skysight-inc/HackerNews huggingface dataset:
I strongly disagree with this post and the author's opinions on Chinese culture. He's missing something really big that's a core of Chinese culture.

> the "We here in the Maker movement could not be more pleased with ourselves" vibe.

This is another of way of saying that we enjoy making here beyond earning a living. Yes it's work, but it's also recreation and art. In places like SV and NY, people make because mainly it's fun.

Over there, 'making' is not really something you enjoy; it's a means to an end. It's something you have to do to make money or save money, which in turn provides for your family and increases your reputation the more money you accumulate. The key point is that there's no love for a trade because nothing else really matters aside from family including your personal hobbies. Therefore on a whole there's no 'maker culture'. If something doesn't make you money for your family, there's no point. There's no doing something just because it's cool and not practical. It must be practical. (This imo is another reason why Chinese open source is anemic.) Add to this the repression of free expression and the work and school hours that are the longer than here, and what you get is a focus more on making copies and knockoffs of name brands (something safe) instead of something truly Chinese like say this:

http://www.atlasobscura.com/places/robots-of-wu-yulu The main reason I've always remembered this man is because he's one of the few Chinese people in China (that I'm aware of) who actually enjoys making for the sake of making, and not just as a livelihood. You can see the pride in his work.

In general their dreams aren't to change the world with something cool. It's to make enough money to send their family off to the US or Canada, where the water and air are cleaner...

I can go on and on with this subject. Yes maybe things are slowly changing in small pockets of places like Shanghai where there's a lot of Western expats, but on a whole what I've described is accurate.
oh, I see. I though I couldn't find the messages.

Thanks (that's crazy btw).
Color me cynical, but I think that most of opposition to Uber stems not from desire for safety but simple desire to protect the incumbent profits.

Moreover - the 'community' isn't really choosing anything. Instead it's some crony local politicians in the pocket of taxi lobby. If you want to do a referendum on whether Uber should be operating - I'll agree on the 'community' stance. Otherwise it's the minority who have the most to lose advocating against it.
you're going to need to buy the IP from whoever you're sending with or ask to be put on a warmed up IP shared with other legit senders.
Anybody who signs up before Decemeber 31st, 2014, will receive a 50% off coupon for their first year once the beta is complete.
If you followed some common-sense advice [1], you only needed two patches: the original one as a stop-gap measure for the original RCE on September 24, and Florian's prefix-adding patch that came out shortly thereafter (but has taken some time to appear upstream).

Now, I'm a bit stumped how any obvious variant of the CVE-2014-6271 or CVE-2014-6278 RCE payloads could lead to accidental code execution somewhere else, since they generally produce a parser-breaking syntax error when executed outside an env-encoded function definition. Also, because of an unusual fixed-string prefix required to carry out the attack, there is not a lot you can really do to avoid any half-baked IDS/IPS. Anyway, for the sake of my idle curiosity, I secretly hope that Alex shares the buggy line of code, even though that's unlikely =)

[1] http://lcamtuf.blogspot.com/2014/09/bash-bug-apply-unofficia...
Actually in Naples, worldwide capital of the pizza, they use Fior di Latte (cow-milk mozzarella) instead of buffalo mozzarella unless you specifically ask for it -- which usually costs more.

This is done both from a cost perspective and because the cow-milk mozzarella is not as fresh as the buffalo one (which in isolation of course tastes better). Since buffalo mozzarella is usually consumed within 24 hours of production, it liberates too much milk in the pizza.
Last time GWAN came up it didn't fare well.

https://news.ycombinator.com/item?id=4109698
Also AU and used ICQ; then MSN.

Note there was a strong anti-AOL sentiment throughout the 90's.
This is what drives me crazy about avoiding spam filters. When I email out quotes to customers (initiated by the customer of course) a certain percentage of emails never make it. There is no rhyme or reason to it (all the obvious things like DKIM, spf, etc are OK), it just seems to be random. Microsoft seems to be the worst offender, but it happens on occasion with gmail and yahoo too. Very frustrating.
I couldn't disagree with this more for two reasons:

1. Cuba was historically supported financially by the USSR up until it collapsed; and

2. This belief that the US placed a trade embargo out of "spite" is misguided. Cuba under Castro nationalized assets belonging to US citizens (eg casinos in Havana). Agree or disagree, the US government acted to protect the interests of its citizens.

As to whether that embargo still makes sense, I make no comment on that.

I haven't visited Cuba but it does seem like if I had to be stuck in a communist dictatorship, I'd probably choose Cuba over the alternatives. I'm not sure that's the ringing endorsement one is looking for.
Yeah, only EU citizenship along with residency allows one to vote.
There are a few startups that have been started by Skype alumni in Estonia. Transferwise as mentioned above is one. Another is https://lingvist.io. Another which is dual homed in Estonia and Palo Alto is http://teleport.org.

I went to Tallinn for the first time in 2002 before it was part of the EU. I took the ferry from Helsinki and spent the day walking around the old town. Quite enjoyable. Two things that really stood out were - internet cafes were readily available and extremely cheap (under $2/hour from what I recall) and the beer was cheap :)

I have since been there a handful of times while I was at Skype - unfortunately I never did make it outside of Tallinn.

Edit - I forgot, I caught a rather fun Folk-metal band on Eurovision when I was visiting once. Metsatoll - https://www.youtube.com/watch?v=dC3Q9q4cRZA
Independent Report on E-Voting in Estonia (May 2014)
As a small-time dev do I have to worry about shellshock?
I have an extremely small team, lots of projects and no resources or capacity to spend on securing our web applications. I host with one of the big guys, we don't run our servers from our shop or anything like that.

Without the capacity to spare man-hours battening down the hatches- how big of a deal is being on top of this for a run-of-the-mill dev team with low-level, no-big-deal development, hosted elsewhere?

My main concern is unwittingly leaving clients servers/applications vulnerable and them falling under nefarious control...
If I saw this in a public forum and Reddit failed to point out that the former employee was fired (and was aware he was fired) in a public setting (which would make them liable for being sued, if Reddit lied) holds alot more weight than "Oh, ya, that guy. He was full of shit" told to me privately would.

Every large company has fired at least one person, and every large company has at least one "full of shit" disgruntled ex.

Most companies haven't had a CEO Mushroom Stamp Heard 'round The World, though.
The only word I objected to was "enjoys." That made me feel like: Yeah, sure, Cuba ENJOYS the bad relationship it has with a larger, more powerful nation next door.

I don't entirely agree with you, but I do think the "enjoys a fraught relationship" was just terrible wording.
>And the high-profile guy who previously attacked Kathy coming out as a Nazi

I think he just said that to try to damage the reputation of nazis by association with him.
That link is great. And please do expand on this! I'd love to read more about this topic. It would make an interesting contemporary counterpart to Kenneth Pomeranz's "The Great Divergence," where he explores why an Industrial Revolution almost (bit didn't quite) took place in the Yangzi Valley as well as the late 18th c. English Midlands. It's an interesting read, even if some of it has been contested: http://press.princeton.edu/titles/6823.html
Ask HN: Where to get Hacker News?
Since HN degraded to a shit catapult of Wired, NYT and BBC where can I find some real hacker news?
If you want a 64-bit build of Firefox right now, you might want to check out Waterfox, which I've been happily using for a while on Windows 7:

https://www.waterfoxproject.org

I moved from Firefox to Waterfox during a period where Firefox was frequently crashing on me. Waterfox seems to be more stable if you have lots and lots of tabs open.
If you like this and you haven't seen 1000fps flatland tricks:

https://www.youtube.com/watch?v=aHrn3-Cb3iM
Using neural nets and tuned heuristics, ScreenSlicer is able to intelligently find a search box, enter a query, extract the results, and page forward in the results.

This sounds like it might be usable for making a universal program to go through the idiotic, annoying, hated-by-everyone web-based sign on screens required by many free Wi-Fi hot spots.

As in, something that doesn't have a rigid template database of what UI it can deal with so the users have to beg "please support such and such hot spot in the next release".
Why go to the SEC?

Overstock is already a publicly traded company - anything that remotely hints at trying to circumvent the regulations they're already subject to would be a very bad idea
Show HN: A plugin for RabbitMQ that does auto-clustering via Consul
i'm asian american so i'm keenly aware of this kind of thing but it's not apparent to me that the title of the HN post "there is no maker movement in china" has anything to do with the actual text of the message which has more nuance than that title would suggest... am i missing something?

without that bait-ish title it takes on a much less derisive tone, although it uses some questionable phrasing.

maybe ello just sucks and i'm not seeing it.
Why should he say anything? Do you think that a bank CEO would interrupt his day to comment on the termination of an analyst?

If you need to deny it, you can say, "This isn't an accurate account of events" and leave it at that. But even that's unnecessary.

Sure, this guy was phenomenally stupid to start a pissing contest with his own employer on a forum said employer controls but that whole pig/mud thing is really true.
Samsung Electronics forecasts 60% fall in quarterly profit
I'm surprised they didn't mention that this is due to Neapolitan geography, where the pizza was popularized in its current form.

The urban legend says that poor people just took the fresh/cheap ingredients they had available: flour, tomato sauce from the Vesuvio area tomatoes, mozzarella which is widely available in Campania along with olive oil and basil, also used in abundance locally.
From a technical perspective, it can. See http://counterparty.io/ for a decentralized exchange in action.

Do you mean you don't think people can be trusted to keep their own shares safe? Securing a large value of cryptocurrency is challenging right now. But if you don't trust yourself to do it, you can hire a third party that you do trust to hold your shares for you.
My opinionated answer to the statement released by Yahoo!:

I won’t sit here and say that I think they are lying. To make such an accusation would only prove me to be a fool not having ammunition in the weapon before I fire it. I will, however, say that I believe – in my opinion – that this is a wordplay and a game of semantics. First off, there are several “shellshock” exploits. The term “shellshock” as the media has portrayed it is to execute the vulnerability or vulnerabilities recently discovered in bash by means of delivering the following payload: () { :; }; <commands>

When we look at this payload, what we are actually seeing is a function definition, not the execution of or calling of that function, with the regards to the following: () { :; };

The actual “arbitrary code” to be executed last past that point, where we’re no longer defining a function, but instead – giving instructions to be executed on the operating system via Bash. One could inevitable argue that taking the payload, and modifying it to look like: () { whatever; }; /bin/bash –c ‘id;uname –a’ could, or even could not, be identified as “shellshock” in the manner of which it was portrayed to be by the media. However, the fact still remains that this “payload” would cause the execution of the commands proceeding the {};

When we look at the other SIX (6) payloads that essentially accomplish the same exact thing: https://shellshocker.net – we see that modification of the “payload” does not stop the blatant fact that the same underlying results are achieved via the same exact vulnerable code in the Bash shell.

My response to Yahoo! : Please issue out the UNTAMPERED and UNMODIFIED apache logs, showing the payload delivered to your “sports API’s” - and other researchers, and potentially shareholders, determine what the underlying cause was. Furthermore, to state that this resulted in bypassing your “IDS/IDP” and “WAF filters” makes me wonder exactly what kind of IDS/IDP and WAF filtering you’re imploring. I’m willing to bet there were exact phrase match filters looking for what most sites have identified as the “Shellshock” vulnerability, I.e. “() { :; };” and preventing the scripts and/or bash from being executed once that string was identified. That could have been with something as simple as a wrapper for bash… And considering the IPS/IDS didn’t pick up on outbound IRC connections on port(s) 6660 and/or 6667, which NO internal server would have a reason to be connecting to, I can only say that your concept of IDS/IDP is seemingly inadequate in my professional opinion. So, once again, since the vulnerability has seemingly been “patched,” I urge you to release the details of the vulnerability in the script, and also explain why it is that the initial compromise appears to have been on a web-facing box with public access to it, and found amongst a botnet running a perl script that had self-spreading and searching capabilities based around the “shellshock” vulnerability? You are comparing apples and oranges, when in all actuality, you should be comparing “to-may-to” to “to-mah-toh."
>Lennart writes very opinionated software.

So does everybody, s/w are rarely written by committee, Linux is as designed by Linus, iOS/Android/WP/OSX/BSD/ are all made by choices of their creators.
Why is his opinionated writing, getting in way of your opinionated installing/use of s/w you install on your machine.
Brigading is not IRC slang. It is web forum slang, perhaps reddit specific. I've only heard it in the reddit/HN context, never in IRC. IRC is nevertheless a popular way to 'organize' such 'brigades'.
You should test your sites with these two tools:

http://www.shellshocktest.com/

and

http://shellshock.brandonpotter.com/

There is a well maintained guide at Digital Ocean that explains the nitty gritty details:

https://www.digitalocean.com/community/tutorials/how-to-prot...

If a server is vulnerable there is a great guide that helps you to deal even with old systems:

https://dmsimard.com/2014/09/25/the-bash-cve-2014-6271-shell...
Btw, the US National Cryptologic Museum is well worth a stop if you're ever near Fort Meade, MD. I stopped in on a weekday morning and got a hour-long personal tour by a very knowledgeable ex-NSA guide. https://www.nsa.gov/about/cryptologic_heritage/museum/
It has always been a common grammatical error but I blame AOL for legitimizing it.
What is the font you are using for source code?
It's called gamification. You start counting points/upvotes etc and suddenly everyone wants to collect more of that. Quora has two more twists: It allows you to post to social networks so your friends know that you are helping people with your knowledge (oh - I'm sorry - it just does that by default). Quora also has ties to online versions of some known publications where they post popular answers. So suddenly you are "published" bonafide writer in likes of Business Insider, Info World etc. I know of people who perhaps spends ~2 hours a day writing beautiful answers to stupid questions like "why this actor is so popular" complete with screenshots, trailer videos, dialog transcripts and so on.

The same gamification strategy works on sites like StackOverflow, Reddit and HN. The most successful ones have some twists like Quora, like StackOverflow throws in bonus of putting your points in your resume. I once saw the top points earners on StackOverflow was Jon Skit who had earned 700k+ points. I looked at count of his answers, length of average answer and estimated that he must have spent 4hr per day each working day for past 4+ year to get that many points. This was on minimum side. If you convert this to hourly rate, it's same as he donated about half a million to StackOverflow.

Now if you can upvote this answer, that would be great ;).
Building up a basement rec room stereo from a Heathkit kit is one of many electronics related memories I have of bonding with my dad. I was less than 10 years old, and I'm sure he did most of the work, but it certainly helped teach me -- as the article so wonderfully says -- that machines weren't magic, and that curiosity combined with a healthy dose of fearlessness was enough to understand just about anything. What a great thing these kits were.
Tech companies fire people for dissenting opinions. I'm not sure that it's news, or even especially wrong. That's an unwritten rule of the workplace: don't question or embarrass your boss or his boss. Ever.

This kid had very little credibility. Oddly enough, though his situation is overall worse now that Yishan responded, he has more.

What we now have is a factual event, not speculation, and it's far more damaging than a rumor that someone might have been fired over a dissenting opinion (which is not unusual).
I view bug bounties as more of a conscious nod towards responsible disclosure than anything else. I sincerely doubt anyone could make a competitive living off of bug bounty programs (even accounting for the legal grey area of selling vulnerabilities) so the economic incentive argument seems really silly to me.

In contrast, if you've ever tried to responsibly disclose a vulnerability and gotten a threat from the legal department in response (still common practice in a lot of companies), a bug bounty program can be a very encouraging show of good faith.
> Please issue out the UNTAMPERED and UNMODIFIED apache logs

Who do you think you are? lol.
> Executioners work within the law. Drones work outside of it.

Drone pilots are certainly within the law of their home country.
what if Mussolini the brutal dictator and fascist wrote a clever algorithm or solved a neat math problem, will you feel strongly offended against those who use the algorithm or math equation?
I recommend Boilerpipe, which happens to be embedded in ScreenSlicer too: https://code.google.com/p/boilerpipe/
It's Source Code Pro (http://store1.adobe.com/cfusion/store/html/index.cfm?event=d...).
Meet the Hitlers – An interactive trailer experience
What if you had the world's most notorious last name? Experience the infamy!
Walter Isaacson has created a playlist for his book, and has a personal video post on the female programmers here:
http://milq.com/bead/great-digital-innovations?sort=recent

The playlist is a collaborative; where Walter asks the community to provide the top digital innovations: "I've just written a book, The Innovators, about how a group of inventors, hackers, geniuses and geeks created the digital revolution. I thought this Bead might be a great way for us to share examples of great innovations around the development of computers and the Internet and the stories behind them."
Yes, but as we all know, un-Americans don't have any rights. /sarcasm
Thank you, this is very helpful- though I was hoping to be cheap and lazy.
Magnetic items in an MRI machine [video]
Most of the team of my startup SaleMove is in Tartu! This is yet another example of how great Estonia is for tech. If you want to develop for a great startup there reach out on our website!
If agile really works (I do have an opinion but not an orthodoxy) one of its main premises is that one of the failings of traditional project management techniques is isolating the client from the development process. This "implementation detail" is the central premise and the client should be exceptionally motivated to care about it.

One of the central weaknesses of agile in my opinion is it is unclear the best way to bill it and therefore it can often be a business disadvantage.
I brought a galaxy phone for my mum from one of those cybermarts in Guangzhou. The original 8G ram was replaced with a 4G one. When my mum complains that the phone run slow, I was like "you installed too much crap-apps". Then one day I finally found out the phone was modified.
Filed under "so crazy it just might be true"
I think I get the concept (and it's interesting); but I'm a bit baffled by the terminology:

> That led me to the idea of "spouts" and "bolts" – a spout produces brand new streams, and a bolt takes in streams as input and produces streams as output.

Spout I can grasp; why "bolt"? Why these two, together? I'd have really appreciated an extra sentence or two here as to why he chose these terms -- naming is so crucial, and the fact that both "spouts" and "bolts" sound like sources/producers to me (one of water, another of electricity...?) made it harder to grasp how Storm works.
Specifically, the neural nets are used in finding the parent node of the result set (or one of the parents). Heuristics (basically just generic strategies) are used for finding search boxes. There's also a similar function for finding authentication forms. Most of the functions in this project are static so it should be easy to use isolated components as needed.
No it's from many years of experience in all of the stated domains (cooking, coding, and crafting instruments with my own hands).

The grave mistake very logical people make is to think that they can define, decipher, and manipulate all properties of any given domain without any regard to that fact that no domain exists in a vacuum, and thus, not all thing in this universe can be quantifiable.

Trying to quantify human involvement in anything is pretty much the same as asking, "why are we here?".
The article seemed to suggest that China had no need for a specific subculture of "Making" because making things was so widespread and such a part of existing Chinese culture.

On the other hand, your comment seems to be responding to some article which hypothetically would have said that the Chinese couldn't make things, or that their making things didn't count.
There's nothing proprietary in the entire stack and there's no SaaS being offered here. The API is separated from the core logic to allow for clustering. You can put both API and core servers on the same machine.
I'm a share holder, making me an "owner" of a publicly traded company. And, who are you?
> There is no way I could skate now like I did in college and high school as my body simply won't allow it.

With some work you probably could. You'd be surprised by how many "older" dudes (40+) absolutely crush it at the climbing gym. It takes a damn lot of strength and flexibility for them to be able to do that.
You're not contradicting the linked post, just one indignant interpretation of the submission-title. And that title, by the way, does not appear at the title-less post.

Shirky is actually making the case that China has plenty of maker-ness – just not in the form of a self-conscious, self-congratulatory capital-M 'Maker Movement'. That seems to be roughly your view, as well – but for some reason you'd rather take offense?
I'm not sure you understood the gist of the original article. It's not deprecating the Chinese at all. If anything, it's somewhat critical of the American "scene" and its "We here in the Maker movement could not be more pleased with ourselves" vibe.