skysight-inc/HackerNews huggingface dataset:
Once you've identified long response times, it would also be possible to observe that the threads handling requests spent a good percentage of time waiting for CPU, which would point to CPU saturation as the problem. I'm not sure how you do this on GNU/Linux, but you can assess this on illumos with ptime(1) or prstat(1M).

I think your concern about measuring CPU utilization is real, though. You can use frequent sampling and present samples on a heat map to deal with this problem. There are some examples here:
http://www.brendangregg.com/HeatMaps/utilization.html
A concrete example of this happening would be when the NSA's catalog of implants and general descriptions of what they could do was released, and a large flurry of public (and probably private) activity surrounding rediscovering the wheel ensued.

It's a lot easier to build something when you have a loosely-constrained search space and a guarantee that it's possible, than to discover something entirely new.
Eugh, I hate the image based CAPTCHAs, they take way more mental power than the old text based ones did and often take me 2 or 3 tries to get right. Is there a way to permanently opt back to the text based ones?
Letsencrypt-watch – certwatch cron specifically for letsencrypt
You realize cygwin's setup.exe package manager has a CLI, right? The issue with pacman in msys2 is that it's posix dependent, which fails badly at updating the core posix layer itself. Cygwin's setup.exe is a native Windows executable and doesn't have this self hosting problem.
For long-term minded investors who do want to trade a lot (and thus do want to pay unnecessary transaction fees), super low cost, broad-based passive index mutual funds can be a great option. I use https://investor.vanguard.com/ as Vanguard has some of the lowest fees around. John Bogle, Vanguard's Founder and ex-CEO, pioneered the passive index fund. Here's a checklist I use for selecting mutual funds: https://gilbertginsberg.org/checklist-how-to-choose-a-mutual...

Also here is a good general-purpose personal finance checklist I put together: https://gilbertginsberg.org/a-checklist-for-stashing-more-ca...

Two tools I use and highlight are:

* https://www.personalcapital.com/
* http://www.prosper.com/daily (formerly BillGuard)
> the mixture of status signalling open-plan office + needless opulence + Agile strongly suggests dysfunction

I shuddered a bit when I read this. I worked at Audible - another successful audio media company - for four years, and you just perfectly described the dysfunctional scenario I witnessed while there. Couldn't have described it better myself.
It's not working as intended for either party. They both come out looking bad.

Apple looks bad because they claimed that if they produced this software for the FBI it would eventually get in the hands of international criminals and put their users at risk (this before the FBI tried compelling them so it would not have set court precedent). So the FBI did an about run and got someone to come up with a method to achieve the same aim, and so the end result to Apple users is the same, except Apple are in the dark as to what the vuln is. That's a position they'd like to not be in.

On the other hand, the FBI coming in and trying to compel Apple, after an initial rebuff, looks like it was unnecessary and makes them look less competent.

Now, given it took a third party to do this, the FBI can't very well disclose the third party's trade secret.

Lose-lose for both.

This should be titled "The iPhone was never as secure as we wanted to think it was"
I believe that his point is that the non-disclosure affects the security of other similar devices, especially those that can still be patched.
3 Ways Successful Professionals Build Their Brand on LinkedIn
Web development outsourcing for UK-based companies – why and where
The only metric that matters is the measure of the business task at hand. You might dig into CPU utilization after you've identified a problem with your application, but trying to identify an application problem by measuring CPU is like trying to determine where your shipment is by looking at engine RPM of the freight vehicle.

That being said, historic CPU utilization is a useful metric for capacity planning.
I find it a stretch to believe that any of Spotify's problems can be put down to the lack of an Apple Watch app.
Yes, it is over-population. 100 years ago, india had 200 million population, it felt like it had virtually infinite resources. So, abuse of natural resources, were not felt. But the same abuses are felt by everyone, when the population is 1.2B. The habits of poeple needs to be adjusted when the population is 5x compared ~100 years ago.
Microsoft Build 2016 live keynote
Integrate Stripe Payments with Ease
Don't you overestimate an evening with strace and tcpdump a little bit as a "quality of service measure"? In my experience the reasons for high request response times are very easy to find, but not necessarily easy to fix. So at best it takes 30 minutes to find the root of the problem and 30 minutes to come up with a fix, at worst it takes 30 minutes to find and half a man-year to fix an entire stack.
Interesting. Do you have a screenshot of the pretty 3 column one?
You can use Colossus today! It's a very low level service, leveraged by other GCP services.

For example, Google Cloud Storage and BigQuery Storage both sit on Colossus. Read more on BQ here:

https://cloud.google.com/blog/big-data/2016/01/bigquery-unde...
Data shows guest posting is overrated
I think it was more like the OP lead with his or her chin. "Done right? Okay..."

It's also true that pretty much every piece of monitoring software I encounter makes me sad when I look under the hood. And the proprietary ones that I've seen under the hood of . . . hoo boy.
In case you don't know who David Patterson is:

* He pioneered RISC, and coined the term. About all smartphones are ARM-based

* He came up with RAID, coined the term.

* He cofounded Berkeley's AMPLab, which is the birthplace of Spark.

* Among other AMPLab activities he has are SNAP; It is about DNA analysis with the goal of helping solve cancer (which is an acquired genetic disease). In 2014 this project helped save a live [1]

[1] https://amplab.cs.berkeley.edu/snap-helps-save-a-life/
If there is a quid pro quo, then it's illegal, regardless of how the payment is characterized.
Apparently Windows Mobile is getting some attention for being quite secure:

Windows Phone security is top notch, says Kaspersky - http://betanews.com/2015/06/11/windows-phone-security-is-top...

Microsoft may have the most secure smartphone OS in Windows Phone - http://www.neowin.net/news/microsoft-may-have-the-most-secur...

Windows Phone is the most secure mobile OS says white hat hacker - http://www.techworm.net/2015/11/windows-phone-is-the-most-se...
Correct. And to be fair, the FBI could have received the vulnerability from a foreign state that is also opposed to terrorism but did not want their identity or methods known.

ie they may have reasons for not disclosing the vulnerability, and it's a shame that there's so much mistrust of the government [caused by actions of the government] so that we can't assume the best.
They confirmed a method to get in existed, but did not reveal

- what the scope of its usefulness is (particular kinds of hardware or software revisions)

- whether it still works on modern platforms

Without even a vague idea where to look or whether it's still there, it's a guarantee that _something_ existed, sometime.
Was pretty sure you were aware.

Things could be worse. This could be decided in East Texas, for instance. That well-known hotbed of technical innovation ... /s
Coz: Finding Code That Counts with Causal Profiling – An Introduction
Remember that any political campaign to change a law, like legalizing same sex marriages, is lobbying.

Many seem to think it's only campaigns you don't agree with that are.
disabling javascript goes back to the older "squiggly words" style in my experience. I have no idea if that happens with cloudflare though.
Sure. People living there would be affected. But i don't know common those practices are. Might be just North India. I am from South. There are many difference between North and South states and within Southern states and districts.
Regular Royal Mail - similar to how Russiapost to the US will be delivered by the USPS
Nice one! xD
> Funny to call it reporting when it's more of an editorial by the renowned security researcher Bruce Schneier.

I respect Bruce and he's done a ton of great work, but I obviously disagree with him on this point. I do not believe governments (especially ones engaged in clandestine surveillance operations) have an obligation to share security vulnerabilities with companies. But neither do those companies have an obligation to create vulnerabilities for the governments to exploit (on the contrary; the companies have an obligation to find and fix the holes in their products).

> It doesn't matter that the vulnerability "has always been there" if nobody knew about it.

There's no guarantee that nobody knew about it, and that's the problem. Information asymmetry is a bitch, but the safest assumption is that someone else did indeed know about it, and then told the FBI. If someone was willing to tell the FBI, it's a safe bet the security community knows about this exploit.

Also, if I was the FBI I would intentionally try to obfuscate my capabilities as much as I can. I would want people to think I can hack every iPhone at any time, even if I can't.
My understanding is that “disclosure” is a nuanced thing, time-wise: responsible disclosure is to mention the vulnerability to someone who can and is intent to fix it first, give them the time to write, test and send a patch, and then publish it. Publishing it earlier sound very unreasonable, especially before handing the details to the manufacturer.

I am not familiar with what Schneier said 15 years ago, though. He might have chastised someone for doing that; he might have changed his mind. If he hasn’t in a decade and a half, I’d be shocked.

I realised this morning that 15 years ago, I was proud of using SAS, “the most powerful analytics software there [was]”. I changed.
EU:

https://stripe.com/nl/pricing
https://stripe.com/de/pricing
https://stripe.com/gb/pricing

etc.

US and Japan for example:
https://stripe.com/us/pricing
https://stripe.com/jp/pricing ( no fixed )

Must have something to do with: http://europa.eu/rapid/press-release_IP-15-4585_en.htm
The article describes the "reckless extraction of groundwater" and links to a report of farmers breaching embankments to save crops, putting village drinking water supplies at risk.

The word climate appears twice in your comment, but just once once in the article.

In my experience much of the outrage about political correctness says more about the commenter than the source, and that seems to be the case here.
...wasn't he the first person to unlock the iPhone? Not jailbreak, but unlock. While his blog was still up, he talked about cracking open the first-gen iPhone and getting JTAG, modifying the state of the baseband as it was running.

I don't think anyone did that before he did.
i kind of prefer it the other way around, like others here have suggested

i want a better wine, that can run sql server, and ms visual studio
Totally agree - this is all pantomime.
TL;DR : Vast amounts of money for natural resources bring about vast corruption in unstable states.
Probably time to get Software Freedom Conservancy involved:

https://sfconservancy.org/copyleft-compliance/
I don't have whatever is needed to play webm files on Safari, so that 12 second video of the two gears downloads instead of playing inline.

That makes sense.

What does not make sense is the name of the video: TerrificVillainousHairstreak.webm

WTF?
anybody tried cash [0] ?

[0] https://github.com/dthree/cash
What built in tools and utilities did you find it missing?
I guess the part I disagree with him on is that I actually expect the US government to act like malware authors. They've shown an affinity for the tactics before (using surveillance software, stingrays, etc) so it's at least perfectly consistent.

I have no expectations that the relationship between law enforcement and technology companies will improve. I guess I've just accepted this situation as the "new normal".
What might it be?

I assumed the code is just 4 digits long but judging by the quick downvotes people aren't even considering this to be a possibility.
> ...you don't burn a zero-day on a dragnet;

A for-profit entity shouldn’t.

I’m not sure the FBI has the same objectives. If they do, I’m sure Apple would be happy to pay market-prices for that vulnerability.
Regarding the comments here "why not Redis via UDS/loopback?" etc. - there are some cases where such solution won't fit - e.g., running your service on Mesos cluster.
You need to adjust for the currency. Rupee is artificially lowered to boost exports. Italy has 58M people. India has 1.25B people. This is approximately 25 times. So, India needs at-least 25x food, cloths, housing etc. If you take actual quantity and calculate using dollar terms, it would result in india being much bigger economy than Italy.
Did we forget how to code?
How much of each is cached?
If we stipulate that almost everything benefits from progressive enhancement, will you stipulate that there exists a very large class of applications, which includes Google maps, whose success can be attributed to the richness of their dynamic user experience? If we can agree on those points, then we can just discuss the tough details of how expensive vs. useful it is to support a static experience.
It is great for people who want to prove a UEFI Secure Boot setup before going to Microsoft for the keys.
Capitalism as a philosophical idea of free trade is far different than how corporate capitalism has actually looked in practice though. Not only in terms of power and information disparities and massive externalities making a mockery of the idea of "pure capitalism" (much as crushing and brutal authoritarianism made a mockery of "pure Communism") but also because advertising is a mind control weapon. I know its popular for smart people to think that advertising doesn't affect them but I can assure you that it is VERY hard to choose what level of consumption you want to live it while you are swimming in a sea of advertisements designed to make you feel unconsciously dissatisfied with what you have. The only experiment I could think of to counter this would be to live mostly off the grid or deep in an "undeveloped" country for a year or two and watch how your consciousness shifts. Otherwise it is like the fish that is looking for the water.
WiKID 2FA for Linux and Windows Administrators, Locally
Now that you've said that, i'll never forget it again (although what the hell does -t stand for then?)

But the point is that even though it's most likely "my fault" for not reading the manual correctly (i'm not saying you were implying that, but often i do feel that it's ultimately because of my laziness that i have these problems), they aren't "intuitive" in the sense that that you can just pick it up and go.

The one thing my "dream linux" system would borrow from powershell is the tab-completion for flags and sub-commands.

If i could type `git ` and hit tab and see a list of what is possible (with a quick one-sentence explanation of that sub-command) it would completely turn my experience around.

But even that takes "domain knowledge" that tab auto-completes... This stuff is hard!
The error is unfortunate, I agree it shouldn't happen, especially on a common distro like Ubuntu. Does running kbuildsycoca4 fix it?

http://linux.die.net/man/8/kbuildsycoca4

Krita should work fine on Ubuntu, but it's a KDE app, so guessing you've encountered a bug with running KDE apps on Ubuntu. Okay to discuss the issue on the Krita IRC channel or via a bug report?

https://krita.org/get-involved/report-a-bug/
But other than Linux and git (and a diving app [0]), what has Linus ever done for us? [1]

[0] https://github.com/torvalds/subsurface
[1] https://www.youtube.com/watch?v=ExWfh6sGyso
Sony Says 4K Movies Will Cost a Whopping $30 Apiece
Smart Tor users have JavaScript turned off anyway. You might be lacking the images, but lately this has been pretty good on archive.org.
Interpretation does not prevent typing, and machine code is an execution format. The right thing in any language is: express the operations that you are going to perform in a form that clearly distinguishes between values that represent different varieties of thing. (Types make this easier, otherwise you have to implement more of it yourself).

You talk about code and data as though they were the only things, but they're not; getting one variety of data when you were expecting another variety can just as easily lead to security bugs as getting code instead of data or vice versa. Sanitization very rarely works - and in the rare cases where it does, it still indicates a deficiency in the underlying model.
That's the entire purpose of the FBI not disclosing this information though. Government agencies engage in game theory as well, and information asymmetry is a powerful tool.
Good government prevention detects such attacks on the allmende before they happen. If you are going to make a paint factory, and you have no contracts, and no money paid, to handle your waste, you are a crook.
If you have a paint-production-recyling factory and you have no means to safely handle the remains, you are a crook.
This chains can be checked, the quantities handled can be booked.
Its a lot of bureaucracy - but its worth it. And i say that, having worked in one of those "regulated" factories and having a inspector being a pain in the ass. Its really, really necessary. Just saying "Nothing can fix this." is easy here, but i dare you say that to the face of a mother or father who just lost there child to cancer.
So not even prison- just deny the freedom to be a parasite- to public goods.
I can't +1 this one enough. I have some developers on my team who insist on using Docker on a Windows setup, and it is painful to use with VirtualBox.

OSX is better because it doesn't feel too different from Linux (aside from setting docker machine ENV variables). Still virtualized so you take a performance hit.
Public officials answer to a different standard than private citizens who run companies. The oath of the FBI is not to make their own jobs easier. It is to maintain public security. If the Director of the FBI cannot do that effectively, then that is a blemish on the record of President Obama who appointed Comey.

There's a definite need for someone to step up and say that on balance, we are more secure without trying to guarantee government access to encrypted data, or vice versa. So far nobody has taken that high level view and been able to convince any of the early major players in this debate.

Lindsey Graham's statement during his questioning of Lynch is the closest we got to a high level player changing sides, demonstrating an understanding of both positions [1].

[1] https://youtu.be/uk4hYAwCdhU?t=6m53s
Learning to Launch – eBook – $0 – Available to read online
Personally, I interpreted the question as a shorthand for: "Aren't you afraid LeRoux could see that as doxxing, and of potential dangerous consequences to yourself?"
IANAL, but you would probably need to show that you were materially harmed by your iPhone's now-weakened security. Maybe someone could step forward and show that their new iPhone got hacked and that they lost money because of said hack.
[Tutorial] Implement Access Control in Node.js
Amazon bans cheap, non-standard USB-C cables
Vs pure native: let's you avoid ad-hoc mutating the UI, makes state more manageable and predictable - the same thing that got React popular in the Web space, albeit with more competition. Not super-familiar with Objective C and Java-Android libraries so references to native equivalents would be appreciated.

Now compared to other js-based solutions is solves many of the problems they generate, such as poor java/objc interop, blocking javascript operations etc. But you'd have to compare them ad-hoc.
The Titanium framework IMO was the state of the art before React Native, javascript-wise it solved perhaps all of the same problems.
How Anonymous Hacked Donald Trump
I've said it before, and I am sure it will be as unpopular now as then: there are people here who should know better, who can see where this road leads, but they are selfish "I know DRM is bad, but I got ta have ma Netflix!".

Bad things happen because selfish people want to be spoon-fed digital junk food, and they will accept perverting the open web to achieve it.

At the point the W3C accepted eme/DRM, it was already finished as a standards org, it just didn't realise it yet.
Suburban Poverty: Atlanta's Hidden Epidemic
If electrons sometimes time traveled on a human time scale we could exploit that, eg. by building a huge assembly of electron guns, phosphors and photomultipliers. We could gain knowledge of the future signal sent to the electron guns by watching when the phosphors lit up while the electron guns were switched off.
Looks like parallel's shared filesystem (linux guest, osx host) fails the test:

% ~/g/git/git-update-index --test-untracked-cache
Testing mtime in '/media/psf/Home/Downloads/junk' .
directory stat info does not change after adding a new file
I am sure downhill mountain biking is both safer and more exciting than riding a motorbike fast on a fairly flat piece of road.
Show HN: Podcast Discovery – find developer podcasts you are interested in
I don't see much reason to do either. Virtualization pretty much works now. I'm sure there are use cases when that's not enough, but I think majority of people who want Windws+Linux would be happy with either of those running in a VM (depending on their use case).
> Those who argue that having a dependency like left-pad adds risk to their project are essentially arguing against having any external npm dependancies in their project.

No they absolutely are not. Having a few dependencies is something that almost all software has.

Depending on left pad means more than just "I'll have problems if it is removed".

It means you'll have problems if it is modified. It means you'll have problems if it has a vulnerability that needs to be fixed. It means you'll have problems in tons of different circumstances. Depending on things willy-nilly is a bad practice.

Trusting left pad written by god knows who is a little different than trusting something like jquery that has been around for 15 years.
Recent: https://news.ycombinator.com/item?id=11348608
> I respect Bruce and he's done a ton of great work, but I obviously disagree with him on this point. I do not believe governments (especially ones engaged in clandestine surveillance operations) have an obligation to share security vulnerabilities with companies. But neither do those companies have an obligation to create vulnerabilities for the governments to exploit (on the contrary; the companies have an obligation to find and fix the holes in their products).

How do you determine if a vulnerability was there because it was overlooked in development, or if it was there because the government demanded it from the company but used the law to impose a gag order on the company preventing the public from finding out about it?
When developers who don't do much in the JavaScript realm, have extensive standard libraries with such functionality built in decide to compare their language choice with JavaScript and say "Why does this module even exist?"
Another long time vim user, I switched to emacs+evil then to spacemacs back to vim back to emacs+evil. Spacemacs was good but I started to feel bogged down, as I do with big ide's and went back to a very minimal vim.

I have now started back with emacs + evil and a minimal setup. I find it gives me the best of all worlds.
So they want to encourage pirating?
...or merrily trudge along with Zabbix, or curse under the cruel rule of Nagios...