skysight-inc/HackerNews huggingface dataset:
> When a 0day hits, you first assess the impact, define your solution and start to work.

That sounds like a sensible approach and very much related to why I raised concerns about the original title and closing statement earlier. Someone could easily have assessed that there was zero impact (based on the first revision* of your marketing material) if SELinux was enabled and, consequently, find no need to "define a solution and start to work" - why would you update when your OS vendor explicitly says you're safe?

It would have been extremely easy to recommend your customers to install the updated packages, but you didn't do that initially - despite from such a recommendation being quite standard, and despite being notified by the people who found and fixed this vulnerability warning that customers should still update.

Instead you seem to have used this as an marketing opportunity at the expense of your own customers' security. As it turns out, SELinux did in fact not fully mitigate the issue (by Red Hat's own admission in the updated blog post and CVE).

---

* I'm referring to the first revision because the post and CVE have since been updated several times (as pointed out elsewhere in this discussion). A recap of some of the changes that are relevant to this exchange and the phrasing I mentioned earlier:

1. The title "Docker 0-Day Stopped Cold by SELinux" has been renamed to "SELinux Mitigates container Vulnerability" -- accurately reflecting the fact that it was not:

a) a Docker (it was runc)
b) 0-Day (patches were released for runc afaik)
c) Stopped Cold (it was mitigated but still leaking information)

2. The closing statement "When we heard about this vulnerability we were glad to see that our customers were safe" has been changed to the slightly more long-winded, less catchy (but fortunately also less misleading): "When we heard about this vulnerability we were glad to see that our customers were safer if running containers with setenforce 1. Even with SELinux in enforcement, select information could be leaked, so it is recommended that users patch to fully remediate the issue."

3. The sentence you referred to "Fixed packages have been prepared and shipped for RHEL as well as Fedora and Centos." has been changed to "Fixed packages are being prepared and shipped for RHEL as well as Fedora and CentOS.". Honestly haven't looked into whether the packages were actually released at the time this post was published (?), but I'll assume Red Hat didn't change the wording here for no reason - there's quite a difference between updates that "are being prepared" rather than "have been prepared".
Most popular (and unpopular, for that matter) open source projects would probably appreciate someone who wants to write high quality documentation.

A good approach might be to find some projects you're interested in on Github, and contact them to ask if they'd be interested in someone adding to/improving their documentation and project wiki. I suspect you'll find projects interested in this rather quickly. Then, contributing will be as easy as making a pull request. And that way, any potential employers or clients can easily verify that you've actually done the work you claim you've done by looking at your Github commit history.
I recently picked up You Are Your Own Gym, by Mark Lauren, which seems to be good for that.
Anyone have recommendation for replacing Lastpass? I need support for Android, Linux, and Windows. I would like to be in control of my data if possible (sync to cloud) and a nice to have would be a browser extension for autocomplete.
I think you make a good point there, and it's something that always bothered me about the typical left-right or urban-rural or facebook-echo-chamber explanation.

I do think all these things play a role, but as you say, it's not like we lived in wonderful diversity before these things.

Personally I think what changed, and the article does a good job highlighting that (which made it refreshing to me), is that the degree of our diversity (or lack thereof) has changed. In the army, or college, or church, you're forced to become close (or at least get to know somewhat intimately) many people who are potentially very different from yourself, lottery-style. There's a whole spectrum between that and the 'bubble' many of us live in these days (in part caused by the internet).

There has always been segregation, we've always had a preference for friends and social groups that are relatively 'close' to us in various aspects. What changed, perhaps, is that we now have to luxury of avoiding 'others' almost entirely, where in past, through church and army and so on, we had to have meaningful (if not close) relationships to those 'others'.
Maths. Never learned much past trig at school and would like to do some online cs courses that require more 'advanced' stuff.

Also learn how to finish things.
Sure, people will almost definitely not call them "moz-colon-forward-slash-forwadslash-a", but I could easily see a lot of people shortening the whole thing to just Moz. The :// in a url acts as a separator, so the important bits are whatever come before and after it. All there is after it is an "a" which isn't very informative, so my eyes are drawn to "moz" instead. Which isn't ideal because a company named Moz already exists and has no connection to Mozilla whatsoever.

Maybe less technical people who aren't used to seeing full urls won't have the same reaction, but in that case you've still got a problem because they probably won't already know who Mozilla is and it's kind of a leap to go from Moz://a to Mozilla without already knowing the name.
But you don't really have a distribution you have Linux Tools in Windows. I have seen some github work on switching between the Linux in Windows.
Running isn't easy for everyone. Runners seem to be a self-selecting group of people who have good biomechanics or a naturally good running form.

I had to teach myself how to run. Even though I was careful with my mileage ramp up, stretched, and worked on technique I still had to deal with all kinds of nagging injuries and still have runner's knee (patella femoral syndrome). I got my 5k down into the 23 minute range and could run 8-9 miles at a pop without getting winded. Still the nagging injuries persist. For people can "just" run it's to understand that running is really hard for some people(and not just overweight people).

That being said, running is the best. I actually enjoy doing it even with all the nagging injuries.
> If a superior officer or enlisted personnel makes a racist/sexist joke directly at me, I had no option but to take it

You could report it to their commander. If they don't listen, then report it to their commander, and so on. You could also report it to your named equality officer (that's a UK thing, probably US as well if that's where you're from), or the padre.

Formations also have their own equality officers and padres, so you can go out of the unit if you need to.
India should be able to use it as much as they want. I would imagine it would be harder to make that case for a former Axis power.
It's not oriented on the Russian market at all. Many of us (I'm Russian too) complains about Telegram not having Russian language by default. (but I don't really care about it that much because I know English very well). More over, Pavel Durov said that he won't do any business in Russia because if you don't want to cooperate with their government, you may lost your business. He lost his vk.com because of that.
These seem like little UX things :) . It'd be tough to imagine changing their core cultural tenets in order to accommodate tourists.
It's not good on mobile. I tried making it language free, and relatively easy to figure out if you explore the buttons and see what happens. The top middle number is your problem. Your task is to click on the solution. If the solution is wrong, the screen flashes red. The bottom shows statistics of how much time you spend on each problem. The top left and right numbers lets you decide what factors are chosen in the problem. The sudoku board lets you toggle showing you relevant solutions based on chosen factors.
Not sure why child post from aidenn0 is flagged dead, the way I read it it was correct and unoffensive but for what I know it might have been changed after flagging or I might have misread it.
Last I checked, ProtonMail required SMS verification for account creation.

Edit: When using Tor
Consider that a glucose molecule is maybe 1.5nm in size, while a red blood cell is 6-8µm and a white blood cell is 12-15µm. Then consider that a capillary is 5-10µm in diameter. The cells actually deform to be able to fit through.
If I think only of the WSJ in isolation, the OP's position might seem extreme, but when I consider that the HN front page may be dominated by links to various paywalled sites (because we allow them, right?) I can see how the user experience will quickly become atrocious. As a site centered around voting and discussion, it's important to make access to the content being voted upon and discussed readily accessible to a large fraction of the readers. While it may come to pass that most HN readers will have a WSJ subscription, it will likely never be the case that most HN readers have subscriptions to most submitted paywalled sites. I would support a policy that forbids submissions that require payment to read for this reason.
The first part of Your response is a non sequitur.

The problem is the workaround doesn't work for what is clearly a large percentage of this forums population
1) It's not more valuable generally speaking. For me personally, drawing and painting were things I always wanted to get better at, but didn't want to put too much time into it. I actually never made time for these activities. Now I have more time.

Painting seems to be healthier for me, because it requires me to concentrate. Gratification is slow. I get a flow feeling from it but without the addictiveness of games.

2) Right, but once I'm better, I can decide whether to learn a new skill or to keep going with painting.

My point isn't about one activity being superior over another one. My point is: Gaming is highly addictive for me and other activities aren't that addictive. Overall, I feel more balanced with no gaming. But is the same true for you? Maybe, maybe not.
"the next version will be better, promise"

I've heard that with Windows, Office, IE, and Sharepoint. I'd happily give up the esc key to avoid that hell.
>> Steve Jobs: "When you grow up you, tend to get told that the world is the way it is and your life is just to live your life inside the world, try not to bash into the walls too much, try to have a nice family, have fun, save a little money. That’s a very limited life. Life can be much broader, once you discover one simple fact, and that is that everything around you that you call life was made up by people that were no smarter than you. And you can change it, you can influence it, you can build your own things that other people can use. And the minute that you understand that you can poke life and actually something will, you know if you push in, something will pop out the other side, that you can change it, you can mold it. That’s maybe the most important thing. It’s to shake off this erroneous notion that life is there and you’re just gonna live in it, versus embrace it, change it, improve it, make your mark upon it. I think that’s very important and however you learn that, once you learn it, you’ll want to change life and make it better, cause it’s kind of messed up, in a lot of ways. Once you learn that, you’ll never be the same again.”

Unedited version:
https://m.youtube.com/watch?v=0Ydp6bR5HXw
Great idea! :) We'll get the docs updated. :)
i think people get so tripped up by this because they expect equational reasoning to work:

a = nil
b = a
// => b == nil, right? but no.

one of the devs on /r/golang posted he wished they had used a different keyword like "unset" to check for an empty interface, which would be much less intuitively confusing.

i agree all languages end up with quirks like this (can't get everything right without really using the language, and by then it's too late!), and in fact go is low on the quirk level in my opinion.

the other one i really wish i could change is that

for i, x := range foo

doesn't give x a new binding each time through the loop. Confusing, and almost never the behavior you want.
kuch bhi, khudka anecdote country pe mat dal
Samsung among many large Korean companies like Hyundai are have large family ties known as Chaebols
https://en.m.wikipedia.org/wiki/Chaebol
Yes, the fact that our military is more racially diverse than our general population is a reflection of our socioeconomic gaps. Ironically, blacks were initially excluded from the WW2 draft because "prejudiced questions about their ability to fight and worries that tensions between black and white servicemen might erupt." [0]

[0] http://www.americainwwii.com/articles/your-numbers-up/
> Add your favorite colleges to the tables in this article:

What a great idea! NYT really capitalizes on this medium and doesn't simply deliver print articles via web.
You might be right about people who believe in crazy conspiracy theories. Usually, if anybody gets really fanatical about some cause, there's nothing you can do to change their mind.

However, by being aggressive and dismissive, we are insulting people that are on the fence, as well as the opposition. They will feel stupid and will see the other side as being more reasonable and accommodating. That is why I say that this kind of comment is not useful. It's actively pushing people in the center towards the other side.

EDIT: Accidentally posted without finishing typing the comment.
We are a pretty diverse group at work and we do a lot of teasing with racial stereotypes. I think it's a lot of fun as long as there is an underlying level of respect. This is much better than the thought policing a lot of people do.

Edit: You also learn a lot about each other this way. A Latino person who grew in an inner city has a different lifestory than someone grew up in the Midwest and it's nice to hear that.
I've been doing this for a few years now, so not new, but I've always been interested in anything that could be considered a science of optimized decision making. This has included Control Theory, Systems Theory, Operations Research, Economics, Statistics, and Machine Learning.

Most recently it has been Integer and Constraint Programming, which is a typical modeling tool employed by the first three mentioned. I find them interesting because of how much progress solvers have made in the last two decades. It's amazing how often someone finds an NP-Complete problem and doesn't even attempt to try and solve it. Yet with some practical modeling best practices and modern solvers you can get extremely close to extact solutions...and sometimes perfectly exact solutions.
It's disappointing that the article leads into this as a discussion about income inequality at certain universities, when the study is branded as a tool for low income students to determine which colleges provide the best opportunity for upward mobility.

http://www.equality-of-opportunity.org/
Philosopher's Guide to Coding
sn9 Whats your weight btw? I think these goals are probably easier if you're on the lighter end. I'm 210lbs been working out for years and most of these goals seem unachievable.

I feel like these goal would barely be achievable for your average man who is 200 lbs and in his 30's or 40's without a fanatical devotion to weight lifting, a high protein diet, and probably a large supplement intake(creatine).

Even then I would be surprised if greater than 50% of the 200 lb + men could achieve a sub 20 minute 5k, do 30 pulls ups, and a 400lb dead lift.
Startup Internships and mentorship in NYC
Several years ago, if I had to choose a video game company where I would loved to work as a software developer, it would have been Blizzard Entertainment.

Now, it would definitely be Riot Games.

As player, spectator and developper, I'm so impressed by their work, the evolution of their game since the release in 2009, how they listen their community [1], try new things and, most of the time, admit their mistakes (e.g. removing the ranked solo queue in 2016) and rollback [2] or improve their changes when it's needed.

Their game is the most played game ever. ~100 millions active players every month [3].

Their game is also the most watched game ever. ~40 millions unique viewers for the finals of the last World Cup in September [4]. Hundreds of thousands of viewers on Twitch every day (without even counting the Asian region). They have revolutionized the "e-sport" in Occident. I don't play anymore (for now) but I'm still watching most of the professional games because they created an accessible, passionate and entertaining game to watch (for those interested, the new season just started in Korea, China and Europe, and tomorrow in North America [5]).

Really inspiring. Congratz Riot Games.

[1] https://www.reddit.com/r/leagueoflegends

[2] http://na.leagueoflegends.com/en/news/game-updates/competiti...

[3] http://www.riftherald.com/2016/9/13/12865314/monthly-lol-pla...

[4] http://www.espn.com/esports/story/_/id/18221739/2016-league-...

[5] http://www.lolesports.com/en_US
I could see that being the case from time to time, but saying something like "oh I went to school up in New Haven/Boston area/San Jose" seems like an obvious humblebrag in most contexts.
Nanoparticles improve melting and solidification for manufacturing processes
Swift's ties to Grand Central Dispatch for concurrency are wholly unfortunate though. I would have far preferred to see a native language take on that instead of porting GCD to every platform.
The fact that her father is tied to USAID makes a lot of sense. USAID is the soft power arm of the federal government. It exists mainly to bribe foreign leaders to gain desired policy outcomes in their countries. It does do some good things when those align with politics.

If you needed to find government patrons willing to invest in a corrupt organization and engender goodwill at the same time, USAID is not a bad choice.
There's a new Gmail phishing attack going around, and it's fooling everyone
> What vote exactly?

I'm talking about future referendums. Those can be held in any European country where either a EU-critical party wins power, or a popular demand calls for it (such calls recently failed in Finland, for example, although a referendum had it been held would never have resulted in an exit).

So to be very clear- There are no planned exit referendums, there have been no other such referendums than the Brexit vote, and without petitions or power shifts there are no such votes on the horizon. So by "What votes" I mean e.g a vote under LePen or the next Italian government.

Not sure what you think I "wish", I certainly don't hope for any such referendums around Europe.
> Each CoW triggers a page fault in the process.

Maybe I misunderstood how page faults work, but I thought this process was reversed. I.e. Each page fault triggers a CoW, not the other way around?
I was in the same situation and started looking for videos on youtube and then finally curated a bunch of good ones and put it up here: https://www.flexit.co/
As long as you have the build infrastructure to support patched versions of Python, and can run multiple ones, I don't see the problem.

When you're running at scale like Instagram, it's inevitable that you need to do stuff like this. You're just pushing the limits of what open source software has been tested for.

I think this solution is a hack in the good sense... in particular because you are taking something away rather than adding crap on top, which is the typical solution. I wouldn't be as impressed if they came up with a fancy new GC that took 18 months to write and only worked for their workload. That would be the wrong way of thinking about the problem.
Just take the original url and put it behind http://facebook.com/l.php?u=<insert WSJ URL here>

Confirm the facebook warning about the redirect.

EDIT: Check your local law first. I've just noticed during research using facebook that i don't get the paywall coming from there. This is only a proof of concept, if you want to read WSJ, than you should consider paying for a subscription.
Bittorrent's DHT is used that way now, it's probably the biggest public DHT deployment in existence, all a magnet link is at it's core is magnet:?xt=urn:btih:<infohash>, so just having an infohash of a torrent is enough for you to get its content.

Of course, there's also IPFS, Zeronet and Freenet which all address this exact issue in slightly different ways, all more web-targetted.
Who cares... Mozilla gets more and more irrelevant by the day. Since its clear the leadership is completely ineffective but someone manages to not be replaced, its pretty obvious Mozilla will continue its downward path.

In a real corporation this entire group would be replaced based on current and recent past performance.
https://www.mozilla.org/en-US/about/leadership/

Such a shame.

EDIT: Not surprised to see people trying to censor my comment as opposed to addressing the dismal leadership that somehow avoids all accountability.
Love the idea, you can may be add YouTube link witg the result to show how to connect the two devices.
IJR (Small Cap Index) Is Down by 50% According to Yahoo Finance
I believe most models will refuse to turn on any washlet function if there's no pressure on the entire seat (not sure exactly what the predicate is, but something along those lines). Certainly my model[0] in SF is that way.

[0] - https://www.amazon.com/gp/product/B007HIKPQC
IPFS doesnt use bittorrent. Its bittorrent like, bitswap, with some "new protocol in town problems".
> I don't think you're suppose to depend on the ordering of dictionaries. It's an implementation detail which might get changed, although it wont actually ever be changed because people will come to depend on it.

I came here to make the same distinction - though I will say I hope you are wrong about people coming to depend on it when OrdereredDict is still there for a reason. The docs still plainly state that Dict should be considered un-ordered and do not make mention of this implementation detail (nor should they).
I see.

But to the point of the article, what about the polarization that existed before the rural/urban divide?

I mean we can go all the way back to slavery, and we still see great divisions recorded in our history. I think people naturally segregate themselves into, "tribes", for lack of a better word. The internet is just one, in a long line, of technologies being used to manifest these divisions. Long before the internet, we had the printing press. Even though we had the printing press and access to many, many books...

the Bible was a good deal more popular in London than the Koran. And Uncle Tom's Cabin was far more popular in the Upper MidWest than in the South.

My own opinion is that every technology can be used to make the world a little bit more personalized. The internet is just another one of those technologies. People are always segregating along multiple axes and dimensions. Urban/rural is only one. And not even the main one. For instance, the religious/non-religious axis is an important one right now. Add to that the fact that all of the different races are always segregating. Additionally, there is STARK segregation along the rich/poor axis.

All of our technologies are being used to serve these divisions, but they are not CREATING the divisions in and of themselves.

At least, that's my two cents.
That's not quite right, in that at least the person you are reply to gets an orangered notification (and how I wish HN had this) so, although everyone else may disapear, you may find yourself having a prolonged conversation with that person.
> I've tried getting into C and C++ a couple of times in the past

You just proved my point. You did get into C and C++ before trying Rust.
I made an account this month and can confirm this is false. The only external info they ask for is a recovery email address, which was optional.
Morphis is supposed to provide something like this: https://morph.is/