skysight-inc/HackerNews huggingface dataset:
Disclaimer: I work at CoreOS.

Have you considered using rkt as an alternative to docker? It tries to avoid a lot of the security related problems docker has. Specifically there's no daemon which runs as root, instead rkt is invoked directly, so the only time rkt requires root, is the actual execution of a container, not downloading or verifying for example. Next, rkt by default wont run unsigned or untrusted images meaning by default you must trust the image/author, and finally rkt has the ability to run your container in a light weight VM using lkvm, getting you all the benefits of VM level isolation, but you have the ability to use the same container tooling for it all, and decreasing the overhead by optimizing for the container use-case.

Recently rkt also got support for logging different events into the TPM audit log, making it possible to have tamper-proof audit trails of what containers have run on your system. User namespaces are also implemented, but I'm not sure how well tested they are.

Solving the problem of using, and creating large full OS images is quite difficult. As a stepping stone we have also created a tool which scans container images on our Quay.io registry looking for images effected by CVEs. This should hopefully help until we can properly solve creating functional minimal containers easily, but that's unfortunately not quite as easy as just telling people to use buildroot (you still need a way to update those images and know when apps need have security updates).

Hope this helps.
We don't make breaking changes anymore, so the need for such a thing hasn't been enough for anyone to bother making it.
There is an option to run it in a different port which will allow you to reverse proxy to it.

--standalone-supported-challenges http-01 --http-01-port 9999

Will make it listen on port 9999. Their server will only connect to the official ports of course, so you need to reverse proxy
IMO both have their merits.

Governments are good at solving broad, societal level problems. If they weren't, they would be overthrown and replaced. But they're remarkably inefficient at solving individual, specific problems: they can do it, but it will take 4x as long and cost 10x as much as it should. Also, government intervention is limited in scope - it's hard to be philanthropic outside your constituency.

That's where philanthropists can step in. There are some problems that don't provide enough benefit to any single government to throw weight behind solving, but that require massive resources. Bill Gates' anti-malaria campaign is a good example: no country with the money to fund a malaria eradication program has significant rates of malaria.
lftp or curl.
I don't think this is standard-of-care yet, though some docs I know will go this route. There is a good amount of emerging research of the positive effects of the keto diet on brain health, including bipolar disorder:

https://scholar.google.com/scholar?hl=en&q=ketogenic+diet+bi...

https://scholar.google.com/scholar?q=ketogenic+diet+neuropro...
Based on my knowledge, it's very fair. How many language extensions are available vs placed in common use? Where is the guidance on which to use? You WILL use at least 3 I can think of off hand very commonly.

And how many failed lens libraries preceeded the current (quite good) dominant library that still show up on google and even get included in? How many people still run versions of Yesod using now-unfavored abstractions?

The Haskell community really got its shit together over the last 3 years. Cabal got a lot better, a bunch of key libraries got good, our compiler is fixed some major bugs. But these developments do not magically erase people who have navigated the prior 5 years of Haskell where a lot of these technologies got established.

I love Haskell, I really do. I wish I could ship more code with Haskell, and like it as well. But the OP asked about why Haskell didn't take off. Its ecosystem was in what we might call a state of growth and flux at the time a lot of stream and batch computation systems were shipping.

Oh and uh, I think Haskell's community is full of some truly toxic people, an intersection of some of the ugliest and most arrogant personalities of the Scala world who's primary education strategy can only be called "negging." You will know these people when you find them. Compared to the Clojure community or the F# community or the Erlang community which are also forward thinking, interesting and skilled... it looks positively hostile. You may not care about that, but I refuse to endorse or use technologies who's community leadership is so toxic. Why, I've stopped using Linux in anything but legacy apps because I completely despair of that project from ever rising above is puerile and cliquish roots.
My psychologist decided they weren't needed any more.
I think the case for hosting jQuery and the like, on external, presumably cached CDNs is overstated. Library version fragmentation and to a lesser extent, CDN fragmentation, have to be weighed against the cost of the additional connection.
Umm, I never said anything about why people wait. The comment/sentence I was replying to was about the purpose of Scientific journals.
> But as a creator your goal should be wide distribution.

Actually, I would say a creator should have stable, predictable sources of revenue. They should be in control of their revenue, so they can take charge of growth, instead of letting it happen as it may.

This requires building partnerships, effective distribution channels, and audience relationships.

"Open" rights don't necessarily align with those things.

The goal should not be wide distribution – it should be building a stable platform that allows your business thrive.
I have seen many howtos recommending to add a monthly cronjob for the certificate renewal on the first day of the month at 12am (0 0 1 * * or @monthly). It is probably better to renew the certificate on a random day/time (30 4 5 * *) to prevent excessive load on their servers.
You're right that some things don't come easy and require hard work.

But how many folks fail to make progress, or check themselves out of even starting an endeavor simply because they've convinced themselves it is "too hard"?

Do we always need yet more reminders one must do "hard work" to accomplish something?

Many times just getting starting on a path is enough of a psychological win to increase motivation and later on achieve mastery.
The creed of speed
And now finally there is a trusted cert.
Happy to see that my collection of Swift compiler crashes (see https://github.com/practicalswift/swift-compiler-crashes) has been part of the official Swift repo since September 2014: https://github.com/apple/swift/commit/e5ca8be1a090335d401cd1... :-)

A previous HN thread about the swift-compiler-crashes project: https://news.ycombinator.com/item?id=9020206
> The results showed that men were rated higher for construction quality.

Right, but "quality of first construction by untrained person" does not, due to the manufacturing effect, necessarily mean anything to IKEA.
This is a high demand field. I definitely work for pay, but I can get this pay at a number of places (To clarify: I don't work at Netflix or Yahoo) So I want additional things from my job like respect, involvement, empowerment, learning opportunities, flexibility.

Generally those things are harder (though not impossible) to get in larger firms that are mired in communication weight. Speaking with zero first-hand experience with either company, Netflix probably struggles to handle those issues already, and to merge with a larger company that is trying to tighten its belt is unlikely to improve the situation.

I've worked for 3 companies so far that merged with a larger, more "traditional" company, and every times there was high attrition from the engineering side as people saw various "good" parts of their job go away, from things as small as more bureaucratic procedures to as large as technology switches.

I myself left one company when the new company required everyone to wear ties "because our sales people have to", despite the fact that we were in a separate site that no client would ever approach. That was 1999 and East Coast :) In retrospect, that seems a silly reason to leave a company, but it resulted in a significant pay boost and my period of greatest learning in my career. And I don't wear a tie.

Now, both Netflix and Yahoo ARE tech companies, so my anecdotal evidence above may not even apply, but generally in this field demand for coders far outstrips supply, and anything that makes coders uncomfortable in large numbers can really threaten the status quo.
> Sometimes it's useful to be able to prove a file was created /before/ a given time.

Let me give a personal example: some time ago, someone deleted the public copies of some webpages we were using in our investigation and threatened to us that if we continued, they would simply claim that our copies of were forged later (after we had contacted them), and, they thought, make us look like fools & scuttle our claims (with some hints that they might also sue us for libel to boot). Fortunately, I had been timestamping all along and had timestamped the archived webpages in question; so I could prove that my copies are unaltered from well before they raised the question, and, further, at around the same time as they were independently captured in a different archive service. After we noted this to them, they had to back down on the threats and take us more seriously.
Write Android code that scales, with MVP
> Super easy to setup.

Yes, thank god I don't have to manually contact anyone like StartSSL or even provide real contact information for this. It's just what it says - domain validation, nothing more.

Interestingly, StartSSL did far more verification for their free certificates than other providers I used for paid certificates, Comodo, GlobalSign, AlphaSSL, etc.
So, what will happen if it leaks? Will it just get slow or stop working?
As counted by anti-gun subreddit, that includes anything even remotely reassembling "mass-shooting" (like robberies, gangs etc.). Not to mention it's not even a credible source by definition...

By other sources and definitions it's much, much lower.

http://fivethirtyeight.com/features/mass-shootings-have-beco...
Has anyone asked Murakami what he thinks? It certainly shouldn't determine what's moral or not, but it would be very interesting.
This looks very interesting. Definitely going to give it a try.
Perl 6 atom editor support
PickTrace (YC S15) is hiring full-stack engineers
999999999999999 wl
i'm a keto True Believer[tm] but removing carbs also just immediately removes a ton of calories which directly contributes to weight loss. you can eat a surprising amount of protein and fat and veg and won't replace the calories lost.

a hamburger bun, and a plate of french fries is honestly like a thousand calories. one thousand! that's like a huge ribeye steak.

you don't even want to know how many calories are in a mission-style burrito tortilla. it's completely out of control. that kind of food is meant for hard labor, not internet finger tapping.
+1 on that.
Nice, I really like that idea. Any information on what paths I'd need to reverse proxy to it?
Hi,

Seccomp and user namespaces are in the Docker experimental build (https://docker.com/experimental) and should land in 1.10.

Docker 1.9 supports all other namespaces, cgroups, pivot_root, cap drop, selinux, apparmor, uid/gid drop.

You can also sign and verify all images with a built-in Notary/TUF implementation, and we partnered with Yubico to support hardware signing out of the box. I'm hoping we can make image signing the default in the near future, and make it mandatory within the year.

At this point I'm comfortable saying Docker's security story is strong (although not perfect of course). But if you have specific suggestions for improvements we are interested!

EDIT I got it wrong userns is still experimental and will land in 1.10
No, by enterprise-ready I mean it works better than others at integration with various Exchange accounts, including calendar scheduling and contact lists.
Eat less than 25g of carbohydrates per day, you will be in ketosis in about 24 hours when your liver glycogen is depleted. Drink lots of water, and suppliment electrolytes (sodium, magnesium, potasium -- drinking a cup of beef broth every day and using a "No-Salt" substitute on nearly all my food is what I do) to avoid the dreaded "keto flu".
> Decentralized not usable in a legal context in any jurisdiction I can think of

I haven't seen anyone writing on this topic who argues that a Bitcoin timestamp would not be usable anymore than your favored old-style notaries would be unusable. Can you point to any specific cases, or even something like a legal review, in which a Bitcoin timestamp is rejected as invalid?

> why do you timestamp if not to cover your ass?

There are many uses for timestamps. Legal ones are not even my particular use case.
Yea they are definitely still on Borg...
Luckily, it's less than 200 lines and open source! Please feel free to fork it and modify for your needs :)
Yep, BMI is pretty much useless. Body fat percentage FTW.
Experience from other acquisitions shows that this sometimes is the case.

In 'hot' professions, which at the moment include software engineering, pay is a "hygiene factor" - it is required but not sufficient to hold or attract people.

While in theory the company holds all the "intellectual property", in practice in software-related companies most of their capital simply puts on a hat and goes away every evening; and [a change of] management, working environment and company culture may (and does) result in losing those people.

If they eagerly joined company A to do X, then simply buying that company doesn't neccessarily mean that they will automatically accept working in company B doing Y even if pay will still be the same. For acquired startups, it's very likely that their engineers had quit a company like Yahoo just because they wanted to work for a company like Netflix instead, and would do that once again if the situation would repeat itself.
PC Cleaner Pro 2015 License Key, Crack Full Free Download
Also check out Vit: http://tasktools.org/projects/vit.html

It's a curses based console interface for taskwarrior.
Why can't their motivation be charity like Mozilla? Or maybe they just want to see a more secure internet?

They aren't totally evil. They want to use their power for good once in a while.
So does this mean we might finally get officially supported iOS development on Windows and/or Linux soon?
I don't use FTP, nor do I allow it on my network. SSH or no go.
Interesting. I had an idea for something related but wasn't sure how open people would be to uploading their picture to something like that. Care to share some stats?
While I'm in complete agreement with your desires, I don't think that's how it works for the creators.

Almost every restaurant/cafeteria/whatever has an exclusive deal with Coke or Pepsi, despite the fact that I'd think it makes more sense to have diversity to match customer demands. They (the owners) find the "deals" they get more persuasive than my buying power, but since every is like that the "deals" aren't really deals at all - it's the norm.
The granularity of that vote was quite insignificant next to the scope of this issue, don't you think?
Well i'm by far not an expert. But a lot of people consider that GPL is an open but maybe too restrictive licence.

Notably, "derived works" using GPL copylefted code must be redistributed under same licence. So basicaly if you consider that Swift is a key component of OSX... This is just not something Apple can accept right now.

Beside I'm not even sure a Licence switch from Apache2 is possible without consent of all contributors. And most definitively a Licence switch can in no way be decided via a Pull Request :P

Feel free to correct me if I missed a point ;)
See the comment from mhkool above. (specifically the part about fat in the organs themselves, not the "functional medicine" part)
That's unfortunate. Type 1 or 2 diabetes? My mother is T1 and she cannot do a low-carb diet because of the possibility of ketoacidosis, which she's already been hospitalized once for.
Github is weird.
Seeing as much of the kernel is written in it, of course. Working efficiently with raw memory pointers requires an unsafe language. Even Windows is written in C/C++
For anyone reading: Please consult your doctor before altering your dosage of mind-altering medications. Some of them, for example, have to be stepped down in dosage gradually, lest bad side effects happen.
Court OKs Barring High IQs for Cops
Well considering the argument is that what is practiced today as Buddhism is a small subset of what was believed/practiced previously, you would in fact expect all that stuff to exist...

And the fact Borobudur was only excavated in the mid 1800s and wasn't reconstructed until recently isn't exactly evidence that it was still considered an important part of the religion before then.
> 1) No reliance on external archives, so all the data required to prove a timestamp should be automatically downloaded after the stamp has hit the blockchain. This should certainly include the necessary subset of the "OriginStamp archives".

I agree that ideally one would somehow get that data automatically as well (it's just that writing the scripts for automatically submitting is much easier than writing scripts for automatically retrieving...) I've already emailed the two OriginStamp devs asking for thoughts on how users could automatically get the list of hashes for each day that concerns them.

There's some email functionality in OriginStamp which might be reusable for this purpose, in which case one could include one's email address in the shell script and get one email a day listing the hashes you made and containing an attachment with that day's total hashes (so you can verify that your hashes are in the master list, that the master list hashes to the master hash, and then look up whether that master hash's corresponding Bitcoin address has received a transaction or not that day).
Bad Reasons to Start a Company
>I'm sure audiophiles would hate the demise of an analog format in favor of a purely digital one.

Are you being sarcastic?
It's too fucking slow! Every interaction with a non-Apple app takes like 5 seconds just to boot the app.

Siri goes away and thinks for dozens of seconds when you ask her something and sometimes never comes back. Even once text has been translated from speech, it sometimes takes 5 seconds to actually send a text.

The functionality is amazing, but the speed of the device is abysmal.

I love everything that it does do, but it is too painful to do it.
Makes me chuckle just thinking of the potential.
I would have passed this article anywhere else if not for Hacker News. This is a great insight and great way to work on your personality.
Can I transfer stock into a business to avoid paying capital gains?
Point well received.

BTW

Fat arrow looks more appealing than simple arrow.

All the other pieces look very well designed.
Greener Colo: Equinix Pursues a More Sustainable Internet
Fair enough. For my part, I would need to see a wider community supporting the language before I depended on it on non-Apple systems. I'll have to wait and see on that point. But that is a plausible outcome - and (in my opinion) more likely because they chose an open source license rather than a free software license.
Why Mark Zuckerberg and Priscilla Chan Should Use Their Money for Fundraising
The article says "emits a soft glow". Since that's impossible for something which isn't radioactive, I assume the reporter misunderstood something. What property of the material were they referring to?
The tax man is a representative of the republic. The people have decided that the rich must pay taxes, and that is the price we pay for civilization.

If you don't want to entertain the tax man, please move yourself to a deserted island where there is no government to tax you. Or Mars.
How is Jobs overrated because of Apple's marketing team? He was the CEO; it was his marketing team. Even if you want to argue that it was already great when he got (back) there, it's still to his credit that he built the company around making such good use of it. If you want to blame CEOs for everything that goes wrong with a company, you pretty much have to give them credit for everything that goes right, too. Normally I don't think CEOs are nearly that important either way, but in this case it's fair to give Jobs a lot of the credit, precisely because Apple's brand marketing was so effective and the company positioned itself and its products around that brand as well as it did.

That's exactly what Microsoft, and especially Ballmer, never did. As the author points out, maybe Steve Jobs crashing your party would make the other guests feel less cool, but the reality is that a lot of people want to be hangers-on and aren't sufficiently introspective to feel uncool about it. The completion of the analogy is that Jobs got a lot of your guests to pay him $300 for the privilege of following him to crash the next party, while Ballmer brought $20 worth of bad vodka, then robbed your apartment while you were passed out. They both made money without creating much value; the difference is at whose expense they did so.
Something rarely mentioned: Ballmer could've been a first-rate mathematician. He graduated magna cum laude with an AB in math, and beat Bill Gates on the Putnam exam, finishing well within the top 100 contestants that year.
I'm not sure why this is news? Every endodrinologist has been saying this forever (my wife is one) and she said that this article has needlesly spread. It's like saying: Study finds eating less causes weight loss! It's also why doctors sometimes recommend weight loss surgery.
> The 2nd Amendment is there to divide and distribute half the power to the people and half to the government.

1) According to whom? I've heard people say that but I know no basis for it.

2) Has this ever happened in the history of the United States, where private citizens asserted power over government through violence (and who were not criminals)? Even the Civil War was an insurrection by a government.

3) Most importantly, it seems like a terrible idea to have issues decided not by votes and laws, but by violence, killing, and who has bigger guns. It sounds like the opposite of civilization - anarchy and barbarism - and the problem democracy and rule of law are meant to solve.

4) The founders, and I believe almost all Americans intend that power should come from votes, and issues should be decided by law, in court.
This is an incredibly informative and useful post. Thank you.
The individual posts load really quickly, but the main page doesn't (well not as fast as the other one mentioned). Either way, both are fast and I wish more websites were like this, not just forums!
Picture of a Library card:

https://en.wikipedia.org/wiki/File:Library_card.jpg

The Browne Issue System appears to be what most small libraries used.

https://en.wikipedia.org/wiki/Browne_Issue_System
OpsClarity CEO Dhruv Jain Explains How He Is Bringing Machine Learning to DevOps
Don't you need root access to even start the container? I think that's there is a disconnect here. There is a difference between running a container as root and the process w/in the container running as root.

Sure, you don't need to have the process running as root in the container, but you need to have root-equivalent access to start the container. For a (large) subset of use-cases, this just isn't an option.

I should be able to allow any given user of a system the ability to start a docker container and be confident that they won't be able to break the host system. Until this is the case, you don't have security in Docker.
Their IPO is going to be huge.
I wasn't aware caloric restriction was disproven. See, for example: http://www.cnn.com/2010/HEALTH/11/08/twinkie.diet.professor
It's a bad comparison though. The real equivalent of opa in the OCaml ecosystem is eliom. :)

(Also, isn't opa a bit, you know, dead ?)