skysight-inc/HackerNews huggingface dataset:
You are correct. Linux is a single user OS. Any rogue program can almost certainly escalate privileges using any number of strategies across a vast and complex surface area.

It's been almost two decades since unix systems were routinely used in true multi tenancy situations with untrusted tenants. Since then nobody has paid any attention to this aspect of security.
There are plenty of things she could have done before calling me, but she could call me and she had a great experience doing so and now loves the product even more and has more confidence using it, because she knows if she faces something really hard, there actually is a person who will help her just a phone call away. If anyone asks her about it, she can say, "Omg, I just called them and they answered and I was in. I've never had that before!"

There's a real value in that and all it cost me was a phone call. No money well spent, imo. I was going to wake up that day anyway.
That they repair their own cars? That they've been gardening?
What about the parent who has a zillion apps courtesy of their child? so some apps are the adult's and others are the kids.

Bet that would muddy any statistical analysis.
I love this, but its terminal magic isn't working properly for me. "apt install stuff" places a progress bar at the moment, then prints some misaligned stuff and then finally manages to clear the screen (!).

Any terminal settings I need to adjust? I'm using OS X's Terminal.app, terminal declared as xterm-256color, via SSH, under zsh.
I'm half Latino and half African, through the years people like me was kept outside of opportunities because no matter how good you were at something you were not "white" and therefore you couldn't get in. The same system but in reverse is still the same system and that is the last thing I want because how do I know its not going to reverse to those old days when people like me couldn't move up in life because I was born the wrong color?
It is a very sad state of affairs when it is faster to use a website than an app.

And better privacy.
Thanks for your answer; that is a great point about the mental model of a web request. I mention PHP and Java because I have experience in web development in both languages, but my training materials would have completely separate tracts for each language.

Essentially I would like to target non-academically trained beginners who want practical/actionable knowledge in the respective language. So my basic outline would be: installing the language, choosing/installing an IDE, setting up a simple web server, language basics, OOP, database interaction, front-end rendering, etc. The reason for this Ask HN is that I would hate to waste extra time on something that 90% of students will grasp immediately, at the expense of a topic that might need extra attention.
She Wanted to Do Her Research. He Wanted to Talk ‘Feelings.’
"verbal attacks to your religion" can mean many things, including abusive and disrespectful behavior, so it's unclear.
Interesting. Do you have details on the 10M$ spend?

Unfortunately I have to agree - Blockstream is a mess. Adam Back and Austin Hill have 0 commits to the project and established them as power brokers.
> Sadly, I've had to do enough with it that I'm probably an "expert" at it now...

I think this explains a lot of poorly designed but complex enterprise software (e.g. MS). People eventually learn to deal -> poor design becomes less of a pain point -> less incentive to fix issues.
Based on several years (well, ok, decades; happy birthday, me) experience, I no longer believe in rough consensus.

The people who have the power to merge patches have de-facto veto power over any community.
Search uses regular expressions so generally no need for grep unless you need more complex filters; --names-only has the -n short-form:

apt-cache search -n <regexp>

More generally apt-get and apt-cache are designed to be backward-compatible for use in scripts whereas apt is not[0]:

SCRIPT USAGE AND DIFFERENCES FROM OTHER APT TOOLS

The apt(8) commandline is designed as an end-user tool and it may change behavior between versions. While it tries not to break backward compatibility this is not guaranteed either if a change seems beneficial for interactive use.

[0] http://manpages.ubuntu.com/manpages/xenial/en/man8/apt.8.htm...
Its called Mandatory Access Control. It has existed for over a decade in the mainline kernel. Ubutnu, Fedora, Suse - everyone but Arch, pretty much - supports one of its implementations.

The problem is more that I do not believe any distro is shipping a default-deny policy. Unknown programs are simply given the kitchen sink rather than having, say, user friendly prompts saying "this program has no access control and wants to open X or use Y, allow?"

But we definitely have the technology, and it does not take any heavy overhead isolation to do it.
Hey, awesome service! I'd be interested in using this at my site (BugRex.com). We're a chat based help line for developers in the need for help. Sharing code is an issue we haven't solved properly yet. Let me know if you want to chat.
I don't know what kind of phone you have, but iOS has an option to automatically wipe the device after N code failures. Thus the whole San Bernadino phone situation.

Fingerprints are not trivial to obtain, and are even harder to reproduce.

I use a hyper-complicated password on my phone with TouchID, so I only have to enter it once when the phone is booted. After that, I'm on fingerprints. If I were coerced into unlocking my phone, I would just use the wrong finger a few times in order to trigger the requirement to re-enter the password.
Have you considered the things online tend to be cheaper than objects in the brick and mortar store? For many things, especially- textbooks (typical need to buy for college-going under 25 people), car parts, electronics, and certain interests like yarn, woodworking tools, aromatherapy, sports equipment?
I wish it were possible to bottle up your last paragraph and force new developers to drink it before they could learn to program. I mean, insofar as anybody should be able to force anybody to do anything.
Luke jr showed how you can implement segwit as a soft fork. The txs look like "anyone can spend" txs and the signatures are excised to the witness data structure (decreasing the tx size). To validate the segwit txs you need to upgrade, but it's not correct to say that a hardfork is needed to increase the number of txs per block.
I got the same thing. I'm pretty sure they didn't account for security researchers who like to download free apps to hunt for vulnerabilities. Go figure.
How should a non-profit like Mozilla gauge it's success? Should it be going after browser market share (Firefox)? Developer brain market share (Rust, MDN)? Leadership positions (W3C)? Advocacy?
For context Buffer later got into AngelPad and this was instrumental in the early survival of the company
Well it is to be expected from places like Russia and India tbh. I am from the UK and such comments would be seen as shocking but we all know Russia hates gay people it makes sense that employees who grew up and continue to live in Russia are going to have very Russian views. Just because they work for a modern, progressive company such as Google (or Microsoft or Apple ...) isn't going to change their opinions on such things.

You would have got the same kind of responses in America if you asked about how blacks should be treated/integrated into the company back in the 1950s.
Low tx fees compared to CC and even ACH transactions is a win-win as long as the merchants are passing the savings on to the consumers (which some do).

Same with chargebacks. Realistically they've become more of a fraud tool then a protection mechanism.

Sensitive data - PAN and CVV data is sensitive to the point where merchants are forced to spend millions to be compliant with the PCI DSS standard so yes this is a huge deal.
That same tokenization technology you're referring to is there to reduce the PCI footprint. This tech isn't cheap but is worth it for the merchants and again is a non-issue for BTC.
That's ridiculous, I'm a minority and I don't feel discouraged because they show a white guy in an ad for a job, I'm not going to choose some other company just because they put an afro-latino person like myself in the ad.
This has existed for over a decade in the form of mandatory access control (MAC). Any distro worth talking about has been shipping a MAC solution (Apparmor or SELinux mainly, even though I'd argue grsec / pax is way better) for years, the problem is more that I do not believe any of them use default-deny policies, because there is no mechanism to ask the user for permission for unknown programs or programs trying to act outside their allocated access controls.

But for anything you install from the main repos, it will almost always have an apparmor / selinux profile installed along with it to prevent this kind of arbitrary filesystem access.
> but "blockchain" is not (only) bitcoin's blockchain, anyone can make one and can validate and replicate it with any group of collaborators or adversaries.

This is a misunderstanding. Yes, anyone can launch any blockchain, but those blockchains would not be secure from attack and are thus untrustable. The "only" blockchain that can be trusted is bitcoins and that's precisely the point, there can be only one winner due to network effects as size of the network is where the security of the network comes from.

A blockchains primary feature is decentralized trustless transactions and that only works when the network is large enough that no single player or group of players can control more than half the network. There is quite literally no point in using any blockchain other than bitcoins as it's the only one with enough scale for the trust to exist.
... and only on Android (iOS is not available yet) to boot!
I have a 2014 Kindle Fire HDX with FDE enabled, and the performance is fine.
Just because it's difficult to handle 100% of use cases doesn't mean you can't easily solved 80% of use cases. The suggestion the parent and grandparent comments are making is simply to add a button which combines the previous year's statements (understanding that not everyone's fiscal year matches the calendar year) with all the documents that are already in a separate section named "tax documents" into a single download. More generally, they're just suggesting things like naming the file for January's statement as e.g. "2016-january-statement.pdf" instead of the same generic name as every other month's statements.

Saying that those suggestions aren't valuable or worthwhile just because 100% of use cases can't be accounted for probably isn't the best way of deciding which features should be implemented (and if it were, then it seems like most of their current features should have never been built since they rarely seem to handle even 80% of use cases).
I meant "anodyne" not as a good thing but as "the best we can come up with for now", i.e. at least it wouldn't provoke a big argument about linkbait. That's why I asked readers to suggest something better. Nobody did, so maybe it was just hard.

What the HN guidelines say about titles has been the same for years:

Please use the original title unless it is misleading or linkbait.

We deliberately avoid having detailed policies, but in this case we can derive a few corollaries. What we want is the opposite of what we don't want:

1a. A good title is accurate and netural.

The reason for preferring the original title is to let the text speak for itself, so:

1b. When changing a title, try to find representative language
from the article, rather than making something up.

And since one big reason for the guideline is to minimize bikeshed-style complaining about titles:

1c. The best way to comment that a title is bad is to suggest a better one.
So, the first problem is, what is a meritocracy?

In Young's original 1958 formulation, we get:

"merit is equated with intelligence-plus-effort, its
possessors are identified at an early age and selected
for appropriate intensive education, and there is an
obsession with quantification, test-scoring, and
qualifications."

That's clearly not how it is actually used today, but people will still use the term's origins as some proof of original sin. Napolean's definition is a bit better (and older!):

the tools to him that can handle them.

A modern definition, and one I think all of us here can probably agree is congruent with the spirit most of us use it in, is:

A process of governance by which the authority of people
is weighted in direct proportion to their demonstrated
competence and ability.

In theory, such a system is clearly the most reasonable--after all, why wouldn't we defer to people that know the most or that have the best track record?

And here's where things get murky.

The big issue is that the "track record" is very much subject to the whimns of charisma and reality distortion. Steve Jobs was objectively a liar, a narcissist, abusive, a very bad manager (at least until much later), and a bad father. And yet, he would still be promoted under any modern notion of meritocracy, because he did have the critical skill of conning a bunch of folks into thinking he was actually worth following.

A more honest definition of meritocracy might be:

A process of governance by which the authority of people
is weighted in direct proportion to their perceived
competence and ability.

Noting the change of one word, suddenly the system is seen as a sham: all it takes is a person to appropriate the accomplishments of one other person, and suddenly they have access to more political capital, which they can use to take credit for others' accomplishments (like Banzi seems to have done with Arduino), and thus unlocking still further capital, and so on, and so forth.

This isn't as likely to happen in small groups with equal distributions of skills: at such a stage, perception and demonstration of abilities are nearly the same. As a group grows and specializes, however, the gap between perception and demonstration can widen as people suddenly are uncomfortable or unable to recognize when somebody is getting undue merit.

Orthogonal to all this is the question of diversity and of privilege, which is discussed by a sibling commenter stray. There's a deal more to unpack there.
(As a heads up, it's back now, as of yesterday)
I also found some of the questions required thinking a lot harder than what was strictly required for teaching a concept.

But after a couple of questions I really got into it. Compared with the section in the Nix manual, I found it much easier to pick up the language.
When I switched from iOS to Android at the start of the year I switched from Firefox to Chrome to give it a try again (because why not) and yup Chrome is better in pretty much every way IMHO. The only thing I actually dislike about Chrome when compared to Firefox is that Firefox saves the page state when navigating backwards but Chrome does not (such as on reddit if you have collapsed comment threads).

Literally everything else about Chrome is better. Oh yeah and it actually syncs all my settings correctly unlike on Firefox where some changes never seem to sync for some reason.
i agree that it's not the strongest analogy, but it seems relevant. you seem to be uncessarily bounding this on "text", which seems an incidental detail at best.
I have a co-worker who was told about -j a couple of weeks ago. Before that, he would bill half an hour for every time he did a clean build.
In general what ratio of free/paying customers should be considered good?
Makes you wonder what part of their system might be susceptible to a payee name like lil Bobby Tables.
I have never really had performance issues in either browser to be honest. They both work fine, I just prefer firefox, possibly above all else because I love the UI on firebug.
Reminds me of that quote about "A players hiring A players, but B players hiring C players" or Jobs' rants on the subject re Scully.

For the record, I hate the latest UI changes to Firefox, I have chromium installed also and use it when needed. I don't need two of them. The big round tabs, the Fischer-price menus, the prefs with hardcoded white backgrounds, etc. If they hadn't fixed the memory leaks recently I'd go back to FF 20 or so.
Indeed. Code signing is a perfectly valid technique, and useful, but device owners must be able to control the root of trust. It's when code signing is used to create a system of manufacturer, rather than device owner control that is the problem.

Authenticode seems okay so long as executability doesn't depend on it. But there's a risk Microsoft might interpret it as a vote for "require signing for EXE files" (because the more people use it, the less developers to complain if they require it). If this started to look likely one could always use GPG.

Though in practice this shouldn't be possible... there is a very, very long history of binaries which are no longer updated and never will be, so introducing such a restriction is essentially impossible. (Of course, there's no secure way of determining binary date, so grandfathering is impossible.)
That's bullshit. So you're entitled to the work of others, but others aren't entitled to your work? You must choose: use GPL and make your code GPL too, or release closed proprietary software and start from scratch. You want to piggyback off others' work but you don't want anybody piggybacking off your work. Well, you can't have the cake and eat it too.
The point is that it is not a clone of UNIX, it's one of the evolutionary strains of UNIX. You probably won't find substantial amounts of AT&T Research UNIX in Solaris, but it's still UNIX. The lineages of BSD and Solaris can be traced back directly to AT&T Research UNIX.
I was not the sysadmin in this team, I was a developer. She was definitely a better sysadmin, I was a better developer. The point is that nobody is better than everybody else in every way.
The issue with the editing pane might be related to the size of the browser window. It splits horizontally at lower window widths, just like tour.golang.org for example. But unlike the Go tour, it splits at a much higher window width than strictly necessary.
To provide another perspective to integrate into your decisions.

Listening to people doesn't mean doing what they say.
I do agree with a lot of what you are saying but that seems more like the result of a lack of meritocracy and not an excess of it.

In any case you are showing me why people high up don't want a meritocracy, because they have little or no merit and in a meritocracy they would lose.
Lookout: yes = guy, no = girl
Linkedin: yes = more than $52/K year, no = less than $52K/yr.
Snapchat: yes= single,no=married

At least with my base answers.
And banks like BofA only provide 13 months of statements so if you do your taxes in March, you're out of luck.

The $99 drive sitting on my desk could store the complete records of BofA going back to the beginning twice over (without compression).

I just don't get it.
Maybe the English translation is not accurate, but there's no way you can build a factory in a month, let alone have it shipping product.

The article also has weird bold highlighting to make sure you quickly catch the amazingness. Makes me wonder if this is a pump and dump attempt.
Derek Sivers has compiled a list of books in your preferred field of interest. I find it quite helpful.

https://sivers.org/book
>Imagine if gave money instead to the KKK

Not a great comparison. I don't think the campaign, that Eich donated to, killed people.
Sure, then what's wrong in Sam warning them about something?
Create your local outing in 2-taps
"Events in Delhi & Bangalore by StrollUp

For the party animal, this app is a one-stop solution when you want to be informed about events in the city. Apart from DJ nights, music concerts and ladies night, the app also offers information about theme parks, sightseeing locations and personalised recommendatations."

As described by economic times: http://tinyurl.com/jqd4h9l
> Well it is to be expected from places like Russia and India tbh.

Every single person in the world knows that one hundred percent of all the people from the UK know damn well to stay away from generalizations. Oh wait.
> I think in part because they're likely smarter than the average person so they've completely convinced themselves that they're the rational ones.

The average Californian voted for the proposition Eich donated to. Is it rational to compare the majority of Californian voters to the KKK? Is it rational to call the positions of both Obama and Clinton in 2008 hateful?
I don't know who is a better programmer.

With respect, if you aren't willing to take a stand on what does and does not qualify somebody, you are by definition unable to comment meaningfully on the concept of a meritocracy.

You list a lot of examples here that are basically red herrings or are completely unrelated to the discussion of what is and is not a meritocracy--your bringing up of books, for example, which are not capable of having merit as they are not people.
This is fine for my use since I have a SaaS startup and most of our customers are from US/UK only. I think less than 2% of our customers are from India right now and they were able to pay with 2checkout with automatic recurring billing (without requiring otp).
...and seat belts and airbags and food labels.

Meddlin' guvment...
For instance, the response of https://news.ycombinator.com/item?id=11226101 is even more polarizing. Yes, the followup's flamey nature adds to the indictment of the original comment. But due to the upvotes I'm guessing that the viewpoint of the follow up, if it were making a non-argumentative top-level point, would be less likely to be flagged as "trolling". Because impartial rules are still ultimately enforced by people, who inherently have biases.

It would be great if all overly political comments could be eliminated [0], but I don't see how that's going to happen. So the tradeoff is either having low-quality irreconcilable flaming, or preventing such by marginalizing dissent and encouraging a groupthink that permeates discussion but can never be called out - the noise will still be present, just masquerading as signal. IMHO it would be better for violent disagreements to act as flypaper and be more easily ignored, ideally through technical features.

[0] I guess that would necessarily include all non-technical anti-surveillance articles/comments as well, due to the opposing viewpoint of pro-surveillance. I don't think it would be good for this community to neuter itself in the fight against surveillance, but here I am showing my own bias.
No true Scotsman would do such a thing!
I cancelled my Comcast subscription because their phone support is so horrible and they removed the ability to chat to a live agent on their website. If you call Comcast customer service you have to verify your account/identity to access the phone tree and then once you are actually connected to an agent you have to verify your account/identity again. Then when that person transfers you to the department or agent who can resolve the issue, you have to verify your account/identity again. It's absurd. I actually think it's designed to frustrate you into hanging up. Also, the call transfers tend to drop your call. Imagine verifying your account/identify three times, then your call is dropped so you have to go through the process all over again. You've now had to verify your account/identity 7x for usually what is a simple task. It is the single worst customer service experience I had ever experienced.
Ann Taylor.
Use and performance of its core product, Firefox.