skysight-inc/HackerNews huggingface dataset:
> I didn't know about :r in combination with !

You can even use :w in combination with !. For example

:w !xclip

to write the vim buffer contents to the clipboard. You could visually highlight part of the buffer and do the same thing for just the text you want.
Drone crashes into Space Needle
Why are you saying that Apple will not update bash? Wouldn't that be in the best interest of its users?
Meat is best while eaten still alive. Seafood in particular.
Speaking of zones of death, I was recently the (unsuccessful) target of a credit card gathering scam—on a Twitter ad, pretending to be Twitter.

https://twitter.com/bcjordan/status/819894043870105602

Multiple users actually entered their CC #s, two canceled them after they saw my reply to the tweet warning users.

Incredibly, Twitter has still not notified the scammed users about it despite removing the ad after my report and multiple tweets to support requesting they notify the affected users.

The fact that they allowed that ad to get through (essentially profiting from users identities and financial information being leaked?!) is just unbelievable, separate from their failure to protect/notify the users affected by the scam.
I agree here. Over the holidays I was speaking with a sister of mine, she recently finished her undergrad degree and moved from working in a salon (all women) to working in an office environment with a very strong sales culture (~90% men).

She made the observation that she enjoyed working in a male-dominated work place more so than the female-dominated work place and gave several reasons relating to social dynamics.
E-Marketer Tools – 2017 Edition [infographic]
Sure! What email address can I send the invite to?
Really? It's Let's Encrypt...
I'm not referencing Moore's Law at all, nor am I hinging my argument on a single piece of input. I'm simply using decades of historical data to claim that it's more likely to continue downward than upward. Would you mind providing some data points that explicitly or implicitly predict an upward trend over the next 5-10 years?
Personally, I found the following to be extremely easy and powerful. A no-brainer that should be a bash default really.

if [ -t 1 ]
then
# search for commands that start off with the same characters already typed
bind '"\e[A":history-search-backward'
bind '"\e[B":history-search-forward'
fi

One of my friends also recommended version-controlling your config files and storing them on gitlab, which I'm only sad I didn't do sooner. It's been such a help in keeping my aliases and configs in sync, as I make changes across numerous different machines.
This article is spot on, in my view.

More technology in our current economic system only reduces the overall number of 'good' jobs available, creating more inequality and increasing the divide of the haves and have-nots. Technology may not be inherently a bad thing, but when you combine it with an open global economic model built on unchecked capitalism, it will eventually create a distressing situation for many.
Better question is what is c0nfused showing that your brother isn't? The specific app between the two of them is important, but also everything else. From the headset hardware; at the extreme ends; Oculus vs Google Cardboard. Also important is what add-ons they both have - seeing your own hands inside the
headset is remarkably important for immersion, which is kind of the point. Also important is the level of preconfiguration - if the number of times the presenter says "wait hold on", and then goes to futz with the settings for 5 minutes isn't zero, then VR is a total turn off and, eugh, I don't want one. The cables going to the headset are critical as well - wireless isn't here for VR yet, but if there are multiple tangled cable messes rather than a single zip tied set of cables, I'm not going to want one in my living room if it's too complicated to put on and is just gonna be a mess in my living room.

It's entirely possible the two crowds being presented to differs by that much, but there are so many other variables in play too.
Some clown crashed a small drone into the Space Needle. At the time, workers were setting up a fireworks display there. The drone missed a fireworks array by about one meter.
Bad place and time for bad drone operation.
Can you comment on the substantial redesign of the GIMP that will be in the next major version?
Because it is meant to control machinery we provide two different update ways. Manually uploading firmware and second option when customers distribute from cloud and schedule restart procedure. Do automatic updates are not a option.
Yes, you are right. However, when I calculating risks and protection/price ratio, I see no difference. System with `setenforce 0` is equal to system with the rule for first two significant digit, because root password is most significant and risk of attack through webui is same and high too. Other risks are less significant than that and SELinux does not reduce them significantly.
your illiteracy is not HN's problem
Common JavaScript functions with Lodash
I do both embedded development (day job) and web development (night jobs(s)) and it's not that embedded tasks are simpler, it's that you don't have to deal with a ridiculous stack of third-party code that is constantly changing.

With an embedded system you know and control every component of the system, right down to the CPU bugs, and as a result your application code is much, much simpler. You can reason about and understand everything; there are no black boxes.

The safety thing is not a big problem in practice. Your companies have lawyers, regulatory teams, risk assessors, standards and code reviews. You will thoroughly test everything to ridiculous detail (in my experience, 30:1 ratio of test:production code). Mistakes happen, but by the time they manifest in reality so many people will have had a hand in it that you won't feel personally responsible.
That is dirty shortening the yellow duration, I certainly would not support that.
My bad, sorry. Unflagged. Wonder why Chrome doesn't trust Let's Encrypt, though.
Aid in reverse: how poor countries develop rich countries
I have heard about Pippin before, and he and Mitch (another well known GIMP developer) confirmed on IRC that the campaign is legit.

The campaign is also listed here http://pippin.gimp.org/ - in the header.
Grabbing a few of the popular dynamic languages from the TIOBE index: Perl, PHP, and Ruby are also generally slower than JS. FWIW, neither Scheme nor Lua appear in the top 20 of the index, and of the dynamic languages in the top 10 — JS, Python, Perl, and PHP — JS is the fastest. I think "most" is a fair description, even though dynamic languages that have faster implementations than JS do exist.
Yes it's a real vulnerability. Edward's phone is reencrypting the message with a new (malicious) public key without Edward's permission. It's not clear this would be a very practical attack, but it's definitely something that Whatsapp should stop if the extra security mode is enabled.
They are verifiers who cannot, with straight faces, declare a body of code verified.
I don't understand how this is React based. React is listed only as a dev dependency, and when asked if JavaScript code is included in the framework, the project says -

> No. The Lightning Design System is a pure CSS framework that you can use with any front-end development framework you’d like, including Salesforce-specific technologies such as Visualforce and Lightning, as well as third-party frameworks like React or Angular.

React just happens to be used in the framework's tests, seen in the repo here - https://github.com/salesforce-ux/design-system/blob/master/t...
I think the past few days of back-and-forth about this issue have made a few things clear:

1) The double-check was not widely understood as an indicator of any particular security state prior to the attention this has gotten.

2) Is it fairly easy to imagine a scenario in which the behavior of WhatsApp can be readily exploited - think of a journalist on the ground in Tahrir Square using WhatsApp to report on conditions, neither expecting nor receiving replies or confirmations, perhaps for hours at a time.

3) The matter of whether this is a "backdoor" or not is contentious, but also not terribly important to the stakeholders.

4) Moxie wholesale approves of the WhatsApp implementation.

5) WhatsApp does in fact provide substantial security for a common and important use case.

So, where do we go from here?

I think that those of us that care about freedom in the information age well-advised to remember that Moxie has done incredible, substantial, and landscape-shifting work in this space.

Nevertheless, I also think that Moxie can provide a few more details and thoughts that will be hugely helpful to the community in thinking through the coming years of IM security.

Specifically, I will quote the comment I made in the other article, addressing Moxie directly:

Moxie,

I think it's fair to say that you are the world thought leader on these matters right now.

One thing that the rest of us are wondering right now is:

> (Quoting Moxie, in response to my comment) I've been impressed with the level of care that WhatsApp has given to that requirement.

To what degree do you really know that? Is there a place where we can read about your interactions with Facebook, the level of access they've given you, and the degree to which they have allowed your recommendations to shape the contours of their implementation?

Nothing less than the strength of dissent lies in the balance of questions like these.

> I think we should all remain open to ideas about how we can improve this UX within the limits a mass market product has to operate within, but that's very different from labeling this a "backdoor."

I agree that the jump to scary terminology is dangerous.

However, at the end of the day, I think that many of us have been trying to make a simple point that shows that there is a sort of crossing of that line:

WhatsApp claimed that they were simply unable to intercept communications, and now we find out that, without any user interaction or approval, messages which haven't received the "double check" are re-transmitted when a new key is generated.

So look: nobody here is trying to diminish your tireless work and your accomplishments in bringing freedom into the information age.

But there are nuances here that are important, and fleshing them out is a big part of what this community is about.
My personal favourite trick with ":r!" is, in a new buffer, running

:0r! grep -rn $pattern $path_to_directory

or any other command that outputs lines containing "$path_to_file:$line_no" (eg most linters).

With that output read into a buffer, placing the cursor anywhere in the "path:line" part and hitting ^wF will open that file in a new split window, and jump the cursor straight to the indicated line - or you can do ^wgF to do the same in a new tab page.

It's a very handy way to work through a big list of work items spread across many files. You do need to coax the right format for it out of your tools, but fortunately "path:line" is pretty de-facto standard.

(Incidentally, I do ":0r" so it inserts the read-in lines at the very top of the file - just ":r" in an empty buffer leads to a leading blank line, which I find irrationally annoying.)
Well, from what I see here: http://zsh.sourceforge.net/Doc/Release/Zsh-Line-Editor.html#..., there's no predefined function for Emacs mode (I could only find the vi mode one: vi-find-next-char).

On the other hand, if you look at the whole widgets section, I'm pretty sure you could hack it yourself since zsh supports used defined widgets (widgets are basically functions used by the zsh command editor).

I never said that it's easy, just that zsh is basically a bash superset. However that does mean that in some occasions this means that you want a Prius and instead get a Ford Mustang kit that you have to assemble yourself :D
Speaking as a alcoholic with some sobriety, those laws were little more than a speed bump when I was drinking. I drank as both a child and a homeless guy with little problem.

I'm not saying those laws shouldn't exist, but they serve as a source of revenue, not as something that protects the public.
>until auto-generating password managers gain mass adoption, this vulnerability will always be around.

When auto-generating password managers gain mass adoption, there won't be much point to cracking password hashes. Presumably, one would use a different password for everything in that scenario, which makes the clear text password basically useless anyway.
i have followed many of discussion on esdiscuss and unfortunately they were not paying much attention to performance, all too often the argument was: we need to get semantics right, thinking about the performance is the job of browser makers:(
Uhh, if you want a bad experience from a closed source blob, CedarX is your go to. Cedrus is the fully open VPU driver I was referring to, with H265, VP8 and H264 support.

http://linux-sunxi.org/Cedrus

Mali is still closed source, but GPUs in general are in a poor state for open driver support. Luckily you don't need GPU drivers to bring up Xorg on HDMI on Allwinner chips, so unless your playing video games, it is a non-issue.

Their code dumps they have cleared up the licensing on as of late, Tyle from Allwinner did make clear that everything that isn't explicitly licensed in the file itself is under GPLv2, and that that was Allwinner's original intention. The fact that they are ancient BSP kernels is sucky, but the community is making these sub-$1 SOCs run circles around the other SBCs.
The default key bindings in bash are listed in the readline section of the bash man page (they mostly match the emacs key bindings).
People also die due to disease contamination of the blood supply when you pay. Donation only blood supplies are much safer in the short and long term, until we can manufacture a replacement.

Sure, right now we gave good tests for most diseases, but the next AIDS has no test making the long term risks real.
Demonstrably not true in absolute terms in many cases, or as a percentage of income in others.

Spend 15 minutes talking to an accountant on the premise that you don't want to pay any tax. If you've got enough cash, that's not a problem, anywhere in the World.
The ESXi servers by default regard your SD card as read only media, so normally they should not fail easily.
An entirely different but similar issue is logs. If you aggregate logs in a simple, unstructed text file, then it becomes pretty easy to add faked log lines, or, if they're viewed in the terminal plain-and-easy, embed VT control characters in log lines that can hide other log lines. And with creative use of Unicode one can also often confuse readers.
From the article:

"Not all processors are designed this way, some designs,known as random logic, the op codes control the actual hardware directly"

An interesting note is that the name "random logic" comes from the fact that when you look at a photomicrograph of a hard-wired CPU design you don't see any discernible geometric patterns like you do on a microcoded CPU.
Customer Wants a Full Price Breakdown
dom0's comment showed what you meant. That's a much better auth dialog.
Uhh, the H3 has supports TrustZone and has an efuse that is unset but can be burned with a signature, so its supportable in that regard.
I like that idea.

OpenWhisperSystem's response was that due to the delay involved the (potentially compromised) server would know who has enabled notifications/blocking and who hasn't.
If your inner communist wants to see reforms, it should think economically. One can't ignore incentives.

The core intuition is that rents will go up, but not by the full six pence - perhaps only five. The landlords will be unable to extract the entire surplus. The people will have slightly more money, which they can save to gain that negotiating power you're talking about.

However, the monetary policy of USD directly destroys this natural rising. Instead of accepting that slight deflation is natural [0], deflation has been cast as a bogeyman [1] and banished at all costs. The result is massive monetary base inflation to keep the CPI rising, which precisely affects the areas where new money is injected into the consumer economy - anything which can function as collateral and thus be financialized. So cheaper life necessities that should be a boon (eg Walmart) simply cause rents (landlord or bank) to rise fully in compensation as a matter of policy.

[0] In the steady state, both technological progress and general market competition should lead to continually lower prices - a lower price is generally how one wins out in a market.

[1] In the days when communication was slow, price signals were a comparatively large portion of all market coordination. A slowing down of purchasing meant also a slowing down of communication, causing a positive feedback loop as people doubled down on their expectations. Contrast with computing devices which have developed rapidly enough to even outpace the forced inflation - we've all delayed purchases of new devices for a year or two until new tech came out, but despite the promise of an even better deal, eventually our present utility function overrides future savings and we upgrade.
Disintermediation itself isn't tied to the creation of an underclass, rapid technological innovation destroying jobs might be but that's something we need to solve with welfare (and Americans are really going to have to get over their brainwashing that accepting government aid makes you scum). Literally the alternative to redistribution is making everyone poorer and manipulating the system so that factory workers can feel like they're worth the money they're paid. Eg. Brexit/Trump - protectionism.
There's a huge difference between having a generic signature for every comment you post and disclosing an affiliation that adds validity to the claims made in the comment.
Intentional. The other ship is named Just Read The Instructions.
I don't think you read the post you replied to in full. He stipulated that the current testing methodology is good enough to prevent any death from blood purchasing.
You can also put those in your ~/.inputrc
That would have been my guess, but I didn't want to make assumptions about the Snipshot acquisition.
"I used Fedora from 12 to 21 (? I think) and always left SELinux enabled, and it just works."

I've had all sorts of weird errors over the years when I set up new CentOS machines.. one thing or the other. And then I remember to turn off SELinux, and it suddenly works. Over and over again.

It's going to take a lot of convincing to get me to leave SELinux on when it's caused so many problems over the years.
+Lo+by+Roelof+Gootjes+
That is exactly what I meant. The theory that w/o Chinese, makes languages like Korean/Vietnamese 'worse', is a myth constructed by some sino-centrists. The decision to keep or deprecate Chinese characters is political, but people find their way to adapt and evolve with the new language.
The Design and Use of QuickCheck
You are missing the point entirely, and being exactly the kind of person I am complaining about.

Buying plasma doesn't hurt anyone. It doesn't make the poor worse off. It's certainly not "exploitation". And it's doing more to help the poor than the vast majority of people that don't do anything.

There is a problem in the world, that people are poor, desperate, or in need. But the plasma industry didn't cause poverty, and they aren't making it any worse. If anything they are making it better, if only slightly.
If speed limits aren't set based on a real world survey of organic driving speeds on a given road segment then they are 100% arbitrary. In the vast majority of the U.S. it's just a number that a bureaucrat picks for any number of reasons that aren't related to actual safety.

Anyone complaining about speeding on this thread needs to spend some time reading up on the available research. For example, on the highway the drivers with the lowest accident rate tend to go 10mph over the limit. There are many more findings along these lines that should piss off any safe driver that likes to go at an appropriate speed for their own vehicle/reflexes/conditions.
BioBike (originally BioLingua & BioLisp) has had a full CL, incrementally compiled, cloud IDE since ~2002. It was also pre-loaded with tons of bioinformatics software and data, statistical software, and a theorem prover. The concept was for biologists to use it. Some did. [Edit: And it had a precursor to clojurescript, called lispscript, due to Peter Seibel.]
I guess that the low bandwidth is the cause of JackPair [0] silently failing on Kickstarter... Which is a pity, I really cheered for this project.

Does anyone know of any acoustic coupler implementations that actually let you smuggle data over voice?
Seems like Facebook should start testing, turn on security notifications for 1% of users, see what happens
Math Journal Price Survey, Based on AMS 2008 Data
Here might be something to look for among those advisories: how many of them were discovered in the source versus in the field.

If the vendor is lazy about verifying code, it being closed is a big disadvantage. "We're not combing the code for bugs, and neither is anyone else; if it's not reported to us, it doesn't exist."
Which is interesting, since the English "pensive" (being engaged in deep thought) comes directly from French "penser". The parent Latin word also means to consider or weigh (which also gave us "pension", essentially payment by weight).
Believe it or not, some people are averse to charity or even oppose charity on principle. In many cases, it could be argued that charity sustains poverty [0] and that it would be better to endeavour to eliminate poverty entirely. One phenomenon that most dismays me is cultural capitalism [1]. This is a big part of the problem.

[0] http://www.bbc.co.uk/ethics/charity/against_1.shtml

[1] https://www.youtube.com/watch?v=GRvRm19UKdA
I'll bet some of them can.
Do you have a PoC? Even if you don't, please add the information to the security@opencontainers.org thread. I'm guessing that it would involve overwriting program code before the SELinux policy is set by runC?
Oh yes, the good old american "Why don't you pull yourself up by the bootstraps?"

Do you honestly think this person hasn't tried. And do you honestly believe that just because he spends his evenings on HN he's not a stand up person?
Commit logs of GEGL show he's been an active developer for a long time: https://git.gnome.org/browse/gegl/log/?ofs=1050
A Comparison of Taiwan and Malaysia in Negotiation Styles [pdf]
That seems correct. On my FBAR I have to report every foreign bank account I have and the highest balance each account has had during the year. I've never had to report individual transactions and have not ran into any problems with my banks.
Why have a common pool in the first place? To save the cost of individual pools? That can't be much compared to the overall costs.

More likely you share a common cooling system between reactors. And maybe containment?
Hell, SpaceX wasn't a trending topic on twitter less than 2 hours after the landing.

Humanity holds the record for the fastest awe to yawn delta.
Don't fall for it, this smells of Russian propaganda.
https://www.gnu.org/philosophy/who-does-that-server-really-s...

GIMP is free software and ethical. Paint.net is the same rental model that Photoshop is now using and is completely against the public interest for us to put our resources into that sort of business.
Thinking back of all the times I rage quit GIMP; I'm compelled to read his proposal.