skysight-inc/HackerNews huggingface dataset:
> Why did he not roll his own distro fully based on systemd to convince people it is so cool?

Why don't you roll your own distro and keep init in that?

I'm honestly not trying to troll. Isn't the point of open source that each individual can do what they want with the code? Why is it someone else's responsibility to maintain code options that you want, but they don't?
Attack code for 'unpatchable' USB flaw released
Yeah, this is the approach I've transitioned to. It's certainly better overall, but there's still an issue of maintaining some duplicated code on the server side and the client side.

There are some projects that specifically address this (Rendr, Lazo, Ezel), but I haven't made the switch to one of those yet.
Indeed. About ten years ago, there was a saying on Gentoo site saying that it is a bug if you can't customize your gentoo system the way you want it.

Personal attacks are not OK, but he should keep his opinion on what _my_ machine should do for himself. For what it is worth, his systemd is a bug.
Hi Darren,

yes we are aware of the issue and already working to fix it. Thanks for telling us btw :)
Re this part, about Linus Torvalds being aggressive and insulting to his contributors:

But no, it's not an efficient way to run a community. If
Linux had success, then that certainly happened despite,
not because of this behaviour.

You have to have been utterly brilliant to invent git. I don't know enough about operating system internals to say if the same is true for Linux, but I know enough about git to say it's true for git.

So Linus was brilliant enough to invent git, and is widely known to be a complete asshole to his contributors.

He rarely brags about being a genius - in fact I believe I've seen him on video making modest statements about being overrated and not really that smart - but he often argues that being an asshole to his contributors is a wise and effective form of management.

To me, he seems like an epoch-definingly great hacker who nonetheless has absolutely no clue what his own strengths and weaknesses are.
Unfortunate that the pictures aren't there.
Elon Musk: Colonizing Space Is Our Insurance Policy Against Extinction
SSD + lots of RAM.
You are overlooking who the author is. There are plenty of people (me among them) who would be exceedingly happy if systemd died a horrible death - thus there are people who wouldn't want to have him develop any more software, some go to the extreme of sending death threats.
Can we end the stupid sanctions now? The USSR is gone and we trade massively with China for F's sake. Cuba doesn't have the best human rights record on Earth, but neither does China or Saudi Arabia to give two other examples with which we trade extensively. All this does is harm the Cuban people and paradoxically actually strengthens the existing regime there.
It takes an extreme lack of understanding of how people actually use English to believe that Linus was actually advocating murder with the message he made, no matter the literal content.

If you seriously believe he was advocating murder, I presume you have reported the matter to the police, as in that case it is a criminal offence.
No. He CC'd them.
I'd like to point out that I have a lot of respect for the developers I named; my point is that we should all play nicely, not that I wish for these people to be shamed. People get hurt. I was hurt. I'm not attacking; I am saying it still hurts to be treated that way by members of the community, and that I agree with the notion that you need to have a thick skin. It shouldn't be this way; the entire open source community should strive to improve the world together, not fight about which project is better.

Notice above comment from mst ( Matt S Trout ). I appreciate him saying sorry and it actually means a lot to me. I have even more respect for those who recognize when their actions have been misunderstood and hurt people. He didn't need to apologize, but it helps the community and I wish more developers were willing to see that there are many different opinions and we need to respect them all.
Correct. Furthermore, if no other bank is willing to lend this amount, then the central bank will do so as part of its purpose as lender of last resort (so the condition in your "so long as" is always satisfied).

Note, however, that lending is subject to unrelated constraints, in particular the capital requirements that I've mentioned.
Just to parlay -

This page has not been edited in over 3 years and says Varnish does not have full ESI support:

https://www.varnish-cache.org/trac/wiki/ESIfeatures

Perhaps you missed it, or perhaps this anecdote took place prior to this page's posting.

In either case, seems it was a misunderstanding - which goes back to my first comment about a reported bug is not always a real bug just because one (or a few) users believe it to be.
The shift has been rapid. When I entered grad school (2003) a single postdoc was expected, 2 years. By the time I left the expectation was 4 years, and by the time I completed my second postdoc, it had bloated to two postdocs and 6-8 years. This sort of rapid shift can be expected by exponential growth which might be the short term outcome of a pyramided organizational structure replicated over and over... For years other outlets like industry and nontraditional courses (law, journalism, etc) could keep up but then there was a hockey stick catastrophe.
To my knowledge, my machine is secure. It wasn't Windows and I had both anti-virus and a firewall active. For one thing, what made this strange was that I haven't even logged into Yahoo for months (probably close to a year) when this happened, repeatedly.
TIL - people still use WinZip
This guy works in the security industry and yet he couldn't google "yahoo security" to find their security contact email address (second result for me)? He was also unaware that Yahoo runs a Bug Bounty Program?
> News agencies rarely hold their own writers accountable, especially in tech, where misogyny and misandry thrive, and where personal attacks generate headlines.

We've reached a new low in name-calling and FUD-spreading if one feels the need to use both misogyny and misandry in the same statement. At least, I cannot think of any reason not to use "people-hating" instead other than for dramatic effect (eliciting strong emotions from the reader).
> Many people talk nice, but it's all bullshit.

Are you stating that you believe that there is a direct 1:1 correlation between people talking in a civil manner and people being "all bullshit"?

Are you also stating that calling someone names when telling them they are wrong somehow adds credibility to opinion of the name-caller? What about political attack ads that spend all of their time smearing the person rather than their policies?
>Is making death threats in order to convince somebody to stop doing something a valid way to motivate through fear?

I don't remember Linus ever sending death threats to anyone. As for the people who did send it to the OP, I think most people agree that death threats are not OK under any circumstance and that whoever did do it is an outlier and not an example of how the community behaves.

>Is cursing somebody out on a mailing list really all that terrifying?

I think it is since public shaming tends to be effective in preventing whatever behavior was shamed, as per the racist/homophobe/sexist argument.

>If it is, is that the reason Linus, for instance, does it?

I can't speak for him but if I were in charge of an important and sizable project I can see myself doing it for that reason.

>But is it really appropriate to do this, to this extent especially, to programmers who wrote bad code? Programming relies on rational, careful cognitive consideration of problems. That's the opposite of what fear inspires. Fear-based "motivation" is lousy in general, and doubly lousy for open source software.

I don't follow why it's doubly lousy for software in general. Software has its fair share of opinionated debates that are more about differences of philosophy rather than careful cognitive consideration of problems. And as for it being the opposite of what fear inspires, I'm not sure I agree. The educational system world wide uses fear effectively and it seems to mostly work (despite whatever problems you may have with it), so I don't see what would make programming special in that regard.
Stamping Out Farmers Market Fraud – Modern Farmer
Yea, living in Miami, I see how the embargo negatively impacts people on a daily basis. That said the Cuban ex-pats I know are split on the issue - and fiercely - with half die hard supporters of the embargo and half opposed. As long as the embargo is in place, I prefer we bring in Cuban drugs at least for clinical trials, but I don't think US is happy to create exceptions and it is probably embarrassing a tiny island nation which the US has lead a economic crusade against for nearly 50 years produces any cancer drugs superior to those produced in the US.
In the same video interview where Linus famously gestured toward Nvidia, he also said that he believes people capable of being offended should be offended. I suppose one could think of it as a way of filtering out people who focus too much on the messenger and medium rather than the actual message.
This is, sadly, what happens when you mistake today's "journalism" (public relations) for journalism.

They're not interested in stories, per se - they're interested in enhancing their "personal brand", the brands that pay them to get them coverage, and the brands that their media agency contractually demands they support. Stories are just a vehicle to that end.
Modal AJAX form concept to create, update and delete Django objects with ease
Apple's sapphire glass partner GT Advanced files for bankruptcy
That would be ideal, but in my experience it needs to be phrased as a risk mitigation strategy, not as constraining one of three project management aspects.

Customers want business value. Some software systems that deliver that value cannot be broken into components or feature subsets that are sufficiently valuable in and of themselves. In these cases, the value of agile methods to the customer is that they can pull the plug at any time. That's the risk mitigation value that needs to be emphasized.
BCP is for domains to have abuse@, which for Yahoo.com should be tied into their corporate security and intelligence group.

https://www.ietf.org/rfc/rfc2142.txt
Here's the relevant commit. https://github.com/andk/pause/commit/0e3ab7d88a3ff6a9ea72af0... The decision to remove the registered list had already been made in 2013 and I really don't think it was being used much anymore.
I tried an early version, and I was impressed, but my app relied on an CSS transition that was causing an issue with React. It looks like they've improved on that with ReactTransitionGroup, so I'll check it out again. Thanks!
I'm curious - why are they penalized?
If "Agile" really works (and I have no opinion on whether it does), then its use should be an implementation detail that the client doesn't need to care about, but which allows the consultancy to offer much better estimates of time and cost for a given scope.

In other words, if your methodology is so great, use it to your business advantage.
thumbs up!!;)
> Decades ago Cuba made training and exporting medical personnel their "thing" and they ended up owning that part of the world market despite being a small and very poor country.

Not just medical personnel, in the 60s they were one of the biggest provider of trained personnel in general in the newly independent congo (before being forced out as Zaïrisation ramped up) to both staff the country and provide training (Belgium had avoided/refused to establish a local elite, so when they hightailed the newly independent Congo had no administrators, no teachers, no doctors, …)
Where did the government funding go?

Here: http://nsa.gov1.info/utah-data-center/
But that definition would include Amazon. I don't think a company founded in 1994 and went public in 1997 can be considered a startup.
Inside the Navy’s Secret Swarm Robot Experiment
Non Open Source is awful in many ways, and people should be aware of this. You have said nothing.
Some are misogynist, some are misandrist. Not both at the same time.
If your PPC is using a Discovery PHC you can map half or all of your L2 to a block of PAs and then map it where ever you want with VM. I'm sure this was cause of the experience that Genesis had with MIPS. It's a nifty feature.
"Though the FBI seemed intrigued by this, in my opinion, they aren’t moving with any form of haste."

I am doubtful that FBI would share their plans and/or actions with OP.
What do you have to say about the empirical evidence that the total amount of deposits and the total amount of loans in the system is of the same order of magnitude? This clearly contradicts the typical money multiplier story of "X amount of deposits creates X/reserve requirement amount of loans" you have posted.

Furthermore, check out countries without reserve requirements. Do they have an infinite amount of money in circulation?

Yes, banks create new money through credit. However, this is not limited by reserve requirements (if the empirical evidence still doesn't convince you, please read up on how the central bank will always lend the required central bank money to banks when they need it, i.e. the lender of last resort function of central banks). You have to look at capital requirements and general borrower demand and quality to understand what's going on.
I wouldn't limit this to Journalists.

It's solid advice for dealing with most anyone, particularly people with any sort of 'power' over your work and decisions.

With slight modification, these are the same sort of red flags to note precautions to take when dealing with a manager, executive or customer.

I think managing the expectations of non/semi-technical people and taking care in the way we evaluate and represent each other's work to those people is an important, but often overlooked part of this business.
Maybe things have changed in the year since I left academia, but I don't know any postdocs making 50k. 35-40 is more like it.
Show HN: Domain Name Suggester
>Sales obscures facts in order to convince someone to use your thing at their expense.

There are honest sales techniques, too. Dishonesty is a great way to burn your long-term social capital for short-term gains. Like, how I'd phrase that is your docs should either sell developers something they end up wanting, or help build a long term relationship by pointing out that it's not something they want.
I'm with dunder.

The flux of Asian immigration in the 60s, after the caps on these countries were lifted, was focused on skilled labor where there was limited US supply. AKA doctors.

We in the US still have this eye towards immigration of the skilled. While it is currently less in the medical field, it continues due to the lack of services in rural areas.

In Europe many Romanian doctors leave Romania and make much better wages in England and other countries. In India and so many other countries, many left for the US. Being a doctor had social weight and financial weight that it no longer carries here, in the US.
This writeup doesn't really get to the point so, the tl;dr

He was looking for places to exploit shellshock by googling for cgi scripts. Most of the ones he did find had already been hit by someone using a perl script that made them join an irc channel that was being used as CnC. He also joined it and monitored it. A bunch of different yahoo boxes were in the channel and he saw some of them get rooted.
I coded this library during my PhD, where I applied Markov Chains to the study of protein folding dynamics. I am quite confident with it, but as far as I know few others used it. At that time, I used pykov with networks of around 100k nodes and 500k links. Only recently I replaced pysparse with scipy sparse solvers. Entire methods are comment out because they are heuristics that do not belong to the standard Markov Theory, and they can be removed.
HP confirms breakup, layoffs hit an entire Google’s worth of employees
I have wondered for awhile whether the problem of post doc glut / suffering couldn't be alleviated by creating an alternative, more attractive avenue to the university science model. Universities charge massive overhead on grants which they use to support non-research related endeavors, place low ceilings on salaries, force investigators to do ancillary tasks like teaching, and don't promise tenure track positions.

There is no reason why someone couldn't create a for profit center which charged half the standard overhead on NIH grants making them very appealing, uncapped salaries, allowed investigators to own IP / arrange for favorable splits in a TLO model, and offered PI status to post docs if they could bring their own grants / industry money. Post docs would have a harder time staffing labs with grad students in this model, but they could get an affiliation with another university or simply hire students with BS's and pay them competitive rates.
In practice, I would say that it is a very challenging task to determine whether variables are totally independent or not: It is more about the strength of independence. Every time something is "estimated", you'd introduce an additional source of error, and in cases of weak independence the violation may be negligible. Modeling the conditional dependences is basically the idea of Bayesian Belief Networks, and you might find the paper "Comparing Bayesian Network Classifiers" interesting in this context (includes comparisons to Naive Bayes) http://link.springer.com/article/10.1023/A:1007465528199
This article really addresses the need for agile development to be a two way street [1]. I loved the manifesto when I first read it, and I still do. But I've noticed it really goes wrong when both sides don't adhere to the principle - when one side tries to be "agile" and the other side lawyers up, the agile side will get railroaded if (and probably when) the relationship turns sour.

"Individuals and interactions over processes and tools" means "we come by your office to interact with you as an individual about why your story points haven't velocitized properly in the time tracking system" [2]

In a similar vein, "Customer collaboration over contract negotiation" becomes "we'll hold your feet to the fire about deadlines and estimates, but we reserve the right to change our minds at any point."

In this sense, agile becomes unilateral disarmament in the face of a heavily armed… neighbor. I wouldn't say "foe", yet, but good relationships can turn bad. It's like one side saying "let's do this with trust and work together", but they're the only ones with a lawyer at the table.

In some ways, the agile manifesto almost says "peace and cooperation over fighting and coercion". Yeah! I'm for it. But we both need to do this!

[1] I feel a little embarrassed using the word "agile", but I figure that as long as it's an adjective, I preserve some dignity.
[2] I'm not technically a certified scrum master, so I may have some of that slightly wrong.
"and by agreeing to provide care in areas that are underserved by US physicians"

This changes the perspective slightly.
Release notes appear to be: http://www.mono-project.com/docs/about-mono/releases/3.10.0/

Weirdly, 3.8.0 is the "latest" news release on their page.
Cyrix had this too, probably first, you used those fake outb addresses that the CPU noticed to set up how many cachelines to lock.
Hi strick,

here you can switch pricing between plans and currencies
https://www.stamplay.com/pricing

currently it's not an automated thing based on visitor's IP since the infos are all there. But I understand that into the product this could be not that nice to see.

Thanks for pointing this out
Well.. you didn't read the first couple lines? Notably:

> I’ve notified both Yahoo! and the FBI New Orleans field office of the infiltration, but in my eyes, they really aren’t seeing the severity and danger of this situation, and really are not reacting quick enough.

> This document is being released due to several high profile companies being infiltrated using the recent Shellshock vulnerability, and what I have deemed as an improper response, or lack thereof ...

Seems pretty straight forward: hackers have already downloaded all the personal data out of these organizations and are probably using it in ways harmful to the general public already. This guy is forgoing his probable bug bounty payouts as this is, as he says, a really serious issue.

Thank you to him!
Then he wouldn't bring attention to his consultancy firm.
"Gee, these guys sure did show the Yahoo CEO! We need to hire them!" Says the MBA.
> “No changes will be effective unless and until memorialized in a written change order signed by both parties.”

Ahhh, in the "Enterprise", we call this a Change Request (we would name and number them CRXXX, for example) and put them in a "register" (Excel doc that got passed around 100x a day). These become so excessive they needed to be managed by a Management Consultant (who charges $250+/hr) who specializes in change management.

> There are three variables to any project: Money, Time, and Scope.

Every project I approached, I would draw the following diagram to the client: http://en.wikipedia.org/wiki/Project_management_triangle and any time one of the corners changed (it always did) I would redraw the triangle and ask the client how they wanted to proceed with ensuring the quality of the project.

As someone who has successfully and unsuccessfully implemented agile in arguably the worst environment possible ("The Enterprise"), my general conclusion is this: if the client doesn't understand agile fully or is already implementing practices that are agile-like, then do not begin the project. Set up workshops, assess their ability to adhere to budget-less (agile) projects, and make a decision then. For smaller clients, I typically ask the client "what's your budget?" and then I work backwards from that. So if a developer is $100/hr, and the client has $5k to spend, I'll say "ok you get a developer for 50 hrs. Most likely we can build this, this and this" If/when the client disagrees ("But I can get 2 people in Malaysia for that price!") you simply tell them to go find someone cheaper on oDesk.
Mass scanning using ping back for shell shock was controversial. Starting a remote shell would seem to cross the line.
This applies more than to just tech. One of my friends was interviewed by a reporter for Time about a chiptune album he worked on, and he had nothing but gushing praise for chiptunes - somehow the reporter twisted his words and even made up stuff that he did not say to slander the production style. Even when he messaged her to correct it, she did not remove the lies completely until he started a Twitter campaign amongst his connections to cry foul about the egregious misreporting, and threatened a Digg post (while Digg was still popular) - only then she relented.

These are lessons in being careful who you talk to. Din't let out more information than you feel you need to unless you trust them, as a guard against unscrupulous people.
If you buy a device that lacks flash support, and five years later everyone else finally gets around to trying to stop making things in flash, then it was a stupid idea for the device to lack flash support at the time you bought it.

Sure, a device can still be wildly successful even if its missing something important, but that doesn't magically make it a good idea at the time it was done.

The replacements for flash suffered from poor performance for a long time.
Am I the only one that thinks this kind of thing would be cool to see? I've seen logs of attacks, but I've never watched a botnet irc live. that would be crazy for me. Not really moving the conversation forward, but is this so commonplace that I'm the odd man for marveling?