skysight-inc/HackerNews huggingface dataset:
In addition, if you use Acquia, Pantheon, Platform.sh, or some other hosting providers that directly support Drupal, they may have already at least partially mitigated the attack. But you should still immediately update your code either by upgrade to Drupal 7.32 or by applying the one line patch mentioned elsewhere.

Note that Drupal 6 is not affected (it didn't use PDO, so this parameter parsing functionality doesn't exist).
"Why doesn't anyone ask the right questions?"

While we indeed don't want to get political, that's impossible and I have to point out Jim Treacher's comment on the role of the US national media:

https://twitter.com/jtLOL/status/501493192953319424

Modern journalism is all about deciding which facts the public shouldn't know because they might reflect badly on Democrats.

For example, yesterday I caught the Washington Post in a vile and consequential lie (CDC director Frieden is a political hack, going back to the ban on large drinks etc. in NYC, see also his contradictory comments in two back to back sentences on bus travel); the author is "a general assignment national reporter for the Washington Post":

http://www.washingtonpost.com/national/health-science/dallas...

From the beginning of the Ebola crisis, disease experts and Frieden in particular have insisted that U.S. hospitals have the training and equipment to handle a highly contagious patient. On July 21, Frieden said that “Ebola poses little risk to the U.S. general population.” Any advanced hospital in the country has the capacity to isolate a patient, he said. “There is nothing particularly special about the isolation of an Ebola patient other than it’s really important to do it right,” he said at the time.

Did you notice the quick shift from and to direct quotes with a paraphrase in the middle? I noticed that because the real quote is now infamous and disastrously proven false:

"Essentially any hospital in the country can take care of Ebola. You don't need a special hospital room to do it," Dr. Tom Frieden said Oct. 2. "You do need a private room with a private bathroom."

BTW, to my general knowledge, ER rooms do not have private bathrooms.

Anyway, my current research into this is reading Albert Camus' 1947 La Peste (The Plague); inevitable partisanship aside, I'm getting the impression a lot of this is universal when humans are faced with such a dire thing. It's not like we don't have millennia of experience with plagues.
Well, there's always the option to go read it yourself: http://www.gpo.gov/fdsys/pkg/CRPT-104hrpt736/pdf/CRPT-104hrp...

HIPAA is a very large, encompassing bill that provides numerous protections for patients. In particular, it provides the necessary legal requirements preventing healthcare providers from disclosing personally identifiable information - typically, things like SSN, name + date of birth, name + zipcode, etc. Anything that could possibly be used by someone to identify who the patient is should not be discloses. HIPAA also lists some technology requirements, but if memory serves me correctly, it only goes so far as to say "industry-standard practices". There's also numerous parts of HIPAA that pertain to billing and insurance, but I don't do billing so I can't speak too much on those.

Another bill to check out would be HITECH.
Was there? I know there where one or two companies making Sparc laptops that ran Solaris, but I don't think Sun ever made a laptop.
No, I did not use libhybris. It boots the kernel I've patched and it uses a full Linaro filesystem on a micro SD. The Android FS is not even mounted when running GNU/Linux.

The SoC is RK3188 and it uses a proprietary bootloader to do some hardware initialization IIRC.

The device does have an UART port, which I've used.
I'm still unclear as to whether the linux apps can be deployed to a docker engine running on a windows host, and, vice-versa, whether docker windows containers can be run on a linux host. The announcement seemed to be clear that both of these are the goal. But your GP post https://news.ycombinator.com/item?id=8458603 causes me to doubt.

Is there a missing comma in each sentence of the goal? It seems like there should be one after "use" or after "engine":

1) [after "use"]
Package [on a Windows client] your Windows app in a docker container, use same tooling you would otherwise use [on a linux client], to deploy to a docker engine running on a Windows host
Package [on a Windows client] your Linux app in a docker container, use same tooling you would otherwise use [on a linux client], to deploy to a docker engine running on a Linux host.

2) [after "use"]
Package your Windows app in a docker container, use same tooling you would otherwise use to deploy to a docker engine [running on Windows or Linux], running [the packaging step] on a Windows host
Package your Linux app in a docker container, use same tooling you would otherwise use to deploy to a docker engine [running on Windows or Linux], running [the packaging step] on a Linux host.

I added the implications I understood to highlight the difference the comma placement makes. If there is no comma it's pretty ambiguous / confusing to me on which platform the docker engine is running. I believe from this post of yours that I have misunderstood the announcement, and that windows apps will be able to be made into docker containers that can only run on windows docker engines.
"optimistically, this might someday be possible"

Seems a bit less certain than the title.
Britain’s most racist election: the story of Smethwick, 50 years on
For acute treatment of things like this the US health care system is "smart". If you present with stuff like this to an ER they take care of you, otherwise you, not to mention the whole world, would hear of people being dumped in alleys or hospices. That's been the law since after WWII BTW.

Now, how many US hospitals will be bankrupted by the measures needed to get ready for, and deal with such patients, is another question altogether: http://pjmedia.com/tatler/2014/10/14/ebola-preparation-will-...
You are quite right, I should get more. By all means hire me at 50 an hour. If you'd do that, I'll go as far as to quit my safe job so all my time can go to you. You won't be disappointened ;)
Ask HN: What would you hack on an 12-hour flight?
Imagine that you have 12 hours to fly overseas. Its during the day, so sleeping isn't much of an option...

What would you work on? Take in consideration that the battery of your laptop/tablet/smartphone won't last the whole trip!
"she's not feeling well, but is below the temperature threshold established by experts" AND she was in close contact with a known Ebola infected patient?

There, now your question is factually complete.
In the example of Lucas, the organizational structure is only at fault in so far as it allowed Lucas the creative control to make bad decisions.

But that is generally a level of control we want from movie directors or software projects. The criticism was of how the power is wielded, not that the power structure exists in the first place.
Windows embraces Docker
Core size isn't just a matter of the number of gates, but also their size. One important tool for reaching high frequencies in chips is to have gates that drive more capacities load be wider and therefore higher power. But if your goal is to have an architecturally identical core that's lower power one of the tools you have to accomplish that is to not do that. There's probably other ways to shrink a core at the cost of performance, as well.
It's been known since antiquity that sometimes geniuses sire idiots. The hyperfocus on genetics as the source of IQ is probably wrong. Let's remember that we are well educated apes and if not for the education we would still be looking at sticks and flint without realizing their combined value.
I'm also an old fart who wears relaxed fit jeans pretty much all the time, but some of them have much smaller pockets than others. And I'm 6'3", with a 38" waist, so it's not a matter of my tiny pants.

However, it's not just a matter of "will this rectangle fit into this opening". Even my smallest pockets fit the phone. But even with my Nexus 5, if I have headphones plugged into the phone, walking up stairs feels precarious -- like I'm one wrong move away from snapping the headphone jack.

I don't want to just fit my phone in my pocket. I want to be able to, for all intents and purposes, forget it's there if I want to. I don't think I could do that with a Nexus 6.
Yes, flight simulators for the US DoD were long
one of the main drivers of high end (not so high
considering what we have now) digital graphics.
There's a very large gap between your first two sentences, especially since it's quite common for there to be large variations in intelligence among people raised/educated in similar environments.
Alan Turing, Ada Lovelace, and Rene Descartes on Artificial Intelligence
Getting started with 1Password
How would ou 'figure out when large trades are going to happen' without violating 10b5?
Indeed. When Emory, one of the 4 specialist hospitals with 3 beds set up for pathogens like this, received their first Ebola patient, they quickly realized sending samples to their main lab was a non-stater. One "oops" and you'd have to shut it down for decontamination, while your other patients are left hanging. This Dallas hospital is rather large at 900 beds, so that would be ... bad.
The library near me actually has to pay licenses for digital copies of books that they then get to 'check out' z number of times rather than based on the number of physical copies they have.
Best metabolism boosting foods
There is a difference between disagreeing with someone's estimation of costs versus benefits, and finding their reasoning "perplexing." In fact I think the benefits of criminal drug enforcement does not outweigh the cost of enforcement. But I can easily see how someone might come to the opposite conclusion. Crack babies aren't a made-up problem. Many homeless are drug users. Meth really is ripping apart families in rural America. All you have to do to conclude we should make those substances illegal is underestimate the massive cost of drug enforcement. And that's not an irrational thing to do--its not like either side has concrete numbers to point to.
The fact that this content-free advertisement for Google gets upvoted to the front-page of a community where most people can see right through it (regardless of how they personally feel about Google) suggest HN is getting astro-turfed.

Seriously, who upvotes this?
If things were to get really, really bad, we'd shut down large gatherings of people like NFL football games.

Well, after we replace the current clowns running the show with real public health types.
Why Is Node Being Forked?
PDO's prepared statement "emulation" is ridiculous, and turning it off might have blocked some forms of this vulnerability since it would prevent breaking up one query into many. But fixing PDO wouldn't have entirely prevented this fiasco, either.

No amount of prepared statement kung-fu will save you when the querystring itself contains untrustworthy data. Which is exactly what Drupal is doing here. It puts untrusted, potentially non-integer array keys directly into a querystring. Even if Drupal used a database library that supported proper prepared statements, it would have been owned just as well, only slightly less severely.

It's similar to another, much more common misuse of prepared statements: using untrusted values in the column name.

Still, it's always a good idea to set PDO::ATTR_EMULATE_PREPARES to FALSE as soon as you create any instance of that bloody class.
Apocryphal means it didn't happen. Stuff like this in fact happens all the time. So does child abuse and neglect due to alcohol for that matter. M

The point isn't to say that these drugs should be illegal. It's to be intellectually honest about what proponents of drug enforcement are really basing their decisions on. They're not taking on the high functioning hipster who smokes week on the weekends. There are real problems caused by drug use that are a factor in people's decisions.
Good to know. I thought it would be like this but didn't want to assume.
Well yes I can go read the act but at this early stage don't have that much time to spend on legalese without first understanding the contours. I'm looking for simpler explanations, case studies, blogposts of individuals/ or companies; some of which your rest of the comment provides. So thanks for that.

Would you mind sharing your email (mine is in my profile) in case I wanna bounce off a few Qns? I promise to keep it short. TIA.
IT-Ebooks.info – Download any O'Reilly book for free as PDF
Creating a Great Corporate Culture
I think you've hit the nail on the head here. We've had a similar experience building http://www.zonino.co.uk. Plenty of interest from employers but without the traffic it's hard to justify charging. This is where sites like Stackoverflow really stand out because they already have a flow of relevant and highly engaged traffic.
Yeah, who uses SSL/TLS
this is cool, thanks for sharing!
No: if your passport includes a stamp from the 3 affected countries (no doubt later to be expanded), you don't get in, period. Or you go straight into isolation for 21 days.

Our non-existent southern border is a further problem, mitigated to a degree by the extra time it takes to travel that way. Not to mention that if we're concerned, Mexico should be bat shit scared of Ebola breaking out in its various slums; they have little more chance of containing it in them than these three West African nations.

A little bit of research into what everyone used to when we had widespread, often endemic incurable diseases running rampant, will show that we have solutions to Ebola.
Then post wouldn't show up in the first page. HNO (hacker news optimization :P)
You don't need to wait for permission to build this thing.

Start now.

Building a product and marketing it are two completely different things. Most of your concerns are connected to the marketing aspect (no connections etc) but there doesn't seem to be anything stopping your from building it?

If you build this thing and it is a flop then you still come out with a few wins: you show yourself to be someone capable of building a complete/ussable system and you have something to put onto your CV. You'll also probably learn a bunch of new things and come out a better developer.

Once you've built a proof of concept/MVP then you are in a better position to attract some people: showing your work to people is going to get more interest than "I've got this idea but I've done nothing with it" will.

Sales and marketing are a whole different ballgame and are fricking hard but I don't think you need to worry about those yet. Build the thing first, then worry. You have nothing to lose from building it and everything to gain.

"Would you focus on networking and save your ideas until you felt like you were part of the world? Would you focus on saving money, and plan to move and get a foothold in California? Would you ask for time off work and develop a prototype in private?"

None of those, I would build the prototype in my spare time, the safest option as you still have your status quo if the product does not take off. The Web gives us freedom to start companies for next to no money from anywhere in the world, the fact you are not in Silicon Valley does not hold you back at all.

Stop looking for excuses and getting to work!

Good luck.
That would be an iPad Mini Air
N is the number of variables in the system -> so considering your network problem, it should correspond to the undirected edges in the graph...
First representation of the Myth of Persephone
How to Work Remotely and Live to Tell the Tale
You feel like Hermes will speak to you!
Join URX (YC S13) as our first Developer Evangelist to help grow our ecosystem
How to choose “the right car”
Put down your preferences and needs in the order of importance. A case in point, a car must be:
• cheap on gas because you drive a lot
• reliable because you do not want to spend too much money on repairs.
• have side airbags
Find us on www.calemonlawinfo.com
See also: Flynn Effect
https://en.wikipedia.org/wiki/Flynn_effect
Boring icon, stock-photo screenshots, bad description, bad review => nobody will download your app like this.

First, you need to talk to people and have them try out your app. Email your friends. Get them to use the app, at least try it. Get feedback. It's not marketing you're missing, it's product. Good luck!
Incredibly insightful and honest.
Technically, wouldn't it be a strange thing for a Human (or any species) to help perpetuate DNA within their own species that is not their own?

I can see raising a child that is not one's own - because it's enjoyable and fulfilling to have a child. But, wouldn't the creation of 'Super-Anything' Humans be one step closer to the Human hive mind?
What a wonderful forum thread debate :)
I agree with principle that software gets done, regardless of label. Strong project management and cohesive skilled team, will work well, regardless of methodology label.
The article assumes that if 1000 positive gene changes are responsible for increasing intelligence, you'll get 1000 increases of intelligence. It's much, much more likely that a lot of those gene changes overlap, meaning combined changes won't affect the IQ any more than either/or changes would.
The next challenge to solve is anti-abuse, and it's much harder than anti-spam.
Opins helps you see what people 'really think' about your content or products?
Updated Secret Trans-Pacific Partnership Agreement – IP Chapter
We currently have our eyes on Churn Buster. It looks to be solid and we've heard very good things.
This is the HTC app I talked about:

https://play.google.com/store/apps/details?id=com.htc.ptg

I am not sure what is different between this and the official BOINC app, apart from a sleeker interface. Both do the same thing.
Was about to post something similar. This doesn't really add much over sites like nomad list which already have job listings and a large audience.

I think it's telling that all the job listings are development based...
Slightly scared: http://www.theguardian.com/business/blog/2014/oct/16/six-rea...
I don't see it. I have message, settings, new post and gallery
Very interesting! I've noticed that some people can just "keep it in their head" (including snacks) for 1-2 days. I guess their memory is much better than ours, heh! I enter it immediately after eating as well. But I use the mobile phone since I don't snack that much.

Why did you care about other people noticing the notebook?
Northeastern Grads Launch Waylz – Gamify the Stock Market
What you are slightly experiencing is the East coast/West coast culture shift.
Not sure why the downvotes, but I can't see a flash at all on the back of that thing.
I like reddit now on my nexus 5 and alien blue on the ipad
agreed. Also, a price range wouldn't hurt.
Using http://www.myfitnesspal.com/tools/bmr-calculator, it seems that "by default I burn around" 1.9kcal per day. However I've found it quite easy to hack 700 of them into a day just by exercising for 10 minutes and having more walking meetings. In your case, do you consider walking exercising?
How does Satago improve on Freshbooks? It offers automatic payment reminder emails and a breakdown of debtors, and the like.
Please note that in this case the prepared statement gave the false sense of security, but is not actually responsible for the vulnerability.

Due to the statement being prepared, all bound parameters are correctly encoded -- not the parameter names themselves though, which Drupal should have sanitized first.

Letting $data through the array_values() call will give you a zero-indexed array, which gives you predictable and safe parameter names.
Steel mills and cement factories for a start.
Glim: API Endpoint to Resize Images
A look at Italy’s startup ecosystem – just in case you thought there wasn’t one
Not sure on the downvotes but obviously someone didn't appreciate my reference to Asimov's Foundation trilogy and the mathematical predictions of social behaviour.

It all falls over when The Mule appears! (Sorry if this is a spoiler for you)
The nearest linux equivalent is probably "xwd".
Google Facebook Paypal Godaddy all are still using SHA-1
Most famous online platforms as Facebook, Google, Paypal, GoDaddy are still vulnerable and under risk.

They are still using old and less secured SHA-1 Algorithm.

https://shachecker.com/check/www.google.com

Whats your views? Is migration from SHA-1 to SHA-2 is important or not?
I'm wondering why no iOS/OS X devs aren't mentioning the "Quality" of Swift "1.0". The amount of issues is really stunning and IMHO, nowhere ready yet.

Xcode doesn't seem to play along with Swift either, the whole integration is quite buggy yet.
Ask HN: How expensive is SF?
Background: I lived in Toronto. I've considered moving to the Valley for a software engineering job. I used to consider a 120k salary the stuff dreams are made of. Then I've had people tell me that the cost of living in San Francisco is so high that you won't save more than 15k of that yearly, and even that requires some frugality.

For a single young person, how true is that?
Naruto Shippuden Episode 382 English Sub ナルト疾風伝 382
It does seem to be the majority, from all the anecdotal evidence of that being what people complain about.

Maybe I'm weird. I don't care at all about one-handed use. For me the difference is being able to put it into my pocket without snapping off the headphone jack trying to waddle up a flight of stairs without bending at the hip.
The thing about bubbles is it sort of hard to predict. Also how many times have we seen the same bubble. Investors have already learned from 99 and they will short any IPO/Public company stock that does not have any significant growth and/or profits. Look at Zygna and Groupon, probably made allot of short sellers rich.

What happened in 99 is already factored into the market. The public stock market is dying to short sell over hyped companies that under deliver.

The situation right now is unprecedented. With the Fed keeping interest rates low for so long. LP's have no other choice but to invest more of their money into public stock market and the private markets through VCs. I can't seem reduce their exposure until there are viable options. The Fed won't let that happen.

I can see a scenario where if somehow startups burn up all their capital and go under. Somehow the entire VC fund goes under. LPs might have to pull money from public equities to cover their startup investment losses.

If one or two big startups like Airbnb or Dropbox go under. The worst case scenario could be really bad, as it could have sever ripple effects through the start up ecosystem. Eventually hitting the public markets and normal people.
Very well written and inspiring for us dreaming of working from home but don't even dare to try.
Systems, maybe not, but we definitely have the best researchers and minds in the field.
CSS-Only Solution for UI Tracking
I just started a new WPF application, I don't think it is going away any time soon.
Uber rider claims she was kidnapped, company says allegation is 'inaccurate'
16. Sep. 2014 - Notified the Drupal devs via security contact form
15. Okt. 2014 - Relase of Bugfix by Drupal core Developers

I know it's open source volunteers & all, but that seems like a rather slow reaction to such a critical vulnerability with a simple fix, doesn't it?
Show HN: Web development IDE running on Android
I'm not rich at all and would have to save for a little while to afford one of those, but I don't feel like $400 is expensive at all for one such device.
Ello Invite Codes
And with a little more automation, you can merge steps 4, 5 and 6... and you've now reinvented OAuth 2 :)
But which schools are the best is the question?

Anyone taken courses at these places? What were the good and bad of it?
I second the opinion regarding OSX servers; not only is Xserve long dead but the "server" component of OSX is an application that bundles mostly open source applications with a GUI, if I'm not mistaken?

This appears to be aimed at SOHO users and not racks and racks of servers in a data centre.