skysight-inc/HackerNews huggingface dataset:
The "Center for Internet Security" Benchmarks [0] -- such as the one for Ubuntu 16.04 (PDF) [1] -- address your question.

The DISA IASE [2] publishes hundreds of "Security Technical Implementation Guides" (STIGs) for various operating systems (including several Linux distributions [3]), software applications, networking devices, and so on.

The OpenSCAP [4] Security Guides [5] are also a good reference. They are primarily aimed at compliance w/ security requirements (C2S, PCI-DSS, USGCB) -- for example, the "U.S. Government Commercial Cloud Services (C2S)" [6].

I don't 100% fully implement any of these, but I have a lot of RHEL and CentOS boxes publicly accessible on the Internet and they don't become accessible until they've had the majority of these recommendations implemented.

P.S. Look around. There are tons of shell scripts, Ansible roles, Puppet modules, etc., that will take care of 90% of this for you. There's no excuse for having public-facing machines that aren't locked down.

[0]: https://benchmarks.cisecurity.org/downloads/benchmarks/

[1]: https://benchmarks.cisecurity.org/tools2/linux/cis_ubuntu_li...

[2]: http://iase.disa.mil/Pages/index.aspx

[3]: http://iase.disa.mil/stigs/os/unix-linux/Pages/index.aspx

[4]: https://github.com/OpenSCAP/scap-security-guide/

[5]: https://www.open-scap.org/security-policies/choosing-policy/

[6]: http://static.open-scap.org/ssg-guides/ssg-rhel7-guide-C2S.h...
> for example, 2048 and Flappy Bird both had open source versions, possibly unofficial

I know you're using them just as an example in your comment and this might lure people away from your points, but the "original" 2048 (the one we all fell in love with) really is open source. In fact, it got to the front of HN with almost 3k votes, and the author left multiple comments in that thread.

So yeah, my point is, the "original" 2048 is not only open source, but HN definitely had some sort of an impact on it becoming a thing.

https://news.ycombinator.com/item?id=7373566
I'm not familiar with either the quote or the person quoted, but I'm guessing it's an assertion that people who believe

> that everyone should play by the same rules and be judged by the same standards

don't buy into affirmative action, and are labeled as racists by people who do.
“How my mind came back to life – and no one knew”
I also find the step count to be mostly useless, but the heart rate tracker has been gold. I used to have a Polar HR monitor (that would strap across your chest) and this is just so much better. And being able to track my heart rate has made it so that I will push myself a bit harder because I know where my heart rate is at.
You're making that assuming from a US viewpoint. In Germany every kid in school is on WhatsApp, as my teacher friends tell me. The same is probably valid for other markets.
> Why the US cannot figure out how to streamline legal immigration has been a failure of the US government for many years.

The issue is not that the US cannot figure out how to.

The issue is that the US (that is, a sufficient set of those people in positions to make decisions on immigration law) do not want to improve the situation with legal immigration.
I LOVE my frist-gen Moto X Had it 3 years and don't want to give it up.
I can sorta understand how he got there. Historically, making a car company is very, very hard. It's a tough industry to crack into. So when you see a startup car company with a hugely inflated stock that has a (based on historical data) very low chance of success, it makes a lot of sense to bet against it. But as it succeeds, you have to keep doubling down on the idea that it can't possibly deliver on it's promises and will fall on it's face eventually. At some point he slipped from making a reasonable bet to frothing at the mouth a bit.
> I agree to a certain extent that seeing examples of work reduces recruiting risk

Not really. It doesn't tell me how well they play with others, or how well they work to someone else's requirements. Finding obnoxious pricks who know how to write code but stink up the workplace with a terrible attitude isn't particularly hard.
Is it just me reading too much financial news or does "beats estimates" sound like it was better than estimates?

Loss was 69 cents vs 53 cents expected.

Revenues beat estimates, though.
What if I'm a US citizen traveling to Canada, and their border patrol is similarly vigilant? I could be denied entry to Canada.

Sadly this policy is being picked up in many other countries :(
The Moon is about 2% of Earth's mass, not 27%.
Sounds like you could benefit from moving to some state like Oregon or Colorado (if you're from the States)...
The number (as mentioned) is one huge difference. Not necessarily for purposes of exploration, but as something else to consider for part of the Drake equation. It's also another avenue of detection because it's such a small star, that means we can use different methods than just detecting the "wobble" to figure out whether there are planets around the star.
What if the border agent takes your phone outside? It would go something like:

> Tell me your password
> OK, not sit here while I go out to unlock your phone.
For anybody curious/interested in F# or any programmer who is interested in safe (functional) programming, check this out:

https://fsharpforfunandprofit.com/posts/is-your-language-unr...

I might be slightly biased but in my opinion it's one of the best programming articles I have ever read.
Show HN: Personal IoT scanner and search engine
That's fine for US citizens entering the US, but any 'travel mode' needs to work for the outbound trip too. If the country you're visiting has adopted a US-style border stance, then you're in no better a position than a non-US citizen visiting the US: the border forces of that other country can detain you until travel mode expires if they want. It seems like "They can't hold me for days while they wait for the mode to expire" only works for citizens returning to their own countries.
It's possibly related to the fact his fund is bearish on the stock market, which as been a losing proposition for the past 8 years. Maybe he is short Tesla. Tesla as well as the bull market keeps defying the odds. Optimism pays.
If I really think about it, then I can think of details. Or I go through my email archive. Then I write what I did down as a form of a history or resume for myself. I did projects x, y & z and so on.

So: Write down your history and summarize before your interview to keep it fresh in your mind.
It's not that improbable. They've found meteorites on Earth that have been identified as having come from Mars based on their mineral contents.
Right. I was assuming that was reasonably well understood.
>The fourth-quarter loss, excluding some items, was narrower than the $1.14 a share average estimate

Straight from the article.
You are assuming that this mass will be launched using today's chemically powered rockets. But using nuclear propelled rockets will bring down the launch costs by orders of magnitude.
Might have shorted Tesla
If every big corporation would be like Tesla, the world would be different. So yeah, just the fact that somebody loves it doesn't make it bad in itself.
Especially with SpaceX. He's pushing his engineers hard to get some pretty cool stuff done, and hopefully humanity benefits from it in the long run.
Do people even overclock anymore? I think the mass overclock gains of the 2500k days are probably behind us as even intel is getting close to its top end due to its poorly performing architectures. I thought the whole idea behind turbo is that its an official overclock and once the chip gets too hot it moves back to 'stock' speeds, then back up, etc. All you need to worry about is keeping the stock cooler or not.
France is hardly the only colonizer to experience the problems of perverse incentives: https://en.wikipedia.org/wiki/Cobra_effect
numpy is pretty much a given for any scientific or numeric python code unless you want to start writing things in Cython.
That is because your different threads are not using the same `Enumerator`. I'm guessing your threads look something like this, based on your mention of `foreach`:

// In multiple threads:
foreach(element in collection) { ... }

`collection` is not an `Enumerator` but rather an `Enumerable`. The `foreach` statement calls `collection.GetEnumerator`, so each thread gets its own iterator. You would only see inconsistencies if another thread modified the collection during iteration.

Try this instead, and you'll guaranteed see issues:

// Before:
IEnumerator enumerator = collection.getEnumerator();

// In multiple threads:
while(enumerator.Move()) {
var element = enumerator.Current;
}
I found my cat outside in the dead of winter, she came inside voluntarily, I got her fixed, and I keep her fed. I nursed her back to health when something bit open her leg while she was outside. She goes out pretty much every day and is waiting for me at the door when I get home. I mean, the alternative is the cat being a stray or being put down in a shelter, are either of those better?

I don't have to go home every day to my wife, but I still choose to. I don't think that's "Stockholm Syndrome", just a good situation that I want to continue.
Kaby Lake and Skylake are indistinguishable in terms of IPC.

Kaby Lake only brought GPU & video decoding improvements to the table, that's it. CPU performance is otherwise identical to Skylake.
Didn't Moxie come up with something like this a while back? It was a bit of a non-starter since you had to install a custom version of Android in order to get it work
> I hate Trump's immigration policies but he repeatedly promised to streamline the immigration process on the campaign trail

Everyone promises that. Sometimes, people even present coherent policies (Trump has not) which make that promise concrete. Those concrete policies don't tend to do much (which is the fault of the proposer) to actually streamline the process, or they tend not to get passed (which may be the fault of other legislative actors).

Promising generalities is very far from delivering an actual actionable plan.
You can look up Project Daedalus's report online. They considered all these issues in great detail and came up with an affirmative answer.
Your hope is becoming a reality, at least in my experience working at a semiconductor company (public, mid-sized).

The IoT craze has forced a lot of software on hardware companies: everything from ZigBee, Thread, and Bluetooth stacks to RTOS's to manage all of those stacks, to IDEs that are actually usable.

The companies embracing software as a vital part of their products are doing well, and will continue to do well at the expense of the companies who treat software as an after thought.
Apropos that you're saying that on a social media platform run by a Venture Capital company out of Mountain View but your statement is a pretty damn cynical view of it. California may the epicenter of tech related VC but it's also the startup and tech company capital for plenty of other reasons besides VC such as the amazing local culture, awesome weather, friendly legal environment (e.g. CA's strong anti-SLAPP laws), experienced local hiring pool, state & municipal tax benefits, etc.
The idea is that it would be common, like not carrying large amounts of cash. There are good reasons for it other than limiting border searches.

Some people have suggested making travel mode invisible, but it might be better if it showed the start and end dates. Customs will ask anyway, but if the time period covers the entire trip, there's less reason to search the account.
The best way is to make sure it's correct to every test case you can find. I.e. include the test s you point to there along with the tests from libiberty etc. That'll at least let you say that's it's as provably correct as the others. The next advantage is going to be that Rust helps prevent certain classes of bugs (in this case memory issues) as long as you're not doing unsafe{} things. And while that rests on Rust's ability to prove that it's a step up from not having that. The handwritten parser doesn't mean much in the advent of testing against a wide array of inputs, if it was parsing incorrectly then it's not going to pass the tests. Sure there might be an edge case where it just recurses but that's also the case of libcxxabi and the others. The code being longer also means basically nothing. It just means that either the code is more verbose or could be shortened somehow it says nothing about it's correctness or viability.
Idempotency keys are a simple enough concept, that I think that they're mostly okay as is (we could have done a few smarter things on the server side implementation, but luckily that can still be fixed).

There are certainly a few things around HTTP semantics that Stripe got wrong. e.g. Most updates should probably be `PATCH` instead of `POST`, but it's probably not worth changing at this point.
I think you could easily justify something like this as a "travel mode" not just for border security, but "in case your phone is lost/stolen while traveling". Make it so you have full or enhanced access to very recent stuff (photos, status updates, etc.) from the trip itself, and don't have access to as much from before the trip. Help defeat localization settings in the place where you're traveling, and get tourist/visitor-specific ads instead of local ads. Value for the user (usability and safety) as well as for the social media network and advertisers.

The other form of this which would make sense: worksafe mode or public mode. If you're logging into your facebook/twitter account from a public computer, perhaps it doesn't have as full and unlimited access, and doesn't have access to non-reversible account actions, and strongly logs out. If you're logging in from a place defined as "work", it doesn't have notifications, certain groups, etc. (the "giving a meeting presentation on your laptop when a racy notification from spouse pops up" problem).
Our border patrol isn't "similarly vigilant". That's a meme being spread by a very dedicated account on HN, probably to seed the grounds for a lot of "whataboutism".
Note that in VS2017, many of the Visual F# Power Tools features are in-box and use the same UI that C# and Visual Basic do. The folks behind the VFPT have been porting a lot of that code over and making many improvements along the way. There will be even more features and improvements in future VS 2017 updates, as well!
Obviously currently swifts are not worth anything so you will not be able to hire me using this "currency",but I dont see why this currency with few changes could not have a real value.
Is an animal that is often misunderstood.
they did beat estimates ie. they did better than expected.
stock is up ±3% after market; all time high.
go tsla go.
Huh. I think that's a poor design choice on the part of the Windows folks, but they probably know things I don't.
That's overly simplistic. Other influences include the geo-political power play and prestige, the marketing opportunities for global brands, athlete and sport fans wishes, etc.
Funding is not the only issue. Their planning was also a disaster. The Space Shuttle wasted so much money with very little return. If NASA continued with Project Orion and NERVA a Mars colony would have been well established by now.
> The market is very big and it's a basic need that most people have.

> With Instacart, the value add is such a no brainer.

> All these are obvious next steps for Instacart, which wisely sees Grocery stores as a relic of the past ready to be replaced by something better.

> Instacart has found a better way.

> It all arrives as if by magic.

I should have cited my evidence, but that seems excessively positive to me. I wasn't trying to be inflammatory, I thought he came across as someone trying too hard to promote the company.

I'll try to be less accusatory in the future.
Your device can be confiscated for much longer, of course. You could take that time difference and hopefully permanently wipe account data before the lock expired, but that has the drawback that it's terribly inconvenient for you and causes the government no great concern at all, so it might simply become routine procedure.
> fleeing the earth is not one of them

Why not? If a big asteroid is going to hit earth (for example), fleeing is a pretty reasonable response. It's also a reasonable defense against technobiological hazards.
EDIT: My math was totally wrong. 10 trillion dollars, 0.1x world GDP. (Still a lot of money though) Leaving the old text below so the replies make sense.

---

To move 6,000,000 megatons of fuel into low earth orbit would take 111,111 Falcon Heavy launches, at a total cost of $10,000,000,000,000 dollars. (10 quadrillion dollars, 93x world GDP)

Something that takes the total global economic output of the planet a century just to lift the fuel into orbit doesn't read as plausible in the next 50 years to me.
Have you spoken to your neighbor about this?
Then the border guards send you home. What mission has been accomplished?
> Isn't becoming part of the target population essentially the same thing as signing up?

Its a lot more predictable than "requests", especially if the target population is something like adult citizens and legal permanent residents.

> If the cost remained exactly the same, then either you spread similar benefits across a similar group size, or you spread greatly reduced benefits over a much larger group of people, to the point where it's no longer a living "wage".

Yes, the cost neutral version would be reduced maximum benefit in the short term (though, again, you make the mistake of assuming that the full cost is just benefits, and ignore changes in administrative overhead), while the budget-neutral-by-increased-revenue versions might retain similar maximum benefits.
They could. CBP can deny any non-citizen entry for just about any reason. They could just start denying all non-citizens all the time, so why don't they? Because it would hurt business, tourism and other countries would retaliate and refuse US citizens entry. That is the power we have. The time to start using Travel Mode is now, before demands for passwords becomes stand procedure at the border.
> I think it's crazy that people walk around with phones that have access to years of email communications

The one anti-pattern on every website is using your primary email address for both notifications and password resets. There is zero reason why you'd ever want an email address you have authed on your phone to handle Facebook/Twitter password resets, but the only way to avoid this is if you're willing to give up receiving whatever notifications you'd normally want to receive via email on your phone.
I'm at the stage in life where that stability is appealing. But large boring companies are synonymous with awful code bases, decades of accruing technical debt and teams of onshored developers (partly because of requirements like CS degrees). When I'm job hunting a rank "not wanting to shoot myself in the head every day" higher than financial stability.
I agree. Eisenhower had a similar speech ready had the D-Day invasion failed. It's just part of leading any large project that could fail spectacularly.
So I was reading this from marketwatch:

"Adjusted loss of 69 cents a share, worse than expected."

"Analysts expect an adjusted fourth-quarter loss of 53 cents a share"

Now I don't know what to believe.

Edit: I guess it depends on who's doing the estimating. The linked article says "The fourth-quarter loss, excluding some items, was narrower than the $1.14 a share average estimate among analysts surveyed by Bloomberg."
Original games were organised by the city states and were primarily a means of showing off their best potential soldiers, though it served several other reasons as well, like most things it got complex. Fun fact, even though there was meant to be an Olympic truce, it was a much favored time to backstab your neighbour since lots of cities didn't expect it and as usual the victors wrote the books.
There is also the issues with the EMBED tag, but plug-ins are dying.
Project Daedalus seems more appropriate for interstellar travel:

https://en.wikipedia.org/wiki/Project_Daedalus
Came in to see fatfucks bashing the article. Was not disappointed.
Are createspace books still of a noticeably lesser quality printing than non-print-on-demand books? I saw a few a while (a few years?) ago, and the quality offended me, so I wrote off createspace. I'd be interested to learn that's not the case anymore.

(Just to preemptively clarify: The bad quality I mentioned was most noticeable when compared to a non-POD book. On its own, it looks OK-ish and you might not think anything of it, but when you look at it next to another book you can tell.)

The book itself seems pretty neat though! I'm a PDFs for tech books kind of guy, personally.
If AMD makes a comeback, how did they do it? Not enough competition and Intel got complacent or what? Or did they just reach the limits and it's not possible anymore to keep the lead and prevent AMD from catching up?
Yes, for that at least, I agree completely. I'm not sure how much the idea would do for border crossing, but just as a general mitigation of risk, it's extremely sensible.
There actually are other non-nefarious reasons. When employees exercise they become shareholders, and certain securities law regulations come into effect. A young startup might want to defer those until they are big enough to handle the administrative overhead.

Also, while it's a tremendous tax benefit and pretty much a no-brainer to early employees, once the strike price constitutes an investment of tens of thousands of dollars, all of which could be lost, it's not necessarily a popular or prudent choice for later employees. So then it becomes this thing that only the early employees get, which perhaps might lead to some resentment and morale issues. Just some issues for companies to consider.

Good overview of the pros and cons here: http://www.startupcompanylawyer.com/2009/01/11/should-a-comp...
This post has been upvoted by PR agents paid to do so. It contains no relevant content to the article and does not substantiate its claim that the article is false in any way and in fact doesn't even bother to enumerate the false claims because dgut "Doesn't have time"

So way off the standard of hacker news yet the top comment of plenty. Down the hell out of it, it's clear.
@ConceptJunkie

> The Moon is about 2% of Earth's mass, not 27%.

2% of mass, yes, but also 27% of the diameter.

You are both right.
That being said, even IE9+ can deal with XHTML now, but the entire document must confirm to XML rules and this might not be always acceptable.
I doubt that border agents will want to walk every phone outside and then come back in. It is security through inconvenience.

But I guess there could be an option to extend the range of the original airport geofence.
However, many prominent Open Source projects that don't use GitHub have mirrors on GitHub, and as long as you star them, they appear in your GitHub profile if you contributed to them using an email that is registered to your GitHub account.

To give examples:

- Git https://github.com/git/git,

- Linux https://github.com/torvalds/linux,

- LibreOffice https://github.com/LibreOffice/core,

- Firefox https://github.com/mozilla/gecko-dev
Minifying yes but why bundling?

https://hpbn.co/http2/#request-and-response-multiplexing

HTTP2 takes care of loading files via multiplexing, and ES6 modules take care of loading JS in proper order, no need to bundle AFAIU.
What are your favorite software metaphors in 2017?
That's still soo far away though.
i think so ..I think it's hubris ..I stopped listening to most 'experts' long ago..
Nice idea. But it's treating the symptom rather than the root problem.
Working 4 days a week. I wouldn't mind working 9 hours a day if that lets me have Fridays to myself.