skysight-inc/HackerNews huggingface dataset:
I doubt the government has any data, there's no need or desire for dealers to send them info on their sales. Look at things like Consumer Reports who go out and survey large audiences of everyday people to see what they purchased, how much they paid, how much they like the car, etc.
> Signal doesn't have a monetization strategy either

They don't have to - Open Whisper Systems is a non-profit with strong community support. It works out so well that they actually pay any contributor a few dollars per commit. That's the best monetization there is for an organization which serves the community.
Silk, cotton, polyester, viscose, linen, nylon, rayon, jute, ramie, hemp fabrics
I quote Martin "Marty" Hart from season 1 of "True Detective":

"there was a time when a man kept his bullshit to himself"
I'll say it's a ridiculous position. How can it possibly be ethical? The owner of the server and the content has specifically told you to stop sending packets at it.

I honestly don't know how to construct an argument for this because it's so obvious to me.
Hi, thanks for taking the time to comment.

> You don't use the first var out complete in the TryGetValue, right?

There is only one complete variable; we declare it in TryGetValue, and it's definitely used in the last line of the while statement, but might first be used after the if statement.

> And the Student c'tor returns itself as an out parameter?

The Student constructor does not return itself as an out parameter, rather it returns an object that can modify an internal list of courses.

The idea is that when we iterate through a result set from a database, some of the rows are going to correspond to a new student object, and some are going to correspond to a course that belongs to the student. Crucially, we are only allowed modify the Student object (or whatever) during iteration, and the collection that we return will only contain immutable/unmodifiable Student objects.

I've used this technique to populate deeply nested structures (lots of joins and nested joins) using only one query.

> I would rather put a simple IEnumerable in front of SqlDataReader so that you could just do:

> foreach(var row in rdr) yield return new Student(row)

Just to be clear, the reason that I cannot do that is because the Student object might not be completely "hydrated" until we finish iterating through the result set, because it might contain a bunch of nested objects that also need to be instantiated from one or more DB records.

> Also, why not enforce your student ID constraint in SQL instead of putting everything in a dictionary only to take it back out again?

I'm not quite sure I understand this (which is probably my fault), but rest assured that we use nothing but SQL (specifically, DDL) to enforce data integrity.
Great points, we're working on a bunch of this stuff.

Docker 1.12 in swarm mode, for example, does automatic key rotation and issuance of the TLS certs assigned to every node in the cluster. These certs are used for automatic TLS between every node in the control plane of the Docker Swarm. This is all automatic and transparent to the user -- no manual management of certificates is required.

Now that we have cryptographic identities assigned to every node in the cluster we can use that to build secrets/key management in to the system.

Additionally Docker 1.12 is swarm mode has overlay networking with encryption possible for container to container communications.

In terms of logs, Docker supports log drivers that allow all logs within Docker containers to be exported to off-host logging services.
I don't believe so, no.

DePaul claimed they blocked Shapiro from speaking due to "security concerns"[0]. In particular, students in favor of safe spaces and trigger warnings threatened to riot, block the doors, and prevent student access to the event. DePaul capitulated to this bullying by banning Shapiro.

Related: California State University-Los Angeles planned on hosting Shapiro to speak, but demanded[1] the student group which invited him to pay $600 to the university in security fees. When the student group refused, the university blocked his speech.

I'm not aware of this happening to speakers holding majority political viewpoint; it affects the minority viewpoints primarily. Frame it in terms of race: imagine a modern campus saying, "We allow blacks to speak, but only if they pay hundreds of dollars to provide security against the white riots that will inevitably arise."

[0]: http://www.washingtontimes.com/news/2016/aug/1/ben-shapiro-b...

[1]: http://www.thecollegefix.com/post/26367/
I would think if you're dropping tens of thousands of dollars for a product, you'd be satisfied with it or convince yourself you're satisfied.
There was also the PPC615 in the mid-90s, done by IBM, which was socket-compatible with the Pentium, and could execute at least PPC32, PPC64, and x86_32 natively (I'm not clear on whether it supported x86_16): the decode step for x86_32, AIUI, essentially decoded it into PPC instructions. It was meant to be competitive with the Pentium in x86-mode, and could change between ISAs at the thread level, I believe. Ultimately it was scrapped as people in charge believed Intel were about to move away from IA-32 and the industry would follow to IA-64 with its IA-32 compatibility.
The study cited in that link (which I link directly below) says 20% of students who admitted to being raped said they reported it to police, compared to 32% of non-students.
They are when you're interviewing for jobs. I don't know about you, but my first impression of a company strongly informs my decision to work there if an offer is extended (because, you know, generally you only around 1 or 2 shots actually interviewing at the company before you are expected to make a decision about taking an offer)
Linus on Linux's 25th birthday
Haven't read the piece.

This is a very interesting headline, though, since as I understand it the federal nondiscrimination requirements for universities are tied to the fact that students receive federal funding, and when universities tried to point out that they can't tell whether a student's bank account has been filled by a government loan or some other means they got shot down.
Would salting the hashes be an improvement?

I ask knowing very little about their security model.
ML can be an useful skill for developer. Think of it as of linux / sysadmin skills, or as web design / UI skills - they are all quite different from software development, but many software devs have them. I think that applied ML slowly becomes a similar thing - an useful tool in a toolbelt.

It takes time to become really good at it, but basics are relatively easy to aquire. Libraries and learning resources are much better now than they used to be. You can totally learn how to apply ML using just scikit-learn tutorials. Coursera ML course gives a nice introduction. For deep learning check an awesome http://www.deeplearningbook.org/ and try to implement what you're reading about e.g. using https://github.com/Theano/Theano.

The world of AI is enormous indeed, tens of new worthwhile papers are published every day. Just reading them can be a full-time job, but you don't have to know all state-of-the-arts techniques to be dangerous. Over time it will become easier to read new papers, and you will start to realize how are ideas related. Often a paper provides just a small tweak for a known algorithm, or combines existing "building blocks" in a new way.

As with all skills, it takes time to become good at it, but there is nothing to be scared of. Keep learning, do something practical every week. If you don't have problems at hand to solve using ML, register at kaggle.com. There is more to learn than e.g. in devops, but everyone can do it.
So they're just going to trust everyone that applies for it? No receipts? That's going to go well...
If someone has an anxiety disorder of this magnitude then their diagnosing physician would provide the student with the paperwork required to delay their course.

This would be for however long is needed to seek the treatment to return to a stable enough level of mental health to return to university.
The first gif on that page, Derek Zoolander's famous look. http://www.urbandictionary.com/define.php?term=blue%20steel
Netlify Raises $2.1M
Go to https://bugreport.apple.com and request that. The more duplicates they get, the more likely something is to get fixed.
I don't know if you want to consider them a startup, but Dribbble[http://dribbble.com] is located in Salem, MA.
Causing someone a panic attack in the present is not damage that "has already been done".
Silk Fabric – fabrics custom
You're freaking me out.

As soon as I get home, I'm going to swap some of my HDD cables and see what happens... I've basically been assuming that NAS4Free uses device-by-id like any sane OS should.
Classrooms aren't treatment centers. Regardless, your point is a much fairer one to raise than the "intellectual rigor" argument the University is making.
I find it helpful, because it tells me whether I can expect an answer/contribution from the other party right away, and therefore I should stick around, so we can have a almost direct conversation, or whether they will answer later so I can go and work on other things in the meantime.
Don't laugh! We actually pitched weed delivery as an Amazon service while working there, but we were quickly advised that bezos didn't want to get into marijuana, so we dropped it before going into OP1...
Err...isn't the "... is typing" message configurable and can be disabled if you don't like it?
RedFin already has lower rates then most real estate agents. We bought and sold a house with them last year and we got a check back from them for part of their fee a week after closing on the buy side.
This is what Tesla does.
>Except network of drivers

Good thing Uber has conveniently created that for you.
Streak (YC S11) Hiring a Chief of Staff and Operations Manager
We've done a ton of work on image signing. Look in to Docker Content Trust (https://docs.docker.com/engine/security/trust/content_trust/) and Notary (https://github.com/docker/notary). Our signing system is an implementation of The Update Framework (https://theupdateframework.github.io/), which many folks feel pushes the security of signing systems past any other currently deployed systems out there.

The coolest bit here is to be able to do threshold signing. Essentially k-of-n signing for containers and verification gates that only allow containers with enough signatures in order to deploy. For some more background check out the blogpost here: https://blog.docker.com/2016/08/securing-enterprise-software...

Disclaimer: I manage security at Docker.
I've just auto-mirrored a few projects to GitLab and I must say the CI integration is great. I have still to figure out thinks like using a repo-specific dockerfile as an image (because gitlab-ci uses docker images), how to avoid re-downloading images, and how to test against several versions of a compile or vm, but it works well and the separation into phases is very useful.

I never liked Jira because it's always, in every installation I've used slower than Bugzilla. So, I've preferred Mantis, Flyspray or Redmine for their responsiveness while being still featureful, so if GitLab can make the issue board fast enough (faster than Jira and Bugzilla), then I'm excited. Assuming it will land in GitLab core edition, of course.
So it's the static/dynamic linking argument all over again.

Personally, as a sysadmin, I dislike docker. Not that there's anything wrong with its implementation in particular, but because I can no longer confidently say what is actually in our stack (we run 4 different versions of Python, last I checked -- it's absolute madness).

Now, I grant Docker's argument: if you're going to do something like that, Docker is pretty much the best way around to do it. Fair enough: it's the best available tourniquet for the self-inflicted wound of bad stack management. But to me, the ease of redeploying gets outweighed by the increased complexity of the security reasoning you have to do.
Amazon launches new hub for car buyers – but isn't selling them itself
Skype for Business was bad enough I had to create Serious Business Cats in order to embed images...

https://github.com/adzm/BusinessCats
I suspect that there are more sexual assault survivors than combat trauma survivors, so if your threshold is the incidence of combat-traumatized veterans, then you don't need to extend the limit further to include sexual assault survivors.
Great, and perhaps slightly under-appreciated software. Works like a charm, simple and reliable.
No, they're doing that already. The issue is that phone numbers are so short that you can just calculate the salted hash for all of them. You don't need any rainbow tables for that.
Me too! I thought I had a pretty good experience the last time I dealt with one. Low pressure process, they were friendly, and I got a good deal. Then I bought a new car and attempted to trade that car in. Turns out the dealership had filed my title with a lien on it as if I had financed the purchase through them, which ended up being a gigantic multi-day hassle talking to the dealer, to the car company's financial arm, and to the local DMV office.
A FreeNAS device has the ability to do native ZFS send/recv to rsync.net.[1]

Always remember to ask about the "HN Readers Discount".

[1] http://www.rsync.net/products/zfsintro.html

[2] http://arstechnica.com/information-technology/2015/12/rsync-...
If we coddle people in wheelchairs, they'll never learn to wheel themselves up stairs. In the real world, there are stairs everywhere and they need to get used to that. I sprained my ankle one time in college and I crutched my way up the stairs just like everyone else. Why can't they do the same?
Yeah, but that's life with a complex bundle of software. It's not as though Apple's attempt at making a walled garden makes them magically better at not writing exploitable bugs in the userland. Mostly where they're better is at making it harder for normal users to intentionally install something that turns out to be malware, which isn't nothing, but a with exploits like Trident, that makes absolutely no difference.
Furthermore, we clearly have the ability to separate the cases where someone is saying "triggered" to mean offended or inconvenienced from meaning a panic/anxiety attack.
BBVA has public APIs in the US and Spain -https://www.bbvaapimarket.com/ More APIs are coming too.
Typical HN garbage comment.
Everyone makes that mistake once. It is an understated problem in building fault tolerant storage arrays.

We buy a batch of 20 drives all at the same time, and they are all the same manufacturer, model, size etc... Possibly even from the same batch or date of manufacture. Then we put them in continuous use in the same room, at the same temperature, in the same chassis. Finally they have an almost identical amount of reads/writes.

Then we act shocked that two drives fail within a short interval of each other :)
> Universities ought to return to what they once were: free and open exchange of ideas.

The problem with this is that's not why most people go to universities. The top reason is probably credentials for employment (most people stop taking classes after getting a degree), and below that is probably education for employment (if I see someone with a degree taking a class just for the education, it's usually related to something they want to do for their job).

Universities are aware of this but pretend that's not the case, which is problematic. It'd be like if grocery stores started pretending their purpose was to provide an area for debate, and every time you wanted to get a gallon of milk you had to both pay for it and argue with the cashier about politics for 5 minutes. You don't want to do that? What, are you afraid of being exposed to new ideas?

I don't mind discussing things, but sometimes you just want a gallon of milk (or degree). Of course, you could go to the convenience store down the street, but they only carry cheap milk powder.
With no other information I'd assume the obsessive compulsive "gotta catch em all" parent would have a cleaner/safer home environment than someone so absent-minded they forgot their kid "on accident".
i'm adding three more slides to flesh out the trickier stuff soon
I argue against using docker but simply due to the fact that docker encompasses too much when everything docker does could be accomplished by simple single use tools like unshared, cgexec, etc. Git does this and it works very well.
I do that too, but it doesn't work outside of a close group of friends.

For me, multi device support is not important since I have my phone with me all the time, and if I'm on my laptop there's the web client.

Apparently XMPP with Conversations + OMEMO provides secure multi device support, haven't tried it though and I'm not sure if I could get any of my non-tech friends to use it.
https://www.linkedin.com/robots.txt

https://yelp.com/robots.txt

There goes all Linkedin + Yelp content from your index.
Safe spaces and banned trigger words creates the tendency for people to silo themselves in a echo chamber of their own ideas. This manifests itself later on in our population in the form of filtering friends and news who dissent against their opinion.

The rise of these recent techniques of protest are more a failure of our high schools and universities to provide sufficient visibility and importance to debate and discussion.
I love the way the Linus interviews. He always has this attitude of "I appreciate the questions, but I'd rather be working or something".
I'm the primary developer of the scanner and website, and would be happy to answer anybody's questions, should they have any. :)
This made me curious, and I checked by attaching a debugger to Messages.

The content view with the bubbles is a web view. All the other views (sidebar, input field, etc.) are native controls.

I guess this is a sort of "best of both worlds" approach. You have all the flexibility of HTML & CSS for complex content layout, and you get performance and usability of native sidebars and text fields.
>And I can't help thinking that, like many ideas from social justice, overly moralising a reasonable idea has made it much less palatable that it might otherwise have been.

...Sounds familiar...

"...much leftist behavior is not rationally calculated to be of benefit to the people whom the leftists claim to be trying to help. For example, if one believes that affirmative action is good for black people, does it make sense to demand affirmative action in hostile or dogmatic terms? Obviously it would be more productive to take a diplomatic and conciliatory approach that would make at least verbal and symbolic concessions to white people who think that affirmative action discriminates against them. But leftist activists do not take such an approach because it would not satisfy their emotional needs."

http://www.washingtonpost.com/wp-srv/national/longterm/unabo...
He wasn't hacked, he was being "lawfully intercepted"!

Just kidding. The difference here is that a government doesn't want to do such as provide reasonable suspicion or go publicly in front of a judge.
A Pottery Barn rule for scientific journals
Absolutely. But what he actually said was "we don't condone 'safe spaces'".
I couldn't agree more. My life these days consists 90% of marshalling json around. Hooray for microservices.
In gaming, they call this "humane design," techniques like giving players an obvious place to take a break. By contrast, things like the infinitely-scrolling news feed and the autoplay video queue are grossly inhumane; they serve to obfuscate the fact that there's a decision point there, subtly trying to make the choice for you even if you might have wanted to do something else if you had thought about it. And of course it works, that's why everyone does it.
The chart is very out of date. rkt has support for userns, the capability set is identical to that of Docker, and so is the default seccomp configuration. The SELinux policy used by rkt has always been identical to the one used by Docker (I have no idea why the chart claims there was a difference), and it's used by default if SELinux is enabled on the system. Rkt has no apparmor policy support, the set of files under /proc restricted by rkt is still slightly smaller than that restricted by Docker, and the cgroup difference doesn't actually appear to be discussed in the NCC paper so it's hard to comment on the difference there.

I don't want to criticise Docker here from a security perspective - several security features in rkt are based on the implementation in Docker, and running your apps isolated under Docker is definitely more secure than running them all on the same unconfined host.

(Disclaimer: I work at CoreOS, though not primarily on rkt)
sorry for pointless comment but looks really cool
Well could said association not allow or reject said hostile discussions without requiring the official and overt intervention of the University itself?
It will surprise many that this is already a thing. e.g., vroom.com
Yes, panic attacks are horrible, but their causes are rarely as simple as the concept of "trigger warnings" implies.

It seems to be taken as a given that certain kinds of content are particularly likely to be triggers, but is that actually the case? What I've read suggests that actual causes are varied and unpredictable.
That is incorrect.
No one produces incredible work without a decade of practice first
that's not a serious question right? why you are even using anything Fb touches/owns/operates is the real issue
> But trigger warnings are really a simple common courtesy.
Yes and no. Sure, it is courteous to warn folks of overly graphic material. But at the same time, if folks cannot handle discussing such things in a university setting, they should seek help. Which should be readily available and affordable. It also shouldn't be frowned upon if someone needs to leave the room in such a discussion - and teachers should be open to private requests for trigger warnings when appropriate... With the understanding that the person will or is seeking help as a condition.

> If you think this consideration worth extending to a veteran...
But I don't. It isn't that I don't feel empathy for the veterans, but I think they should be offered (by the government) a safe place to go so they aren't triggered. This is a yearly event. And I think we (citizens and government) have a responsibility to provide help. The veteran has the responsibility to actually follow through with the help.
Isn't cryptography a controlled export?
First, the very act of learning can cause psychological distress. It may involve being forced to consider that some of your long-cherished ideas are wrong. This creates a crisis since either you abandon the wrong idea you've held or you ignore the new information you've acquired.

One of the most effective ways of learning is to hear and consider ideas opposed to the ones you currently hold. But these kinds of things (trigger warnings and safe spaces) act to prevent this. It inhibits learning. Sheltering people's preconceptions is the perfect way to prevent them from learning to think independently, which is opposite to the reason for going to school. Or at least, used to be.

Second, what the hell kind of professor shows porn to their class!? The warning required in that case is that the professor is unfit to teach, and/or the course offered is unworthy of any curriculum. I'm not a prude, and I can imagine perhaps some sort of graduate criminal psychology class where that might be justifiable, but it seems some sort of written description would do just fine even then.
Half the time I take an Uber pool I end up riding alone. My guess is the margins on it are not stellar.
Eris be praised.
> "slave" (i/r/t "master" and "slave") in a computing context is now generally always phrased in another way, for example

I need to educate myself. What do people use instead of "slave device" in computing?
Just like the LCD settlement.
https://lcdclass.com/

IIRC my check was close to $1,000. (no lying on the submission either)

Hope you got your LCD check too! (if eligible)