skysight-inc/HackerNews huggingface dataset:
This is a good reason for systems running untrusted code to disable module automatic loading. Almost nobody uses DCCP, and as a result, almost nobody looks at the DCCP code, writes bad userspace apps that trigger kernel bugs that get debugged, etc. We rarely see double-frees in the TCP or UDP implementations.

On my Debian kernel, CONFIG_IP_DCCP is set to "m" (in /boot/config-`uname -r`), which means that DCCP support is built as a module. The code isn't loaded until the first program tries to call socket(...IPPROTO_DCCP). At that point, the kernel will look at /proc/sys/kernel/modprobe and run that program, /sbin/modprobe by default, to load dccp.ko.

Automatic module loading is great when e.g. udev runs and detects what hardware you have, but it's probably not something you'd ever need once a system has completed boot. A very simple hardening measure for machines running untrusted unprivileged code is to echo /bin/false > /proc/sys/kernel/modprobe, late in the boot process (e.g., in /etc/rc.local).

The downside is that system administrator won't be able to run tools that require loading modules, of which iptables is probably the most notable one. A better option than /bin/false is a shell script that logs its arguments to syslog, e.g., `logger -p authpriv.info -- "Refused modprobe $*"`. The sysadmin can manually run modprobe on whatever module name got syslogged (or temporarily set /proc/sys/kernel/modprobe back to /sbin/modprobe). And you can alert on that syslog line to see if there's an attack in progress.

(Does anyone know if it's possible to disable module auto-loading for a tree/namespace of processes, e.g. a Docker container, but keep it working for the base system?)
Service Workers replacing AppCache: a sledgehammer to crack a nut (2016)
> About me: I’m a Legendary Recruiter at Just Digital People; a Red Hat alumnus; a CoderDojo mentor; a founder of Magikcraft.io; the producer of The JDP Internship — The World’s #1 Software Development Reality Show; the host of The Best Tech Podcast in the World; and a father. All inside a commitment to empowering Queensland’s Silicon Economy.

The Software industry needs more humility and less magicians.

I believe that strong engineering skills are worth far more than a Github profile, and good recruiters will know how to spot this.

If however you are looking to be hired as the new "Rockstar developer" of the latest trending startup running buzzword architecture, then a good public brand might be useful indeed.
Photos are like Steam games, maybe when you are in the hospital for a stay you can knock both out in one go, eh?
You might also enjoy http://badsamples.tumblr.com/
Hey, at least they're in jail.
what is the meaning of "The Black Technologist" ?
Planning for a better India
The difference is, you don't actually own your CC. You have physical possession yes, you can manage various aspects of it yes, you can even turn it off if you desire - but you don't own it. The bank does. The bank controls the card far more thoroughly than you do, including rights to create, replace, remotely destroy, cancel transactions, etc. You have the physical card and you can use it, but all of the permissions you have are rights granted to you by the true owner of the card - the bank.
> the social and political aspects of it are not.

No, they're at least somewhat solveable. It's true that in the long term, those with power will use it to seek more power. But that would seem to imply that the government cannot be peacefully replaced every few years through voting, or that checks and balances cannot keep authoritarianism in check, and that's at least worked for a while. We just need to re-strengthen those limits and develop new rules to account for the new technology.

Temporary cultural issues and a lack of understanding are surmountable problems. But you're correct that this social and political change is a lot more difficult than encryption software.
I think (hope?) people would realize that by now about Docker. But it is a non-trivial amount of protection against things like local file access.
Parts of this should be open to the public. The public has had to endure all of the construction and has lost a large amount of land-space that could have been used for the community. Instead, we have a completely private & inaccessible area. Sure, there are cafes, fitness centers, and working areas within the building but none of it is public and all at the expense of the people who live there.
Debugging Data Node Failures in Elasticsearch 5.1.1
FTFY: Time to move to Wire I guess.
> Plenty of courses have their general outline publicly available.

Yeah, something like educational videos we have since the VHS era, and even
before that, handbooks. It's still nothing like having a real teacher.
> prior to closing

This gave me a mini-heartattack...I guess I don't think about VCs and investments as much as the average reader of these things.
Nutanix Solutions for Oracle Applications and Databases
Matthew Roberts (not me) has been posting awesome drone flyover videos of the construction. The video is absolutely stunning and filmed in 4k. Highly recommended.

https://www.youtube.com/watch?v=gvkh5udzKds
I would highly recommend trying it yourself first. If you hire an agency you won't know how to guide them appropriately, and they'll end up applying tactics that may not work for your product/market.

I advise a few startups that are paying local marketing agencies thousands of dollars a month (much to my chagrin) to "take care of marketing" for them. None of them have seen any real traction as a result.

Granted, it's anecdotal, but I just can't see how a marketing agency can be effective unless given substantial guidance from the founder(s).
Can you share more details about what they're doing wrong?
Considering your size you should definitely checkout a trial of LastPass Teams: https://www.lastpass.com/teams

Full Disclosure: Work for LastPass
We will have a longer paper out soon with more details about the training process - but for now the code is there as well. There were a few small things in training that seem key to getting good results, we are analyzing those things and honing the "recipe" now.
That depends on the seismic activity of the exoplanet.
AMD Ryzen 7 Official Launch (LinusTechTips)
Correct but their devices can be confiscated
The diff from the patch:

- goto discard;
+ consume_skb(skb);
+ return 0;

One of the rare cases in the wild where a goto really was considered harmful! ;-)
It's interesting that the much-praised cargo system bumps up against problems when integrating with a larger project of which Rust is just one component. It's also interesting to me that a Mozilla employee views the Rust community as something external to Mozilla. That really speaks to Rust's growth as a language.
You should compare the MSP7's to some lower end analog Genelecs. I hope you get a change to try them. For sure MSP7 is not a bad product either.
Threes is great, and I bought it when I realized 2048 was based on it. And the makers of Threes were right! I have never gone back to 2048, but I still sometimes play Threes.
It was known, but not official until now. Also, preorders are now live.

[0] http://ir.amd.com/phoenix.zhtml?c=74093&p=irol-newsArticle&I...
This is no joke something I have considered - do you have a source on a pairing of "read speech" and "transcript" for this? I could process the movies myself but that seems... tedious...
This has nothing to do with peregrine falcons, which are falcons, not eagles and are not being used here. Golden eagles do not usually go over 300 km/hr and 320km/hr is the _maximum speed_ they will hit. Saying 'several hundred', for something that is almost always in the 200s, is disingenuous. If someone has $2.75, I would not say they have 'several dollars'. But that gets into a discussion about if two is considered part of several and that is completely pointless.

In any case, they most certainly cannot 'generally' avoid rotors. I have seen birds of prey - as well as smaller birds - attack and/or collide with UAVs. I have never seen a bird escape uninjured except with a small quadcopter with plastic blades. If someone was orchestrating a terrorist attack they would obviously need some sort of payload, and would not be flying a palm-sized plastic-blade quadcopter.

I think eagles are cool and they're clearly majestic creatures. But using them to catch a set of spinning blades in the sky - when a bullet works just fine - is really stupid.
Introducing Clojure
I loved Archie and it was still useful for a good year or two after the weww got going. Nice to finally learn who was behind it - back then people rarely shared photos of themselves since they took forever to download.
:-)

I'm not ignoring it, it's there, it shows the median life expectancy going from roughly 1 up to 6 years. Great.

The problem I have is two things: First that most of that gain is from prevention and detection, not treatment. I really want the treatment to get vastly better like it has in the entire rest of medicine (give or take). Believe it or not, a 6-fold increase in 40 years isn't really that great of an outcome.

Second is the interpretation of the split. Your interpretation is that there are "easy" and "hard" cancers to fight. I think it's actually that some are easy to detect or prevent. At base, they're all as horrible as each other left unchecked. But, we can see a melanoma much more easily than a blastoma. Therefore the graph will fool us in to thinking there is progress at attacking cancer.

To tie it back to the books I mentioned earlier, to me, they have a much better theory for why all this is happening than the prevailing theory of "cancer is broken DNA" and "cancer is really complicated". The idea that a) it's mitochondria and b) it's actually quite simple, to me, seems to fit the evidence much better.
Today's leading causes of DDoS attacks
Right, inetd has been how you do that for like 30 years now. Any program with stdin and stdout becomes a network service that way.
Compiler devnotes: Machine specs
When asked for a github profile or evidence of contributions I immediately apologize in advance on the application (I actually use bitbucket and have no public repos). I explain that every side project I have ever done outside of school is aimed to help the public user but also serves as a means for financial side income. Therefore, it is confidential and professional code that I will not share.

This creates 2 things as a byproduct:

- It keeps my standards high as it's a paid for product

- It forces me to actively maintain the projects and even provide a tiny bit of customer service

I really don't care if people have a problem with this. It's their problem at that point, not mine. I have no issue demonstrating anything or talking about it, but we're not going over lines of code in my stuff. I choose not to treat my code hosting platform as a social network.
Quoted from the article "Apple Park will also include a visitors center with an Apple Store and cafe open to the public"
Isn't that actually the opposite of "ironic", then?
I won't argue that they would fit right in with any government Greece has had since Kapodistrias. However there are a lot of good people in Greece right now trying to turn the situation around, the Olympic games of the past made things even harder for them, I would hate to see it land on their lap again... They seems to bring the worst out in people.
Can we please stop pretending to be surprised and shocked that this is a thing people in general do? It wasn't even funny anymore 10 years ago and nowadays is one of the most tired comments possible.
Too late to edit. Should be *not usually included.
Remind me how Counter-Strike got started again...

Between mods and Ludum Dare there is plenty of room to make a name for oneself in the open.
This sounds like pure NIMBY entitlement to me. "How DARE they build a corporate headquarters when they could have built a PARK!?"

Somehow I doubt the construction of this facility incurred any meaningful "expense" to any of "the people who live there"
There's a patchset called "Timgad" floating around to do exactly this.
Didn't know about this, thanks for the info!
From my understanding, LE does not revoke previously generated certificates when a new certificate is generated.

So you could have a workflow like:

1.) Party A generates the initial certificate and passes it offline securely to Party B

2.) Party B stores Party A's certificate in their java trust store

3.) Party A creates an HTTPS endpoint where they host a copy of their current certificate and their certificate for the next time period: https://www.PartyA.com/nextcert.crt

4.) Party B upon connecting for the first time validates that the certificate on the HTTPS site is the one provided in step 1

5.) Party B retrieves nextcert.crt from the URI in step 3 and places it in their java trust store

6.) 30 days before expiration Party A generates a new LE certificate and places it at the URI in step 3

7.) 7 days before expiration Party A sets their certificate to be the one at /nextcert.crt

Day 1 - Party A generates Cert1 and provides it to Party B, secures the domain with it (https://www.PartyA.com/) and places it at /nextcert.crt

Day 2 - Party B retrieves /nextcert.crt (it's still Cert1)

...

Day 60 - Party A generates Cert2, and places it at /nextcert.crt

Day 61 - Party B retrieves /nextcert.crt (it's Cert2), and places it in their store. Now they have two valid certs for Party A (Cert1 and Cert2).

...

Day 83 - Party A secures their domain (https://www.PartyA.com/) with Cert2 (/nextcert.crt has already been pointing to Cert2 since Day 60 and continues to do so)

Day 90 - Cert1 expires. Party B only has 1 valid cert in their store now.

...

Day 120 - Party A generates Cert3, and places it at /nextcert.crt

Day 122 - Party B retrieves /nextcert.crt (it's Cert3), and places it in their store. Now they have two valid certs for Party A (Cert2 and Cert3)

...

Day 143 - Party A secures their domain (https://www.PartyA.com/) with Cert3 (/nextcert.crt has already been pointing to Cert3 since Day 120 and continues to do so)

Day 150 - Cert 2 expires. Party B only has 1 valid cert in their store now.

Then just continue this process in a loop. This allows for the two properties requested. Party B is able to validate Party A (because an initial cert was provided offline), and that the next cert is actually from Party A (as the transfer of the new certificate is done via a secure channel using existing certificates)
Can you name said startup?
Show HN: Komodo IDE 10.2 released, new unit testing, Slack sharing, Yarn support
I do not disagree!
> Parts of this should be open to the public.

Who do you think financed this? Apple consumers and investors (I am one) that's who, not taxpayers. Why should it be open to the public? If it were a government project it would still be under construction for the next 10 years.

> The public has had to endure all of the construction and has lost a large amount of land-space that could have been used for the community.

Or, in reality, Apple bought the real-estate, and pumped hundreds of millions (actually I just looked it up, it is billions with a B) of dollars into the economy and put scores of construction, engineers, and high skilled people to work building it. This isn't soviet Russia comrade.
I'm worried that there are no user-facing hashes, it seems.
Another Biggest Security Breached That Was Overlooked by Internet
the biggest gotcha I've seen with C# multithreaded is the usage of the basic .NET Collections: Dictionary<K,V> and List<V>

they will mostly work (like multiple threads reading, or 1 writes while another retrieves), except when two threads try to simultaneously write, or when 1 writes while another enumerates.

When that happens, all bets are off, and you will silently get obtuse errors such as null return values or enumerating past the end of the collection, or a corrupt collection that throws exceptions from other (seemingly) random and unrelated areas.

I believe the new concurrent collections take care of this, but it is still so easy for beginners to shoot themselves with async programming. very much in stark contrast to how dev-friendly the rest of the CLR is.
I used to agree with that, but competition for employment has gotten so cut-throat that when you spend time not being productive, not learning, not building your network, not adding to your resume, you can be assured that your competition (people wanting your job or the job you also want) ARE doing these things. Thanks to AI and robotics, we can expect things to get more and more cut-throat as time goes on. When you're out of work and a few months from insolvency, you're not looking back and saying "Man I wish I spent more time slacking off with my friends and family".
Yes, she uses this daily. For example, chrome is a shortcut that just runs a docker container, she does video conferencing using skype, also running inside a container - video, audio & all. She's one of the few that uses a Linux only laptop while the majority in the company used Macbooks.
Why not quote Steve Jobs? He said it much better.

"Great things in business are never done by one person. They're done by a team of people." Steve Jobs
I'm the product lead for Komodo IDE and the author of the new unit testing feature, happy to answer any questions.
No, you're trying to claim that they are not upholding those ideals by citing the actions against an individual whose occupation is not guided by these ideals, and in the process you want to discredit Universities ENTIRELY as a result. It's absurd.

LOL @ Socrates being a professional troll. I feel like I'm being trolled when I read stuff like this...

So you were citing the treatment of someone whom "who had never watched until yesterday" in support of your claim about Universities and open acceptance of ideas. That's a pretty good summation of how ideologically driven your arguments are.

It sure didn't stop him from trying to hide behind "being a child abuse victim" to excuse his behavior. But that just makes him a hypocrite, what makes him a troll is that whatever "valid points" he has serves the interest of provocation, not discussion.
To get to work, you might walk 30 minutes to a train station, wait 10 minutes, and ride a packed train for another 30 minutes. Many (grudgingly) find it acceptable to do this 2x/day for commuting, but aren't keen to do it for a quick grocery run.

It's easier for public transit to do an okay job with "trunk" routes from the suburbs to downtown at commute time, than to do a passable job with connecting neighborhoods to their nearest grocery stores at all the times people might want to go shopping.
I can't wait for Rust to gain more traction, and be usable on the web. IMHO it's a much more pleasant language to work with.
If the public wants to use land for a community park, then they should buy some land and build a park. It's not Apple's responsibility to fund it for them. Cities all over the country manage to build and maintain parks on their own. I'm sure Cupertino gets, or at least could get, a lot of tax revenue from Apple.
Yes, but there are different fabrics for Peus. What I like about them is that they are easy and quick to wear. They have somewhat a barefoot feeling. And they are wide. So many shoes are too narrow for me. I don't know why shoemakers make the shoes so that they get more narrow on the toe end. If I look my feet, they are wider on toe end.
That's really good advice, thank you.
This is a double-free vulnerability. In userspace, this would basically be

void *x = malloc(16);
free(x);
...
free(x);

When malloc makes the allocation, it actually allocates a bit more than 16 bytes so it knows how much to free. Usually what it'll do is store a structure right before the pointer it returns; for instance, it might allocate 24 bytes, use the first 8 bytes to store the number 24, and then return the rest of that allocation. Then, when free is called, it subtracts 8 from what it was given, and frees that many bytes. (More complicated malloc implementations will have more complicated structures, possibly including pointers to other, shared structures.)

If you call free a second time on the same pointer, a lot of things could happen. In particular, if there was another call to malloc() in between, it might reuse that same location, and you might free that. Or if some other sequence of allocations happened, there might be a completely nonsensical number stored at x-8.

If the second call "frees" data that's still in use, two parts of the program will be writing to the same memory. Maybe one thing is storing the return value of a call, and the other thing is storing the current UID. So when the first thing writes 0, now you're UID 0.

Alternatively, if the second call frees something nonsensical, you might "free" memory that was never the allocator's in the first place - and cause the next call to malloc() to return a pointer to something important elsewhere in memory, perhaps even the program's stack frame. If the program then reads attacker-controlled data into that newly-allocated memory, the attacker takes over the program's control flow.

DCCP is a protocol that is kind of like UDP, in that it's message-oriented, but kind of like TCP, in that it's reliable and implements congestion control. It's not very common, and uncommon networking protocols have been a historic good source of vulnerabilities in the Linux kernel.
The Velodrome is not still in use. There is an outdoor concrete Velodrome in East Point which is heavily used, but it was not an Olympic venue.
... and are perfectly happy doing it. Heck, I even use an "ugly black box" as my laptop (an older Lenovo thinkpad) :)
Back in the day (we're talking 80s) I wrote similar postscript (I remember also some sort of Douglas Hofstadter-esque strange attractor?). The argument for doing this was entirely practical: The Apple LaserWriter in the computer lab had a 68000 processor, which was a darn lot faster than anything else in the room, plus the only way to do high-dpi raster output.
Further, why a political solution won't work is right there: this is not an issue most people face or will care about.

Even if you manage to stop customs agents from demanding access, some other branch of government will do it, even if it's outright illegal for them to do so. Technical solutions are the only ones that will make a dent.
Though of course it can't /hurt/ to have a kick-ass Github profile, but I also doubt we'd be at a stage where it'd be required to get a job in the industry easily.
I don't have anything of substance to say here, but I just want to mention how delightful the phrasing of your last sentence is.
Annnd they used the whitest photo of him they could find.
Is that billionaire the US Government? Because if so, I'm with you on that point. But seriously, nothing is stopping you from entering into the vast wilderness and surviving on your own.
They're supposedly making a film about Richard Jewell starring Jonah Hill. I'm not sure who else is attached. It might be in development hell at this point as the film was first announced several years ago.
In other news, smoking is bad for your lungs!
Introducing Google Sheets Add-On for MonkeyLearn
Time to move to [new flavour of the month messaging app]
AMD Ryzen pricing: $500 for 8-core 1800X CPU
Wait there's 17 megawatts of solar on this thing? Would love to hear more about how this integrated into the facility. That is an immense PV array.