skysight-inc/HackerNews huggingface dataset:
The author seems to mistakenly believe that Linux is a multi-user system where not everyone has root privileges.

The reality is that almost nobody uses it that way, it's not tested for that and due to the huge API surface area the chance of some kind of exploit is so large that it cannot be secured even if it people tried.

The only reason "root" exists currently is to make it less likely to accidentally change or destroy the operating system.

There is no way to provide a multi-user experience on a physically accessible system (cannot defend against physical attacks), and the way to provide it on a remotely accessible system is to assign a virtual machine to each user.
Is Bitcoin used for money laundering? It seems simpler than London property for disappearing large chunks of cash
A Wishlist for Verifiable Computation: An Applied CS Perspective
Nobody collects the birthdate. It would be validated by the card issuer against their account records. The merchant doesn't see anything that happens during the 3D-secure part of the transaction.
Two Performance Walls Approaching (2009)
Just because it doesn't work the way you want it to work doesn't mean it doesn't work. If it literally took 4 days to install the forum software in question, wouldn't it be fair to say that your situation is clearly an outlier? Is the 30 minute "simple" installation claim really just an 'ol bait and switch? Is it really taking everyone 4 days?

I'm sorry about your frustration -- I've been there many times, but taking your hellish experience and parlaying that into "web deployments suck these days because my development environment didn't meet the system requirements and therefore their methods suck" is a bit nonsensical.

I would direct you to the system requirements for the installation in question:

Hardware Requirements

Dual core CPU recommended
1 GB RAM minimum (with swap)
64 bit Linux compatible with Docker
Software Requirements

Postgres 9.3+
Redis 2.6+
Ruby 2.0+ (we recommend 2.0.0-p353 or higher)

I would say that 32bit != 64 bit. Blaming the system seems like blaming a toaster that won't make tea. We could certainly hack the toaster into making tea, but your inability to quickly make tea with a toaster is not the fault of the toaster, toast or people that make toasters. Dismissing toast as a silly breakfast food and lamenting why more tea isn't made is pretty much the point of your rant.

You are certainly welcome to install the forum or do whatever it is you want, it is Open Source. However, it's rather uncouth to blame a process for which the problem was your situation. Rather than ranting about how badly Docker sucks, perhaps you could contribute back to the forum software in question and create your own Awesome Deployment System. Nothing is stopping you.
Rogue States and Diplomacy: A Conversation with Noam Chomsky
People who are still using Windows XP are irresponsible. https://www.microsoft.com/en-us/WindowsForBusiness/end-of-xp...
The Wikipedia translation disagrees. Add your information to the page, please.
I thought they already did?
Show HN: Connecting you to discussions with scientific and global visionaries
'Don't do it for the money' advice is simply wrong
Refold – Cardboard standing/sitting desks
Smalltalk is quite lispish in many ways (closures, most stuff is an expression, simplicity etc). Rebol fascinates me - and I have only scratched its surface. For more on Rebol you should look at www.red-lang.org. Especially the stuff around the Parser DSL, like:

http://www.red-lang.org/2013/11/041-introducing-parse.html

Red is in fact very impressive and definitely the "modern Rebol".
The colour scheme is far more legible than open street map. I wish they'd change their styling...
http://www.wsj.com/articles/wsj-survey-chinas-growth-stateme...

"More than 96% of respondents to the latest Wall Street Journal survey of 64 economists–not all of whom answered every question–said China’s gross-domestic-product estimates don’t accurately reflect the state of the world’s second-biggest economy.

“Official data are manufactured to fit the government’s narrative,” said Stephen Stanley, chief economist at Amherst Pierpont Securities."
Roomba Vacuum Cleaner Now Sees and Maps a Home
Google should be building a global paywall solution to connect them all
"a prank"? Crashing a car is a prank?
> That quote is from Nick Szabo.

Precisely. Do the math...
Also, zoom isn't 'idempotent', which can be annoying.
Заказать+строительство+дома+из+бруса+под+ключ
ZombieCode: Code that lasts forever
You have your salary denominated in dollars even though your national currency is Euro?
The longest single word .com domain name
it's a name, not a word. ;)
You lost me right around the point where you compared x86 vs x86_64 to a toaster and a teapot.

Nothing about Ruby forum software necessitates a 64-bit kernel. (Which I have, incidentally.) According to Docker, nothing about Docker necessitates a 64-bit kernel either! It's an entirely arbitrary requirement, inherited by the forum software for support reasons rather than technical reasons, and for some reason you are blaming me for not meeting it.

I certainly believe that people manage the 30 minute installation. I would've been much happier if I managed it as well.

And Web deployments must suck, or we wouldn't need Docker. Right? I mean, the whole appeal is that we can take all this arduous ad-hoc crap and just shove it in a box. Unfortunately, it's still arduous ad-hoc crap; we just don't have to look at it as often now.
Not sure about the unhackable claims part but it seems at least to be an interesting project. This is a formally verified L4 derived micro-kernel, its code is open-source (GPL2, BSD).

Homepage: https://sel4.systems/

Github: https://github.com/seL4/seL4

Related course (already posted on HN i think but can't find its associated thread): http://www.cse.unsw.edu.au/~cs9242/14/lectures/
Does readable MUMPS even exist?
Shark Bait
Lloyds appears to have an identical config:

https://www.ssllabs.com/ssltest/analyze.html?d=https%3A%2F%2...
> My ideal credit card would be on where the physical card has e-paper on it with a 6-digit PIN that changes periodically, like 2-factor auth, and that PIN could be required for purchases to be authenticated. The new smart-chip cards don't help at all with online purchases, only point of sale.

You may be interested in the system I use with my bank in the Netherlands.

The old system worked like this: The bank gave me a device they called a "Random Reader". To make a payment, I had to insert my card into the device, enter my pin, enter a (random?) number that the payment site gave me, and enter the amount. It then gave me a number back that I had to give the website, which authenticated me.

These days I use a "Rabo Scanner", which works the same except instead of entering a code and the amount it has a camera on there that scans a kind of barcode on the screen that contains that information.

So it does use the smart-chip, and the (8-digit) pin changes every time you make a payment. You do have to take the device with you, but it isn't very big.
32 bit x86 setups are very rare now under Linux, and you are really on your own - people no longer test with them and some software no longer supports 32 bit (eg Docker; I gather it will go multi architecture soon but I doubt much stuff will be built or tested on 32 bit x86 anyway). As your hardware can run 64 bit you have no reason to run 32 bit.
Its a cloud server, just install a new one, copy your data over and you are done. It is not a long term investment.
They also have http://sel4.com -- why wouldn't they use the .com as the canonical site instead of a more obscure .systems? (I say this because sel4.systems is linked from within the original article).

Also, the link http://sel4.systems/FAQ/proof.pml is a 404 (linked within the article where it says "Last year, Heiser’s team proved mathematically that their kernel is unhackable."). I guess this is meant to link to http://sel4.systems/Info/FAQ/proof.pml (where the claims are far more measured).
I wish the temporal delta between buzz generation and game release were smaller. By the time the game will be released, I will have forgotten all about it.
Problem Solving Techniques for Developers
Chinese iOS devs download Xcode from 3rd-party,spyware was added in compile time
The Curious Case of 42.0.20.80 (2012)
I've stopped paying notice to articles relating to: Teleportation, Invisibility, Cures for ilnesses in other species of animals.
BBC micro:bit delayed until 2016, predictably
Expected to Be Profitable in 3 Years – Kunal Bahl, Snapdeal CEO
It's great. Use it.
I'm Polish and seeing the prices in Germany was my first small culture shock. :) 20 euro for a mere 1GB that doesn't work more often than it does, ridiculous.

Also, what's worse is that you have to give the cell company all your personal information before they let you use your sim card! How is that not scandalous to people here is beyond me.
Yes. It's not unusual for contractors to choose to fix their rate in any currency. Sometimes I denominate it in GBP, even if neither of the two parties is in the UK.
Docker largely doesnt support 64 bit as the docker hub doesnt yet, and even if it did there are no prebuilt images for 32 bit, so you would not be able to install any software. This is unlikely to change as no one is going to build 32 bit images for all software given that x86 32 bit is extremely rare (guessing under 1% of installs perhaps less)
To avoid the credit card fraud, they'd have to only offer Bitcoin as a payment option. And that would be financial suicide.
Ask HN: Are blue-light blocking glasses effective?
Hi there,

Are those glasses really effective or is it just commercial bullsh*t?

Thanks.
Would it be possible to give us a better ETA on when something is likely to be implemented?

I was thinking of using recurly and this has put me off somewhat.
Reddit's Secret Sauce
But AUR scripts are limited to Arch and so pretty much a minority interest. Dockerfiles run pretty much anywhere.
I quite like Node BB...
Is your Boss irrelevant?
The problem with

> should accept non-conformant input as long as the meaning is clear

on that article is that the definition of "clear" is somewhat murky. Let's use the MySQL string truncation that spurred this thread as an example.

When asked to put 300 character string in a 255 character wide field, for MySQL it was "clear" that the user only meant to actually store 255 characters. From the perspective of MySQL, that actually makes sense: The field is declared as storing a maximum of 255 characters, so obviously, the user intends to store a maximum of 255 characters in that field.

Now look where this interpretation of "clear" facts has lead us to.

The issues that can be caused by "fixing" up invalid data are usually much harder (and more embarrassing) to fix than an exception that happens early.

Trust me: I'd rather get an exception than a CVE when given the choice.

Furthermore: By "fixing" up data, your fixes become part of the protocol. Implementations of clients derived from the broken implementation might not notice the brokenness and suddenly you're stuck with having to fix issues the same way for all eternity because becoming more strict will cause backwards compatibility breaks.

Worse: You also lock yourself out of the ability to later actually extend the protocol in a meaninful way because you're already accepting broken data.

Let's say you have a JSON based protocol that has a flag "foo" that can be set to some value: {"foo": 12}. Now there's a broken implementation of a client around that sends {"foobar": 12}. As you're "sure" that they actually mean "foo", you add an alias "foobar" to mean "foo".

Even though you've never intended it, now "foobar" is part of the official protocol and clients start sending this all over the place.

If at a later point, you actually want to support "foobar", you can't because that's already a hack to mean "foo", so now you'll end up with some crap like {"real_foobar": 1234}.

So not only is this behaviour irresponsible to clients (see the bugzilla issue), no, it's also a sure way to make your own life harder in the future as it makes for harder to maintain code and makes you lose flexibility in protocol design.
Yes, that's what I was wondering.
The primary paper to read is "Comprehensive formal verification of an OS microkernel" (2014).

http://dl.acm.org/citation.cfm?id=2560537
"subcontracted to 'the' India" is nothing more than a cliché.
Free PDF reader for the web browser
Fix the insecurities upstream or dont use the software. Else upgrades will be a nightmare too.
Okay, so, as far as I can tell, if the team just quits on him, doesn't his "company" just fall flat on its face because that guy that took over has no concept on how to run a software development project?
Does this work if I am in the EU?
I live in Paris suburb and Autolib isn't useful for me and the lost of parking space complaint is quite real.
So 'pure awesome' for its customers, probably, annoying for other: that's true also.
Open the floodgates of traffic to your website
Same here ;-)
They don't. They just force less disciplined devs to incur less technical debt by making interfaces inviolable.

Personally, it would take a lot for me to switch a part of my monolith to a microservice and lose the speed of having everything done in the same process and the guarantees that having a single relational database offers. Having to reconcile data that got off sync because it was in two different data stores is not fun for anyone, and, to me, it's not worth it just to force yourself to not call any private methods on the other service. I just expose a public ABI and say "to interact with this part of the application, you may only call these functions here".
I think is an amazingly absurd project, in a good way :)
Yet Another iOS Adblocker App – By Dolphin Browser
It's going to be free and published in App Store very soon. And here is how it looks like: https://www.youtube.com/watch?v=WRvyyC29Y8A

Any suggestion/idea is welcome!
I've been looking forward to this for an extremely long time. But it looks so promising that I go to the game blog once a month or so to see what's happening
I was 'surprised' how weak the bbc interview was he lied several times during this interview and they did not pick him up on these lies once.
Dropbox 2015 Campus Cup
didn't grooveshark die?
I hope you can imagine why I might not want to reinstall the OS and have to redeploy half a dozen other things, just so this particular one gets easier.
How small of a chance are talking about? 1 in a hundred? 1in a billion? 1 in a billion billion? The backpack the clock was in can do more harm, yet it wasn't investigated.
As the joke goes :

Hey baby, I have the name of that famous Welsh railway station tattooed on my cock ..... Rhyl
XcodeGhost Sample Analysis
Is another human living inside you?
First Swiss Python Conference: Call for Proposals Is Open
Multiple problems with that statistic. (1) you quote England and Wales, what about Scotland and Northern Ireland? (2) The police in the UK do not generally carry firearms and most people that die in/at the hands of the police do not get shot in the UK.
I suppose that's a good point - it would be a remarkably well executed scam, since it had all the account numbers, and details that I use with that client, as well as the actual amount from the invoice I sent them, printed on it. I didn't hesitate to believe it at the time.
https://github.com/gutomaia/pyNES/wiki

Non existant docs.

IMHO one of the first steps of starting a project is to write a README.

Though, at least there are few examples: https://github.com/gutomaia/pyNES/tree/0.1.x/pynes/examples
Join us in Amsterdam to handle more than 1500 search request per second
Do you have an RSS feed or a link to where that post may show up? Thanks, highly interested!
I agree, and I do (if I end up actually keeping a piece of software running).

It's also quite likely that a pre-built docker image isn't going to satisfy everyone's deployment requirements.

Starting out with a philosophy that you'll make all the configuration and security choices for every user of your project isn't a great start, and that's how I read all these hard-coded assumptions.
Note that the SEL4 kernel is only a small portion of this project. They've secured the entire stack, top to bottom.

HACMS leverages a number of other projects including the CompCert verifying C compiler, Verve OS Theorem prover, model checkers. You also need need proofs for the communication protocol, the IP stack, secured device drivers, memory protection units, control systems that can detect attacks, etc.

Just a proven kernel won't keep the helicopter flying, you've got to secure everything. Additionally you need to reason about execution time and memory constraints.

Slides: http://www.cyber.umd.edu/sites/default/files/documents/sympo...

Presentation from Kathleen Fisher, the researcher who's won the DARPA grant for the program:

* https://www.youtube.com/watch?v=YqRdbgRPYw8
Collaboration Mistakes That Could Cost You Big
"Please dump that liquid we think is an explosive into the trash can containing other liquids we suspect are explosives. The trash can that everyone is standing near."
If a physical trait causes people around someone to feel fear, alarm and distress, then that person actually is threatening and it's not acceptable.

As noted above, other physical traits (e.g. blackness) also cause those reactions. Your claim - namely that people's subjective perception, rather than objective behavior, are what determines the bounds of acceptability - seems to prove too much.
Sensmove – open-sourced smart insole system
It would still be fairly easily to smuggle a bomb through security. But it would be even easier to smuggle it in through one of the other entry points into the airport. Or just build a bomb with stuff found on the inside.
"did lose weight, though they experienced no changes in body composition, such as body mass index"

They got shorter from using standing desks? Only way you can lose weight but not change your BMI...
There is strong competition in that sector, hence the prices.
Yes

The text begins with a 'sad story' about bullying but apparently they forgot the lesson on taking a stance.

"Team Paladin" what's this, a rip-off of Silicon Valley written by 'Armageddon' screenwriters?

Good thing it ended with a good conclusion (aka foot to the behind)
But still software running on top of it might not be secure and proven. And as well the hardware is another area for attacks and failures.
Not anti-China, it is anti-The Communist Party of China.
The Communist Party of China is evil.

Xi Jinping: "We love peace" ,But his CPC's State TV commenter on parade: "Look at this missile, it can hit Hawaii"

U.S. help China fight against NAZI, but China under control of The Communist Party of China will become another NAZI
I'm not sure it's all that significant - it's been inevitable for years, and Chrome and Firefox will still work.

Running a 14-year-old browser on a 14-year-old OS and complaining about support being dropped is like running a computer with 256MB of RAM and complaining you can't play the latest games :)
Yes, lamentable, but we all know the fun part is writing the code, not the docs, and obviously this was a for-fun project.

Maybe someone else can document it if the creator doesn't have time.

At any rate, I'm happy it exists, getting a toy game running on actual hardware will be hilariously fun for me, if it works. I don't mind using the code as the documentation for something this obscure if docs aren't available. Better than having to spend time learning 6502 assembly just for screwing around with NES games (or NES demoscene, hmm... it's probably cheating but it'll be fun.)
From a statics point of view, there are no terrorists. But let's assume there are, only a dumb one would be afraid of being caught in line.
But let us suppose you are right, TSA deters the boogeyman. So instead he will just attack something else. But were are all these attacks? Why do we assume only planes will be attacked?
There is no .Net here AFAIK and if there was it's not a problem. It's software defined networking that happens to use Linux as a kernel.

As for .Net, ASP.Net 5 runs fine on Linux and OSX without any COM or registry dependencies. It is entirely platform portable and open source.
Huh, did you really run iOS9 ad blocking on a Motorola Defy? I definitely believe Apple's position is 99% marketing, but I can imagine there are some common pages that load really slow on older hardware. I've seen older iPads crash consistently trying to render complicated pages.
Somewhat similarly, many Dutch people don't use credit cards (which is very wise IMO hehe), and over here we have something called "iDeal" that's really only supported by Dutch webshops. Bitcoin can be a handy alternative to cc/paypal for us.
I semicompleted a game in NES in C, and even I was hitting walls constantly when it comes program size or performance. I have my doubts for python.

Here is the library I used.
http://shiru.untergrund.net/articles/programming_nes_games_i...
It is pretty simple but you will need some about how NES works.
Taken literally, yes, but I'm guessing what it actually means is lost fat. Assuming similar mass was added in muscle, BMI would remain the same. (BMI not being a terribly useful metric...)
now someone suing MS for patent infringement for using Linux - would make me giggle
Some EM companies issue bonds in international markets not using their national currency
New 2015 Google Nexus 5 Leak Shows Phone in Mint Color
In one of his latest video he show how it is going to work for array access: by default it's checked, but you have a directive to make one (or a block) of array access unchecked and then you have a global directive which can change the default to check all the array access or NOT check all the array access.
So you get the full range from safe array access to C-like performance and with the possibility of dropping the checks only where this impact really performance.

Memory safety isn't limited to array access, but I really like the idea of this kind of control (even though for library this could create issue, I think that there are plans to allow the use of an 'ANDF' like format for libraries).
A handshake agreement (not written down) can definitely hold up in court so be careful in not giving any claim you are owed through your claiming of money as it could represent your giving up your potential equity as well.

Doesn't matter if he has an LLC, you may likely have claim if he was not clear that you were not receiving equity (i.e. such as if you were coming in as a contractor).
iDEAL is fine for transactions between a Dutch client and a Dutch merchant. Other countries also have similar, local payment solutions which bypass credit card processors (e.g. POLi in Australia and New Zealand)

But it does nothing for a business like Candy Japan which sells to a global audience. The advantage of credit cards is that they are one payment system that works pretty much everywhere, worldwide.

Also, you should realise that, as a customer, you typically don't have the same chargeback rights when using a banking service like iDEAL compared to what you get with a Credit card. This can be a big deal when, for example, a merchant goes bankrupt before delivering your purchase.
Wikipedia comes in many languages, so ultimately they require the mapping system to display labels based on the language of the user.

This can be complicated - imagine a wiki page about Paris France, translated into 40 or so languages each with their own high performant, cached map served from the same system. Wikimedia maps will be beyond awesome in a few years!
Building a PC, Part VIII: Iterating
Cool, nice to see. I've been wanting to convert my current sit/stand desk [1] to a treadmill setup for a while, but I'd like to work out a way to maintain the ability to relatively easily switch back to seated mode. Still need to think on that a bit.

[1] http://www.tempestblog.com/wp-content/uploads/2015/09/201508...