skysight-inc/HackerNews huggingface dataset:
No, they just don't want to pander to the entitled kids with victim complexes who think they shouldn't have to hear anything they disagree with.
Their pricing isn't really prototype/startup friendly though.
Nevertheless, many non-profits have hefty salaries and pensions.
The only legitimate use of this is a jailbreak tool. Obviously 'this' being the root exploit and not the malware/data capturing portion. I agree malware like that should be treated as munitions.
Performance Improvements for FreeBSD Kernel Debugging
I have 8x2.8 ghz Xeon cores 32 GB of RAM and a 970 GTX in my gaming vm. Works perfectly for DOOM, Witcher 3, all at 1920x1080 on high settings (maybe not full but damn pretty). Consensus on the forum seems to be you lose low single digit performance.

It's a KVM hypervisor and I haven't played online, why would they ban you for using a VM?
Is that really true? I have always read that cgroups based containerization on Linux is kind of a joke and that root in the container more or less equals root on the host.

Has there been significant improvement in this area lately?
I thought it was interesting that they're using Cydia Substrate to hook into specific third-party apps for monitoring.

I wonder if we'll ever see privacy conscious apps using some sort of obfuscation. So that every time you update your app, the attacker will have to reverse-engineer the symbol names again.

It seems like a compile or link time tool could find method call & selector references. As long as your app isn't calling methods using strings, or doing something else tricky, I think it could work.

Or you could just write the app in swift. It's the Objective-C runtime that makes it so easy to intercept method calls.
Of course the industry uses stuff that is outdated and past its time. But there appears to be an unstated (and imho wrong) premise in your statement as well: that everything that isn't the latest is outdated, and unsuitable for use today.
This seems like a good way to define what makes the school different. If you like this, go there. If you don't like it, you can go somewhere that does have trigger warnings and safe spaces.
And yet it says nothing of the evils of ad hoc private group chat and the miracle required to remember what secret combination of usernames -- like remembering the nuclear codes -- gets you to an earlier conversation you had to set aside.
So in what classroom circumstances would a warning be necessary?

I'm all for being courteous, I just have serious concerns about giving college students the impression that the world around them needs to adjust to them rather than vice versa.
What are the Versions of FLTK?
What i would love to see is a bootlader where i can load my own signatures. Preferably done via USB only, and by putting the device into a mode that require certain button inputs during power up.

Signed boot has uses, but we need to be sure that the user does the signing.
Very accurate. Pretend that car drivers cannot see you, and act accordingly.
"Zero expenses". The cars must be maintained, and the drivers must be paid one way or another.
You would be correct. You can't mention slack anywhere on the Internet without someone saying how over hyped it is.
Yes. This is a problem everywhere in the law. Technology makes it easier to do all sorts of bad things, from theft through mass sexual assault (see this week's news). As a society, we seem to have a hard time staying clear-eyed about what's happening in crimes intermediated by technology.
"safe by default" except for the huge amount of userland vulns that Android has.
If we try to have a culture that considers trigger warnings a courtesy worth extending, rather than having a policy saying yes/no, then the question of where the line should be drawn can be answered by each instructor as they see fit.

It's likely that a few obviously triggering things can be labelled as such and good can be derived from that even if we can't or shouldn't label everything.
It is meant to be a nod to the intellectual bankruptcy of the entire concept of safe spaces and trigger warnings. Taken to their logical conclusion, these policies would lead to a gutting of the entire premise of a liberal education, which is what the University of Chicago has always sought to provide (source: proud alumnus, particularly today). You simply cannot protect people from ideas they disagree with while also fostering vigorous intellectual debate and growth.
There isn't one. It's just a narrative regurgitated by people with an axe to grind. The anti-Docker crowd. User namespacing arrived in 1.10, which brought a lot of great possibilities for further compartmentalization with it. Alpine is the default base image. Lots of great, positive changes have gone into this blog post.
I'm not talking about automated runtime analysis per se. The type of permission setting I had in mind would be specified by the programmer and enforced by the runtime/OS.
Many folks do just that. It's called "leasing". ;-)
Demonstrations of Attacks Against Implanted Cardiac Devices [pdf]
I don't think people generally include every possible phobia on the list. It quickly gets out of hand if you try to take into consideration everything beforehand, no matter how rare it is. What about people with acousticophobia, chromophobia, genuphobia, hyelophobia, or pogonophobia? No sound or music, no colors, no visible knees (dress code! no skirts), no windows or glass cups, and no beards!

But if you know someone with xanthophobia, maybe don't wear a yellow shirt to their dinner party?

I have an issue with safe spaces and trigger warnings. They aren't usually thought of being helpful by many, if not most, professionals. If anything, they are considered actively harmful for the "triggered" individual and increase depression.

They're a feel-good measure so people can believe they are being considerate of others and announce it to the world. "Look how thoughtful and considerate of others I am being!" While letting them deride anyone who claims otherwise as being an asshole.
Never heard of that concept of "safe space" before. Do you have any examples of it?
Being file based is very much in MIT Lisp DNA, certainly MACLISP and the CADR MIT Lisp Machine. (Re-)Building from scratch from files and saving out an image for faster loading times (or resaving an image with your project's stable files), vs. the Smalltalk working on an image once you get one going.

The single address space OS was well known from Multics, but I think would have been too much additional work for the developers, and running such a system with the much less reliable hardware of those days required a lot of tape backup, e.g. MIT-Multics would back up any dirty segment (file) after ~1/2 an hour, which of course required 24x7 operator staffing, that sort of Information Utility thing wasn't really in this group's DNA.

The Incompatiable Time Shareing System (ITS) was in fact named in humorous opposition to the Multics predecessor, the Compatible Time Sharing System (CTSS), the latter was xompatible with batch, those jobs would soak up any spare cycles if possible, which was a big deal back then. ITS instead had features where you could pretty much take over the machine for a robotics experiment or demo, that sort of resource allocation was handled socially, and such features were hidden by obscurity and a sort of apprenticeship system, instead of being enforced by the OS.
The bundling of all your software's dependencies into your container means that you can't upgrade 1 .so on a machine, and all software be updated. Great example recently was libgcypt's security bugs.

You have to upgrade all containers, which requires figuring out which ones need upgrading.

The concern isn't generally that someone will escalate and then delete some other container's filesystem.. it's that once they get remote execution in a container that has connections to your database, http to your discovery service etc, they can steal your customer information.

I will say however that this post is showing that by using docker or frankly other well manicured execution enviroments, large swaths of attacks will hopefully not work (selinux & seccomp being great examples).
Bad move, Chicago. If the kids don't learn how to use trigger warnings and safe spaces at school, how will they know how to use all of the trigger warnings and safe spaces in the real modern world after they graduate?
Fight Back How to Prevent Recurring Billing Chargebacks
There's another disadvantage to using for: the space between the label and the input isn't clickable.

This matters more for touch screens, but I suspect most of the web is accessed at least sometimes through touch screens.
Universities ought to return to what they once were: free and open exchange of ideas.

Viewed in this light, the University of Chicago's rejection of political correctness is actually a softening of extremism: allowing for, rather than actively silencing, diverse political discourse.

This is in stark contrast to neighbor Chicago school DePaul, who last month blocked[0] Jewish conservative minority voice Ben Shapiro from speaking.

The extreme position here is blocking and preventing free speech and ideas through safe spaces and trigger warnings. Dismantling these, as the U of C has done, is worth celebrating. I hope they are the first of many.

[0]: http://www.campusreform.org/?ID=7923
The Benefits (not Features!) of Programming with Haskell
If you have full disk encryption (that you can rely on and no other security issues to deal with), then just erasing it by "throwing away the encryption key" is easier than physical destruction. Are there reasons why physical destruction would be preferred if these conditions are met?
I think Gibson's explanation is that the future is here, it's just not evenly distributed yet.

Others like Doctorow and Stross has voiced similar views. In Stross' case, he apparently shelved the third part of a trilogy because the NSA was outpacing him.
This is a REALLY, REALLY good reason why "activists" of any variety should be trained in how to acquire an old Thinkpad and install Debian on it (plus a reasonably xorg/XFCE4 desktop environment). If you're dealing with authoritarian regimes you can do a lot to reduce your attack surface. However at the end it all comes down to rubber hose cryptography. If your government, for example Bahrain decides to detain and torture you, you're pretty much fucked.
Looks like there's a Newton on his pin board.
> With that said I do think that a professor giving a heads-up to students that they're going to discuss uncomfortable topics (e.g., rape) in class is probably the right thing to do, within reason (e.g., if it's going to be the central theme of that day's discussion).

I'd disagree with that. If it's central to the lecture, it should be essential/relevant to the course. If it's not, there's no reason to bring it up in the first place.

The concept of a trigger wasn't created as something to be avoided. Identifying a trigger is the first step in identifying and dealing with the underlying psychological issue. It's similar with safe spaces. They are things that people need post-trauma to help recovery. It's not meant to be a permanent need or something that should be broadened to the world at large.

Your therapist creates a safe space for you to discuss your triggers.
Would it then be illegal for Google Project Zero to publish a blog post about a vulnerability that a vendor refuses to fix?
That might be true, but there are a variety of cases where we've decided to stop using a word in general in order to avoid causing undue distress; "slave" (i/r/t "master" and "slave") in a computing context is now generally always phrased in another way, for example.
Right, but who's going to risk their child being taken away by the state.
They're a tradeoff. Sometimes you really are confident enough that this attribute will be required forever that the saving of not having to write custom validation is worth it.
I am going to steal this creative writing line and add it to my other favorites

Don't meet trouble halfway.

You are entitled to your own opinions but not your own facts

There are two kinds of problems: yours and mine and this is not mine
Car owners volunteer their cars for test drives and get a kickback if the customer purchases that model? Essentially crowd sourced micro-commissions, that's brilliant.
That is not a counterargument, it is an ad hominem.
Use It Too Much and Lose It? The Effect of Working Hours on Cognitive Ability [pdf]
> "A trigger warning is advance notice about subject material that may be difficult for certain students to read, hear or see."

But that's not what trigger warnings are for... it's not just about mild discomfort. They're to prevent panic attacks.

https://en.wikipedia.org/wiki/Trauma_trigger

Whether trigger warnings are effective or not is a different matter, but of course if you portray them as being about being offended or mild discomfort that they sound utterly stupid.
Now, if they delivered one of these via Prime ...
The book in question: https://www.bis.doc.gov/index.php/policy-guidance/encryption
Hoffman Stein Capital scam auto trader software
Optical Disk Drive Products Antitrust Settlement
Knowing which things are paragraphs would also make implementing things like Readability easier.
"Is this the right room for an argument?"

"I've told you once."

http://www.circonus.com/pully-mcpushface/
It may be the area I'm in, but the proportion of cyclists I see:
- run a red light, riding past stopped traffic (often, cutting into the crosswalk as if that makes it any safer or more defensible...)
- not stop at stop signs
- ignore emergency vehicles
- commit road rage
is closer to 2 in 3 or 3 in 4. So much so that in my experience, I see far more cyclist "crimes" in a week than I do motorist ones. I've also, in my few years living in this city, seen far more accidents involving bikes than cars. (Now that I think about it, I haven't seen either in a few month. So, maybe the bike lanes are helping and I'm just not seeing how...)

You are completely right about physics being on their side though. I'm not afraid a cyclist is going to kill me by T-Boning me running a stop sign, but I am afraid my SO will get PTSD if they T-Bone a cyclist running a stop sign. (I am also worried about a phantom collision [Florida's term for an accident caused by a vehicle that was not damaged] being caused by my reaction(s) to a criminal biker. I do concede that I could do my part trying to find some course that teaches me defensive driving against cyclists.)
There are a few places that charge 1% up here in Canada, but they are more the exception than the rule. It's still insane, and given how little effort some realtors put in, it's quite shameful. Even giving someone $3,000 (1% of a $300,000 house) seems like a huge amount of money for the little amount of work they do.
He wouldn't be responsible. PG choose him, so the buck would stop with the person who made the decision to entrust the family jewels to someone else. And of course Sam would not be happy to be at the helm but the other thing is that over time the market changes so we wouldn't know for sure if it wouldn't have gone down even if PG were still around. [1]

[1] Noting General Electric, Jeffrey Immelt, Jack Welsh and the collapse of the financial system that led to getting rid of finance as a profit center.
Thats a very strange belief. Akin to believing we can't build cars until we understand how horses work exactly. AI has made huge progress in the past few years, without any input from neuroscientists. Stupid evolution made human brains with just random mutations and selection. Surely human engineers can do better.

The hard problem of consciousness is especially irrelevant to AI. The hard problem is a philosophical issue that by definition can't be solved with science. We could make an exact simulation of the brain that exactly reproduces human behavior in a computer, and philosophers would still be debating it.
> it's ZFS backed, screwing up the RAID is going to be pretty close to impossible

Even if it's ZFS it can get quite messed up if you set it up based on sda, sdb, etc like naming conventions. In that case entire zpools can fail to import in case of failure.

Therefore the best practice is to use device-by-id, so that if a device like sda falls out, the rest of your array should still resolve correctly.

And how the array is created is entirely a FreeNAS thing. Hopefully one which have, like OP says, improved.
Citation is not needed because you can't learn something you can't discuss and you can't properly discuss anything with trigger warnings and safe spaces. I guess we traded trigger warnings and safe spaces for logic in school these days.
As a long term pen and paper gamer, i can't see the name Fairlight without thinking of Shadowrun. There Fairlight brand cyberdecks were the cream of the crop of preconstructed decks.
From my understanding, Amazon Vehicles isn't (as yet) about buying cars, but about selling you the parts and accessories for the vehicles that you do own. Here's their 'Garage' page:

https://www.amazon.com/gp/your-garage/

From the surrounding comments, it seems they do something similar with home appliances and photography equipment.
Well, Docker containers are really meant to be short-lived. On the order of milliseconds (e.g. run a batch operation) to days (run a web server application). They're also meant to be mostly immutable. So a vulnerability in a particular library that allows an attacker access to the container won't necessarily allow them to do much.

The other benefit of short-lived containers is that any given vulnerability only lasts as long as the container (assuming you're rebuilding your image with the latest & greatest software/libs before each deployment). Whereas with a full OS/VM you have to find down time to patch that sucker and that might take a month or even a quarter or longer.
> Man, remember the late 90s and early 2000s, when the IM scene was a mess of incompatible networks like ICQ and AIM and MSN Messenger, and people were like "fuck this" and came up with this protocol that was interoperable with all the others through gateways and also it was extendable, and we could all be happy together?

IRC is still alive, at least.
Another is that they just started putting light-grey text "Message @channel" by default in the text area. I am surprisingly stressed out by this. It feels like a command or a nudge that insinuates itself into my thinking space, like a half-finished message which a corporate entity 'helpfully' began for me, and now it's my job to finish it, and as soon as I finish that one another will begin. There's a bad dream in there somewhere...

I think the OP is right that a UI needs to be sensitive to the user's psyche and not push them all the time toward using the product.
If you're using an image tagged "latest" (e.g. FROM ubuntu:latest), updates are already being pulled into your containers by default. Since containers are ephemeral, fixing security bugs can be as simple as just rebuilding and redeploying your containers.
Well the US has had obscenity laws in place until recently. It's just that the people who decided what was "upsetting" were politicians rather than students and had the power to get rid of it completely.
Show HN: We now serve our mobile fundraising app via the web- no download needed
I'm not familiar with that perception, any good reads on that?
This couldn't be further from the truth.

Docker containers run with default seccomp profiles, namespacing (filesystem, PIDs, mounts, etc), LSM policies (AppArmor, SELinux), and capability dropping.

These are all common sense security controls that aren't widely available because they're typically hard to use. Docker makes them defaults for everyone. This makes classes of remote attacks against applications far more difficult. Tangible example: read-only filesystems + mount namespacing make vulns that require filesystem modification or directory traversal far more difficult.

At this point arguing against running in Docker is like arguing in favor of IE6's security model instead of Chrome's.

Disclaimer: I manage security at Docker.
Umm they misspelled "you are a sucker by default" they had a brain fart and actually wrote "secure by default". I think someone was dreaming of OpenBSD.
Though we do put "Warning: may contain peanuts" on bags of roasted peanuts, so it's not like we haven't done some sliding before.
I think the point is that this is basically a normal class, but one with the boilerplate already written for you. If you don't mind boilerplate, this library does nothing for you. If you don't want to write classes and think dicts are good enough, this library does nothing for you.

If you do want to have classes but don't want the boilerplate that comes with making a basic-but-full-featured class, then that's where this library comes in.
Indeed. The term "trigger warning" seems to have been coined to give unjustified moral weight to the idea of content warnings, by implying their absence causes PTSD attacks, rather than just being material upsetting to many people.

And I can't help thinking that, like many ideas from social justice, overly moralising a reasonable idea has made it much less palatable that it might otherwise have been.
That's probably inflation-adjusted. It was about $1 billion at the time. [1]

[1] http://ds-wordpress.haverford.edu/bitbybit/wp-content/upload...
The only downside of early exercise I can see for the company is accounting for the cash and being ready to buy-back unvested shares as-needed. Since the tax implications are potentially massive for the employee, and we're talking de-minimis work for the employer, early exercise should be a standard term on all ISO contracts. I see this as an educational opportunity for Founders, and if you see a contract without early exercise I certainly wouldn't hesitate to question it.
Rubber duck debugging [cartoon]
It's important to acknowledge that the term "safe space" means different things to different people.

To the Yale protestors (who were widely supported at UChicago) the entirety of university housing at Yale was meant to be a "safe space," so it was incumbent on the university to fire professors who voiced unwelcome opinions in that space.

To many of the people who are angry about this letter, "safe space" means a support-group-like room in a specific place at a specific time, which doesn't interfere with the rest of the university's operations.

I suspect it is the former which Dean Ellison meant to attack. I find it hard to believe that he's trying to shut down, for example, group therapy programs for LGBTQ youth offered by the psychology arm of the university's student health system. But I do appreciate him sending the message, "we're not going to fire professors because you don't like what they said."
Ah, okay, makes sense.
Yeah, I actually paid for the 3 year subscription. Now I can't even see the option. It was a big differentiator in my opinion. Their logic was sound too - even at $1 a user they could make a $1bn a year. (Even in developing countries - because of the networking effect - people would have paid that modest fee.)
Ah, okay. I misunderstood. Cool!
This is big news. I wonder if it makes GitHub, Trello, Atlassian, Zube, Waffle.io, & HuBoard nervous...
Debian documents mention that "BXA revised the provisions of the EAR governing cryptographic software" in October 2000. Debian no longer has separate non-us repositories for crypto because of that.

https://www.debian.org/legal/cryptoinmain
Sounds like an exploited device should be jailbroken, you could try running an unsigned binary (if it's easy to find & install one - I'm not sure).

I believe the article also says it disables the auto-update mechanism. So if you've seen an auto-update prompt recently, your odds are better.

The background audio recording must be terrible for battery life.