skysight-inc/HackerNews huggingface dataset:
MacOS Sierra beefs up Gatekeeper protection with two changes,one visible,one not
Not really. It's more like `./provision.sh your-new-host.example.org`

(Because why in the world would anyone want to type in things by hand? Laziness for any repetetive manual labor is a greatest virtue of any good sysadmin.)
Well, the lay-person's understanding of it would be interesting as well. Like asking an American "Can you tell me about your war for independence against the British and why it happened?" You could write a dissertation on it, but it's also interesting to hear the tl;dr that a citizen believes (correct or not).
Except this isn't a Wankel.

I looked into this a while back, and they're able to get 50%+ thermal efficiencies by using their own modified thermodynamic cycle that promotes more complete fuel combustion, as well as arranging the engine components in such a way that the engine has low heat rejection qualities. Nearly doubling the efficiency of the typical ICE setup and doing so with large weight reductions far outweighs any issues with rotary seals. These things are so compact and simple that it would be feasible to simply drop an entirely new engine into your car and melt down the old one when the seals wear out. Not that it would come to that, but those are the kind of economics we're dealing with here. This is a legitimately nifty invention.

t. mechanical engineer
Thanks, we updated the link from http://www.streetsblog.net/2014/06/13/the-whole-city-of-flor....
*ad hoc
I love the ncase but they sure are expensive. The Cougar QBX is a nice and cheaper alternative. It doesn't come in silver though.
> Does Valgrind work with Rust binaries?

Technically yes, but for allocations you need to run nightly and either alloc_system (disable jemalloc) or rebuild nightly with JEMALLOC_FLAGS='--enable-valgrind', otherwise valgrind misses jemalloc's allocations, which is more or less all of them: https://github.com/rust-lang/rust/issues/28224

And the second fix may or may not keep working as jemalloc 5 apparently removes valgrind support: https://github.com/jemalloc/jemalloc/issues/369
SHA-2 is a great example of what I'm talking about. The best SHA-2's to use don't have the highest output size.

w/r/t/ variable-sized HMAC key sizes: you don't need to "select" a key size, so much as you want it ideally to be harmonized with the key size of your cipher. Since you're going to use AES-128 anyways, this isn't a tricky decision.
apt-get remove -y unity && apt-get install wmaker wmaker-data pcmanfm lxterminal

Should take less than 10 minutes and be way faster to use :)

(I actually use openbox and fbpanel, but WindowMaker is just too great to forget about)
I appreciate your response! knowing that there's definitely no one single unbiased good book/source is actually a very useful thing to keep in mind - I'm currently reading "a peoples history of the united states" and pretty quickly realized that whilst it contains a lot of information, it's (necessarily?) written in a very particular tone.

As a recent transplant to the US I actually like the idea of having my own copy of the declaration and constitution, for both the actual information and kind of symbolic novelty of being here.

Thanks!
as a 'expert' multithreading programmer, i can confidently say that most developers should stay away from fine-graned multithreading (generally speaking of course). You will have much greater productivity gains and less debugging headaches (race conditions!) If you architct your program to be coarse-grained (modules running asynchronously, but each module not multithreaded) or even better, the entire app being single threaded and just fork it to scale horizontally.
What's the reason for using a firewall?

Assuming that services which shouldn't be accessible to the outside only listen to localhost not the network (e.g. MySQL on a LAMP stack), isn't that sufficient?

(Honest question, I don't have much experience with syadmin.)
- Taste. Read The Elements of Style and Paul Graham's http://www.paulgraham.com/taste.html

- Watch All the President's Men and emulate the reporters Woodward and Bernstein. They hustle. That's what I miss among people I work with. If something is not explicitly assigned, cut-and-dried, and easy to follow, they give up. You may not be fired, but good luck making a real dent in the universe, as Steve Jobs used to say (another person to emulate! well, in some ways).
Data Structures and Algorithms for Data-Parallel Computing in a Managed Runtime [pdf]
The top American "neutral" economists told us that everything was great in the real estate market right before 2008.

Sterling is up against USD since March. Besides, a low pound can be good for exports/manufacturing. The idea that if the pound drops against the USD it's categorically "bad" is untrue and simplistic.

When David Cameron was campaigning, he said he'd be glad to have a referendum and he thought that a Brexit might actually be better for the UK. Thanks to that he was voted in with a majority, and promptly changed his tune to saying a Brexit would be lead to a catastrophe. Funny how he changed his mind so quickly. Also funny how the "neutral" economists didn't pipe up to correct Cameron during the election.
A California County Breaks New Ground for Surveillance Transparency
There is a set of files that describes the state of the machine, it's called the filesystem. Anything less doesn't describe the whole machine. The 'poking and prodding' is just a convenient way of querying the very small parts of the filesystem that are relevant to that query.

That said, a script that pokes and prods the right places and reports a machine's 'security factor' and prompts improvements would be cool (and probably already exists).
> What all those comments have in common is that they assume things work according to Tom DeMarco's book Peopleware.

This is a funny comment, since he keeps repeating through the entire book phrases that sound like "you probably won't be able to get this for your team", "you likely never seen it anywhere, but...", "when doing our research, we've seen this. You might doubt it, but trust me, this exist on some places."
How Earth Moves
This was a very helpful, informative guide. I love the fact that your service has such a low barrier of entry - you'll get a lot of apps hooked on what you do. I'm excited to see where you all take this!
This might be my favorite acronym of all time.
The denardis 40cc 7hp engine says it burns 610g of fuel per kilometer driving a pocket bike. That is around 3 mpg for those of us with strange units. It's safe to say they traded away efficiency.
Sleep is the first step to greatness
Exactly. I don't see why this is a "problem."
YouTube offers free video shoots when spending $150 on ads
Oh yeah, somehow I cant find that app any more. Guess complete data transfer would be prone to error given the medium is sound waves. hence they stuck to link.
It depends on your VPS, but many give a root password by default.

I do make sure later in the article that `/etc/ssh/sshd_config` does not allow root login:

PermitRootLogin no

But you make a good point that a simple solution is just having no root password at all. If your VPS does have a root login by default, then I believe you can get rid of it with:

sudo usermod -p '!' root

The best part about sharing things like this is getting all sorts of great info and input on things.
Relentless Work Ethic Can Outpace Experience
didnt they just consolidate everything to typings?
pretty sure that mailing list email body copy with the slightly awkward formatting a CEO might use for general correspondence will tend to outperform a neat obviously-a-mailshot-created-by-marketing HTML template when it comes to generating many types of response as well.
>Which is understandable; New York is virtually the only walkable place in the US.

Oh come one! That's not even close to being true. I live on the west side of Los Angeles, and it's very walkable here. (I believe in those ratings sites that rate walkability from 0 to 100 Santa Monica is something like a 98, just like NYC.) I used to live in Atlanta, and even there certain parts were very walkable at the time (thinking Little 5 Points, for example). San Francisco is totally walkable. Chicago, too. I'd bet most large cities in the US are walkable. Boston was when I lived there.
I'm the author of the original post on originalgreen.org. While the images are sensational and actually went viral a couple years ago, the real message is to point out that the need for speed necessitates massive waste of land and resources. At speeds experienced in Florence, the curb radii of the streets are essentially invisible, whereas the expressway radii each take up much of the Atlanta image. Yet which place provides wonderful experiences? Isn't it time to slow down?
I mean, that is all 'machine learning' and AI anyways. Whoever renames the methods probably does so for additional funding, and this technique is not exclusive to ML research.
I think for this to work, they will have to make something that can pass the Turing test, at least for a certain period of time.

Anyone that thinks scammers won't generate their own version of the Voight-Kampff test and it won't quickly spread is likely to be disappointed.
Well, it's not a problem that the American people are too cynical. But it is a problem that our institutions are turning into trash.
sudo passwd -l
Getting the people inside the institution to recognize that people don't trust them may lead to them trying to do better.

I'm pretty sure that most people that work in hospital billing have little notion of how terrible a process it is. They just think they are doing the best they can given the situation (nevermind that the institutions have created the situation). For example, I was discussing a bill with someone (I was complaining that it seemed high) and their unimpeachable logic was that I shouldn't care about how much it was because it had already been applied to my deductible. Yes, they actually said something along those lines.
this is what I loved about beaglebone - onboard flash with OS pre-installed with SSH enabled and no setup required.

20 seconds from opening the box to bash$
> Unity may have its detractors and genuine deficiencies but the Unity projects I worked on were much more maintainable due to the constraints of working inside Unity itself.

As a game developer who mostly worked in Unity, this is horrifying. Unity-based projects are pile of horseshit in terms of architecture and organization, and I honestly hoped that AAA stuff is held to a higher standard.
The other challenge vs reciprocating engines is that a piston engine cylinder has two volumes; the area above the piston where combustion occurs, and the area below, where there isn't any combustion. So during the stroke, you can spray the cylinder walls with lubricant, the bottom of piston, etc. So the seals can run on a layer of lubricant, and the piston can be cooled by the lubricant. In a rotary, you don't have that. Both sides of each seal are filled with fuel-air mixture, so to lubricate, you have to spray oil into the mixture. It's the same issue as with two strokes. They have to burn oil, and that is really tough on emissions, and it's really difficult to get heat away from the seal (the only place it can go is to the rotor).
So there's a couple of reasons to add a firewall.

1. If an attacker gets unprivileged access it can slow them down (if properly configured) in getting new tools onto the system or adding a shell.

2. If a configuration error results in a service being started on a network accessible interface by accident the firewall gives you a bit of defence in depth protection against unauthorised connections to that server.

3. you can also use it for logging activity to feed into other systems.
I live in South Beach, and while we still have a car, we only drive it a couple times per week. The gold standard is being able to walk to the grocery. If you can do that, you can walk to a lot of other things as well.
Show HN: Node.js Socket wrapper and optimizer
> By sending an email that repels all but the most gullible the scammer gets the most promising marks to self-select

This is why I string scammers along as far as possible. I can't stop them, but I can slow them down.
It went from 19% to 9%. Meaning a relative reduction of > 50%. When you're already at the bottom there's not much room to fall :)
So it looks like from the `passwd` man page that `-l` locks it, but doesn't actually remove it completely? I wonder if there are any disadvantages to this.
Story Behind Photo That Galvanized the World Against Apartheid
> The top American "neutral" economists told us that everything was great in the real estate market right before 2008.

The US housing bubble collapse was widely and publicly predicted by leading independent (that is, those not working for banks or government) economists of every political stripe for many years before the collapse.
Behaviors of “Unstoppable” People
Hardening (along with any other server setup/configuration) should be implemented using some idempotent configuration management software (Chef, Puppet, Ansible, etc). It's 2016, there's no need to configure servers manually.
I'm currently dealing with an older C++ code base that relies on a lot of classic undefined behavior[1]. Stuff like this:

// check for wraparound
const char *maxPtr = ptr + minSize;
if (maxPtr < ptr) maxPtr = ...

// force crash by dereferencing NULL
if (thing_that_should_not_happen) {
char *xx=NULL; *xx=0;
}

Some of these are obvious patterns that I can search for and replace, but I'm sure there are lots of cases that are more subtle. What are the current best tools (preferably for Linux) that detect places in the code that are suspect, so that they can be reviewed manually?

[1] At least, I think this is undefined behavior in C++. I'm much more familiar with C, and am extrapolating. Are there big differences in undefined behavior between the two that I should be aware of?
Ask HN: It's June 2016, what books or media are into this month?
What is that you're consuming for study or fun which you'd like to share with everyone?
Yeah, agreed. I think the article mentioned price hikes scaring off casual watchers and this almost happened with me but before I decided to cancel I took a deeper dive into the available content and found a lot I had ignored for a while (both NF original and licensed content).

So now I'm in this pattern where I find a few things I want to try, like enough of it to keep me happy for a month or two and then slowly run out of things to watch. I let it sit idle for a while and then lather, rinse, repeat.

But essentially every time I start to contemplate cancelling I tend to find something that makes me hang on for a little while longer.
In the early 1990s I got a paper letter from a Nigerian scammer. It came in an airmail envelope addressed by hand—almost completely illegibly—to my work address. (Seriously impressed by the Post Office's diligence in parsing that mess and delivering it.)

The letter was an nth generation photocopy, the text the familiar appeal. But they used to send them out on paper.
Can you make a living where you're living? If so, that's awesome. Farmers obviously do that; fishermen often live in small fishing villages. Lumberjacks can live in the woods just fine. The problem is when people move to the country but still work in the city, and have to endure the traffic getting around every day.
terminate and launch a new one? You have automation to provision your servers right?
Who's "they"? typings is a third-party tool not developed by the TypeScript team.
For me it seems like hacker news loves universal basic income, because they understand this might not be true today and even less likely to be true in the future.
We use Freshdesk's "FreshService" ticket system at my workplace and the way it handles replies in one ticket from non-agents is absolute garbage.

You make a ticket by email, it adds to the system, a support agent is assigned to it, so far so good... then a developer with access to see the ticket goes to the ticket page and adds a helpful reply, except the ticket creator never hears about it. It's registered on the ticket web UI, but the creator of the ticket is ONLY notified of the responses by the support agent only. This sucks big time (and AFAIK is not configurable.)

Also god forbid someone uses email (or an email alias you're part of) to make the ticket and you accidentally do Reply All so your reply creates a brand new ticket just for you as opposed to appearing as a response in the initial ticket. It's so dumb. (You can get a ticket ID to put in a brand new email and then your reply would be registered but you need to know the ticket number first AND it still suffers the same issue that if you are not the support agent your reply is registered but never notified to the ticket creator.)

If your support is always 1-to-1 then by all means Freshservice is fine, though.
Engineer's Guide to US Visas
You seem like just the type of person I wanted to read that comic when I decided to put that in. You're fully missing the point (forest through the trees type of thing) with those stats; the unarguable part is that life circumstances often allow some people to snowball minor successes/advantages and prevent the same from happening to others.

Basically, that comic represents a very realistic, though maybe not statistically significant if it were to be taken literally, situation. It illustrates that results are not dictated by hard work and there is not equal opportunity. It is an attempt to help people empathize.

It's not saying that the guy on the left is a shit (though maybe unaware of his blessings), but rather that the woman on the right (anecdotally representing marginalized society) may be trapped no matter how hard she works. Sure she can beat it, but look at everything else she has to overcome to do so.
Didi raises $7B in new funding for the war against Uber
Ideally, you do both: bind your services to the correct interfaces and ports, and set firewall rules as a safety net. This prevents users (or exploits yielding forked processes) from listening on other ports (well, they can listen, but it will be pointless), and if a package update comes along that unexpectedly changes a service's listener configuration, you'll be protected. It also protects you from buggy or broken services that may provide bind/port options in their configuration but end up listening on all interfaces or random ports anyway.
yes. but it was used in tutorials by MS so it seemed like a de facto thing...
It seems that all those top out at dual core, btw. Any quad core?
Many services listen to all available interfaces in their default configuration. Many also auto-start right after installation. So additional layer of protection won't hurt.
Nice work! Looking forward to using it for my next project.
Sure, only mode. Inform me "this program is not known to be well-typed" or "this program is outright ill typed". Then, let me run it anyway, and correctly detect the consequence of the admonition with run-time info. Or I could choose not to run that program; I want mine well-typed.
Calculate your nutrients with my new package: NutrientData
I don't know if this would be some kind of libertarian wet dream, but I wonder if there's value in taking some of the underlying reasons McDonald's is working for this purpose, and trying to emulate them in existing infrastructure.
I'd be interested to know if the author followed the "alt.fan.elite" newsgroup back in the 1996-1997 timeframe. There were some discussions on the group at that time re: multiplayer online Elite-type games. (Specifically, I ended having a number of emails w/ a guy named Randall near Melbourne talking about game dynamics, etc, back in late 1996. I'm sure it isn't the same guy, but it brought back fun memories and caused me to dig out some old backups for a quick read today!)
That's not really fair to say. The HMAC RFC[1] explicitly discourages key sizes of less than L bytes, which in context is about 128 bits. Variable key sizes can be chosen, sure, but it's not exactly a feature if there is an implicit lower bound.

I would say it is a fault of the HMAC construction that any key size can be selected, not a fault of using a key size HMAC is not designed for. An improvement would be explicitly defined key sizes that are compatible with other algorithms in an entire cryptosystem. If HMAC were to be built from scratch today, it would probably be better to have explicitly defined key sizes instead of variable key sizes.

I know this might come across as obtuse or stubborn, but if you read the other comment I made in this thread I think it might clarify my point.

[1]: https://tools.ietf.org/html/rfc2104#section-3
What do you think that my motives were?
Thanks for your thoughts. I was thinking about picking a project to work on and using that as my motivation. I find myself sometimes just losing focus after watching the videos. Do you ever experience that?
This would run faster natively on Windows rather than Wine, right?
Australian mammal: First to go extinct due to climate change
Are you talking about Discord?
> Today, it's UNESCO World Heritage at all, and probably on the list of places you like to visit (and, incidentally, smaller than a Walmart) -- but 500 years ago, it was a prison for jews.

Medieval cities had separate Jewish areas due to Jewish demand, not gentile demand.
I've been thinking about starting to use a password manager (as I should've done long ago), and 1Password looks pretty good. It's pricey enough that I'd like to hear some pros and cons before I pull the trigger, though. How's it worked out for you? Where are the pain points?
EQCSS: A CSS Extension for Element Queries and More
> I check our logwatch email every morning and thoroughly enjoy watching several hundreds (sometimes 1000s) of attempts at gaining access with little prevail.

This is something that actually bugs me a bit. These attacks are so common, getting emails like this every day contributes to alarm fatigue. (https://en.wikipedia.org/wiki/Alarm_fatigue)

I'd love to see the Linux nightly security scripts replaced with something that only sends out emails when there's an specific actionable event I need to pay attention to. Ideally in a way that can easily be aggregated over all the machines I manage.
Robot escapes testing grounds, disturbs traffic in Russia (VIDEO)
For me, it seems like there are both ultra-capitalist libertarian (of the flavor that opposes any social support, including UBI) and pro-UBI constituencies active in hacker news, as well as others, but that neither viewpoint dominates HN. (Though opponents of those viewpoints, and others, will often describe the view they oppose as dominating HN, perhaps because they are more sensitized to what they oppose.)
The importance of obscuring email addresses on websites
Yes but it is not written in nodejs/rust/<insert lang of the moment> so clearly it is crap /s
Are you based in the UK?

It's termed the $35 computer becuase components are purchased in dollars, and so it's the base price without having to take into consideration the daily fluctuations in currencies.

It's manufactured in the UK however (Wales specifically), and so there will be inevitable shipping costs to destinations outside of the UK. This is simply unavoidable, and will depend on factors such as the price of oil.
>I know these tools are fairly new... that said, working without them feels like developing web applications back in the late 90's. Just painful

Large scale Javascript development is an absolute nightmare without TypeScript
Always hard to tell the difference between gross incompetence and malice.
To be a little more clear about the diamond and circle...

LASSO is a diamond because it represents the constraint that w_1 + w_2 <= 1. The region of (w_1,w_2) that satisfy that inequality is a square.

Ridge is a circle because it represents the constraint that w_1^2 + w_2^2 <= 1. The region of (w_1,w_2) that satisfy that inequality is a circle.