skysight-inc/HackerNews huggingface dataset:
China can be considered capitalist, they trade actively with us, and honestly we don't have the ability go to against them. Saudi Arabia, needs to be on our side, to provide the natural resources we consume.

Cuba..that would be just us trading with a Communist country. It would mean allowing Americans to consider a communist country, instead of writing that idea off as crazy. Neither political party in the US wants that. Neither party in the US believes a friendly more transparent relationship with Cuba will strengthen American belief in capitalist democracy across all of society.
According to this[1] article about the current issue:

"Before releasing this information, Hall emailed Yahoo and tweeted at its engineering team and CEO Marissa Mayer.

It was confirmed to him that its servers had been infiltrated but Yahoo refused to pay him for alerting them as it was not part of the company’s bug bounty programme."

[1]: http://www.independent.co.uk/life-style/gadgets-and-tech/new...

EDIT: The quote previously included "Yahoo is notorious for its disregard of bug bounty hunters, having last year rewarded one such hacker who identified three bugs in Yahoo's servers with a $25 voucher for company merchandise." but I moved it here as it caused confusion regarding which issue the article was referencing.
Off-topic, but I had the opportunity to have several cuban PhDs teach some of the final classses in college (Multi-agent systems, computer intelligence, etc) ... All of them were incredibly good in their fields, better than any other professors I had in school, and as good as some of the brightest I've met in this field.

There were also some docs in other disciplines and they were all incredibly good. Based on that experience I think cuba is hardly "punching far above its weight", but reflecting great care, passion and responsibility as they do in other fields... We just assume a lot of things about cuba. I sure did before.
A number of times in recent memory Yahoo has been subject to attacks using XSS and similar. One example of one that was exploited (there was a disclosure back in May, but that didn't have reports of active exploits): http://thenextweb.com/insider/2013/01/31/yahoo-mail-users-st...
Another possible explanation is password reuse on a site that was breached.
Frick. A .pl CGI script on a production box?

All the yapache & yphp security fixes and is all undone by a a .pl with +ExeCGI.

They used to run "crack days" where all of us used to get kicks out of breaking & entering prod, whatever means available.

Was a fun way to weed through such low-hanging issues, by a highly motivated (i.e otherwise bored) crowd.

I wonder if they still have them.
Looks like you only read the first couple lines. What I'm referring to:

> I’ve also emailed Marissa Mayer and contacted her via twitter, both of which yielded zero results and no response. There are no publicly available contact methods for Yahoo! that have yielded any luck with trying to contact them regarding this.
> Lennart writes very opinionated software

Glad to see someone finally mention that in this thread.
Microsoft imagines an incredible transparent smart cover for Surface tablets
Data Firehose Streams (Real and Simulation)
Could you expand on the "all bullshit" part then because it comes across as saying that there isn't any point to being civil with people.
How Many Flight Attendants Are Men?
Well, that a good bunch of people who used to have a job. A real shame to see what bad management can do.
I thought it was quite well written and informative. I can't comment on the veracity of the post though as I know nothing about the author.
First map of America drawn in 1784
And you only need six projectors, six Kinects, and all light-colored surfaces!
Scroll down to find a gender breakdown of job functions by gender.

The most gender-equal job in the country seems to be "computer and peripheral equipment operators" (anyone know what this is specifically?) at 50.2 gender split.
"Another way to tell a good journalist is to tell them you’d like a chance to review the story, to double check it for factual errors, prior to publishing it. If they decline, or claim that their news agency has rules against this, then you’re possibly dealing with a journalist who doesn’t care about the facts, and possibly is even trying to blame his/her news agency for it."

More or less no newspaper will do this. Reputable newspapers will have fact-checkers who will verify stated facts and direct quotes but giving people sight of the finished article before publication is something that no-one does.
You can have collective pitch setting in a quadcopter, with which you can scale up quite a lot without having to go to full cyclic pitch control (helicopters).

So basically it's a spectrum of scale:

1) fixed pitch (small quads)
2) collective pitch (large quads, autogyros)
3) cyclic and collective pitch (real helicopters)
You need to learn to read then.

There is a difference between being angry and borderline/actual harassment. Ignoring requests to cease contact and calling someone racist without cause are crossing a line from the former into the latter. And those actions coming from a "professional" is enough to warrant a letter to this individuals boss.

This writer seems to have just cause, and despite a relative wall-o-text, makes his case rather thoughtfully.
If it's valuable and technically possible, it's happening. Witness the use of phony cell towers and "free" wifi hotspots to track customers in shopping centers.
Government funding goes to incumbent researchers, e.g. professors who have already made it. They're deeply incentivised to replicate the destructive system that they evolved themselves to thrive in. Peter Thiel quipped in his reddit AmA: "we have a Gresham's law in science", or briefly, "bad science drives out good"... I don't often find myself agreeing with Thiel but this perspective resonated with me.

Disclaimer: I am running a science kickstarter of sorts (pledge.indysci.org). Why do you think this is bad? Do you think that paternalistically people don't value science as much as they should? And why should we expect our elected officials that squabble over stupid partisan issues be any more enlightened in allocating science funding?
Revisiting the many eyes theory
For a long time I have mentioned my main issue with FOSS/open-source development as it relates to the traditional Cathedral and Bazaar models. Eric Raymond's main point, as most of us know, is: "given enough eyeballs, all bugs are shallow."

I no longer think this is true, if it ever was. I would like to propose an alternative, more correct statement about the shallowness of bugs.

"The simpler, smaller, and more readable code makes most bugs shallow."

Or, more frankly, "Modern code is too voluminous for there to be enough eyes to keep Raymond's theory working in practice."

As we have seen with the PRISM revelations and multiple security issues recently such as shellshock, heart bleed, etc, much of what comes to mind is that there simply aren't enough eyes available to review code for bugs or other issues, and to me the only way we will ever get past this problem is to reduce code complexity and size.

The example I often use in conversation is that the linux kernel is at over 10 million lines of code now. No single entity could ever hope to fully parse all of that. As a counter-example, Minix 3 is at ~10k lines of code. (not a perfect comparison, granted)

What do the readers of HN think about this issue? Is it even possible to reduce code bloat in such a fragmented bazaar model we seem to live in? What can be done to reduce code size and complexity?
I can understand that. On the same token, I see a lot of people that seem to celebrate "bluntness" as if it is 'proof' of something (e.g. skill, 'lack of bullshit', etc). I don't think that this is right, or an opinion that should be encouraged.
Cuban doctors are incredible for doing much with little.
Please read the follow up:

http://yahoodevelopers.tumblr.com/post/62953984019/so-im-the...

(and HN discussion: https://news.ycombinator.com/item?id=6488897)
To be honest, it's not that interesting. If it's a well configured irc host then you will not be seeing any of the other bots, and all you will occasionally see is a command coming by from a generically named operator. Some botnet irc's are lazily configured, and will let you see all of the other bots as part of the channel, but generally will not let you speak. The bots usually have nicknames built from the host's computer name, username, country, etc.

It's interesting, but in itself is not that exciting in my opinion.
What does one do if they agree with the cause, but don't want to be associated with the people making up the majority of the movement?

For example, if you were strongly opposed to the policies or methods of The Greens then you may be turned off by the campaign in the OP as the Twitter mosaic is covered in Greens logos.

Another example, I had a friend who attended an Anti Iraq War protest back when it was all going down (the second time). The problem was, the majority of people protesting were far-left/resistance/socialists that were overtly trying to conflate the issues of boat people and I think Palestinians with the war in Iraq, two movements that my friend wanted nothing to do with.
Clients almost always want it fixed-price, but those same clients, when it comes to the actual project, they turn into agile scope creepers.

It is very important to discuss all this upfront with clients, many of them have no idea of estimation, the mythical man month and are horrible at knowing fully their ideas, the level of detail, before work starts yet will want fixed. It is especially bad on clients new to apps/games/web or their first attempt who just see surface level tasks.

Iteration and a more agile approach will hopefully find the way into business and mba textbooks/processes. Right now almost everyone wants fixed-price and flexibility to change at will. This will only hurt developers/designers and ultimately the project chance of success.

And don't get me started on non-competes the most anti-innovation, anti-business, anti-american (if you are in the US) thing ever being fully pushed by business at every turn. Most non-competes want you to come in to help a company compete, then once they know how or you have built it for them so they can compete, you can no longer compete any longer for a time because you helped them, makes sense for kings/owners/dictators but not fair business.
I think the "that have yielded any luck" part of that quote is pretty important.
Yeah, I dunno why his writing screams self-promoting crank to me, but something about it does. He's been posted here before, and he's a big deal in the ios security community. According to him.
This is possible, but it's also possible that the replacement will not have the same level of success. I assume that success distribution is more of a power rule than equally distributed. I think this is a fairish assumption because otherwise there would not be a tiered system for colleges in the first place. In this case, Harvard does in fact lose much.
My sister is a biologist, she was invited to work in a lab in her first year of university already, and her lab professor left her in charge of running the lab in general, even above PhD students because she was the only one that used all equipment correctly, safely and in an organized manner.... My sister even berates her professor when he is disorganized or forget stuff
Doesn't "pull a URL specified by an untrusted third-party" just scream potential security and definite privacy problem?
They keep insulting bounty hunters like that, they'll end up on the wrong side of black market bug trades every time some new exploit comes up. And I won't be defending Yahoo when that happens.
I think pg mentioned it's so that people don't use HN as a blog. People come here for interesting stories.
In the winzip email, he rambles about his mother.

Which makes his signature line pretty interesting. :)

> A fool learns only from himself. A wise man will learn from the fool.

So he's got this 'honest fool' thing going for him. If he can marry that with meticulous record keeping, maybe he'll be OK.

Of course, IANAL.

But ffs, I'm sick of this world where the defense "Wait, you misunderstand--I'm the GOOD guy!" isn't good enough. Why isn't it?
Can you provide any examples for that?
But they were subject to the full extent of employee harassment laws.
That article is poorly reported. Yahoo didn't have a bug bounty program at all at that time. And their response was blown totally out of proportion.
Quantum Speedup for Active Learning Agents [pdf]
I'm not sure git is an example of capital-G Genius, since Linus had been using BitKeeper, a commercial distributed revision control system, for about five years by the time he wrote git.

Git is good, but it's not new.
Could also be password guessing; lots of people use the "common word + number" pattern for their Yahoo! passwords.
Announcing the release of Couchbase Server 3.0
A new way to share game assets
Well, both releases are nice, thanks for posting :)
Tell that to the US Government. This is par for the course in their large contracts. Gotta reign in those spendthrift defense contractors, after all.
There is zero mention in varnish documentation of how ESI and forced cache invalidation occur. ( because it simply doesn't support it ) That was and is my point, and is not addressed on that page or anywhere else.

I realize that would require more extensive changes to support; my only point is that I wanted to use ESI specifically in relation to forced invalidation.

I reported the bug quite clearly, and the main dev said I was wrong and to this day refuses to acknowledge that forced invalidation does not work sensibly in regard to ESI.

I would like to point out again, that this is water under the bridge. I still support Varnish and respect the developer. I simply wish we could all get along and acknowledge limitations of what we do, rather than denying valid points made about software.

That is the true source of the anger in open source; developers refuse to acknowledge that people use their software in ways they didn't expect, and that you have to listen carefully to appreciate what people want. As a developer, it is unreasonable to brush off and ignore people who are trying to help.
Hackers are exploiting Yahoo’s bash bug vulnerability
Yes, I think several of the entities with rules against this are the largest mainstream daily newspapers in the United States. The Washington Post and the Associated Press have been reported to have this policy, for example.
Apple was mentioned because the current dominant beacon technology, and the technology being used by some (if not all) of the cited organisations (such as Major League Baseball) is iBeacon, which is an Apple-trademarked property.

According to the Gimbal website, "Gimbal proximity beacons communicate over Bluetooth Smart and are built and configured to Apple's iBeacon specifications..."
I don't think anyone has any illusions anymore that journalism as a means of informing the reader is at best dying, if not already dead. If a news organization can lie, then there is no point in in reading news, because fictitious news has no value to the reader. Throw in the polarization and sensationalism between the absurd right and left political extremes, and you have theater, not news.

I now follow journalists that I've vetted and trust to some extent, and heavily use sites like this to help filter the nonsense. I'll skim BBC and Al Jezeria English, but even them, I withhold opinion until I can get a sense of accuracy and corroboration.

I feel Apple may have the best approach. Comment on nothing, release press releases, and only conduct interviews with vetted reporters.
DukeScript – Java Everywhere Again
(defn pid-transducer [set-point k-p k-i k-d]
(fn [xf]
(let [pid (volatile! (make-pid set-point k-d k-i k-d))]
(fn
([] (xf))
([result] (xf result))
([result input]
(vswap! pid (fn [p] (calculate-pid p input)))
(xf result (:output @pid)))))))

If guessing that the first 'k-d' on the third line should be a 'k-p'. I'm glad this bug didn't mess up your eggs!
It most certainly is low skilled. Anyone can sign up, take a 2 week course given by the municipal public transit system, then take the state's Class B license test. After that, you are in charge of the "twenty tons of steel" no holds barred.

In fact, at the local university (it's a UC, but I won't name it since then you'd know which municipal public transit system I'm using in my anecdotes), student's 21 and up can apply and take a 1 week course, the UC pays for the Class B license test, and then they, a student, gets to drive the UC's "twenty tons of steel" buses around campus and to nearby neighborhoods shuttling students around. (ya, it's as scary as it sounds). I don't know for sure, but I assume more UC's have similar programs.

Yes, this is by definition a low skilled job.
That's some great revisionist history. I find it laughable that he says he never tries to mislead when he did exactly that with his presentation. He then tried to blame it on the press that covered it, but really he got the reaction he wanted. Violet Blue's piece was spot on.
Mono's package appears to lag behind their code releases by a significant amount.

So while you can download and build the source for 3.10 right now you can not download the packaged mdk's as easily. At least it's not trivial to find them anyway. I'm not sure of why this is.
I work with two types of documents: master consulting agreements and work orders. The master consulting agreement has all the "standard" stuff like IP, confidentiallity, indemnity, etc. The work orders are where I specify what we're going to do(1), how much it's going to cost, and when it will be delivered. Both are dated and signed. This works well for me and allows me to do agile-style sprints with work orders. This is usually in addition to a ballpark price range for ballpark scope.

(1) Where "what I'm going to do" can be substituted for "what I'm going to try," when the client understands why I can't guarantee something.
Bezos Plans to Make Washington Post an Amazon Product
> that have yielded any luck with trying to contact them regarding this

Might be the important part of the quote you missed.
https://avaz.me
> "Second, he is not Aaron Schwartz, who the community rallied around"

That's not how I remember it going down on HN. Not while he was still alive anyway.

https://news.ycombinator.com/item?id=5056279
The point I'm making is that he didn't do the obvious thing and search for their actual security report address which they have, respond to, and pay people money who report bugs to. He found the hacked servers by doing a search but couldn't do this?
Ebola, Beyond the Headlines
I have taken a course in journalism some years ago and I can testify that it's a common practice in Belgium. And I think it's a good thing.
Hewlett-Packard to split into two public companies, lay off 5,000
Assassin's Creed Unity director: Wii U could not handle it
I see your point. However, sales does not necessarily imply meaningless marketing copy. You act as a salesmen every day, any time you try to convince anyone of anything. A good salesman is not dishonest. He's honest, understands his customer, and guides the customer to a (mutually beneficial) solution to a problem.

Sales is not dishonesty, despite the stubborn misconception commonly held by engineers. In reality, sales is the process of convincing someone that Option X is in his best interest. There should be no trickery involved. If you're a good salesman, you can convince without dishonesty.
Except that Linus isn't fireable in this analogy. He's on the top of the hierarchy, equivalent to a major shareholder and CEO of a company. Such a person can certainly act like an asshole every second inside his organisation and keep his position.

The notable difference is that due to the nature of the enterprise, Linus pours shit in public. In a company, it might perhaps happen in a smaller gathering, like a board meeting.
Thank you. This is a large part of where the much-derided "waterfall" comes from.
Had lunch with the Mosers last year - they're both a model of humble brilliance, and it's inspiring to see something as unconventional as a wife and husband team as co-PI's. A highly unusual but extremely effective system!
There are two reasons policymakers promote STEM, beyond the shortage of programmers and engineers.

1) STEM graduates learn how to think critically and mathematically, two skills that will serve them well in almost any business pursuit. For example Jack Welch, the famous CEO of GE, held a Ph.D. in chemical engineering. I don't know of evidence that STEM degrees hold people back, even working outside the sciences.

2) We don't know, in advance, who the next Einstein is going to be. Giving as many children as possible the chance to make great discoveries is just good odds.

The chances are that most STEM graduates will not even be a full professor, let alone the next Einstein. But that is largely true of any degree we can imagine. Most English majors will not be a successful novelist or critic. Most business graduates will not run a company. Most history graduates will not become a full professor. Etc.

There is a shortage of leadership positions in any field, and a full professor with research funding is a leadership position. I think the most important question is whether the absolute best STEM graduates achieve these positions; that's best for society overall. If the postdoc crisis keeps the most promising new researchers from pursuing new knowledge, that's bad.

But it's not a volume problem. For the volume of STEM grads, the question is whether they can achieve at least a middle-class career and lifestyle. That might be in the sciences, but it might not. That doesn't mean that STEM education is pointless.
> Mailing lists don't include the email addresses of all of the recipients in the distributed messages To or CC fields, and the From and Reply-to is the address of the mailing list, never a list of all users on the mailing list.

Counterexample to your claim: browse the linux kernel mailing list archive at https://lkml.org/

On any message you can click [headers] to view the headers. You can see rich Cc: lines full of addresses. Well, you can't see the addresses because they have been scrubbed. But you can count the commas! For instance:

Cc: Rusty Russel <>, , , , John Smith <>,

means that it was CC'd to 6 e-mail addresses, four of which were in the "local@domain" format, with no display name, not wrapped in angle brackets.

For instance, exhibit A:

https://lkml.org/lkml/mheaders/2014/9/30/320

Note how "Kernel Mailing List <>" is on the Cc: line, too.
The real advantage of Agile though is to allow a flexible and reprioritized scope because of the failings of Waterfall. The main benefit is the ability to respond flexibly and avoid building "the wrong thing". Fix scope and estimate time and cost is clearly a problem that Waterfall solves better, it's just generally a bad approach to producing valuable software since it means pointless features are built, while useful things aren't added.
Are these people concerned with security or are they running a protection racket? The way you put it is starting to sound like the latter.