skysight-inc/HackerNews huggingface dataset:
Well, "good" to see a bug that wouldn't have been solved by using Rust.

I had never really thought about this attack vector though. Writing to `.bash_profile` is effectively the same as writing executable code.

Though I like the whole "everything is a file" concept (I know this isn't exactly that but...), it seems like we should be striving for something safer. For example, I guess in something like Plan9 you could have wget start playing sound out of your speakers? Crazy.

File handles shouldn't cause RCE vulnerabilities, right?

I suppose sandboxing is one way of dealing with this. Another is having to explicitly "give a file" to wget and co. for editing. None of this "oh, here you go program, write to anything in my home directory".
> It's unfortunate, as I'd love to have a versioned FS

btrfs at your service then. Comes with the mainline Linux-kernel. Give it a spin!
I am unable to navigate back and see my search.
Formatted C++17 stdlib man pages
> Juno was his wife..

Was...? Now that's some dedicated faith, still practising Ancient Roman religions!
"The god Jupiter drew a veil of clouds around himself to hide his mischief, but his wife, the goddess Juno, was able to peer through the clouds and see Jupiter's true nature."
I mentioned CGI..
Agreed, I couldn't recommend mORMot more! Several more notes:
- The docs for mORMot is very much lengthy and is not written by a native English speaker, you might feel overwhelmed getting started by reading it, but actually it's very simple to start, with the supplied 33 samples: https://github.com/synopse/mORMot/tree/master/SQLite3/Sample...

- with Lazarus/FreePascal, mORMot supports almost all Linux distros, check this forum post: http://synopse.info/forum/viewtopic.php?id=3319

- Check the commit logs of its github repository, see how active the development is.

- The FPC/Lazarus foundation (http://foundation.freepascal.org/) was launched several days ago, check the Projects menu - you can expect a lot of modern language features would be added.

- The newpascal.org site was launched recently to get you started easily for Linux web development with mORMot/Lazarus
Your L2ARC shouldn't be bigger than 5x your system memory, ZFS has to keep mapping tables in-memory to determine where data on the L2ARC is stored, the bigger it gets the more memory you take away from your in-memory ARC, which can lead to worse performance than before since more data is having to come from your much higher-latency and lower bandwidth L2ARC or straight from spinning disks.

RAIDZ is a performance killer right off the bat, I would switch to using mirrored vdev's instead if throughput is an issue for you. Parity calculation kills write speeds, especially on slower CPU's like a C2758, and RAIDZ doesn't give you any extra throughput on reads since there's only one usable copy of a stripe to read from. I have 2x4TB disks in my pool as a mirrored vdev (with an additional 2x3TB coming after I get my 128GB flash drive for XenServer to free up my second 3TB disk again) and I get reads over 500MB/sec using 10Gig-E to my XenServer host, and equally fast writes. Disks are fairly cheap, RAIDZ is not a good solution if you need performance, and if you are using four disks in RAIDZ-2 you would lose the same amount of storage using two mirrored vdev's anyway (and save the increased potential of a rebuild failing due to multiple disk failures that is increasingly common on higher capacity drives).

If writes are a bigger problem for you, then, yes, a SLOG device will help - but any random SSD is not going to do. If you are using a SLOG ZFS expects it will not corrupt in-flight data following a power loss, even a "high-end" SSD like a Samsung 850 Pro or a Crucial MX200 will lose data in the event of a power failure. You also don't want a SLOG that isn't mirrored, if your SLOG is corrupted you just lost your entire pool. In addition you need a SSD with proper power-failure protection like the Intel DC series. Also, large writes skip the SLOG (>64KB) entirely, so if you are bandwidth bound (either from network or to disk) it is not going to help, if you are IOPS bound it can help tremendously.

Also, you mention 4x4TB and 4x8TB, I assume your issue is the available disk bays in your system? I personally ignore high-capacity drives as they are far too expensive, and my HP ML10 that I run FreeNAS off only has 1 internal drive bay (with a $50 add-on I can buy to install an extra 3), instead of dealing with internal drives as well as limited capacity I bought a cheap DAS array (Lenovo SA120, here's a picture of mine and my cheap TP-Link layer 3 switch http://i.imgur.com/eEvtP6Z.jpg) that cost me $200USD and connected it with an equally cheap LSI 9200-8e SAS HBA ($40), I now have 12 hot-swap drive bays and can replace my FreeNAS box without worrying about how many bays it has, if I need more I just need to buy an additional enclosure and daisy chain it off the first. This isn't a dirt cheap solution by any means (my homelab gear is easily worth over $1500 at this point, including my Lenovo TD340 acting as my XenServer host), but it will save you money in the long run by allowing you to easily buy many cheaper drives than fewer more expensive (but high capacity) ones.
I think it would be more of an "open secret" pattern: e.g. no one explicitly orders people to make sure the ruling party always wins, but everyone knows someone who knows someone who was punished for reporting the actual count instead of a rigged count.
آغاز جشنواره تابستانی کیش در عید سعید فطر
We're literally talking about a 15 minute setup on a variety of nixes on a wide-range of hardware.

Intel chipsets and their graphics drivers have excellent support out of the box. That goes for everything from refurbished Thinkpads to Chromebooks to used Macbook Pros to new desktops.
Maybe consider add libuv support for mORMot for the Linux part?
The Yoga Delusion
https://github.com/0xAX/asm was posted a while back on hn - since then it's grown a bit - I've not kept up entirely, but it does start off pretty basic. It's a nice quick read/work-through before you get "serious".

[ed: Initial hn discussion should be relevant to this thread:
Say hello to x64 Assembly, part 1 (0xax.blogspot.com)
https://news.ycombinator.com/item?id=8245581

(The posts are posted on the blogspot blog, but if I'm not mistaken they're all there in full, in the github repo) ]
Some people truly love it, it's an actual passion. I did work experience at a 2 Michelin Star place, and honestly I've never seen anything like it. I had thought my hours were long - but this was insane. Despite how hard the work was, everyone there was enthusiastic as hell. They saw that one day they'd be able to create the exquisite food, plate it up and send it. That was all they wanted to do.

For those guys (and it was almost all guys) - it was just the only thing they wanted to do in life. This was also kinda the moment I realised it wasn't for me!
One pair didn't work, another only one of the two speakers worked, the other was mostly noise and almost no sound, and the third had a really bad background hum.

Note these were all on sound card(s) where other speakers had worked fine... so one good experience, and three bad ones. They were pretty cheap, in that I didn't return them, but left an appropriate review in the end.

They were mainly gifted out (and later thrown in the trash) to friends at work, etc. I got mine so I could have a set of speakers to hear the occasional audio at work at the time... which worked great.. I got some of the same for a couple coworkers, and another set passed along when I'd upgraded my computer at one point.

I have M-Audio AV-40's speakers on my desktop at home, and Mackie CR3's on my spare... both are great sets of speakers I can't say good enough things about. Given it's a $10=15 pair vs over $100 ... I wasn't expecting huge sound from the Amazon speakers, that said, I've seen other speakers in that price range that worked far better.
Depends on the parents. Some are okay with it, some try to manipulate their children, some try to manipulate the school.

When parents and school disagree on the degree of autonomy children should have it puts quite some stress on the child. That's why the Sudbury-like school I went to does have a discussion with the parents beforehand on wether this kind of school really is what the parents want for their children.
Can you move in armour?
Tiled renderers or "chunkers" are common on mobile because the memory bandwidth is much less (1/10th to 1/5th) than desktop GPUs. The color/depth buffers are stored in on-chip memory which is much faster.

This isn't exposed to the programmer directly (Vulkan's multi pass API is related) but it has performance characteristics that we engine programmers need to be aware of.
Perfect guide indeed, exactly what I needed. Lovely that some people take the time to put things like these for free on the internet.
> Apple claims to get 10 days of standby out of an iPhone.

I have a work iPhone that I barely use (since I prefer Android personally), and it usually lasts 4-5 days.
Which is why we invented paintball, lasertag, MMA and survival sports.
Yes, you're absolutely correct. The GPL, and resulting GPL'd software, does not exist for the benefit of commercial software vendors. While some business models are viable under it, that's a side-effect rather than an objective of it.
Estonia has published it's e-voting solution on Github: https://github.com/vvk-ehk/evalimine
It generalizes even further.

https://itunes.apple.com/us/app/sitorsquat-restroom-finder/i...
https://play.google.com/store/apps/details?id=com.charmin.si...

There's plenty of simple tools that won't make a business by themselves, but will draw plenty of attention to the company that makes them.
It's more likely someone rolled out an update with a bug that sent e-mails use the wrong account criteria.
Inaccurate headline. Subject line of forum thread is: Just received and Email saying "Your Google AdSense account was recently cancelled"
"The proximity of death turns many people philosophical."

If philosophical means questioning things, yes. It also hints at being in the moment. Too often life is seen from auto-pilot. Death, being near it, seeing it, makes this change obvious. We'll all experience death in our on way. @PieterH does us all a favour here writing about this. Take a moment to reflect about this post and what it means to you. Thx @PieterH.
SEEKING WORK - UK / Remote

Embedded software developer with background in smart meter product development.

- Requirements capture, solution design, task decomposition, documentation
- C, MISRA C, C++, Ruby
- M2M protocols, especially those in the domain of smart metering (DLMS/COSEM, GBCS)
- Automation with Jenkins and Ansible

email: cam@stackmechanic.com

linkedin: https://uk.linkedin.com/in/cameronisanengineer
Specifically, 18650s are commonly used in vaping. A guy who goes by Mooch once tested a large number of 18650s he could find on the market - it turns out that almost all off-brand batteries (everything other than Samsung/LG/Sony) do not live up to their stated maximum continuous power draw specifications, never mind fake ones. Vaping often draws power at reasonably close to the stated limits, and the failure mode of these batteries is venting toxic gas and potentially exploding.

I assume there's similar issues with all large batteries.

In a nutshell... fake batteries on Amazon can harm people badly.
"Why, only on the edge of dying, people suddenly becomes "philosophical" and aware of their life and surroundings?"

In death, clarity comes from limited options.
By "outrage" I've meant canonical has developed it because they didn't like gnome shell(they like the innovation-thing).

> For productivity, Unity beats any Gnome 3 setup I've tried so far.

Unity has problems with multiple monitors, consumes more RAM and CPU and is also hard to customize.

> And we're still not talking about the maintenance/security nightmare that is the Gnome 3 plugin system.

But we should talk about it if we're here...
Could you explain a bit more?
Disclaimer: I know this is a side issue. However, I'm really wondering what it is that makes people think using such a “creative” color scheme for publishing their texts would do any good. If it weren't for Safari's Reader view, I would be physically unable to decipher this text. Which would really be a shame, because this text deserves to be read.

I guess, I'm still hoping that one of these days, I will reach one of those authors and make them understand that the contents is of paramount importance and creative coloring can do nothing but detract (except when you're an expert). If you use your own color scheme, please make sure you know what you're doing.
Patents last 20 years.

If any company, today, cured major depression with a drug, it would be making essentially monopoly profits for at least five, while analogs were found, at at most until 2036.

I come from a cognitive/social psychology background; it is mostly social psychology that has a replication crisis. Double-blind drug trials, even with psychiatric drugs, are usually fairly well done. (That doesn't mean the theory behind these drugs is necessarily sound, and in fact we're learning that a large class of drugs, SSRIs, may only provide a primary effect along a previously though auxiliary axis).

It seems hard to argue that any alternative medicine field is as productive or as effective, empirically speaking, as the drug companies. They have huge incentive to win big and they go for it all the time. In the US they can sway things a little with ads, but only after they get past our admittedly corrupt regulatory gatekeepers, and only in that market. A cure for major depression alone would be 7-20 years of guaranteed monopoly profits. There is not a drug company in the world that would keep pressing SSRIs if that sort of treatment was available. The brand loyalty alone would be well worth it.

This isn't to argue against anything, really, except that psychiatric drug manufacturers have incentive not to produce cures. They assuredly do.
I love BSDs for their pureness. You feel connected to the machine.
>> I really hope someone at Amazon read this and brings it to Jeff Bezos

I imagine the huge smile on Jeff's face
I think it should be obvious that I don't have a reproducible case anymore; this was a couple months ago now, after I built a desktop. Nor am I interested in expending multiple hours creating one, because that doesn't benefit me--my stuff works now, if suboptimally. I couldn't leave it in that state then, because I had work to do with that hardware; I couldn't leave it in a trashed state just in case somebody had questions and needed to autopsy it, now, could I? Expending more time than I did would be better served just biting the bullet and setting up a Hackintosh so I have an environment I like, rather than tolerate.

And this isn't a "rant". I promise you, when I'm ranting, you will know.
> Fonts still look like crap (Ubuntu is an exception)

You can change|install fonts on linux.

> and even with patches there are still problems with Java, old GTK libs, etc

What kind of problems?

> but I have tried Linux on the desktop and it is still lacking.

Can you tell us what do you miss?
What about flavoured water?
I'm Hapi with Express, and That's O-Koa
Not all bottled water is sold by PepsiCo. Not all tap water is as healthy as alkaline spring water. Tap water is often going through tons of piping, heavily florinated or chlorinated, and can be tainted with microbes. (Hence the need for halogens.) Faucet water is good for some things. It still is beneficial to have sanitary water for boiling food, bathing or showering. But some of the tap water in America is quite poor in terms of drinkability.
Wonder when Virgin Media will roll it out. They've been taking their merry time.

Edit:
https://tv.theiet.org/?videoid=7412
'Working on it.'
"It is well that war is so terrible, otherwise we should grow too fond of it." -- Robert E Lee
Code and Infrastructure: Our Approach to Continuous Delivery
Are you familiar with Lamdu? http://www.lamdu.org/
Great, and I just spent a full month learning Meteor.
And nobody of those users was able to follow the support request and provide the headers for the emails. Oh my. That's what you get when you don't provide a support email, just a dumb forum.
This year we will stop using AdSense altogether. No support at all and the payouts have been declining every year. With the increase of ad blockers, even less encouraging to use ads in general.

Sometimes I wonder, are ads as we know it, dead? Everyone hates it, has real usability impact and security risks.

Didnt get the email though...
Show HN: I Design with Code
[..] a special membrane floor that lets bovine urine soak through. A machine will mop up dry cow dung [..]

On the ground floor [..] water from the cows’ urine will be purified and used to grow red clover, alfalfa and grass under artificial light for fodder. Cow’s manure will either be used or dispatched to a nearby farm.
Are you comparing like with like, your Windows & OSX desktops were preinstalled presumably, same price brackets too?
He's a true renaissance man; Here's a great interview with him on his life:
https://changelog.com/205/
I.e. X11 working in same way as Windows, OS/2, BeOS, MacOS, OSX, etc.

But in Linux, I can run application in container or VM and then use VNC, RDP, or Spice to connect to it in secure manner.
Even i got this email.
How is that not part of the free market? There are other paths to funding than VCs. None of my businesses got a dollar from VCs.
Automate Your Pinterest Marketing
Machine Learning Will Transform Hospitality – But Should It?
Beekeeper https://beekeeper.io | Software Engineer | Zurich, Switzerland | Full-time | Onsite | Visa

We believe in the potential of every employee. We believe work is not just a place, but where you belong. We believe that motivated employees make organizations more successful. We are laser-focused on the 2 billion people working “out in the field” and letting them unleash their potential. Our product is used in 90+ countries in the world.

This is a unique opportunity to contribute to the core product at a tech-driven company. Work on all of our software stack and learn about state-of-the art web and mobile development. Technologies that you will work on are ElasticSearch, Realm.io, RabbitMQ, Backbone.js, Docker, Amazon Web Services, MySQL and interfacing them with different programming languages like Python, Java, Objective-C and Javascript.

Read more about the job and watch the video: http://grnh.se/5jlmbo More about Beekeeer: https://beekeeper.io/company/
Windows10 is already recording every keystroke/data of yours - what's the difference here? Also, Canonical's snappy packages can kinda solve this problem.
> But now I see that, although very useful, medicine only serves as a band-aid.

Well if only! Much of modern medicine unfortunately are "symptom-suppressors" (pain-killers, antihistamines, fever prevention, blood-pressure/blood-sugar 'regulators', cholesterol-lowering agents, anti-fungals etc) of deeper underlying health issues --- true "band-aid" medicine is/would be a step forward if you think about it: if we get wounded or break a bone, real band-aids don't "heal" but assist and speed the body's built-in healing capabilities. And as the alternative folks say, nothing can heal any ailment but the body itself: the "best"/most proven medicine does seem to "merely" improve the milieu/environment in which the body attempts to self-heal: that's true for antibiotics (kill off most of the bad guys so ideally the good guys are now in better balance to "self-heal": finish off the rest), vaccines (prime the immune system for "self-healing": fighting off a future infection), antiseptics etc. --- many of which were 'evolved' from traditional (herbal etc) treatments/insights over centuries isolated into "works for most with the least side-effects" pharmaceuticals.
I use Mate (Gnome 2.x fork) daily. Gnome 3.x is ugly and buggy.
That question sounds like cognitive dissonance at work. As if you're stuck in a big corporation without any influence and need to rationalize the path of choices that led to this point.

Grandparent's point was that that is, by far, not the only choice.
I'm not sure, you're saying the format and message standards of PGP of providing machine-readable signed keys aren't worth anything, because you can just memorize some base64 coded secrets and run with it?

That's how you'd prefer to bootstrap secure communication with a journalist, or for recruiting people to demonstrate against the current regime in Egypt?

> But in principle if you assume that key distribution is "solved" then you can implement the unique parts of OTR.

How can it make sense to think of it as solved? How do you backup your keys? Your list of trusted keys? Protect them against theft? Alert others to their compromise? Get alerted when keys are compromised?

Key distribution really is the only really interesting problem in secure, trusted, communication (with secure one time pads, most problems go away. The trick is to make sure you have secure one time pads, shared only with the person(s) you want to communicate with...).

Public key encryption opens up some new ways to make the problem easier, but it's just one step in the right direction.
How does Mlpack relate to tensorflow?
So it's a feature. I cut myself from shitty software by using FreeBSD.
UK Hotel Searches Soar Following Brexit Vote
UK Hotel Searches Soar Following Brexit Vote.

http://customtravelclubs.com/uk-hotel-searches-soar-following-brexit-vote/
Why Did Entrepreneurship Become So Difficult?
Exceptional Exceptions – How to write excellent error messages
It's amazing how many people here think that philosophy of science ended with Karl Popper.
Interesting article.

I think I'm going to try explaining git branching/merging to newcomers via interpretative dance in future.
And at this point I give up and go back to an off the shelf solution.

I do have mirrored vdevs but now you've made me doubt what configuration I put them in.

This stuff is so advanced it's not funny.
For summary - X is just as insecure as windows/macos - we know it: wayland, mir and snappy is coming.

For your disclosure - don't be too lofty with me - I'm trying to understand your problems because I've a very different experience.
Also, where should I read up about DAS arrays? I didn't even know that was an option when I started building.

Edit: thanks for your help here - you don't have an email address listed in your profile but I'd like to discuss this further if you have the time.
The problem with using css this way is that it's not as obvious what's supposed to happen as it is when using js. I'd love for there to be some explanation within the examples of _why_ they work - I've just been reading the first modal example but I can't really understand it
I was sure I'd came across this on HN, but apparently I found it when I wondered if anyone had taken a crack at taking NaCl and made a PGP work-alike using the primitives NaCl provides. And here it is. Anyone have any experience with it? Done a cursory review?

At this point I'm a fan of the idea (a set of protocols to mirror some of the good parts of PGP, married with the good parts of NaCl. At least in ... theory...).
i don't see how a more open OS will reduce any of the silly hackery that OEMs do.

the problem is not that android is somehow not "inclusive", it's that android allows vendors to ship a modified browser for whatever silly reason they want to, and the vendor never releases any updates for the modifications they provide.

unless Jolla is going to take over control of the phone and ship software updates directly to consumers without involving the handset vendors, they aren't going to solve the problem.
There was Liskell, but unfortunately it seems to be unmaintained :(
I hope the "Do not notify my again" option really does what it says this time.

Unfortunately, I doubt that Microsoft will simply stop nagging people after July 29. They'll either extend the free upgrade indefinitely, or change the pop-ups to read something like "Limited time offer, 80% off!"