skysight-inc/HackerNews huggingface dataset:
I didn't know there were two. There don't seem to be several. This seems to be the best summary of the situation: http://www.jcb-sc.com/qmail/guninski.html

Those two definitely aren't "exploitable on any installation of qmail", as you say; they aren't exploitable on any 32-bit installation of qmail, any ILP64 installation of qmail, any installation of qmail with a reasonable data size rlimit, or any installation of qmail on a machine with less than a couple of gigabytes of RAM and swap, if I understand Guninski's post. If you're running qmail processes without data size rlimits, you're vulnerable to resource-exhaustion denial-of-service attacks in any case. There are established guides to configuring qmail that tell you to set rlimits. Burley's page I linked above says he was running with rlimits before the bugs were found. I'm pretty sure that when I ran qmail, I didn't set rlimits, though.

One of the two bugs is in an unprivileged process, but coupled with a local privilege escalation bug, should be sufficient for root. The other is in a process that already runs as root, although for POP, which was a thing I didn't run when I ran qmail.
You misunderstood, he's calling the cops thugs, not the protestors. If you read the rest of his website you will see that he refers to police as "thugs" regularly:

> US citizens: call on Obama to curb militarization of thugs.

> Everyone, call on Pasco to fire and prosecute the killer thugs

> "Flood Wall Street" protesters have been acquitted of charges; the thugs' order for them to disperse was ruled unconstitutional.

> It is good that they were acquitted, but there must be some penalty for thugs that violate protesters' rights.

and so on.
Will 360 degree YouTube videos can make a real difference?
Khan Academy offers free devices and Internet access (for schools)
I am appalled with how much people get away with and maintain their innocence.
I can be disgusted at this can I?
I just dived into some of Udacity's data science classes and it's very easy to get started with numpy. I'm just scratching the surface but it still feels amazingly powerful. Pandas is another great tool that goes hand in hand with data, its like Excel inside your Python REPL with SQL tools and more.

Online class is one way to start, another would be picking a dataset and a goal for it and diving in. Kaggle.com has a number of content projects and a great deal of past data science stuff that's open sourced, I've been browsing it for ideas and approaches. Another source of inspiration might be local open data initiatives, your city, county, or state might have a pile of data available for interesting projects.

I think half the battle, at least for me, is not deep statistics or other maths skills, it is just diving in and trying stuff.
Jay-Z buys Swedish lossless streaming audio company
Not people though.
Stallman always refers to police as thugs. In essence he is saying that the police were responsible for what happened. His political notes are actually quite good:

https://www.stallman.org/archives/2015-jan-apr.html
Cool command line image scraper
Email reads like this:

Hello,

We’ve heard from a lot of teachers that they would love their school to participate fully in LearnStorm but it has been challenging since many of their students don’t have enough access to the online content.

So we’re thrilled to announce some help for schools in the form of free devices (e.g., Chromebooks) and free home internet access!

Unlock our accessibility prizes for your school!

Here’s how it works: If ...

- A majority of your school's students are in the Free and Reduced School Lunch Program
- Half of the eligible students at your school (those in grades 3-12) sign up for LearnStorm
- Students do at least half an hour of work on their math skills in LearnStorm

Then the school will unlock free devices and home internet access for students:

- Google.org will fully fund classroom technology up to a value of $7,500 for smaller schools (for example this could buy one laptop cart plus 30 Chromebooks for a school) and up to $15,000 for schools with more than 300 students through DonorsChoose.org.
- Internet Essentials from Comcast will fully fund 6 months of free home internet access for all eligible students and their families.

The first step is to reach out to your principal and teachers and help as many students as possible get started at Learnstorm2015.com. When your school unlocks this prize, we’ll reach out to your principal with next steps to claim!

If you’d like more information, please reply to LearnStorm@khanacademy.org.

James and the Khan Academy LearnStorm Team
And anything in the trash gets automatically deleted in 30 days.
You don't need to plan it.

In most companies if you don't fight actively against it, many times also being seen as not wanting a career at all by others, as most of us get pushed into management.
I don't know why but I got mine too.. ಠಿ_ಠ
I lived in Texas for 3 years during the drought and had no idea they were growing rice.
You say "socialism" like it's a bad thing.
Personally I am not for real name policies, but I do believe that these problems should be fixed properly if possible, which is why I consider employee gagging the worst part of the Google+ nymwars for example.
I honestly thing Stallman is more relevant now than ever...
If you know the management is not technically competent, the responsibility also lies on the developer to communicate things on their level. If they ask how long will X take, you don't answer 1 day, and then another day to test it. You answer 2 days. If that's outside their budget then forget about that feature and let sales find a new feature they can sell that can be developed within the budget.

This also boils down to the ego thing, many junior developers are proud to give short estimates to show off how quick and good they are at their work. But those short estimates are always always always just the estimated time to get a quick prototype working, where things are configured as you go in the debugger, not something that is robust and will work together with the rest of the application in a customer deployed environment. Estimation is really where you can see the difference in an experienced engineer and a non experienced one.
Just launched our UK vinyl subscription service
Tim Cook's Surprise Mad Money Call
Love this music. Thanks for details.
Apple’s New MacBook First Look: Trading Ports and Power for Portability
The fictitious event is a great idea. I'll share it with our team. :)

I completely agree about the first install experience. It needs to be better. We have several ideas to improve it. One thing we're toying with is using it as a way to showcase some great flyer designs in order to inspire new users to create their first invite.

Thanks for the feedback!
I disagree, I think a great many people are willing to trade some privacy for convenience and contact.

Even if we take privacy as great thing, isn't staying in touch and making connections with some people who would otherwise slip away also a great thing?

For example, a childhood friend messaged me recently on Facebook informing me of his upcoming wedding. Getting his message and engaging an old friend in a conversation is a compelling (at least to me) trade for some privacy.
This is absolutely amazing. I say this as someone that's incredibly frustrated with the access my bank gives me to my account data.

Anyone have any idea why banks are so closed-minded regarding opening up their data via APIs? I suppose, now that I think about it, there are all sorts of regulation hoops that need to be jumped through. Something as simple as "a financial institution requires positive document identification of client to release bank statements", which sounds good on paper, but makes API-enabling an absolute legal nightmare.
> Lucene is quite fantastic and Elasticsearch makes it a joy to use.

I have to admit that this is new to me. I'm gonna check it out!
Validating proxy via PHP
3D is one of the driving forces for near field light microscopy, which you could focus.
> To most people, "if you've done nothing wrong, you have nothing to hide" sounds reasonable.

So what's the correct position, and why?
In fact, it's an absolute bare minimum for an even remotely usable social network.
Setting up VNC repeater on Linux
I honestly don't understand why people value Stallman's opinions on these matters so highly. I completely disagree with him on essentially everything he writes about these topics.

Granted, he's an incredible programmer who contributed immensely to the development of our modern operating systems and the tools we use, and people here love to bring that up ("what - you DON'T KNOW WHO STALLMAN IS? SHAME? HOW DARE YOU CRITICISE HIM?")

Does this make his opinion on Facebook or privacy or freedom any more correct or valid? No.

Just like I wouldn't listen to Usain Bolt if he were trying to teach me the biological mechanisms behind doping, I can't see why Stallman's opinion is considered so correct in these matters.

IMO his ramblings about personal liberties and freedom being infringed by everything under the sun from Amazon to Google to Facebook are oversimplified and childish. The world isn't black and white and he obviously fails to understand the entire point behind many of these companies. When Facebook makes you use a real name it's not because theres some "Mr. Evil" at the top level plotting to steal your freedom, it's because it leads to a better working social network.

Just his description of AirBnB is ridiculous: "Airbnb requires you to run nonfree software (an app, or Javascript). It puts you in a data base easily available to Big Brother (just like a hotel)."

That's an immensely stupid argument, because any _viable_ company that wants to provide a service that a consumer other than Stallman himself will use will "infringe" on those two idiotic requirements.

TL;DR. Just because he did something amazing in one field/area, doesn't mean he is not spewing complete BS. For a similar example, see: http://www.theguardian.com/commentisfree/2014/dec/01/dna-jam...
My tip is always to try to get in contact with a couple of reseller and play them out against each other in the price department.

If you are looking for larger purchases 50k+ USD than you should talk directly with Dell, HP or comparable vendor and put them into the play off for who you choose :)
We plan to... so far so good. Not in production yet though. We focus more on GraphX though, which is even less mature than Spark. We feel pretty comfortable with Spark core...
"To me a phone is a poor man's computer that you have to use when you are on the road, but if you are in front of your desk, there is no reason you should be forced to use an inferior input interface to interact with your accounts when you have a keyboard and a trackpad in front of you."

Well said
You would have to proxy the requests on your server, enforce read-only on your public facing API, and keep the token sever-side for talking to the bank?

Put varnish in front of your API to act as a caching layer and prevent anyone from causing your server to overload the bank API.
Goodbye Elasticsearch
Yeah, mythz (not you, I trust) used the same dismissive approach here:

https://news.ycombinator.com/item?id=8308578

after first asking someone to cite such a problem.

AFAICT the "isn't a problem in practice" happy-talk is all coming from Dart insiders. Does this shoe fit?

Anyway, it's a real Dart bug that drives potential users away. And why is JS bignum support -- which Google for-sure could have championed in Ecma TC39 and prototype-implemented in V8 -- just an "It would be nice" thing?

(It is not difficult to support suffixes for new value types, e.g. 0m for decimal and 0n or better for bignum. This is on the ES7 agenda. For more on range analysis and other/better optimization options, see https://news.ycombinator.com/item?id=6950475.)

Trusting checked-mode test coverage is bold in light of this bug, where bold might be "stupid" or "you're fired". As I wrote once in this thread already, Murphy was an optimist.
Attend the largest open source conference in Asia
Here's one thing I like about Facebook: it has stopped the flood of chain-emails I used to receive from random "friends". They post that stuff on Facebook now instead. It's the perfect honeypot.
I view my decision to use Facebook as a transaction. Sure, I lose some "privacy", but I also get a lot of value in return.

I use quotes around "privacy" because I'm not sure I understand it the same way that Facebook critics do. When I'm using a changeroom, I expect privacy. When I take on a pseudonym and don't identify myself by name, I expect privacy. When I'm knowingly uploading photos that I am happy for the world to see, I don't have much of an expectation of privacy, and without an expectation of privacy I'm not sure I have any privacy to lose. That said, I don't think about this too much, so would love to hear well-reasoned arguments against my point of view on that.
>Jobs + great weather + anti-development policy = high prices.

The thing is, the anti-development policy is a big chunk of that, and it derives directly from "real-estate investing" (and not just renting, owning.) - so you could say that you are agreeing with the parent, I mean, if you take a generous interpretation of "real-estate investment" that includes homeowners who consider their house to be an investment.

Who votes? mostly people who own property and want that property to increase in value. This means we (here in silicon valley) have a regulatory system that makes building new high-density housing quite difficult.

In California, the problem is exacerbated by measures like prop 13, which insulates property owners from the tax consequences of increased home values.

Leasing, I agree, is super unpleasant. Especially in commercial situations. (It's like buying, only less flexible!)

But, it's a really difficult problem to solve. I mean, encouraging or subsidizing homeownership seems like an obvious first step, but that has non-obvious negative effects on the regulatory regime, because more homeowners means more voters voting for policies that make building more housing difficult.

I mean, obviously, parent comment isn't being productive; but one can trace a lot of the high cost of living at least here in silicon valley to homeowners blocking high-density construction in an effort to drive up the value of their own assets.

Of course, the parent comment seems to think that renting out real-estate is a major part of this... and personally, I don't think that is the case. I don't think that landlords are the political force that homeowners are, and the scarcity of housing, at least in silicon valley, is largely a political problem.
Hrm, do you mean that you use RxJS with knockout to alleviate the mess of computed properties? Or switch to RxJS/Cycle entirely?
There is literally 100 different links on that page, and you disagree with all of them? Stallman is an ideologue 100%, but if I had to choose Facebook or Stallman, I know which side I am on. (and I dont produce OSS or follow their belief system)

Facebook wants a real name because it makes them money more readily when they can identify you more easily and determine your value, not whatever "a better social network" means.

Just because Usain Bolt may not have a degree in biology, if he is also saying factual things, that does not make him wrong.
I suspect one of the reasons this "done nothing wrong" fallacy persists so well these days is how "privacy" has come to replace the word "freedom".

Using "privacy" tends to imply some amount of shame, as if the you didn't (or shouldn't) have the freedom to do that act in the first place. The reason why people see that they have "nothing to hid", is that they have already self-censored themselves away from doing any supposedly-shameful activity.

I've always liked a line from KMFDM's song "terror"[2]

"They can't use our shame against us"

Until people learn this lesson, shame will continue to be used as a threat, and people will continue to see the "logic" in the "nothing to hide" argument.

[1] http://www.kmfdm.net/lyrics/terror.htm ( https://www.youtube.com/watch?v=mVhu3pn1Ou0 )
This is a really great release, I'm excited to start playing with DataFrames!
One question if anyone from Databricks reads it - what about GraphX? Will it also get the same level of attention that SQL, Mlib and Spark core got recently? e.g. is adding support for Gremlin (or any other graph query languages) on the roadmap? what about an R API for GraphX? Is that planned?
p.s. when is GraphX planned to exit Alpha?

in any case, great product, nice usage of Akka and Scala, and a very intuitive API. I feel lucky to be working with it on a daily basis.
I don't think we actually disagree.

Valuing and protecting one's right to privacy, while still being visible to the public, are compatible issues; a person can disclose some information (I'm Frondo, I live at the North Pole, Santa is my friend) while retaining other information for friends/loved ones/no one else/not online.

In my other online life, I do put myself out there quite a bit, but the information I put out is of my choosing. I have been contacted by old friends from time to time, and it delights me.

But I'm also not on any of the social networks that do image tagging, so e.g. there's no automated system linking my image to a profile among them. (As far as I know, facebook won't go so far as to tag non-users with non-facebook urls...)

Privacy ought to work like other rights that we don't necessarily exercise at every opportunity; sometimes I bite my tongue even though I could speak freely, sometimes I stay home even though I could associate freely, sometimes I post information about myself even though I could keep it hidden away.
Oh men. Working with people is extremely complicated, yet very educative if have the right mindset.

That was an accident IMHO, better not judge by one case scenario. I know a lots of guys and girls, especially youngsters who would love to hear about their facebook/twitter/instagram profiles.
His opinion may seem ridiculous to many here, but the following has happened quite a few times before:

1. Stallman shares radical opinion

2. He's ridiculed for his outlandish claims

3. Some news breaks or things happen gradually

4. Now people say 'Stallman called it' or realize he was right all along
"Whether you've done anything wrong, what you disclose is up to you."

It is the correct position because privacy is a human right, just like the right to free speech or the right to a fair trial.
Yes, they really do detract from the message. They're a jarring distraction, like a skip or buzz in a piece of music. And sometimes even when you think you've comprehended it fine, you and author are thinking about different things because you silently filled in a gap with the wrong idea (can't say for sure if there were cases like that in TFA)
Analog Memory Desk
While I agree w/ some of the points Stallman makes, essays like this that rely on hyperbole to rile up readers turn me off and detract from the issues the author is trying to bring attention to.

One example: Stallman states "Facebook's mobile app snoops on SMS messages" and links to this article: http://www.efytimes.com/e1/fullnews.asp?edid=128859

"... during installation, the Facebook mobile app for Android platform seeks certain 'permissions' with the latest update going a step ahead in asking users to allow the app 'Read your text messages (SMS or MMS)'."

So during installation (on android), Facebook is asking permission to access SMS, which you can choose to enable or not. This is a far cry from his statement that "Facebook's mobile app snoops on SMS messages."

There are good points in this essay, but the amount of alarmism mixed in makes it much harder to sift through.
People value Stallman’s opinions on these matters so highly because he has a remarkable history of being right about them ten or fifteen years before it becomes clear to everyone else that he was right, and he takes the risk of saying what he sees even when it will offend people. In fact, that’s why he’s famous; he’s certainly a good hacker, but the world has quite a number of good hackers who aren’t famous because they didn’t notice the political and social aspects of what they were doing the way Stallman did.

I am not going to bother to rebut your examples in detail, but I will say that I seriously doubt that you were present when Facebook decided on its names policy or that you have much access to information about what effects it has had, and you seem to think companies didn’t exist before 1995.
I disagree with Stallman on many things but I cannot see anything wrong with that collection of real issues about Facebook, and also with the general message that most people should avoid using Facebook completely or use it exclusively with fake identities and several other provisions.
It is not correct to say that you can choose to enable this permission or not; or, rather, it is true only in a narrow technical sense — if you choose not to enable this permission, standard Android will refuse to install the Facebook app. And what legitimate reason could Facebook possibly have to request that permission in the first place?

There may be some examples of hyperbole in that article, but the example you chose is not one of them.
This is the big reason why I switched to T-Mobile. Yes, the coverage is limited outside of urban and suburban areas. I live in a major city so it works for me. My AT&T Wireless bill had crept up to about $280 and that's with one line "grandfathered" onto their smartphone data block. (AT&T started requiring that smartphones have a data package or be blocked entirely from data if the smartphone was already on the account. This one already was so the block was put in place. Six months later, AT&T declined to exempt MMS "data" from the data block, so the user's picture and group messages died. Tech support said I could put a $30 data feature on there to restore MMS.)

Now, for ~90% of the coverage I had with AT&T, I pay $179 and that's with interest-free financing of my wife's new mobile phone. Once that is paid off in a year, the bill drops to $160. That's seven SIMs, or five mobile phones and two data-capable tablets, and now the smartphone user who couldn't have MMS on AT&T has it, just like all five lines have 1GB of high speed data (going over is free, but rate-limited).

If I wanted to go cheaper, there's Cricket Wireless, MetroPCS, Red Pocket Mobile, Harbor Mobile, Page Plus, or any number of MVNOs (mobile virtual network operators) and resellers that have popped up in the past year or so. Heck, Cricket could drop my bill to $100, though I'd lose the tablet data. Family plans have never felt so inexpensive.
HISTORY
A diff command appeared in Version 6 AT&T UNIX.
this guy sounds like a sad, lonely douche
Some examples, please
> fear of going home

Anyone who doesn't see this as a sign of abuse is an idiot.

I could have sugar-coated that, but some things need to be said outright.

(It's not a surefire sign of abuse, but if it doesn't qualify as a strong piece of evidence to you, your brain is not working correctly.)
> Anyone have any idea why banks are so closed-minded regarding opening up their data via APIs?

1. The data has a lot of value, you need to convince your bank that having a great API is worth more than more rigid control of your interaction (more to them, not to you).
2. As you say, regulatory/legal stuff can be a nightmare.
3. Most first-world banks' internal systems are a bit of a maze given they've been built up over 40 or more years. Making them work safely and sanely with letting anyone code apps against interfaces is not particularly trivial.