skysight-inc/HackerNews huggingface dataset:
I assumed that's what the video in the article was about [0], but I haven't watched it to be sure. Is there anything in particular that isn't clear from the article? Or are you asking about docker security concerns beyond what this article is about?

It seems the main point is if there is any way to exploit code running within a container that has unfettered root access to the host system via the docker socket, an attacker would then have complete control over the host system.

Exploitation is often mitigated in layers, where if Service A is exploited, an attacker can only rwx what and where Service A has been granted priveleges to rwx. That should be as little as possible, the bare minimum access that service needs to operate. There's no reason your web server or database should be able to install new programs, create users, etc.

If Service B is running in a container and is given access to write to the docker socket, suddenly any exploitation of that service opens a door to immediately have full and unfettered root access to the host system.

> [0] FTA "... ended up making a screencast to unambiguously demonstrate the flaw in their setup..."
> This libertarian idea that people would give more if they weren't taxed is utter bullshit.

This. Libertarians live in some sort of idealistic fantasy, where most humans are intrinsically good, and inclined to do good, like help the poor and needy around them. That is emphatically not the nature of the average human. We absolutely need to force and coerce people to do good, under the threat of violence (for non-payment of taxes).
Their efforts could have been actually beneficial for everybody if they decided to contribute to ReactOS. That way they could have had something instead of LibreOffice skins and a dead-end Linux fork.
Lenovo once again caught shipping laptops with spyware pre-installed on them
No he didn't.

The three apps in the title are different for everyone.

I use a network diagnostics app every now and then and it's wonderful. I doubt that would've made the cut, and I paid for it even though it's not in the 80% time spent. I would've paid 10 times for the equivalent application on a PC, but I didn't, and I get to carry it in my pocket.

Imagine if computers had only 10 apps.
Solving problems – Every rock climber is un-knowingly an algorithm designer
FACEBOOK: IPv6 is here and You're Hurting your Users [video]
Interesting, and very much an American thing - never heard anyone say 'on accident' here in the UK.
Avoid email snafus with this handy guide to email etiquette
This is the current system, but with "use this physical item, the SIM card, to login".

This does assumes that the replacement phone in question is unlocked so can work on the other SIM card, but is certainly something that many people do quite often.
Hey, at least his grep did have the --color switch enabled.
Did you set age to 49? If you've made it this far (well done, BTW) you're chances of still ticking for log enough to worry about your 60s are pretty god, >90%.

Still, the possibility of not making it another 10 years is quite a bit higher than I am personally comfortable with, at pretty much any age. If someone has an idea for an immortality startup, I would definitely be willing to pay the $29 subscription. I would even seriously consider the $79 pro tier.
BMW dragged into Dieselgate scandal as X3 exceeds EU emissions limit
Tips on how to approach market,this is the resource and it is 100% free
Free Tool: Hints Creation with EnjoyHint
All-cause mortality was 5.85 per 10,000 person–years among people
with ADHD, compared with 2.21 per 10,000 person–years in people without ADHD. The risk of death
among people with ADHD was more than double that in the general population (adjusted mortality rate
ratio [MRR]=2.07, 95% confidence interval [CI] 1.70 to 2.50, p<0.0001).

They then give the mortality rates for those diagnosed with ADHD another disorder or substance misuse issues:

Age at diagnosis of ADHD was associated with mortality, with the risk of death highest among people
diagnosed in adulthood (adjusted MRR=4.25, 95% CI 3.03 to 5.78). Mortality among people with ADHD
was also affected by comorbid oppositional defiant disorder or conduct disorder (adjusted MRR=2.17,
95% CI 1.33 to 3.31) and by coexisting substance misuse (adjusted MMR=5.63, 95% CI 3.69 to 8.16).
Among people without these comorbid conditions, mortality was higher in girls and women with ADHD
(adjusted MRR=2.85, 95% CI 1.56 to 4.71) than in boys and men (MRR=1.27, 95% CI 0.89 to 1.76).

The part I found interesting here, that they don't seem to mention elsewhere in this article, is that the mortality rate for males with ADHD but without the other disorders is actually lower than their general population numbers (2.07 general population vs 1.27 for males without one of those issues). They actually seem to completely ignore it:

“Even if these complications did not develop, ADHD was still a risk factor for mortality. This could well be
because the core problem of impulsiveness is a cause of accidents, and accidents were the major cause
of death.

I'm going by the adjusted mortality rate ratio number. If I'm reading this wrong, please let me know.
>Evangelical groups, he said, lure the homeless with offers of food, clothing and showers. But their promises of salvation are ignored, with the men resting inside for a few days before returning to the streets and their stupors. The government, he said, has one hospital where alcoholics are taken for up to two years. But there are few opportunities for work once they get out, so the path often leads back to the streets and drink.

If they choose to stay in that position and I never see them that's still a massive net positive. If people want to get obliterated by their addictions and ignore any help available to them then it's silly to interfere with or enable that lifestyle. At that point they've made a choice and I expect the local police to deal with the problem of homeless aggression and harassment. Make help available, and if they choose not to take advantage then continue to remind them help is available while at the same time keeping them from being a public nuisance.

To give you a personal experience: I was followed for a full block and cussed out by a homeless guy just the other day, a choice quote was "it's fuckin Ann Arbor man I know you got money!". My crime? "Sorry, I don't have anything for you, there's a shelter nearby that could really help you out".

These people are a problem, and it's not just because they're "suffering". No individual city is going to fix this problem, and frankly no country is going to fully fix it either. Denmark for example still has a sizable homeless problem despite a massive amount of help available simply because some people choose to be chronically homeless.
zyxley, you took the words right out of my mouth ..
Relative poverty is just not considered important enough in this world by some to do something about .. but then when that very person who could have been helped earlier on isn't, the media cry a river over their worsened condition and misfortune.
I've used duktape as an extension language and wholeheartedly recommend it. It does the job and caused me zero problems. I can't ask for more than that in software.
I'm not opposing this idea, but I'm not sure it would have helped in the VW case. There were some people (engineers? Managers?) who were cheating and they knew that what they were doing was wrong. I don't believe a license would have changed that.
Jail and/or prison. That is where many of them end up. Some judges would rather see someone get "treatment" in custody than get nothing on the street.
A grand don't come for free – a $1000 startup challenge
"traffic collision"
If you run out of money or health insurance getting properly treated for mental illness is impossible. Once you lose your job due to mental illness you eventually go on disability and once this occurs it is a long spiral downward. This is due to the elimination of funding for the mentally ill.
FYI, I downvoted you for your condescending second line.
Two things to add to the other comments: the language is named after Haskell Curry, from whom we get the term "currying," which is what we use to describe "the process of transforming a function that takes multiple arguments into a function that takes just a single argument and returns another function if any arguments are still needed".

Secondly, note that in Haskell a space represents function application -- it's not just there to separate terms.

This stuff might seem crazy, but once you start using it for useful things you come to really miss it in other languages. :)
Mmh, binary configuration blobs. No, thanks.
The "always feeling behind", is actually helping me personally. If I'm not just a tiny little bit stressed, I start procrastinating. I need to have something to lose, otherwise I'll never get going. So I tend to work myself into situations, that require me to put in an extra effort.

It's just how I work, and I've forgiven myself for it.
There's no such thing as 'trickle down'. Cite me one serious economic paper which has referenced it. It's one of those things that through shear force of repetition people believe that it is a real theorem.
It's actually a nice example of places where technology plays a real role, especially as we accumulate a lot of these little tools. This would be a handy little widget to have in a high school textbook.
An interesting companion would be J.L.Austin's "A Plea for Excuses", where he contrasts "by mistake" and "by accident".

(Google books link, but the PDF is available widely)

https://books.google.no/books?id=CPKHKvge3Z4C&lpg=PA379&ots=...
So, how do you get people to accept the consequences of such games?

How do you explain to Japan that one of their inhabited islands belong to China now, because the Computer says so?
And what do you do when it turns out the initial simulation was wrong, but since China moved half a million people over in the mean time, there's really no way to take it back any more?
You still have not explained why homelessness is a problem.

There is plenty of places on earth I wouldn't go to, for example Northern Canada it doesn't mean I am not living a full life. Should I be on the quest of speeding up global warming to be able to see palm trees growing there and finally make it suitable for me to go? Nonsense.
If most humans are _not_ intrinsically good, why do we have leaders who have vast amounts of power? Unless you're suggesting that all the leaders are the 'good' people?
I think it can. I think if we are absolutely fine with sponsoring animals and finding them new homes etc .. why not apply a similar model for homeless people? An organisation can tailor a plan best fit to each individual and crowd funding can help get them on their feet .. states sponsorships/grants etc can surely be utilised here also for training schemes etc. So now it's not just about giving someone a roof over their head but a life back. Well, this is off the top of my head, could use some input obvs but allow the talking. Let's get started :)
Of course they are indicators, but why exactly this is a problem?

What homeless people actually do so that you don't want them to be what they are?
Do you have any evidence to support that?
Plenty of politicians pushed trickle down.

http://www.psmag.com/business-economics/trickle-down-economi...
R Graphs via Golang API
Jail is different from prison how?
It's true. But in a sense, everything is an act: the behaviors that might sometimes feel a little phony in adulthood, but are still easily maintained with only the barest hint of conscious thought, were completely unknown in infancy, but, as we witnessed them thousands to literal millions of times, were eventually engraved so thoroughly into our pattern recognition systems that we can no longer make any true conception of being without them. Indeed, phoniness marks the tip of the iceberg: nurture affects to some extent all morality, emotion, and logic, even those aspects that seem the most pure and natural; true, we can deduce from evidence like universality among cultures, the behavior of animals, evolutionary principles, etc. that some of it is truly hardcoded into our genes, but there are no sharp boundaries...

Not that any of that is a bad thing. But in a sense, 4chan is a simulation of what we could all really, honestly be like in a different environment - to the extent it's fueled by acting, it's just compensating for the fact that nobody is raised there from birth.
If most people aren't good, why do they vote for governments that take away part of their money to give to the poor?

(By the way, I don't think most people would give more if not taxed, at least all else being equal, but not because they're "not good". There are many incentives at play.)
I'll be monitoring this submission, ask any questions you may have :)
Understand today's financial news within 5 minutes
Considering the Russians have been footing the bill for ReactOS for a while now and it's still no closer to being actually usable, I highly doubt it would make the slightest difference.
Me either. Although I'm in the "Before around 1970" group, so maybe I'm self-selecting my experience based on my similar-age peer group.
Product Hunt Launch for Solid: 2k Signups, 13k Visits, Sustained Effects
Show HN: DOTNET web application monitoring – front end, back end, infrastructure
If you had nothing yet, couldn't you just disband the company and start a new one?
Seconded. I've never heard this in the UK from people of any age.

I wonder if it has anything to do with the way "an" sounds when spoken with an American accent. A mishearing and then repetition of "an accident" seems much more plausible to me than confusion with "on purpose".
OK, thanks. Yeah, we'll look into the Name.com API if we don't get some more prompt responses from DomainBox (with whose customer service we're chatting for the past two weeks to get even the most basic API calls working).
Seems a bit weak - I don't think you can really drill down onto one episode as one that 'hooks' a viewer, rather than all the subsequent episodes being excellent. At least, this article didn't convince me.
A container is just running a process or chroot in its own namespace. If you run it as it is you have a single process container like Docker uses, if you run an init in the namespaced process you have LXC or OS containers that can support multiple processes like a lightweight VM. [1]

With LXC containers you start them as root and there is no lingering background LXC process running. Docker also starts containers as root but also has dockerd hanging around presumably so non root users can interface with it. But the container process is still running as root so dockerd seems a bit redundant and unnecesary.

This is because untill recently you couldn't run chroot as non root users and needed to run containers as root. But 'user namespaces' (> kernel 3.8) changes this and allows users to run processes in namespaces as a non root user. LXC has supported unprivileged containers for some time now [2] so you can run LXC containers as non root users, as in the entire container process is unprivileged. Docker and Rkt are working on this but its not simple to implement for container managers as non privileged users cannot access networking and mounts. But when it does presumably dockerd can run as an unprivileged process.

But Linux kernel namespaces have not been designed for multi-tenancy for instance cgroups are not namespace aware, and untill this changes in the kernel, containers will not provide the level of isolation or security required for multi-tenant workloads.

And containers managers like LXC or Docker that take these capabilities and merge them with networking and layered filesystems like aufs or overlayfs cannot work around this. Parallels OVZ is designed for multi tenancy but the kernel patch it appears is too large and invasive and doesn't look it will be merged.

So user namespaces is one level of security and isolation, you can also use seccomp, app armour, selinux or even grsec. But you have to find the middle ground between security and usability and given the relative confusion about containers, namespaces, and container managers it will take time to mature.

[1] https://www.flockport.com/how-linux-containers-work/

[2] https://www.flockport.com/lxc-using-unprivileged-containers/
Adding Javascript support to high-performance reliable web server does not seem rational from the engineering point of view.

I'd rather added support for the safe subset of some statically-typed, high performance language compiled to LLVM. This language must be without asyncronous GC, so its memory use will be predicatable under high load.

Javascript on server side is so vogue-ish. Vogue will change soon but uglyness of architectural decision will stay with Nginx forever.
Open source Slack-alternative adopts markdown
Check www.hyper.sh and https://github.com/hyperhq/runv

They can boot a new VM with Docker images in 200ms, which is very close to LXC, and perfectly isolated by hypervisor.

The problem of "Virtual Machine" is not "Virtual"/Virtualization, the problem is the full blown guest OS, aka "Machine".
So what's the desktop environment?

Did they theme an existing one like Gnome or KDE or did they wrote one from scratch?
Silicon cul-de-sac
O+&+O+Diskrecovery+10+Key+Activator+build+252+all+editions+Download
I think changing yourself goes like this: thoughts->emotions->habits. You need a clear victory(albeit a philosophical one) in neocortex so that you can start to train your limbic system.
The scatter plot looks like Denmark.
In context of US: http://sheriff.org/faqs/displayfaq.cfm?id=4f892698-5c5d-40f8...
Funnily, "Me either" is also an americanism that seems rather foreign to me. (Me neither would be more likely to be used in the UK in my experience). I think both are rather informal and so neither is necessarily incorrect.

http://ell.stackexchange.com/questions/33544/what-is-the-dif...
Last autumn I was involved in working on a similar web app [1] for WorldBank which consumed its data sources.

I think it should be more accurate as they at WorldBank collect the data from multiple sources and process it in a scientifically precise manner. You can enter country you live in, which can make a dramatic difference.

[1] http://population.io
Google Warning – Is Your Website Using App Download Interstitials?
The computer programmer in me says both are valid:

"on accident" is a pre-prepared behavior that will be employed when an accident occurs in the future.

"by accident" is metadata accompanying an event, reporting the author or agent that created the event.
I think not, but Meteor or Keystone.js might get there some day.
Awesome Free Stock Videos for Designers
You don't need a real attacker to want safety from assumptions that will be true the vast majority of the time, such as "same hash = same file".

For example, I might have md5-colliding files on my hard drive somewhere, that someone else made as a proof of concept. I honestly don't know. But I would worry about using a storage system that depends on md5, because what if it deduplicates without checking every byte?

For the same reason that UTF-16 has encouraged so many broken implementations, at least in a pre-emoji world, it's a bad idea to almost but not quite support convenient features. Either clearly don't support something, or fully support it.
Part of the objection is about tax rates, sure. But there can be ethical questions about forcing people to pay for things. The government could be funding churches. Or, in a dystopia, using the money to sterilize the mentally ill.

Moral objection to spending is what what the defunding of Planned Parenthood and the boycotts of Chik-Fil-A are about. I don't think there will be controversy around treating suffering people, though.
One of the interesting ideas from this article is how simulations can map out how a war is going to turn out _badly_ for the people who wish to engage in it, such as Vietnam. Of course, the wargamers' advice was not heeded in the case of Vietnam, but this strikes me as probably one of the best ways in how war games could "replace the real thing", because a computer simulated it, and turns out the war is a terrible idea.

This leads to the other interesting idea from Buckminster Fuller: that Earth is a (ONE) spaceship, and we need to quit acting like each nation is on a different ship...
Roughly Americans use prison to refer to places where people are held after being sentenced, and jail to refer to where people are held before sentencing. Or sometimes jail refers to short sentences.

http://www.hg.org/article.asp?id=31513

In England we'd tend to use prison or jail for prisons and "on remand" for people awaiting trial or sentencing, and "police cells" for other stuff.

In the US a lot of prisons have high populations of people with mental illness. See, for example, the use of prisoners to care for other prisoners who have dementia.

http://www.nytimes.com/2012/02/26/health/dealing-with-dement...
The original research article is:

http://www.ncbi.nlm.nih.gov/pubmed/26274315

"Loneliness and implicit attention to social threat: A high-performance electrical neuroimaging study; Cacioppo S, Bangee M, Balogh S, Cardenas-Iniguez C, Qualter P, Cacioppo JT."

Note that the researches explicitly don't evaluate the reactions as being "more negative." They measured the speed of the threat detection in ms: 100 ms vs 250 ms.

"Abstract: Prior research has suggested that loneliness is associated with an implicit hypervigilance to social threats-an assumption in line with the evolutionary model of loneliness that indicates feeling socially isolated (or on the social perimeter) leads to increased attention and surveillance of the social world and an unwitting focus on self-preservation. Little is known, however, about the temporal dynamics for social threat (vs. nonsocial threat) in the lonely brains. We used high-density electrical neuroimaging and a behavioral task including social and nonsocial threat (and neutral) pictures to investigate the brain dynamics of implicit processing for social threat vs. nonsocial threat stimuli in lonely participants (N = 10), compared to nonlonely individuals (N = 9). The present study provides evidence that social threat images are differentiated from nonsocial threat stimuli more quickly in the lonely (~116 ms after stimulus onset) than nonlonely (~252 ms after stimulus onset) brains. That speed of threat processing in lonely individuals is in accord with the evolutionary model of loneliness. Brain source estimates expanded these results by suggesting that lonely (but not nonlonely) individuals showed early recruitment of brain areas involved in attention and self-representation."
Juju: Service Modeling Made Simple
The "if we're wrong, we'll win" boast by Smith is pretty damning, if you ask me.
Interactive: The Top Programming Languages 2015
4XL and 10XL Amazon M4 Cloud Instances Are Now Available
t0: Yeah man, just use Grunt.
t1: Oh no, nobody uses that, use Gulp.
t2: Gulp??! Webpack!

Maybe Im being ignorant, but I don't remember even Rails being this crazy in its early heyday :)