skysight-inc/HackerNews huggingface dataset:
You need to elaborate. Adding the term 'Period' doesn't magically strengthen your argument.

Genuinely interested in your rationale though.
I still slightly regret completely eschewing Bitcoin until 2013 because it's inferior to Chaumian ecash on the dimensions I care about.

I do still have more faith in blinded token ecash vs. anything else.
Perseids made his counter-arguments clear in many places on this page, but your comment allows me to summarize.

> If the CA signature means anything, you don't need DNSSEC.

If DNSSEC is fully deployed and supported, you don't need CAs.

> If it doesn't, you've given control over the certificate to Libya.

If it (DNSSEC) isn't, you've given control over the certificate to any trusted CA in the world.

> It is easier to see the problem when you look at the real issue, which is that the NSA controls both the CA hierarchy and .COM.

Neither DNSSEC nor the CA system can prevent the NSA from doing their evil stuff.
# Scary!
rm -rf "$STEAMROOT/"*

Anybody who writes a line like this deserves their software engineer license revoked. This isn't the first time I've seen shit like this (I've seen it in scripts expected to be run as root, no less); it makes my blood boil.

Seriously. "xargs rm -df -- < MANIFEST" is not that hard.

EDIT: I shouldn't be so harsh, if it weren't for the comment admitting knowing how poor an idea this line is.
There are two angles to this. One, there could be some possible use for the more detailed data - but I don't want to be inventing fictious and biased examples so let's just acknowledge a possibility.

But the second, more important angle is that at this scale, there is no such thing as "anonymized data". There have already been papers showing that what is now called "anomymized" can be trivially deanonymized by mashing together other data sets and some computing power. Trying to hold on to the concept of anonymized data is futile - the reality itself is highly correlated and interconnected, and all those causal relationships will be reflected in the colected datasets. The more data sources you have, the easier is to deanonymize them all together.

So the choice is - either stop collecting data or accept that there ain't such thing as anonymity. What we definitely shouldn't do is fooling ourselves that we can do both. Datasets are and will be trivially deanonymized if anyone cares to do so.

EDIT:

> Data doesn't need names, places, faces, phone numbers, geolocation and social media accounts correlated and updated in realtime

Names - social studies. Places - social studies, urban optimization. Faces - social and medical studies. Phone numbers - dunno, probably something. Geolocation - urban optimization, crime prevention, social studies once again. The more data you have, the more interesting experiments you can devise.

I'm pushing that social studies example for a simple reason - this level of data collection is a holy grail for psychology, sociology, et al. Right now those sciences mostly keep faking "lifelike" conditions to test some theories and we all know how much problem there is with small sample sizes, unrealistic experiment setups, etc. Inferences based on natural patterns of behaviour of millions, or even billions of people would be much, much more reliable. We could finally learn a lot about ourselves, just by observing.
Someone in the process of crossing the road at a side street also technically has right of way over traffic turning into the side street.

OTOH, if you get run over, being right is little compensation.
Per a subsequent comment in the github thread:

"the ${0%/*} pulls the path out of $0, cd's into the specified directory, then uses $PWD to figure out where that directory lives - and all this in a subshell, so we don't affect $PWD"

So for example, that would take /user/amputect/seam_setup.sh and change directories into into /user/amputect.
But it was a windfall to every company not in the no-poach cartel, and made more talent available to startups and small companies.

And then, the economic benefits of talent-outside-the-giants flowed (via early-employee equity) to many of the same people who "lost out" on big-company salary-bidding wars.

The effects of such collusion on "the entire market" are thus pretty murky. If you've worked with any ex-Apple, ex-Google, etc people – you may already have been a net-beneficiary!
The only way a basic income can avoid being politicized and destroyed is by making it truly unconditional. See various government-run web filters as an example of the creeping scope expansion every non-unconditional program will encounter. The easiest way to get people to stop fighting over which conditions are the right conditions is to have no conditions.
How the E-Commerce Gag “Ship Your Enemies Glitter” Became a Nightmare
Yeah but that will just work as a point of no return for some. It has to be truly unconditional so there is no way to cheat it.
Note to all, prepend all your bash script with

"set -o errexit -o nounset -o pipefail"

It'll save you headaches.
> Poorer families care more about other factors — and less about academics. The study split families up into thirds based on the median income in their census tract. What they found was that the lowest-income New Orleans families were even more likely to pick schools that were close by, that offered extended days, and that had football and band in high school — and, conversely, they had a weaker preference for schools based on test scores.

Are we convinced that choosing schools by their test scores is the best way to choose schools?

The researchers started with a simple premise. Charter schools deliver equality only if parents prefer schools with higher test scores. Clearly some parents don't.

I can't imagine a universe where a better football program actually ends up being a wiser choice for your child than better test scores. Does anyone think we're better off, on average, even considering football to be more important? It just seems like test scores being more important is far and away the right answer.

So for me, the real question is, is there a way to convince parents that test scores are really all that matters without resorting to full-blown jingoism? More precisely, do we have to coerce the idea that test scores matter more than football?

Effective education systems have all sorts of coercion, and the most successful ones tend to treat test scores as the #1 priority. German high school students are tracked into different tiers of educational attainment. German laws restrict the ability of private schooling to provide an alternative to the national system's decision, "Test scores are important, your child is stupid, and he's going to become an apprentice." Anecdotally, I've learned that some Korean parents track their poor-performing daughters into performance arts (i.e., playing violin and singing). And in my top-ranked public high school, we ghettoize students into honors/non-honors starting Freshman year. My takeaway from these high-performing scholastic environments: the child doesn't choose how important test scores are. The system chooses for them, and it chose "test scores are important."

If charter schools are to succeed, and indeed any objective educational reform, I tend to agree with the implied argument of these researchers. Test scores are more important. Now, what do we do with the people who disagree?
The Sociology of Not Being Cruel, According to the Infamous Milgram Experiments
Game Developers Report Growing Profits and Interest in Esports
Photoshop fail in scientific publication (min 2:50)
PipelineDB (YC W14) is hiring engineers
San Francisco, CA - Full Time Only

We're on a mission to build a new type of database for a modern world in which information is constantly moving, and moving fast. PipelineDB runs SQL queries continuously on large volumes of streaming data, giving companies the capability to easily develop scalable, realtime applications and services using only a familiar SQL interface. No application code is required.

This inherently involves solving a lot of big problems, many of which are novel. We’re looking for creative engineers who appreciate the value and freedom of choosing their own projects, approaches, and working with other top talent in a low distraction, streamlined work environment. Our small team has backgrounds from Berkeley, MIT, Facebook, Locu and AdRoll, and we're all doing exactly what we want to be doing: building a groundbreaking new product out of thin air.

We are well funded by top investors including SV Angel, Susa Ventures, Data Collective, Paul Buchheit, and more.

If you’ve been waiting for an opportunity like this, please send your resume and a quick blurb about yourself to jobs@pipelinedb.com.

About the position:

As an early stage engineer you'll ultimately own a very large part of the product. Which part of the product you take charge of depends on where your interests are, but there are several different potential areas of focus. You'll be entrusted to make sound architectural decisions as well as implement your vision effectively. We review each others' code for quality, awareness, and learning, so you'll spend some time contributing your valuable perspective to those efforts as well, although the vast majority of your time will be spent designing and building your own projects.

There is also an optional opportunity to help produce technical and marketing content, speak at conferences, interact with customers, and work as a developer evangelist.

Requirements:

* Bachelor's degree or higher in CS or related field

* You've worked with large C/C++ systems in a Linux environment and are highly effective at navigating them

* You understand the difference between good code and correct code, and you care about testing

* Strong understanding of concurrency

* Strong system-level debugging skills--you are not intimidated by the obscurest of nondeterministic behaviors and race conditions

* Strong understanding of CS theory--you are able to translate theoretical concepts and academic research into practical code

* You have a habit of figuring out how something works before asking someone to explain it to you, regardless of how deep the rabbit hole goes

* Strong understanding of how performant storage systems work

Bonus points:

* Experience with/contributions to PostgreSQL, Storm, Kafka, Samza, Kinesis, or Esper

* Experience with database internals

* Experience building distributed systems

* Experience building realtime systems

Benefits:

* Full medical/dental/vision insurance

* No set work hours--work when you feel smart

* Choose your own setup

* No vacation policy other than that it is strongly encouraged

* Large equity ownership

--

jobs@pipelinedb.com
Hmm thank you for the story and the awesome work. Though I use DocPad right now Octopress / Jekyll is a great as well. And maybe we have room for another static site generator....The one I am working on :)
[More tweets] DHS agent acknowledged under cross that he was preparing an affadavit for a warrant to search Karpeles's email. DHS agent's OWN THEORY around early to mid 2013 was that Mt. Gox and Silk Road worked in tandem. Investigation found that Mutum Sigilum, a Karpeles holding, had registered silkroadmarket.org
Frankly speaking, it's just "肥水不流外人田" in Chinese, which probably means keeping profitable things in one's own farmland in English. We always presume the higher orders have almost the same goals with the country. However, it is not the case every time. Also, state-run investment in such a large scale will simply lead to just another massive misallocation of the investment. For many officers, it's another opportunity to wash those money and put into personal accounts.
The mystery of shelshock solved
I've met a bunch of Tradecraft-ers that did sales, UX and growth there. They're all super smart and ambitious. With the addition of engineering, I guarantee we'll see a big company come out of Tradecraft in the near future.
The $100 checks are kind of insulting IMO. I'd rather see criminal sanctions or at least fines against the individuals responsible. Any fines would make more sense as going into a training program to expand the labor pool.
Don't know how to pair wine with food? Problem solved
I think it was more that attendees at a conference just log onto the nearest available wifi, regardless of whether it is secure or not, not what sites they were going to

They were also logging onto government mail servers for example, which, whilst it may be boring to you or me, there are probably people out there who can make use of log in details for various sites that may have been accessed over open wifi.

EDIT: The source article makes it a little clearer than the arstechnica one http://www.thelocal.se/20150114/young-pirate-hacks-into-top-...
The biggest lesson here is that backing up your files is extremely important. Both local backups and remote backups.

I like the 3-2-1 rule:

At least three copies,
In two different formats,
with one of those copies off-site.

Software is written by humans who will undoubtably miss a corner case and not think of every possible environment.
In the US it's not at all an assumption. Easily 99% of roads were built for the operation of cars.

Everything else is just a dirt path, and I know people that have to drive on those if they want to go anywhere, too.
Secrets to Stress Relief
Precisely what I meant. In those cases its use serves little purpose save as a shibboleth.
The problem with the CA system is that it fails to resist nation-state attacks. DNSSEC not only has that problem, it has it by design. That's the point made by the post. All you've done is restate it.
I was curious about laws and such (since they said in the article that children under eight were legally supposed to be under supervision in that jurisdiction), and came upon this study on unsupervised kids: http://www.childtrends.org/wp-content/uploads/2003/04/unsupe...

That says that 7% of kids age 6-9 are under self care. Not a huge percentage, but millions of kids. Which is to say, there's nothing unusual about kids on their own – but maybe to avoid criticism, keep them hidden away inside when they are on their own.
We figure that at startups, you either make shit or sell shit. With engineers and product designers, we have makers. With growth and sales folks, we have sellers. So yeah, all the ingredients are there.
The unfortunate thing is that the police won't even bother to ticket drivers who fail to yield to pedestrians in a crosswalk. Most US drivers have no concept of how right-of-way works and their obligations to yield. I've taken to using an airhorn for busy crossings and have been chewed out by cops for expecting my traffic rights to be observed.
This is a danger of me-ware being used before it becomes software. Software assumes and defends against others using and running it. Me-ware makes no assumptions because me is the only one running it.

The transition from meware to software is a hard one - and usually it's how we get terrible reputations as an industry. Basically it's a prototype till it's burned enough beta users.

Edit
OMG - that is actually Steam from valve - I take it back - this is supposed to be software.
Is there any good reason to use this approach over the more readable 'dirname $0'? Not that it would have made any difference to the bug in question of course.
Zikes is incorrect. It is not "easily 99%".

http://www.theguardian.com/environment/bike-blog/2013/apr/16...
If the G1 had been discontinued at 3 days' notice - and without there being a replacement already on the market - I'd have expected people to have some pretty harsh things to say about the future of Android...
Ohio City’ Website Hacked by Free Syrian Hacker
For those who don't know that's the thread macro and IMHO it should be a bigger selling point of the language. I think of it like the Unix pipe operator (i.e. "ls | grep X") but for programming.

https://clojuredocs.org/clojure.core/->

edit: I usually pretty-print it, too:

(-> g ;; input value
(partial a) ;; runs as (partial g a), hands off A
(comp f) ;; runs as (comp A f), hands off B
(map x)) ;; runs as (map B x), this returns a value

or

(-> 5
(< 10)) ;; runs as (< 5 10)
=> true

with a little tom-foolery (lambda functions) you can have the incoming value land anywhere in the function's argument list
Saigon isn't that bad today. A very modern, metropolitan area. Hanoi on the other hand...
I don't want to blame anyone, but maybe there should be foolproof default security measures that prevent something like this from happening. For example rm -rf called on a home, documents, music, photos etc. directory could require an additional confirmation, perhaps through a GUI.
Source maps get you line numbers but not live objects - you're still stuck inspecting JS objects.
I left a large metal concert in Leipzig at about 3am in a big group, wandered straight across the empty dual carriageway against the red man, and found myself alone on the other side being tutted at by 50 metalheads opposite.

I live about 1km from the Deutsche Schule. I was surprised to find three German bakeries within 5 minutes walk of my house when I moved here...
A while ago I made a small program to cache Steam's grid images and search missing ones (https://github.com/boppreh/steamgrid). More of an experiment in programming in Go, really, but it works and makes Steam a little better.

When I tried on Linux, it threw a permission error. Turns out Steam installs the folder "~/.local/share/Steam/userdata/[userid]/config/grid" without the executable permission bit. Without this bit no one can create files in there, Steam included, and the custom images feature gets broken.

I reported the problem, saying they should fix their installer, and got a "have you tried reinstalling it?" spiel. When I said I did, and manually changing the permission fixes the problem, so it must really be it, they closed the ticket with "I am glad that the issue is resolved".

This was a ticket at support.steampowered.com, because I didn't know Valve had a github account. I would open an issue there, but I don't have a linux installation to test again and this sort of misunderstanding burns a lot of goodwill.
Open and public next-generation peer review
The programmer committed a cardinal sin to be sure. But, so did everyone on the code review that let it slide.
Yep, my thought exactly. My standard bash header is

#!/bin/bash
set -eu
IFS=$'\n\t'

(Wish there was a shorthand version of pipefail, then I'd always use that too.)
Let him be provincial. I work downtown Seattle and see people jaywalking all the time
Since this kind of thing keeps happening, isn't there a need for a safer tool than shell scripts? Maybe with a little bit more safety around null/empty variables and not as stringly typed?
In case you read comments first: this has nothing to do with the bash vulnerability, and rather is about brain injuries sustained (typically) in combat.
Yikes. That should never have passed a code review. I know mistakes happen, I often defend screw-ups, but anything in a shell script that has an "rm" command should automatically get the squinty eyes.
A pragmatic approach would be to simply leave pharma alone, at least initially, as they actually need strong incentive for R&D.
It should be noted, as listed in that issue thread, this is apparently also present on Windows (same bug in two different shell scripts!).
Something like this with Steam happened to my friend not too long ago. It was very saddening because he literally lost years of files (including personal projects) and salvaged what he could. That was with the Steam Beta and I caught Steam doing this myself (after he told me what happened). I was lucky to stop the script and switched out of the beta. At the time he reported this to Valve themselves and said they were "investigating the issue and knew of it". Seems to still be here, sigh.

I know the morale here is keep your files backed up but come on, this is a ridiculous issue Valve still hasn't fixed.
Would this have stopped things getting deleted?

if [ -z "$STEAMROOT" ]
# something isnt right...
Gotta question why they used -f.
Would you be so kind as to expand slightly on what "information from all the pixels" means to us plebeians?
I'm surprised Italian cuisine is just 3rd in just 2 States... sigh!
I don't think the point was to catch them surfing other sites, but more to show people how they can be fingerprinted and identified by doing "metadata" surveillance.
For something to 'sound believable' there must be some evidence presented for the claims that might be believed.
Hi Asim :) Nice project. Like the use of consul too - we're using it and getting a lot of mileage from it.
There's another related one: Get Shit Done (GSD).

I suppose you could combine them to Just Fucking Get Shit Done JFGSD
Do you have proof that there doesn't exist any tarmac T, home H and corner store C, such that a line segment between H and C intersects T?

I suspect I could find an instance of such a triplet by a casual survey of the surrounding areas of airports via Google Maps/Earth.

Without either, it remains an open question.
In my town, they take pedestrian rights very seriously. They even have undercover officers use cross walks and ticket driver who do not yield.
Jury Nullification?
If by "startup space" you mean the set of problems in the world that can be solved by tech startups, this is clearly not a pie that is carved up, rather uniquely a pie that grows indefinitely. Startups, as a whole, benefit from other startups far more than they compete w/them. We in America or Europe can only benefit from an improved startup ecosystem around the world, as customers, investors and founders .. and most importantly as human beings.

Many successful startups, for example, were directly conceived as ways to fix the problems of other startups. Indirectly, a startup such as Uber was only possible due to the mass adoption of technology driven by Apple, Google (and Samsung, Xiaomi etc) and an app ecosystem invigorated by hundreds of other startups.

There is certainly competition within industries or niches, i.e. Uber vs Lyft. But the "startup space" is really about creating new (or at least re-configuring existing) niches in the "non-startup" world.

So while I doubt this particular initiative will work, or even get close to returning the investment, we certainly shouldn't fear its success. Rather we should celebrate successful startups regardless of where it comes from, as it means that a problem has been solved and the human condition improved in however small a way. The idea that our species is going to run out of problems that need fixing seems a bit paranoid.
Steam in docker, anyone?
Dealing with strangers in a public space is often a problem women have to endure.

Both my sisters have told me about borderline harassment and/or inappropriate attention they received while going about their daily lives.
You're too kind :)

Granted, part of the blame lies in the archaic Unix security model which doesn't sandbox applications. But ANY line containing "rm -rf" should be reviewed by the most senior dev in the company, or at least one who actually understands shell scripting. It has such a terrible failure mode, there's no excuse not to. (Especially when the dev to blame knew that it's "Scary!".)
Had no idea this site went so viral. 1 million visits in 24 hours on a new site is insane!
Public key pinning seems to be heading in a direction that relies on the current CA model. For example, see https://tools.ietf.org/html/draft-ietf-websec-key-pinning-20, or https://code.google.com/p/chromium/codesearch#chromium/src/n... (Chrome's pinned certificate list -- which has a total of _9_ non-CA entries).
Can you at least explain what this is doing, outside of saving me headaches?
We all make mistakes when coding. However, knowing an engineer at Valve did this in a way makes me feel a little bit better about my abilities as a software engineer. At the end of the day we are all human and makes something like working at Valve/Google/Big Name Corp a little less daunting.
Pure manipulation of values describing impure computation.
> in reality, everything is fine.

what world do you live in?