skysight-inc/HackerNews huggingface dataset:
Not sure how, but Joomla, WordPress and other CMS's need to find a better way to improve their security features. It is hard for me to believe that a "high-severity vulnerability that allows remote users to create accounts and increase their privileges on any Joomla" it was just missed all these years.

A good code review needed to find this.
How much of this is actually the private sector doing something cheaper and how much is startups using VC funds provide service for less than it costs them?
This misshapen pebble is actually the first dinosaur brain fossil ever found
ransomware has been using bitcoin for the last 3 years
A CLI to manage Apache VirtualHosts inside Vagrant. I would use it.
Despite the awful title, this is a pretty informative article
The problem with VR/AR is latency. It needs to be 10ms or less to feel real. We aren't anywhere near it.

The same is true of touch screens: when latency gets below 10ms, the experience changes to an actual physical object. Current touchscreen latencies are terrible, but we don't notice it because they are still useful for input and we don't know any better.

If we can't even do it for touch screens, how can we do it for VR/AR? The glut of products is just a supply-side bubble.
>Does anyone REALLY think that someone who was sexually assaulted by a BILLIONAIRE wouldn't have cashed in already?

No actually, they all decided together an hour before the the email leaks were about to be released to the public about things that happened decades ago and to release a tape of him. That clearly has no political motivation what-so-ever and how dare you question it.
Vault has been excellent, it (and Consul) runs on Solaris/SmartOS and is available through pkgsrc. Vault has been one of the most set-it-and-forget-it pieces of my infrastructure, it "just works" to hold and expire secrets.

I use it to hold all my LetsEncrypt certs, my private keys get stored in Vault and I never have to expose them even to myself. I created the NodeJS package ten-ply-crest [0] (expressjs middleware) to handle this for me [1], using indutny/bud [2] as the TLS terminator with SNI.

[0]: https://github.com/nextorigin/ten-ply-crest

[1]: https://github.com/nextorigin/ten-ply-crest/blob/master/src/...

[2]: https://github.com/indutny/bud
What version of linux are you running on it?

What do you primarily use it for?
I would say that GC, generics, and maybe even HLLs are useful because they are tools to constrain the set of possible states the program can possibly enter.

When your language and runtime provide good tooling for constraining the state space, then that allows you to elide specification of those extraneous details.

E.g., some form of GC is a basic runtime requirement for most of the HLLs today. They could almost not exist without it.
This, especially the end, reminded me of:

https://www.thenation.com/article/new-abolitionism/

Which draws a parallel between the enormous wealth tied up in slaves at the time of abolition and the immense investment in oil and gas reserves that can never be burnt if climate change goals are to be met.
The XPS 13 was recently upgraded to Kaby Lake, so if you're fine with the smaller display, I'd say go for it, I've heard great things.

Also, do realize that the UltraSharp model will have a significant impact on battery life. The comments I've looked at for the XPS 15 9550 (4K display) say that the battery life is basically halved, but it's supposedly still around 4.5 hours of battery life.

If you prefer the 15-inch, you might want to wait for a while - they still only feature Skylake CPUs and I think an upgrade is imminent (given the recent XPS 13 upgrade and all.)

I don't have any personal experience with the machines, but I'm planning to buy the XPS 15 once it gets an upgrade.
I have had a few models of the XPS 13 now and each one seems to get better and better. They're both light enough to carry around and they are still quite strong, I have seen a lot of them dropped without any damage.

Initially I though I would never use the touch-screen, but it is actually quite useful when reading things (scrolling) or quickly clicking basic things when not really sitting behind the keyboard on a desk. Same for the light in the keyboard, very useful when working at night and on airplanes etc. The screen in general is really really good, some colleagues have the 1920x1080 screen, I would pick the 3200x1800 screen again next time since it's much nicer to read from and allows you to use smaller fonts (= more code on one screen)

Linux support is generally much better than other relatively new notebooks I've had, but still sometimes things break. The Developer Edition is released a bit later than the Windows models, probably to stabilize Linux support. I've only used it with Ubuntu, but I see others use several other distros which seems to work without much issues.
I have a bachelor's degree in political science* from AU, and Lichtman was my prof for one class. Suffice it to say that prolonged exposure to him is more than sufficient to cure a person of any notion that he is a genius who can see into the future.

There is a tiny kernel of a good observation buried in his model, which is that the everyday "horse race" events that the political media focus on have very little to do with who wins and who loses in a presidential election. In fact it's pretty safe to say that campaigns themselves don't have a whole lot to do with that.

In the modern era at least, presidential elections are generally just a referendum on the performance of the incumbent. If the economy is at least stable, and there are no disastrous wars going on, voters almost always re-elect the incumbent or elect the designated successor from his party. If the economy is in the tank, or a war we're involved in has taken a particularly bad turn, they throw the in-party out and vote the out-party in. That's more or less all there is to it.

Which means that the victor in presidential elections is almost never a total surprise; by looking at the economic indicators, you can make some fairly solid predictions which party will win months before they even get around to choosing their candidate, no elaborate model required.

Lichtman's innovation was take that basic idea and then hang a bunch of bells and whistles on it, the entire purpose of which is to impress credulous reporters by taking a rule of thumb and presenting it as some kind of mechanical fortune-teller. Which, since reporters need things to report on and he provides a kind of pre-packaged story that requires no research and only one interview, invariably gets picked up.

So: every four years he gets to do a round of press, applying his "method" to the current election, which is good for his career and for the profile of the university. And of course none of the reporters circle back after the election to measure how well his Prediction Machine really performed; and even if they did, he's left enough subjectivity in his "keys" to give himself an out if his predictions turn out to have wrong.

Everybody wins, I guess? Except the people who read those stories and think there's actually something more to them than some basic historical knowledge and a dollop of PR razzle-dazzle.

* Well, actually an interdisciplinary degree in "communications, legal institutions, economics and government." But the path I chose through those disciplines was heaviest on the poli sci.
I think "for humans" is just intended to convey that the language and environment are based on research into human cognitive traits: how we think and learn.
I often read about happy x220 and x230 users, but the newer x240/x250/x260 are not mentioned as much. Did the build quality decline after Lenovo took over?
> The laws on protecting classified information allow you to lie

But it wasn't required. It's not like Clapper was being tortured and had to say something. He should have simply shut up and refused to answer. By lying to congress when he didn't have to, he broke the law.

Moreover, by doing/ordering the illegal things we was already a criminal before the investigation. Even if allowed to lie, he's not allowed to violate the constitution. (And such permission could never be granted by anyone chartered by the constitution. Our president can't authorize this, for instance.)

> operating in a bunch of grey areas

There isn't a grey area.

If you're part of government and your actions are outside of what the constitution enumerates, you're breaking the law. If you're a citizen and your actions are outside those forbidden by law, you're not doing anything illegal. It's very clear.

As a part of government, he is clearly doing things the people don't think the constitution covers and as such, is a traitor. (It doesn't matter that he can spin a justification, it matter that citizens don't accept it.)

I know you aren't arguing that it should be legal, etc. I'm just pointing out that this isn't questionable. It's clearly illegal. Powerful incumbents never get charged for breaking the law but that doesn't make it legal.
The only thing that's hit me (so far as I know) in years was an Acrobat Reader 0day that my installed antivirus missed (AVG? I think? years ago) but once I figured out how to sigkill the payload while it was still starting up, Hitman Pro ate it alive in short order. Windows Defender is apparently pretty good but it's never found anything to complain about on my systems except copies of EICAR in a local CPAN mirror.

So, for me, as far as I can tell, "don't use IE" plus "don't install random crap you downloaded from the internet" plus "my mail client is mutt under screen on a server" between them are basically sufficient defense these days. How far that generalises I can't really say.
It seems highly unlikely this commit made it into a GitHub Enterprise release.
I personally would like to make my home network IPv6. Just for learning purposes, but my issue is that my ISP doesn't even provide IPv6. And there isn't any official private address range.
No, the implication is that your abusive partner, or perhaps a stalker, might turn your IoT devices against you & use them to watch you in your own home.

It’s easy for people to be completely oblivious to this reality if they have never experienced it themselves or had someone they knew be on the receiving end of this kind of behaviour. It really is not that uncommon.
I assume he was just visiting for manufacturing purposes.

What's interesting in China is they have in the past executed people for white collar crime in addition to regulatory officials as well. This though can happen for a variety of reasons unrelated to regulation, rather corruption, being in a rival faction of the wrong people, etc. Anyway, I am not saying it happens a lot or every day, but rather it seems tolerance with regard to regulators and corporations is not necessarily unlimited, especially depending on who's pockets you are lining and where you are from.

https://en.wikipedia.org/wiki/Zheng_Xiaoyu
Both are quite similar although CK2 is definitely easier to learn how to play. It's far more geared around interpersonal relationships than EU4 which I've always found more compelling.
They are still being sold, much like the previous one.
> We do these by taking another full dump and only storing the difference between it and the last full backup that was taken.

Do you diff against the same base, or create an incremental chain? How many diffs do you take in between recapturing a full image? At $DAYJOB we always take full backups into a fast in-house deduplicating store.

> Periodically, each peon syncs with the ORC DB to look for new jobs assigned to it

Is there no better way to handling this than polling?

> LOAD - Load the downloaded backup into the peon’s local MySQL instance. Individual tables are restored in parallel by parsing out statements pertaining to those tables from the backup file, similar to Percona's mydumper.

Presumably you can only get this parallelism by disabling FK integrity. Is it re-enabled in the following VERIFY stage?
In ANSI C, not in K&R C. https://en.wikipedia.org/wiki/C_(programming_language)#K.26R... doesn't explicitly say it, but gets close:

"In the years following the publication of K&R C, several features were added to the language
[...]
functions returning struct or union types (rather than pointers)"
Defending against Rowhammer in the Linux kernel
>The last FBI investigation into her emails went a year and found nothing.

Incorrect, they found no one who was "willing to prosecute"
> so does OS X if you can replace the wifi card

Please tell us more! What card am I supposed to replace it with, and is it anything involving soldering or just sockets and switches?
56% ± 3.3% at 95% confidence isn't good enough for you?
I was open to trade my Mid 2012 (upgraded RAM and HDD to SDD), but they offer me $350. I just bought a new charger for $80 dollars (you have to include it in the trade to be eligible)...
That one is excused
A recent Linux kernel (4.9.0-rc1) even gets you 9-10hrs of battery life after 9 months of heavy usage!
Well, it's just a code smell. Smelly code isn't necessarily wrong, it's just more likely to be wrong.

Sometimes a piece of code needs to be highly optimized to the point of being basically unreadable, at that point it's probably worth adding explanatory comments that you would normally avoid.
I don't use FB (privacy concerns and commercialization of human beings) so give the interested source benefit of the doubt.

So FB has made an oversight. The engineers and designers should do the politically correct thing here and add white people as a category. Most importantly, the special creams advertisers...
What exactly is going to be the problem when all version control systems do is merge based on text differences? Also the block separation here could actually be used semantically and provide better merging than for existing languages.
If Cloud Bursting Is So Great, Why Aren’t More Companies Doing It?
Lenovo installs malware by default, so nope.
Apple is an Irish company. /S http://www.forbes.com/sites/leesheppard/2013/05/28/how-does-...
Indeed. And I absolutely do not trust them on it. Their radar hardware just isn't good enough to reliably do that.
I tend to agree that Eve isn't quite the right direction. The REPL is important, so that's good. And one-click deployment, one-click forking of development environment, those things are critically important. But from there...

I agree the high-level stdlib is a problem. I think what we need is an easy-to-dip-your-toes-into environment that provides a path down into "real programming" and ideally down to metal.

I think the big problem isn't exactly UI or language or high enough level APIs, it's the way the APIs are structured. The two big issues I see with most tools are:

1) tendency to layer opaque frameworks on top of opaque frameworks which makes debugging down into the system difficult, if not impossible. (i.e. React) In this sense I think it's interesting that Eve is trying to build on top of itself. Anywhere there's an opaque layer you are putting a massive learning curve for anyone who is grappling with the finer details of that API.

2) declarative interfaces. (i.e. Ember) These require the programmer to have detailed knowledge of the inner workings of the runtime. Feels like we need tools that are made of primitives that the consumers of the tools have a clear path to understanding. There is this idea that the user will never have to understand how the tool works, but my experience is that you always eventually do. You always need to understand the layer below you, so the task is to make those layers easy to dip into... not to try to insulate your users from the details.

Eve seems to partly fail on both of these.

What does your approach look like?
It's the Inclusive Design Research Centre at OCAD University. My email is in my profile, feel free to reach out :)

http://inclusivedesign.ca/research/ocadu/
Confirmed on the battery life. With Linux on my Dell XPS 13 9343 QHD+ version, even running tlp and powertop, I'm lucky if I get more than 6 hours. If I do music streaming or any kind of video, it plummets to 4.
You're forgetting, though, that that would require a new USB-C charger to be designed, as well. Which perhaps wasn't ready yet.
Same boat here, although I'm a bit worried about the downsize from 15" to 13". Perhaps with a docking station, it might not be so bad. But hopefully dell jumps on this opportunity to make a 15" developer edition
Wow, guys... We are all developers, but most of us work for companies. So next time your boss asks you : "What do you want as your primary machine?" I bet you will reply : "Latest MacBook Pro".

That simply sums it up. There's no better alternative at this point. You can't reply "I want a Thinkpad and make it Hackintosh" or smth.
I think the best way to introduce a new concept to someone is to do it in terms of something the person is already familiar with.

You can introduce programming by making an analogy with a cooking recipe, where you have ingredients (input), and a desired output (whatever the recipe is for). The recipe would process the input and through a sequence of defined steps, turn it into the output.

The average human is familiar with the concept of cooking to some extent so we can say that analogy would work "for humans".

This, in contrast, fast-forwards directly into some concepts like functions, how to evaluate functions, etc... and that's where I stopped reading. This is not "for humans". Might be a viable language, sure. But let's be objective, leave superlatives and weird claims aside.
I'm with you here, for me (and probably you) at least, this is by far the best feature of OS X. I mostly use Linux, and bind Windows-key+left/right for switching desktops, in KDE, but whenever I use OS X for even a little bit, I miss it.
> Do I believe Hillary acted with malicious intent? I don't.

She just wanted email on her Blackberry so she could conduct business while traveling.
Are values/records in Eve immutable?
Also consider the hubs. To take a well known example, Phillips Hue lightbulbs don't connect to the net directly and don't have any significant computational resources to speak of. They are just an 8-bit Atmel microprocessor with a Zigbee radio to talk to the hub ( https://blog.adafruit.com/2016/06/14/teardown-of-a-philips-h... ).

On the other hand, the Hue hub is running a full embedded Linux distro (which has even been rooted, though it requires physical access http://colinoflynn.com/2016/07/getting-root-on-philips-hue-b... ). A lot of the "real" smart home gadgets are using this model and they will gleefully punch a hole in you firewall, so it comes down to the security of the hub(s).

From what I know, Mirai is mostly hitting stuff that isn't what I think of as IoT - stuff like routers, security cameras and DVRs. Seems like it's being misrepresented, though that's not to say that an attack on something more in line with what I think of as IoT/smart home isn't possible. I have no doubt that tons of refrigerators with Wifi and connected coffee makers are vulnerable. Part of me wonders if Mirai was meant as a grey hat warning since it's just showing what's possible only picking on low hanging fruit ("Mirai" means "future" in Japanese).
The easiest way (and the method I use) is to just use the version packaged with Anaconda. See: http://jupyter.readthedocs.io/en/latest/install.html#id3 .

There are also instructions on that page you can follow (installation via pip) if you already have a reasonably modern version of Python installed, and you have an appropriate C compiler available. This is a pain to configure if you are using a Windows machine.

Assuming the 'jupyter notebook' command succeeds, a browser window should pop up, displaying a UI for manipulating individual notebooks.

If you have already successfully completed the installation, and are instead looking for guidance on using Jupyter Notebook itself, then your best bet would be to look at some of the examples: https://try.jupyter.org/
Smalltalk was very consciously, and conscientiously, designed for humans.
The WiFi card is a simple mPCIe card. You can just switch that out.
Insomnia rest client gets E2EE
> When you send an e-mail today it’s sent in plaintext. This means that when you connect to your local coffee shop’s WiFi they can intercept all e-mail that is sent through their router. This is probably not the relationship you have with your barista…

Um, how many users use native clients on unencrypted ports as opposed to https based web-clients or TLS?
Yes, this is what I assumed too. Is there any proof that this isn't the case? I'm not sure what the worry is about.
> Eventually everyone gets used to it, and admittedly they are trying to simplify the keyboard IMHO

No, not everyone. I remember the time Apple "simplified" Final Cut Pro "X". The professional users moved on to other products and never looked back.
My girlfriend recently bought one for her daily driver. We decided to go with Arch Linux to gain access to packages as they release, rather than wait for the next iteration of Ubuntu or Fedora to get updates.

Here are my pros and cons:

Pros:

1. The hardware is great; the developer edition favors more Linux-compatible hardware (obviously), and for us, it didn't require very much setup. Usually the default configuration will be enough. The touchpad, like the MacBook, has a glass surface and feels excellent.

2. Like the MacBook, it's very light. The screen looks great, and honestly on Linux I prefer 1080p.

3. Dell has a very reasonable warranty, and is very quick to respond. Example: You can install whatever Linux distribution you like, replace the SSD (so long as you don't ruin anything while you're there, of course).

Cons:

1. It's fragile. Unlike the Macbook, you have to be at least (more) careful with this thing. We ended up breaking the screen without much effort; I wager it was the fact that it was in a backpack that got dropped somewhat aggressively.

That being said, we also bought the $60 accident protection, and Dell sent out a technician from a local repair shop to fix it for us within that week. If the technician can't fix it, they will over-night you a shipping box and a FedEx label to send your laptop back in.

Just be careful with it; treat it like the $1000+ machine that it is.

2. No replacing the RAM. It's soldered onto the board. That's not a problem for me because I barely push ~4GB.

Conclusion: I use a MacBook now; my XPS 13 is actually coming in tomorrow and I'm very excited. I think it's a great machine and a great MacBook replacement, and has excellent Linux compatibility. Dell's customer support is great, just be careful with it; it's not an aluminum body or several layers of glass in front of the screen. Make sure to buy the one with the right amount of RAM so you don't regret it later. If you're worried about storage, there's a $150 500GB M.2 SSD on Amazon, buy the lowest storage version and upgrade it. Get the protection plan. It's cheap compared to the cost of buying a new device.
AWS. I thought about using the AWS EC2 auth provider to grant a temporary lease that is fed into consul template so that template can pull down additional information.

https://www.vaultproject.io/docs/auth/aws-ec2.html

But it's all in my head and I haven't gotten around to planning this out. It looks like once the initial trust is granted then hooking up consul template and chef is pretty straight forward. At least, that's what I got from Seth Vargo's post on using Chef and Vault.
This is a buy I consider, but since I decide to get new computer once in five years, I would like to choose best option.
So it's ok for people to die because a business couldn't be bothered to test if their product passed the most basic of safety criteria? Because that's what you're saying.
Also, there are two types of keyboards for the Surface - the touch (bad) and type (good) which has real keys.
As I said here: https://news.ycombinator.com/item?id=12796310

I don't see how it's arguable for a currency to have a 10% cut for the founders. That's too high.
Ubuntu nags you to do it so it can run 3rd party drivers. It's never really explained what the drivers were and I haven't noticed any difference with it disabled or not