skysight-inc/HackerNews huggingface dataset:
Am I correct in thinking that this approach could lead to new vulnerabilities? Since firejail is SUID, a bug in it could lead to execution of code in root context, while the original app would have run under user context only, right?

Apart from that, I am not sure how firejail limits the app if there is no manual config? I must have misunderstood the About page...

EDIT: like the idea though. :)
I wonder if this was actually a sophisticated trade to profit from shaking up the market - claiming a substantial hack to make the market panic, then buy back the "lost" coins for way lower prices. If you control this kind of assets you can easily corner the market and participate from the emotional reactions. The lost coins can either not be lost at all or sold off way before that in small chunks, netting a profit after all is over.
Now you've forced me to make at at least two more decisions: to open up addons.mozilla to find a cookie-management extension, and to open up addons.mozilla to find a javascript-permissions-management extension.

At each of these interactions, I would be confronted with the worst possible next-actionable-step: a large, seemingly unbounded number of options. Picking any of them then requires an additional interaction to confirm, possibly whilst (realistically speaking) disregarding scary-looking security warnings about what the extension will be able to do with my first-born child.

Of course, IRL, users respond as you'd expect when given such immediate negative feedback. They will make it through at most one forced-decision interaction. By the time they hit #2, the user's goal will become "install Chrome", not "figure out which extension to install next".

It's really important to recognize here that the extension search/installation/configuration user flow is more-or-less indistinguishable from actively punishing the user for using firefox. Oh, so you want to use firefox, and actually do something? Kindly direct this barrage of STOP NO DONT feedback to your decision-making apparatus until it comes around to it's senses and installs something, anything else.
That's not the requested example of breaking 'corrupt local monopolies'...

And also to point out that the main effect of uber is to shift responsibility to drivers and government. Replace licenced, trained and properly contracted drivers (paying retirement and health insurance payments) and fully maintained and insured cars with untrained, uninsured and precariously 'employed' drivers, which gain no long term safety for sickness and retirement and use their own cars which may or may not be well maintained, and where they bear the complete business costs and responsibilities.

It's fully and completely exploitative, that's why it's cheaper.

For the user experience much works better, that doesn't make it a good company and certainly not healthy. The cost you save you'll pay back in taxes that have to cover drivers that fall into poverty, or when you have an accident and find your driver was not properly insured. YMMV depending on city and country, but the exploitation of the 'sharing economy' is just painfully obvious and it's your personal choice to support this.
I didn't have any attack in particular, but an example could be sending a long buffer to the kernel that causes an integer overflow and overwrites some important memory. Especially with the non-verified external RAM it seems like you could throw some weird stuff at the kernel.
You can plot out the wire gauges you want on a log scale and then round them to nice whole (metric measurement) numbers. That is in fact what is done for things like fasteners.
Crazy that the spectre of instant destruction still haunts us today.
I often wonder this myself. Perhaps they don't understand it, but when they adhere to a certain unspoken agenda everyone seems to get raises
PayPal Money Hack Adder Generator 2017
Thanks for the link, I reread it.
Nice story but I think I can guess his current password now: "Plus, if you’re interested in more of this, I’m writing a book!" :)
Silicon Valley was going to disrupt capitalism. Now it’s just enhancing it
I read the article and couldn't find anything about liquidation preferences. I'm going to go out and a limb here.

If you think that if you could short Uber, you could do so at a $62.5 billion valuation, you should stay away from making those kinds of risky financial plays.
So LiO2 has only been isolated at temperatures up to 40K, says Wikipedia. Oxygen is a solid at that temperature. Is this prototype also at 40K?
I'm always wondering what PR is behind articles of journalists visiting nuclear silos. This one looks like a first-person account, so was a military allowed to write about his job? How comes he writes so well? He could have been a journalist... Also, was the piece read, checked and corrected by a commandant before being published? If so, which parts were left out? Why did they leave the part where he admits not dressing with the uniform, installing a hammoc, playing video games and so on? Last question, he describes his role as reading a console, decrypting and triggering a button at request, and at the same time saying human error is the most probable cause for a nuclear winter: Why do we need a person to transcribe a machine message to another missile-launching machine? Couldn't both machines be wired up together? Sure it would allow hacking the launch of the missiles, but at the same time, if he receives the correct message, he's going to send them anyway...
The "it's more natural" argument, fielded by both sides, is largely a myth - take it from someone who lived in several countries and struggled with different units. Pretty much the only reason why something feels natural to you is because that's what you are accustomed to using.

There's nothing more natural about an inch than a centimeter, and nice, round, easy-to-remember numbers can be had on both scales for "natural", commonly found distances. Ditto for pounds and kilograms, Celsius and Fahrenheit, acre and hectare etc.

Objectively, metric wins because it uses the same decimal scale as our number system, and because the units are designed to establish the most straightforward relations between different quantities.

Yes, using 12 for a base has some advantages due to more divisors, but not being consistent with decimal wipes them all out (and traditional units don't consistently use 12, either - consider units of volume, for example). In an ideal world, we'd have 6 fingers on each hand, and use base-12 everywhere; alas...
To flip bits, you'd generally want to use radiation with a high local energy deposition such as alpha particles or heavy ions. With typical photon radiation (X-Rays or gammas from radioactive decay) you'll mostly just degrade the silicon until it stops working reliably overall, and not change data.

As the secure enclave's surface is much smaller than the application processor's you'd also have to focus your protons/alphas/heavy ions very well, because otherwise you'd affect the logic outside of the secure element much more often.

I think this approach in practice is much, much harder than to just shine any random radioactive source on it.
Maybe that's how it works in Europe, but that's not how it works in the US where territories will be divided and companies will be price fixing.
https://en.m.wikipedia.org/wiki/Betteridge%27s_law_of_headli...

"Any headline that ends in a question mark can be answered by the word no."
How likely is your startup to fail within a year?
Is it just me or is the scope of what's considered "clickbait" expanding exponentially?

I don't see how this is clickbait. How and to what degree we record human communication has a direct impact on what's remembered as history. The headline isn't exaggerating.
Open Amazon, and search for something as mundane as plastic bags or trash cans. Notice that their thickness is specified in "mils". How many people make purchasing decisions on those products, for use in their daily lives?
The burning of CPU cycles whilst idling on Google's result page is the most infuriating bug in Firefox but doesn't seem to have been accorded any priority. It has persisted for at least three years.

https://support.mozilla.org/fr/questions/965360

Unfortunately I usually only remember to close the results tabs when my fan spins-up.
a) The app will still run as the specified user:

$ firejail whoami
[...]
<your user>
[...]

Firejail ships a bunch of standard profiles for common programs, e.g. Firefox, VLC, ...
Google has a specific division that is looking into life sciences and health care. Recently they made deal with British health service nhs for processing anonymised eye scans of millions of people using deepmind so that they are better able to detect degenerative blindness.
Not perfectly enough for some uses.

For example, AFAIK there's still no emulator that can correctly run the 8088 mph demo.
Automatic Deletion of Incomplete Output Files
The State of the Gnome Foundation
Could it have been hit by a large planet that lost its orbit somehow (perhaps from another system)? (And out of interest, is this an event that has been recorded before?)
Yeah I do think the large data sets and processing power available to systems like Watson and Deepmind etc can and should improve detection of many diseases. More than 100k people die in the us alone due to hospital mistakes. 12million misdiagnosed a year is huge number
If I'm doing that math right, it works out that to not be ruled out by parallax, the object would have to be almost 2 AU in diameter if it was within a few light years of Earth. That seems pretty ridiculous--now we have them not only building a megastructure, but flying it to Earth!

However, I wonder if there is a way to save the idea without requiring a ridiculously large spacecraft? Suppose instead of one ginormous ship, it is a fleet of big ships each big enough to cause irregular dimming if that ship happens to get between Earth and KIC8462852. If the fleet is spread out, it could then be that one ship or another ends up between Earth and KIC8462852 at several times during one Earth orbit around the Sun.

That would give us the irregular dimming throughout the year.

For the slow continuous dimming, perhaps that is something going on with the star itself. That could be what made the inhabitants of the system decide to build a fleet of big ships and leave their weirdly behaving and very scary star.
Things I learned while programming asynchronous, concurrent code in Swift
it's a bit of a sidenote but after watching grpc documentation on one side and apple talks about http2 on the other, i've got the feeling that the "streaming" parts of http2 are seen very differently by the two companies.

on one side grpc stream are advertized as a websocket replacement, and on the other apple mentions that it's just a better, drop in, replacement for http1 , with a few additional features such as server push. But that the model remains a request/response one.

are we on the verge of experiencing implementation incompatibilities over this protocol ?
Guess what the N stands for
So, it's just that boys in general get less sleep and are more tired, resulting in worse grades. By not starting as early, they get more room to sleep and the gap closes.
> The density needed to form a black hole decreases linearly with radius, sho why is the universe not one?

I feel like this explains it pretty well.

https://medium.com/starts-with-a-bang/ask-ethan-50-why-didnt...

tl;dr: Schwarzschild’s solution is a static one, meaning that the metric of space does not evolve as time progresses.
I really wonder what would happen if you really had a giant mirror reflecting all the Sun's energy back to itself
this is very much not true. Phoenix was not intended to extend the featureset.
Because you can't account for all eventualities. He is presumably trained in other aspects of maintaining and operating the base.

And probably more importantly: because presumably when given that order, he might know some context a machine doesn't and actually disobey.
Also, from what I understand, the last several decades of our radio history were spent optimizing everything so that signals keep as much to the ground as possible - emitting TV into space is wasting money.
Shell scripts to improve your writing
Exoscale is a privacy focused public cloud provider with data centres in Switzerland. Strict Privacy laws there.
J/L is actually one of the more important ways to measure battery efficiency for transportation. In many discussions around this theme you'll find this to be used in comparison with a gas tank for size and that ultimately translates into range, arguably the most important feature of an electric car.

Higher energy density means higher range, all other things being equal, and with the weight of cars being what they already are a battery weighing a few hundred pounds would be perfectly acceptable.

So J/L is actually very helpful.
The "control" for the actual (machine) learning may be the test set derived from the available data, but the control of a medical study must be real life (new data) and not old data used for the machine learning algorithm.
I don't think buying every ticket is more impressive, it is pretty much the definition of a losing strategy.

Tests like these are all about the statistics and without statistics this result - while important to this particular individual - is almost meaningless.
OTOH, maybe coworkers are more trustworthy than external hackers running cracking tools? Might be true at some companies... (I still hate being forced to change passwords.)
I skimmed the article, and even though I am not much into business strategy, there were several very interesting bits in there.
How millions of trees brought a broken landscape back to life
Comparing Scala to F#
One of the trends propelling Uber is that of self-driving cars.

HOWEVER: What's stopping the car companies from simply running it themselves and cutting out uber as the middleman? Tesla already announced they plan to facilitate ride sharing. (https://www.tesla.com/blog/master-plan-part-deux)
Emsisoft Anti-Malware Internet Security 11Plus Keys
Or alternatively, the presence of social support means you're not in any immediate danger of starvation so you can afford to assign some more energy to running the immune system.
Ask HN: Which blogging platform do you use?
Dear HN Community,

I am curious to know which blogging platform you use ? Is it paid or free ? Do you self-host ? What is the running costs in case you self-host and what sort of limitations are there to using a platform vs self-hosting ?

Thanks for your inputs!

Cheers!
> to automatically attribute it to a PR play that IBM likes to "milk every last drop of".

No, that's history. IBM has quite a series of Watson 'breakthroughs' that ultimately went nowhere, to the point where when I see 'Watson' mentioned in an IBM press release it automatically gets discounted if there isn't a part where the subject has some statistics to go with the inevitable hype.

I see it as IBM trying to stay relevant in a world that needs it less and less and that's why they focus on anything that will grab headlines.

Winning jeopardy, curing cancer, what's not to like about IBM?

http://webcache.googleusercontent.com/search?q=cache:GaC_y_3...

Cached link supplied because the original has departed.
I would guess that phishing works better than password guessing. Not arguing for weak passwords, just thinking big picture.
Location: Istanbul, Turkey

Remote: Yes

Willing to relocate: Yes

Notice Period: 3 days

Technologies: Node.js, Javascript

Résumé/CV: https://www.yasinaydin.net/cv.pdf

Email: yasin@linux.com
Why are people so hung up on the url? What's important is the information that you can access. Its like describing Facebook as a set of urls for people
Ask HN: Where can I find resources for garbage classification technology?
I am wondering whether the only solution for garbage classification is through manual labor; I suppose you can filter out metals, but can you do the same for plastic?
What is Uber isn't a car/personal transport company at all?

As has been pointed out numerous times, network effects don't really have the same power in the "taxi competitor" market as they do in - say - social networking.

But there is a business where network effects are potentially at least as powerful as social networking, where market leadership is divided between multiple ~$40B companies and where there is proven huge potential for market disruption.

It's a market where software powered efficiencies can make a huge difference, where automation can increase margins and improve service and where the company having the most drivers (or automated devices) in each city has a huge advantage. What's more, it is one of the few markets where international expansion gives critical network effects beyond what is possible in the US market alone.

Finally, Uber is already aggressively moving into this market, and yet no one seems to talk about it - I guess it just isn't as sexy as cars.

As they say: amateurs talk tactics, professionals study logistics.

In this article's defence, it does at least mention this. But I think the potential here is huge. Think of Uber as an Amazon competitor, taking responsibility for everything after the production of a product.
Hopefully, Electrolysis will fix 3 and 4. https://wiki.mozilla.org/Electrolysis
You now have to move the whole sun, so I don't see how the problem got any easier by escalating it to huge proportions? Unless you want to leave the sun behind, but then you will lose your propulsion after getting going.
https://en.wikipedia.org/wiki/Diceware
Hey arejaytee,

We have just released a new version of Kueri we would like you to try out.

Is there any way we can contact you?
In a similar vein, a possible Fermi paradox solution would be that civilizations sufficiently technologically advanced to travel between stars are also advanced enough to develop good VR and learn which buttons of their brains to push, so they all end up stuck in virtual worlds, or even wireheaded.

A counterargument to that would go along the the similar lines as to why we don't, and can't, resolve wars by e.g. playing chess (or StarCraft). Even if all nations mutually agreed that the shall will be won bloodlessly by some other kind of competition, the first nation to nuke its enemies would be a winner. In conflict situations, you want to seek as much advantage from the "most real" reality as you can get. So, in your recursion example, you'd travel up the call stack...
Useful Gradle Tips
You don't come up with theories using data, you test them using data. You can generate hypotheses however you like, "feeling" is a pretty common way. Semi-random guesswork is another.
That was the joke. :)
Sorry, it turns that was misunderstanding from my part. It turns out we cannot solve a board row by row without revisiting the previous rows. The board below is a counterexample:

101
010
100

The first and second rows are solved. However we cannot solve the last row without re-doing the first and second rows. The two solutions of this board shows this:

solution #1:
110
100
000

solution #2:
110
110
000

Actually, seeing my mistake made me challenge my assumption that a singular matrix over the reals might not be over integers modulo 2. This is likely wrong too. I don't know much about abstract algebra (and I am not a mathematician). Wikipedia (https://en.wikipedia.org/wiki/Determinant#Square_matrices_ov...) states "the reduction modulo m of the determinant of such a matrix is equal to the determinant of the matrix reduced modulo m."

The move matrix M for all boards of size 3n + 2 appears to be singular. This means these boards may have no solution or a large number of solutions.
No. He key idea of Marx was that the person adding value should own the means of doing so. Which, if you think about it, is exactly what's happening. The key element of value creation is the mind and that is owned by the person. Marx has nothing much left for people who _do not_ add value simply because back then that meant being "the problem". He who does not work must not eat. But what if there simply is no need to work? You should not try to apply social theories of late 18th century to the one of early 21st.
It isn't really ready for general use yet. It can't even run something as simple as an irc client without failing.
https://github.com/Microsoft/BashOnWindows/issues/262

I uninstalled it and went back to cygwin, which is the only real option for now besides running a VM.
Like "Find my iPhone but for your car" has a better ring to it as suggested elsewhere in the thread.
I think there are a lot of interesting points to the article. It's currently not possible to short Uber directly, but you could go through a derivatives broker, or you could short a company indirectly, like Xchange, or buy stocks in a company that would profit if Uber collapsed. I think that while you can't directly short Uber, you can get creative... and I'm sure that with the number of people that want to short Uber, and if it did a down round that would be even higher, that there will be some possibility of shorting Uber directly before IPO.

I'm curious why Uber isn't on any of those private exchanges. Is Uber worried it would be shorted if it were?
Completely.
> this approach could lead to new vulnerabilities?

Yes. The first line of the article ("a SUID program that reduces the risk of security breaches") should be enough to raise a quizical eyebrow from security-minded users but overwhelming positive commentary I've seen elsewhere (lwn?) has not mentioned this.

Some of the obvious holes (eg "mount a tmpdir on any mount point") have now apparently been closed but I haven't been back to it for a while. Early releases did everything euid==0... It certainly needs more pairs of eyes.

OTOH the largest attack surface presented by a typical single-user Linux box is probably the browser and not an unprivileged local user looking for escalations (assuming: firejail drops privs perfectly and an attacker cannot trigger a vulnerability in SUID firejail from the application that it invoked). So could be that's a reasonable trade off for some folks.

> like the idea though

I agree, the feature set is nice but it needs some more basic TLC. "Security products do not necessarily make systems more secure" </rant>
I agree that this should be kept in mind, but I think your specific conclusion requires a lot of assumptions. The primary one is that all those requests are "independent and identically distributed". If instead your server gets laggy one minute per hour when some background update runs and trashes the file cache, the percentage of affected users would be completely different.

I think the blog author is on the right track to suggest that you at least need to look at the full distribution of the latencies. I'd go farther and say that if the metric you care about is total load time for a page with 100 components, lumping together all the individual component requests is probably never going to be able to provide all the information you actually need.

But as 'sp527' pointed out below, I may not have been precise enough in my use of "concurrency". From the Little's Law perspective I was emphasizing, we really care about the "number of requests in flight". But what constitutes a request depends on what we are measuring. If if each "page" consists of 100 pipelined HTTP requests, we probably need to define "in flight" as the number of simultaneous users we can support if we want to calculate the metric we actually care about.
What's new in Docker 1.12
Unfortunately this is not at all true for quantum error correction protocols. In the quantum world error correction makes things worse below the error threshold. Source: me doing a PhD on the subject at the moment.
In the US at least the social left has gained momentum and power because society was changing but Republicans despite the loss in 08 and 12 kept pandering to the religious/social right instead of moving to the center on those issues so kept loosing support.
What does a doctor type have to do with "verification of usefulness to society"?
Is it a Firefox thing or a Google thing?