable group that doesn't want any default at all.
Supply Chain Says MS Surface Pro 3 Tablet Is Dead, Microsoft Denies It
Are logs the most fine-grained data source?
Skype tweaks Mac and Windows preview versions to look like its mobile apps
That wasn't an eBay store, but her job was selling other people's junk on eBay for them. As for the future of e-commerce, it's whoever can get the product to me fastest. Brick and Mortar still wins that race, but lose on price more often than not.
Track email bounces and the follow ups in real-time using SendGrid and OneNote
Cold fusion reactor verified by third-party researchers
Yo GestureKit!!
Also possibly, "D. Bacon is treif/haram, the others can be kosher/halal."
"There is no need to get in on the ground floor, because the ground floor has been there for decades."

I (still)edit the smaller pages on my personal site from an ssh session using nano. The big productions get done in markdown with a couple of bash scripts on the laptop.

All good fun, and nice to see how little bandwidth/processor resources a bunch of static pages can live in. I don't think I'll go on the wait list as I have a perfectly good slice of web server already but I hope this gets popular.
Your summation of that article is a little overblown. They say "we really have no idea, so let's be very careful." Plus what the CDC tells medical personal and what the CDC tells the public aren't synonymous.
Is it even valid for a compiler to transform sin(constant) into a hardcoded constant embedded into the executable?

I guess since sin(x) is computed by an FPU in hardware, then it's inherently "dynamically linked." But in that case, why is it valid for a compiler to transform sin(constant) into a hardcoded result? Is there some standard somewhere which says that the implementation of sin/cos/etc can't ever change, and therefore it's valid for the compiler to do that? Or do compilers just make an assumption that the implementation of sin(x) won't ever change?
Weebly, Wix, and Square replace low-end 'web designers' who will usually build atop a WordPress core and stick it on a shared webhost, leaving it to be hacked due to security vulnerabilities. Sure, they leave you semi-dependent on a given web service. But, to the site owner, they're generally dependent on a single developer anyway since that dev doesn't usually give them the FTP credentials.

Weebly is pretty solid and the only major one that's free to use with your own domain. It just has a small 'powered by weebly' at the bottom. And it generates standard HTML and CSS that you can then move to another webhost later if you want. It also does an htaccess for redirects if you're moving from a previous host using different tech. The only downside is that you don't get full control over the URLs.
Is that shallow processing or the presumption of coherence? People frequently say things using linguistic shorthands that are literally nonsense, and we are only able to communicate because we routinely impose a generous interpretation on statements that would otherwise be incoherent. Since the literal interpretation of "Should a man be allowed to marry his window's sister?" makes no sense, reading it "incorrectly" in a way that does make sense makes sense.
Back when I was a FF/Paramedic I worried more about Hep C and MRSA. That being said, I am really glad not to be on the "front line" anymore. I feel for my brothers and sisters as they start to face this.
Do they have full URLs in https? the hosthame, yes, but the GET /path/to/embarassing/page.html is passed within the encrypted channel. Am I correct?
seconding support for a vegan category
I think the post qualifies to be on the page, since the product is actually exists.

12 points in points in 14 minutes is rigging ?
I am not convinced.
How to TURN CUSTOMER INTERVIEWS INTO ENTERPRISE SALES
An Introduction to Semiconductor Physics, Technology, and Industry
also, seeing as you're paying attention, here's[1] another one I'm watching get downvoted due to disagreement. Do you think the moderation is appropriate?

1. https://news.ycombinator.com/item?id=8434094
You can find the research paper here: [1]

One thing I do want to point out is they did receive some funding from the manufacturer of the device. But it was largely in the way of radiation containment and testing.

Either way they got about 2-3x the power out they put in. Which is promising.

[1] https://news.ycombinator.com/item?id=8428103
It should be mentioned that the E-Cat is a notorious scam.
Runners might spend more time thinking about running and what they look like while doing it though.
This is awesome man, totally brings back memories.
Lesotho Independance
There's not a insanely good reason, but "the App Store" is definitely a reason. It's possible that we'll do a mobile web version in the future. Android is planned before that though.
Amazon.com plans to open first physical store in midtown Manhattan
I'm not worthy, I'm not worthy...

Edit:

The intel engineer was probably smart, but then there's this guy. And then there's the commenters here. Lesson: There's always someone out there smarter than you.
Ask HN: What things which don't scale have you been doing to get customers?
Doing things which don't scale (http://paulgraham.com/ds.html) is a hot topic again. And rightly so. I think technical founders (speaking as one myself) often learn this lesson the hard way. I was wondering if people would be willing to share the things which don't scale they've been doing to get customers for their startups.

Some ideas to help make this more useful

1. Lead with what you're working on plus a overview of it so we can better understand the techniques you're using.

2. Try to give specifics where possible. "Emailing people signing up to my pre-launch list" is interesting but adding that you do it within X minutes of them signing up, and ask question Y makes it more actionable for others. Do you try to organise skype meetings with them? Are there tools you're using to help with that? etc. etc. etc.

3. Some idea of how successful these techniques have been for you and things you are going to change in future would be good as well.
Why? Their entire competitive advantage & business approach is based on the opposite?
I think your description might fit if performance and scalability is a non-issue for your site.

Your own caching will make your webapp (or API) scale (say 2x faster or serve 15x the amount of users), but if you need your app to take some serious beating (say 100x to 400x the amount of users with minimal ttfb) because your site/app suddenly becomes flavour of the month on the Internet, then you will really need Varnish.

After seeing several Paywall and API deployments and all sorts of other advanced business logic, such as GeoIP detection or Mobile device classification, applied in the cache layer while keeping a sane and simple VCL, I am not sure your initial point is the case. The normal way to write VCL is to keep it simple.

(Yes, I am biased, but my point is still valid).
this seems like fairly poor design. A router can't ping some heartbeat IP, therefore it shuts itself down?

It's not the heartbeat I take issue with - it's the dependency on the heartbeat for operation that doesn't seem to make sense.
I'm not sure I understand your point about being tied to a vendor. This isn't tied to Oracle and it's mentioned at the bottom that you can also generate SQL for MySQL, MSSQL, and others.
He is in the "all we need is fast enough computers" camp. This claim is far from obvious: We can't even simulate the simplest organisms today despite the fact that we have extraordinary computing power relative to the capacity of these organisms.
The Miracle Cure for Everything
Termtris: A Game Like Tetris in Ten Functions
Tasks That You Need to Automate in WordPress
> Facebook actually has 25 year-old "product managers"?

Yup. Also: engineering managers of the same age.

Edit: I don't work there. I happen to know someone who is 27 and a PM at Facebook, who has been there for 4 years (as a PM).
But the thing is I will not choose any restaurant based on the pictures. I will read reviews about good n bad experiences of users who have been there before me.
Funny.

This remind of story I heard about how to destroy a PC with Floppy/CD drive long time ago.

Grind match stick into powder carefully, mix with lipstick oil, spread to Floppy/CD and insert it into a system.
In many urban areas it can be challenging to receive packages, so having a pickup spot in the middle of several million people could well make sense.

Apple's flagship Manhattan store famously does quite well as a showcase for their products and helps to sell millions for them. Amazon could be doing that math that for every user we get into the ecosystem we can extract X in lifetime value from book, video and app purchases (again a way it could make sense).

Also, you can consider this maybe Amazon trying to become Walmart faster than Walmart can become Amazon. Having physical stores still counts for much in the retail sector, having one (or a bunch) would potentially give them leverage and more options. They _already_ have a massive nationwide system of warehouses and logistic centers, is it that crazy that they could move products into brick and mortar shops as well as the presumably much more complicated process of people's homes?
What's Driving Open Source 2.0?
I thought everybody knew this. This was widely reported in the press as the satellites were being launched. The news (which was also reported at the time) was the changed policy mentioned briefly at this government website, which I guess is the archival reliable source for the policy.
I'm sure someone can find a niche for it. Stock "deal of the day" items, top sellers, small items (not worth cost of shipping but buyers willing to drive to get), and ship-to-store (lowered shipping, don't worry about shipper leaving it on porch to get stolen). Also provides a live face for service.
I don't think they would have too much trouble knowing what to stock, they would just look at their sales. Stock the most popular items, new releases of movies/books/games, and phones, tablets and PC's.

On the other hand, that would make them nearly equivalent to any of the other "brick and mortar" businesses. I wonder if they want to focus on showcasing their own products, like an apple store. They have been pushing the advertising on amazon fire TV and phone a lot.
I used to work at a company that among its many offerings, provided the capabilities of EasyPost.com to it's enterprise clients. They could have simply spun out a team of 5 devs and have a mature EasyPost on day one and probably attracted a larger customer base than they had. However, that was simply not their roadmap nor customer segment they targeted.

Just because a large company has a similar product doesn't mean you are their competition or they are yours. But, you have to do your research.

The very same company also runs the worlds largest black car service for the enterprise and didn't think Uber was a competitor since Uber didn't focus on the enterprise space. I am pretty sure Uber is eating their lunch now.
Yay, downvote!

What for? I continue to assert that articles that claim that patents reveal things about products are unfounded.

I have a number of patents myself: companies file them all the time with little to no concern for whether they'll use them in a product. Thus, the existence of a patent is little to no evidence regarding products.
I actually had, and remember, and certainly ordered from, that exact CCS catalog. What a weird memory you just brought back.
Cool, but logo looks like a sad face.. (I know it's supposed to be a human shape)
Why not have the stock respond to people? Amazon can probably have their stock be adaptive.
G.E. Opens Its Big Data Platform
Your girlfriend's main page is quite nice.

The frames link, though, reawakened fear I'd not felt in years.

Haven't been to yours, so that her hit counter has a chance to catch up. ;-)
The problem with this hypothesis is that it treats "linguistic backgrounds" as static, as if language creation was not a basic and routine part of the machinery we use to picture the universe.

But this is not the case. The sciences, for example, would be impossible without the routine creation of new language, and once you admit language creation into the fold as a basic linguistic ability you've lost pretty much all the force of the Sapir-Whorf hypothesis as a limit on our understanding. Linguistic background is a weak and temporary barrier to reaching any particular picture of the universe based on the physical evidence because whenever our linguistic background impedes us we create new language.

Shakespeare, famous for his neologisms, is a great example of this process, obviously, and language creation is an area where the sciences and the arts overlap very heavily that so far as I know has never been properly studied.
Dino Basketball
I eagerly await a list of some of these authors.
You had me until I read the article. Then I came back to the link and saw that the article is from the Mirror, widely known to be a completely unreliable tabloid newspaper dealing in sensationalism rather than careful field-based reporting.
Thanks for the positive feedback! For those who don't have an iPad here's a video that previews how the app works:
https://www.youtube.com/watch?v=cAuKRyuHQcc
Seems cool. Picking up from a store can be useful when it's something you're worried about sitting on your doorstep all day. Could be a great way to improve customer service as well. I'm curious as to whether the store will actually stock non-amazon products.
It breaks binary compatibility. The compiler substitutes some value (e.g. the broken value), so if the sin(x) evaluation changes (to the correct one), then binary execution will fail.
/me also misses IRC from the times where you could type --<--{@ and you could be sure it looked just the same on the other end. Monospace was the norm, not the exception and all the IRC clients displayed all lines aligned (to the left, however unbelievable that sounds) regardless of the length of the users name.
Today I have to pay attention not to write (b) or (c) because it might turn into a beer or coffee. We often forget to appreciate the simplicity of things.
I cant see anything wrong with this. It's just smart hiring.

The error is first done when you hire detectives and excutives exclusively from the cop force, because then you start with a bad selection (since beeing a good cop and a good detective is two different things).
“Kiss an engineer.”  – Steve Wozniak
My other comment was in response to the first half of your comment, before an edit added more about structure of code. I'd say I partly agree, but I think another consideration is that in C there is a limit to how much you can reasonably fit in an expression. What in, say, Haskell might look like...

let f = case something of
Foo -> 10
Bar -> 22

cannot reasonably take the same form in C, despite there not being a "real" update going on.

This means in C you wind up writing things like,

int f;

switch(something) {
case Foo:
f = 10;
break;
case Bar:
f = 22;
break;
default:
/* ... handle error ... */
}

And the flow is basically the same, but with an additional degree of freedom to make a mistake, and there some static checking can have your back.

Incidentally, on GCC and Clang I recommend building with -Wswitch-enum, which will help point you at the above when you add something to the enum that contains Foo and Bar.
I'd be curious what proportion of public facing space would be lockers.

I imagine it'd be great to showcase flash sales and extremely high demand items. I really believe a retailer selling physical goods needs some sort of physical presence and hope this is something interesting.
One would have to purchase this, yes? One would use this tool to build one's queries, yes? So what's not to understand about being tied to yet another vendor?

I thought that was a clear and honest question.
Amazon makes a lot of money - but they also spend a lot. They have pretty slim margins.
One minor thing:

"the only major one that's free to use with your own domain". Nearly every website builder lets you do this. Squarespace, Wix, Yola, Virb etc.
I've sent a link to this out to my team as an example of the sort of documentation and technical writing I enjoy. Go one level up in the directory and you'll see quite good explanations of deployment practices, implementation, and high-level architecture stuff.
Even while understanding the broader discussion and knowing quite a bit more than the average person about Miranda rights, I did find your post to be incomprehensible.

In the ensuing discussion I assume you were downvoted for unnecessary rudeness, not for being controversial. Note that I didn't (and won't) downvote any of your posts. I hope this helps.
On NPR radio this morning with doctors answering questions about the issue. Some doctors say that the only way to contract it is by body fluids and then through going in open abrasion, mouth, and etc. They also say that is could potentially be caught within a radius of 3 feet, but there still is not a lot of research.

On VICE they went to ground zero and showed the epidemic up close. They always had to wash their hands with chlorine.

A side note, they are putting Ebola testing check points in five different US International Airports. This seems a little worrisome because I believe these Airports could be easily bypassed.

In honesty, as an American, I am not too worried about contracting it here.
Seeking QA Engineer in Raleigh, NC
The Quest for Scalable SVG Text
Carl Sagan and pot – he would've liked it
Ah, sorry. I was being naive and assuming this was open source.
That's a pretty weak selling point. You probably have less data, and it's yet another application to sign up for and use.
Any ideas on what would need to be blanked out on what appears to be a document from an intra-agency magazine article?
Sending email and text messages have been part of Siri since it was bundled with iOS...
I don't know as much about NYC geography, but if they put one of these somewhere in the loop in Chicago I would definitely use it. I would much rather spend my lunch break walking down to the Amazon pickup depot than let a package sit on my front door all day.
A couple of resources for Varnish 3:

* https://github.com/mattiasgeniar/varnish-3.0-configuration-t... (fairly well maintained with CMS specific VCL examples)

* https://github.com/slashsBin/nuCache (library for different programming languages, not so CMS centric)

Both of these are listed in our utilities directory:

* https://www.varnish-cache.org/utilities

Other Varnish (VCL) extensions can be found in the VMOD directory:

* https://www.varnish-cache.org/vmods

If you have ideas on how to make both these resource more visible and accessible for our users, please let me know.
Show HN: A morse code / telegraph custom keyboard for iOS 8
The govt created this central organism that controls your annual foreign currency allowance (it was called Cadivi, now called cencoex). You need to submit a bunch of docs to the bank you want your allowance at. So you can only spend your money using the credit cards issued by that bank.

For example, I sent in my papers to my bank at the beginning of the year. They activate my cards with that bank to be used online. You cannot use any other bank for online purchases.

We also get a $2500 yearly allowance for spending outside the country (if you travel) under a similar, more bureocratic mechanism.Unfortunately, since the govt has a MASSIVE debt with international airlines, most of them have cut most of their flights and you cannot get a flight out of Venezuela unless you are rich and can pay in dollars.
> Collect shipping addresses later.

For pre-orders, how many backers do you lose by not obtaining actual shipping details upfront? Do you pre-bill them sans shipping address and then hope that they input it later?