skysight-inc/HackerNews huggingface dataset:
How many bugs have OpenBSD team found vs found in Xen? That would be a relevant comparison. From there, an assessment of exploitability of each given OpenBSD's attention to mitigation.

What you said, on other hand, was meaningless given that OpenBSD has had bugs that could lead to a crash. Real question is, "Do Xen or security-focused virtualization schemes (a) reduce number of vulnerabilities with impact of kernel-mode 0-days, and/or (b) prevent, contain, or facilitate easy recovery from OS- and app-level 0-days?" Prior experience in security-focused efforts show yes to both questions. Xen isn't one of them as the existence of the Xenon project shows. However, it's small size and improvements over time make it substantially less risky than an arbitrary OS + software combination esp if above layer is also addressed (eg MirageOS). Even Galois Inc.'s conservative teams are using it in some work.
Having data is fine, but even the richest dataset is wide open to misinterpretation. This is even more true when the data is a snapshot of a compression of human opinion and feelings.

The interpretation of information collected from a survey such as '60% of developers I asked say..', even assuming it's statistically valid and reasonably accurate (which is not trivial to achieve), still involves a lot of assumption, intuition, and frankly guesswork about the real problems and facts of the situation.

It might provide slightly more of a hint towards the facts than just blindly following a strategy based on vision alone, and there are many success stories of data-driven approaches that vastly outperform the predictions of human 'experts', but implicitly trusting that this will always be the case is probably unwise.

I'm for data-driven decision making in general, just saying that it's never a magic bullet and is often not even an advantage (could indeed be the opposite) if done naively.
Apple and Cisco Team Up for iOS Enterprise 'Fast Lane'
No, I'm objecting to your second paragraph. I don't think the circuit breaker was particularly effective; I think the problems are fundamental and having a longer time on the circuit breaker wouldn't make any difference.
Just a note that the article (perhaps inadvertently) confuses a little: industrial manufacturing must be highly routinized and boring if it's working well. Tolerances are very tight for well made manufactured goods, since they have to be to be assembled into larger, more complex goods. Let an operator get creative with a running process, and all bets are off [0].

Besides! People are also terrible at that sort of work, so it's better to automate the job and have the people supervise machines. The machines do the terrible soul-crushing tedious work and the worker oversees the hiccups and glitches. (Machines are pretty lousy supervisors, and are difficult to program supervisory roles in the messy situations a lot of manufacturing happens in.)

And keep in mind that's for a running line or process. I don't think there's room for creativity on carrying out the line's program, but there's endless opportunities for planning and improving the process off-line. People are great at deliberation, planning, and brainstorming. (Too good, some may cynically say :) I.e., you'll never get a better ROI than buying a group of operators lunch and let them rail at you about something that irritates them about a line. And include them in planning/upgrade meetings; they own the line, after all!

And there's the exception of those times where it just makes economic sense to plop a person down for something boring and lonely. For example, the cost of vision control tech is getting ever more affordable and powerful, but it still takes a substantial amount of engineering work to actually install and tune the system for the specific situation it's in; by contrast, people are cheaper in the short-run and can be reasonably effective very quickly. (It's mind boggling when you see a failure that you think, "I could have paid a guy a year's salary to sit in a chair and watch for that one obvious, uncommon failure mode event.")

[0] This is an interesting dichotomy: the workers must own the process they're working on, but they also need to not constantly fiddle with settings. If they're not actively tweaking stuff, then they feel disenfranchised, and if they are constantly messing with stuff then the operator is simulating a randomly tuned PID loop on whatever dials happen to be nearby. The root is that people are generally terrible at figuring out the difference between "normal variation" and "exceptional variation", and tune both. So when Deming talks of knowledge of variation, this has to be balanced by knowledge of psychology.

And that balancing act brings us to this article's contention.

https://en.wikipedia.org/wiki/W._Edwards_Deming#Key_principl...
This has a claim of 1.9 million km in a 2006 Silverado with original engine and transmission. [1] Honestly I'm less surprised about an engine going that distance than the transmission, it has so many moving parts.

http://www.theautonet.com/en/2014/02/28/10-cars-that-have-tr...
This is very cool.
I remember as a kid every time I had a cut or scrape my parents would rack their brains for the date of the last 'booster shot'. I was also told cautionary tales of tetanus seizures (?) that could break major bones because of the stress of the convulsion.
This guide has some useful tips (enable filevault2, disable mdns advertise), but recommends wholly disabling most of the usable functions of applications like calendar, finder, spotlight, etc in the name of "security", which is futile considering every single security update for OSX addresses tons of userland and kernel remote-code execution or local r00t privilege escalations[1][2][3], as well as the well publicized thunderstrike[4] family of vulnerabilities which allow for osx hw/sw compromise.

Every major/minor system update (IE 10.10.x, 10.11) will require these tweaks be reapplied as well.

Lets not call using ruby to run curl to install homebrew secure either.
Just because homebrew doesn't need sudo doesn't mean it's inherently secure, and the dependency tree of some of the software the guide recommends you install come with their own set of security issues which need to be manually maintained outside of OSX update procedures.

I'm typing this from an OSX machine with a few of these tweaks applied already, and I love using it for my desktop OS -- but if you really need to be this paranoid about security, you shouldn't be using OSX.
There are several security-or-paranoia oriented linux distros you can run.

[1] - https://support.apple.com/en-us/HT205031
[2] - https://support.apple.com/en-us/HT204942
[3] - https://support.apple.com/en-us/HT204659
[4] - https://trmm.net/Thunderstrike & https://trmm.net/Thunderstrike_2
Ashley Madison shows that IPO talk is often just hot air
Shadow Work and the Rise of Middle-Class Serfdom
There's still a lot of abstraction in play though: you don't need to know everything about the low level implementation to use the engine. Even so, it took me about 6 months of working in the engine 30-40 hours a week to really become proficient and I've done 3D/2D graphics work for 15 + years.
I do not see how this is a bad thing. It seems incorrect at some level, but claiming that things that compute are somehow categorically different is an appeal to magical thinking.

I would agree that claiming that a rock computes by not simply vanishing from one plank time to the next is not satisfying. This leads me to think that computation has much more to do with whether a particular being has reach a thermodynamic local minimum than anything else (lava does not compute since, despite being far more active than a rock, its behaviour can be explained by the fact that it is a couple thousand degrees hotter than a normal rock). Energy dissipation also does not fit the bill since stars dissipate energy but do not compute.

Unfortunately the thinking surrounding things like proteins look incredibly similar, their behavior changes as a function of ph and temperature, and most arguments that a protein computes are based on defining a function for that protein. This gets us nowhere, but it does suggest that it may not be possible to define computation in a way that excludes systems dissipating energy to reach thermodynamic local minima.
> Let's say a regulation was passed that didn't allow market orders. Retail investors would feel "safer" b/c they think the government is protecting them. They will then be more inclined to not bother researching the companies they own, etc because, well, the government has got their back. Why not dump all our money into stocks if the government is gonna protect us, right?

I think you're greatly overestimating this effect. The government already regulates the stock market a lot. One more regulation isn't going to make retail investors suddenly start taking much bigger risks.
Nah, just from learning about music years ago. Not everything he wrote was equal temperment, though.
Worth noting that Apple releasing Apple Music on Android is the exception to the rule - what other 1st-party Apple software/apps are available on Android?

Also, Apple Music on Android isn't even released yet :-/
Well, this is the best kind of promotion: we get quality stuff for free, they get free exposure and also seem hip, unlike Microsoft circa 2010.
Appreciate it. Makes sense on competitiveness. Didn't know about the LDOM support. Interesting.
How to be like Elon Musk
> But again, when the null-hypothesis doesn't hold, p-value tells you very little (it's actually undefined in the math).

The p-value is well defined whether the null hypothesis holds or not. You calculate it assuming it does. There you go, you have a properly calculated p-value. That's what physicists do:

"Taking into account the entire mass range of the search, 110– 600 GeV, the global significance of the excess is 5.1 σ, which corresponds to p0 = 1.7 × 10−7."

You see, they have calculated a p-value. Does the null hypothesis hold? I don't think they had any expectations consistent with the null hypothesis being true before the experiment. After the experiment they clearly think that the null hypothesis is false:

"These results provide conclusive evidence for the discovery of a new particle with mass 126.0 ± 0.4 (stat) ± 0.4 (sys) GeV."

They don't see any problem in stating a p-value and rejecting the null hypothesis at the same time (in fact, it's because the p-value that they calculated is very small that they conclude that the null hypothesis doesn't hold). Apparently you see a problem, because if the Higgs boson exists and produces the signal in the experiment then the null hypothesis is false and all the p-value calculations they did to get to that conclusion are "wrong".

Anyway, I have no need to convince you of anything. I can live with people being wrong on the internet.
I actually take Modafinil for narcolepsy. It's not quite as life-changing as the recent articles make it out to be; it doesn't make you smarter or think faster or anything of the sort. It just removes the fog in your brain that builds up when you have too many things competing for attention.

One major downside, however, is it's fairly quick to build up an immunity to, especially if you have it as a medical prescription.

Overall, it's pretty useful, and as far as I know, harmless. Just don't expect it to be like the movie Limitless.
PCSplitView – Super powerful layout for iOS
Courious why did you replace the EdgeRouter Lite with X ? Looks like the X doesn't have hardware acceleration and is cheaper.
New hydrogen cellphone battery can power an iPhone for a week
Safari loved that.
Boeing tests laser cannon to combat drones
Which is good, as that is indeed an unsatisfying explanation. You can, however talk about _what_ it computes and _how_ it computes, which might be interesting or useful explanations.
I'm guessing you were born after the Berlin Wall came down, and missed all of the palpable Western demonstrations of just how fragile freedom is, and just how dangerous it would be to build a turn-key surveillance state.

In my experience, the people who "don't care" (as opposed to simply not understanding the insanely complex topic) are the people who:

1) benefit from it, e.g., SaaS/startups heavy on analytics, and

2) lack the context to understand that the current state of Western civilization is not in any way immune to regression, and

3) don't understand how their own actions can in fact induce that regression by creating a high-value turn-key totalitarian system ready for the taking, and

4) don't understand that their actions are already serving this purpose in more totalitarian states outside of the USA.

That's even ignoring the implications of __massive__ information asymmetry when it comes to negotiation between corporations and individuals.
This sort of thing would make a great Sandstorm app, for what it's worth. See https://news.ycombinator.com/item?id=10147774 for more about that.
Ban daily stock market reports
Don't know if a review of past studies really counts as "news". The article is pretty light on information. There are a whole host of extremely effective nootropics out there. Modafinil (Provigil) is just a case of an effectively marketed pharmaceutical with $ behind it.
This seems interesting. There are exercises on the corresponding course page. Unfortunately, the solutions are not public.
Open Source software survives without needing masters with whips above or the ruin of poverty below. When there's work to be done the people who do the work know there's work to be done and they will do the work.

> Either it is an excuse we make up so that we can leave something that we obviously hate doing

Don't force people to do things they hate doing in order to survive when the amount of work it requires to feed and keep everyone comfortable is a far smaller quantity.

> or it's because our employers are unwilling or unable to pay for it to be done.

Don't have a system where work is only done at the whim and for the benefit of property owners.

If the work is never done, then people will keep working. They will do that because they want to work. It does not follow that we need bosses, hierarchy, management, government, property, militaries, and police forces to make us do the work just because there is work to be done.

So where did I lie?

P.S. I'm sorry for being aggressive. I am emphatic about this; I am not doing the work I want to do because I need to do the work someone with money wants me to do. Because people will toss me into the garbage disposal if I am not working for money. This article indicates that I am not alone; I am part of a majority.
Yes, of course. But that is not the point at stake here.
Apparently, if you didn't go to Berkeley, work in CSRG, when Bill Jolitz was there, you can't possibly understand enough to contribute to any later BSD. Who knew.

I remember the Jolitz's being a bit...proud of themselves...back in the day, but that's some pure, distilled ego right there.
I think you're being overly cynical. After getting part-way through the article I understood that the "trojan horse" was inbuilt hooks for Google's (presumably) impending home automation hardware.
Just to clarify, pricing is as follows:

$10 - 50 words or less

$50 - 200 words or less

$100 - 400 words or less
Funny one-liner in the comments section:

> Stimulants are a credit card - you can buy now, but you're gonna have to pay later. That said, some stimulants do have lower interest rates.
> Chrome sends every URL or key stroke in the URL bar home in the guise of checking if they are search terms, and nothing short of not using Chrome helps that.

I believe you're referring to DNS prefetching [1], which is mentioned in the guide. I'm curious to know how you're determining that something is "pinging Google every few minutes". Maybe you could open a Github issue and I'll investigate it for the guide. It's definitely good to enumerate Chrome's behavior w.r.t. privacy.

1. https://www.chromium.org/developers/design-documents/dns-pre...
I wonder how can 20$ pay for the hardware alone - a quadcore, 1 gb RAM, etc. Unless there are hidden caveats (slow RAM speed, for example) or embedded ads/custom 3rd party apps in the OS (as OEMs frequently do). If not so, I'm really intriged.
Just as the drawing of a physical point on a piece of paper has area while the actual Euclidean "point" that it is trying to represent does not, a specific grid point on a piece of graph paper has area whereas the actual taxicab "point" does not. It is not that some sort of error is made to be small by making the grid more fine, rather the coarseness of the grid is simply to aid visualization. In reality, taxicab geometry is continuous, rather than discrete, just as Euclidean geometry is.

Edit: For clarification, the "points" in both the Euclidean and taxicab case can be represented in Cartesian coordinates (e.g. (x, y)). What is different is how you define the distance between those points. In Euclidean geometry, the distance is r = Sqrt((x - x')^2 + (y - y')^2), whereas in taxicab geometry the distance is r = |x - x'| + |y - y'|.
Well, the point is my security would not have been improved, in any way, by running on top of Xen and sharing my server with some rando.
A robust and vibrant black market into which to sell your excess prescribed medications?

To be serious, generally things like drug manufacturing are relatively elastic on this scale. Unless there is a sudden run on these things so as to create a shortage, the manufacturer will just make more to fill the demand.
why are you selling at 0.9X? Why are you assuming everyone is a day-trader trying to immediately cash out?

If you believe the stock is worth a lot more than 0.5X and you're generally a buy-and-hold type investor, buy it at 0.5X and wait. If the exchange chooses to break the 0.5X trade it costs you only the opportunity cost of being able to buy something else at a good price during the next few days. And if they allow the trade, you got a great security for half price -- so you can be patient and sell at a later date, or hang on to the asset for whatever dividends it might pay out.
Portus: Docker Registry Front End and Auth Service
nice, but: "probability is currently left off"
> octave, mono,

Both of these are available as OpenBSD packages (as evidenced by running "pkg_info octave" or "pkg_info mono", assuming you have a $PKG_PATH set). No openports.se required! :)
So this is M$'s response to Bootstrap which implements M$'s response to Material Design? Not bad! also RTL font support is nice.
By and large you do need to use another tool for generating the art assets. That's probably by design because a single program that could do it all would be pretty monolithic and probably couldn't be great at everything. UE4 uses some pretty industry standard file formats for importing assets though, so it should work pretty well no matter what tool you prefer to use to create your assets.
DDoS attacks are getting more powerful as the Pentagon scrambles for solutions
For less extreme cases, you can also use xwit(1).
You are pretty funny. I didn't use the words you quoted.

We were talking about tptacek, but excellent job divirting attention.
Just because you've only worked with engineers at startups making shitty products or bloated companies doesn't mean there aren't people doing work right.

> there's always the need to continually improve the product so that you don't "fall behind",

That's not real. There are downright ancient products that work better than current stuff because they don't suffer from this curse. That's a business concern, not a problem that engineers need to solve, and when engineers are solving that problem they're wasting their time (and everyone else's).

> fix the rampant bugs that occur when you add in new features,

This is part of the problem: at some point if you've done your job, you don't have to add more features and you can actually finish the product.

Look at the chat client market: chat of this kind has been a solved problem for at least a decade, but people have to work on something so they decide to reinvent chat. HipChat did it, now they're losing market to Slack because they keep making pointless changes that don't improve HipChat which makes it harder to use. And Slack is basically just a shiny reimplementation of an IRC client: there are still IRC clients that have been doing more than what Slack does for years. In another decade we won't be using Slack, we'll be using some other shitty chat client, and the 90s IRC clients will still work just fine.

Again, this is business for the sake of money, not for the sake of actually improving anything, and it's a waste of everyone's time.

> realize that the customers actually wanted something different

There's certainly lots of iteration needed to solve a problem, but that doesn't mean it's unsolvable. If you've never actually experienced a problem solved, it's not because it's not something that's possible, it's because you've been working on making money rather than solving the problem, and only making progress on the problem tangentially.

> need to refactor the code properly to match the latest design fad

That's just stupid. Not only does it not solve problems, it usually isn't even good for business.

> have to rewrite the program in a brand new language...

This is rarely necessary and if it is, the job wasn't done right the first time.

> So, when we say "there's no work to be done", it's a blatant lie.

I get that you disagree, but you should really learn the meaning of the world "lie". And also the meaning of the word "misstatement".
Congrats, team Sandstorm!

Just played around with the new UI, looks great!

Looking forward to setting up an instance soon (or perhaps paying for hosting) :)

The work you all are doing is awesome - keep it up!
Emerging wearable technologies are beginning to be tested in clinical settings
GWPedia:+Drag+|+Drop+in+Unity+3D
If you need IIS, I doubt that you can get away without virtualisation.

The easiest path is to use something like VMWare Workstation and run Windows as a VM. You can pin Visual Studio to the sidebar, and click to run it like it was made-for-Linux app (i.e. Unity mode).

If you just need IIS (and can use MonoDevelop / Xamarin Studio) as an IDE (or just VS Code for newer stuff), then you can host IIS in a Windows Server Core in a virtual machine (less hardware requirements compared to the first option).
Low gravity makes it easier. No atmosphere means you have to use active deceleration (rockets) rather than parachutes, but it's not going to be worse than Curiosity's "skycrane".
French Canadian here. I wholeheartedly agree that "il faut recommencer" was a jarring error.
This is random blogspam. Modafinil has been around for awhile, and there are a lot of non-responders (see also: me).

For real reading on the subject, gwern's nootropics page is a must: http://www.gwern.net/Nootropics
Responsive layout for guitar part eCommerce store
Cydia+download+iOS+8.4.1+|+iOS+Jailbreak+Tools+and+Jailbreak+Guide
I'm pretty sure "if something hurts, you're not doing it often enough" doesn't apply to, say, arm-breakage or self-immolation :)
Eatsa, a Futuristic Restaurant Where Robot Cubbies Serve Quinoa