skysight-inc/HackerNews huggingface dataset:
No, from talking with some of these engineers, I'm pretty sure it's completely intended.
Actually, the default Red Hat SELinux is exactly for preventing network vulnerabilities. Local users are unconfined.

Example: your web application allows remote code execution. Even the default rules prevents most access (spawning a shell etc.) and generate lots of alerts.
100 works of contemporary literature by muslim writers
The best thing Microsoft could do for .NET is give LinqPad away with every copy of Windows.

I'm hesitant to suggest they buy it out though.
You are correct. I'm not sure what the eventual pricing strategy will be.
And the worse part: by driving them to their friends' houses, it's implied that you need to like/approve their parents. During my childhood I could befriend kids whose parents would never be friends of my parents. The actual status quo intensifies segregation.
Can confirm as I am from Bihar, India, children eat lots of lychees in the season (also lots of mangoes), even many adults eat just lychee the whole day without any other meal. Seizures were considered as being possessed by demon which explains lack of research and delay in this discovery.
Exactly. They've made mistakes, and can recover from them.

The other hasn't had that chance.

Thus, try the first, as it is better tested in the world.
> Say I have my own binary running as a service

The default SELinux policy is "targeted" - this means that is has to be enabled for each service you want to confine.

Unless you explicitly switch it on, your service will run just fine.
I hate dogs.
Pink code highlighting? :)
I see this being the first step as a multi-year transition away from Intel, rather than some sort of merger of iOS and macOS or a sudden architecture switch like PowerPC to Intel.

For now, the ARM will be a low-power co-processor handling a few tasks via specially compiled extensions. However, as Apple continues to iterate on the AX processors, and they, along with developers, figure out how to move more stuff onto ARM, the role of the Intel chips will decrease until they are the low-power co-processor running only legacy stuff which can't be easily ported or emulated. Until one day they just go away.

It makes sense that they'd want to own their core processor tech – they've got the talent and in a few years time will have the technology. It seems that each architecture change they've made has been driven by a supplier not being able to deliver, from Motorola with 68k to Motorola (again) and IBM with PowerPC and now Intel.
Politeness and intelligence/knowledge are not mutually exclusive traits.
I think the CU constabulary are largely ceremonial nowadays. The Proctors are still responsible for a bunch of disciplinary things, but probably not legal matters (more like exam rules, plagiarism and keeping a vehicle in Cambridge).
same here. my only gripe is that it seemingly doesn't support firacode (https://github.com/tonsky/FiraCode)
Even MI5 get the police to actually make arrests - there are a few other organisations are armed the Nuke police and I suspect MI5 and MI6 must have PPW.
So, this is a guide about how you can configure a broken out-of-the-box security framework, trying to convince me to enable it?

Thanks, but I'd rather start from something that works, and build adding security from there, not viceversa.
The PM, Dev Managers & Scientist jobs are not showing. Are they posted anywhere else?
Gnome-Keyring does not use the kernel keyring facility (correct me if I'm wrong).

It also doesn't limit access in any way. Anyone who can connect to the keyring socket gets access to everything. How is this better than storing it in files?
Remember that HN is not a single-minded mob, during each incident a particular group was vocal on a given subject but that group may not have been the same individuals who were vocal each time.
I never was overweight, but tried to lose weight for the aesthetic reason. 3 kg of fat can be a difference between "no abs" and "visible abs".
It's not hard, you are just making some extreme mental gymnastics to say what you want to say.

If governor of texas stops following federal law, then US has federal institutions which will arrest such governor. In that sense, Texas is not soverign, because it HAS to follow US federal law. It doesn't get any choice in that matter.

On the other hand, UK can just say they won't follow a certain EU law, and absolutely nothing will happen. EU won't come to arrest Theresa May, or send troops to occupy the house of commons until they agree to follow EU regulations. It's a voluntary union, with zero threat for not following regulations.
Thank you for that, that might be helpful in the future!

But it kinds of demonstrate my problem with SELinux: when I had my unix socket issue I tried to debug my problem using my usual tools: strace, ls, ps, dmesg, etc... but I couldn't figure out what wasn't working right. All the permissions looked fine and yet I kept getting cryptic failures.

With something like a jail, once it's set up I can just use my un*x admin experience without having to learn a brand new OS-specific (if not distribution-specific) set of tools.
High-Precision Secure Computation of Satellite Collision Probabilities (2016)
Windows RT and ChromeOS have both supported ARM for a while. In the case of Windows, adoption is low because not all applications work on ARM. Apple would hit the same problem initially and would have to wait for application developers to distribute ARM versions.
Yes, but if you look at the average here its not really outrageous or "5 times the average salary" as you said, here:
https://www.indeed.com/salaries/Gitlab-Salaries

And its not just me, they've done this in the past as well:
https://news.ycombinator.com/item?id=10924957

Also when you work for a remote company, they are cutting cost in terms of office and all which should reflect back in the salaries, the whole idea of working remotely was to mutually benefit both the employeer and employee and not just gitlab using their whole startup argument to cop out when they want on that "truly remote" so-called transparent company.
How to Turn Your Passionate Customers Into a Source of Revenue
Top 5 ECommerce Website Design Trends in 2016
in a few distros, they hack it together using "ssh agent" . You can read about it here - https://wiki.gnome.org/Projects/GnomeKeyring/Ssh

AFAIK - its the same story on OSX. I dont begrudge openssh - I'm not sure how it would work with multiple systems, but I dont know if it was ever a priority.

But in this day and age of a "reloaded" Lavabit... these are infrastructure decisions that must be solved !

Interestingly, for all the hate that Lennart gets, he refused to implement "systemd-keyring" and suggested people should use the kernel level keyring service that already exists [1]. You can test it out using "keyctl". Remember however, that IMHO kernel keys do not persist across powercycles.. There is some kind of funky interplay between ecryptfs, kernel keyring and gnome-keyring that I dont completely understand (and is the basis of encrypted home directory in Linux)

[1] https://lists.freedesktop.org/archives/systemd-devel/2014-Ju...
I'm going to try to put my finger on the nature of your comments that's troubled me for quite some time.

A key element that's lacking seems to be the principle of charity: seeking a sympathetic understanding of an idea presented, and interpretation of ideas in their most persuasive form.

I don't believe I've ever seen you do that. You might care to give it a thought.

http://philosophy.lander.edu/oriental/charity.html

I'll through your questions back at you:

How is Greek Fire unlike a hydrogen bomb? How might considerations of these be different? What else that shares elements of what a hydrogen bomb is, or does, still substantively different in a way that would not require some sort of regulatory treatment?

Why is it we pass laws, generally? What are the hallmarks of a good, or a bad law?
SELinux is the least likely part of the kernel to contain a NSA backdoor :-)
Show HN: We ported an entire game development IDE to the browser
Maybe if you spend all your time outside, you've got less temptation/time to snack and thus consume less calories ?
"Hacker" News
Well as long as they ditch USPS I'll be happy. I really want to support the idea of a federal postal service, but it consistently sucks in comparison to UPS.
Reproducible science for people who don't code – an idea
OT: For what it's worth, the "web" link to do a google search of the article no longer brings up search results that show the whole article.
This is one of the most fascinating "how the sausage is made" posts I've read on HN.
Nutmeg | www.nutmeg.com | Vauxhall, London | Full Time | Onsite | Full Stack Web Developer, JavaScript Developer, Senior Java Developer | emilie@nutmeg.com

Nutmeg is an award-winning online FinTech company. We are transforming the industry by building intelligent investment portfolios for anyone with as little as £500 to invest and our growth continues at an explosive pace.

We are looking to enhance our team with the addition of Engineers, specifically Java, Front-end / JavaScript and Full Stack!

This is a fantastic opportunity for an Engineer to join a progressive environment, to be a part of a growing company which can offer development and exposure to greenfield projects.

We run a pure AWS-based cloud environment and deliver features using a continuous delivery approach. Our continuous delivery capability means that we are actively working to make sure our test infrastructure is as fast, automated and comprehensive as possible.

This is a challenging role with great rewards and we are excited for what the immediate future brings - get in touch with me for details: emilie@nutmeg.com - https://www.linkedin.com/jobs/search/?keywords=nutmeg&locati...
If you know how in a way that actually works, I'm all ears. WSJ seems to rarely, if ever, work for me googling the titles these days.
Show HN: Avion FS  crossed 5M+ downloads with $0 spent on UA/marketing
ReactJS or VueJS: Which Is Best for Your Project?
Maybe if multiplexing in Rouge Mode it works?
Not everything that matters in life is captured by our economic system. If you have kids I can only hope this will become clear to you.
It's honestly not the most important limitation of Terminology (except maybe to you). It doesn't support re-ordering or renaming tabs. It doesn't support searching into scrollback. It doesn't fetch terminfo data.

It's still the best terminal emulator out there. Incredibly fast in software-only, even better when hardware accelerated, skinnable and configurable.
The facts that:

1. The package has only one maintainer.

2. The package requires heavy maintainer intervention.

3. Shit's on fire, yo.

All suggest that whatever it is that SELinux is meant to be a solution to, it's not a particularly good, or compelling, solution.

Stuff that needs custom wiring for every single package (and at last count Debian was in the 50-60k packages range, though a fair number of those are extra, source, and documentation packages) suggests ... issues.
A program that detects shell commands that you often use together and makes intelligent recommendations for automating your workflow.

Very naive example:

- git add .

- git commit -m "Some commit message"

- git push

Becomes: newcmd . "Some commit message"
Well, you get that with any security technology and it's just one of many things to be aware of when you use another distribution.
> I have made many mistakes since, just never the same mistake. And with the years I take better and better precautions, scale horizontally, test backup restores etc. But mistakes still happen, just don't panic, and don't try to be the midnight oil hero :)

Perfectly put. Thanks for sharing.
The Sydney Train Carriage Problem
Previous company had a couple large programs, all in VB6. Back in the Windows 98 days, one of the accountants literally bought a copy of "Teach yourself Visual Basic in 21 Days", and wrote the first version of one of these programs. He had no formal computer science training or other programming experience.

Well, other people in accounting borrowed the book and built more and more features into this program, and created a couple other similar programs.

At no time did they consider 'maybe we should bring some real programmers into this' or re-write any of the code, and now they're stuck on this code and they have 4 'very bad' programmers working on it. It's a huge buggy mess with every bad programming practice you can think of.
Try spartan way for vim too. Used to have huge list of plugins and exotic vim hacks in my `.vimrc`, nowadays ain't even using plugin manager. `:colorscheme blue` and off you go.
Probably they cut cost by hiring a group of really incompetent set of developers because they are a "startup" and "transparent" and "its ok". Nothing could make state of the company more "transparent" than that. xD
I think UK universities mostly include limited security in their general pastoral support, rather than having dedicated security guards. So there's someone who can e.g. ask a stranger loitering on campus at night what they're doing, but anything serious will be handled by the police.
Never having touched VB.Net, that makes me kind of curios: Would you care to name a few of those features?
you haven't mentioned anything from your background, most of them are app based. you can find my email on my profile
What, do we use the Electoral Popularity College now, too?

And Trump actually got amazing positive opinion polling 6 months ago. Now that it's not in his favor, though, ignore?

And you can absolutely win an election with both minority vote share and a lack of popularity.
I see it as more of a temporary compensation for earlier gender based biases.

In a world where boys and girls are given the same opportunities at (even) younger ages, you wouldn't need something like this.

As it stands right now, it is intimidating for a girl to sign up for her first computer science class knowing that it will be full of boys that have been encouraged to do computer sciencey things from an earlier age. There is the perception that the girl will come in at a disadvantage.

Allowing a them to sign up for a class with the perception that they all have equal footing/previous knowledge could give them the confidence they need to join the classes with boys that are perceived to have more experience.

When the time comes that girls are signing up for computer science classes at the same rate as boys, then classes like this would no longer be necessary.

That being said, public schools cannot create X-only classes. There is no discrimination in which students can signup for my computer science classes and I have unfortunately low female enrollment.
Great work Scirra!
Unless you linearly scan the whole binary all the time, your CPU makes sure that only the stuff you're currently using is in the cache, so only the data your hot loop is touching.

You could easily see that your assumption is wrong by observing that a typical C application is not 1000 times faster than a typical Java application.
Didn't know about that feature. The bypass worked for me, but maybe that's because I don't really use it all that often.
Computer science is like a self-devaluating industry.

We have tons of websites dedicated to teaching our trade, most of them for free. We actively encourage everybody to learn to code, and tell them how easy it is, and how it makes you a better person. We say schools should teach everybody how to code.

Do you imagine medics, attorneys, engineers, etc doing the same things about their own professions/skills? "Yes I'm an architect... yeah but you should learn the same skillset, this thing I do is super easy! Everybody could be an architect easily!"

Of course corporations like this: more coders! Cheaper labour! For example I found this video disgusting while everybody else applauded the effort:

https://www.youtube.com/watch?v=nKIu9yen5nc

Do you really think your (our) skillset is worth 0?
Take it further. Why are you a shareholder? Why are so many people shareholders? Investing for retirement is pushed heavily and incentivized by the government but is it for our own good or is it to provide liquidity in the financial game? If you are pushed to invest then you have skin in the game and are a shareholder who wants to increase corporate profits. This puts you almost directly at odds with all non-shareholders who are negatively affected by increasing profits.
It takes you 6 months to read two books?
Executive Order: Trump Wants Silicon Valley to Hire Americans Again
And at work, we're now rewriting all those NodeJS services in Go or Java.

We hired some Node maintainer(s) a long time ago, rumor has it, who got us on the Node train.
It's important to understand that SELinux has ceased to be a pure-NSA development for a long time. For that matter, it has spread far beyond RedHat as well.

Anyway, though I get the sentiment, SELinux is a great example of leveraging OSS regardless of whether you agree with the creators or not politically. That's a win for OSS in general because it means we don't have to like (or maybe even trust) each other to benefit mutually across the net.

The best arguments against SELinux are purely technical because there are alternative ideas about how such a system could be implemented (see: App Armor for example).
I once run a dropped domain catcher. Some evening I was fixing a problem, when the "Dinner is ready" call came from downstairs. Wanting to save some time I started a test run and went to dinner. Coming back from dinner I realized that I did introduced two small errors. The if else deciding if the script is in dev mode was wrong and the calculation if a dropped domain was worth buying was buggy and resulted in a "yes, buy" everytime. I didn't had a credit card registered and only had a few hundred dollars in my prepaid account at the registry, which saved my ass.
Ask HN: What is a good source of news for Fintech related stuff?
If you've really got something groundbreaking here, you're going about selling it in the totally wrong way. As you say, your most likely customers are banks and financial institutions. They are not going to buy something like this, and introduce a major new concept into their business process, by clicking the "buy" button on your website.

You need to convince them to implement the new process (secure multiparty computation) before you even begin selling your product.

To do this you need high touch sales, for high prices, to a small group of big clients. Go to New York City, setup some meetings, and get in a room with decision makers. First, sell them on the advantages of secure multiparty computation. Show them a nice demo of a scenario they can understand. Then, once they're sold on that, sell them your product for a few million dollars.

You should probably raise capital and build an experienced sales team to do this for you.
> Tech companies should offer more support and programs to women who might have to take a break from their career to deal with life events

Why discriminate men? They (we) also have families and have to deal with live events. Is this equality? I don't think so ...
One of the saddest parts of this story is that decades of confusion could have been ended by checking glucose levels in these children at the hospital. This is a basic standard of care but seems like Bihar is so underprovisioned that even this simple step doesn't happen.
Reddit bans r/altright over doxing
I think we can expect to see more questions like this on StackExchange in the near future: http://webmasters.stackexchange.com/questions/103405/install...
That benchmark is literally comparing Apples to Oranges. It's not even the same hardware.
A debugging guide for SELinux, or how to get anything done on a system with SELinux enabled:

1) Configure some software you need.

2) The software doesn't work.

3) Disable SELinux.

4) The software works.

5) F--- SELinux.

After a dozen occurrences of this pattern, your experience will have taught you to begin all deployments from step 5 ;)
RolePoint | (mostly) Python Software Engineers, Technical Support, Customer Success, Product Management | London, UK & New York, US | ONSITE | https://careers.rolepoint.com

You'll play a key role in building a platform that's changing how Technology, Finance, Media, Healthcare organisations hire and access talent - and that is already implemented in the three largest employers in the world.

==London==

Customer Success Engineer/Technical Support: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

Integration Engineers: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

Software Engineers: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

Product Manager: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

==New York==

Implementation Manager: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

Customer Success Manager: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

Client Implementation Manager: https://careers.rolepoint.com/#job/ahBzfnJvbGVwb2ludC1wcm9kc...

==RolePoint==

We're building a company that allows you to work on interesting projects in a stimulating, social environment. We work on flexible hours, offer unlimited vacation days, go out for weekly team activities and once a year bring the whole company together on an international gathering to reconnect outside of our work.

Check out more roles at https://careers.rolepoint.com
Although the last version I used seriously was VS2013, VS on its own is pretty mediocre. With ReSharper though, nothing beats it in my opinion.

On the other hand I've been using Eclipse and IntelliJ for the past year. Eclipse is not even worth talking about but even IntelliJ does not come close to vanilla VS in terms of usability. Again, my opinion.
> Jan 31 10:48:54 server audit[16067]: AVC avc: denied { name_connect } for pid=16067 comm="nginx" dest=8000 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:transproxy_port_t:s0 tclass=tcp_socket permissive=0

I think one reason security programs are sometime ineffective and end up being disabled is that they give problems to developers and sysadmin but no solutions.

I wish that rather than messages like "doesn't work - too bad", these programs would output a solution as well, such as "consider setting `httpd_can_network_connect` to `true` to allow it".

In some cases it might be tricky to propose a solution, in which case even a link to the doc would be useful like "check http://example.com/doc#456 for more information". That would go a long way towards making security software issues less of a pain for those who aren't expert in the topic.
I see SNES buttons...
This is non-persistent and after reboot this seboolean will be set back to 0. You must use -P flag to make it persistent.
My personal recommendation concerning OS development is xv6: https://pdos.csail.mit.edu/6.828/2016/xv6.html

Printout of important parts of the source code: https://pdos.csail.mit.edu/6.828/2016/xv6/xv6-rev9.pdf

Book: https://pdos.csail.mit.edu/6.828/2016/xv6/book-rev9.pdf

(both are linked in the menu at the top of the page)

Review by John Regehr: http://blog.regehr.org/archives/1114

(Github Repositories:

> https://github.com/mit-pdos/xv6-public

> https://github.com/mit-pdos/xv6-book).
using i3 win+F here
Obligatory XKCD-ish reference: https://www.youtube.com/watch?v=DHoDsZDMH_Y
This was inevitable. Shipping stuff with a third party is incredibly expensive. You're essentially paying for their logistics and channels. Amazon has more than enough money and data to build this themselves, and doing so will save them a significant amount over time
> groups that dox or participate in harassment don't deserve to be sheltered

Like HN users digging for info on Peter Thiel without being accredited as journalists and making public requests to harass the Trump administration?

As a rule of thumb, whenever you feel like justifying abuse, think really hard how it can be applied to you.