skysight-inc/HackerNews huggingface dataset:
I have no information here, but it's certainly possible that both sides are not willing to publicly disclose the full extent of the vulnerability. I think that's less wise than usual given what Red Hat is writing and how disputed it is, but that's probably their standard practice.

Some of the comments from Red Hat previously implied that they thought the vulnerability could only be exploited via ptrace, which SELinux denied by default for Docker containers. That's definitely not true; ptrace was used in the PoC because it's easy and likely to win the race condition, but you can also grab file descriptors out of /proc/$pid/fd.

However, the blog post appears to show SELinux stopping attacks that don't involve ptrace, because SELinux forbids writing to an open file or an open network socket that has the wrong context. If Docker believes there are attack vectors that aren't covered by the default SELinux policies (such as writing to something that's not a regular file or network socket), they might be unwilling to disclose that too loudly until Red Hat gets around to saying "Uh, actually please patch".
Correct me if I'm wrong, but from what I've been explained, the issue with Simplified Chinese is that it's "simplified" by removing characters for homonyms in Mandarin Chinese. So this works fine for Mandarin speakers, but in places like Taiwan, where they speak a different dialect, it does not make sense since there is one character for different words that are not pronounced the same, making the writing difficult or impossible to read... Which is why they stick to Traditional, and might understandably feel Simplified as an affront to their identity.
To be fair the author clearly doesn't understand the basis of the law either. Hint: it's not the constitution, even if it ever was.

It's power and the threat of violence from the elite.
Yes, Python 3 does have Unicode-aware functions, as demonstrated in the post (via slices).

Go and Rust also have very good Unicode support, in addition to Swift and (apparently) Perl 6 as mentioned above.
Obviously a sample size of one - you can disqualify just about every comment anyone makes in such a way, so I'm not sure I see the relevance of it in the context of a discussion explicitly mentioning personal experience? It is of course completely possible that he's the only kid in the world who sees it the way he does.

I don't see them as equal in terms of specs, but I'm not interested in the same things as a 10 year old. I asked my stepson about it this morning, and he gave what I think was a pretty well-reasoned argument off the cuff about it, mostly that the games on the iPad are completely different to those on the xbox, and he prefers the games that are on whichever platform they are on, and he likes the portable nature of the iPad, but the xbox because multiple players can play together. Sounded like a more coherent review of the differences than I've read on some websites.

It's not all about specs, it's about gameplay. I'd actually say I've -enjoyed- playing games on the ZX Spectrum more than some PC games (with infinitely better graphics, sound etc), because I enjoy the game more, and because they could never rely on looking flash to engage you, so they -had- to be excellent games. Technically, there's no way that Manic Miner is a better game than all the FPS that my eldest stepson plays, but I'd take Manic Miner any day of the week.
It could be any number of things- insight into the history of smoking ads, the bygone culture of advertisement copy as poetry, or the bit about the "poetry of industrialism."

But if you can read the words "BUT just among ourselves, you better start a rapid whiz system to keep tabs as to how fast you’ll buzz from low smoke spirits to TIP-TOP-HIGH" and not understand why someone thought it worth sharing, I don't know what to say.
Hackers that hit MongoDB installs now switch on exposed Elasticsearch clusters
Frustrations rise in Damascus as water pipes run dry
Won't work...It's a hard sunset. That's why, for example, the SF muni trains are not showing estimated arrival times right now. See https://www.sfmta.com/about-sfmta/blog/why-muni-arrival-time...
Those cost savings won't be immediate, and will likely have to wait until production facilities are expanded once there are sufficient orders to warrant it. And not just immediate orders, but ones for a few years out as well.
Wouldn't it be easier to add a retry=true to the request, at least if your implementing exponential back off in an existing codebase? Then you just hash the request (minus the retry field) in your cache layer and send the saved response again. You'll need a little extra code to update timestamps on the client side but the server side can be implemented as middleware in most frameworks. Expire the cache after a reasonable total timeout and make the client do a new read if they try to retry after cache has cleared it.
Can you explain the reasoning behind typing in pinyin to see the output in traditional characters? To a native English speaker this sounds silly and pointless.

Is it something that's mostly tradition or is there advantage to typing this way?
> I couldn't disagree more. The fact that our laws are subjectively interpreted is a blessing. There are so many laws that the Congressional Research Service can't even count them all. In other words, we are all breaking laws every day.

But the selective enforcement of laws is a disaster. As you say, we are all breaking laws every day. Which means, if any individual prosecutor decides he doesn't like you, they probably have the ability to charge you with something.

You've just handed the state the power to jail anyone they decide they don't like. That is truly dangerous.
Yes. But, it's not uncommon (though not a good idea) to sell a car with the plates on, so the buyer doesn't have to go to the DMV before purchase.
Presumably not everyone is using git-svn... otherwise what would be the point of sticking with svn?
Um, so? First, iOS was in development for years. Early Android didn't look anything like the final product. It was changed to copy iOS in extraordinarily obvious ways after Eric Schmidt was able to steal Apple's IP while he was on the Apple board.

Early Android had no touchscreen and was more similar to the BlackBerry. If you read the Wikipedia article you just linked to, you'd learn that:

>Speculation about Google's intention to enter the mobile communications market continued to build through December 2006.[37] An earlier prototype codenamed "Sooner" had a closer resemblance to a BlackBerry phone, with no touchscreen, and a physical, QWERTY keyboard, but was later re-engineered to support a touchscreen, to compete with other announced devices such as the 2006 LG Prada and 2007 Apple iPhone.[38][39] In September 2007, InformationWeek covered an Evalueserve study reporting that Google had filed several patent applications in the area of mobile telephony.[40][41]
Effect is correct here.
> Which brings me directly to what bothers me about the crate system and the sociology behind it – I don’t see any pruning. Worse, I don’t see much understanding of the need for it. A lot of Rustaceans don’t seem to grasp why, when the question is “where do I get feature X?” the answer “oh, there are 23 crates for that” is objectively terrifying.

Actually, I think the community does recognize that this is a problem they are running into as they scale up. Previously there was the discussion of the Rust Platform [1] as a pseudo-stdlib which was received with a lot of mixed since the Python approach isn't actually all rainbows and sunshine. More recently, there has been effort to try to improve the discoverability of relevant crates [2].

[1] https://aturon.github.io/blog/2016/07/27/rust-platform/

[2] https://github.com/rust-lang/rfcs/pull/1824
If you'd like to email me, I can connect you to our security triage team to argue the case.

If we're wrong, we'll change it.

Edit: looks like we already did.
"Hop" comes out strongly aspirated for me. Certainly "mop" and "mob" don't sound the same.
Thanks for your comment. We (Garden - Cloud Foundry container project) released with the runc patch yesterday (https://github.com/cloudfoundry/garden-runc-release/releases...).

It was our understanding from the original report that the vulnerability was mitigated by AppArmor disabling ptrace, by no user process running as pid 1 inside the container, and because in CF buildpack apps, user processes run as unprivileged users. This is the stance communicated in the CVE report.

However, with some further consideration and updated information yesterday, we decided it would be prudent to patch and release immediately to be on the safe side. This was communicated to the Cloud Foundry Security team.
Looks like current technology is 1000x1000 per eye at 90Hz: http://www.digitaltrends.com/virtual-reality/oculus-rift-vs-...

8k x 8k per eye at 120Hz is 64x more pixels at 1/3rd increase in frequency ~= 85x more processing power. Making the (maybe faulty) assumption of doubling processing power every 2 years and that current setup is processor limited, this sort of processing power is ~13 years away.

Same computation but with 4k x 4k per eye predicts ~9 years of progress needed.
Because the other comment didn't spell it out: effect is correct there. Effect as a verb means something like "to cause to happen". Don't pretend effect/affect is just a noun/verb split. Both words have meanings as both verbs and nouns. It's best to just learn both meanings of each instead of following some rule that's wrong a fair amount of time.
Speed is entirely separate from the language. It's possible to write two different JS interpreters: one very fast and one very slow, both of which meet the language standard set by ECMA.

If so, you're basically agreeing with parent, in parent's disagreement with this from further upthread:

JS semantics are garbage... for optimizations
Getting HTTPS Server Started with Node.js
I think the same as someone who has waited for it a long time and purchasing a Rift with Touch, but looking at it rationally the sum of everything is a bit underwhelming if you consider a price of 2k to get started.

Many people i showed it to think its really cool, but out of maybe 15 people, only one has expressed serious interested to actually buy one and he already owns the required PC. Most were also not completely blown away, more like "yeah this is pretty cool and fun" but the expectations were higher than what actually can be experienced today.

There are cool games and experiences, but the tech needs to get a lot better (mainly resolution for me because i enjoy racing games most) and it needs to be a lot cheaper. I am still skeptical about mass market adoption beyond the same people that were interested in Kinect/PS Move.
Mixing RTL and LTR is a nuisance, though; that's why ℵ is a good variable name and א is not.
Hi @aalireza,

1. We'll provide instructions to use AWS (65 cents an hour) and are working with AWS to get students credits. We've done this in the past so there's a decent chance we get this but no guarantees yet.

2. The course is going to be Siraj's videos supplemented with additional content to go deeper into the math/statistics and to actually do problem sets and projects. So Siraj is meant to be the starting point from where we go deeper.

3. Mat Leonard will be the main instructor and did is PhD in Physics and Statistical Neuroscience at Berkeley. He's done his fair share of reading from books in the field and will be able to answer your technical questions.
There's nothing to solve. There's just nothing happening right now until satellite deployments. You can see the timeline at the bottom.
So tobacco is what the "Do you have Prince Albert in a can" prank phone call is referencing? I've heard that forever and never knew why it was funny… I knew it was a double meaning, but the only Prince Albert I knew about was, um… something else (that wouldn't go in a can).
I got an out of memory error when I tried this out-if the author is following along, they can apparently find the error log at:

/home/sekao/nightcodersdeploy/data/308/317/hs_err_pid25822.log
Hi @wodenokoto - sorry for the lack of clarity. The Live Sessions will be a live Youtube stream held by Siraj where he answers your questions as you ask them in the session.
> and 9.3% of $256 is $23.80 per month or about $0.80 a day. This is not an abusive amount of expense for a family

I feel like this is a bit of gymnastics of the numbers. When you recast the number as "only $23.80/month" what happens is that you mentally recontextualize that around your own budget, in which $23.80 is probably negligible. For a family on SNAP, the whole point is that $23.80 is not negligible. If you have problems with hunger and under-nutrition due to lack of income, $23.80 can go a very long way. Percentages are an appropriate way to discuss the issue in this case, because they more appropriately encapsulate the opportunity costs of such spending.
This will be gamed hard by rich people to get into the U.S.

Essentially a red carpet side door if you have a slab of cash.
I don't disagree with you, but there are so many bad websites that something should be done. AMP is a really bad solution to a real problem. Walled garden pages as Facebook for companies and similars are equally bad in my opinion. Some time ago I had the idea that, maybe, the website layout could be controlled by the user, and only data are controlled by the website's owner. The web would become boring, I know, but the alternative is just as bad: broken websites.
Hey @qrco, you'll be expected to spend 4 hours a week.
OK, so use your example. The Empire State Building was 2/3 the price, took 1/3 the time, and hilariously, from Wikipedia: "The magazine Time found out in August 2013 that the Bank of America Tower used twice as much energy overall as the Empire State Building did, due to the large energy usage in the Bank of America Tower and the comparatively small occupancy rate of the Empire State Building."

Even if you want to throw in the $120 million for fixing the Empire State Building's energy efficiency in 2009, it still doesn't say great things for modern productivity.
Good share. I think I can find numerous studies claiming traffic cameras being effective and non-effective Lenin varying places from numerous organizations with varying degrees of bias. So I will refrain from that arms race.

I should clarify my opinion encompasses both red light and speed cameras.

I know when traffic cameras are used never 100% of violations caisght on camera are used. The jurisdiction has to experiment on the % of violations enforced. Too many and the public gets angry and votes you out of office. Too little and it is not a deterrent. So in some cases, these municipalities where they have been deemed not effective have neglected to do this optimization and started with a % too low of enforcements.

People just assume traffic cameras are a cash grab. But the purpose is to deter bad driving behaviour at a lower cost than having officers in the field. Fines are the stick, but if it means money for municipities to reinvest that into the city, then great. For each city, there will be a threshold of % violations enforced before it be comes effective.
Literally Hitler and literally fascism are both just bedwetting.
Hey @pchal,

We'll mainly use Python with Jupyter notebooks and will gear the program towards GPUs on AWS. We'll focus on using Tensorflow as our main tool. There will be a discourse forum as well as a slack channel for students to interact and help eachother.
The average spending per individual in the US per year is $10000 [0]. For an all inclusive insurance plan, if you have say a $5000 deductible and are spending less than $416/month per person you are contributing less to the pool than is being spent on average per individual. You're doing good, and are de-risked for potential health costs.

A healthcare plan where you get dumped the second you have a preexisting condition removes the de-risking benefit of insurance. The only benefit then left is the negotiating leverage of an insurance company able to pay $50k for a surgery that would out of pocket be $100k, lower ambulance bills, etc.

[0] http://www.pbs.org/newshour/rundown/new-peak-us-health-care-...
Will we ever solve the hard problem of information security?
They are basically different languages (calling them dialects of one Chinese language is really more a political thing -- a bit like calling the languages of Europe dialects of Latin).
Between launch/separation/landing and satellite deployment is a long coast phase of the second stage. That's what you see there. You can go back in time, though, to more interesting moments, or start watching at the very beginning.
What is TruffleRuby?

"JRuby+Truffle started as my internship project at Oracle Labs in early 2013. It is an implementation of the Ruby programming language on the JVM, using the Graal dynamic compiler and the Truffle AST interpreter framework. JRuby+Truffle can achieve peak performance well beyond that possible in JRuby at the same time as being a significantly simpler system. In early 2014 it was open sourced and integrated into JRuby."

via http://chrisseaton.com/rubytruffle/

I've used JRuby for a while, but I hadn't heard of Truffle
Just because they are poor doesn't mean that you ought to use your monetary control to manipulate how they eat even for their benefit. How about we try to educate all of America and make everyone healthier.
It would be better to get rid of the revenue aspect entirely. Instead of assessing a fine (plus court costs), just assess demerit points on the license of the diver who is guilty of the traffic offense.

With enough offenses, the person's license can be suspended or revoked.
Yep: https://en.wikipedia.org/wiki/Prince_Albert_(tobacco)#/media...
What's happening @king_kerr (Go Dubs). It starts from the first day of class which is Jan 20th.
> "The issue is that taxpayers are subsidizing the purchase of food and drinks which are known to be incredibly bad for the health of consumers."

Wait until you learn about farm subsidies.
Laracasts.com
> His only consolation can be that the trial likely cost the city more money than they collected from him.

Unfortunately, this doesn't actually affect the involved asshole cops/officials/attorneys who blithely violated the public trust: the costs come out of citizens' taxes (or services), not out of the salaries of those people. It's pretty much lose-lose for everyone except them.
you can also seek backwards in the technical live stream[0]. they have uninterrupted footage of the first stage all the way from orbit to touchdown.

[0] https://www.youtube.com/watch?v=7WimRhydggo
And you only need high resolution and high color at the fovea. Eye tracking will be the key to making VR/AR low-power and high-quality.
I recall reading your announcement here on HN. I'm using a license verification system for the cPanel Varnish Plugin (https://www.unixy.net/varnish ). I only distribute python byte code so this is where I do the licensing logic. But I know real well it won't deter determined crackers. But the licensing system and the cracking effort has to be tedious enough for folks to become conscious of their actions and their damaging aspect (more cracking leads to fewer releases leads to fewer resources leads to a dead product). At least for people with a modicum of conscience.

I also recall being confused as to how this will work with an on-premise IaaS type app. For example, I'm gauging interest for shipping "Cachoid" to service providers so they can offer it to their end users. And this is where I think Keygen could help. What kind of pricing are you considering so far?

Thanks
Feelings are complicated. Maybe he is considering it in contrast to other stuff that may not find as positive happening?
If you are asking why don't they type pinyin and leave it like that, then the reason is that Chinese, particularly mandarin, has a large number of homophones. Learning elementary mandarin sometimes felt like learning new meanings for the sounds "ma" "bu" and "shi" for two years. Despite having nearly the same pronunciation, all those syllables are distinct morphemes with unique characters to represent them, so characters are a clearer form of writing.
If you are asking why they don't directly enter characters then the answer is that some people do, but it's not as convenient. To enter characters you draw it in a box with either a touch screen or a mouse and it's quite a bit slower, especially compared to the quality of autocomplete in pinyin entry systems.
Electron considered harmful (2016)
That's nothing new, if you pay $1million (or $500k depending on the area of investment) then you can essentially get a green card as it is:
https://en.wikipedia.org/wiki/EB-5_visa
Erm, I'm using Aurora, not sure if that's nightly or between stable and nightly... I don't think it's either.
I am not native English speaker so I might be misreading, but isn't parole meant to be for people in prison? So how does this have anything to do with getting into the U.S.?

There is already something like what you are suggesting in the U.S. AFAIK, just $500k or $1M depending on the situation.
Congrats to the SpaceX team. I'm looking forward to buying my ticket to Mars... after the kinks are worked out. ;)
Yeah the server's a bit bombarded right now, I'll have to upgrade the memory when I get a chance.
I doubt it. There are already 2 programs that allow rich people to immigrate by investing their own money: the EB-5 and the E-2 visa [1].

However, these visas require that people invest their own money. This visa is different because it allows investment with other people's money. It's a big change.

[1] https://www.uscis.gov/green-card/green-card-through-job/gree...
You ought to have pulled out the ol' “Please comment civilly and substantively or not at all”, which we ban accounts for refusing.
Yes but still, at that time these SoC alone were above the rpi board price point. If you wanted to sell something aronud 30 you had to do vendor tricks with odd parts.
To late to edit but let me be perfectly clear that I am totally fine with people making coloring books etc, i just wish there was more how-to, but that might just be me.
It won't, no worries. Eye tracking in an HMD, whether AR or VR is hugely complicated from engineering point of view. There is a reason why an HMD eye tracking kit costs several thousands of USD.

Moreover, from the rendering point of view, foveated rendering is a fairly complex thing to integrate into a 3D engine too. It is definitelly not "free".

Foveated rendering is certainly no panacea.
You need to raise the money from investors with a track record of investing in high growth startups, so won't be quite as easy as writing yourself a $250k check.
If we are swapping anecdotes, my experience is the opposite of yours. I'm paying almost double what I paid 10 years ago, and my deductible is four times higher, with separate deductibles for drugs, and a smaller network of providers. Along with higher co-pays, and coinsurance now.
In this situation the parole is probably in the context of deportation proceedings.
The red (green and yellow) color of peppers is due to various carotenoids -- pigments such lutein and zeaxanthin -- which are considered to be central to whatever is particularly healthy about eating plenty of "leafy green" vegetables (and carrots). These nutrients are also highly concentrated in non 'hot' peppers like paprika. They could be involved in the studies results and really deserved a mention.
Those people can already do this, with better immigration benefits available:
https://www.uscis.gov/green-card/green-card-through-job/gree...