skysight-inc/HackerNews huggingface dataset:
I think you're missing the point. The author is advocating for a well defined set of policies and procedures and users that understand and follow them. The point of this is to create an environment where the security people get the info they need (from users) to do their jobs and the infrastructure (including users and policies) are set up in a way that lets them do their jobs.

Big companies have a more to lose and deeper pockets so they're more likely to give big paychecks to security people. Regardless, few organizations pay anyone in support roles well, security is no different.

The main point is that you need users who aren't afraid to say "hey WTF is this?" and a system that can back that up by evaluating $this and taking appropriate action across the entire network.

Speed is key but the waterfall/agile models are way too simple to apply at a high level. The workflow bears more resemblance to this:
http://franklinstreetwebserver.com/wp-content/uploads/2010/0...
because you've got a different path of actions taken for each event and making the decisions at each point as quickly as possible is key but there's often so many moving parts that a very rigid set of procedures is needed to ensure consistency.

If someone's workstation crypyo-walls a network share there's how many different moving parts involved in the cleanup?
When you can get all of the world's major economic powers to agree on that, then you can say it's easy. In principle it's easy, but in reality good luck!
Pay one of the telcos (i.e China Unicom) for an MPLS circuit out of the country.

Also, international performance in general can be quite bad at peak times (i.e 30% packet loss), I suspect due to Comcast-style management of international transit. But if you buy a transit circuit from Unicom, no problem!

Edit: to add to the grand parent, I've actually found ssh -D/-w0 (for a TUN device) quite reliable from China. What I really want to do is run multiple connections from different end points with a routing protocol to do fast-failover.
China loves the lingo of games
This is correct

Source: worked there for a while
47% Better than Google search?
Yeah, you still need to get rid of the heat eventually. For example, thermoelectric generators depend on a temperature gradient to function, but you can't maintain a gradient without some kind of heat sink that draws heat away from the "cold" side.
Nope. Read the opening paragraph again.
Australia managed to do it without the agreement of other countries. It wasn't any bullshit about competitiveness that caused the repeal either. It was pressure from the coal industry.
Identification, Discovery and Distribution of Apps
I'm curious, what is the risk of getting caught, and what is the penalty?
Its definitely a very personal decision. Depends mostly on what your desktop real estate needs are.

When traveling, air display (or similar for android) is amazing. I can always have an extra display when i need it for things like slack/email while my main display is kept uncluttered for work.

I have worked with USB powered DisplayLink Monitors and they are fantastic as well. Much larger than an ipad, and dont need to worry about charging it. I stopped using these b/c with destinations i can borrow spare monitor or hook up to a hotel TV via HDMI.

Have you considered just buying one or two inexpensive ($150) 24" samsung or similar monitors? If you buy one on sale, you can generally sell them on craiglist in 3-6 months for close to what you paid for it.

Here is an example: When I sign up for a booth at a conference, I order some inexpensive monitors and a 50+" LCD tv from amazon and have them shipped to the hotel. This ends up being considerably cheaper than renting AV equipment. Immediately after I arrive, I begin unboxing and photographing them to list on Craigslist with full disclosure of what we intend to use them for and when the person needs to come and pick them up with cash in hand for 10 to 15% less than what we paid for the item. By that evening all of them are accounted for without me worrying about running around town.

Unless you are producing 4k content, dont waste your money on 4k, or fancy monitors if this is a temporary solution. You are just wasting your $$.

Lastly, don't hesitate to ask on CL to borrow a monitor while you are in town. There are nice/honest people out there who may have one sitting around.
> "Non-profit" doesn't always mean "charity". It's a tax designation reserved for organizations that are dedicated to public good. It doesn't imply that the people working there aren't top-tier professionals who should command high salaries.

Mozilla behaves like a charity, shaking down its users for donations that are tax-deductible. The Salvation Army has $3.75 billion in revenue and its Chief is paid $238,009[1].

> You say that the programmers are paid below market rate -- so are the executives. A CEO of a company with $314M in revenue will rarely make that little in the for-profit world.

CEOs pay is absolutely out of control[2], and using that as a baseline for what you think non-profit CEO salaries should be is absurd. Do you seriously think it would be that difficult to find people as equally competent as Baker and Eich to do their jobs for $100k? It's not like Mozilla is winning anyway; its flagship product has been losing market share for years.

> There's a lot of room for debate here, but calling the situation disgusting is over-simplifying it.

No it isn't. Mozilla's success, or what's left of it, is due to the programmers, designers, testers, and users who contribute to it. Fat cat managers shouldn't be getting rich off of their (often unpaid) labor. Taylorism has no place at an open source software foundation.

[1] http://www.forbes.com/lists/2011/14/charities-11_Salvation-A...

[2] http://www.epi.org/publication/pay-corporate-executives-fina...
Free markets don't account for negative externalities so they have to be regulated y'all. In any case, gasoline prices do move so there must be some market forces at work, but it's a mystery at least to me. I'd love to read an explanation.
How Google could rig the 2016 elections
I've heard that commercial DCs and high-end hotels are less censored.
Unreadable.
Riptide GP2 Cheats Hack Android-IOS No Survey
I have a good amount of recent experience with this. I found that it wasn't just a matter of your connection getting blocked; if you leave it up you'll experience some unreliable good periods (so, say, a torrent would download through the VPN overnight without a problem, but if I wanted to use the internet at any particular time, my connection was unlikely to be working). But yeah, I ended up signing up with Astrill.
We have colleagues in china and generally speaking, you find an alternative, and host it on premise.

I believe this is the reason why they use Atlassian[1] products, where rest of us would use trello, e.t.c.

[1] company that created jira
I believe GFW doesn't do traffic analysis just yet. Otherwise shadowsocks won't stand a chance either.
Is the support of O_DIRECT available or planned ?
> I hope one day I'll live in a country where I have freedom to write any code I like without fearing.

Frankly I don't know if we are that country. :(
States Eye Taxes on Streaming Video and Cloud Computing
> But it's always depressed me that nearly forty years later, our high-tech and ultrafast dynamic languages still cannot hold a candle to Smalltalk for clarity, simplicity and usability.

You're aware that these are extremely subjective attributes, right?

Most people not using Smalltalk (or who tried it and decided to not use it) will argue that Smalltalk is anything but clear, simple or even usable (seriously, even Pharos or Squeak have the usability of late 90s IDE's).

And of course, there's the fact that Smalltalk is dynamically typed, a class of languages that's fast headed for extinction.
Sorry, you lost me - our reference contexts are probably totally different. Can you elaborate?
>Sigh. Nothing killed Smalltalk. It's not dead. Neither is Scheme. Yeah, both of those languages have pretty small communities

That's how we define "dead" for languages: "pretty small communities".

>but that's viable in the Internet Age.

Viable to exist and continue having small communities. But not viable for what matters to lots of people, mainly being able to use them for their company/projects with great support from various sources, documentation, books, new releases and bug fixes commining round the clock, and answers for their questions on Stack Overflow.
this approach may lead people to seek lower-cost, untaxed mediums (like torrents) rather than a heavily taxed alternative
Hacking book for free download only 3mb
This is interesting, I'd love to read/hear more about it. Is the negotiation an above-board thing? What are the conditions and costs to getting this kind of exception ensured?
El-Cap is the fastest version yet in my experience and seems to be getting important security fixes too.
It's good that you like your team. The nice thing about Silicon Valley (and this industry in general) is that your network spans across companies, and usually outlasts the companies. You don't need to be working there to stay in touch with your teammates. You can always do lunch with them.
>Actually, those are the very languages I had in mind. Perl too. Yes, they have many more active developers than Smalltalk. But you know what? I was part of the Ruby community before Rails, and it was tiny. That was after it had been around for 10 years.

So? Languages might take a while to catch on. Ruby has a huge community and lots of jobs now. And Python has had that even without something like Rails to dominate adoption. Perl was also huge back in the day.

As a counterexample Dart is nowhere near even Ruby pre-Rails was, even though it's from a major vendor.

And of course C, C++ etc didn't succeed because they had the backing of a major vendor, like Java or C# did.
In Chrome, at least, Ctrl+Shift+D works. So might be an implementation detail.
The supported mechanism for disabling System Integrity Protection is via the recovery partition.
last 3 years the S&P would get you close to 10%

the last ten years on the S&P would put you firmly at 5%

Thats assuming you don't pick a decent fund with return rates that sit somewhere in the middle. If your lucky/smart you fund may return much higher, or you get slapped and loose money.

If one isn't doing it already, 401k withholdings can go up to 18k a year (close enough to 20k a year), and you can get some more savings in there depending on your marriage and partners employment status.

If OP isn't maxing out his non taxable investments today, then him putting aside 18k in 401k from his current paycheck (rather than taking the cut) has even MORE upside for him, than I'm suggesting. And hitting the right fund (and its unlikely) could have 14% returns.

SO I fully agree with you, my estimates could be foolishly low (or outrageously high) we simply don't know.
> "How and when revenue is recognized is governed by GAAP."

Being a CPA & coder this statement really annoys me, GAAP for those that don't know simply means "Generally agreed Accounting principals" and there is really no acceptable reason for this acronymn to be used outside of the (accounting) profession. Maybe it wasn't the authors intent but it smacks of those people who use jargon to help aggrandize their position when a simple inclusive explanation would have been more appropriate.
same did I. Seems like it's pretty good written piece of software, so might be good exercise to hack it a little bit and maybe learn something
>The only language that has come out recently that is successful purely because of the backing of a large company is Swift.

We don't know that. I mean it's not like ObjC, where the main pusher and motivation to adopt it was Apple having it for OS X (as evident by the relative lack of adoption of ObjC in Linux, NextStep etc).

Swift does have got people genuinely interested to use it even outside the Apple ecosystem, they just don't have the chance to, yet.
Would you be okay with spending cash on a project with 75% waste?

I mean, I get that debt exacerbates the cost, but I think waste/fraud is a just a different topic than optimal debt levels.

I've done construction work for large private contractors in the nuclear energy field and the level of waste there was off the charts as well. I didn't work in management or accounting or anything, but I get the impression that certain types of large, complex, organizations are intrinsically inefficient. I don't know why, but maybe it's more costly and time consuming to try and root out the waste?

We should definitely try to improve this! But it's a really difficult management/planning problem without a clear solution and in the mean time, we still need to make choices about spending and that might mean taking on debt.

I don't really understand economics well enough to have a strong opinion on the article, but I believe the point was that higher debt levels might be better, regardless of how the money is spent.
I believe if you have ordinary stock, it will get diluted during subsequent funding rounds. Preferred stock may not
Where does it end? Everyone's a king living in their own castle, and still everyone's unhappy because the rich have planets of their own?

Where things are objectively seems like a fine way to compare.
WordPress Hacks Behind Surging Neutrino EK Traffic
Embeddable Common-Lisp 16.0.0 RC1 available
> Why pay for 2 workers when you can make 1 work twice as much.

Even if the quality drops off so that it's only as good as say, 1.5 well-rested workers, they still got an extra 0.5 for free.
Very interesting... I was just in China recently and was sshing into a box I had in the states for an impromptu SOCKS proxy. I did notice that things would work fine for up to an hour or so before things started bogging down. I would start seeing "channel x: open failed..." errors. However, closing the session and reconnecting would fix the problem... until it started lagging out again.

I thought it was just a consequence of being on spotty < 5mbps(ADSL?) connections. The internet situation was barely tolerable for a few weeks stay; I can't imagine what living in these conditions 24/7/365 is like.
How is it any different than requiring a runtime (e.g. Java or NET)? That you also distribute the image? That's not that big a difference distribution-wise.
Unless employee churn goes up, and they have to pay for recruitment and training.
>If your language is harder to get real work done in than the alternatives, your language won't get used.

Both statements couldn't be further from the truth about Smalltalk.

It was far easier to get real work done (still is over many languages) and it had a decent following, considering compilers were commercial, people avoided so dynamic languages for C/C++ at the time, and it was pro-internet.
How could an effective pushback look like?
ECL (Embeddable Common-Lisp) is an interpreter of the Common-Lisp language as described in the X3J13 Ansi specification, featuring CLOS (Common-Lisp Object System), conditions, loops, etc, plus a translator to C, which can produce standalone executables.

ECL supports the operating systems Linux, FreeBSD, NetBSD, OpenBSD, OS X, Solaris and Windows, running on top of the Intel, Sparc, Alpha, PowerPC and ARM processors.

(source https://common-lisp.net/project/ecl/)
>so C++ won because they had better sales people and were more beginners and sales friendly.

Actually C++ is far worse for beginners than Smalltalk (which is casually used as a teaching language to kids, as Squeek etc).

The comment about "math" and "elite" show no familiarity with Smalltalk or the environment back then.

What you say might be true for Haskell, or even CL, but it doesn't have anything to do with Smalltalk.
Oh dear, I hope the clones of this repo on Github don't cause the GFW to block Github altogether.
Microsoft Office 2016 Pro Plus Beta ISO Free
Ha, yep. I'm half expecting this to be some hoax actually created by Tim and Eric, or maybe it's their secret source of inspiration.
That mostly a side effect of GitHub's caching mechanism. It's all gone now.
Dear Alex, although this may sound like a revelation, but governments do not fear. They are fictitious entities. Non-humans. One may think about them as a software.
You are right. Body language can (and should) always interpreted with the context in mind. What we did was to describe the case which fits 90% of the time – without blurring the cards with exception disclaimers (e.g. this person may also be on medication for his/her eyes or a tiny fly just poked the eye).

We will start writing a little intro to the cards: context is important and there are always exceptions to the rule.

Thanks for the input.
Kdenlive Easy to Use Video Editor for Linux: Review [Install in Linux]
I've had almost the opposite experience. VPN sort of worked, but I could not open a single HTTPS connection. The VPN problems I had I could trace to a bad WiFi connection (I had to lower my MTU and it worked fine).

Now, on previous trips I experienced what you mentioned. It seemed really like there was some machine learning going on, and after using a VPN for a while the connection would get bad. But I guess it might not be machine learning, there might just be a huge number of humans watching your traffic - which would explain why it is so inconsistent.

The thing that worked best for me is just using ssh -D (on most days). Our workplace uses ssh a lot for secure communication with outside china, so that couldn't possibly be blocked without hindering our work (and I believe 'they' have no interest in that). So whenever I had to access something for work that was sillily blocked (argh gmail), I just used the ssh connection that was open anyway.
Best feature (so often overlooked):

"ARTIFICIAL INTELLIGENCE EMERGENCY OVERRIDE"

But then, this made me laugh: "(currently broken)"
Back in 2006/2007 when I was doing web development, I knew a few people at F5 and Zeus Technology (developers of application firewalls at the time), and they said The Great Firewall was using loads of F5 tech with deep packet inspection for all data.

I assume 9 years later (don't know what the modern tech for web stuff is these day, but I assume encryption plays a key part) they're doing just as intrusive inspection and filtering of data.
Hm, strange that this comment is the very bottom comment given how very much hacker-oriented it seems.
I'm taking notes for more than 10 years and have a rather big collection. I have tried many apps but after losing data due to proprietary formats I won't use anything else then plain text anymore. Nowadays I write everything down as Markdown files that I have stored on my local disk in hierarchical folders (backed up by Spideroak).

The only part I wasn't happy with was search. So I have built my own local search engine. It treats the first line of a Markdown file as a line of tags that I can search for. It takes advantages of Markdown syntax (e.g. words in headlines get a scoring boost) and it can also open files in my editor, integrating quite well in my daily work flow.

It's on Github if interested: https://github.com/BernhardWenzel/markdown-search
Sorry about the bitchiness -- I hate vague questions :(
You may not be able to see a list of the forks via the web interface, but you can (albeit less conveniently) see them with the JSON API:

https://api.github.com/repos/shadowsocks/shadowsocks-iOS/for...

And you can paginate like this:

https://api.github.com/repos/shadowsocks/shadowsocks-iOS/for...
Sure. I wasn't necessarily agreeing, just saying that may be their reasoning even if they are fully aware productivity drops. The original comment also said it doesn't cost anything "on paper."

Could this be a way of passing the cost to another department? Maybe a department manager is a slavedriver and knows it's not efficient long term, but he doesn't care as long as the costs (like replacement recruiting) don't come out of his budget. I don't know if that's how budgets really work though.
IBM: Introducing a Brain-Inspired Computer
> Smalltalk is dynamically typed, a class of languages that's fast headed for extinction.

I'm going to go out on a limb here, and chalk that one up in the "famous last words" column. :)
> and this is literally the first time I've seen this abuse of "South American", so I'm going to say, no, its not that common.

Ok, thanks. Bad guess on my part.
How did/does this tool compare with obfsproxy?
Removing most of the exemptions to the overtime requirement of the Fair Labor Standards Act would be a good start.[1] Bigger penalties for non-compliance, like triple damages, would help, too.

[1] http://www.dol.gov/whd/regs/compliance/whdfs23.pdf
I think the article is missing a certain point. I work 40 hours a week as an english teacher, my wife works full time. Thats the only way we can save money, im soending over 80% of my free time coding to try and get sales so we can buy a house . I dont know if im missing the point of the article, i may be.
The article is unspecific about the short-term vs long-term effects.

Assuming a perfect world where there's a 12hrs notice and everyone is informed, we unplug all devices and shut down the power grid. We plug them back a day later, whenever we notice the ground current isn't steong anymore. Would we still have a lot of damage?
nmrm2 is basically calling me and jmorphy2 evil all the time -- but jmorphy2's rather benign comment gets killed?
Yes, he should move to the US, where he'll be forced to use NSA approved (read: cracked) or no encryption.
On the other hand, the more they fall behind the more money and power for us in the west :)
> Ive never managed to do this in mercurial.

`hg record` might be somewhat more cumbersome than `git add -p`. But `hg rebase` should about as nice as `git rebase`?
Bit off-topic: At my last workplace they used to push our code for several ecommerce sites to production on fridays, every week, without tests. It somehow worked out.
Womens wear
which one is the best for party and plz suggest womens wear shop in hyderabad?
lilypond is a big one. Better music notation quality than finale and sibelius.
Dear ommunist, I think you are right, governments like "Matrix" which control every childprocess.
Aren't there a dozen of bugtrackers, intranet collaboration software, CI tools and git hostings that they could download and install? What's so special with the Atlassian products?
> Fixing all of that would probably take years, and in the mean time we would see looting, famine (and huge starvation), violence, etc.

Things get fixed much faster than you think. The tramway in Hiroshima was running again within a week after the bomb destroyed the whole center, for example. Scientists said that trees would not grow there in 100 years, yet the city ended up looking like a normal city within 30 years after the bomb.

So, "society collapse", meh.
This might sound a bit counter intuitive but they really hate OpenVPN and SSH tunnels - not to mention they are trivial to detect and the process is highly automated.

Traditional VPNs such as PPTP/IPsec as well as various forms of obfuscated proxies are generally not interfered with unless something major happens. A lot of the alleged "censorship" are actually symptoms of high latency and packet loss on home connections.
Guy Fawkes was male, and there is a feminine equivalent gals, but I think guys is slowing moving over into gender neutral territory (it wasn't when I was a kid, but times change).
On this note, we've been trying to upload gigabytes of data via rsync from Europe to China (we are software company who are trying to deliver tools to our Chinese customers..). Connection used to be fast when it was night time in China, but lately the connection has been really slow or unusable. Is there any alternative way to get lots of packages from Western countries to China?