skysight-inc/HackerNews huggingface dataset:
Isn't this basically "working as intended"?

Gatekeeper is not meant to eliminate security bugs in third party applications: Anyone can sign anything, there's no review of your code by Apple. But if your app turns out to be malicious, Apple can revoke your certificate and now it's blocked.

In this case, the relevant app isn't malicious, but it will run arbitrary unsigned code that happens to be sitting next to it in its directory. It could just as well do something stupid like opening up an unprotected port and accepting shell commands.

It's up to Apple to decide whether this flaw is egregious enough to add the developer to the CRL.

The article implies they're investigating other mitigation strategies. I suppose there are options to block this particular scenario, but overall I can't see how they can ensure that developer-signed code is vulnerability-free.
Personally, I'm much more impressed by the crash safety than stuff like emissions.

It's hard to get people to care about emissions. But almost everyone has been in a car crash at some point. Most people know someone who has been killed or severely injured in one.

What makes Tesla remarkable is that their EVs aren't just good EVs, they're good cars. Previous EVs were basically sold as, "Well, this is kind of a crap car, but it doesn't burn gasoline!" And then people wondered why there were few buyers. Being extremely safe is a big part of that whole "good cars" thing.
Hi, thedevopsguy.

The whole goal of beluga is to take your docker-compose project from your machine to a remote host and have it running.

It's meant to be used with the existing docker-machine & docker-compose tools and shouldn't interfere with any internal docker apis.

Beluga was originally written in bash as we didn't want to impose runtime dependencies. Bash is usually pretty much available everywhere expect bsd.

It also accounts the fact that if you have to deploy to multiple machines you won't have to rebuild your project everywhere as it can push and pull the images from either dockerhub or your own self hosted docker registry (either https://github.com/docker/docker-registry or https://github.com/docker/distribution).

Here's a link to a sample node.js project that is deployed with beluga. https://github.com/cortexmedia/Beluga-SampleProject-Nodejs

It's pretty much a standard docker-machine & docker-compose project but with an additonal file.
Laura Poitras: "I asked to interview him on camera. His first response was no, he didn’t want the story to be about him."

Now he's got twitter and edwardsnowden.com?

Personally, I give him the benefit of the doubt in all cases. I think there was a lot more that he could have leaked and didn't, because he believes in the value of the NSA. I think he was careful to only leak things that dealt with mass surveillance of American citizens. I think he gave up a lot of comfort to try to inspire a society that he knew in the back of his mind probably wouldn't care. I think he loves his country. Most of all, I think he's probably further on the side of national security in the privacy vs security debate than people would probably think.

But other people aren't like me. I really hope Snowden is able to bring the conversation in the right direction, because this debate about what our government should be doing is far from settled and there's a lot riding on his demeanor. There's a lot riding on whether average Joe sees Snowden as profiting from his whistleblowing or giving up his comfortable life.

Snowden making funny tweets is extremely high risk.
I think I was taught the adjective order as in generic to specific.
I was actually thinking that this manual would be great for people like my dad! He isn't a politician but it would help him figure out how to use it and having a manual he could use would make him much more comfortable getting started on a new product.

He currently uses Facebook and I get the feeling a Facebook manual would be helpful for him, but I wonder how long that manual would be and if there would be any overlap with this one.
Self-Driving Cars Could Save 300,000 Lives per Decade in America
I have never commented on HN before, but this thread drew me to actually create an account. It is a great example of a conversation gone awry, and people putting personalities over facts.

As someone who works on scheduling code in one of the aforementioned architectures, inversionOf is correct on all counts, at least in regards to these architectures and power to performance. They may be rude and obnoxious, but your claims through this thread have been entirely off the mark and do not serve the community well.

Workloads are monitored for intensity. If they fall low enough they are migrated to the little core because it offers a much better total performance per unit of work. The frequency of the cores (whether big or little) are adjusted to fit the workload. If the workload is really low, we put the core to sleep. Sleep is, exactly as stated, the last possible, coarsest measure.

Sleep is not a replacement for frequency scaling. Frequency scaling achieves a half measure of what core migration achieves.

You don't have to believe my credentials, but you claim that "3 experts" have supported your stance. That simply isn't true. No one who works on scheduling algorithms for these platforms would support your claims.
I'm surprised he's using Bitcoin, since bitcoin is a ponzi.
>SUPPORT GROUPS HELP cult and gang members break free of their former lives. Alcoholics and Narcotics Anonymous help addicts overcome their dependencies. And now one group of privacy campaigners wants to offer its target audience an escape route for what it sees as a equally insidious trap: Their jobs working for intelligence agencies like the NSA.

I doubt most people working in this field think they need some kind of AA support group because they are brainwashed and need an escape plan. These people are perfectly sane, reasonable and content with what they are doing. I don't see how hard that is to understand, that some folks might hold a different worldview about surveillance than you do, and that in fact they are not idiots.
Beware:

> They will also get auto raised, meaning the window on which the mouse hovers which be brought to the foreground.

If you don't want autoraise you have to hack the registry. And even then it works very badly. A lot of apps, at least back when I was using XMouse on XP, assume that if they have the focus they're at the top of the stack, and some (mostly the Microsoft ones!) will autoraise themselves regardless of the registry setting.

Focus-follows-mouse on Windows isn't, or at least wasn't, much of a success. It was marginally less annoying than click-to-focus, IMO, but only marginally.
I just donated to them, and you should too:

https://www.indiegogo.com/projects/intelexit-the-backdoor-to...

This has to be one of the best way to spur change within the intelligence gathering community. Hit them where it hurts, their people power.
My thoughts exactly. And I don't think it's just lead footed drivers, the lag on some of these small turbo charged engines is so great that most drivers will feel they have to stamp their foot to the floor just to make the car move.
> It looks like all the good points they have could be replaced by local community initiatives and collective planning.

The problem is, they're already there, and local community initiatives are not. The hard thing is the road from here to there. You can't just suddenly remove them and hope things will go all right.

As for collective planning, it's getting harder to sell these days; it's expected of every country to be some kind of democracy.
You were probably already monitored for accessing websites like https://gnupg.org/ and other websites like it that show up on HN all the time.

Not to mention as a programmer / sysadmin you are a prime target for exploitation of credentials if the NSA wants to access to company employing you.
As other people have pointed out, there is a difference between "boredom" and "idleness". As for idleness, Russel puts it well[0].

[0] http://www.zpub.com/notes/idle.html
I don't think there's any suggestion that VW used these techniques, but there are other indicators that could be used. Things like "If the car door or bonnet is open while the engine is running, switch to low-emissions mode", or using the GPS information (a GPS-measured velocity of 0 with an engine running in gear suggests that the car's on rollers).

I've heard stories of cars using these techniques to cheat in tests, but I couldn't find any reliable citations.
Solar Cells Made Obsolete – 3D rectennas aim at 40-to-90% efficiency
These things look neat, but wouldn't this be teaching programming at scale? The phrase "learning programming at scale" leads to the idea of someone trying to learn how to program who is also able to repeatedly enlarge the amount of stuff that s/he is able to learn at once. That's...not really what's going on here.
I thought this was in reference to Apache Spark.
I distinguish between motivation and discipline. Some things just aren't that interesting but they need to be done, and I used to whine about lack of motivation. Then I "discovered" discipline when lack of motivation doesn't f'n matter. Just do it. When the importance wanes and tedium exceeds, I stop and go do something else. When everything seems more tedious than important, I go to sleep. I don't really ever call these things boredom, but I like the idea from another poster that boredom is a signal like hunger. Neither right nor wrong, just a state signal.
Can anyone shed some light on this?
Ah yes, 'falling short' on places such as the New Cross Woolworths, leading to deaths of 168 persons, and laying waste areas such as Peckham where the fall of ten or more V1s and V2s were packed into a few streets - the area is still partly undeveloped. These unassuming residential and commercial areas took the shots intended for the centre, a few miles North.
It is kind of weird that this is surfacing just now. There are magnitudes more VW owners than Tesla. Why have not the consumer studies revealed this a long time ago?
A nice complement to Akka is Spray.io[1]. Not really meant for CRUD type apps that is the subject of the original question, but very well suited for REST systems.

1 - http://spray.io/introduction/what-is-spray/
Maybe it's the other way around. You have to be extremely serious when your goal is safe C/C++.
Looks like Snowden is stepping up his PR game. I think this is good. The disclosures have dropped off until recently, so we need to refocus on keeping the pressure on the government, and Snowden is a convenient figurehead for this purpose.
It's perfect for his situation. Also calling it a Ponzi scheme is a bit of a stretch. And by 'a bit' I mean 'a lot'.
Challenges and Triumphs of DevOps in Large Enterprises – Video Chat with Gene Kim
You mean more than we already are?
I could imagine a scenario where this started out as something less evil. Seems to me that cars will perform differently in a lab than on the road; off the top of my head:
- Stationary cars have different air-intake characteristics
- The temperature of the fuel and air is likely different
- The humidity of the air might be different
- The fuel in the tank is stationary not sloshing around

There may well be valid reasons for the software to vary engine parameters test mode; maybe to compensate for the above.

Then sometime later someone said "This NOx Reduction module is killing fuel efficiency on the open road, how about we turn it off"

The net result is the same but motives and intentions of the individuals are important.
> The current of the flowing river does not cease, and yet the water is not the same water as before. The foam that floats on stagnant pools, now vanishing, now forming, never stays the same for long. So, too, it is with the people and dwellings of the world.

https://en.wikipedia.org/wiki/H%C5%8Dj%C5%8Dki
After Avid acquired Softimage 3D from Microsoft, the next version, coined Softimage XSI, had a Linux version available through MainWin. It was diabolical. But it limped on; over the years maintaining an extremely tight version range of external library dependencies. Last version I used required Fedora 7 x64, a minor-version specific driver for FireGL/Quadro that just so happen to be on the CD that came with the HP XW workstation. Bite the head off a chicken, and boil snails with lizard tails, let it cool to room temperature, re-boil and simmer throughout use of softimage.

Softimage is now declared dead by their current owners, Autodesk.
Mr. Snowden is going to have to wait for a change of government in the U.S. before he can return. The Obama Administration, as well as several senior Republicans, have all called for his arrest and punishment.

Hillary Clinton is hostile to Snowden as well. Her administration, were she to be elected, would doubtless continue to pursue his extradition. Trump wants him executed, and even Rand Paul wants him thrown in jail ("same jail cell with Clapper").

I'm very sympathetic to Edward Snowden's cause, and I hope that he stays away from countries that might extradite him until such time as he's granted a pardon.
It's not accurate to compare this to a building falling down.

Nothing went wrong, the code did exactly what it was designed to do.
Let's not lower the discussion down to the level of insults. Bitcoin has both virtues and flaws, but to say it is a ponzi scheme is factually incorrect.
I don't think you know what a ponzi scheme is.
This article is very depressing news. But, as technologists we are used to dealing with a new reality and change. I think many people will use this as an excuse to give up. It really means more than ever we should get outside or into the gym. Speaking of which I feel like I should go for a walk and get some fresh air.
Nvidia CEO demos DirectStylus capacitive pen tech (Computex 2013)
I wholeheartedly agree with you and since coming to States in 2001 so many things changed that me and my family do not pursue US citizenship anymore (eventual benefits do not overweight all that comes in with "responsibilities" -- permanent residence 10 year card seem to be sufficient). Have you visit Europe lately? most EU countries lack police state. You won't get shoot for running cops over there - in fact, majority of cops don't have guns and somehow we don't get too many shooting on both sides either. Since most GMO is still banned, quality of food is like day and night. Spend week in Western Europe you will get your stomach fixed, no digestion problems, no sleep problems, clear mind, more energy, literally overnight. There is so many things right now broken with States and the rest of the world doesn't wait. Meanwhile European Union is doing many good things locally and people feel good changes (altho like any other country/entity it has its negative sides as well, of course)

As of parent comment, we are not being monitored but recorded and there is big difference. As Obama said "nobody is listening to your phone conversations". Obviously it is impossible for any number of government employees to listen to 300MM people's daily conversations. It was about seizure/recording of said materials that's what is a Constitutional no-no.
Hitachi Says It Can Predict Crimes Before They Happen
Note that the author is Nancy Winnick Cluts. Not a total boys club in application programming!
Show HN: RedraftHero – Lowest Cost Fantasy Sports Platform
>The chart’s data comes from the National Snow and Ice Data Center, a collaboration between NOAA and the University of Colorado. This is the oldest data set for sea ice available—it goes back to 1978. (That’s a pretty long time, at least for satellites: Landsat, the longest continuously operated satellite-data program, only started six years earlier.)

The satellite era for Arctic ice did not start in 1979. It started in 1973. The 1990 IPCC report shows a graph of it:

http://www.ipcc.ch/ipccreports/far/wg_I/ipcc_far_wg_I_chapte...

[see page 30 of the .pdf (= page 224 of the IPCC report) Figure 7.20a]

It shows the ice grew ~1.5 million km before 1979, and has declined since then. So starting the record in 1979 (at a peak) is a bit of a cheat.

>Mapbox has also placed the sea-ice levels next to Earth’s mean atmospheric temperature.

Also be wary of talk of average atmospheric arctic temperature increases. They certainly have increased, but that obscures the whole picture. It's only in the summer that arctic air temperatures rise above freezing, and summer temperatures have not increased at all since 1958. See all years here:

http://ocean.dmi.dk/arctic/meant80n.uk.php

It's variations in winter, spring and autumn (when air temperatures are still well below freezing) that has raised the average temperature. In my view the ice is probably mainly melting from below from heat transported from the Atlantic. Less insulating ice allows water (~ +4c) to warm the colder air above it. It's not melting from above from increased air temperatures as the article seems to imply.

[18.55 Edited for idiocy]
We have just come up with a lowest cost daily Fantasy Sports Platform called RedraftHero(http://www.redrafthero.com/). We are planning to extend it for NBA and MLB as well given we sustain financially putting this up. Constructive feedback is very welcome.
One of the first things I was taught in network security was

"When installing SSH always set it to key based login only NO Password login allowed"

Passwords are not to be used here they can be broken by automated distributed attacks, strong cryptographic keys won't.
There's nothing about the physical system you can't learn by buying the car, and looking. So no secrets there to give away.

The controller we've been talking about control efficient engine operation, and conformance to existing federal standards. Not auto-driving cars (yet). There are powerful reasons to force them to be open, and only 2nd-order reasons to keep them secret.

In future I'd expect auto-driving cars would absolutely be completely open. There are even stronger reasons that emission-control issues, by far. Not running over kids for example. So we're likely to see a huge move in that direction.

As for a bright line, how about: if I can breath what you emit, or get run over by your software, then it belongs in the open domain? Pretty clear to me.
AAA puts it around $10k/yr for USA
My personal experience with Color has been great! Great values and great people. Hope to see more initiatives like these in the future!
But who would you prosecute for what? It is easy to start pushing people under the bus, but when you look at cases like this you often find that it is an organisational failure, not an individual one.

That's why I really like the NTSB's style of investigation (they're the people who investigate air crashes). Instead of going in and trying to pin it on one person, they look at procedures, organisational communications, chains of command, the whole works.

Most of their reports don't come out and say "engineer John Smith caused the accident by forgetting to tighten this bolt!" They say, we looked at John Smith, we found the mistake, then we looked at how John Smith's work is monitored, the procedures for this repair, the training given, what their manager did, their working conditions, etc.

Then finally they come up with some recommendations so it cannot happen again. These are normally procedural, training, and organisational changes, rather than simply saying "nobody should make mistakes ever again or jail!"

This is what we need for information security leaks like this. We need an NTSB-style org to come in, pull apart the organisation and how they operate, give everyone criminal immunity so they talk openly, and then generate concrete changes so this never happens again (and ideally send these changes to other departments).

... Or just jail everyone, whatever...
That course was fantastic. Work prevented me from doing the assignments, but I've also archived the materials.
Last Friday it became public knowledge that every visitor of any domain will be tracked by GCHQ for at least 30 days and up to 6 months depending on the website/person. Indexed by "which websites a person visits" and "which people visit a certain website".

https://theintercept.com/2015/09/25/gchq-radio-porn-spies-tr...

and the related discussion on HN https://news.ycombinator.com/item?id=10279853
I've been deploying Microsoft based computer networks for 18 years... this would nearly top my nightmare list! I can't imagine what the alert level is at MS offices right now, but I bet they are expending every effort to get to the bottom of this ASAP :/
Cool, thanks for the spam.
Man builds house, then finds out cable Internet will cost $117k
The SIGINT Philosopher of the NSA: “I wish everything in my life was monitored”
Yes and at the time that was the correct response. The story is over everybody takes the things revealed then as fact.

New he just needs to survive without getting assassinated.
The Bitcoin blockchain is the largest immutable data store ever built. If you want to question its trustworthiness, then do it with a logical argument instead of a biased opinion based on its current monetary value. Immutable data stores will soon be required by just about everything you use that is connected to the Internet, mostly for reasons that have nothing to do with value.

Like it or not, we better get used to the idea of blockchains in our lives.
I hate when I go for a run and everything is messed up on my track. Wonder if this works ok for lost speed.
Programmers and sysadmins are prime targets not only for the NSA but for non-US governments as well, and frankly, any organization that can benefit from infiltrating a corporate network.
You're missing his point, and what he is providing a counter-argument to. When he says "the Internet is in fact set up and operates in such a way" he is referring to the widespread impact of echo chambers and filter bubbles, the very phenomenon that most people consider to work against knowledge sharing.

"Counterintuitively, he finds that breaking down group boundaries to increase the spread of knowledge across populations may ultimately result in less-effective knowledge sharing. Instead, his research shows that best practices and complex ideas are more readily integrated across populations if some degree of group boundaries is preserved.
"
Yeah, I always forget about that. I'm in the US so I'm allowed to forget about the rest of the world, right?
>jsprogrammer

oh my god your really not helping
Testing Spark Data Processing in Production
From the guidelines (to help explain why you are seeing the behavior you are seeing).

"If your account is less than a year old, please don't submit comments saying that HN is turning into Reddit. It's a common semi-noob illusion, as old as the hills.

Please resist commenting about being downvoted. It never does any good, and it makes boring reading.

Please don't bait other users by inviting them to downvote you or declare that you'll probably get downvoted. "
Comments like this, and Hinton's Coursera course remind me that there's a whole "Black Art" to training these systems.

Do you think a similar approach could be used to learn to generalize Navier-Stokes by looking at fluid flows?
Audi Q5 weights 1850 kg according to wikipedia (https://en.wikipedia.org/wiki/Audi_Q5), although this obviously depends on the engine. 2470 kg looks more like maximum allowed weight of car + passengers + cargo.
I also highly recommend Aurelia. It's a fantastic and future proof front-end library.

Out of curiosity, why Spark over Scalatra? (http://scalatra.org/)
It's maybe not perfect, but can you have them working in a shared dropbox directory in class? (Or something equivalent.) Then just open or refresh the file...

IPython notebooks running on a central server is potentially another option for some languages.

edit: if you do find a working solution, please write it up and post it. I'd love to hear what works.
The fastest way to find events in your area
Really you think this is spam. I will remove this then. I thought showing it up here as we tried to put something with a very small team which might create interest.